Function at 0x500683
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0x318
mov eax, 0x6711da
call fcn.005b47af
mov esi, ecx
mov dword [ebp - 0x1e4], esi
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x270]
push 1
push eax
mov dword [ebp - 0x1e0], ebx
call fcn.0047058d
mov ecx, eax
call fcn.004d3d37
and dword [ebp - 4], 0
lea eax, [ebp - 0x204]
push eax
call fcn.0040ff0c
mov ecx, eax
call fcn.004cec78
lea eax, [ebp - 0x2a0]
mov byte [ebp - 4], 1
push eax
call fcn.0040ff0c
mov ecx, eax
call fcn.004cffb7
mov eax, dword [ebp - 0x200]
sub eax, dword [ebp - 0x204]
cdq
push 0x30
pop ecx
idiv ecx
push 0x30
mov ecx, eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x26c]
sub eax, dword [ebp - 0x270]
cdq
pop edi
idiv edi
add eax, ecx
lea ecx, [ebp - 0x204]
push eax
call fcn.004af547
push dword [ebp - 0x26c]
lea eax, [ebp - 0x1d8]
push dword [ebp - 0x270]
lea ecx, [ebp - 0x204]
push dword [ebp - 0x200]
push eax
call fcn.004ad8bf
push 6
lea ecx, [ebp - 0x21c]
call fcn.00539837
push 7
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 3
call fcn.00539837
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 4
push eax
call fcn.0042a82f
mov ecx, eax
call fcn.00476680
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040bd70
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.004fd80c
push eax
mov byte [ebp - 4], 7
lea eax, [ebp - 0x94]
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x1d8], esp
push eax
call fcn.00539672
push str.defaultBrowser
mov ecx, ebx
mov byte [ebp - 4], 9
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.00539a88
xor esi, esi
lea ecx, [ebp - 0x94]
push esi
push 1
call fcn.00409d92
push esi
push 1
lea ecx, [ebp - 0x40]
call fcn.00409de7
push esi
push 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 5
call fcn.00409de7
call fcn.0042a82f
mov ecx, eax
call fcn.004772e3
lea ecx, [ebp - 0x21c]
call fcn.0053a959
call fcn.0042a82f
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x1f0], edi
mov dword [ebp - 0x1d8], eax
cmp edi, eax
je 0x50113c
mov eax, dword [edi + 4]
mov ebx, dword [edi]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x1dc], ebx
test eax, eax
je 0x500856
lock inc dword [eax + 4]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a8], ebx
push esi
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0xa
call fcn.00539837
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xb
push eax
mov ecx, ebx
call fcn.0043f44d
push eax
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0xc
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x1e8], esp
push eax
call fcn.00539672
push 0x690ed8
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0xe
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00539a88
push esi
push 1
lea ecx, [ebp - 0x94]
call fcn.00409d92
push esi
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xb
call fcn.00409de7
lea eax, [ebp - 0x40]
mov ecx, ebx
push eax
call fcn.0047af7c
push eax
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0xf
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x1e8], esp
push eax
call fcn.00539672
push str.version
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x11
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00539a88
push esi
push 1
lea ecx, [ebp - 0x94]
call fcn.00409d92
push esi
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xb
call fcn.00409de7
cmp dword [ebx + 4], 1
jne 0x500997
mov al, byte [ebx + 0x142]
sub esp, 0x18
mov byte [ebp - 0x238], al
mov ecx, esp
mov dword [ebp - 0x1e8], esp
push dword [ebp - 0x238]
call fcn.005398f9
push str.login
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x12
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00539a88
push 6
lea ecx, [ebp - 0x7c]
call fcn.00539837
lea eax, [ebp - 0x2b0]
mov ecx, ebx
push eax
call fcn.0043f3a9
mov ecx, dword [eax]
lea edx, [ebp - 0x27c]
push edx
mov byte [ebp - 4], 0x14
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x2ac]
mov byte [ebp - 4], 0x16
test ecx, ecx
je 0x5009d4
call fcn.00418cb4
mov esi, dword [ebp - 0x27c]
mov ebx, dword [ebp - 0x278]
cmp esi, ebx
je 0x500bc7
mov edi, dword [ebp - 0x1dc]
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1ec], ecx
test eax, eax
je 0x500a07
lock inc dword [eax + 4]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b8], ecx
