Function at 0x41c110
Capabilities:
Authenticate hmac
Check if file exists
Contain obfuscated stackstrings
Create thread
Delete registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Resume thread
Set registry value
Suspend thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e5ec6
mov eax, dword fs:[0]
push eax
mov eax, 0x1638
call fcn.00474d50
mov eax, dword [0x520628]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
mov ecx, dword [0x52adec]
mov dword [ebp - 0x1540], edi
mov dword [ebp - 0x1578], eax
call fcn.0044a600
mov ecx, dword [0x52adf8]
mov esi, eax
call fcn.0044a600
test esi, esi
je 0x4203ea
test eax, eax
je 0x4203ea
cmp esi, eax
je 0x41c1aa
mov esi, edi
call fcn.0042b6e0
lea esp, [ebp - 0x1654]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046e186
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x52adf0]
call fcn.0044a600
mov ecx, dword [0x52adfc]
mov esi, eax
call fcn.0044a600
test esi, esi
je 0x41c17f
test eax, eax
je 0x41c17f
cmp esi, 2
jb 0x41c17f
cmp eax, 2
jb 0x41c17f
cmp esi, eax
jne 0x41c17f
mov ecx, dword [0x52adf4]
call fcn.0044a600
mov ecx, dword [0x52ae00]
mov esi, eax
call fcn.0044a600
test esi, esi
je 0x41c17f
test eax, eax
je 0x41c17f
cmp esi, eax
jne 0x41c17f
mov edx, 0x72
mov eax, edx
mov word [ebp - 0x246], dx
mov word [ebp - 0x244], ax
mov word [ebp - 0x240], dx
xor eax, eax
mov ecx, 0x45
mov word [ebp - 0x248], cx
mov word [ebp - 0x23e], ax
mov ecx, 0x6f
mov word [ebp - 0x242], cx
mov ecx, 0x4f
mov word [ebp - 0x390], cx
mov edx, 0x70
mov word [ebp - 0x38e], dx
mov eax, 0x65
mov word [ebp - 0x38c], ax
mov ecx, 0x72
mov word [ebp - 0x38a], cx
mov edx, 0x61
mov word [ebp - 0x388], dx
mov eax, 0x74
mov word [ebp - 0x386], ax
mov ecx, 0x69
mov word [ebp - 0x384], cx
mov edx, 0x6e
mov word [ebp - 0x382], dx
mov ebx, 0x73
mov eax, 0x67
mov word [ebp - 0x380], ax
mov ecx, 0x20
mov word [ebp - 0x37e], cx
mov edx, ebx
mov word [ebp - 0x37c], dx
mov eax, 0x79
mov word [ebp - 0x37a], ax
mov ecx, ebx
mov word [ebp - 0x378], cx
mov edx, 0x74
mov word [ebp - 0x376], dx
mov eax, 0x65
mov word [ebp - 0x374], ax
mov ecx, 0x6d
mov word [ebp - 0x372], cx
mov edx, 0x20
mov word [ebp - 0x370], dx
mov eax, 0x61
mov ecx, 0x62
mov edx, 0x6e
mov word [ebp - 0x36e], ax
mov word [ebp - 0x36c], cx
mov word [ebp - 0x36a], dx
mov eax, 0x6f
mov ecx, 0x72
mov edx, 0x6d
mov word [ebp - 0x368], ax
mov word [ebp - 0x366], cx
mov word [ebp - 0x364], dx
mov eax, 0x61
mov ecx, 0x6c
xor edx, edx
mov word [ebp - 0x362], ax
mov word [ebp - 0x360], cx
mov word [ebp - 0x35e], dx
call fcn.0041b580
test eax, eax
je 0x41c420
push 0xffffffffffffffff
push 0x50f493
push 0x50f493
push 0x50f493
push 0x3a
lea eax, [ebp - 0x1c]
push 0x4d
push eax
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], 0
call fcn.004097a0
add esp, 0x1c
push 0x600
call fcn.004509b2
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x41c40a
lea ecx, [ebp - 0x390]
push ecx
mov edx, esi
call fcn.00405390
add esp, 4
lea edx, [ebp - 0x248]
push edx
lea edx, [esi + 0x400]
call fcn.004053b0
add esp, 4
push 0
push 0
push esi
push 0x4011e0
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
push 0x40d450
push 0
push 0
call edi
jmp 0x41c186
mov eax, 0x48
mov word [ebp - 0x464], ax
mov ecx, 0x41
mov word [ebp - 0x462], cx
mov eax, 0x44
mov word [ebp - 0x45e], ax
mov edx, 0x52
mov word [ebp - 0x460], dx
mov ecx, 0x57
mov word [ebp - 0x45c], cx
mov eax, 0x52
mov word [ebp - 0x458], ax
mov edx, 0x41
mov word [ebp - 0x45a], dx
mov ecx, 0x45
mov word [ebp - 0x456], cx
mov word [ebp - 0x450], cx
mov eax, 0x44
mov word [ebp - 0x452], ax
mov edx, 0x5c
mov word [ebp - 0x454], dx
mov eax, 0x43
mov word [ebp - 0x44c], ax
mov ecx, 0x52
mov word [ebp - 0x44a], cx
mov edx, 0x53
mov word [ebp - 0x44e], dx
mov eax, 0x50
mov word [ebp - 0x446], ax
mov ecx, 0x54
mov word [ebp - 0x444], cx
mov edx, 0x49
mov word [ebp - 0x448], dx
mov word [ebp - 0x442], dx
mov eax, 0x4f
mov word [ebp - 0x440], ax
mov ecx, 0x4e
mov word [ebp - 0x43e], cx
mov edx, 0x5c
mov word [ebp - 0x43c], dx
mov eax, 0x53
mov word [ebp - 0x43a], ax
mov ecx, 0x79
mov word [ebp - 0x438], cx
mov edx, ebx
mov word [ebp - 0x436], dx
mov eax, 0x74
mov word [ebp - 0x434], ax
mov ecx, 0x65
mov word [ebp - 0x432], cx
xor eax, eax
mov edx, 0x6d
mov word [ebp - 0x430], dx
mov word [ebp - 0x42e], ax
mov ecx, 0x48
mov word [ebp - 0x3c4], cx
mov edx, 0x41
mov word [ebp - 0x3c2], dx
mov eax, 0x52
mov ecx, 0x44
mov word [ebp - 0x3c0], ax
mov word [ebp - 0x3be], cx
mov edx, 0x57
mov word [ebp - 0x3bc], dx
mov eax, 0x41
mov ecx, 0x52
mov word [ebp - 0x3ba], ax
mov word [ebp - 0x3b8], cx
mov edx, 0x45
mov eax, 0x5c
mov ecx, 0x41
mov word [ebp - 0x3b6], dx
mov edx, 0x43
mov word [ebp - 0x3b4], ax
mov word [ebp - 0x3b2], cx
mov eax, 0x50
mov ecx, 0x49
mov word [ebp - 0x3b0], dx
mov word [ebp - 0x3ae], ax
mov word [ebp - 0x3ac], cx
mov edx, 0x5c
mov word [ebp - 0x3aa], dx
mov eax, 0x44
mov edx, eax
mov word [ebp - 0x3a8], ax
mov word [ebp - 0x3a4], dx
mov ecx, 0x53
mov word [ebp - 0x3a6], cx
mov eax, 0x54
mov word [ebp - 0x3a2], ax
mov ecx, 0x5c
mov word [ebp - 0x3a0], cx
mov edx, 0x56
mov word [ebp - 0x39e], dx
mov eax, 0x42
mov word [ebp - 0x39c], ax
mov ecx, 0x4f
mov word [ebp - 0x39a], cx
mov eax, 0x5f
mov ecx, eax
mov word [ebp - 0x396], ax
mov word [ebp - 0x394], cx
mov edx, 0x58
mov word [ebp - 0x398], dx
xor edx, edx
mov word [ebp - 0x392], dx
mov eax, 0x48
mov word [ebp - 0x35c], ax
mov ecx, 0x41
mov word [ebp - 0x35a], cx
mov edx, 0x52
mov word [ebp - 0x358], dx
mov eax, 0x44
mov word [ebp - 0x356], ax
mov ecx, 0x57
mov word [ebp - 0x354], cx
mov edx, 0x41
mov word [ebp - 0x352], dx
mov eax, 0x52
mov word [ebp - 0x350], ax
mov ecx, 0x45
mov word [ebp - 0x34e], cx
mov edx, 0x5c
mov word [ebp - 0x34c], dx
mov eax, 0x41
mov word [ebp - 0x34a], ax
mov ecx, 0x43
mov word [ebp - 0x348], cx
mov edx, 0x50
mov word [ebp - 0x346], dx
mov eax, 0x49
mov word [ebp - 0x344], ax
mov ecx, 0x5c
mov word [ebp - 0x342], cx
mov edx, 0x44
mov ecx, edx
mov word [ebp - 0x340], dx
mov eax, 0x53
mov word [ebp - 0x33e], ax
xor eax, eax
mov edx, 0x54
mov word [ebp - 0x33c], cx
mov word [ebp - 0x33a], dx
mov word [ebp - 0x338], ax
mov ecx, 0x53
mov edx, 0x79
mov eax, ebx
mov word [ebp - 0x2e4], cx
mov word [ebp - 0x2e2], dx
mov word [ebp - 0x2e0], ax
mov ecx, 0x74
mov edx, 0x65
mov eax, 0x6d
mov word [ebp - 0x2de], cx
mov word [ebp - 0x2dc], dx
mov word [ebp - 0x2da], ax
mov ecx, 0x42
mov edx, 0x69
mov eax, 0x6f
mov word [ebp - 0x2d8], cx
mov word [ebp - 0x2d6], dx
mov word [ebp - 0x2d4], ax
mov ecx, ebx
mov word [ebp - 0x2d2], cx
mov edx, 0x56
mov word [ebp - 0x2d0], dx
mov eax, 0x65
mov word [ebp - 0x2ce], ax
mov ecx, 0x72
mov word [ebp - 0x2cc], cx
mov edx, ebx
mov word [ebp - 0x2ca], dx
mov eax, 0x69
mov word [ebp - 0x2c8], ax
xor eax, eax
mov word [ebp - 0x2c2], ax
mov ecx, 0x6f
mov word [ebp - 0x2c6], cx
mov edx, 0x6e
mov word [ebp - 0x2c4], dx
mov ecx, 0x56
mov word [ebp - 0x2c0], cx
mov edx, 0x69
mov word [ebp - 0x2be], dx
mov eax, 0x64
mov word [ebp - 0x2bc], ax
mov ecx, 0x65
mov word [ebp - 0x2ba], cx
mov edx, 0x6f
mov word [ebp - 0x2b8], dx
mov word [ebp - 0x2b2], dx
mov eax, 0x42
mov word [ebp - 0x2b6], ax
mov ecx, 0x69
mov word [ebp - 0x2b4], cx
mov eax, ebx
mov word [ebp - 0x2b0], ax
mov ecx, 0x56
mov word [ebp - 0x2ae], cx
mov edx, 0x65
mov word [ebp - 0x2ac], dx
mov eax, 0x72
mov word [ebp - 0x2aa], ax
mov ecx, ebx
mov word [ebp - 0x2a8], cx
mov edx, 0x69
mov word [ebp - 0x2a6], dx
xor edx, edx
mov word [ebp - 0x2a0], dx
mov eax, 0x6f
mov word [ebp - 0x2a4], ax
mov ecx, 0x6e
mov word [ebp - 0x2a2], cx
mov eax, 0x56
mov word [ebp - 0x23c], ax
mov ecx, 0x42
mov word [ebp - 0x23a], cx
mov edx, 0x4f
mov word [ebp - 0x238], dx
xor ecx, ecx
mov eax, 0x58
mov edx, 0x56
mov word [ebp - 0x236], ax
mov word [ebp - 0x234], cx
mov word [ebp - 0x2fc], dx
mov eax, 0x69
mov ecx, 0x72
mov edx, 0x74
mov word [ebp - 0x2fa], ax
mov word [ebp - 0x2f8], cx
mov word [ebp - 0x2f6], dx
mov eax, 0x75
mov ecx, 0x61
mov edx, 0x6c
mov word [ebp - 0x2f4], ax
mov word [ebp - 0x2f2], cx
mov word [ebp - 0x2f0], dx
mov eax, 0x42
mov ecx, 0x6f
mov edx, 0x78
mov word [ebp - 0x2ee], ax
mov word [ebp - 0x2ec], cx
mov word [ebp - 0x2ea], dx
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor eax, eax
mov word [ebp - 0x2e8], ax
mov eax, 0x42
mov word [ebp - 0x1dc], ax
mov ecx, 0x58
lea eax, [ebp - 0x157c]
push eax
mov word [ebp - 0x1e0], cx
mov edx, 0x4f
push 0xf003f
mov word [ebp - 0x1de], dx
mov ecx, 0x56
xor edx, edx
mov word [ebp - 0x1da], cx
push edx
lea ecx, [ebp - 0x464]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
mov word [ebp - 0x1d8], dx
call esi
test eax, eax
jne 0x41cbeb
push 0x207
push eax
lea edx, [ebp - 0x6cb]
push edx
mov byte [ebp - 0x6cc], al
call fcn.00473d40
add esp, 0xc
lea eax, [ebp - 0x1558]
push eax
