Function at 0x417b00
Capabilities:
Accept command line arguments
Create thread
Get common file path
Hide graphical window
Resolve function by parsing pe exports
Terminate thread

Disassembly:
sub esp, 0xd88
mov ecx, 0x1440
xor eax, eax
push ebx
push ebp
push esi
push edi
mov edi, 0x46ad210
push 0x4959f8
rep stosd dword es:[edi], eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov edi, 0x4959f8
or ecx, 0xffffffff
xor eax, eax
push 0x482234
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x482cf4
mov eax, ecx
mov esi, edi
mov edi, 0x487494
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x4959f8
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, dword [esp + 0xda4]
mov edx, ecx
mov esi, edi
mov edi, 0x4a7af4
mov dword [0x32f6b10], eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0xdb0]
xor edi, edi
mov dword [0x471e5fc], ecx
call fcn.00436380
push 0x482234
push str.HomeServer678.txt
mov esi, eax
call fcn.00436380
add esp, 0x10
mov ebp, eax
test esi, esi
mov ebx, 1
je 0x417bc6
push esi
call fcn.00436200
add esp, 4
mov edi, ebx
test ebp, ebp
je 0x417bd4
push ebp
call fcn.00436200
add esp, 4
inc edi
test edi, edi
jne 0x417c04
push 0x4826d0
push 0x482cf4
call fcn.00436380
mov esi, eax
add esp, 8
test esi, esi
je 0x417c04
push str.91.204.178.129:47251
push esi
call fcn.0043688d
push esi
call fcn.00436200
add esp, 0xc
push 0x482234
push str.z.dll
call fcn.00436380
add esp, 8
test eax, eax
je 0x417c25
push eax
call fcn.00436200
add esp, 4
jmp 0x417c51
push 0x4826d0
push str.z.dll
call fcn.00436380
mov esi, eax
add esp, 8
test esi, esi
je 0x417c51
push str.16bit24000_n
push esi
call fcn.0043688d
push esi
call fcn.00436200
add esp, 0xc
mov edi, str.185.
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, str...............
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.154.
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, str...............
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x104]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push str.BRIZ.exe
mov eax, ecx
mov esi, edi
mov edi, edx
push str._s_
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x54]
push ecx
call fcn.004361ae
lea edx, [esp + 0x58]
lea eax, [esp + 0x110]
push edx
push eax
call fcn.00436480
add esp, 0x14
test eax, eax
jne 0x417dc9
lea ecx, [esp + 0x104]
push str.BRIZ.exe
push ecx
call fcn.00436480
add esp, 8
test eax, eax
jne 0x417dc9
cmp byte [esp + 0x104], 0x74
jne 0x417da3
mov al, byte [esp + 0x105]
mov cl, 0x69
cmp al, cl
jne 0x417da3
cmp byte [esp + 0x106], 0x70
jne 0x417da3
mov dl, byte [esp + 0x107]
mov al, 0x61
cmp dl, al
jne 0x417da3
cmp byte [esp + 0x108], 0x72
jne 0x417da3
cmp byte [esp + 0x109], al
jne 0x417da3
cmp byte [esp + 0x10a], 0x64
jne 0x417da3
cmp byte [esp + 0x10b], cl
jne 0x417da3
cmp byte [esp + 0x10c], 0x6f
jne 0x417da3
cmp byte [esp + 0x10d], 0x2e
jne 0x417da3
mov cl, byte [esp + 0x10e]
mov al, 0x65
cmp cl, al
jne 0x417da3
cmp byte [esp + 0x10f], 0x78
jne 0x417da3
cmp byte [esp + 0x110], al
je 0x417dc9
push 0
lea edx, [esp + 0x108]
push str.Error
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xd88
ret 0x10
mov edi, 0x482c9c
or ecx, 0xffffffff
xor eax, eax
push 0x482568
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x4959f8
mov esi, edi
mov edx, ecx
mov edi, str...............
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [esp + 0x10c]
and ecx, 3
push str._s_s
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.004361ae
lea ecx, [esp + 0x114]
push ecx
call fcn.00436863
push str.i.vbs
push 0x4959f8
lea edx, [esp + 0x120]
push str._s_s
push edx
call fcn.004361ae
lea eax, [esp + 0x128]
push eax
call fcn.00436863
push 0x48274c
push 0x4959f8
lea ecx, [esp + 0x134]
push str._s_s
push ecx
call fcn.004361ae
lea edx, [esp + 0x13c]
push edx
call fcn.00436863
mov edi, 0x482c90
or ecx, 0xffffffff
xor eax, eax
push str.NEW_OFF
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, str...............
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0xde4]
push esi
call fcn.00436480
add esp, 0x44
test eax, eax
je 0x417ebd
mov dword [0x4740538], ebx
push 0x482c84
push esi
call fcn.00436480
add esp, 8
test eax, eax
je 0x417ed5
mov dword [0x474053c], ebx
push str.VID2
push esi
call fcn.00436480
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
add esp, 8
test eax, eax
je 0x417f51
push str.DELTAX
push esi
mov dword [0x4742960], ebx
call fcn.00436480
add esp, 8
test eax, eax
je 0x417f16
add eax, 7
push eax
call fcn.004366e2
add esp, 4
mov dword [0x4742940], eax
push str.DELTAY
push esi
call fcn.00436480
add esp, 8
test eax, eax
je 0x417f39
add eax, 7
push eax
call fcn.004366e2
add esp, 4
mov dword [0x47bbf0], eax
mov eax, dword [0x47404a4]
test eax, eax
je 0x417f4b
push 0
push 0
push 0x10
push eax
call edi
mov dword [0x47404a8], ebx
push str.VID3
push esi
call fcn.00436480
add esp, 8
test eax, eax
je 0x417fcb
push str.DELTAX
push esi
mov dword [0x4742960], 2
call fcn.00436480
add esp, 8
test eax, eax
je 0x417f90
add eax, 7
push eax
call fcn.004366e2
add esp, 4
mov dword [0x4742940], eax
push str.DELTAY
push esi
call fcn.00436480