push 0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x17
call fcn.00539837
mov eax, dword [ebp - 0x1ec]
lea ecx, [ebp - 0x64]
push ecx
mov byte [ebp - 4], 0x18
lea ecx, [eax + 4]
call fcn.0040c8dc
push eax
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x19
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x1a
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push 0x690ed8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1b
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x18
call fcn.00409de7
cmp dword [edi + 4], 5
mov ecx, dword [ebp - 0x1ec]
lea ecx, [ecx + 4]
jne 0x500b2b
lea eax, [ebp - 0x28]
push eax
call fcn.0040c85b
push eax
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x1c
push eax
call fcn.00414c5a
mov ecx, eax
call fcn.004cc74b
push eax
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x1d
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x1e
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push 0x6926a0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1f
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.00409de7
lea ecx, [ebp - 0x28]
jmp 0x500b82
lea eax, [ebp - 0x64]
push eax
call fcn.0040c85b
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x20
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x21
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push 0x6926a0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x22
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00409d92
lea ecx, [ebp - 0x64]
push 0
push 1
mov byte [ebp - 4], 0x18
call fcn.00409de7
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0053a402
lea ecx, [ebp - 0x40]
call fcn.00539a16
mov ecx, dword [ebp - 0x1e8]
mov byte [ebp - 4], 0x16
test ecx, ecx
je 0x500bb6
call fcn.00418cb4
add esi, 8
cmp esi, ebx
jne 0x5009ee
mov edi, dword [ebp - 0x1f0]
sub esp, 0x18
lea eax, [ebp - 0x7c]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539554
push 0x692fc4
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x23
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.00539a88
mov ebx, dword [ebp - 0x1dc]
lea eax, [ebp - 0x324]
push eax
mov ecx, ebx
call fcn.0043f530
xor esi, esi
push esi
push eax
call fcn.004fb51a
pop ecx
pop ecx
mov ecx, dword [ebp - 0x320]
mov byte [ebp - 0x1d1], al
test ecx, ecx
je 0x500c34
call fcn.00418cb4
mov al, byte [ebp - 0x1d1]
test al, al
je 0x500cc4
lea eax, [ebp - 0x31c]
mov ecx, ebx
push eax
call fcn.0043f530
mov ecx, dword [eax]
mov byte [ebp - 4], 0x24
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x318]
test ecx, ecx
je 0x500c63
call fcn.00418cb4
lea eax, [ebp - 0x30c]
mov ecx, ebx
push eax
call fcn.0043f530
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1d0], esp
mov byte [ebp - 4], 0x25
mov al, byte [eax + 0xc]
mov byte [ebp - 0x23c], al
push dword [ebp - 0x23c]
call fcn.005398f9
push str.updateOff
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x26
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.00539a88
mov ecx, dword [ebp - 0x308]
test ecx, ecx
je 0x500cc4
call fcn.00418cb4
lea eax, [ebp - 0x314]
mov ecx, ebx
push eax
call fcn.0043f4a4
push esi
push eax
call fcn.004fb502
pop ecx
pop ecx
mov ecx, dword [ebp - 0x310]
mov byte [ebp - 0x1d1], al
test ecx, ecx
je 0x500cf6
call fcn.00418cb4
mov al, byte [ebp - 0x1d1]
test al, al
je 0x500df7
lea eax, [ebp - 0x304]
mov ecx, ebx
push eax
call fcn.0043f4a4
mov ecx, dword [eax]
lea edx, [ebp - 0x140]
push edx
mov byte [ebp - 4], 0x27
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x300]
mov byte [ebp - 4], 0x29
test ecx, ecx
je 0x500d31
call fcn.00418cb4
cmp dword [ebp - 0x118], 0
je 0x500dec
push esi
lea ecx, [ebp - 0x40]
call fcn.00539837
sub esp, 0x18
mov byte [ebp - 4], 0x2a
lea eax, [ebp - 0x128]
mov dword [ebp - 0x1d0], esp
mov ecx, esp
push eax
call fcn.005396a1
push 0x690ed8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2b
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.00539a88
sub esp, 0x18
lea eax, [ebp - 0x110]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.005396a1
push 0x6938cc
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2c
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.00539a88
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539554
push 0x6a4be4
