Function at 0x41d7f0
Capabilities:
Authenticate hmac
Check if file exists
Contain obfuscated stackstrings
Create thread
Delete registry key
Query or enumerate registry value
Read .ini file
Read file on windows
Resume thread
Set registry value
Suspend thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e52a6
mov eax, dword fs:[0]
push eax
mov eax, 0x1638
call fcn.00474480
mov eax, dword [0x51f620]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
mov ecx, dword [0x529dcc]
mov dword [ebp - 0x1540], edi
mov dword [ebp - 0x1578], eax
call fcn.00449e50
mov ecx, dword [0x529dd8]
mov esi, eax
call fcn.00449e50
test esi, esi
je 0x421aca
test eax, eax
je 0x421aca
cmp esi, eax
je 0x41d88a
mov esi, edi
call fcn.0042cde0
lea esp, [ebp - 0x1654]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046d9d8
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x529dd0]
call fcn.00449e50
mov ecx, dword [0x529ddc]
mov esi, eax
call fcn.00449e50
test esi, esi
je 0x41d85f
test eax, eax
je 0x41d85f
cmp esi, 2
jb 0x41d85f
cmp eax, 2
jb 0x41d85f
cmp esi, eax
jne 0x41d85f
mov ecx, dword [0x529dd4]
call fcn.00449e50
mov ecx, dword [0x529de0]
mov esi, eax
call fcn.00449e50
test esi, esi
je 0x41d85f
test eax, eax
je 0x41d85f
cmp esi, eax
jne 0x41d85f
mov edx, 0x72
mov eax, edx
mov word [ebp - 0x246], dx
mov word [ebp - 0x244], ax
mov word [ebp - 0x240], dx
xor eax, eax
mov ecx, 0x45
mov word [ebp - 0x248], cx
mov word [ebp - 0x23e], ax
mov ecx, 0x6f
mov word [ebp - 0x242], cx
mov ecx, 0x4f
mov word [ebp - 0x390], cx
mov edx, 0x70
mov word [ebp - 0x38e], dx
mov eax, 0x65
mov word [ebp - 0x38c], ax
mov ecx, 0x72
mov word [ebp - 0x38a], cx
mov edx, 0x61
mov word [ebp - 0x388], dx
mov eax, 0x74
mov word [ebp - 0x386], ax
mov ecx, 0x69
mov word [ebp - 0x384], cx
mov edx, 0x6e
mov word [ebp - 0x382], dx
mov ebx, 0x73
mov eax, 0x67
mov word [ebp - 0x380], ax
mov ecx, 0x20
mov word [ebp - 0x37e], cx
mov edx, ebx
mov word [ebp - 0x37c], dx
mov eax, 0x79
mov word [ebp - 0x37a], ax
mov ecx, ebx
mov word [ebp - 0x378], cx
mov edx, 0x74
mov word [ebp - 0x376], dx
mov eax, 0x65
mov word [ebp - 0x374], ax
mov ecx, 0x6d
mov word [ebp - 0x372], cx
mov edx, 0x20
mov word [ebp - 0x370], dx
mov eax, 0x61
mov ecx, 0x62
mov edx, 0x6e
mov word [ebp - 0x36e], ax
mov word [ebp - 0x36c], cx
mov word [ebp - 0x36a], dx
mov eax, 0x6f
mov ecx, 0x72
mov edx, 0x6d
mov word [ebp - 0x368], ax
mov word [ebp - 0x366], cx
mov word [ebp - 0x364], dx
mov eax, 0x61
mov ecx, 0x6c
xor edx, edx
mov word [ebp - 0x362], ax
mov word [ebp - 0x360], cx
mov word [ebp - 0x35e], dx