add esp, 8
test eax, eax
je 0x417fb3
add eax, 7
push eax
call fcn.004366e2
add esp, 4
mov dword [0x47bbf0], eax
mov eax, dword [0x47404a4]
test eax, eax
je 0x417fc5
push 0
push 0
push 0x10
push eax
call edi
mov dword [0x47404a8], ebx
push str.zlib0.dll
push 0x4959f8
lea eax, [esp + 0x9a0]
push str._s_s
push eax
call fcn.004361ae
lea ecx, [esp + 0x9a8]
push 0x48215c
push ecx
call fcn.00436380
mov ebp, eax
add esp, 0x18
test ebp, ebp
jne 0x4182fb
call fcn.004012e0
call fcn.0042dc30
mov ecx, 0x14
mov esi, 0x4741c9c
mov edi, 0x19cc6ec
lea edx, [esp + 0x998]
push 0x482148
push edx
rep movsd dword es:[edi], dword [esi]
mov ebp, eax
call fcn.00436380
mov esi, eax
add esp, 8
test esi, esi
je 0x418534
push 0
call fcn.00436aa3
push esi
push ebx
push 0x19
push 0x47bb00
mov dword [0x47bb04], eax
mov dword [0x47bb00], ebp
mov dword [0x476180], 0xa
mov dword [0x47618c], 0xffffffd8
mov dword [0x47bad8], 0x99999998
mov dword [0x47badc], 0x3fc99999
mov dword [0x47bae0], 0x99999998
mov dword [0x47bae4], 0x3fc99999
mov dword [0x47bac0], 0
mov dword [0x47bac4], 0x40100000
mov dword [0x47bac8], 0
mov dword [0x47bacc], 0x40100000
mov dword [0x476174], 0xffffffe2
mov dword [0x47bae8], 0x9999999a
mov dword [0x47baec], 0x3fd99999
mov dword [0x3e8a680], 0x9999999a
mov dword [0x3e8a684], 0x3fd99999
call fcn.00436256
push esi
push ebx
push 0xad
push 0x19cc6e0
call fcn.00436256
push esi
push ebx
push 0x58
push 0x487898
call fcn.00436256
push esi
push ebx
push 4
push 0x47ba30
call fcn.00436256
add esp, 0x44
push esi
push ebx
push 8
push 0x47ba38
call fcn.00436256
push esi
push ebx
push 4
push 0x4741c94
call fcn.00436256
push esi
push ebx
push 4
push 0x4741c98
call fcn.00436256
push esi
push ebx
push 8
push 0x47bae8
call fcn.00436256
add esp, 0x40
push esi
push ebx
push 4
push 0x47babc
call fcn.00436256
push esi
push ebx
push 8
push 0x47bac0
call fcn.00436256
push esi
push ebx
push 4
push 0x47bad0
call fcn.00436256
push esi
push ebx
push 8
push 0x47bad8
call fcn.00436256
add esp, 0x40
push esi
push ebx
push 4
push 0x47bb2c
call fcn.00436256
push esi
push ebx
push 4
push 0x47bb30
call fcn.00436256
push esi
push ebx
push 0x3c
push 0x476160
call fcn.00436256
push esi
push ebx
push 4
push 0x4747854
call fcn.00436256
add esp, 0x40
push esi
push ebx
push 4
push 0x47bc10
call fcn.00436256
push esi
push ebx
push 4
push 0x47bc14
call fcn.00436256
push esi
push ebx
push 4
push 0x47bbe8
call fcn.00436256
push esi
push ebx
push 4
push 0x47bbec
call fcn.00436256
add esp, 0x40
push esi
push ebx
push 4
push 0x47bb28
call fcn.00436256
push esi
push ebx
push 4
push 0x4741c8c
call fcn.00436256
push esi
push ebx
push 4
push 0x47428bc
call fcn.00436256
push esi
push ebx
push 4
push 0x4741c14
call fcn.00436256
add esp, 0x40
push esi
push ebx
push 4
push 0x47404a0
call fcn.00436256
push esi
push ebx
push 4
push 0x47bbdc
call fcn.00436256
push esi
push ebx
push 4
push 0x474059c
call fcn.00436256
push esi
push ebx
push 4
push 0x47405a0
call fcn.00436256
add esp, 0x40
push esi
push ebx
push 4
push 0x4741b08
call fcn.00436256
push esi
push ebx
push 4
push 0x47404f8
call fcn.00436256
push esi
push ebx
push 4
push 0x47404fc
call fcn.00436256
push esi
push ebx
push 4
push 0x47404b0
call fcn.00436256
add esp, 0x40
push esi
push ebx
push 4
push 0x47428c0
call fcn.00436256
push esi
push ebx
push ebx
push 0x474293a
call fcn.00436256
push esi
push ebx
push ebx
push 0x474293b
call fcn.00436256
push esi
call fcn.00436200
add esp, 0x34
jmp 0x418534
push ebp
push ebx
push 0x19
push 0x47bb00
call fcn.00436393
push ebp
push ebx
push 0xad
push 0x19cc6e0
call fcn.00436393
push 8
push 0x4413c8
push 8
push 0x19cc6e0
call fcn.00401480
push ebp
mov ecx, 0x14
mov esi, 0x4741c9c
mov edi, 0x19cc6ec
push ebx
push 0x58
rep movsd dword es:[edi], dword [esi]
push 0x487898
call fcn.00436393
add esp, 0x40
push ebp
push ebx
push 4
push 0x47ba30
call fcn.00436393
push ebp
push ebx
push 8
push 0x47ba38
call fcn.00436393
push ebp
push ebx
push 4
push 0x4741c94
call fcn.00436393
push ebp
push ebx
push 4
push 0x4741c98
call fcn.00436393
add esp, 0x40
push ebp
push ebx
push 8
push 0x47bae8
call fcn.00436393
push ebp
push ebx
push 4
push 0x47babc
call fcn.00436393
push ebp
push ebx
push 8
push 0x47bac0
call fcn.00436393
push ebp
push ebx
push 4
push 0x47bad0
call fcn.00436393
add esp, 0x40
push ebp
push ebx
push 8
push 0x47bad8
call fcn.00436393
push ebp
push ebx
push 4
push 0x47bb2c
call fcn.00436393
push ebp
push ebx
push 4
push 0x47bb30
call fcn.00436393
push ebp
push ebx
push 0x3c
push 0x476160
call fcn.00436393
add esp, 0x40
push ebp
push ebx
push 4
push 0x4747854
call fcn.00436393
push ebp
push ebx
push 4
push 0x47bc10
call fcn.00436393
push ebp
push ebx
push 4
push 0x47bc14
call fcn.00436393
push ebp
push ebx
push 4
push 0x47bbe8
call fcn.00436393
add esp, 0x40
push ebp
push ebx
push 4
push 0x47bbec
call fcn.00436393
push ebp
push ebx
push 4
push 0x47bb28
call fcn.00436393
push ebp
push ebx
push 4
push 0x4741c8c
call fcn.00436393
push ebp
push ebx
push 4
push 0x47428bc
call fcn.00436393
add esp, 0x40
push ebp
push ebx
push 4
push 0x4741c14
call fcn.00436393
push ebp
