Function at 0x45d600
Capabilities:
Accept command line arguments
Check if file exists
Create thread
Delete registry value
Get file attributes
Initialize winhttp library

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
lea ecx, [ebp - 0x88]
push 0xffffffffffffffff
push 0x57e8a0
push eax
mov dword fs:[0], esp
sub esp, 0xa4
push ebx
push esi
push edi
call fcn.00469b50
push ecx
mov edx, 2
call fcn.0045f1e0
add esp, 4
or ebx, 0xffffffff
test al, al
je 0x45d6d9
mov dword [ebp - 4], 0
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x54], eax
call fcn.0045cec0
mov esi, dword [ebp - 0x54]
test al, al
je 0x45d6b6
push esi
call fcn.00561283
add esp, 4
cmp eax, 0x55f0
jl 0x45d694
mov dword [0x5cd900], 4
jmp 0x45d6c0
push esi
call fcn.00561283
xor ecx, ecx
add esp, 4
cmp eax, 0x2800
setge cl
lea ecx, [ecx*2 + 1]
mov dword [0x5cd900], ecx
jmp 0x45d6c0
mov dword [0x5cd900], 5
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x45d6f9
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x45d6f9
push ecx
mov edx, 1
call fcn.0045f1e0
xor edx, edx
add esp, 4
test al, al
mov ecx, 5
cmovne ecx, edx
mov dword [0x5cd900], ecx
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x20]
push str.V2lyDMycbpHVci7CgY
mov dword [ebp - 0x20], eax
call fcn.00430f00
test al, al
jne 0x45d733
push 0x13
push str.V2lyDMycbpHVci7CgY
lea ecx, [ebp - 0x20]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x44]
push str.dWlroYxYBcCg0b9DAc
mov dword [ebp - 0x44], eax
call fcn.00430f00
test al, al
jne 0x45d76d
push 0x13
push str.dWlroYxYBcCg0b9DAc
lea ecx, [ebp - 0x44]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x74]
push str.WXZayNT0T2PFQsAGi4
mov dword [ebp - 0x74], eax
call fcn.00430f00
test al, al
jne 0x45d7a7
push 0x13
push str.WXZayNT0T2PFQsAGi4
lea ecx, [ebp - 0x74]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x70]
push str.c3VjHRRoR6XmhC
mov dword [ebp - 0x70], eax
call fcn.00430f00
test al, al
jne 0x45d7e1
push 0xe
push str.c3VjHRRoR6XmhC
lea ecx, [ebp - 0x70]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x6c]
push str.bWNhlZQQHHXEhf
mov dword [ebp - 0x6c], eax
call fcn.00430f00
test al, al
jne 0x45d81b
push 0xe
push str.bWNhlZQQHHXEhf
lea ecx, [ebp - 0x6c]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x60]
push str.VEtyyNz0v8Txpn
mov dword [ebp - 0x60], eax
call fcn.00430f00
test al, al
jne 0x45d855
push 0xe
push str.VEtyyNz0v8Txpn
lea ecx, [ebp - 0x60]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x68]
push str.OVQwZYXU7lUwBV
mov dword [ebp - 0x68], eax
call fcn.00430f00
test al, al
jne 0x45d88f
push 0xe
push str.OVQwZYXU7lUwBV
lea ecx, [ebp - 0x68]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x54]
push str.Z3hjvTwYbrFyYR3HQ
mov dword [ebp - 0x54], eax
call fcn.00430f00
test al, al
jne 0x45d8c9
push 0x13
push str.Z3hjvTwYbrFyYR3HQ
lea ecx, [ebp - 0x54]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x84]
push str.N2dMQeRgVOKQpDeBj4N
mov dword [ebp - 0x84], eax
call fcn.00430f00
test al, al
jne 0x45d90c
push 0x13
push str.N2dMQeRgVOKQpDeBj4N
lea ecx, [ebp - 0x84]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x80]
push str.RUd2GcTYvtGQYI
mov dword [ebp - 0x80], eax
call fcn.00430f00
test al, al
jne 0x45d946
push 0xe
push str.RUd2GcTYvtGQYI
lea ecx, [ebp - 0x80]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x24]
push str.UXEzYUQcU1QSI4hHl0
mov dword [ebp - 0x24], eax
call fcn.00430f00
test al, al
jne 0x45d980
push 0x13
push str.UXEzYUQcU1QSI4hHl0
lea ecx, [ebp - 0x24]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x64]
push str.bXF1NVzwGUOTwumAS84
mov dword [ebp - 0x64], eax
call fcn.00430f00
test al, al
jne 0x45d9ba
push 0x13
push str.bXF1NVzwGUOTwumAS84
lea ecx, [ebp - 0x64]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.UDdC1ZhFnfEiIRyYwM
mov dword [ebp - 0x10], eax
call fcn.00430f00
test al, al
jne 0x45d9f4
push 0x13
push str.UDdC1ZhFnfEiIRyYwM
lea ecx, [ebp - 0x10]
call fcn.00431230
push ecx
mov edi, esp
push ecx
mov ecx, dword [0x5cd160]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00447160
mov eax, dword [ebp - 0x24]
mov edi, esp
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x5c], eax
mov esi, esp
call fcn.004305b0
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00447160