lea ecx, [ebp - 0x6cc]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1570]
push edx
push 0
lea eax, [ebp - 0x2e4]
push eax
push ecx
mov dword [ebp - 0x1570], 7
mov dword [ebp - 0x1558], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x41cbdc
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x6cc]
push eax
call fcn.0046f5eb
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
add esp, 8
test eax, eax
je 0x41cacf
lea eax, [ebp - 0x1e0]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41caa0
sub eax, edx
sar eax, 1
lea ecx, [eax + eax + 2]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1e0]
push edx
push 7
push 0
lea eax, [ebp - 0x2e4]
push eax
push ecx
call edi
push 0x208
lea edx, [ebp - 0x6cc]
push 0
push edx
call fcn.00473d40
add esp, 0xc
lea eax, [ebp - 0x1558]
push eax
lea ecx, [ebp - 0x6cc]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1570]
push edx
push 0
lea eax, [ebp - 0x2c0]
push eax
push ecx
mov dword [ebp - 0x1558], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x41cbdc
lea edx, [ebp - 0x2fc]
push edx
lea eax, [ebp - 0x6cc]
push eax
call fcn.0046f5eb
add esp, 8
test eax, eax
je 0x41cb74
lea eax, [ebp - 0x1e0]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41cb45
sub eax, edx
sar eax, 1
lea ecx, [eax + eax + 2]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1e0]
push edx
push 7
push 0
lea eax, [ebp - 0x2c0]
push eax
push ecx
call edi
lea edx, [ebp - 0x1560]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x3c4]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
test eax, eax
jne 0x41cbdc
mov ecx, dword [ebp - 0x1560]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
call edi
lea edx, [ebp - 0x1560]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x35c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
test eax, eax
jne 0x41cbe2
mov ecx, dword [ebp - 0x1560]
push eax
push ecx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov edx, dword [ebp - 0x1560]
push edx
call edi
jmp 0x41cbe2
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x157c]
push eax
call edi
mov edx, 0x72
mov eax, edx
mov word [ebp - 0x222], dx
mov word [ebp - 0x21c], dx
mov word [ebp - 0x220], ax
xor eax, eax
mov ecx, 0x45
mov word [ebp - 0x224], cx
mov word [ebp - 0x21a], ax
mov ecx, 0x6f
mov word [ebp - 0x21e], cx
mov edx, 0x6f
mov word [ebp - 0x42a], dx
mov ecx, 0x59
mov word [ebp - 0x42c], cx
mov edx, 0x20
mov word [ebp - 0x424], dx
mov ecx, 0x72
mov word [ebp - 0x426], cx
mov edx, 0x6d
mov word [ebp - 0x41e], dx
mov eax, 0x75
mov word [ebp - 0x428], ax
mov ecx, 0x6f
mov word [ebp - 0x420], cx
mov edx, 0x74
mov word [ebp - 0x418], dx
mov eax, 0x63
mov word [ebp - 0x422], ax
mov ecx, 0x75
mov word [ebp - 0x41a], cx
mov edx, 0x20
mov word [ebp - 0x412], dx
mov eax, 0x70
mov word [ebp - 0x41c], ax
mov ecx, 0x72
mov word [ebp - 0x414], cx
mov edx, 0x79
mov word [ebp - 0x40c], dx
mov eax, 0x65
mov word [ebp - 0x416], ax
mov ecx, 0x61
mov word [ebp - 0x40e], cx
mov edx, 0x65
mov word [ebp - 0x406], dx
mov eax, 0x6d
mov word [ebp - 0x410], ax
mov eax, 0x20
mov ecx, 0x62
mov word [ebp - 0x408], cx
mov edx, 0x6e
mov word [ebp - 0x400], dx
mov word [ebp - 0x40a], ax
mov word [ebp - 0x404], ax
mov ecx, 0x69
mov word [ebp - 0x402], cx
mov edx, 0x63
mov eax, 0x66
mov word [ebp - 0x3fa], dx
mov word [ebp - 0x3fe], ax
mov ecx, 0x65
mov edx, 0x64
mov word [ebp - 0x3fc], cx
mov eax, 0x74
mov word [ebp - 0x3f6], cx
mov word [ebp - 0x3f4], dx
mov word [ebp - 0x3f8], ax
mov eax, 0x20
mov ecx, 0x62
mov edx, 0x79
mov word [ebp - 0x3f0], cx
mov word [ebp - 0x3ee], dx
mov ecx, 0x61
mov edx, eax
mov word [ebp - 0x3f2], ax
mov word [ebp - 0x3ec], ax
mov eax, 0x63
mov word [ebp - 0x3ea], cx
mov word [ebp - 0x3e8], dx
mov word [ebp - 0x3e6], ax
mov ecx, 0x6f
mov word [ebp - 0x3e4], cx
mov eax, 0x70
mov word [ebp - 0x3e0], ax
mov ecx, 0x75
mov word [ebp - 0x3de], cx
mov edx, 0x6d
mov word [ebp - 0x3e2], dx
mov eax, 0x65
mov word [ebp - 0x3da], ax
mov ecx, 0x72
mov word [ebp - 0x3d8], cx
mov edx, 0x74
mov word [ebp - 0x3dc], dx
mov eax, 0x76
mov word [ebp - 0x3d4], ax
mov ecx, 0x69
mov edx, 0x20
mov word [ebp - 0x3d2], cx
mov eax, 0x75
mov word [ebp - 0x3d6], dx
mov word [ebp - 0x3ce], ax
xor eax, eax
mov ecx, ebx
mov edx, 0x72
mov word [ebp - 0x3cc], cx
mov word [ebp - 0x3d0], dx
mov edx, 0x2e
mov word [ebp - 0x3c8], ax
mov byte [ebp - 0xcc], al
mov al, 0x3a
lea ecx, [ebp - 0xd8]
push ecx
mov word [ebp - 0x3ca], dx
mov byte [ebp - 0xd8], 0x57
mov byte [ebp - 0xd7], 0x49
mov byte [ebp - 0xd6], 0x4e
mov byte [ebp - 0xd5], 0x53
mov byte [ebp - 0xd4], 0x50
mov byte [ebp - 0xd3], 0x4f
mov byte [ebp - 0xd2], 0x4f
mov byte [ebp - 0xd1], 0x4c
mov byte [ebp - 0xd0], dl
mov byte [ebp - 0xcf], 0x44
mov byte [ebp - 0xce], 0x52
mov byte [ebp - 0xcd], 0x56
mov byte [ebp - 0x140], al
mov byte [ebp - 0x13f], 0x5c
mov byte [ebp - 0x13e], 0x77
mov byte [ebp - 0x13d], 0x69
mov byte [ebp - 0x13c], 0x6e
mov byte [ebp - 0x13b], 0x64
mov byte [ebp - 0x13a], 0x6f
mov byte [ebp - 0x139], 0x77
mov byte [ebp - 0x138], bl
mov byte [ebp - 0x137], 0x5c
mov byte [ebp - 0x136], bl
mov byte [ebp - 0x135], 0x79
mov byte [ebp - 0x134], bl
mov byte [ebp - 0x133], 0x77
mov byte [ebp - 0x132], 0x6f
mov byte [ebp - 0x131], 0x77
mov byte [ebp - 0x130], 0
mov byte [ebp - 0x12c], al
mov byte [ebp - 0x12b], 0x5c
mov byte [ebp - 0x12a], 0x77
mov byte [ebp - 0x129], 0x69
mov byte [ebp - 0x128], 0x6e
mov byte [ebp - 0x127], 0x64
mov byte [ebp - 0x126], 0x6f
mov byte [ebp - 0x125], 0x77
mov byte [ebp - 0x124], bl
mov byte [ebp - 0x123], 0x5c
mov byte [ebp - 0x122], bl
mov byte [ebp - 0x121], 0x79
mov byte [ebp - 0x120], bl
mov byte [ebp - 0x11f], 0x74
mov byte [ebp - 0x11e], 0x65
mov byte [ebp - 0x11d], 0x6d
mov byte [ebp - 0x11c], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
test esi, esi
je 0x41d0fd
push 0x1ff
lea edx, [ebp - 0x6c3]
push 0
push edx
mov byte [ebp - 0x6c4], 0
call fcn.00473d40
add esp, 0xc
push 0x200
lea eax, [ebp - 0x6c4]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x41d074
push 0xffffffffffffffff
push 0x50f493
push 0x50f493
push 0x50f493
push 0x3b
lea ecx, [ebp - 0x1c]
push 0x4d
push ecx
mov byte [ebp - 0x16], 0
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1c], 0x63
call fcn.004097a0
add esp, 0x1c
push 0x600
call fcn.004509b2
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x41c40a
lea edx, [ebp - 0x42c]
push edx
mov edx, esi
call fcn.00405390
add esp, 4
lea eax, [ebp - 0x224]
push eax
jmp 0x41c3e5
lea eax, [ebp - 0x6c4]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d080
sub eax, edx
mov edi, eax
mov esi, 0
je 0x41d0af
movsx ecx, byte [ebp + esi - 0x6c4]
push ecx
call fcn.00471c37
mov byte [ebp + esi - 0x6c4], al
inc esi
add esp, 4
cmp esi, edi
jb 0x41d092
lea edx, [ebp - 0x140]
push edx
lea eax, [ebp - 0x6c4]
push eax
call fcn.0046ea50
add esp, 8
test eax, eax
jne 0x41d0fd
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x6c4]
push edx
call fcn.0046ea50
add esp, 8
test eax, eax
jne 0x41d0fd
push 0xffffffffffffffff
lea eax, [ebp - 0x6c4]
push eax
push 0x50f493
push 0x50f493
push 0x3c
jmp 0x41d013
mov eax, dword [ebp - 0x1540]
lea ecx, [eax + 0x160]
push ecx
push eax
call fcn.0044a860
add esp, 8
call fcn.00414b20
mov ecx, dword [0x52a92c]
call fcn.0044a600
mov edx, 0x43
mov word [ebp - 0x27c], dx
mov edi, eax
mov ecx, 0x6e
mov word [ebp - 0x278], cx
mov edx, 0x27
mov word [ebp - 0x276], dx
mov ecx, 0x20
mov word [ebp - 0x272], cx
mov edx, 0x53
mov word [ebp - 0x270], dx
mov ecx, 0x61
mov word [ebp - 0x26c], cx
mov eax, 0x61
mov word [ebp - 0x27a], ax
mov edx, 0x72
mov word [ebp - 0x26a], dx
mov eax, 0x74
mov word [ebp - 0x274], ax
mov word [ebp - 0x26e], ax
mov word [ebp - 0x268], ax
mov ecx, 0x20
mov word [ebp - 0x266], cx
mov edx, 0x47
mov word [ebp - 0x264], dx
mov ecx, 0x6d
mov word [ebp - 0x260], cx
mov eax, 0x61
mov word [ebp - 0x262], ax
mov edx, 0x65
mov word [ebp - 0x25e], dx
mov ecx, 0x43
mov word [ebp - 0x25a], cx
mov eax, 0x20
mov word [ebp - 0x25c], ax
mov edx, 0x6c
mov word [ebp - 0x258], dx
mov ecx, 0x65
mov eax, 0x69
mov word [ebp - 0x254], cx
mov edx, 0x6e
mov word [ebp - 0x256], ax
mov word [ebp - 0x252], dx
mov ecx, 0x2e
xor edx, edx
mov eax, 0x74
mov word [ebp - 0x24e], cx
mov ecx, 0x72
mov word [ebp - 0x250], ax
mov word [ebp - 0x24c], dx
mov eax, 0x45
mov edx, ecx
mov word [ebp - 0x1f4], ax
mov word [ebp - 0x1f0], dx
mov eax, 0x6f
xor edx, edx
mov dword [ebp - 0x1588], edi
mov word [ebp - 0x1f2], cx
mov word [ebp - 0x1ee], ax
mov word [ebp - 0x1ec], cx
mov word [ebp - 0x1ea], dx
mov byte [ebp - 0xbc], 0x6b
mov byte [ebp - 0xbb], 0x65
mov byte [ebp - 0xba], cl
mov byte [ebp - 0xb9], 0x6e
mov byte [ebp - 0xb8], 0x65
mov byte [ebp - 0xb7], 0x6c
mov byte [ebp - 0xb6], 0x33
mov byte [ebp - 0xb5], 0x32
mov byte [ebp - 0xb4], 0x2e
mov byte [ebp - 0xb3], 0x64
mov byte [ebp - 0xb2], 0x6c
mov byte [ebp - 0xf0], al