push ebx
push 4
push 0x47404a0
call fcn.00436393
push ebp
push ebx
push 4
push 0x47bbdc
call fcn.00436393
push ebp
push ebx
push 4
push 0x474059c
call fcn.00436393
add esp, 0x40
push ebp
push ebx
push 4
push 0x47405a0
call fcn.00436393
push ebp
push ebx
push 4
push 0x4741b08
call fcn.00436393
push ebp
push ebx
push 4
push 0x47404f8
call fcn.00436393
push ebp
push ebx
push 4
push 0x47404fc
call fcn.00436393
add esp, 0x40
push ebp
push ebx
push 4
push 0x47404b0
call fcn.00436393
push ebp
push ebx
push 4
push 0x47428c0
mov dword [0x47bbdc], ebx
call fcn.00436393
push ebp
push ebx
push ebx
push 0x474293a
call fcn.00436393
push ebp
push ebx
push ebx
push 0x474293b
call fcn.00436393
add esp, 0x40
push ebp
call fcn.00436200
add esp, 4
mov eax, dword [0x47bb0c]
and eax, 0xf
cmp al, 0xd
je 0x418553
mov eax, dword [0x4741c14]
test eax, eax
je 0x418553
mov dword [0x4741c14], 0
push 8
call fcn.004367fe
add esp, 4
test eax, eax
je 0x41856a
mov ecx, eax
call fcn.00404c90
jmp 0x41856c
xor eax, eax
mov dword [0x4959f0], eax
mov esi, 0x46c7d36
push 8
call fcn.004367fe
add esp, 4
test eax, eax
je 0x41858d
mov ecx, eax
call fcn.00404c90
jmp 0x41858f
xor eax, eax
mov dword [esi], eax
add esi, 0x15a2a
cmp esi, 0x4734008
jl 0x418576
call fcn.004012e0
push 0x4823f0
call fcn.0040b5e0
add esp, 4
test eax, eax
je 0x4185ba
mov dword [0x47bb34], eax
push str.servera
call fcn.0040b1c0
add esp, 4
test eax, eax
je 0x4185d0
mov dword [0x47bb34], eax
push 0x482cf4
call fcn.0040b6d0
add esp, 4
test eax, eax
je 0x41862f
mov ecx, dword [0x47428c0]
mov dword [0x47428c4], eax
cmp ecx, eax
jl 0x4185f6
dec eax
mov dword [0x47428c0], eax
mov edx, dword [0x47428c0]
mov ebx, dword [0x47bb34]
shl edx, 8
mov ebp, ebx
or ecx, 0xffffffff
lea edi, [edx + 0x47802c]
xor eax, eax
shl ebp, 8
repne scasb al, byte es:[edi]
not ecx
lea esi, [ebp + str...............]
sub edi, ecx
mov dword [esp + 0x10], esi
mov esi, edi
mov edi, dword [esp + 0x10]
mov eax, ecx
jmp 0x418690
push str.HomeServer678.txt
call fcn.0040b6d0
add esp, 4
test eax, eax
je 0x4186dd
mov ecx, dword [0x47428c0]
mov dword [0x47428c4], eax
cmp ecx, eax
jl 0x418659
dec eax
mov dword [0x47428c0], eax
mov edx, dword [0x47428c0]
mov ebx, dword [0x47bb34]
shl edx, 8
mov ebp, ebx
or ecx, 0xffffffff
lea edi, [edx + 0x47802c]
xor eax, eax
shl ebp, 8
repne scasb al, byte es:[edi]
not ecx
lea esi, [ebp + str...............]
sub edi, ecx
mov dword [esp + 0x10], esi
mov esi, edi
mov edi, dword [esp + 0x10]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x47428c0]
lea edi, [edx + str.SERV_1]
lea edx, [ebp + str.UB6LFT___ROSTOV_ON_DON]
mov ax, word [ecx*2 + 0x477ff8]
or ecx, 0xffffffff
mov word [ebx*2 + 0x476de4], ax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4186e3
mov ebx, dword [0x47bb34]
cmp dword [0x47428bc], ebx
jl 0x4186fb
mov eax, dword [0x47428c4]
test eax, eax
jne 0x4186f5
dec ebx
mov dword [0x47428bc], ebx
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
push 0
push str.signalRadio4
call esi
push 0
push str.signalRadio5Dubl
mov edi, eax
call esi
push 0
push str.signalRadio6Dubl
mov ebx, eax
call esi
test edi, edi
je 0x418771
test ebx, ebx
je 0x41874f
test eax, eax
je 0x41874b
mov ecx, dword [0x4740538]
test ecx, ecx
jne 0x41874b
call dword [sym.imp.WSOCK32.dll_WSACleanup]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xd88
ret 0x10
test ebx, ebx
jne 0x418756
push str.signalRadio5Dubl
jmp 0x41875f
test eax, eax
jne 0x418771
push str.signalRadio6Dubl
push 0x48222c
push str.signalRadio4
call fcn.004361ae
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push str.zlib1.dll
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_Beep]
mov ebp, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
mov dword [0x4741c40], eax
jne 0x4187f5
push str.zlib1.dll
push 0x4959f8
lea ecx, [esp + 0x5a0]
push str._s_s
push ecx
call fcn.004361ae
lea edx, [esp + 0x5a8]
push 0x482148
push edx
call fcn.00436380
mov esi, eax
add esp, 0x18
test esi, esi
je 0x4187e5
push esi
push 1
push 0xda00
push 0x448030
call fcn.00436256
push esi
call fcn.00436200
add esp, 0x14
push str.zlib1.dll
call edi
test eax, eax
mov dword [0x4741c40], eax
je 0x41883b
push str.compress
push eax
call ebp
mov dword [0x1f8d40c], eax
mov eax, dword [0x4741c40]
push str.uncompress
push eax
call ebp
mov ecx, dword [0x1f8d40c]
mov dword [0x46ad1f4], eax
test ecx, ecx
je 0x418822
test eax, eax
jne 0x41885f
mov ecx, dword [0x4741c40]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x4741c40], 0
jmp 0x418853
push 0x3e8
push 0x320
call ebx
push 0x3e8
push 0x7d0
call ebx
push 0x3e8
push 0x3e8
call ebx
push str.iphlpapi.dll
call edi
test eax, eax
mov dword [0x4747964], eax
je 0x4188af
push str.GetAdaptersInfo
push eax
call ebp
test eax, eax
mov dword [0x3e9c1f8], eax
jne 0x4188a5
mov edx, dword [0x4747964]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0x3e8
push 0x3e8
mov dword [0x4747964], 0
call ebx
jmp 0x4188af
push 0
call fcn.00433fd0
add esp, 4
call fcn.0041e590
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x598]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov ebp, 3
mov eax, ecx