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x2d
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.00539a88
lea ecx, [ebp - 0x40]
call fcn.00539a16
lea ecx, [ebp - 0x140]
call fcn.00469bbc
lea eax, [ebp - 0x2e4]
mov ecx, ebx
push eax
call fcn.0043f3d2
push esi
push eax
call fcn.004fb4ea
pop ecx
pop ecx
mov ecx, dword [ebp - 0x2e0]
mov byte [ebp - 0x1d1], al
test ecx, ecx
je 0x500e29
call fcn.00418cb4
mov al, byte [ebp - 0x1d1]
test al, al
je 0x500ec7
lea eax, [ebp - 0x2dc]
mov ecx, ebx
push eax
call fcn.0043f3d2
mov ecx, dword [eax]
mov byte [ebp - 4], 0x2e
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x2d8]
test ecx, ecx
je 0x500e58
call fcn.00418cb4
lea eax, [ebp - 0x2c8]
mov ecx, ebx
push eax
call fcn.0043f3d2
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2f
push ecx
mov ecx, dword [eax]
call fcn.0046b861
push 0x30
pop ecx
sub esp, 0x18
mov byte [ebp - 4], cl
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.005396a1
push 0x6a4be8
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x31
call fcn.00539cd8
push 0x30
pop ecx
mov byte [ebp - 4], cl
mov ecx, eax
call fcn.00539a88
push esi
push 1
lea ecx, [ebp - 0x28]
call fcn.00409de7
mov ecx, dword [ebp - 0x2c4]
test ecx, ecx
je 0x500ec7
call fcn.00418cb4
lea eax, [ebp - 0x2c0]
mov ecx, ebx
push eax
call fcn.00476162
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x32
push ecx
mov ecx, dword [eax]
call fcn.004fd972
mov ecx, dword [ebp - 0x2bc]
mov byte [ebp - 4], 0x34
test ecx, ecx
je 0x500efa
call fcn.00418cb4
mov eax, dword [ebp - 0x248]
mov esi, dword [ebp - 0x24c]
sub eax, esi
push 0x50
cdq
pop ecx
idiv ecx
test eax, eax
je 0x501035
push 6
lea ecx, [ebp - 0x94]
call fcn.00539837
mov byte [ebp - 4], 0x35
cmp esi, dword [ebp - 0x248]
je 0x500ff4
push 0x50
pop edi
push esi
lea ecx, [ebp - 0x12c]
call fcn.00491e15
push 7
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x36
call fcn.00539837
sub esp, 0x18
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x1d0], esp
mov ecx, esp
push eax
call fcn.005396a1
push 0x68651c
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x38
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x37
call fcn.00539a88
sub esp, 0x18
lea eax, [ebp - 0xfc]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.005396a1
push 0x6a4bec
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x39
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x37
call fcn.00539a88
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x94]
call fcn.0053a402
lea ecx, [ebp - 0x40]
call fcn.00539a16
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x35
call fcn.00491fb7
add esi, edi
cmp esi, dword [ebp - 0x248]
jne 0x500f36
mov edi, dword [ebp - 0x1f0]
sub esp, 0x18
lea eax, [ebp - 0x94]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539554
push 0x69f7ac
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x3a
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.00539a88
lea ecx, [ebp - 0x94]
call fcn.00539a16
lea eax, [ebp - 0x1f8]
mov ecx, ebx
push eax
call fcn.004fee0c
mov ecx, dword [eax]
lea edx, [ebp - 0x1cc]
push edx
mov byte [ebp - 4], 0x3b
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x1f4]
mov byte [ebp - 4], 0x3d
test ecx, ecx
je 0x501067
call fcn.00418cb4
cmp dword [ebp - 0x1cc], 0
je 0x5010c6
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1cc]
call fcn.00502fb6
sub esp, 0x18
mov byte [ebp - 4], 0x3e
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.005396a1
push str.proxyset
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x3f
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.00539a88
xor esi, esi
mov byte [ebp - 4], 0x3d
push esi
push 1
lea ecx, [ebp - 0x28]
call fcn.00409de7
jmp 0x5010c8
xor esi, esi
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0053a402
lea ecx, [ebp - 0x1cc]
call fcn.004abdd8
lea ecx, [ebp - 0x24c]
call fcn.004921be
lea ecx, [ebp - 0x27c]
call fcn.0047941b
lea ecx, [ebp - 0x7c]
call fcn.00539a16
lea ecx, [ebp - 0x264]
call fcn.00539a16
mov ecx, dword [ebp - 0x240]
mov byte [ebp - 4], 5
test ecx, ecx
je 0x501121
call fcn.00418cb4
add edi, 8
mov dword [ebp - 0x1f0], edi
cmp edi, dword [ebp - 0x1d8]
jne 0x50083d
mov ebx, dword [ebp - 0x1e0]
sub esp, 0x18
lea eax, [ebp - 0x21c]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539554