add esp, 4
lea ecx, [ebp - 0x14]
mov edx, SysReAllocString
call fcn.0044a6d0
mov esi, dword [0x5cd144]
add esp, 8
add esi, 0xfffffff0
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x45daa3
mov eax, dword [esi + 0xc]
lea edi, [esi + 0xc]
shr eax, 0x1f
test al, al
jne 0x45da95
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x45da95
call fcn.004305b0
mov dword [ebp - 0x18], eax
mov ecx, ebx
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x45da8b
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x18]
add eax, 0x10
mov dword [0x5cd144], eax
jmp 0x45daa3
push dword [edx - 0xc]
mov ecx, 0x5cd144
push edx
call fcn.00431230
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45dabd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0045bd80
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x8c], eax
mov esi, esp
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x18]
mov dword [esi], eax
call fcn.00447160
add esp, 4
push dword [eax]
call fcn.00561bb8
add esp, 4
mov esi, eax
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x24]
push esi
mov dword [ebp - 0x24], eax
call fcn.00430f00
test al, al
jne 0x45db49
test esi, esi
jne 0x45db23
xor ecx, ecx
jmp 0x45db3f
mov ecx, esi
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45db30
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x24]
call fcn.00431230
mov edx, dword [ebp - 0x18]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45db63
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
mov dword [ebp - 0xa0], eax
cmp dword [eax + 4], 0
jne 0x45dc73
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp + 8]
push str.REpt4azMtOCB8hKJBs0bITgfkBDY
mov dword [ebp + 8], eax
call fcn.00430f00
test al, al
jne 0x45dbb3
push 0x1d
push str.REpt4azMtOCB8hKJBs0bITgfkBDY
lea ecx, [ebp + 8]
call fcn.00431230
push ecx
mov esi, esp
sub esp, 0x18
mov ecx, esp
push 0x5cd148
call fcn.004306a0
mov ecx, esi
call fcn.00446d80
add esp, 0x14
mov esi, esp
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x597b10
mov dword [esi], eax
call fcn.00430f00
test al, al
jne 0x45dc08
push 0
push 0x597b10
mov ecx, esi
call fcn.00431230
mov eax, dword [ebp + 8]
push ecx
add eax, 0xfffffff0
mov edi, esp
push ecx
mov ecx, eax
mov dword [ebp + 8], eax
mov esi, esp
call fcn.004305b0
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00447160
mov edi, dword [ebp - 0x20]
mov ebx, esp
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
call fcn.004305b0
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00447160
add esp, 4
call fcn.0045c5d0
mov edx, dword [ebp + 8]
or ebx, 0xffffffff
add esp, 0x10
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45dc6b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
or esi, 0xffffffff
jmp 0x45ee54
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.VTI36aABhocjoFeYHguGHH5y
mov dword [ebp - 0x10], eax
call fcn.00430f00
test al, al
jne 0x45dcad
push 0x18
push str.VTI36aABhocjoFeYHguGHH5y
lea ecx, [ebp - 0x10]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x24]
push str.NjN3PbGJWpGhw
mov dword [ebp - 0x24], eax
call fcn.00430f00
test al, al
jne 0x45dce7
push 0xe
push str.NjN3PbGJWpGhw
lea ecx, [ebp - 0x24]
call fcn.00431230
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x38], eax
mov esi, esp
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x18]
mov dword [esi], eax
call fcn.00447160
add esp, 4
push dword [eax]
call fcn.00561bb8
mov edx, eax
add esp, 4
test edx, edx
jne 0x45dd1e
xor ecx, ecx
jmp 0x45dd32
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45dd23
sub ecx, esi
sar ecx, 1
push ecx
push edx
mov ecx, 0x5cd140
call fcn.00431230
mov edx, dword [ebp - 0x18]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45dd58
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x5cd140]
mov edi, dword [eax - 0xc]
lea esi, [edi + 1]
test esi, esi
js 0x45efed
mov ecx, dword [eax - 8]
mov edx, 1
sub edx, dword [eax - 4]
sub ecx, esi
or ecx, edx
jge 0x45dd8c
push esi
mov ecx, 0x5cd140
call fcn.00431190
mov eax, dword [0x5cd140]
mov ecx, 0x5c
mov word [eax + edi*2], cx
mov eax, dword [0x5cd140]
cmp esi, dword [eax - 8]
jg 0x45efed
mov dword [eax - 0xc], esi
xor ecx, ecx
mov eax, dword [0x5cd140]
push ecx