mov byte [ebp - 0x167], al
mov byte [ebp - 0x15f], al
mov byte [ebp - 0x100], al
mov byte [ebp - 0x110], al
lea eax, [ebp - 0xf8]
mov byte [ebp - 0x16d], cl
mov byte [ebp - 0x169], cl
mov byte [ebp - 0x166], cl
mov byte [ebp - 0x15a], cl
mov byte [ebp - 0x107], cl
mov byte [ebp - 0x101], cl
mov byte [ebp - 0x117], cl
mov byte [ebp - 0x111], cl
push eax
lea ecx, [ebp - 0xbc]
push ecx
mov byte [ebp - 0xb1], 0x6c
mov byte [ebp - 0xb0], dl
mov byte [ebp - 0xf8], 0x47
mov byte [ebp - 0xf7], 0x65
mov byte [ebp - 0xf6], 0x74
mov byte [ebp - 0xf5], 0x54
mov byte [ebp - 0xf4], 0x69
mov byte [ebp - 0xf3], 0x63
mov byte [ebp - 0xf2], 0x6b
mov byte [ebp - 0xf1], 0x43
mov byte [ebp - 0xef], 0x75
mov byte [ebp - 0xee], 0x6e
mov byte [ebp - 0xed], 0x74
mov byte [ebp - 0xec], dl
mov byte [ebp - 0x170], 0x51
mov byte [ebp - 0x16f], 0x75
mov byte [ebp - 0x16e], 0x65
mov byte [ebp - 0x16c], 0x79
mov byte [ebp - 0x16b], 0x50
mov byte [ebp - 0x16a], 0x65
mov byte [ebp - 0x168], 0x66
mov byte [ebp - 0x165], 0x6d
mov byte [ebp - 0x164], 0x61
mov byte [ebp - 0x163], 0x6e
mov byte [ebp - 0x162], 0x63
mov byte [ebp - 0x161], 0x65
mov byte [ebp - 0x160], 0x43
mov byte [ebp - 0x15e], 0x75
mov byte [ebp - 0x15d], 0x6e
mov byte [ebp - 0x15c], 0x74
mov byte [ebp - 0x15b], 0x65
mov byte [ebp - 0x159], dl
mov byte [ebp - 0x108], 0x43
mov byte [ebp - 0x106], 0x65
mov byte [ebp - 0x105], 0x61
mov byte [ebp - 0x104], 0x74
mov byte [ebp - 0x103], 0x65
mov byte [ebp - 0x102], 0x50
mov byte [ebp - 0xff], 0x63
mov byte [ebp - 0xfe], 0x65
mov byte [ebp - 0xfd], bl
mov byte [ebp - 0xfc], bl
mov byte [ebp - 0xfb], 0x41
mov byte [ebp - 0xfa], dl
mov byte [ebp - 0x118], 0x43
mov byte [ebp - 0x116], 0x65
mov byte [ebp - 0x115], 0x61
mov byte [ebp - 0x114], 0x74
mov byte [ebp - 0x113], 0x65
mov byte [ebp - 0x112], 0x50
mov byte [ebp - 0x10f], 0x63
mov byte [ebp - 0x10e], 0x65
mov byte [ebp - 0x10d], bl
mov byte [ebp - 0x10c], bl
mov byte [ebp - 0x10b], 0x57
mov byte [ebp - 0x10a], dl
call fcn.00486d10
mov esi, eax
test esi, esi
je 0x41d5f1
cmp byte [esi], 0xe9
jne 0x41d5f1
push 0
push 0
call fcn.0044a860
push 0x600
call fcn.004509b2
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41d523
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00405390
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.004053b0
add esp, 4
push 0
push 0
push edi
push 0x4011e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push 0
push ecx
mov dword [ebp - 0x1568], 0
mov byte [ebp - 0x6c4], 0
call fcn.00473d40
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0xc22]
push eax
mov word [ebp - 0xc24], dx
call fcn.00473d40
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.004012f0
mov eax, edi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d590
sub eax, edx
je 0x41d5d7
push 0xffffffffffffffff
lea ecx, [ebp - 0x6c4]
push ecx
push 0x50f493
push 0x50f493
push 0x3d
lea edx, [ebp - 0x1c]
push 0x4d
push edx
mov byte [ebp - 0x16], 0
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1c], 0x63
call fcn.004097a0
add esp, 0x1c
push 0
push 0
push 0
push 0x40d450
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x41c186
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00486d10
mov esi, eax
test esi, esi
je 0x41d6f7
cmp byte [esi], 0xe9
jne 0x41d6f7
push 0
push 0
call fcn.0044a860
push 0x600
call fcn.004509b2
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41d674
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00405390
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.004053b0
add esp, 4
push 0
push 0
push edi
push 0x4011e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push 0
push ecx
mov dword [ebp - 0x1568], 0
mov byte [ebp - 0x6c4], 0
call fcn.00473d40
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0xc22]
push eax
mov word [ebp - 0xc24], dx
call fcn.00473d40
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.004012f0
mov eax, edi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d6e1
sub eax, edx
je 0x41d5d7
push 0xfffffffffffffffe
jmp 0x41d59d
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00486d10
mov esi, eax
test esi, esi
je 0x41d7fd
cmp byte [esi], 0xe9
jne 0x41d7fd
push 0
push 0
call fcn.0044a860
push 0x600
call fcn.004509b2
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41d77a
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00405390
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.004053b0
add esp, 4
push 0
push 0
push edi
push 0x4011e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push 0
push ecx
mov dword [ebp - 0x1568], 0
mov byte [ebp - 0x6c4], 0
call fcn.00473d40
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0xc22]
push eax
mov word [ebp - 0xc24], dx
call fcn.00473d40
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.004012f0
mov eax, edi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d7e7
sub eax, edx
je 0x41d5d7
push 0xfffffffffffffffd
jmp 0x41d59d
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00486d10
mov esi, eax
test esi, esi
je 0x41d906
cmp byte [esi], 0xe9
jne 0x41d906
push 0
push 0
call fcn.0044a860
push 0x600
call fcn.004509b2
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41d880
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00405390
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.004053b0
add esp, 4
push 0
push 0
push edi
push 0x4011e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push 0
push ecx
mov dword [ebp - 0x1568], 0
mov byte [ebp - 0x6c4], 0
call fcn.00473d40
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0xc22]
push eax
mov word [ebp - 0xc24], dx
call fcn.00473d40
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.004012f0
mov eax, edi
add esp, 8
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d8f0
sub eax, edx
je 0x41d5d7
push 0xfffffffffffffffc
jmp 0x41d59d
mov eax, 0x25
mov edx, eax
mov word [ebp - 0x200], ax
mov word [ebp - 0x1fc], dx
mov eax, ebx
mov word [ebp - 0x1fa], ax
mov ecx, ebx
mov word [ebp - 0x1fe], cx
xor ecx, ecx
mov word [ebp - 0x1f8], cx
mov word [ebp - 0x1e4], cx
mov eax, 0x62
mov word [ebp - 0x1e6], ax
mov edx, 0x72
mov word [ebp - 0x1e8], dx
mov eax, 0x69
mov word [ebp - 0x29a], ax
mov ecx, 0x6c
mov word [ebp - 0x298], cx
mov edx, 0x46
mov word [ebp - 0x29c], dx
mov eax, 0x20
mov word [ebp - 0x294], ax
mov ecx, 0x63
mov word [ebp - 0x292], cx
mov eax, 0x72
mov ecx, eax
mov word [ebp - 0x28e], ax
mov edx, 0x65
mov word [ebp - 0x296], dx
mov word [ebp - 0x28c], cx
mov edx, 0x6f
mov word [ebp - 0x290], dx
mov eax, 0x70
mov word [ebp - 0x288], ax
mov ecx, 0x74
mov word [ebp - 0x286], cx
mov edx, 0x75
mov word [ebp - 0x28a], dx
mov eax, 0x64
mov word [ebp - 0x282], ax
mov ecx, 0x21
mov word [ebp - 0x280], cx
mov edx, 0x65
mov word [ebp - 0x284], dx
mov eax, 0x4c
xor edx, edx
mov word [ebp - 0x218], ax
mov ecx, 0x6f
mov word [ebp - 0x216], cx
mov eax, 0x69
mov word [ebp - 0x27e], dx
mov word [ebp - 0x212], ax
mov ecx, 0x6e
xor eax, eax
mov edx, 0x67
push 0x206
mov word [ebp - 0x210], cx
mov word [ebp - 0x214], dx
xor edx, edx
push eax
lea ecx, [ebp - 0x112a]
push ecx
mov word [ebp - 0x20e], dx
mov dword [ebp - 0x1574], edx
mov word [ebp - 0x112c], ax
call fcn.00473d40
add esp, 0xc
lea eax, [edi + 0x4da]
push eax
lea edx, [ebp - 0x200]
push 0x52a518
push edx
lea edx, [ebp - 0x112c]
mov dword [ebp - 0x1560], eax
call fcn.0040a600
add esp, 0xc
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x112c]
push ecx
lea edx, [ebp - 0x1574]
push edx
call fcn.0046f0db
mov eax, dword [ebp - 0x1574]
add esp, 0xc
test eax, eax
jne 0x41db66
push eax
push eax
call fcn.0044a860
push 0x600
call fcn.004509b2
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x41db27
lea eax, [ebp - 0x29c]
push eax
mov edx, esi
call fcn.00405390
lea ecx, [ebp - 0x218]
add esp, 4
push ecx
lea edx, [esi + 0x400]
call fcn.004053b0
add esp, 4
push 0
push 0
push esi
push 0x4011e0
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffb
push 0x50f493
push 0x50f493
push 0x50f493
push 0x3d
lea edx, [ebp - 0x1c]
push 0x4d
push edx
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], 0
call fcn.004097a0
add esp, 0x1c
jmp 0x41c40a
push 2
push 0
push eax
call fcn.00470fbd
mov eax, dword [ebp - 0x1574]
add esp, 0xc
push eax
call fcn.004711df
mov ecx, dword [ebp - 0x1574]
add esp, 4
push 0
push 0
push ecx
mov esi, eax
call fcn.00470fbd
add esp, 0xc
push esi
call fcn.004509ec
mov edx, dword [ebp - 0x1574]
add esp, 4
push edx
push 1
mov edi, eax
push esi
push edi
call fcn.004714ed
mov eax, dword [ebp - 0x1574]
push eax
call fcn.0046f56f
xor eax, eax
lea ecx, [ebp - 0x1d4]
add esp, 0x14
push ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
call fcn.00491f20
add esp, 4
push esi
lea edx, [ebp - 0x1d4]
push edi
push edx
call fcn.00491cf0
add esp, 0xc
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x44]
push ecx
call fcn.00491dd0
push edi
