Function at 0x4554c0
Capabilities:
Accept command line arguments
Create thread
Initialize winhttp library

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
lea ecx, [ebp - 0x7c]
push 0xffffffffffffffff
push 0x576720
push eax
mov dword fs:[0], esp
sub esp, 0x94
push ebx
push esi
push edi
call fcn.00461a50
push ecx
mov edx, 2
call fcn.00456f30
add esp, 4
or ebx, 0xffffffff
test al, al
je 0x455596
mov dword [ebp - 4], 0
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
call fcn.00455180
mov esi, dword [ebp - 0x4c]
test al, al
je 0x455573
push esi
call fcn.0054e53f
add esp, 4
cmp eax, 0x55f0
jl 0x455551
mov dword [0x5c233c], 4
jmp 0x45557d
push esi
call fcn.0054e53f
xor ecx, ecx
add esp, 4
cmp eax, 0x2800
setge cl
lea ecx, [ecx*2 + 1]
mov dword [0x5c233c], ecx
jmp 0x45557d
mov dword [0x5c233c], 5
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4555b6
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4555b6
push ecx
mov edx, 1
call fcn.00456f30
xor edx, edx
add esp, 4
test al, al
mov ecx, 5
cmovne ecx, edx
mov dword [0x5c233c], ecx
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x34]
push str.VThIgWSVKkJz0gEWzw
mov dword [ebp - 0x34], eax
call fcn.0042ce30
test al, al
jne 0x4555f0
push 0x13
push str.VThIgWSVKkJz0gEWzw
lea ecx, [ebp - 0x34]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x44]
push str.WjI5vcDla3WB401V1U
mov dword [ebp - 0x44], eax
call fcn.0042ce30
test al, al
jne 0x45562a
push 0x13
push str.WjI5vcDla3WB401V1U
lea ecx, [ebp - 0x44]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x68]
push str.V1d2aWjMyVEDsiCOwI
mov dword [ebp - 0x68], eax
call fcn.0042ce30
test al, al
jne 0x455664
push 0x13
push str.V1d2aWjMyVEDsiCOwI
lea ecx, [ebp - 0x68]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x64]
push str.WXVwZQzARMTW5o
mov dword [ebp - 0x64], eax
call fcn.0042ce30
test al, al
jne 0x45569e
push 0xe
push str.WXVwZQzARMTW5o
lea ecx, [ebp - 0x64]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x60]
push str.ZXZnJNQwSFWhhX
mov dword [ebp - 0x60], eax
call fcn.0042ce30
test al, al
jne 0x4556d8
push 0xe
push str.ZXZnJNQwSFWhhX
lea ecx, [ebp - 0x60]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x54]
push str.NWd5HS1wDGRGYG
mov dword [ebp - 0x54], eax
call fcn.0042ce30
test al, al
jne 0x455712
push 0xe
push str.NWd5HS1wDGRGYG
lea ecx, [ebp - 0x54]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x5c]
push str.cThoCMj1XjC1Md
mov dword [ebp - 0x5c], eax
call fcn.0042ce30
test al, al
jne 0x45574c
push 0xe
push str.cThoCMj1XjC1Md
lea ecx, [ebp - 0x5c]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x4c]
push str.S2Q0tMioHZQFs92AQ
mov dword [ebp - 0x4c], eax
call fcn.0042ce30
test al, al
jne 0x455786
push 0x13
push str.S2Q0tMioHZQFs92AQ
lea ecx, [ebp - 0x4c]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x70]
push str.UEJ2OQX8wUEzIkgIwQ1
mov dword [ebp - 0x70], eax
call fcn.0042ce30
test al, al
jne 0x4557c0
push 0x13
push str.UEJ2OQX8wUEzIkgIwQ1
lea ecx, [ebp - 0x70]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x74]
push str.MTdNIUUJfdIiZ8
mov dword [ebp - 0x74], eax
call fcn.0042ce30
test al, al
jne 0x4557fa
push 0xe
push str.MTdNIUUJfdIiZ8
lea ecx, [ebp - 0x74]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.a3M3Xdz0WWRQQCPHFk
mov dword [ebp - 0x14], eax
call fcn.0042ce30
test al, al
jne 0x455834
push 0x13
push str.a3M3Xdz0WWRQQCPHFk
lea ecx, [ebp - 0x14]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x58]
push str.VlN67NwYQsO0cm7AA5Y6JDY
mov dword [ebp - 0x58], eax
call fcn.0042ce30
test al, al
jne 0x45586e
push 0x18
push str.VlN67NwYQsO0cm7AA5Y6JDY
lea ecx, [ebp - 0x58]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.MzBmaenJgnNj5yYZCc
mov dword [ebp - 0x10], eax
call fcn.0042ce30
test al, al
jne 0x4558a8
push 0x13
push str.MzBmaenJgnNj5yYZCc
lea ecx, [ebp - 0x10]
call fcn.0042d150
push ecx
mov edi, esp
push ecx
mov ecx, dword [0x5c1ddc]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00443520
mov eax, dword [ebp - 0x14]
mov edi, esp
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x50], eax
mov esi, esp
call fcn.0042c560
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00443520
add esp, 4
lea ecx, [ebp - 0x2c]
mov edx, SysReAllocString
call fcn.00446510
mov esi, dword [0x5c1dc0]
add esp, 8
add esi, 0xfffffff0
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x455957
mov eax, dword [esi + 0xc]
lea edi, [esi + 0xc]
shr eax, 0x1f
test al, al
jne 0x455949
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x455949
call fcn.0042c560
mov dword [ebp - 0x38], eax
mov ecx, ebx
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x45593f
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x38]