mov word [eax + esi*2], cx
mov esi, esp
mov eax, dword [ebp - 0x64]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x28], eax
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x18]
mov dword [esi], eax
call fcn.00447160
add esp, 4
mov ecx, 0x5cd140
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0042d1c0
mov edx, dword [ebp - 0x18]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ddfe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [0x5cd140]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x45df83
test al, 0x10
je 0x45df83
push 0x5979b0
mov edx, 0x5cd140
lea ecx, [ebp - 0x14]
call fcn.00420df0
mov ecx, dword [ebp - 0x24]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x18]
mov dword [esi], eax
call fcn.00447160
add esp, 4
lea ecx, [ebp - 0x14]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.0042d1c0
mov edx, dword [ebp - 0x18]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45de72
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45f001
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.WGFW1bzwOiIQE0tDjcL
mov dword [ebp - 0x10], eax
call fcn.00430f00
test al, al
jne 0x45deac
push 0x13
push str.WGFW1bzwOiIQE0tDjcL
lea ecx, [ebp - 0x10]
call fcn.00431230
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
push ecx
mov ecx, eax
mov dword [ebp - 0x10], eax
mov esi, esp
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x18]
mov dword [esi], eax
call fcn.00447160
mov ecx, dword [0x5cd140]
mov edi, eax
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.0045cc50
mov edx, dword [ebp - 0x18]
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45df05
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor edi, edi
cmp edi, 5
jge 0x45df52
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x45df52
test al, 0x10
je 0x45df52
push ecx
mov ecx, dword [ebp - 0x14]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
mov dword [esi], eax
call fcn.0045d200
add esp, 4
test eax, eax
jne 0x45df52
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], 0x1388
mov dword [ebp - 0x2c], eax
call fcn.0042ce50
inc edi
jmp 0x45df07
mov edx, dword [ebp - 0x10]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45df69
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45df83
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push str.cURDAaAEnKIhgBEajAccHjYm
mov dword [ebp - 0x14], eax
call fcn.00430f00
test al, al
jne 0x45dfbd
push 0x18
push str.cURDAaAEnKIhgBEajAccHjYm
lea ecx, [ebp - 0x14]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.Wkp0yOHU6nHUA_YJlpf4Myw
mov dword [ebp - 0x10], eax
call fcn.00430f00
test al, al
jne 0x45dff7
push 0x18
push str.Wkp0yOHU6nHUA_YJlpf4Myw
lea ecx, [ebp - 0x10]
call fcn.00431230
push ecx
mov ecx, dword [0x5cd118]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x18]
mov dword [esi], eax
call fcn.00447160
add esp, 4
push dword [eax]
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov edx, dword [ebp - 0x18]
mov dword [0x5ccec0], eax
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e045
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x94
call fcn.00550cf4
mov edi, eax
mov esi, esp
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x9c], eax
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00447160
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x34], eax
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x58]
mov dword [esi], eax
call fcn.00447160
add esp, 4
mov esi, eax
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45f00b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push 0x5cd700
mov dword [ebp - 0x14], eax
call fcn.00430f00
test al, al
jne 0x45e0ed
mov ecx, 0x5cd700
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45e0d0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5cd700
lea ecx, [ebp - 0x14]
call fcn.00431230
push dword [ebp - 0x18]
lea eax, [ebp - 0x14]
push esi
push ecx
push eax
mov ecx, edi
call fcn.004477f0
mov edx, dword [ebp - 0x14]
mov dword [0x5ccafc], eax
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e11c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x58]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e136
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e150