call fcn.004509e1
xor eax, eax
lea edx, [ebp - 0x4c4]
add esp, 0xc
push edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
call fcn.00491cb0
add esp, 4
push 0x14
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x4c4]
push ecx
call fcn.00491aa0
add esp, 0xc
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x2c]
push eax
call fcn.00491b80
mov ecx, dword [ebp - 0x1578]
add esp, 8
call fcn.0044a600
mov edx, 0x10
add eax, 0xc
lea ecx, [ebp - 0x2c]
sub ecx, eax
jmp 0x41dc70
mov esi, dword [eax + ecx]
cmp esi, dword [eax]
jne 0x41dd62
sub edx, 4
add eax, 4
cmp edx, 4
jae 0x41dc70
mov ecx, dword [0x52ade4]
call fcn.0044a600
test eax, eax
je 0x41dd5b
mov ecx, dword [0x52ade8]
call fcn.0044a600
test eax, eax
je 0x41dd5b
push 0x208
lea ecx, [ebp - 0x112c]
push 0
push ecx
call fcn.00473d40
add esp, 0xc
push 0x104
lea edx, [ebp - 0x112c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x30
lea eax, [ebp - 0x15fc]
push 0
push eax
call fcn.00473d40
add esp, 0xc
lea ecx, [ebp - 0x15fc]
push ecx
lea edx, [ebp - 0x112c]
push edx
call fcn.00471d64
add esp, 8
test eax, eax
jne 0x41de00
cmp dword [ebp - 0x15e8], 0x6c5660
jl 0x41de00
push 0xfffffffffffffff9
push 0x50f493
push 0x50f493
push 0x50f493
push 0x3d
mov byte [ebp - 0x16], al
lea eax, [ebp - 0x1c]
push 0x4d
push eax
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x64
call fcn.004097a0
mov esi, dword [ebp - 0x1540]
add esp, 0x1c
call fcn.0042b6e0
push 0
call fcn.004706ee
push 0
push 0
call fcn.0044a860
push 0x600
call fcn.004509b2
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x41ddc1
lea ecx, [ebp - 0x29c]
push ecx
mov edx, esi
call fcn.00405390
lea edx, [ebp - 0x218]
add esp, 4
push edx
lea edx, [esi + 0x400]
call fcn.004053b0
add esp, 4
push 0
push 0
push esi
push 0x4011e0
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffa
push 0x50f493
push 0x50f493
push 0x50f493
push 0x3d
lea eax, [ebp - 0x1c]
push 0x4d
push eax
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], 0
call fcn.004097a0
add esp, 0x1c
jmp 0x41c40a
push 0xc
xor eax, eax
lea ecx, [ebp - 0x1598]
push ecx
push eax
mov dword [ebp - 0x1598], 0
mov dword [ebp - 0x1594], eax
mov dword [ebp - 0x1590], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
push eax
call sub.PSAPI.DLL_GetModuleInformation
mov ecx, dword [0x52adb4]
cmp byte [ecx], 0xe9
mov eax, dword [ebp - 0x1598]
mov edx, dword [ebp - 0x1594]
lea edi, [edx + eax]
je 0x41de6e
push 0
call esi
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov esi, dword [ebp - 0x1540]
call fcn.0042b6e0
push 0
call fcn.004706ee
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x41de51
cmp ecx, edi
ja 0x41de51
mov ecx, dword [0x52add0]
cmp byte [ecx], 0xe9
jne 0x41de51
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x41de51
cmp ecx, edi
ja 0x41de51
mov ecx, dword [0x52add8]
cmp byte [ecx], 0xe9
jne 0x41de51
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x41de51
cmp ecx, edi
ja 0x41de51
mov ecx, dword [0x52ade0]
cmp byte [ecx], 0xe9
jne 0x41de51
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x41de51
cmp ecx, edi
ja 0x41de51
xor eax, eax
push 0x44
push eax
mov dword [ebp - 0x1554], eax
mov dword [ebp - 0x1550], eax
mov dword [ebp - 0x154c], eax
mov dword [ebp - 0x1548], eax
lea eax, [ebp - 0x1644]
push eax
call fcn.00473d40
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x153a]
push edx
mov dword [ebp - 0x1644], 0x44
mov word [ebp - 0x153c], cx
call fcn.00473d40
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0xa1a]
push ecx
mov word [ebp - 0xa1c], ax
call fcn.00473d40
add esp, 0xc
push 0x103
lea edx, [ebp - 0x813]
push 0
push edx
mov byte [ebp - 0x814], 0
call fcn.00473d40
mov eax, 0xb1be
mov word [ebp - 0x594], ax
mov ecx, 0xbeab
mov word [ebp - 0x592], cx
mov edx, 0xbbaa
mov word [ebp - 0x590], dx
mov eax, 0xcad6
mov word [ebp - 0x58e], ax
mov ecx, 0xb2e1
mov word [ebp - 0x58c], cx
mov edx, 0xcad5
mov word [ebp - 0x58a], dx
mov eax, 0x2e
mov word [ebp - 0x588], ax
mov ecx, 0xc2bc
mov word [ebp - 0x586], cx
mov edx, 0xb5c4
mov word [ebp - 0x584], dx
mov eax, 0xcec4
mov word [ebp - 0x582], ax
mov ecx, 0xd5c2
mov word [ebp - 0x580], cx
mov edx, 0x71
mov eax, 0x77
mov word [ebp - 0x57e], dx
mov word [ebp - 0x57c], ax
mov ecx, 0x65
mov word [ebp - 0x57a], cx
mov edx, 0x72
mov eax, 0x74
mov word [ebp - 0x578], dx
mov word [ebp - 0x576], ax
mov ecx, 0x79
mov edx, 0xd2d4
mov eax, 0xbfb4
mov word [ebp - 0x574], cx
mov ecx, 0xd1a9
mov word [ebp - 0x572], dx
mov word [ebp - 0x570], ax
mov edx, 0x2e
mov eax, 0xc2db
mov word [ebp - 0x56e], cx
add esp, 0xc
mov byte [ebp - 0x1559], 0
mov word [ebp - 0x56c], dx
mov word [ebp - 0x56a], ax
mov ecx, 0xccb3
mov word [ebp - 0x568], cx
mov edx, 0xd4ad
mov word [ebp - 0x566], dx
mov eax, 0x51
mov word [ebp - 0x564], ax
mov ecx, 0x57
mov word [ebp - 0x562], cx
mov edx, 0x45
mov word [ebp - 0x560], dx
mov eax, 0x52
mov word [ebp - 0x55e], ax
mov ecx, 0x54
mov word [ebp - 0x55c], cx
mov edx, 0x59
mov word [ebp - 0x55a], dx
mov eax, 0x75
mov word [ebp - 0x558], ax
mov ecx, 0x69
mov word [ebp - 0x556], cx
mov edx, 0x6f
mov word [ebp - 0x554], dx
mov eax, 0x70
mov word [ebp - 0x552], ax
mov ecx, 0xb4b4
mov word [ebp - 0x550], cx
mov edx, 0xcec4
mov word [ebp - 0x54e], dx
mov eax, 0xd5c2
mov word [ebp - 0x54c], ax
mov ecx, 0xceaa
mov word [ebp - 0x54a], cx
mov edx, 0xd6f7
mov word [ebp - 0x548], dx
mov eax, 0xd7aa
mov word [ebp - 0x546], ax
mov ecx, 0xccfb
mov word [ebp - 0x544], cx
mov edx, 0x62
mov word [ebp - 0x542], dx
mov eax, 0x6e
mov word [ebp - 0x540], ax
mov ecx, 0x6d
mov word [ebp - 0x53e], cx
mov edx, 0x4b
mov word [ebp - 0x53c], dx
mov eax, 0x48
mov word [ebp - 0x53a], ax
mov ecx, 0x46
mov word [ebp - 0x538], cx
mov edx, 0x44
mov word [ebp - 0x536], dx
mov eax, 0x53
mov word [ebp - 0x534], ax
mov ecx, 0xc2db
mov word [ebp - 0x532], cx
mov edx, 0xccb3
mov word [ebp - 0x530], dx
mov eax, 0xbbf2
mov ecx, 0xcfe0
mov edx, 0xb9d8
mov word [ebp - 0x52e], ax
mov word [ebp - 0x52c], cx
mov word [ebp - 0x52a], dx
mov eax, 0xb5c4
mov ecx, 0xc2db
mov edx, 0xccb3
mov word [ebp - 0x528], ax
mov word [ebp - 0x526], cx
mov word [ebp - 0x524], dx
mov eax, 0xd7a2
mov ecx, 0xb2e1
mov edx, 0xd3c3
mov word [ebp - 0x522], ax
mov word [ebp - 0x520], cx
mov word [ebp - 0x51e], dx
mov eax, 0xbba7
mov ecx, 0xcbf9
mov edx, 0xd3d0
mov word [ebp - 0x51c], ax
mov word [ebp - 0x51a], cx
mov word [ebp - 0x518], dx
mov eax, 0xb5c4
mov word [ebp - 0x516], ax
mov ecx, 0xb9a4
mov word [ebp - 0x514], cx
mov edx, 0xd7f7
mov word [ebp - 0x512], dx
mov eax, 0xbcb0
mov word [ebp - 0x510], ax
mov ecx, 0xcbf9
mov word [ebp - 0x50e], cx
mov edx, 0xd3d0
mov word [ebp - 0x50c], dx
mov eax, 0xcdf8
mov word [ebp - 0x50a], ax
mov ecx, 0xd3d1
mov word [ebp - 0x508], cx
mov edx, 0xb6d4
mov word [ebp - 0x506], dx
mov eax, 0x42
mov word [ebp - 0x504], ax
mov ecx, 0x31
mov word [ebp - 0x502], cx
mov edx, 0x32
mov word [ebp - 0x500], dx
mov eax, 0x33
mov word [ebp - 0x4fe], ax
mov ecx, 0x34
mov word [ebp - 0x4fc], cx
mov edx, 0x35
mov word [ebp - 0x4fa], dx
mov eax, 0x36
mov word [ebp - 0x4f8], ax
mov ecx, 0x37
mov word [ebp - 0x4f6], cx
mov edx, 0x38
mov word [ebp - 0x4f4], dx
mov eax, 0x39
mov word [ebp - 0x4f2], ax
mov ecx, 0xd0d4
mov word [ebp - 0x4f0], cx
mov edx, 0xd6ca
mov word [ebp - 0x4ee], dx
mov eax, 0xb5c4
mov word [ebp - 0x4ec], ax
mov ecx, 0xcec4
mov word [ebp - 0x4ea], cx
mov edx, 0xd5c2
mov word [ebp - 0x4e8], dx
mov eax, 0xb3fd
mov word [ebp - 0x4e6], ax
mov ecx, 0xb7c7
mov word [ebp - 0x4e4], cx
mov edx, 0xccd8
mov word [ebp - 0x4e2], dx
mov eax, 0x2e
mov word [ebp - 0x4e0], ax
mov ecx, 0xb1f0
mov word [ebp - 0x4de], cx
mov edx, 0xd3c5
mov word [ebp - 0x4dc], dx
mov eax, 0xd0e3
mov ecx, 0xb5c4
mov word [ebp - 0x4da], ax
mov edx, 0xd2bb
mov word [ebp - 0x4d8], cx
mov word [ebp - 0x4d6], dx
mov eax, 0xb0e3
mov ecx, 0xb2bb
mov edx, 0xcad5
mov word [ebp - 0x4d4], ax
mov word [ebp - 0x4d2], cx
mov eax, 0xc2bc
xor ecx, ecx
mov word [ebp - 0x4d0], dx
xor edx, edx
push 0x3e
mov word [ebp - 0x4ce], ax
mov word [ebp - 0x4cc], cx
mov word [ebp - 0x70c], dx
push edx
lea eax, [ebp - 0x70a]
push eax
call fcn.00473d40
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0047213f
add esp, 4
call fcn.00472151
cdq
mov ecx, 0xa
idiv ecx
xor edi, edi
mov esi, edx
add esi, 3
test esi, esi
jle 0x41e4a7
lea esp, [esp]
lea eax, [ebp - 0x594]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41e470
sub eax, edx
sar eax, 1
mov dword [ebp - 0x156c], eax
call fcn.00472151
xor edx, edx
div dword [ebp - 0x156c]
inc edi
cmp edi, esi
mov dx, word [ebp + edx*2 - 0x594]
mov word [ebp + edi*2 - 0x70e], dx
jl 0x41e460
xor edi, edi
lea esp, [esp]
mov ecx, dword [ebp - 0x1560]
lea eax, [ebp - 0x70c]
push eax
push ecx
call fcn.00472173
mov esi, eax
add esp, 8
test esi, esi
je 0x41e530
inc edi
cmp edi, 0x64
jl 0x41e4b0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp esi, 0xffffffff