call fcn.0041cc60
test eax, eax
je 0x41db00
push 0xffffffffffffffff
push 0x50f2bf
push 0x50f2bf
push 0x50f2bf
push 0x3a
lea eax, [ebp - 0x1c]
push 0x4d
push eax
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], 0
call fcn.0040b130
add esp, 0x1c
push 0x600
call fcn.00450212
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x41daea
lea ecx, [ebp - 0x390]
push ecx
mov edx, esi
call fcn.00407090
add esp, 4
lea edx, [ebp - 0x248]
push edx
lea edx, [esi + 0x400]
call fcn.004070b0
add esp, 4
push 0
push 0
push esi
push 0x401190
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
push 0x40ebe0
push 0
push 0
call edi
jmp 0x41d866
mov eax, 0x48
mov word [ebp - 0x464], ax
mov ecx, 0x41
mov word [ebp - 0x462], cx
mov eax, 0x44
mov word [ebp - 0x45e], ax
mov edx, 0x52
mov word [ebp - 0x460], dx
mov ecx, 0x57
mov word [ebp - 0x45c], cx
mov eax, 0x52
mov word [ebp - 0x458], ax
mov edx, 0x41
mov word [ebp - 0x45a], dx
mov ecx, 0x45
mov word [ebp - 0x456], cx
mov word [ebp - 0x450], cx
mov eax, 0x44
mov word [ebp - 0x452], ax
mov edx, 0x5c
mov word [ebp - 0x454], dx
mov eax, 0x43
mov word [ebp - 0x44c], ax
mov ecx, 0x52
mov word [ebp - 0x44a], cx
mov edx, 0x53
mov word [ebp - 0x44e], dx
mov eax, 0x50
mov word [ebp - 0x446], ax
mov ecx, 0x54
mov word [ebp - 0x444], cx
mov edx, 0x49
mov word [ebp - 0x448], dx
mov word [ebp - 0x442], dx
mov eax, 0x4f
mov word [ebp - 0x440], ax
mov ecx, 0x4e
mov word [ebp - 0x43e], cx
mov edx, 0x5c
mov word [ebp - 0x43c], dx
mov eax, 0x53
mov word [ebp - 0x43a], ax
mov ecx, 0x79
mov word [ebp - 0x438], cx
mov edx, ebx
mov word [ebp - 0x436], dx
mov eax, 0x74
mov word [ebp - 0x434], ax
mov ecx, 0x65
mov word [ebp - 0x432], cx
xor eax, eax
mov edx, 0x6d
mov word [ebp - 0x430], dx
mov word [ebp - 0x42e], ax
mov ecx, 0x48
mov word [ebp - 0x3c4], cx
mov edx, 0x41
mov word [ebp - 0x3c2], dx
mov eax, 0x52
mov ecx, 0x44
mov word [ebp - 0x3c0], ax
mov word [ebp - 0x3be], cx
mov edx, 0x57
mov word [ebp - 0x3bc], dx
mov eax, 0x41
mov ecx, 0x52
mov word [ebp - 0x3ba], ax
mov word [ebp - 0x3b8], cx
mov edx, 0x45
mov eax, 0x5c
mov ecx, 0x41
mov word [ebp - 0x3b6], dx
mov edx, 0x43
mov word [ebp - 0x3b4], ax
mov word [ebp - 0x3b2], cx
mov eax, 0x50
mov ecx, 0x49
mov word [ebp - 0x3b0], dx
mov word [ebp - 0x3ae], ax
mov word [ebp - 0x3ac], cx
mov edx, 0x5c
mov word [ebp - 0x3aa], dx
mov eax, 0x44
mov edx, eax
mov word [ebp - 0x3a8], ax
mov word [ebp - 0x3a4], dx
mov ecx, 0x53
mov word [ebp - 0x3a6], cx
mov eax, 0x54
mov word [ebp - 0x3a2], ax
mov ecx, 0x5c
mov word [ebp - 0x3a0], cx
mov edx, 0x56