mov esi, edi
mov edi, edx
push str.key.inf
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea edx, [esp + 0x108]
and ecx, ebp
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x59c]
push ecx
push str._s_s
push edx
call fcn.004361ae
lea eax, [esp + 0x114]
push 0x48215c
push eax
call fcn.00436380
mov esi, eax
xor ebx, ebx
add esp, 0x18
cmp esi, ebx
jne 0x418928
mov dword [0x4854a4], ebx
mov dword [0x4854a0], ebx
jmp 0x418953
push esi
push 1
push 8
push 0x4854a0
call fcn.00436393
push 8
push 0x4413b8
push 8
push 0x4854a0
call fcn.00401480
push esi
call fcn.00436200
add esp, 0x24
lea ecx, [esp + 0x598]
push str.key.dll
push ecx
lea edx, [esp + 0x10c]
push str._s_s
push edx
call fcn.004361ae
lea eax, [esp + 0x114]
push 0x48215c
push eax
call fcn.00436380
mov esi, eax
add esp, 0x18
cmp esi, ebx
jne 0x41899b
mov dword [0x3e9c20c], ebx
mov dword [0x3e9c208], ebx
jmp 0x4189d2
push ebx
push 0x6004
push esi
call fcn.004368bf
push esi
push 1
push 8
push 0x3e9c208
call fcn.00436393
push 8
push 0x4413c0
push 8
push 0x3e9c208
call fcn.00401480
push esi
call fcn.00436200
add esp, 0x30
mov ecx, dword [0x3e9c208]
mov eax, dword [0x19cc6e0]
cmp ecx, eax
jne 0x4189f4
mov edx, dword [0x3e9c20c]
mov eax, dword [0x19cc6e4]
cmp edx, eax
je 0x418a9e
call fcn.0041e590
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x598]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push str.key.dll
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, dword [0x19cc6e4]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x59c]
and ecx, ebp
push eax
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x19cc6e0]
push str._s_s
mov dword [str.1234567890], ecx
lea ecx, [esp + 0x110]
push ecx
mov dword [0x446038], edx
call fcn.004361ae
lea edx, [esp + 0x114]
push 0x482148
push edx
call fcn.00436380
mov esi, eax
add esp, 0x18
cmp esi, ebx
je 0x418a9e
push 8
push 0x4413c0
push 8
push str.1234567890
call fcn.00401430
push esi
push 1
push 0x8000
push 0x440030
call fcn.00436256
push esi
call fcn.00436200
add esp, 0x24
fild dword [0x476168]
cmp dword [0x476168], ebx
fadd st(0), st(0)
jg 0x418abc
fmul qword [0x43e478]
fadd qword [0x43e458]
jmp 0x418ac2
fmul qword [0x43e470]
fst qword [0x47ba38]
fstp qword [0x471e608]
fild dword [0x476180]
cmp dword [0x476180], ebx
fadd st(0), st(0)
jg 0x418aec
fmul qword [0x43e478]
fadd qword [0x43e458]
jmp 0x418af2
fmul qword [0x43e470]
fst qword [0x47bac0]
fstp qword [0x47bac8]
fild dword [0x47618c]
cmp dword [0x47618c], ebx
fadd st(0), st(0)
jg 0x418b1c
fmul qword [0x43e478]
fadd qword [0x43e458]
jmp 0x418b22
fmul qword [0x43e470]
fst qword [0x47bad8]
fstp qword [0x47bae0]
fild dword [0x476174]
cmp dword [0x476174], ebx
fadd st(0), st(0)
jg 0x418b4c
fmul qword [0x43e478]
fadd qword [0x43e458]
jmp 0x418b52
fmul qword [0x43e470]
fst qword [0x47bae8]
fstp qword [0x3e8a680]
push str.config
push 0x4959f8
lea eax, [esp + 0x5a0]
push str._s_s
push eax
call fcn.004361ae
lea ecx, [esp + 0x5a8]
push 0x48215c
push ecx
call fcn.00436380
mov esi, eax
add esp, 0x18
cmp esi, ebx
mov edi, 0x200
je 0x418c19
push esi
push 1
push 0x280
push 0x47b468
call fcn.00436393
push esi
call fcn.00436200
mov al, byte [0x47b548]
add esp, 0x14
test al, al
je 0x418bc9
cmp al, 1
je 0x418bc9
mov byte [0x47b548], 1
mov ax, word [0x47b54e]
cmp ax, 0x100
je 0x418be7
cmp ax, di
je 0x418be7
cmp ax, 0x400
je 0x418be7
mov word [0x47b54e], di
mov al, byte [0x47b550]
test al, al
je 0x418bfb
cmp al, 1
je 0x418bfb
mov byte [0x47b550], 1
mov ax, word [0x47b556]
cmp ax, 0x100
je 0x418c19
cmp ax, di
je 0x418c19
cmp ax, 0x400
je 0x418c19
mov word [0x47b556], di
cmp dword [0x47b518], ebx
jne 0x418c27
mov dword [0x47b518], ebp
mov edx, dword [0x47bae8]
mov eax, dword [0x47baec]
mov ecx, dword [0x47bac0]
mov dword [0x3e8a680], edx
mov edx, dword [0x47bac4]
mov dword [0x3e8a684], eax
mov eax, dword [0x47bad8]
mov dword [0x47bac8], ecx
mov ecx, dword [0x47badc]
mov dword [0x47bacc], edx
mov dword [0x47bae0], eax
mov dword [0x47bae4], ecx
call fcn.00417820
mov ecx, dword [0x4740588]
mov eax, dword [0x47bb10]
cmp ecx, ebx
mov byte [0x19cc78c], al
mov byte [0x48789e], al
mov dl, 0x20
je 0x418cab
cmp ecx, 1
jne 0x418c99
mov al, byte [0x48789f]
or al, 0x10
jmp 0x418cfe
mov al, byte [0x48789f]
cmp ecx, 7
jge 0x418ca7
or al, dl
jmp 0x418cfe
or al, 0x40
jmp 0x418cfe
mov ecx, dword [0x474051c]
cmp ecx, ebx
mov ecx, dword [0x474058c]
je 0x418cc1
cmp ecx, ebx
jne 0x418cee
jmp 0x418cc5
cmp ecx, ebx
jne 0x418ccd
cmp dword [0x4740590], ebx
je 0x418cf7
cmp dword [0x474059c], ebx
je 0x418cf7
lea ecx, [eax + eax*4]
xor esi, esi
lea ecx, [eax + ecx*8]
mov si, word [eax + ecx*2 + 0x4ede61]
mov eax, dword [0x47baf0]
cmp esi, eax
jne 0x418cf7
mov al, byte [0x48789f]
or al, 0x80
jmp 0x418cfe
mov al, byte [0x48789f]
and al, 0xf
mov byte [0x48789f], al
mov edi, 0x4878a0
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, ebx
jle 0x418d29
cmp byte [eax + 0x4878a0], dl
jae 0x418d24
mov byte [eax + 0x4878a0], dl
inc eax
cmp eax, ecx
jl 0x418d16
mov edi, 0x4878a0
or ecx, 0xffffffff
xor eax, eax
push 0x46960dc
repne scasb al, byte es:[edi]
not ecx
add ecx, 8
push ecx