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x5ccafc]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x3c], eax
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.NlA1JbGE5TWyRi0BGVMgB34F
mov dword [ebp - 0x10], eax
call fcn.00430f00
test al, al
jne 0x45e199
push 0x18
push str.NlA1JbGE5TWyRi0BGVMgB34F
lea ecx, [ebp - 0x10]
call fcn.00431230
mov edi, dword [ebp - 0x10]
push 0
push 0
push 0
push 0
push ecx
add edi, 0xfffffff0
mov esi, esp
mov ecx, edi
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x10]
mov dword [esi], eax
call fcn.00447160
add esp, 4
push dword [eax]
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov esi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
mov dword [esi + 0x80], eax
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e1ec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esi + 0x80]
test eax, eax
jne 0x45e20c
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x45e253
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x45e253
push 0x2710
push 0x2710
push 0x2710
push 0x2710
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
test eax, eax
mov eax, ebx
je 0x45e1f8
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x45e23f
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0
push 0x45cc40
call fcn.0055bf0a
add esp, 0xc
mov dword [ebp - 0x18], eax
call fcn.0045c080
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov esi, eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 4], 1
call fcn.00430c90
test eax, eax
je 0x45eff7
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x94], 2
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x90], eax
jl 0x45e38d
mov esi, dword [esi + 4]
push ecx
mov dword [ebp - 0x3c], esp
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x3c]
add eax, 0x10
push esi
mov dword [ecx], eax
call fcn.00430f00
test al, al
jne 0x45e2ff
test esi, esi
jne 0x45e2e1
xor ecx, ecx
jmp 0x45e2f5
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45e2e6
sub ecx, edx
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x3c]
push esi
call fcn.00431230
call fcn.004497e0
add esp, 4
push ecx
mov esi, esp
cmp eax, 0x628374a0
je 0x45e395
sub esp, 0x18
mov ecx, esp
push 0x5cd148
call fcn.004306a0
mov ecx, esi
call fcn.00446d80
add esp, 0x14
mov ebx, esp
push ecx
mov ecx, dword [ebp - 0x70]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00447160
mov ebx, esp
push ecx
mov ecx, dword [ebp - 0x44]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00447160
mov ebx, esp
push ecx
lea ecx, [edi - 0x10]
mov esi, esp
call fcn.004305b0
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00447160
add esp, 4
call fcn.0045c5d0
add esp, 0x10
or ebx, 0xffffffff
or esi, 0xffffffff
jmp 0x45edd8
cmp dword [ebp - 0x94], 3
jge 0x45e41f
sub esp, 0x18
mov ecx, esp
push 0x5cd148
call fcn.004306a0
mov ecx, esi
call fcn.00446d80
add esp, 0x14
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x60]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00447160
mov edi, esp
push ecx
mov ecx, dword [ebp - 0x44]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00447160
mov edi, dword [ebp - 0x20]
mov ebx, esp
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
call fcn.004305b0
add eax, 0x10
mov ecx, ebx
mov dword [esi], eax
call fcn.00447160
add esp, 4
call fcn.0045c5d0
add esp, 0x10
jmp 0x45e898
mov ecx, dword [ebp - 0x74]
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00447160
mov edi, dword [ebp - 0x48]
add esp, 4
mov eax, dword [eax]
mov ecx, dword [edi + 8]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45e468
test dx, dx
je 0x45e464
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45e468
add eax, 4
add ecx, 4
test dx, dx
jne 0x45e442
xor esi, esi
jmp 0x45e46d
sbb esi, esi
or esi, 1
mov edx, dword [ebp - 0x40]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e487
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x45e735
mov dword [ebp - 4], 2
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 4], 0xffffffff
push ecx
mov dword [ebp - 0x10], eax
mov esi, esp
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x5cd700
mov dword [esi], eax
call fcn.00430f00
test al, al
jne 0x45e50c
mov ecx, 0x5cd700