mov word [ebp - 0x39e], dx
mov eax, 0x42
mov word [ebp - 0x39c], ax
mov ecx, 0x4f
mov word [ebp - 0x39a], cx
mov eax, 0x5f
mov ecx, eax
mov word [ebp - 0x396], ax
mov word [ebp - 0x394], cx
mov edx, 0x58
mov word [ebp - 0x398], dx
xor edx, edx
mov word [ebp - 0x392], dx
mov eax, 0x48
mov word [ebp - 0x35c], ax
mov ecx, 0x41
mov word [ebp - 0x35a], cx
mov edx, 0x52
mov word [ebp - 0x358], dx
mov eax, 0x44
mov word [ebp - 0x356], ax
mov ecx, 0x57
mov word [ebp - 0x354], cx
mov edx, 0x41
mov word [ebp - 0x352], dx
mov eax, 0x52
mov word [ebp - 0x350], ax
mov ecx, 0x45
mov word [ebp - 0x34e], cx
mov edx, 0x5c
mov word [ebp - 0x34c], dx
mov eax, 0x41
mov word [ebp - 0x34a], ax
mov ecx, 0x43
mov word [ebp - 0x348], cx
mov edx, 0x50
mov word [ebp - 0x346], dx
mov eax, 0x49
mov word [ebp - 0x344], ax
mov ecx, 0x5c
mov word [ebp - 0x342], cx
mov edx, 0x44
mov ecx, edx
mov word [ebp - 0x340], dx
mov eax, 0x53
mov word [ebp - 0x33e], ax
xor eax, eax
mov edx, 0x54
mov word [ebp - 0x33c], cx
mov word [ebp - 0x33a], dx
mov word [ebp - 0x338], ax
mov ecx, 0x53
mov edx, 0x79
mov eax, ebx
mov word [ebp - 0x2e4], cx
mov word [ebp - 0x2e2], dx
mov word [ebp - 0x2e0], ax
mov ecx, 0x74
mov edx, 0x65
mov eax, 0x6d
mov word [ebp - 0x2de], cx
mov word [ebp - 0x2dc], dx
mov word [ebp - 0x2da], ax
mov ecx, 0x42
mov edx, 0x69
mov eax, 0x6f
mov word [ebp - 0x2d8], cx
mov word [ebp - 0x2d6], dx
mov word [ebp - 0x2d4], ax
mov ecx, ebx
mov word [ebp - 0x2d2], cx
mov edx, 0x56
mov word [ebp - 0x2d0], dx
mov eax, 0x65
mov word [ebp - 0x2ce], ax
mov ecx, 0x72
mov word [ebp - 0x2cc], cx
mov edx, ebx
mov word [ebp - 0x2ca], dx
mov eax, 0x69
mov word [ebp - 0x2c8], ax
xor eax, eax
mov word [ebp - 0x2c2], ax
mov ecx, 0x6f
mov word [ebp - 0x2c6], cx
mov edx, 0x6e
mov word [ebp - 0x2c4], dx
mov ecx, 0x56
mov word [ebp - 0x2c0], cx
mov edx, 0x69
mov word [ebp - 0x2be], dx
mov eax, 0x64
mov word [ebp - 0x2bc], ax
mov ecx, 0x65
mov word [ebp - 0x2ba], cx
mov edx, 0x6f
mov word [ebp - 0x2b8], dx
mov word [ebp - 0x2b2], dx
mov eax, 0x42
mov word [ebp - 0x2b6], ax
mov ecx, 0x69
mov word [ebp - 0x2b4], cx
mov eax, ebx
mov word [ebp - 0x2b0], ax
mov ecx, 0x56
mov word [ebp - 0x2ae], cx
mov edx, 0x65
mov word [ebp - 0x2ac], dx
mov eax, 0x72
mov word [ebp - 0x2aa], ax
mov ecx, ebx
mov word [ebp - 0x2a8], cx
mov edx, 0x69
mov word [ebp - 0x2a6], dx
xor edx, edx
mov word [ebp - 0x2a0], dx
mov eax, 0x6f
mov word [ebp - 0x2a4], ax
mov ecx, 0x6e
mov word [ebp - 0x2a2], cx
mov eax, 0x56
mov word [ebp - 0x23c], ax
mov ecx, 0x42
mov word [ebp - 0x23a], cx
mov edx, 0x4f