je 0x41e507
test edi, edi
je 0x41e530
push 0
push 0
call fcn.0044a860
push esi
mov esi, edi
mov edi, 0x511b68
call fcn.00438c20
add esp, 0xc
mov esi, dword [ebp - 0x1540]
jmp 0x41c181
test edi, edi
je 0x41e530
push 0
push 0
call fcn.0044a860
mov esi, edi
push 0xffffffffffffffff
mov edi, 0x511b98
call fcn.00438c20
mov esi, dword [ebp - 0x1540]
add esp, 0xc
jmp 0x41c181
lea edx, [ebp - 0x70c]
push edx
lea eax, [ebp - 0x200]
push 0x52a518
push eax
lea edx, [ebp - 0x153c]
call fcn.0040a600
mov eax, dword [ebp - 0x1588]
add esp, 0xc
add eax, 0x51b
push eax
lea ecx, [ebp - 0x200]
push 0x52a518
push ecx
lea edx, [ebp - 0xa1c]
mov dword [ebp - 0x156c], eax
call fcn.0040a600
lea edx, [ebp - 0x814]
add esp, 0xc
push edx
lea esi, [ebp - 0xa1c]
call fcn.0044af70
mov ecx, dword [0x52adec]
add esp, 4
call fcn.0044a600
mov ecx, dword [0x52adf8]
mov esi, eax
call fcn.0044a600
xor edi, edi
cmp esi, edi
je 0x41e4fc
cmp eax, edi
je 0x41e4fc
cmp esi, eax
jne 0x41e4fc
mov ecx, dword [0x52adf0]
call fcn.0044a600
mov ecx, dword [0x52adfc]
mov esi, eax
call fcn.0044a600
cmp esi, edi
je 0x41e4fc
cmp eax, edi
je 0x41e4fc
cmp esi, 2
jb 0x41e4fc
cmp eax, 2
jb 0x41e4fc
cmp esi, eax
jne 0x41e4fc
mov ecx, dword [0x52adf4]
call fcn.0044a600
mov ecx, dword [0x52ae00]
mov esi, eax
call fcn.0044a600
cmp esi, eax
jne 0x41e4fc
push 0x30
lea eax, [ebp - 0x15cc]
push edi
push eax
mov dword [ebp - 0x1558], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1580], edi
mov dword [ebp - 0x1564], edi
mov dword [ebp - 0x1570], edi
call fcn.00473d40
add esp, 0xc
lea ecx, [ebp - 0x1e8]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea eax, [ebp - 0x158c]
push eax
call fcn.0046f0db
add esp, 0xc
test eax, eax
jne 0x4203c9
lea ecx, [ebp - 0x15cc]
push ecx
lea edx, [ebp - 0xa1c]
push edx
call fcn.00471d64
add esp, 8
test eax, eax
je 0x41e6c2
mov eax, dword [ebp - 0x158c]
push eax
call fcn.0046f56f
mov ecx, dword [ebp - 0x1560]
add esp, 4
push ecx
lea edx, [ebp - 0x70c]
push edx
call fcn.00472173
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x41c181
mov edi, dword [ebp - 0x15b8]
push edi
call fcn.004509ec
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x158c]
push eax
push 1
push edi
push esi
call fcn.004714ed
mov ecx, dword [ebp - 0x158c]
push ecx
call fcn.0046f56f
xor eax, eax
lea edx, [ebp - 0x1d4]
add esp, 0x14
push edx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
call fcn.00491f20
add esp, 4
push edi
lea eax, [ebp - 0x1d4]
push esi
push eax
call fcn.00491cf0
add esp, 0xc
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00491dd0
push esi
call fcn.004509e1
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x4c4]
add esp, 0xc
push eax
call fcn.00491cb0
add esp, 4
push 0x14
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x4c4]
push edx
call fcn.00491aa0
add esp, 0xc
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00491b80
mov ecx, dword [ebp - 0x1578]
add esp, 8
call fcn.0044a600
mov esi, eax
lea eax, [esi + 0x1c]
lea ecx, [ebp - 0x2c]
mov edx, 0x10
sub ecx, eax
jmp 0x41e7a0
mov edi, dword [ecx + eax]
cmp edi, dword [eax]
jne 0x41e80c
sub edx, 4
add eax, 4
cmp edx, 4
jae 0x41e7a0
mov esi, dword [ebp - 0x1540]
push 0x409
mov ecx, esi
call fcn.0045fe1e
mov ecx, eax
call fcn.0045ffa5
test eax, eax
je 0x41e866
cmp dword [esi + 0x194], 0
mov eax, dword [esi + 0x190]
mov dword [ebp - 0x1568], eax
je 0x41e870
test eax, eax
je 0x41e870
call fcn.0041bda0
cmp eax, 0x10
je 0x41e870
call fcn.0041bde0
jmp 0x41e870
xor edx, edx
xor eax, eax
mov word [ebp - 0xa1c], dx
mov word [ebp - 0xa1a], ax
mov ecx, dword [esi + 0xb4]
push ecx
call fcn.004509e1
mov edx, dword [esi + 0xb8]
add esp, 4
push edx
call fcn.004509e1
add esp, 4
push esi
call fcn.004509e1
mov eax, dword [ebp - 0x1560]
add esp, 4
push eax
lea ecx, [ebp - 0x70c]
push ecx
call fcn.00472173
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x41c181
mov dword [ebp - 0x1568], 0xffffffff
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x1332]
push eax
mov word [ebp - 0x1334], dx
call fcn.00473d40
mov ecx, 0x25
mov eax, ecx
mov word [ebp - 0x230], cx
mov word [ebp - 0x22c], ax
mov edx, ebx
mov word [ebp - 0x22e], dx
xor edx, edx
mov word [ebp - 0x228], dx
mov ecx, ebx
mov word [ebp - 0x22a], cx
mov ecx, 0x74
mov word [ebp - 0x20a], cx
mov eax, 0x4f
mov word [ebp - 0x20c], ax
mov edx, 0x68
mov word [ebp - 0x208], dx
xor edx, edx
mov ecx, 0x72
mov word [ebp - 0x204], cx
mov word [ebp - 0x202], dx
mov eax, 0x65
mov word [ebp - 0x206], ax
mov ecx, 0x6f
mov word [ebp - 0x316], cx
mov eax, 0x43
mov word [ebp - 0x318], ax
mov edx, 0x6d
mov word [ebp - 0x314], dx
mov ecx, 0x61
mov word [ebp - 0x310], cx
mov eax, 0x70
mov word [ebp - 0x312], ax
mov edx, 0x74
mov word [ebp - 0x30e], dx
mov ecx, 0x6e
add esp, 0xc
mov eax, 0x45
mov word [ebp - 0x30a], cx
mov word [ebp - 0x30c], ax
mov edx, 0x61
mov word [ebp - 0x308], dx
mov ecx, 0x6c
mov eax, 0x62
push 0x52a7a0
mov word [ebp - 0x304], cx
mov edx, 0x65
mov word [ebp - 0x306], ax
lea ecx, [ebp - 0x230]
mov word [ebp - 0x302], dx
xor eax, eax
push 0x511a0c
push ecx
lea edx, [ebp - 0x1334]
mov word [ebp - 0x300], ax
call fcn.0040a600
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
add esp, 0xc
lea edx, [ebp - 0x1334]
push edx
push 1
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call esi
cmp eax, 1
jl 0x41e9e4
call fcn.0041c0b0
mov eax, 0x70
mov word [ebp - 0x332], ax
mov edx, 0x4f
mov word [ebp - 0x334], dx
mov eax, 0x6d
mov word [ebp - 0x32c], ax
mov ecx, 0x74
mov word [ebp - 0x330], cx
mov edx, 0x69
mov ecx, edx
mov word [ebp - 0x32e], dx
mov eax, 0x61
mov word [ebp - 0x32a], cx
mov word [ebp - 0x326], ax
mov edx, 0x7a
mov word [ebp - 0x328], dx
mov eax, 0x6f
mov ecx, 0x74
mov word [ebp - 0x324], cx
mov word [ebp - 0x320], ax
mov edx, 0x69
lea eax, [ebp - 0x1334]
push eax
mov word [ebp - 0x322], dx
mov ecx, 0x6e
xor edx, edx
mov word [ebp - 0x31e], cx
push 2
lea ecx, [ebp - 0x334]
mov word [ebp - 0x31c], dx
push ecx
lea edx, [ebp - 0x20c]
push edx
call esi
cmp eax, 2
jl 0x41eb9f
mov eax, 0x64
mov ecx, eax
mov word [ebp - 0x2e], cx
mov word [ebp - 0x30], ax
mov edx, 0x72
mov word [ebp - 0x2c], dx
mov ecx, 0x77
mov word [ebp - 0x28], cx
mov eax, 0x61
mov word [ebp - 0x2a], ax
mov edx, 0x2e
mov word [ebp - 0x26], dx
mov ecx, 0x6c
mov edx, ecx
mov word [ebp - 0x22], cx
mov word [ebp - 0x20], dx
mov eax, 0x64
mov word [ebp - 0x24], ax
xor eax, eax
mov word [ebp - 0x1e], ax
mov ecx, 0x64
mov edx, ecx
mov word [ebp - 0xac], cx
mov word [ebp - 0xaa], dx
mov eax, 0x72
mov word [ebp - 0xa8], ax
mov edx, 0x77
mov word [ebp - 0xa4], dx
mov ecx, 0x61
mov word [ebp - 0xa6], cx
mov eax, 0x2e
mov word [ebp - 0xa2], ax
mov edx, 0x6c
mov eax, edx
mov ecx, 0x64
mov word [ebp - 0xa0], cx
mov word [ebp - 0x9c], ax
mov ecx, 0x2e
mov word [ebp - 0x9a], cx
mov eax, 0x61
mov word [ebp - 0x9e], dx
mov word [ebp - 0x96], ax
mov ecx, 0x6b
mov edx, 0x62
lea eax, [ebp - 0xac]
mov word [ebp - 0x94], cx
mov word [ebp - 0x98], dx
push eax
lea ecx, [ebp - 0x30]
xor edx, edx
push ecx
mov word [ebp - 0x92], dx
call fcn.00472173
add esp, 8
call fcn.0041bb50
cmp eax, 1
jne 0x41ebbe
mov esi, dword [ebp - 0x156c]
lea edx, [ebp - 0x814]
push edx
call fcn.0044af70
add esp, 4
mov esi, dword [ebp - 0x1580]
mov edi, dword [ebp - 0x1c]
cmp edi, 0x32
jg 0x41ec26
cmp esi, 0x64
jg 0x41ec26
push 0
lea eax, [ebp - 0x814]
push eax
lea ecx, [ebp - 0x1554]
push ecx
lea edx, [ebp - 0x1644]
push edx
push 0
push 0
push 0x404
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x153c]
push eax
call fcn.0048a670
mov dword [ebp - 0x1558], eax
test eax, eax
jne 0x41ec26
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1564], eax
cmp eax, 2
jne 0x41ec23
inc edi
jmp 0x41ebc7
inc esi
jmp 0x41ebc7
mov eax, dword [0x52c008]
sub eax, dword [0x52c004]
mov byte [ebp - 0x1541], 0
sar eax, 2
mov dword [ebp - 0x1580], eax
test eax, eax
ja 0x41ec4c
mov byte [ebp - 0x1541], 1
mov edi, dword [sym.imp.KERNEL32.dll_ResumeThread]
xor esi, esi
test eax, eax
jbe 0x41ef13
lea esp, [esp]
call fcn.004412d0
mov edx, dword [eax]
lea ecx, [ebp - 0x1c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x41ee04
cmp dword [ebp - 0x1c], 0x103
jne 0x41ed57
call fcn.004412d0
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
test eax, eax
jbe 0x41ed48
push 0xffffffffffffffff
push 0x50f493
push 0x50f493
lea ecx, [ebp - 0x68]
push ecx
push 0x35
lea edx, [ebp - 0x4c]
push 0x4d
push edx
mov byte [ebp - 0x1541], 1
mov byte [ebp - 0x4c], 0x63
mov byte [ebp - 0x4b], 0x64
mov byte [ebp - 0x4a], bl
mov byte [ebp - 0x49], bl
mov byte [ebp - 0x48], bl
mov byte [ebp - 0x47], 0x64
mov byte [ebp - 0x46], 0
mov byte [ebp - 0x68], 0x43
mov byte [ebp - 0x67], 0x68
mov byte [ebp - 0x66], 0x65
mov byte [ebp - 0x65], 0x63
mov byte [ebp - 0x64], 0x6b
mov byte [ebp - 0x63], 0x20
mov byte [ebp - 0x62], 0x54