add eax, 0x10
mov dword [0x5c1dc0], eax
jmp 0x455957
push dword [edx - 0xc]
mov ecx, 0x5c1dc0
push edx
call fcn.0042d150
mov edx, dword [ebp - 0x2c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455971
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00453f50
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x88], eax
mov esi, esp
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x38]
mov dword [esi], eax
call fcn.00443520
add esp, 4
push dword [eax]
call fcn.00559818
add esp, 4
mov esi, eax
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x40]
push esi
mov dword [ebp - 0x40], eax
call fcn.0042ce30
test al, al
jne 0x4559f9
test esi, esi
jne 0x4559d7
xor ecx, ecx
jmp 0x4559ef
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4559e0
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x40]
call fcn.0042d150
mov edx, dword [ebp - 0x38]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455a13
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x40]
add eax, 0xfffffff0
mov dword [ebp - 0x2c], eax
cmp dword [eax + 4], 0
jne 0x455b20
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp + 8]
push str.MDVMbbEdSRKRhVvWzozYVUcNA0I
mov dword [ebp + 8], eax
call fcn.0042ce30
test al, al
jne 0x455a60
push 0x1d
push str.MDVMbbEdSRKRhVvWzozYVUcNA0I
lea ecx, [ebp + 8]
call fcn.0042d150
push ecx
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x5c1dc4
call fcn.0042c650
mov ecx, esi
call fcn.004430f0
add esp, 0x14
mov esi, esp
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x58e88c
mov dword [esi], eax
call fcn.0042ce30
test al, al
jne 0x455ab5
push 0
push 0x58e88c
mov ecx, esi
call fcn.0042d150
mov eax, dword [ebp + 8]
push ecx
add eax, 0xfffffff0
mov edi, esp
push ecx
mov ecx, eax
mov dword [ebp + 8], eax
mov esi, esp
call fcn.0042c560
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00443520
mov edi, dword [ebp - 0x34]
mov ebx, esp
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
call fcn.0042c560
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00443520
add esp, 4
call fcn.004547a0
mov edx, dword [ebp + 8]
or ebx, 0xffffffff
add esp, 0x10
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455b18
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
or esi, 0xffffffff
jmp 0x456c78
mov eax, dword [ebp - 0x58]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x38], eax
mov esi, esp
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x14]
mov dword [esi], eax
call fcn.00443520
mov ecx, dword [ebp - 0x2c]
mov edi, eax
call fcn.0042c560
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00454f10
mov edx, dword [ebp - 0x14]
add esp, 4
mov esi, eax
add edx, 0xfffffff0
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x455b75
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x455e54
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.V0VFiahMkLMQs
mov dword [ebp - 0x14], eax
call fcn.0042ce30
test al, al
jne 0x455bb7
push 0xe
push str.V0VFiahMkLMQs
lea ecx, [ebp - 0x14]
call fcn.0042d150
push ecx
mov ecx, dword [ebp - 0x38]
mov esi, esp
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x28]
mov dword [esi], eax
call fcn.00443520
add esp, 4
lea ecx, [ebp - 0x10]
mov esi, eax
push 0x598b60
call fcn.0042c070
push esi
lea edx, [ebp - 0x10]
lea ecx, [ebp - 0x2c]
call fcn.0041da80
add esp, 4
lea ecx, [ebp - 0x40]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0042bdc0
mov edx, dword [ebp - 0x2c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455c18
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455c32
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455c4c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x10], eax
mov esi, esp
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x2c]
mov dword [esi], eax
call fcn.00443520
mov ecx, dword [ebp - 0x40]
mov edi, eax
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00454f10
mov edx, dword [ebp - 0x2c]
add esp, 4
mov esi, eax
add edx, 0xfffffff0
mov ecx, ebx
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x455ca4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x455e3d
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push 0x598b64
mov dword [ebp - 0x14], eax
call fcn.0042ce30
test al, al
jne 0x455ce6
push 0x13
push 0x598b64
lea ecx, [ebp - 0x14]
call fcn.0042d150
push ecx
mov ecx, dword [ebp - 0x10]
mov esi, esp
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.00443520
add esp, 4
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x3c]
mov esi, eax
push 0x58e880
call fcn.0041d9c0
add esp, 4
lea ecx, [ebp - 0x28]
mov edx, eax
push esi
call fcn.0041da80
mov esi, dword [0x5c1dbc]
add esp, 4
add esi, 0xfffffff0