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45e4f0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5cd700
mov ecx, esi
call fcn.00431230
call fcn.004497e0
mov esi, esp
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov ecx, esi
push 0x5cd700
mov dword [esi], eax
call fcn.00430f00
test al, al
jne 0x45e560
mov ecx, 0x5cd700
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45e544
sub ecx, edx
sar ecx, 1
push ecx
push 0x5cd700
mov ecx, esi
call fcn.00431230
call fcn.004497e0
add esp, 4
push eax
lea eax, [ebp - 0x10]
push 0x59fed0
push eax
call fcn.00422bb0
mov esi, dword [ebp - 0x10]
add esp, 0xc
mov ecx, dword [edi + 8]
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45e5a8
test dx, dx
je 0x45e5a4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45e5a8
add eax, 4
add ecx, 4
test dx, dx
jne 0x45e582
xor eax, eax
jmp 0x45e5ad
sbb eax, eax
or eax, 1
mov edi, dword [ebp - 0x20]
test eax, eax
je 0x45e71a
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x20]
push 0x597b10
mov dword [ebp - 0x20], eax
call fcn.00430f00
test al, al
jne 0x45e5f2
push 0
push 0x597b10
lea ecx, [ebp - 0x20]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push 0x597b10
mov dword [ebp - 0x14], eax
call fcn.00430f00
test al, al
jne 0x45e62c
push 0
push 0x597b10
lea ecx, [ebp - 0x14]
call fcn.00431230
push ecx
mov ecx, dword [ebp - 0x6c]
mov ebx, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x1c]
mov dword [ebx], eax
call fcn.00447160
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x4c]
mov dword [ebx], eax
call fcn.00447160
lea ecx, [edi - 0x10]
mov dword [ebp - 0x58], eax
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x10]
mov dword [ebx], eax
call fcn.00447160
mov edx, dword [ebp - 0x58]
lea ecx, [ebp - 0x20]
add esp, 4
push ecx
lea ecx, [ebp - 0x14]
push ecx
push dword [ebp - 0x40]
mov ecx, eax
call fcn.0045c260
mov edx, dword [ebp - 0x10]
or ebx, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e6b2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x4c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e6cc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e6e6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e700
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e71a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x45e898
mov ecx, dword [esi]
push esi
jmp 0x45e893
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push 0x597b10
mov dword [ebp - 0x10], eax
call fcn.00430f00
test al, al
jne 0x45e76f
push 0
push 0x597b10
lea ecx, [ebp - 0x10]
call fcn.00431230
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x14]
push 0x597b10
mov dword [ebp - 0x14], eax
call fcn.00430f00
test al, al
jne 0x45e7a9
push 0
push 0x597b10
lea ecx, [ebp - 0x14]
call fcn.00431230
push ecx
mov ecx, dword [ebp - 0x60]
mov esi, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x58]
mov dword [esi], eax
call fcn.00447160
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00447160
mov edi, dword [ebp - 0x20]
mov ebx, eax
lea ecx, [edi - 0x10]
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x4c]
mov dword [esi], eax
call fcn.00447160
add esp, 4
lea ecx, [ebp - 0x10]
mov edx, ebx
push ecx
lea ecx, [ebp - 0x14]
push ecx
push dword [ebp - 0x1c]
mov ecx, eax
call fcn.0045c260
mov edx, dword [ebp - 0x4c]
or ebx, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e830
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x40]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e84a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x58]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e864
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e87e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e898
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push ecx
mov ecx, dword [ebp - 0x28]
mov esi, esp
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x4c]
mov dword [esi], eax
call fcn.00447160
add esp, 4
lea ecx, [ebp - 0x10]
mov ebx, eax
push 0x5a1840
call fcn.0042d470
lea eax, [ebp - 0x10]
push eax
push ecx
mov ecx, dword [ebp - 0x68]
mov esi, esp
add ecx, 0xfffffff0
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x1c]
mov dword [esi], eax
call fcn.00447160
add esp, 4
lea ecx, [ebp - 0x28]
mov edx, eax
call fcn.00420eb0