mov byte [ebp - 0x61], 0x68
mov byte [ebp - 0x60], 0x72
mov byte [ebp - 0x5f], 0x65
mov byte [ebp - 0x5e], 0x61
mov byte [ebp - 0x5d], 0x64
mov byte [ebp - 0x5c], 0x20
mov byte [ebp - 0x5b], 0x53
mov byte [ebp - 0x5a], 0x75
mov byte [ebp - 0x59], bl
mov byte [ebp - 0x58], 0x70
mov byte [ebp - 0x57], 0x65
mov byte [ebp - 0x56], 0x6e
mov byte [ebp - 0x55], 0x64
mov byte [ebp - 0x54], 0
call fcn.004097a0
add esp, 0x1c
call fcn.00414b20
call fcn.004412d0
mov eax, dword [eax]
push eax
call edi
test eax, eax
jne 0x41ed35
jmp 0x41ef06
call fcn.004412d0
mov ecx, dword [eax]
push ecx
call edi
jmp 0x41ef06
push 0xffffffffffffffff
push 0x50f493
push 0x50f493
lea edx, [ebp - 0x6c]
push edx
push 0x36
push 0x4d
lea eax, [ebp - 0x38]
mov byte [ebp - 0x1541], 1
mov byte [ebp - 0x38], 0x63
mov byte [ebp - 0x37], 0x64
mov byte [ebp - 0x36], bl
mov byte [ebp - 0x35], bl
mov byte [ebp - 0x34], bl
mov byte [ebp - 0x33], 0x64
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x6c], 0x43
mov byte [ebp - 0x6b], 0x68
mov byte [ebp - 0x6a], 0x65
mov byte [ebp - 0x69], 0x63
mov byte [ebp - 0x68], 0x6b
mov byte [ebp - 0x67], 0x20
mov byte [ebp - 0x66], 0x54
mov byte [ebp - 0x65], 0x68
mov byte [ebp - 0x64], 0x72
mov byte [ebp - 0x63], 0x65
mov byte [ebp - 0x62], 0x61
mov byte [ebp - 0x61], 0x64
mov byte [ebp - 0x60], 0x20
mov byte [ebp - 0x5f], 0x53
mov byte [ebp - 0x5e], 0x74
mov byte [ebp - 0x5d], 0x6f
mov byte [ebp - 0x5c], 0x70
mov byte [ebp - 0x5b], 0x20
mov byte [ebp - 0x5a], 0x6f
mov byte [ebp - 0x59], 0x72
mov byte [ebp - 0x58], 0x20
mov byte [ebp - 0x57], 0x43
mov byte [ebp - 0x56], 0x61
mov byte [ebp - 0x55], 0x6e
mov byte [ebp - 0x54], 0x63
mov byte [ebp - 0x53], 0x65
mov byte [ebp - 0x52], 0x6c
mov byte [ebp - 0x51], 0
push eax
jmp 0x41eef9
push 0xffffffffffffffff
push 0x50f493
push 0x50f493
lea ecx, [ebp - 0x90]
push ecx
push 0x37
push 0x4d
lea edx, [ebp - 0x24]
mov byte [ebp - 0x1541], 1
mov byte [ebp - 0x24], 0x63
mov byte [ebp - 0x23], 0x64
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], 0x64
mov byte [ebp - 0x1e], 0
mov byte [ebp - 0x90], 0x43
mov byte [ebp - 0x8f], 0x68
mov byte [ebp - 0x8e], 0x65
mov byte [ebp - 0x8d], 0x63
mov byte [ebp - 0x8c], 0x6b
mov byte [ebp - 0x8b], 0x20
mov byte [ebp - 0x8a], 0x54
mov byte [ebp - 0x89], 0x68
mov byte [ebp - 0x88], 0x72
mov byte [ebp - 0x87], 0x65
mov byte [ebp - 0x86], 0x61
mov byte [ebp - 0x85], 0x64
mov byte [ebp - 0x84], 0x20
mov byte [ebp - 0x83], 0x4d
mov byte [ebp - 0x82], 0x69
mov byte [ebp - 0x81], bl
mov byte [ebp - 0x80], bl
mov byte [ebp - 0x7f], 0x69
mov byte [ebp - 0x7e], 0x6e
mov byte [ebp - 0x7d], 0x67
mov byte [ebp - 0x7c], 0x20
mov byte [ebp - 0x7b], 0x6f
mov byte [ebp - 0x7a], 0x72
mov byte [ebp - 0x79], 0x20
mov byte [ebp - 0x78], 0x4e
mov byte [ebp - 0x77], 0x6f
mov byte [ebp - 0x76], 0x74
mov byte [ebp - 0x75], 0x20
mov byte [ebp - 0x74], 0x43
mov byte [ebp - 0x73], 0x72
mov byte [ebp - 0x72], 0x65
mov byte [ebp - 0x71], 0x61
mov byte [ebp - 0x70], 0x74
mov byte [ebp - 0x6f], 0x65
mov byte [ebp - 0x6e], 0
push edx
call fcn.004097a0
add esp, 0x1c
call fcn.00414b20
inc esi
cmp esi, dword [ebp - 0x1580]
jb 0x41ec60
push 0x103
lea eax, [ebp - 0xf23]
push 0
push eax
mov byte [ebp - 0xe8], 0x6b
mov byte [ebp - 0xe7], 0x65
mov byte [ebp - 0xe6], 0x72
mov byte [ebp - 0xe5], 0x6e
mov byte [ebp - 0xe4], 0x65
mov byte [ebp - 0xe3], 0x6c
mov byte [ebp - 0xe2], 0x33
mov byte [ebp - 0xe1], 0x32
mov byte [ebp - 0xe0], 0x2e
mov byte [ebp - 0xdf], 0x64
mov byte [ebp - 0xde], 0x6c
mov byte [ebp - 0xdd], 0x6c
mov byte [ebp - 0xdc], 0
mov byte [ebp - 0xf24], 0
call fcn.00473d40
add esp, 0xc
lea ecx, [ebp - 0x158]
push ecx
lea edx, [ebp - 0xe8]
push edx
mov byte [ebp - 0x158], 0x47
mov byte [ebp - 0x157], 0x65
mov byte [ebp - 0x156], 0x74
mov byte [ebp - 0x155], 0x57
mov byte [ebp - 0x154], 0x69
mov byte [ebp - 0x153], 0x6e
mov byte [ebp - 0x152], 0x64
mov byte [ebp - 0x151], 0x6f
mov byte [ebp - 0x150], 0x77
mov byte [ebp - 0x14f], bl
mov byte [ebp - 0x14e], 0x44
mov byte [ebp - 0x14d], 0x69
mov byte [ebp - 0x14c], 0x72
mov byte [ebp - 0x14b], 0x65
mov byte [ebp - 0x14a], 0x63
mov byte [ebp - 0x149], 0x74
mov byte [ebp - 0x148], 0x6f
mov byte [ebp - 0x147], 0x72
mov byte [ebp - 0x146], 0x79
mov byte [ebp - 0x145], 0x41
mov byte [ebp - 0x144], 0
mov byte [ebp - 0xc8], 0x5c
mov byte [ebp - 0xc7], 0x79
mov byte [ebp - 0xc6], 0x78
mov byte [ebp - 0xc5], 0x62
mov byte [ebp - 0xc4], bl
mov byte [ebp - 0xc3], 0x71
mov byte [ebp - 0xc2], 0x2e
mov byte [ebp - 0xc1], 0x69
mov byte [ebp - 0xc0], 0x6e
mov byte [ebp - 0xbf], 0x69
mov byte [ebp - 0xbe], 0
call fcn.00486d10
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x41f4cf
push 0x104
lea ecx, [ebp - 0xf24]
push ecx
call eax
test eax, eax
jbe 0x41f4cf
push 0x103
lea edx, [ebp - 0x5cb]
push 0
push edx
mov byte [ebp - 0x5cc], 0
call fcn.00473d40
add esp, 0xc
lea eax, [ebp - 0xf24]
push eax
lea ecx, [ebp - 0x5cc]
push 0x104
push ecx
call fcn.004718bb
add esp, 0xc
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0x5cc]
push 0x104
push eax
call fcn.004735e8
add esp, 0xc
lea eax, [ebp - 0x5cc]
call fcn.004064f0
test al, al
je 0x41f4cf
lea ecx, [ebp - 0x5cc]
push ecx
call fcn.004721a6
mov edx, 0x61
mov word [ebp - 0x4b4], dx
mov eax, 0x78
mov word [ebp - 0x4b2], ax
mov ecx, 0x63
mov word [ebp - 0x4b0], cx
mov edx, 0x76
mov word [ebp - 0x4ae], dx
mov eax, 0x6a
mov word [ebp - 0x4ac], ax
mov ecx, 0x32
mov word [ebp - 0x4aa], cx
mov edx, 0x33
mov word [ebp - 0x4a8], dx
mov eax, 0x34
mov word [ebp - 0x4a6], ax
mov ecx, 0x38
mov word [ebp - 0x4a4], cx
mov edx, 0x30
mov word [ebp - 0x4a2], dx
mov eax, 0x39
mov word [ebp - 0x4a0], ax
mov ecx, ebx
mov word [ebp - 0x49e], cx
mov ecx, 0x40
mov word [ebp - 0x498], cx
mov edx, 0x64
mov word [ebp - 0x49c], dx
mov edx, ecx
mov eax, 0x66
mov word [ebp - 0x49a], ax
mov eax, ecx
mov word [ebp - 0x496], dx
mov word [ebp - 0x494], ax
mov ecx, 0x31
mov eax, ecx
mov word [ebp - 0x492], cx
mov edx, 0x32
mov word [ebp - 0x490], dx
mov edx, eax
mov ecx, 0x33
mov word [ebp - 0x48c], cx
mov word [ebp - 0x48e], ax
mov word [ebp - 0x48a], dx
mov ecx, ebx
mov word [ebp - 0x486], cx
mov eax, 0x6b
mov word [ebp - 0x488], ax
mov edx, 0x64
mov word [ebp - 0x484], dx
mov word [ebp - 0x482], ax
mov ecx, 0x6c
mov word [ebp - 0x480], cx
mov edx, 0x78
mov eax, 0x63
mov ecx, 0x76
mov word [ebp - 0x47e], dx
mov word [ebp - 0x47c], ax
mov word [ebp - 0x47a], cx
mov edx, 0x6b
mov eax, 0x3b
mov ecx, 0x6c
mov word [ebp - 0x478], dx
mov word [ebp - 0x476], ax
mov word [ebp - 0x474], cx
mov edx, ebx
mov eax, 0x64
mov ecx, 0x66
add esp, 4
mov word [ebp - 0x472], dx
mov word [ebp - 0x470], ax
mov word [ebp - 0x46e], cx
mov edx, 0x6b
xor eax, eax
mov ecx, 0x23
mov word [ebp - 0x46c], dx
mov word [ebp - 0x46a], ax
mov word [ebp - 0x1bc], cx
mov edx, 0x7e
mov eax, edx
mov ecx, eax
mov word [ebp - 0x1b8], ax
mov word [ebp - 0x1ba], dx
mov word [ebp - 0x1b4], dx
mov word [ebp - 0x1b6], cx
mov eax, 0x58
mov word [ebp - 0x1b2], ax
mov edx, 0x67
mov word [ebp - 0x1ae], dx
mov ecx, 0x69
mov word [ebp - 0x1b0], cx
mov eax, 0x6e
mov word [ebp - 0x1ac], ax
mov edx, 0x6f
mov word [ebp - 0x1a8], dx
mov ecx, 0x63
mov word [ebp - 0x1aa], cx
mov eax, 0x64
mov word [ebp - 0x1a6], ax
mov eax, 0x7e
mov edx, 0x33
mov word [ebp - 0x1a2], dx
mov edx, eax
mov ecx, 0x65
mov word [ebp - 0x1a4], cx
mov ecx, eax
mov word [ebp - 0x1a0], ax
mov word [ebp - 0x19c], dx
mov word [ebp - 0x19a], ax
mov word [ebp - 0x19e], cx
mov word [ebp - 0x198], cx
mov edx, 0x41
mov word [ebp - 0x196], dx
mov eax, 0x6c
mov word [ebp - 0x194], ax
mov ecx, 0x65
mov word [ebp - 0x192], cx
mov ecx, 0x7e
mov edx, 0x72
mov eax, 0x74
mov word [ebp - 0x190], dx
mov word [ebp - 0x18e], ax
mov edx, ecx
mov eax, ecx
mov word [ebp - 0x18a], dx
mov word [ebp - 0x188], ax
mov word [ebp - 0x184], dx
mov word [ebp - 0x182], ax
mov edx, 0x23
xor eax, eax
push 0x600
mov word [ebp - 0x18c], cx
mov word [ebp - 0x186], cx
mov word [ebp - 0x180], cx
mov word [ebp - 0x17e], dx
mov word [ebp - 0x17c], ax
call fcn.004509b2
mov esi, eax
add esp, 4
test esi, esi
je 0x41f464
lea ecx, [ebp - 0x4b4]
push ecx
mov edx, esi
call fcn.00405390
lea edx, [ebp - 0x1bc]
add esp, 4
push edx
lea edx, [esi + 0x400]
call fcn.004053b0
add esp, 4
push 0
push 0
push esi
push 0x4011e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call edi
push 0xffffffffffffffff
push 0x50f493
push 0x50f493
lea eax, [ebp - 0x3c]
push eax
push 0x39
lea ecx, [ebp - 0x24]
push 0x4d
push ecx
mov byte [ebp - 0x24], 0x63
mov byte [ebp - 0x23], 0x64
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], 0x64
mov byte [ebp - 0x1e], 0
mov byte [ebp - 0x3c], bl
mov byte [ebp - 0x3b], 0x70
mov byte [ebp - 0x3a], 0x65
mov byte [ebp - 0x39], 0x65
mov byte [ebp - 0x38], 0x64
mov byte [ebp - 0x37], 0x20
mov byte [ebp - 0x36], 0x68
mov byte [ebp - 0x35], 0x61