push str.browsers
mov ecx, ebx
mov byte [ebp - 4], 0x40
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.00539a88
lea ecx, [ebp - 0x21c]
call fcn.0053a959
mov esi, dword [ebp - 0x204]
mov edi, dword [ebp - 0x200]
cmp esi, edi
je 0x5012b7
mov ebx, dword [ebp - 0x1e4]
push esi
lea ecx, [ebp - 0xac]
call fcn.0042b023
lea eax, [ebp - 0xac]
mov byte [ebp - 4], 0x41
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x42
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push 0x690ed8
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x43
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x42
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x41
call fcn.00409d92
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040bd70
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x44
push eax
lea eax, [ebp - 0x64]
mov ecx, ebx
push eax
call fcn.004fd80c
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x45
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x46
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push str.path
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x47
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00409de7
push 0
push 1
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x41
call fcn.00409de7
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0053a402
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xac]
call fcn.0042b292
push 0x30
pop eax
add esi, eax
cmp esi, edi
jne 0x501193
mov ebx, dword [ebp - 0x1e0]
sub esp, 0x18
lea eax, [ebp - 0x21c]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539554
push str.autorun
mov ecx, ebx
mov byte [ebp - 4], 0x48
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.00539a88
lea ecx, [ebp - 0x21c]
call fcn.0053a959
mov esi, dword [ebp - 0x2a0]
mov edi, dword [ebp - 0x29c]
cmp esi, edi
je 0x501490
mov ebx, dword [ebp - 0x1e4]
push esi
lea ecx, [ebp - 0xc4]
call fcn.004cd7d6
push 7
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x49
call fcn.00539837
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x4a
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x4b
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push 0x690ed8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x4c
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x4b
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4a
call fcn.00409d92
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040bd70
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0x4d
push eax
lea eax, [ebp - 0x64]
mov ecx, ebx
push eax
call fcn.004fd80c
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x4e
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x4f
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push 0x50
pop eax
push str.path
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], al
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x4f
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00409de7
push 0
mov byte [ebp - 4], 0x4a
push 1
lea ecx, [ebp - 0x7c]
call fcn.00409de7
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x51
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push 0x6a4c08
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x52
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x51
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x4a
call fcn.00409d92
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0053a402
lea ecx, [ebp - 0x40]
call fcn.00539a16
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 5
call fcn.004cd8c1
add esi, 0x48
cmp esi, edi
jne 0x50130e
mov ebx, dword [ebp - 0x1e0]
sub esp, 0x18
lea eax, [ebp - 0x21c]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539554
push str.remove
mov ecx, ebx
mov byte [ebp - 4], 0x53
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.00539a88
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.0040ff0c
mov ecx, eax
call fcn.004cf935
push str.programFolders
mov ecx, ebx
mov byte [ebp - 4], 0x54
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.00539a88
lea ecx, [ebp - 0x21c]
call fcn.0053a959
lea eax, [ebp - 0x294]
push eax
call fcn.0040ff0c
mov ecx, eax
call fcn.004d074b
mov esi, dword [ebp - 0x294]
mov edi, dword [ebp - 0x290]
mov byte [ebp - 4], 0x55
cmp esi, edi
je 0x501728
mov ebx, dword [esi + 4]
mov eax, dword [esi]