mov word [ebp - 0x238], dx
xor ecx, ecx
mov eax, 0x58
mov edx, 0x56
mov word [ebp - 0x236], ax
mov word [ebp - 0x234], cx
mov word [ebp - 0x2fc], dx
mov eax, 0x69
mov ecx, 0x72
mov edx, 0x74
mov word [ebp - 0x2fa], ax
mov word [ebp - 0x2f8], cx
mov word [ebp - 0x2f6], dx
mov eax, 0x75
mov ecx, 0x61
mov edx, 0x6c
mov word [ebp - 0x2f4], ax
mov word [ebp - 0x2f2], cx
mov word [ebp - 0x2f0], dx
mov eax, 0x42
mov ecx, 0x6f
mov edx, 0x78
mov word [ebp - 0x2ee], ax
mov word [ebp - 0x2ec], cx
mov word [ebp - 0x2ea], dx
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor eax, eax
mov word [ebp - 0x2e8], ax
mov eax, 0x42
mov word [ebp - 0x1dc], ax
mov ecx, 0x58
lea eax, [ebp - 0x157c]
push eax
mov word [ebp - 0x1e0], cx
mov edx, 0x4f
push 0xf003f
mov word [ebp - 0x1de], dx
mov ecx, 0x56
xor edx, edx
mov word [ebp - 0x1da], cx
push edx
lea ecx, [ebp - 0x464]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
mov word [ebp - 0x1d8], dx
call esi
test eax, eax
jne 0x41e2cb
push 0x207
push eax
lea edx, [ebp - 0x6cb]
push edx
mov byte [ebp - 0x6cc], al
call fcn.004737c0
add esp, 0xc
lea eax, [ebp - 0x1558]
push eax
lea ecx, [ebp - 0x6cc]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1570]
push edx
push 0
lea eax, [ebp - 0x2e4]
push eax
push ecx
mov dword [ebp - 0x1570], 7
mov dword [ebp - 0x1558], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x41e2bc
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x6cc]
push eax
call fcn.0046f0ac
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
add esp, 8
test eax, eax
je 0x41e1af
lea eax, [ebp - 0x1e0]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41e180
sub eax, edx
sar eax, 1
lea ecx, [eax + eax + 2]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1e0]
push edx
push 7
push 0
lea eax, [ebp - 0x2e4]
push eax
push ecx
call edi
push 0x208
lea edx, [ebp - 0x6cc]
push 0
push edx
call fcn.004737c0
add esp, 0xc
lea eax, [ebp - 0x1558]
push eax
lea ecx, [ebp - 0x6cc]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1570]
push edx
push 0
lea eax, [ebp - 0x2c0]
push eax
push ecx
mov dword [ebp - 0x1558], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x41e2bc
lea edx, [ebp - 0x2fc]
push edx
lea eax, [ebp - 0x6cc]
push eax
call fcn.0046f0ac
add esp, 8
test eax, eax
je 0x41e254
lea eax, [ebp - 0x1e0]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41e225
sub eax, edx
sar eax, 1
lea ecx, [eax + eax + 2]
push ecx
mov ecx, dword [ebp - 0x157c]
lea edx, [ebp - 0x1e0]
push edx
push 7
push 0
lea eax, [ebp - 0x2c0]
push eax
push ecx
call edi