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x455d7f
mov eax, dword [esi + 0xc]
lea edi, [esi + 0xc]
shr eax, 0x1f
test al, al
jne 0x455d71
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x455d71
call fcn.0042c560
mov dword [ebp - 0x2c], eax
mov ecx, ebx
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x455d67
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [0x5c1dbc], eax
jmp 0x455d7f
push dword [ecx + 4]
mov ecx, 0x5c1dbc
push edx
call fcn.0042d150
mov edx, dword [ebp - 0x28]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455d99
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455db3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455dcd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x3c], eax
mov esi, esp
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.00443520
mov ecx, dword [0x5c1dbc]
mov edi, eax
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00454f10
mov edx, dword [ebp - 0x24]
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455e26
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455e3d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455e54
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.N0g0PUUcr2VSFH4Zkcl9WDpR
mov dword [ebp - 0x10], eax
call fcn.0042ce30
test al, al
jne 0x455e8e
push 0x18
push str.N0g0PUUcr2VSFH4Zkcl9WDpR
lea ecx, [ebp - 0x10]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.c2ZycVFwWQGywWtClwzUGgA
mov dword [ebp - 0x14], eax
call fcn.0042ce30
test al, al
jne 0x455ec8
push 0x18
push str.c2ZycVFwWQGywWtClwzUGgA
lea ecx, [ebp - 0x14]
call fcn.0042d150
push ecx
mov ecx, dword [0x5c1d94]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.00443520
add esp, 4
push dword [eax]
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov edx, dword [ebp - 0x24]
mov dword [0x5c1a78], eax
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455f16
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x90
call fcn.00547e47
mov edi, eax
mov esi, esp
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x90], eax
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x2c]
mov dword [esi], eax
call fcn.00443520
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x1c], eax
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [esi], eax
call fcn.00443520
add esp, 4
mov esi, eax
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e15
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x28]
push 0x5c2540
mov dword [ebp - 0x28], eax
call fcn.0042ce30
test al, al
jne 0x455fbd
mov ecx, 0x5c2540
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x455fa0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5c2540
lea ecx, [ebp - 0x28]
call fcn.0042d150
push dword [ebp - 0x24]
lea eax, [ebp - 0x28]
push esi
push ecx
push eax
mov ecx, edi
call fcn.00443c00
mov edx, dword [ebp - 0x28]
mov dword [0x5c16b4], eax
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x455fec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456006
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456020
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x5c16b4]
mov dword [ebp - 0x24], eax
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.eUl1pSi4gyGwItpHSVqUSGdF
mov dword [ebp - 0x14], eax
call fcn.0042ce30
test al, al
jne 0x456062
push 0x18
push str.eUl1pSi4gyGwItpHSVqUSGdF
lea ecx, [ebp - 0x14]
call fcn.0042d150
mov edi, dword [ebp - 0x14]
push 0
push 0
push 0
push 0
push ecx
add edi, 0xfffffff0
mov esi, esp
mov ecx, edi
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x14]
mov dword [esi], eax
call fcn.00443520
add esp, 4
push dword [eax]
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov esi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
mov dword [esi + 0x80], eax
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4560b5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 0x80]
test eax, eax
jne 0x4560db
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4560d3
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x14], edi
jmp 0x456122
push 0x2710
push 0x2710
push 0x2710
push 0x2710
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
test eax, eax
mov eax, ebx
je 0x4560c1
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x45610e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0
push 0x454db0
call fcn.00553f1a
add esp, 0xc
mov dword [ebp - 0x14], eax
call fcn.00454250
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 4], 1
call fcn.0042cbc0
test eax, eax
je 0x456e0b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x80], 2
mov edi, dword [ebp - 0x34]
mov dword [ebp - 0x84], eax
jl 0x456257
mov esi, dword [esi + 4]
push ecx
mov dword [ebp - 0x10], esp