push 0x487898
push 0xe
call fcn.0042f0e0
mov dword [0x486cbc], eax
mov edi, 0x4878a0
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
add ecx, 8
push 0x1f80a14
push ecx
push 0x487898
push 0x51
call fcn.0042f0e0
mov dword [0x1f666ec], eax
mov ecx, 0x57e4
xor eax, eax
mov edi, 0x1f90f10
rep stosd dword es:[edi], eax
call fcn.00401060
push str._Temp_
push 0x4959f8
call fcn.00436480
add esp, 0x28
test eax, eax
jne 0x418dce
push 0x482be4
push 0x4959f8
call fcn.00436480
add esp, 8
test eax, eax
jne 0x418dce
push 0x482bdc
push 0x4959f8
call fcn.00436480
add esp, 8
test eax, eax
je 0x418dea
push ebx
push 0x4826a8
push 0x482b88
push ebx
mov dword [0x47428d8], 1
call dword [sym.imp.USER32.dll_MessageBoxA]
lea edx, [esp + 0x504]
mov dword [esp + 0x504], 0x94
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x418e13
mov eax, dword [esp + 0x514]
mov dword [0x19b6ca0], eax
cmp dword [0x47428d8], ebx
jne 0x418e2d
push 0x46962d8
push str.BRIZ.exe
call fcn.0041f8d0
add esp, 8
xor edi, edi
mov esi, 0x32fb344
push edi
call fcn.004088d0
mov word [esi], ax
add esp, 4
add esi, 2
inc edi
cmp esi, 0x32fb544
jl 0x418e34
mov esi, 0xffff8000
push esi
call fcn.00408860
mov ecx, esi
add esp, 4
and ecx, 0xffff
inc esi
cmp esi, 0x8000
mov byte [ecx + 0x3e8a69c], al
jl 0x418e51
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0x4085c800
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0x40881000
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0x408aa000
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0x408d6800
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0x4092e400
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0x4094e000
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0x40971400
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0x40998400
mov eax, 0x47ba90
lea ecx, [esp + 0x4c]
fld qword [ecx]
fmul qword [0x43e490]
add eax, 4
add ecx, 8
cmp eax, 0x47bab0
fmul qword [0x43e488]
fmul qword [0x43e480]
fcos
fadd st(0), st(0)
fstp dword [eax - 4]
jl 0x418f03
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0x100
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push 0x48219c
mov dword [esp + 0x4c], str.signalRadio4
mov eax, dword [esp + 0xda0]
mov dword [esp + 0x2c], fcn.00423fc0
push eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x2c], ebp
call dword [sym.imp.USER32.dll_LoadIconA]
mov esi, dword [sym.imp.USER32.dll_LoadCursorA]
push 0x7f00
push ebx
mov dword [esp + 0x40], eax
call esi
mov dword [0x4741c38], 1
mov dword [esp + 0x44], str.MENU_3
mov dword [esp + 0x3c], eax
mov eax, dword [0x47404b0]
cmp eax, ebx
je 0x418fa1
mov dword [esp + 0x44], str.ENG_MENU_3
mov edi, dword [sym.imp.GDI32.dll_GetStockObject]
push ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call edi
mov ebx, dword [sym.imp.USER32.dll_RegisterClassA]
lea edx, [esp + 0x24]
push edx
mov dword [esp + 0x44], eax
call ebx
test ax, ax
jne 0x418fd7
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xd88
ret 0x10
mov eax, dword [esp + 0xd9c]
xor ebp, ebp
push 0x7f00
push ebp
mov dword [0x3ecde54], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x50], str.VIDEOW
mov dword [esp + 0x30], 0x4237e0
mov dword [esp + 0x2c], 3
mov dword [esp + 0x40], ebp
call esi
push ebp
mov dword [esp + 0x48], ebp
mov dword [esp + 0x40], eax
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ebp
call edi
mov dword [esp + 0x40], eax
lea eax, [esp + 0x24]
push eax
call ebx
mov ebx, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
test ax, ax
je 0x419108
mov ecx, 0x4b000
xor eax, eax
mov edi, 0x1e330ec
rep stosd dword es:[edi], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov dword [0x4747954], eax
call dword [sym.imp.USER32.dll_GetWindowDC]
push eax
mov dword [0x3ec4ac8], eax
call ebx
mov ecx, dword [0x3ec4ac8]
push 0x78
push 0xa0
push ecx
mov dword [0x3eaeebc], eax
call esi
mov edx, dword [0x3eaeebc]
push eax
push edx
mov dword [0x3ee4a5c], eax
call ebp
mov eax, dword [0x3ec4ac8]
push eax
call ebx
mov ecx, dword [0x3ec4ac8]
push 0xf0
push 0x140
push ecx
mov dword [0x3ec4acc], eax
call esi
mov edx, dword [0x3ec4acc]
push eax
push edx
mov dword [0x46961bc], eax
call ebp
mov eax, dword [0x3ec4ac8]
push eax
call ebx
mov ecx, dword [0x3ec4ac8]
push 0x1e0
push 0x280
push ecx
mov dword [0x3ec4ac4], eax
call esi
mov edx, dword [0x3ec4ac4]
push eax
push edx
mov dword [0x46961d0], eax
call ebp
lea eax, [esp + 0x14]
push eax
push 0
push 0
push 0x430030
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.0040c3a0
mov ecx, dword [esp + 0xd9c]
mov edx, dword [0x47bbec]
mov eax, dword [0x47bbe8]
push 0
push ecx
push 0
push 0
push 0x118
push 0x265
push edx
push eax
push 0x10ca0080
push 0x475c40
push str.signalRadio4
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov edi, eax
mov ecx, dword [esp + 0xda8]
push ecx
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x47b578]
mov esi, dword [sym.imp.GDI32.dll_CreateFontIndirectA]
test eax, eax
mov dword [0x32fb544], edi
je 0x419182
push 0x47b578
call esi
mov dword [0x4738d98], eax
mov eax, dword [0x47b5b4]
test eax, eax
je 0x419197
push 0x47b5b4
call esi