mov dword [ebp - 0x1dc], eax
test ebx, ebx
je 0x50153e
lock inc dword [ebx + 4]
mov dword [ebp - 0x1f4], ebx
mov dword [ebp - 0x1f8], eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x56
push ecx
mov ecx, eax
call fcn.004c7bd2
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x57
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x58
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push 0x690ed8
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x59
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x58
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x56
call fcn.00409de7
mov ecx, dword [ebp - 0x1dc]
lea eax, [ebp - 0x4c]
push eax
call fcn.004b0618
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x5a
push ecx
mov ecx, eax
call fcn.0040cff1
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x5b
call fcn.0040bd70
mov ecx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x5c
push eax
call fcn.004fd80c
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x5d
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x5e
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push str.path
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x5f
call fcn.00539cd8
mov byte [ebp - 4], 0x5e
mov ecx, eax
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00409de7
push 0
push 1
lea ecx, [ebp - 0x7c]
call fcn.00409de7
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.00409de7
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x56
call fcn.00409ec4
push 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.00409de7
mov ecx, dword [ebp - 0x1dc]
lea eax, [ebp - 0x64]
push eax
call fcn.004fedd3
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x60
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x61
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push str.descr
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x62
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x61
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x56
call fcn.00409de7
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0053a402
mov byte [ebp - 4], 0x55
test ebx, ebx
je 0x501717
mov ecx, ebx
call fcn.00418cb4
add esi, 8
cmp esi, edi
jne 0x50152b
mov ebx, dword [ebp - 0x1e0]
sub esp, 0x18
lea eax, [ebp - 0x21c]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539554
push str.services
mov ecx, ebx
mov byte [ebp - 4], 0x63
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x55
call fcn.00539a88
lea ecx, [ebp - 0x21c]
call fcn.0053a959
lea eax, [ebp - 0x288]
push eax
call fcn.0040ff0c
mov ecx, eax
call fcn.004cf4df
mov esi, dword [ebp - 0x288]
mov edi, dword [ebp - 0x284]
mov byte [ebp - 4], 0x64
cmp esi, edi
je 0x50198d
mov ebx, dword [esi + 4]
mov eax, dword [esi]
mov dword [ebp - 0x1dc], eax
test ebx, ebx
je 0x5017a3
lock inc dword [ebx + 4]
mov dword [ebp - 0x1f4], ebx
mov dword [ebp - 0x1f8], eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x65
push ecx
mov ecx, eax
call fcn.004c7bd2
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x66
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x67
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push 0x690ed8
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x68
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x67
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x65
call fcn.00409de7
mov ecx, dword [ebp - 0x1dc]
lea eax, [ebp - 0x4c]
push eax
call fcn.004b0618
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x69
push ecx
mov ecx, eax
call fcn.0040cff1
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x6a
call fcn.0040bd70
mov ecx, dword [ebp - 0x1e4]
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x6b
push eax
call fcn.004fd80c
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x6c
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x6d
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push str.path
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x6e
call fcn.00539cd8
mov byte [ebp - 4], 0x6d
mov ecx, eax
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00409de7
push 0
push 1
lea ecx, [ebp - 0x7c]
call fcn.00409de7
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.00409de7
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x65
call fcn.00409ec4
push 0