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x10]
add eax, 0x10
push esi
mov dword [ecx], eax
call fcn.0042ce30
test al, al
jne 0x4561c9
test esi, esi
jne 0x4561aa
xor ecx, ecx
jmp 0x4561bf
mov ecx, esi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4561b0
sub ecx, edx
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x10]
push esi
call fcn.0042d150
call fcn.00445770
add esp, 4
push ecx
mov esi, esp
cmp eax, 0x628374a0
je 0x45625f
sub esp, 0x18
mov ecx, esp
push 0x5c1dc4
call fcn.0042c650
mov ecx, esi
call fcn.004430f0
add esp, 0x14
mov ebx, esp
push ecx
mov ecx, dword [ebp - 0x64]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00443520
mov ebx, esp
push ecx
mov ecx, dword [ebp - 0x44]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00443520
mov ebx, esp
push ecx
lea ecx, [edi - 0x10]
mov esi, esp
call fcn.0042c560
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00443520
add esp, 4
call fcn.004547a0
add esp, 0x10
or ebx, 0xffffffff
or esi, 0xffffffff
jmp 0x456c2d
cmp dword [ebp - 0x80], 3
jge 0x4562e2
sub esp, 0x18
mov ecx, esp
push 0x5c1dc4
call fcn.0042c650
mov ecx, esi
call fcn.004430f0
add esp, 0x14
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x54]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00443520
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x44]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00443520
mov edi, dword [ebp - 0x34]
mov ebx, esp
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
call fcn.0042c560
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00443520
add esp, 4
call fcn.004547a0
add esp, 0x10
jmp 0x456758
mov ecx, dword [ebp - 0x68]
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.00443520
mov edi, dword [ebp - 0x2c]
add esp, 4
mov eax, dword [eax]
mov ecx, dword [edi + 8]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45632b
test dx, dx
je 0x456327
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45632b
add eax, 4
add ecx, 4
test dx, dx
jne 0x456305
xor esi, esi
jmp 0x456330
sbb esi, esi
or esi, 1
mov edx, dword [ebp - 0x24]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45634a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x4565f5
mov dword [ebp - 4], 2
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 4], 0xffffffff
push ecx
mov dword [ebp - 0x10], eax
mov esi, esp
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x5c2540
mov dword [esi], eax
call fcn.0042ce30
test al, al
jne 0x4563cc
mov ecx, 0x5c2540
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4563b0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5c2540
mov ecx, esi
call fcn.0042d150
call fcn.00445770
mov esi, esp
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x5c2540
mov dword [esi], eax
call fcn.0042ce30
test al, al
jne 0x456420
mov ecx, 0x5c2540
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x456404
sub ecx, edx
sar ecx, 1
push ecx
push 0x5c2540
mov ecx, esi
call fcn.0042d150
call fcn.00445770
add esp, 4
push eax
lea eax, [ebp - 0x10]
push 0x596c80
push eax
call fcn.0041f790
mov esi, dword [ebp - 0x10]
add esp, 0xc
mov ecx, dword [edi + 8]
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x456468
test dx, dx
je 0x456464
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x456468
add eax, 4
add ecx, 4
test dx, dx
jne 0x456442
xor eax, eax
jmp 0x45646d
sbb eax, eax
or eax, 1
mov edi, dword [ebp - 0x34]
test eax, eax
je 0x4565da
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x34]
push 0x58e88c
mov dword [ebp - 0x34], eax
call fcn.0042ce30
test al, al
jne 0x4564b2
push 0
push 0x58e88c
lea ecx, [ebp - 0x34]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x28]
push 0x58e88c
mov dword [ebp - 0x28], eax
call fcn.0042ce30
test al, al
jne 0x4564ec
push 0
push 0x58e88c
lea ecx, [ebp - 0x28]
call fcn.0042d150
push ecx
mov ecx, dword [ebp - 0x60]
mov ebx, esp
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [ebx], eax
call fcn.00443520
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [ebx], eax
call fcn.00443520
lea ecx, [edi - 0x10]
mov dword [ebp - 0x3c], eax
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x10]
mov dword [ebx], eax
call fcn.00443520
mov edx, dword [ebp - 0x3c]
lea ecx, [ebp - 0x34]
add esp, 4
push ecx
lea ecx, [ebp - 0x28]
push ecx
push dword [ebp - 0x24]
mov ecx, eax
call fcn.00454430
mov edx, dword [ebp - 0x10]
or ebx, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456572
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45658c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4565a6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4565c0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4565da