lea edx, [ebp - 0x1560]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x3c4]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
test eax, eax
jne 0x41e2bc
mov ecx, dword [ebp - 0x1560]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
call edi
lea edx, [ebp - 0x1560]
push edx
push 0xf003f
push 0
lea eax, [ebp - 0x35c]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call esi
test eax, eax
jne 0x41e2c2
mov ecx, dword [ebp - 0x1560]
push eax
push ecx
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov edx, dword [ebp - 0x1560]
push edx
call edi
jmp 0x41e2c2
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x157c]
push eax
call edi
mov edx, 0x72
mov eax, edx
mov word [ebp - 0x222], dx
mov word [ebp - 0x21c], dx
mov word [ebp - 0x220], ax
xor eax, eax
mov ecx, 0x45
mov word [ebp - 0x224], cx
mov word [ebp - 0x21a], ax
mov ecx, 0x6f
mov word [ebp - 0x21e], cx
mov edx, 0x6f
mov word [ebp - 0x42a], dx
mov ecx, 0x59
mov word [ebp - 0x42c], cx
mov edx, 0x20
mov word [ebp - 0x424], dx
mov ecx, 0x72
mov word [ebp - 0x426], cx
mov edx, 0x6d
mov word [ebp - 0x41e], dx
mov eax, 0x75
mov word [ebp - 0x428], ax
mov ecx, 0x6f
mov word [ebp - 0x420], cx
mov edx, 0x74
mov word [ebp - 0x418], dx
mov eax, 0x63
mov word [ebp - 0x422], ax
mov ecx, 0x75
mov word [ebp - 0x41a], cx
mov edx, 0x20
mov word [ebp - 0x412], dx
mov eax, 0x70
mov word [ebp - 0x41c], ax
mov ecx, 0x72
mov word [ebp - 0x414], cx
mov edx, 0x79
mov word [ebp - 0x40c], dx
mov eax, 0x65
mov word [ebp - 0x416], ax
mov ecx, 0x61
mov word [ebp - 0x40e], cx
mov edx, 0x65
mov word [ebp - 0x406], dx
mov eax, 0x6d
mov word [ebp - 0x410], ax
mov eax, 0x20
mov ecx, 0x62
mov word [ebp - 0x408], cx
mov edx, 0x6e
mov word [ebp - 0x400], dx
mov word [ebp - 0x40a], ax
mov word [ebp - 0x404], ax
mov ecx, 0x69
mov word [ebp - 0x402], cx
mov edx, 0x63
mov eax, 0x66
mov word [ebp - 0x3fa], dx
mov word [ebp - 0x3fe], ax
mov ecx, 0x65
mov edx, 0x64
mov word [ebp - 0x3fc], cx
mov eax, 0x74
mov word [ebp - 0x3f6], cx
mov word [ebp - 0x3f4], dx
mov word [ebp - 0x3f8], ax
mov eax, 0x20
mov ecx, 0x62
mov edx, 0x79
mov word [ebp - 0x3f0], cx
mov word [ebp - 0x3ee], dx
mov ecx, 0x61
mov edx, eax
mov word [ebp - 0x3f2], ax
mov word [ebp - 0x3ec], ax
mov eax, 0x63
mov word [ebp - 0x3ea], cx
mov word [ebp - 0x3e8], dx
mov word [ebp - 0x3e6], ax
mov ecx, 0x6f
mov word [ebp - 0x3e4], cx
mov eax, 0x70
mov word [ebp - 0x3e0], ax
mov ecx, 0x75
mov word [ebp - 0x3de], cx
mov edx, 0x6d
mov word [ebp - 0x3e2], dx
mov eax, 0x65
mov word [ebp - 0x3da], ax
mov ecx, 0x72
mov word [ebp - 0x3d8], cx