mov dword [0x471e5f8], eax
mov eax, dword [0x47b5f0]
test eax, eax
je 0x4191ac
push 0x47b5f0
call esi
mov dword [0x4696034], eax
mov eax, dword [0x47b62c]
test eax, eax
je 0x4191c1
push 0x47b62c
call esi
mov dword [0x46ad1ec], eax
mov eax, dword [0x47b668]
test eax, eax
je 0x4191d6
push 0x47b668
call esi
mov dword [0x678b48], eax
mov eax, dword [0x47b6a4]
test eax, eax
je 0x4191eb
push 0x47b6a4
call esi
mov dword [0x3e8a678], eax
push str.MS_Sans_Serif
push 0
push 0
push 0
push 0
push 0
mov esi, dword [sym.imp.GDI32.dll_CreateFontA]
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x22
call esi
push str.MS_Sans_Serif
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 8
mov dword [0x486cc0], eax
call esi
push str.MS_Sans_Serif
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x14
mov dword [0x1fa6ea0], eax
call esi
push str.Fixedsys
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xc
mov dword [0x1f8366c], eax
call esi
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
mov dword [0x1fb2d3c], eax
call esi
push 1
mov dword [0x19cc794], eax
call esi
mov cl, byte [0x47b548]
mov dword [0x19cc798], eax
test cl, cl
je 0x4192c3
cmp cl, 1
je 0x4192c3
mov byte [0x47b548], 1
mov cx, word [0x47b54e]
cmp cx, 0x100
je 0x4192e8
cmp cx, 0x200
je 0x4192e8
cmp cx, 0x400
je 0x4192e8
mov word [0x47b54e], 0x200
mov cl, byte [0x47b550]
test cl, cl
je 0x4192fe
cmp cl, 1
je 0x4192fe
mov byte [0x47b550], 1
mov cx, word [0x47b556]
cmp cx, 0x100
je 0x419323
cmp cx, 0x200
je 0x419323
cmp cx, 0x400
je 0x419323
mov word [0x47b556], 0x200
mov dx, word [0x47b54a]
mov ecx, dword [0x19cc794]
test dx, dx
jl 0x41933f
movsx edx, dx
lea esi, [ecx - 0xa]
cmp edx, esi
jle 0x419348
mov word [0x47b54a], 0
mov dx, word [0x47b54c]
test dx, dx
jl 0x41935e
movsx edx, dx
lea esi, [eax - 0xa]
cmp edx, esi
jle 0x419367
mov word [0x47b54c], 0
mov dx, word [0x47b552]
test dx, dx
jl 0x41937d
movsx esi, dx
add ecx, 0xfffffff6
cmp esi, ecx
jle 0x419387
xor dx, dx
mov word [0x47b552], dx
mov cx, word [0x47b554]
test cx, cx
jl 0x41939d
movsx esi, cx
add eax, 0xfffffff6
cmp esi, eax
jle 0x4193a8
mov cx, 0xd2
mov word [0x47b554], cx
cmp word [0x47b54a], dx
jne 0x4193c3
cmp word [0x47b54c], cx
jne 0x4193c3
mov word [0x47b554], 0xd2
mov eax, dword [0x475a5c]
mov ecx, dword [0x3ecde54]
push eax
push ecx
call fcn.00435e40
add esp, 8
push edi
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push esi
call ebx
push esi
mov dword [0x46961a8], eax
call ebx
push esi
mov dword [0x4959f4], eax
call ebx
push esi
mov dword [0x1f80ef8], eax
call ebx
push esi
mov dword [0x46961b0], eax
call ebx
push esi
mov dword [0x46961b4], eax
call ebx
push esi
mov dword [0x46961a4], eax
call ebx
push esi
mov dword [0x46961ac], eax
call ebx
push esi
mov dword [0x4696038], eax
call ebx
mov edx, dword [0x19cc798]
mov ebx, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [0x3ec4ad0], eax
mov eax, dword [0x19cc794]
push edx
push eax
push esi
call ebx
mov ecx, dword [0x19cc798]
mov edx, dword [0x19cc794]
push ecx
push edx
push esi
mov dword [esp + 0x1c], eax
call ebx
push 0xf0
push 0x140
push esi
mov dword [esp + 0x20], eax
call ebx
push 0xf0
push 0x140
push esi
mov dword [0x471e5e4], eax
call ebx
push 0xf0
push 0x140
push esi
mov dword [0x46ad208], eax
call ebx
push 0xf0
push 0x140
push esi
mov dword [0x46ad1f0], eax
call ebx
push 0xf0
push 0x140
push esi
mov dword [0x46ad1f8], eax
call ebx
push 0xf0
push 0x140
push esi
mov dword [0x46ad1fc], eax
call ebx
mov dword [0x46ad200], eax
push 0x1e0
push 0x280
push esi
call ebx
mov ecx, dword [0x46961a8]
mov dword [0x46961b8], eax
mov eax, dword [esp + 0x10]
push eax
push ecx
call ebp
mov eax, dword [0x4959f4]
mov edx, dword [esp + 0x14]
push edx
push eax
call ebp
mov ecx, dword [0x471e5e4]
mov edx, dword [0x1f80ef8]
push ecx
push edx
call ebp
mov eax, dword [0x46ad208]
mov ecx, dword [0x46961b0]
push eax
push ecx
call ebp
mov edx, dword [0x46ad1f0]
mov eax, dword [0x46961b4]
push edx
push eax
call ebp
mov ecx, dword [0x46ad1f8]
mov edx, dword [0x46961a4]
push ecx
push edx
call ebp
mov eax, dword [0x46ad1fc]
mov ecx, dword [0x46961ac]
push eax
push ecx
call ebp
mov edx, dword [0x46ad200]
mov eax, dword [0x4696038]
push edx
push eax
call ebp
mov ecx, dword [0x46961b8]
mov edx, dword [0x3ec4ad0]
push ecx
push edx
call ebp
mov eax, dword [0x47b4e0]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [0x46961a8]
mov ebx, eax
push ebx
push ecx
call ebp
mov edx, dword [0x4959f4]
push ebx
push edx
call ebp
mov eax, dword [0x1f80ef8]
push ebx
push eax
call ebp
mov ecx, dword [0x19cc798]
mov edx, dword [0x19cc794]
mov eax, dword [0x46961a8]
mov ebx, dword [sym.imp.GDI32.dll_PatBlt]
push 0xf00021
push ecx
push edx
push 0
push 0
push eax
call ebx
mov ecx, dword [0x19cc798]
mov edx, dword [0x19cc794]
push 0xf00021
push ecx
mov eax, dword [0x4959f4]
push edx
push 0
push 0
push eax
call ebx
mov ecx, dword [0x1f80ef8]
push 0xf00021
push 0xf0
push 0x140
push 0
push 0
push ecx
call ebx
push esi
push edi
call dword [sym.imp.USER32.dll_ReleaseDC]
mov edx, dword [0x486cc0]
mov eax, dword [0x46961a8]
push edx
push eax
call ebp