mov byte [ebp - 0x34], 0x63
mov byte [ebp - 0x33], 0x6b
mov byte [ebp - 0x32], 0
call fcn.004097a0
add esp, 0x1c
call fcn.00414b20
jmp 0x41f4dc
cmp byte [ebp - 0x1541], 1
jne 0x41f54a
mov edx, dword [ebp - 0x1560]
push edx
lea eax, [ebp - 0x70c]
push eax
call fcn.00472173
xor esi, esi
push esi
push esi
call fcn.0044a860
mov ecx, dword [ebp - 0x1554]
add esp, 0x10
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [ebp - 0x1558], esi
je 0x41e4fc
mov eax, dword [ebp - 0x1554]
cmp eax, esi
je 0x41f528
push eax
call edi
mov dword [ebp - 0x1554], esi
mov eax, dword [ebp - 0x1550]
cmp eax, esi
je 0x41e4fc
push eax
call edi
mov dword [ebp - 0x1550], esi
mov esi, dword [ebp - 0x1540]
jmp 0x41c181
xor esi, esi
cmp dword [ebp - 0x1558], esi
je 0x42014d
jmp 0x41f560
mov edx, dword [ebp - 0x1560]
push edx
lea eax, [ebp - 0x70c]
push eax
call fcn.00472173
mov edi, eax
add esp, 8
test edi, edi
je 0x41f5e2
inc esi
cmp esi, 0x64
jl 0x41f560
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp edi, 0xffffffff
je 0x41f5cb
test esi, esi
je 0x41f5e2
push 0
push 0
call fcn.0044a860
mov ecx, dword [ebp - 0x1554]
add esp, 8
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push edi
mov edi, 0x511bc8
call fcn.00438c20
mov esi, dword [ebp - 0x1540]
add esp, 4
jmp 0x41c181
test esi, esi
je 0x41f5e2
cmp esi, 0x20
jne 0x41fdc1
mov dword [ebp - 0x1570], 1
lea ecx, [ebp - 0x1564]
call fcn.00407870
lea eax, [ebp - 0x4c4]
push eax
mov dword [ebp - 4], 0
call fcn.00491f20
mov ecx, dword [0x52a930]
add esp, 4
push 7
call fcn.0044a600
mov ecx, eax
xor eax, eax
call fcn.00448e20
mov ecx, dword [0x52a930]
add esp, 4
push 0x10
call fcn.0044a600
add eax, 8
push eax
lea ecx, [ebp - 0x4c4]
push ecx
call fcn.00491cf0
mov ecx, dword [0x52a930]
add esp, 0xc
push 0x10
call fcn.0044a600
mov edi, eax
add edi, 8
call fcn.0044a5c0
mov ecx, dword [0x52a930]
add esp, 4
push 0x10
call fcn.0044a600
add eax, 8
push eax
lea edx, [ebp - 0x4c4]
push edx
call fcn.00491cf0
mov ecx, dword [0x52a930]
add esp, 0xc
push 0x10
call fcn.0044a600
mov edi, eax
add edi, 8
call fcn.0044a5c0
mov ecx, dword [0x52a930]
add esp, 4
push 0
call fcn.0044a600
mov ecx, 7
call fcn.00448e70
add esp, 4
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x64]
push ecx
call fcn.00491dd0
mov edx, 0x25
mov word [ebp - 0x28], dx
mov ecx, 0x32
mov eax, 0x30
mov word [ebp - 0x24], cx
mov edx, 0x58
mov word [ebp - 0x26], ax
mov word [ebp - 0x22], dx
xor eax, eax
mov ecx, 0x25
mov edx, 0x30
mov word [ebp - 0x3c], cx
add esp, 8
mov ecx, 0x58
mov word [ebp - 0x20], ax
mov word [ebp - 0x3a], dx
mov eax, 0x38
xor edx, edx
mov word [ebp - 0x36], cx
mov word [ebp - 0x38], ax
mov word [ebp - 0x34], dx
push 0x5114dc
lea ecx, [ebp - 0x1564]
call fcn.0040b250
lea eax, [ebp - 0x64]
dec eax
mov esi, 1
mov dword [ebp - 0x1558], eax
mov eax, dword [ebp - 0x1558]
movzx ecx, byte [eax + esi]
push ecx
lea edx, [ebp - 0x28]
push edx
lea edi, [ebp - 0x1564]
call fcn.004073f0
mov eax, dword [ebp - 0x1558]
mov ecx, esi
add esp, 8
and ecx, reloc.WS2_32.dll_closesocket
mov byte [eax + esi], 0
jns 0x41f766
dec ecx
or ecx, 0xfffffffc
inc ecx
jne 0x41f780
lea edx, [esi - 1]
cmp edx, 0x13
jge 0x41f780
push 0x511c28
lea ecx, [ebp - 0x1564]
call fcn.0040b250
mov eax, esi
cdq
mov ecx, 0xc
idiv ecx
test edx, edx
jne 0x41f7c0
lea edx, [esi - 1]
cmp edx, 0x13
jge 0x41f7c0
mov eax, dword [ebp - 0x154c]
xor eax, 0x5b429d65
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edi, [ebp - 0x1564]
call fcn.004073f0
add esp, 8
push 0x511c28
mov ecx, edi
call fcn.0040b250
inc esi
lea edx, [esi - 1]
cmp edx, 0x14
jl 0x41f730
push 0x5114ec
lea ecx, [ebp - 0x1564]
call fcn.0040b250
lea ecx, [ebp - 0x1564]
call fcn.0040b290
push eax
call fcn.0044a750
add esp, 4
test eax, eax
je 0x41ff37
call fcn.0044a790
mov ecx, dword [ebp - 0x1578]
mov esi, eax
mov dword [esi + 0x4002a4], 0x134da7e
call fcn.0044a600
mov edi, eax
mov edx, dword [edi + 0xb8]
push esi
mov ecx, 0x4c
call fcn.004471d0
add esp, 4
cmp byte [0x52ab6e], 1
jne 0x41f844
push esi
mov ecx, 1
xor edx, edx
call fcn.004471d0
add esp, 4
mov eax, dword [ebp - 0x1568]
push 0x52a7a0
mov dword [esi + 0x4c], eax
mov dword [esi + 0x50], 0xffffffff
mov ecx, dword [ebp - 0x1548]
lea edx, [esi + 0x58]
push 0x20
push edx
mov dword [esi + 0x54], ecx
call fcn.0046ec66
mov ecx, dword [0x52ab84]
add esp, 0xc
test ecx, ecx
je 0x41f894
lea eax, [esi + 0x9c]
push eax
mov edx, 0x52ab88
mov dword [esi + 0x98], ecx
call fcn.004471d0
add esp, 4
mov ecx, dword [0x52ad88]
test ecx, ecx
je 0x41f8b9
lea edx, [esi + 0x2a0]
push edx
mov edx, dword [0x52ad8c]
mov dword [esi + 0x29c], ecx
call fcn.004471d0
add esp, 4
mov eax, dword [edi + 0x2c]
lea ecx, [esi + 0x4002ac]
push ecx
lea edx, [edi + 0x30]
mov ecx, 0x80
mov dword [esi + 0x4002a8], eax
call fcn.004471d0
lea edx, [esi + 0x40032c]
add esp, 4
push edx
mov edx, dword [edi + 0xb4]
mov ecx, 0x1d9
call fcn.004471d0
mov ecx, dword [0x52ad90]
add esp, 4
call fcn.0044a600
lea ecx, [esi + 0x400505]
push ecx
mov ecx, 0x14
mov edx, eax
call fcn.004471d0
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [esi + 0x400519], eax
mov eax, dword [ebp - 0x1588]
mov dl, byte [eax + 0xa1f]
mov byte [esi + 0x40051d], dl
lea edx, [eax + 0xa20]
lea eax, [esi + 0x40051e]
push eax
mov ecx, 0x100
call fcn.004471d0
mov eax, dword [ebp - 0x1588]
mov cl, byte [eax + 0xb20]
lea edx, [eax + 0xb21]
lea eax, [esi + 0x40061f]
add esp, 4
mov byte [esi + 0x40061e], cl
push eax
mov ecx, 0x100
call fcn.004471d0
add esp, 4
mov dword [esi + 0x4002a0], 0
cmp dword [edi + 8], 4
jne 0x41fa7e
mov ecx, 0x57
mov word [ebp - 0x8c], cx
mov edx, 0x69
mov word [ebp - 0x8a], dx
mov eax, 0x6e
mov word [ebp - 0x88], ax
mov ecx, 0x44
mov word [ebp - 0x86], cx
mov edx, 0x6f
mov word [ebp - 0x84], dx
mov eax, ebx
mov word [ebp - 0x82], ax
mov ecx, 0x47
mov word [ebp - 0x80], cx
mov edx, 0x64
mov eax, 0x69
mov word [ebp - 0x7e], dx
mov word [ebp - 0x7c], ax
mov ecx, 0x5f
mov word [ebp - 0x7a], cx
mov edx, 0x25
mov eax, 0x30
mov ecx, 0x38
mov word [ebp - 0x78], dx
mov word [ebp - 0x76], ax
mov word [ebp - 0x74], cx
mov edx, 0x58
xor eax, eax
lea ecx, [ebp - 0x1558]
mov word [ebp - 0x72], dx
mov word [ebp - 0x70], ax
call fcn.00407870
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x154c]
xor ecx, 0x2b429d65
push ecx
lea edx, [ebp - 0x8c]
push edx
lea edi, [ebp - 0x1558]
call fcn.004073f0
add esp, 8
mov ecx, edi
call fcn.0040b290
push eax
push 0x80
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov ecx, edi
mov dword [0x52adac], eax
call fcn.00407440
mov ecx, edi
call fcn.00406900
mov eax, dword [ebp - 0x1550]
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp byte [0x52ab6e], 0
je 0x41fab5
push esi
mov ecx, 1
xor edx, edx
call fcn.004471d0
add esp, 4
mov dword [esi + 0x50], 0xffffffff
mov dword [esi + 0x4002a4], 0x42e576f7
xor edi, edi
cmp dword [esi + 0x50], 0xffffffff
jne 0x41fadd
cmp dword [esi + 0x4002a0], 0
jne 0x41fadd
cmp edi, 0xbb8
jge 0x41fadd
push 1
inc edi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0x50], 0xffffffff
je 0x41fabd
push 0xc6
xor edi, edi
lea edx, [ebp - 0x58a]
xor ecx, ecx
push edi
push edx
mov word [ebp - 0x58c], cx
call fcn.00473d40
add esp, 0xc
push 0x3ff
lea eax, [ebp - 0xe1b]
push edi
push eax
mov byte [ebp - 0xe1c], 0
call fcn.00473d40
mov edx, 0x69
mov ecx, 0x57
mov eax, 0x6e
mov word [ebp - 0xa8], cx
mov word [ebp - 0xa6], dx
mov word [ebp - 0xa4], ax
mov word [ebp - 0xa0], dx
mov ecx, 0x4c
mov eax, 0x63
mov edx, 0x6e
add esp, 0xc
mov word [ebp - 0xa2], cx
mov ecx, 0x65
mov word [ebp - 0x9e], ax
mov word [ebp - 0x9a], dx
mov eax, ebx
xor edx, edx
mov byte [ebp - 0x50], 0x57
mov byte [ebp - 0x4f], 0x69
mov byte [ebp - 0x4e], 0x6e
mov byte [ebp - 0x4d], 0x4c
mov byte [ebp - 0x4c], 0x69
mov byte [ebp - 0x4b], 0x63
mov byte [ebp - 0x4a], 0x65
mov byte [ebp - 0x49], 0x6e
mov byte [ebp - 0x48], bl
mov byte [ebp - 0x47], 0x65
mov byte [ebp - 0x46], 0
mov word [ebp - 0x9c], cx
mov word [ebp - 0x98], ax
mov word [ebp - 0x96], cx
mov word [ebp - 0x94], dx
mov byte [ebp - 0x1a8], 0x52
mov byte [ebp - 0x1a7], 0x75
mov byte [ebp - 0x1a6], 0x6e
mov byte [ebp - 0x1a5], 0x54
mov byte [ebp - 0x1a4], 0x69
mov byte [ebp - 0x1a3], 0x6d
mov byte [ebp - 0x1a2], cl
mov byte [ebp - 0x1a1], 0x20
mov byte [ebp - 0x1a0], 0x45
mov byte [ebp - 0x19f], 0x72
mov byte [ebp - 0x19e], 0x72
mov byte [ebp - 0x19d], 0x6f
mov byte [ebp - 0x19c], 0x72
mov byte [ebp - 0x19b], 0x2e
mov byte [ebp - 0x19a], 0x20
mov byte [ebp - 0x199], 0x50
mov byte [ebp - 0x198], 0x6c
mov byte [ebp - 0x197], cl
mov byte [ebp - 0x196], 0x61
mov byte [ebp - 0x195], bl
mov byte [ebp - 0x194], cl
mov byte [ebp - 0x193], 0x2c
mov byte [ebp - 0x192], 0x20
mov byte [ebp - 0x191], 0x72
mov byte [ebp - 0x190], cl
mov byte [ebp - 0x18f], 0x2d
mov byte [ebp - 0x18e], 0x69
mov byte [ebp - 0x18d], 0x6e
mov byte [ebp - 0x18c], bl