push 1
lea ecx, [ebp - 0x4c]
call fcn.00409de7
mov ecx, dword [ebp - 0x1dc]
lea eax, [ebp - 0x64]
push eax
call fcn.004fedd3
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x6f
push eax
call fcn.0040d0f1
sub esp, 0x10
mov byte [ebp - 4], 0x70
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539672
push str.descr
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x71
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x70
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.00409d92
push 0
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x65
call fcn.00409de7
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0053a402
mov byte [ebp - 4], 0x64
test ebx, ebx
je 0x50197c
mov ecx, ebx
call fcn.00418cb4
add esi, 8
cmp esi, edi
jne 0x501790
mov ebx, dword [ebp - 0x1e0]
sub esp, 0x18
lea eax, [ebp - 0x21c]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539554
push 0x69a6ec
mov ecx, ebx
mov byte [ebp - 4], 0x72
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x64
call fcn.00539a88
lea ecx, [ebp - 0x1d2]
call fcn.004bf4fe
sub esp, 0x18
mov byte [ebp - 4], 0x73
mov eax, esp
mov dword [ebp - 0x1d0], esp
lea ecx, [ebp - 0x1d2]
push eax
call fcn.004bf502
push str.hosts
mov ecx, ebx
mov byte [ebp - 4], 0x74
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x73
call fcn.00539a88
lea ecx, [ebp - 0x2d4]
call fcn.004bbd91
sub esp, 0x18
mov byte [ebp - 4], 0x75
mov eax, esp
mov dword [ebp - 0x1d0], esp
lea ecx, [ebp - 0x2d4]
push eax
call fcn.004bc550
push 0x6a4c40
mov ecx, ebx
mov byte [ebp - 4], 0x76
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x75
call fcn.00539a88
call fcn.0040afed
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push dword [eax + 0x138]
call fcn.00539721
push str.startmode
mov ecx, ebx
mov byte [ebp - 4], 0x77
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x75
call fcn.00539a88
lea eax, [ebp - 0x28]
push eax
call fcn.0040fece
mov ecx, eax
call fcn.004b6c1e
sub esp, 0x18
mov byte [ebp - 4], 0x78
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.005396a1
push str.PartnerId
mov ecx, ebx
mov byte [ebp - 4], 0x79
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x78
call fcn.00539a88
push 0
push 1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x75
call fcn.00409de7
call fcn.0040fece
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push dword [eax + 0x298]
call fcn.00539740
push str.ProgramId
mov ecx, ebx
mov byte [ebp - 4], 0x7a
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x75
call fcn.00539a88
push 7
lea ecx, [ebp - 0x2fc]
call fcn.00539837
mov byte [ebp - 4], 0x7b
call fcn.0040ff47
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1d0], esp
mov al, byte [eax + 0x27]
mov byte [ebp - 0x1d8], al
push dword [ebp - 0x1d8]
call fcn.005398f9
push str.autorun
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0x7c
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.00539a88
call fcn.0040ff47
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1d0], esp
mov al, byte [eax + 0x29]
mov byte [ebp - 0x1d8], al
push dword [ebp - 0x1d8]
call fcn.005398f9
push str.autoscan
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0x7d
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.00539a88
call fcn.0040ff47
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1d0], esp
mov al, byte [eax + 0x2a]
mov byte [ebp - 0x1d8], al
push dword [ebp - 0x1d8]
call fcn.005398f9
push str.autoclean
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0x7e
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.00539a88
sub esp, 0x18
lea eax, [ebp - 0x2fc]
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.00539554
push str.appAutorun
mov ecx, ebx
mov byte [ebp - 4], 0x7f
call fcn.00539cd8
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.00539a88
lea ecx, [ebp - 0x2fc]
call fcn.00539a16
lea ecx, [ebp - 0x2d4]
call fcn.004bbdf0
lea ecx, [ebp - 0x1d2]
call fcn.004bf501
lea ecx, [ebp - 0x288]
call fcn.004c75da
lea ecx, [ebp - 0x294]
call fcn.004c75da
push 0
push 1
lea ecx, [ebp - 0xdc]
call fcn.00409de7
lea ecx, [ebp - 0x234]
call fcn.00539a16
lea ecx, [ebp - 0x21c]
call fcn.00539a16
lea ecx, [ebp - 0x2a0]
call fcn.004cdaa1
lea ecx, [ebp - 0x204]
call fcn.0042bc75
lea ecx, [ebp - 0x270]
call fcn.0042bc75
call fcn.005b4759
ret 4