mov esi, dword [sym.imp.GDI32.dll_CreatePen]
push 0xff
push 1
push 0
call esi
push 0xff00
push 1
push 0
mov dword [0x471e5e8], eax
call esi
mov ecx, dword [0x471e5e8]
mov edx, dword [0x46961a8]
push ecx
push edx
mov dword [0x62db38], eax
call ebp
mov eax, dword [0x471e5e8]
mov ecx, dword [0x4959f4]
push eax
push ecx
call ebp
mov eax, dword [0x46961a8]
lea edx, [esp + 0xcc]
push edx
push eax
call dword [sym.imp.GDI32.dll_GetTextMetricsA]
mov eax, dword [0x46961a8]
mov esi, dword [sym.imp.GDI32.dll_SetTextColor]
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xdc]
add edx, ecx
push 0xc800
push eax
mov dword [0x3e9c1fc], edx
call esi
mov ecx, dword [0x4959f4]
push 0xc800
push ecx
call esi
mov edx, dword [0x46961a8]
mov esi, dword [sym.imp.GDI32.dll_SetBkMode]
push 1
push edx
call esi
mov eax, dword [0x4959f4]
push 1
push eax
call esi
mov ecx, dword [0x471e5e4]
mov esi, dword [sym.imp.GDI32.dll_SetBitmapBits]
push 0x1e330ec
push 0x4b000
push ecx
call esi
mov edx, dword [0x46ad208]
push 0x1e330ec
push 0x4b000
push edx
call esi
mov eax, dword [0x46ad1f0]
push 0x1e330ec
push 0x4b000
push eax
call esi
mov ecx, dword [0x46ad1f8]
push 0x1e330ec
push 0x4b000
push ecx
call esi
mov edx, dword [0x46ad1fc]
push 0x1e330ec
push 0x4b000
push edx
call esi
mov eax, dword [0x46ad200]
push 0x1e330ec
push 0x4b000
push eax
call esi
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0x64
push 1
push edi
call esi
push 0
push 0x1388
push 2
push edi
call esi
push 0
push 0x12c
push 3
push edi
call esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push str.winstfiledir
push 1
push 1
push 0
call esi
push str.winstSendTcp
push 1
push 1
push 0
mov dword [0x1f80edc], eax
call esi
push str.winstWriteCom
push 1
push 1
push 0
mov dword [0x3301438], eax
call esi
mov dword [0x1f5f0ec], eax
call fcn.0042dc30
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [esp + 0x14]
push ecx
push 0
push 0
push 0x417a40
push 0
push 0
call esi
push 0x1f83688
push 0
push 0
push 0x42e7a0
push 0
push 0
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov ebp, eax
push 0x100
push ebp
call ebx
push 0x1f83688
push 0
push 0
push 0x42e410
push 0
push 0
call esi
call fcn.0040b3c0
mov edx, dword [0x47bb2c]
mov ecx, dword [0x47bb28]
add ecx, 0xfffffe0a
lea eax, [edx - 0x192]
mov dword [0x47b454], ecx
push eax
mov dword [0x47bb1c], eax
call fcn.00408770
mov ecx, dword [0x47bb0c]
add esp, 4
mov eax, ecx
and eax, 0xf
cmp eax, 0xb
je 0x419825
cmp eax, 0xc
je 0x419825
cmp eax, 0xe
jne 0x419832
and ecx, 0xf0
inc ecx
mov dword [0x47bb0c], ecx
mov edx, dword [0x47b454]
push edx
call fcn.00408c70
add esp, 4
lea eax, [esp + 0x8c]
push eax
push 0
push 0
push 0x416030
push 0
push 0
call esi
push 0x100
push eax
call ebx
call fcn.00415770
call fcn.0041e980
mov ecx, dword [0x46961a8]
push ecx
call fcn.00413190
mov edx, dword [0x32fb544]
add esp, 4
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [0x475fa0]
test eax, eax
je 0x4198a7
push 0x471e5ec
push 0
push 0
push 0x42eda0
push 0
push 0
call esi
call fcn.00406bf0
lea eax, [esp + 0x14]
push eax
push 0
push 0
push 0x42fd60
push 0
push 0
call esi
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
push 0
push 0
lea ecx, [esp + 0x98]
push 0
push ecx
call esi
test eax, eax
je 0x419924
mov ebx, dword [sym.imp.USER32.dll_TranslateMessage]
mov eax, dword [0x474057c]
lea edx, [esp + 0x90]
push edx
push eax
call dword [sym.imp.USER32.dll_IsDialogMessageA]
test eax, eax
jne 0x419910
lea ecx, [esp + 0x90]
push ecx
call ebx
lea edx, [esp + 0x90]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
lea eax, [esp + 0x98]
push 0
push eax
call esi
test eax, eax
jne 0x4198e0
call fcn.00401000
mov eax, dword [0x475fa0]
test eax, eax
je 0x419937
call fcn.0042ec70
mov eax, dword [0x47428e8]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
test eax, eax
je 0x419965
push 0x3e8
mov word [0x47428ec], 0
call ebx
mov ecx, dword [0x47428e8]
push ecx
call fcn.0043680c
add esp, 4
mov eax, dword [0x47b568]
test eax, eax
jl 0x4199c9
mov eax, dword [0x47b56c]
test eax, eax
jl 0x4199c9
push str.config
push 0x4959f8
lea edx, [esp + 0x5a0]
push str._s_s
push edx
call fcn.004361ae
lea eax, [esp + 0x5a8]
push 0x482148
push eax
call fcn.00436380
mov esi, eax
add esp, 0x18
test esi, esi
je 0x4199c9
push esi
push 1
push 0x280
push 0x47b468
call fcn.00436256
push esi
call fcn.00436200
add esp, 0x14
mov eax, dword [0x4747850]
test eax, eax
jne 0x4199d7
call fcn.0041e9c0
mov eax, dword [0x4747850]
mov byte [0x47bb19], 0
test eax, eax
je 0x4199f4
push 0xa
call ebx
mov eax, dword [0x4747850]
test eax, eax
jne 0x4199e7
push 0
push ebp
call dword [sym.imp.KERNEL32.dll_TerminateThread]
call fcn.00436817
and eax, 0x800000ff
jns 0x419a10
dec eax
or eax, 0xffffff00
inc eax
mov byte [esp + 0x18], al
call fcn.00436817
and eax, 0x800000ff
jns 0x419a27
dec eax
or eax, 0xffffff00
inc eax
mov byte [esp + 0x19], al
call fcn.00436817
and eax, 0x800000ff
jns 0x419a3e
dec eax
or eax, 0xffffff00
inc eax
mov byte [esp + 0x1a], al
call fcn.00436817
and eax, 0x800000ff
jns 0x419a55
dec eax
or eax, 0xffffff00
inc eax
mov byte [esp + 0x1b], al