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x456758
mov ecx, dword [esi]
push esi
jmp 0x456753
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push 0x58e88c
mov dword [ebp - 0x10], eax
call fcn.0042ce30
test al, al
jne 0x45662f
push 0
push 0x58e88c
lea ecx, [ebp - 0x10]
call fcn.0042d150
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x28]
push 0x58e88c
mov dword [ebp - 0x28], eax
call fcn.0042ce30
test al, al
jne 0x456669
push 0
push 0x58e88c
lea ecx, [ebp - 0x28]
call fcn.0042d150
push ecx
mov ecx, dword [ebp - 0x54]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [esi], eax
call fcn.00443520
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x20], eax
lea ecx, [ecx - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.00443520
mov edi, dword [ebp - 0x34]
mov ebx, eax
lea ecx, [edi - 0x10]
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [esi], eax
call fcn.00443520
add esp, 4
lea ecx, [ebp - 0x10]
mov edx, ebx
push ecx
lea ecx, [ebp - 0x28]
push ecx
push dword [ebp - 0x20]
mov ecx, eax
call fcn.00454430
mov edx, dword [ebp - 0x48]
or ebx, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4566f0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45670a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456724
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x28]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45673e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456758
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push ecx
mov ecx, dword [ebp - 0x38]
mov esi, esp
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x24]
mov dword [esi], eax
call fcn.00443520
add esp, 4
lea ecx, [ebp - 0x38]
mov ebx, eax
push 0x598b60
call fcn.0042c070
lea eax, [ebp - 0x38]
push eax
push ecx
mov ecx, dword [ebp - 0x5c]
mov esi, esp
add ecx, 0xfffffff0
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [esi], eax
call fcn.00443520
add esp, 4
lea ecx, [ebp - 0x20]
mov edx, eax
call fcn.0041da80
add esp, 4
lea ecx, [ebp - 0x78]
mov edx, eax
push ebx
call fcn.0041da80
mov edx, dword [ebp - 0x20]
or ebx, 0xffffffff
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4567e5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4567ff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456819
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456833
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x78]
push 1
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov esi, eax
call fcn.0042cbc0
test eax, eax
je 0x456e0b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.a3kzxdTs6yEzQbBCRMmQHxZB4EA
mov dword [ebp - 0x10], eax
call fcn.0042ce30
test al, al
jne 0x45687f
push 0x1d
push str.a3kzxdTs6yEzQbBCRMmQHxZB4EA
lea ecx, [ebp - 0x10]
call fcn.0042d150
test esi, esi
mov esi, dword [ebp - 0x10]
je 0x456971
cmp dword [ebp - 0x30], 2
je 0x456971
call fcn.0042cbc0
test eax, eax
je 0x456e0b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp + 8]
push str.VVl6sZAUahWiUlpKVo3kITYIZAXUwBCUQgaKVoFeOz1aBFiA3NFA07fPlZEhNjUTxBz55wFQp1sLRIBJdQoOxBSctMWiYgpLQ4LMOw
mov dword [ebp + 8], eax
call fcn.0042ce30
test al, al
jne 0x4568ce
push 0x68
push str.VVl6sZAUahWiUlpKVo3kITYIZAXUwBCUQgaKVoFeOz1aBFiA3NFA07fPlZEhNjUTxBz55wFQp1sLRIBJdQoOxBSctMWiYgpLQ4LMOw
lea ecx, [ebp + 8]
call fcn.0042d150
push ecx
lea ecx, [esi - 0x10]
mov ebx, esp
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [ebx], eax
call fcn.00443520
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp + 8], eax
call fcn.0042c560
add eax, 0x10
lea ecx, [ebp - 0x20]
mov dword [ebx], eax
call fcn.00443520
add esp, 4
push 0x40
push dword [ebp - 0x30]
push dword [eax]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x20]
or ebx, 0xffffffff
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456937
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456951
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456bfa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x456bfa
push dword [ebp - 0x78]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
call fcn.0042cbc0
mov ecx, eax
test ecx, ecx
je 0x456e0b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.S1RFdaxkR0FjQINGxAliHw
mov dword [ebp - 0x10], eax
call fcn.0042ce30
test al, al
jne 0x4569ba
push 0x18
push str.S1RFdaxkR0FjQINGxAliHw
lea ecx, [ebp - 0x10]
call fcn.0042d150
push ecx
mov dword [ebp - 0x30], esp
push ecx
mov ecx, dword [0x5c1ddc]
mov ebx, esp
mov dword [ebp - 0x6c], 0
lea ecx, [ecx - 0x10]
call fcn.0042c560
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.00443520
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
mov dword [ebp - 0x30], esp
push ecx
mov ecx, eax
mov dword [ebp - 0x38], eax