mov byte [ebp - 0x18b], 0x74
mov byte [ebp - 0x18a], 0x61
mov byte [ebp - 0x189], 0x6c
mov byte [ebp - 0x188], 0x6c
mov byte [ebp - 0x187], 0x20
mov byte [ebp - 0x186], 0x74
mov byte [ebp - 0x185], 0x68
mov byte [ebp - 0x184], 0x69
mov byte [ebp - 0x183], bl
mov byte [ebp - 0x182], 0x20
mov byte [ebp - 0x181], 0x61
mov byte [ebp - 0x180], 0x70
mov byte [ebp - 0x17f], 0x70
mov byte [ebp - 0x17e], 0x6c
mov byte [ebp - 0x17d], 0x69
mov byte [ebp - 0x17c], 0x63
mov byte [ebp - 0x17b], 0x61
mov byte [ebp - 0x17a], 0x74
mov byte [ebp - 0x179], 0x69
mov byte [ebp - 0x178], 0x6f
mov byte [ebp - 0x177], 0x6e
mov byte [ebp - 0x176], 0x2e
mov byte [ebp - 0x175], dl
mov ebx, dword [esi + 0x50]
mov esi, dword [esi + 0x4002a0]
cmp ebx, 0x4d236ad
ja 0x41fdf6
je 0x41fd44
cmp ebx, edi
jbe 0x41fdff
cmp ebx, 2
ja 0x41fdff
mov byte [ebp - 0x1559], 1
cmp esi, 0x134da7e
je 0x41ff8c
cmp ebx, 0x4d236ad
jne 0x41ff8c
mov eax, dword [ebp - 0x1554]
xor esi, esi
push esi
push eax
mov byte [ebp - 0x1559], dl
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, esi
je 0x41fd90
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], esi
mov eax, dword [ebp - 0x1550]
cmp eax, esi
je 0x41fda7
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], esi
lea ecx, [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0xe1c]
call fcn.004448d0
add esp, 4
jmp 0x41ff1b
push 0
push 0
call fcn.0044a860
mov edx, dword [ebp - 0x1554]
add esp, 8
push 0
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0xffffffffffffffff
mov edi, 0x511bf8
call fcn.00438c20
mov esi, dword [ebp - 0x1540]
add esp, 4
jmp 0x41c181
cmp ebx, 0xffffffff
je 0x41fe71
mov edx, dword [ebp - 0x1554]
push edi
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, edi
je 0x41fe24
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], edi
mov eax, dword [ebp - 0x1550]
cmp eax, edi
je 0x41fe3b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], edi
push ebx
push str.File_corrupted_._This_application_has_been_manipulated_and_maybe_r_nits_infected_by_a_Virus_or_cracked._This_application_wont_work_anymore._r_nError:_08X
lea edx, [ebp - 0x58c]
call fcn.004448f0
mov edx, dword [0x52a928]
add esp, 8
push 0x10
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x58c]
push ecx
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x41ff8c
cmp word [ebp - 0xa1c], di
je 0x41ff8c
cmp word [ebp - 0xa1a], dx
je 0x41ff8c
mov eax, dword [ebp - 0x1554]
xor esi, esi
push esi
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, esi
je 0x41feb2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], esi
mov eax, dword [ebp - 0x1550]
cmp eax, esi
je 0x41fec9
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], esi
mov edi, dword [ebp - 0x156c]
cmp edi, esi
jne 0x41fed7
xor eax, eax
jmp 0x41ff00
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x41feea
xor eax, eax
jmp 0x41ff00
lea esi, [eax + eax]
mov eax, esi
call fcn.00474ed0
mov eax, esp
push 3
push esi
push edi
push eax
call fcn.00446ad0
lea ecx, [ebp - 0x814]
push ecx
push eax
push str.Cannot_find__s._Please__re_install_this_application._r_nMissing_file_path:_s
lea edx, [ebp - 0xe1c]
call fcn.004448d0
add esp, 0xc
mov ecx, dword [0x52a928]
push 0x10
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0xe1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x41ff8c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebp - 0x1554]
xor ebx, ebx
push ebx
push edx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 2
mov edi, 0x511db0
call fcn.00438c20
mov eax, dword [ebp - 0x1554]
add esp, 4
cmp eax, ebx
je 0x41ff75
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x41ff8c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
call fcn.0044a7c0
lea ecx, [ebp - 0x1564]
call fcn.00407440
lea ecx, [ebp - 0x1564]
mov dword [ebp - 4], 0xffffffff
call fcn.00406900
cmp byte [ebp - 0x1559], 0
je 0x4201c1
mov edi, dword [sym.imp.USER32.dll_EnumThreadWindows]
mov eax, 0x69
mov word [ebp - 0xa6], ax
mov edx, 0x6c
mov word [ebp - 0xa8], dx
mov eax, 0x61
mov word [ebp - 0xa0], ax
mov edx, 0x65
mov word [ebp - 0xa2], dx
mov word [ebp - 0x9c], dx
mov eax, 0x2e
mov word [ebp - 0x9a], ax
mov ecx, 0x6e
mov word [ebp - 0xa4], cx
mov edx, 0x66
mov eax, 0x67
mov ecx, 0x67
mov word [ebp - 0x96], dx
mov word [ebp - 0x94], ax
xor eax, eax
mov word [ebp - 0x9e], cx
lea edx, [ebp - 0x1584]
push edx
mov ecx, 0x63
mov dword [ebp - 0x1584], eax
mov dword [ebp - 0x1580], eax
mov eax, dword [ebp - 0x1548]
mov word [ebp - 0x98], cx
push 0x414600
xor ecx, ecx
push eax
mov word [ebp - 0x92], cx
xor esi, esi
call edi
test eax, eax
je 0x42009e
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, 0x1388
jge 0x42009e
push 1
inc esi
call ebx
mov edx, dword [ebp - 0x1548]
lea ecx, [ebp - 0x1584]
push ecx
push 0x414600
push edx
call edi
test eax, eax
jne 0x420078
mov eax, dword [ebp - 0x1584]
xor ebx, ebx
cmp eax, ebx
je 0x42026e
push ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [ebp - 0x1548]
je 0x4201c1
cmp dword [ebp - 0x1580], 1
je 0x4201c1
mov ecx, dword [ebp - 0x1554]
lea eax, [ebp - 0x156c]
push eax
push ecx
mov dword [ebp - 0x156c], ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x420219
mov edx, dword [ebp - 0x1554]
push ebx
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xc
mov esi, eax
mov edi, 0x511e24
call fcn.00438c20
mov eax, dword [ebp - 0x1554]
add esp, 4
cmp eax, ebx
je 0x42012d
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x4201c3
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
jmp 0x4201c3
mov eax, dword [ebp - 0x1560]
push eax
lea ecx, [ebp - 0x70c]
push ecx
call fcn.00472173
mov edi, eax
add esp, 8
test edi, edi
je 0x4201ac
inc esi
cmp esi, 0x64
jl 0x42014d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp edi, 0xffffffff
je 0x420188
test esi, esi
je 0x4201ac
push edi
mov edi, 0x511dc4
jmp 0x4201a4
test esi, esi
je 0x4201ac
cmp esi, 0x20
jne 0x42019d
mov dword [ebp - 0x1570], 1
jmp 0x4201ac
push 0xffffffffffffffff
mov edi, 0x511df4
call fcn.00438c20
add esp, 4
mov esi, dword [ebp - 0x1564]
push 1
mov edi, 0x511db0
call fcn.00438c20
add esp, 4
xor ebx, ebx
cmp dword [ebp - 0x1570], ebx
je 0x420330
mov ebx, dword [ebp - 0x1560]
xor edi, edi
lea eax, [ebp - 0x70c]
push ebx
push eax
call fcn.00472173
mov esi, eax
add esp, 8
test esi, esi
je 0x420330
inc edi
cmp edi, 0x64
jl 0x4201d7
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, 0xffffffff
je 0x42030d
test eax, eax
je 0x420330
push esi
mov edi, 0x511e78
jmp 0x420326
cmp dword [ebp - 0x156c], 0x103
jne 0x420252
mov esi, dword [ebp - 0x1540]
mov eax, dword [esi + 0x278]
cmp eax, 3
jl 0x420283
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 2
mov esi, eax
mov edi, 0x511db0
call fcn.00438c20
add esp, 4
jmp 0x4201c3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xd
mov esi, eax
mov edi, 0x511e40
call fcn.00438c20
add esp, 4
jmp 0x4201c3
mov esi, dword [ebp - 0x1540]
mov eax, dword [esi + 0x278]
cmp eax, 3
jge 0x4202f1
inc eax
mov dword [esi + 0x278], eax
mov eax, dword [ebp - 0x1554]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, ebx
je 0x4202af
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x4202c6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
cmp dword [esi + 0x278], 2
jne 0x4202de
lea ecx, [ebp - 0xa8]
push ecx
call fcn.004721d6
add esp, 4
mov edx, dword [ebp - 0x1578]
push edx
mov ecx, esi
call fcn.0041c110
jmp 0x4201c3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xb
mov esi, eax
mov edi, 0x511e60
call fcn.00438c20
add esp, 4
jmp 0x4201c3
test eax, eax
je 0x420330
push 0xffffffffffffffff
cmp eax, 0x20
jne 0x420321
mov esi, eax
mov edi, 0x511ea8
jmp 0x420328
mov edi, 0x511ed8
mov esi, eax
call fcn.00438c20
add esp, 4
xor esi, esi
cmp byte [0x52ab6e], 0
je 0x420386
mov ecx, dword [ebp - 0x1554]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, esi
je 0x420360
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], esi
mov eax, dword [ebp - 0x1550]
cmp eax, esi
je 0x41e4fc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], esi
mov esi, dword [ebp - 0x1540]
jmp 0x41c181
mov eax, dword [ebp - 0x1554]
cmp eax, esi
je 0x42039d
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], esi
mov eax, dword [ebp - 0x1550]
cmp eax, esi
je 0x4203b4
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], esi
push esi
push esi
call fcn.0044a860
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x41c181
mov edx, dword [ebp - 0x1560]
push edx
lea eax, [ebp - 0x70c]
push eax
call fcn.00472173
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x41c181
mov ecx, dword [edi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x420419
mov edx, dword [edi + 0x20]
push edx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x42040d
mov ecx, edi
call fcn.0045c66e
mov ecx, edi
call fcn.00462c0f
jmp 0x41c186
mov eax, edi
call fcn.0042b1f0
jmp 0x41de67