call fcn.00436817
and eax, 0x800000ff
jns 0x419a6c
dec eax
or eax, 0xffffff00
inc eax
mov byte [esp + 0x1c], al
call fcn.00436817
and eax, 0x800000ff
jns 0x419a83
dec eax
or eax, 0xffffff00
inc eax
mov byte [esp + 0x1d], al
call fcn.00436817
and eax, 0x800000ff
jns 0x419a9a
dec eax
or eax, 0xffffff00
inc eax
mov byte [esp + 0x1e], al
call fcn.00436817
and eax, 0x800000ff
jns 0x419ab1
dec eax
or eax, 0xffffff00
inc eax
mov byte [esp + 0x1f], al
call fcn.00436817
and eax, 0x800000ff
jns 0x419ac8
dec eax
or eax, 0xffffff00
inc eax
mov byte [esp + 0x20], al
call fcn.00436817
and eax, 0x800000ff
jns 0x419adf
dec eax
or eax, 0xffffff00
inc eax
lea ecx, [esp + 0xac]
lea edx, [esp + 0x18]
push ecx
push 0xa
push edx
push 0x2e
mov byte [esp + 0x31], al
call fcn.0042f0e0
mov ebp, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
add esp, 0x10
mov esi, eax
mov eax, dword [0x3301438]
push 0x1388
push eax
call ebp
mov ecx, dword [0x47428bc]
lea eax, [esp + 0xac]
mov edx, dword [ecx*4 + 0x47b22c]
push edx
push esi
push eax
call fcn.0042e140
mov ecx, dword [0x3301438]
add esp, 0xc
push 0
push 1
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push 0x1f4
call ebx
call dword [sym.imp.WSOCK32.dll_WSACleanup]
call fcn.00408e20
call fcn.00408de0
push str.zlib0.dll
push 0x4959f8
lea edx, [esp + 0x5a0]
push str._s_s
push edx
call fcn.004361ae
lea eax, [esp + 0x5a8]
push 0x482148
push eax
call fcn.00436380
mov esi, eax
add esp, 0x18
test esi, esi
je 0x419dda
push esi
push 1
push 0x19
push 0x47bb00
call fcn.00436256
push 8
push 0x4413c8
push 8
push 0x19cc6e0
call fcn.00401430
push esi
push 1
push 0xad
push 0x19cc6e0
call fcn.00436256
push esi
push 1
push 0x58
push 0x487898
call fcn.00436256
add esp, 0x40
push esi
push 1
push 4
push 0x47ba30
call fcn.00436256
push esi
push 1
push 8
push 0x47ba38
call fcn.00436256
push esi
push 1
push 4
push 0x4741c94
call fcn.00436256
push esi
push 1
push 4
push 0x4741c98
call fcn.00436256
add esp, 0x40
push esi
push 1
push 8
push 0x47bae8
call fcn.00436256
push esi
push 1
push 4
push 0x47babc
call fcn.00436256
push esi
push 1
push 8
push 0x47bac0
call fcn.00436256
push esi
push 1
push 4
push 0x47bad0
call fcn.00436256
add esp, 0x40
push esi
push 1
push 8
push 0x47bad8
call fcn.00436256
push esi
push 1
push 4
push 0x47bb2c
call fcn.00436256
push esi
push 1
push 4
push 0x47bb30
call fcn.00436256
push esi
push 1
push 0x3c
push 0x476160
call fcn.00436256
add esp, 0x40
push esi
push 1
push 4
push 0x4747854
call fcn.00436256
push esi
push 1
push 4
push 0x47bc10
call fcn.00436256
push esi
push 1
push 4
push 0x47bc14
call fcn.00436256
push esi
push 1
push 4
push 0x47bbe8
call fcn.00436256
add esp, 0x40
push esi
push 1
push 4
push 0x47bbec
call fcn.00436256
push esi
push 1
push 4
push 0x47bb28
call fcn.00436256
push esi
push 1
push 4
push 0x4741c8c
call fcn.00436256
push esi
push 1
push 4
push 0x47428bc
call fcn.00436256
add esp, 0x40
push esi
push 1
push 4
push 0x4741c14
call fcn.00436256
push esi
push 1
push 4
push 0x47404a0
call fcn.00436256
push esi
push 1
push 4
push 0x47bbdc
call fcn.00436256
push esi
push 1
push 4
push 0x474059c
call fcn.00436256
add esp, 0x40
push esi
push 1
push 4
push 0x47405a0
call fcn.00436256
push esi
push 1
push 4
push 0x4741b08
call fcn.00436256
push esi
push 1
push 4
push 0x47404f8
call fcn.00436256
push esi
push 1
push 4
push 0x47404fc
call fcn.00436256
add esp, 0x40
push esi
push 1
push 4
push 0x47404b0
call fcn.00436256
push esi
push 1
push 4
push 0x47428c0
call fcn.00436256
push esi
push 1
push 1
push 0x474293a
call fcn.00436256
push esi
push 1
push 1
push 0x474293b
call fcn.00436256
add esp, 0x40
push esi
call fcn.00436200
add esp, 4
mov ecx, dword [0x4738d98]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
push ecx
call esi
mov edx, dword [0x471e5f8]
push edx
call esi
mov eax, dword [0x4696034]
push eax
call esi
mov ecx, dword [0x46ad1ec]
push ecx
call esi
mov edx, dword [0x678b48]
push edx
call esi
mov eax, dword [0x3e8a678]
push eax
call esi
mov ecx, dword [0x1f80edc]
push 0xffffffffffffffff
push ecx
call ebp
mov eax, dword [0x47404bc]
test eax, eax
je 0x419e31
push eax
call fcn.00436200
add esp, 4
mov eax, dword [0x4741c18]
test eax, eax
je 0x419e43
push eax
call fcn.00436200
add esp, 4
mov eax, dword [0x47404c0]
test eax, eax
je 0x419e55
push eax
call fcn.00436200
add esp, 4
mov edx, dword [0x1f80edc]
push 0
push 1
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push 1
push edi
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x4747954]
test eax, eax
je 0x419e86
mov ecx, dword [0x3ec4ac8]
push ecx
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [0x4741c40]
test eax, eax
je 0x419e96
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push str.i.vbs
push 0x4959f8
lea edx, [esp + 0x10c]
push str._s_s
push edx
call fcn.004361ae
lea eax, [esp + 0x114]
push eax
call fcn.00436863
push 0x48274c
push 0x4959f8
lea ecx, [esp + 0x120]
push str._s_s
push ecx
call fcn.004361ae
lea edx, [esp + 0x128]
push edx
call fcn.00436863
mov eax, dword [esp + 0xc0]
add esp, 0x28
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xd88
ret 0x10