add esp, 4
lea ecx, [ebp - 0x7c]
mov edx, eax
push ebx
call fcn.00420eb0
mov edx, dword [ebp - 0x28]
or ebx, 0xffffffff
add esp, 4
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e925
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e93f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e959
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x4c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45e973
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x7c]
push 1
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov esi, eax
call fcn.00430c90
test eax, eax
je 0x45eff7
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push 0x5a1844
mov dword [ebp - 0x10], eax
call fcn.00430f00
test al, al
jne 0x45e9bf
push 0x1d
push 0x5a1844
lea ecx, [ebp - 0x10]
call fcn.00431230
test esi, esi
mov esi, dword [ebp - 0x10]
je 0x45eab1
cmp dword [ebp - 0x50], 2
je 0x45eab1
call fcn.00430c90
test eax, eax
je 0x45eff7
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp + 8]
push str.aUpKSTzkJrag4ZxOmocUHSU4LKkkjsOW8c8OmouBBy5q6PRwk3JCYHHLWZvnCiYjxLAJqqJSFJtPiIqXSRk3Lhsqag0coPj4gABw
mov dword [ebp + 8], eax
call fcn.00430f00
test al, al
jne 0x45ea0e
push 0x68
push str.aUpKSTzkJrag4ZxOmocUHSU4LKkkjsOW8c8OmouBBy5q6PRwk3JCYHHLWZvnCiYjxLAJqqJSFJtPiIqXSRk3Lhsqag0coPj4gABw
lea ecx, [ebp + 8]
call fcn.00431230
push ecx
lea ecx, [esi - 0x10]
mov ebx, esp
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x4c]
mov dword [ebx], eax
call fcn.00447160
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp + 8], eax
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x1c]
mov dword [ebx], eax
call fcn.00447160
add esp, 4
push 0x40
push dword [ebp - 0x28]
push dword [eax]
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov edx, dword [ebp - 0x1c]
or ebx, 0xffffffff
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ea77
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x4c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ea91
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp + 8]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45eda5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x45eda5
push dword [ebp - 0x7c]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
call fcn.00430c90
mov ecx, eax
test ecx, ecx
je 0x45eff7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x10]
push str.WU9x7NAsK0Imsa8ACR6GDQ
mov dword [ebp - 0x10], eax
call fcn.00430f00
test al, al
jne 0x45eafa
push 0x18
push str.WU9x7NAsK0Imsa8ACR6GDQ
lea ecx, [ebp - 0x10]
call fcn.00431230
push ecx
mov dword [ebp - 0x28], esp
push ecx
mov ecx, dword [0x5cd160]
mov ebx, esp
mov dword [ebp - 0x78], 0
lea ecx, [ecx - 0x10]
call fcn.004305b0
mov ecx, dword [ebp - 0x28]
add eax, 0x10
mov dword [ebx], eax
call fcn.00447160
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
mov dword [ebp - 0x28], esp
push ecx
mov ecx, eax
mov dword [ebp - 0x10], eax
mov ebx, esp
call fcn.004305b0
mov ecx, dword [ebp - 0x28]
add eax, 0x10
mov dword [ebx], eax
call fcn.00447160
add esp, 4
lea ecx, [ebp - 0x78]
mov edx, SysReAllocString
call fcn.0044a950
add esp, 8
test al, al
je 0x45ebfb
push ecx
mov ecx, dword [0x5cd160]
mov ebx, esp
lea ecx, [ecx - 0x10]
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x48]
mov dword [ebx], eax
call fcn.00447160
mov ecx, dword [ebp - 0x10]
call fcn.004305b0
add eax, 0x10
lea ecx, [ebp - 0x50]
mov dword [ebx], eax
call fcn.00447160
add esp, 4
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x48]
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyW]
test eax, eax
jne 0x45ebc2
push dword [ebp - 0x50]
push dword [ebp - 0x3c]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push dword [ebp - 0x3c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 0x50]
or ebx, 0xffffffff
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ebdf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x48]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ebfe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x45ebfe
or ebx, 0xffffffff
mov edx, dword [ebp - 0x10]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ec15
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xb0], 1
push eax
lea eax, [ebp - 0x98]
mov dword [ebp - 0xac], 0
push eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0x178
call fcn.00550cf4
mov ecx, dword [ebp - 0x88]
mov ebx, esp
mov dword [ebp - 0x1c], eax
add ecx, 0xfffffff0
mov eax, dword [0x5cd900]
mov dword [ebp - 0x28], eax
call fcn.004305b0
push dword [ebp - 0x28]
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
mov ecx, dword [0x5cd144]
add ecx, 0xfffffff0
call fcn.004305b0
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
mov ecx, dword [0x5cd140]
add ecx, 0xfffffff0
call fcn.004305b0
add eax, 0x10
push ecx
mov dword [ebx], eax
mov ebx, esp
call fcn.00430c90
test eax, eax
je 0x45eff7
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov ecx, ebx
push 0x5cd700
mov dword [ebx], eax
call fcn.00430f00
test al, al
jne 0x45ecfc
mov ecx, 0x5cd700
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45ece0
sub ecx, edx
sar ecx, 1
push ecx
push 0x5cd700
mov ecx, ebx
call fcn.00431230
push dword [ebp + 8]
mov ecx, dword [ebp - 0x1c]
call fcn.004198e0
push 0
push 0
mov ecx, eax
mov dword [0x5ccebc], eax
call fcn.0041daa0
mov eax, dword [0x5ccec0]
test eax, eax
je 0x45ed2c
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [0x5ccec0]
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x45ed44
push 0x1388
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x5ccec0]
test eax, eax
je 0x45ed4f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.0052e2b0
mov ebx, eax
mov ecx, ebx
call fcn.0052e8a0
mov eax, dword [ebx + 0x3c0]
test eax, eax
je 0x45ed6e
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
push ebx
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
push dword [ebp - 0x98]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
mov ebx, dword [0x5ccebc]
test ebx, ebx
je 0x45eda2
mov ecx, ebx
call fcn.0041a1c0
push 0x178
push ebx
call fcn.00550d24
add esp, 8
or ebx, 0xffffffff
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x45edbc
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x7c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45edd6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor esi, esi
mov edx, dword [ebp - 0x90]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45edf2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x9c]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ee0c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ee23
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ee3d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ee54
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa0]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ee6e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x8c]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ee88
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45eea2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x5c]
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45eeb9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x80]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45eed3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x84]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45eef0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x54]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ef0a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x68]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ef24
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x60]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ef3e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x6c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ef58
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x70]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ef72
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x74]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45ef8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x45efa6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x45efbd
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x88]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x45efd8
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x80070057
call fcn.00431210
push 0x80004005
call fcn.00431210
push 0x80004005
call fcn.00431210
push 0x80004005
call fcn.00431210
int3