mov edx, 0x74
mov word [ebp - 0x3dc], dx
mov eax, 0x76
mov word [ebp - 0x3d4], ax
mov ecx, 0x69
mov edx, 0x20
mov word [ebp - 0x3d2], cx
mov eax, 0x75
mov word [ebp - 0x3d6], dx
mov word [ebp - 0x3ce], ax
xor eax, eax
mov ecx, ebx
mov edx, 0x72
mov word [ebp - 0x3cc], cx
mov word [ebp - 0x3d0], dx
mov edx, 0x2e
mov word [ebp - 0x3c8], ax
mov byte [ebp - 0xcc], al
mov al, 0x3a
lea ecx, [ebp - 0xd8]
push ecx
mov word [ebp - 0x3ca], dx
mov byte [ebp - 0xd8], 0x57
mov byte [ebp - 0xd7], 0x49
mov byte [ebp - 0xd6], 0x4e
mov byte [ebp - 0xd5], 0x53
mov byte [ebp - 0xd4], 0x50
mov byte [ebp - 0xd3], 0x4f
mov byte [ebp - 0xd2], 0x4f
mov byte [ebp - 0xd1], 0x4c
mov byte [ebp - 0xd0], dl
mov byte [ebp - 0xcf], 0x44
mov byte [ebp - 0xce], 0x52
mov byte [ebp - 0xcd], 0x56
mov byte [ebp - 0x140], al
mov byte [ebp - 0x13f], 0x5c
mov byte [ebp - 0x13e], 0x77
mov byte [ebp - 0x13d], 0x69
mov byte [ebp - 0x13c], 0x6e
mov byte [ebp - 0x13b], 0x64
mov byte [ebp - 0x13a], 0x6f
mov byte [ebp - 0x139], 0x77
mov byte [ebp - 0x138], bl
mov byte [ebp - 0x137], 0x5c
mov byte [ebp - 0x136], bl
mov byte [ebp - 0x135], 0x79
mov byte [ebp - 0x134], bl
mov byte [ebp - 0x133], 0x77
mov byte [ebp - 0x132], 0x6f
mov byte [ebp - 0x131], 0x77
mov byte [ebp - 0x130], 0
mov byte [ebp - 0x12c], al
mov byte [ebp - 0x12b], 0x5c
mov byte [ebp - 0x12a], 0x77
mov byte [ebp - 0x129], 0x69
mov byte [ebp - 0x128], 0x6e
mov byte [ebp - 0x127], 0x64
mov byte [ebp - 0x126], 0x6f
mov byte [ebp - 0x125], 0x77
mov byte [ebp - 0x124], bl
mov byte [ebp - 0x123], 0x5c
mov byte [ebp - 0x122], bl
mov byte [ebp - 0x121], 0x79
mov byte [ebp - 0x120], bl
mov byte [ebp - 0x11f], 0x74
mov byte [ebp - 0x11e], 0x65
mov byte [ebp - 0x11d], 0x6d
mov byte [ebp - 0x11c], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
test esi, esi
je 0x41e7dd
push 0x1ff
lea edx, [ebp - 0x6c3]
push 0
push edx
mov byte [ebp - 0x6c4], 0
call fcn.004737c0
add esp, 0xc
push 0x200
lea eax, [ebp - 0x6c4]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x41e754
push 0xffffffffffffffff
push 0x50f2bf
push 0x50f2bf
push 0x50f2bf
push 0x3b
lea ecx, [ebp - 0x1c]
push 0x4d
push ecx
mov byte [ebp - 0x16], 0
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1c], 0x63
call fcn.0040b130
add esp, 0x1c
push 0x600
call fcn.00450212
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x41daea
lea edx, [ebp - 0x42c]
push edx
mov edx, esi
call fcn.00407090
add esp, 4
lea eax, [ebp - 0x224]
push eax
jmp 0x41dac5
lea eax, [ebp - 0x6c4]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41e760
sub eax, edx