mov ebx, esp
call fcn.0042c560
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.00443520
add esp, 4
lea ecx, [ebp - 0x6c]
mov edx, SysReAllocString
call fcn.00446790
add esp, 8
test al, al
je 0x456a6a
push ecx
mov dword [ebp - 0x30], esp
push ecx
mov ecx, dword [0x5c1ddc]
mov ebx, esp
lea ecx, [ecx - 0x10]
call fcn.0042c560
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.00443520
mov dword [ebp - 0x30], esp
push ecx
mov ecx, dword [ebp - 0x38]
mov ebx, esp
call fcn.0042c560
mov ecx, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebx], eax
call fcn.00443520
add esp, 4
mov ecx, SysReAllocString
call fcn.004468c0
add esp, 8
mov edx, dword [ebp - 0x38]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456a82
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
lea eax, [ebp - 0xa0]
mov dword [ebp - 0xa0], 1
push eax
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x9c], 0
push eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0x160
call fcn.00547e47
mov ecx, dword [ebp - 0x7c]
mov ebx, esp
mov dword [ebp - 0x20], eax
add ecx, 0xfffffff0
mov eax, dword [0x5c233c]
mov dword [ebp - 0x30], eax
call fcn.0042c560
push dword [ebp - 0x30]
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
mov ecx, dword [0x5c1dc0]
add ecx, 0xfffffff0
call fcn.0042c560
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
mov ecx, dword [0x5c1dbc]
add ecx, 0xfffffff0
call fcn.0042c560
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
call fcn.0042cbc0
test eax, eax
je 0x456e0b
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov ecx, ebx
push 0x5c2540
mov dword [ebx], eax
call fcn.0042ce30
test al, al
jne 0x456b6c
mov ecx, 0x5c2540
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x456b50
sub ecx, edx
sar ecx, 1
push ecx
push 0x5c2540
mov ecx, ebx
call fcn.0042d150
push dword [ebp + 8]
mov ecx, dword [ebp - 0x20]
call fcn.00417470
push 0
push 0
mov ecx, eax
mov dword [0x5c1a74], eax
call fcn.0041a630
mov eax, dword [0x5c1a78]
test eax, eax
je 0x456b9c
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [0x5c1a78]
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x456bb4
push 0x1388
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x5c1a78]
test eax, eax
je 0x456bbf
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x5c16b8
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push dword [ebp - 0x8c]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
mov ebx, dword [0x5c1a74]
test ebx, ebx
je 0x456bf7
mov ecx, ebx
call fcn.00417c00
push 0x160
push ebx
call fcn.00547d61
add esp, 8
or ebx, 0xffffffff
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x456c11
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x78]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456c2b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor esi, esi
mov edx, dword [ebp - 0x84]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456c47
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x90]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456c61
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456c78
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456c92
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x88]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456cac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x58]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456cc6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x50]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456cdd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x74]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456cf7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x70]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456d11
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x4c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456d2b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x5c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456d45
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456d5f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x60]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456d79
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456d93
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x68]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456dad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x456dc7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x456dde
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x7c]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x456df6
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.0042d130
push 0x80004005
call fcn.0042d130
int3