mov edi, eax
mov esi, 0
je 0x41e78f
movsx ecx, byte [ebp + esi - 0x6c4]
push ecx
call fcn.00471577
mov byte [ebp + esi - 0x6c4], al
inc esi
add esp, 4
cmp esi, edi
jb 0x41e772
lea edx, [ebp - 0x140]
push edx
lea eax, [ebp - 0x6c4]
push eax
call fcn.0046e6a0
add esp, 8
test eax, eax
jne 0x41e7dd
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x6c4]
push edx
call fcn.0046e6a0
add esp, 8
test eax, eax
jne 0x41e7dd
push 0xffffffffffffffff
lea eax, [ebp - 0x6c4]
push eax
push 0x50f2bf
push 0x50f2bf
push 0x3c
jmp 0x41e6f3
mov eax, dword [ebp - 0x1540]
lea ecx, [eax + 0x160]
push ecx
push eax
call fcn.0044a0b0
add esp, 8
call fcn.00416200
mov ecx, dword [0x52990c]
call fcn.00449e50
mov edx, 0x43
mov word [ebp - 0x27c], dx
mov edi, eax
mov ecx, 0x6e
mov word [ebp - 0x278], cx
mov edx, 0x27
mov word [ebp - 0x276], dx
mov ecx, 0x20
mov word [ebp - 0x272], cx
mov edx, 0x53
mov word [ebp - 0x270], dx
mov ecx, 0x61
mov word [ebp - 0x26c], cx
mov eax, 0x61
mov word [ebp - 0x27a], ax
mov edx, 0x72
mov word [ebp - 0x26a], dx
mov eax, 0x74
mov word [ebp - 0x274], ax
mov word [ebp - 0x26e], ax
mov word [ebp - 0x268], ax
mov ecx, 0x20
mov word [ebp - 0x266], cx
mov edx, 0x47
mov word [ebp - 0x264], dx
mov ecx, 0x6d
mov word [ebp - 0x260], cx
mov eax, 0x61
mov word [ebp - 0x262], ax
mov edx, 0x65
mov word [ebp - 0x25e], dx
mov ecx, 0x43
mov word [ebp - 0x25a], cx
mov eax, 0x20
mov word [ebp - 0x25c], ax
mov edx, 0x6c
mov word [ebp - 0x258], dx
mov ecx, 0x65
mov eax, 0x69
mov word [ebp - 0x254], cx
mov edx, 0x6e
mov word [ebp - 0x256], ax
mov word [ebp - 0x252], dx
mov ecx, 0x2e
xor edx, edx
mov eax, 0x74
mov word [ebp - 0x24e], cx
mov ecx, 0x72
mov word [ebp - 0x250], ax
mov word [ebp - 0x24c], dx
mov eax, 0x45
mov edx, ecx
mov word [ebp - 0x1f4], ax
mov word [ebp - 0x1f0], dx
mov eax, 0x6f
xor edx, edx
mov dword [ebp - 0x1588], edi
mov word [ebp - 0x1f2], cx
mov word [ebp - 0x1ee], ax
mov word [ebp - 0x1ec], cx
mov word [ebp - 0x1ea], dx
mov byte [ebp - 0xbc], 0x6b
mov byte [ebp - 0xbb], 0x65
mov byte [ebp - 0xba], cl
mov byte [ebp - 0xb9], 0x6e
mov byte [ebp - 0xb8], 0x65
mov byte [ebp - 0xb7], 0x6c
mov byte [ebp - 0xb6], 0x33
mov byte [ebp - 0xb5], 0x32
mov byte [ebp - 0xb4], 0x2e
mov byte [ebp - 0xb3], 0x64
mov byte [ebp - 0xb2], 0x6c
mov byte [ebp - 0xf0], al
mov byte [ebp - 0x167], al
mov byte [ebp - 0x15f], al
mov byte [ebp - 0x100], al
mov byte [ebp - 0x110], al
lea eax, [ebp - 0xf8]
mov byte [ebp - 0x16d], cl
mov byte [ebp - 0x169], cl
mov byte [ebp - 0x166], cl
mov byte [ebp - 0x15a], cl
mov byte [ebp - 0x107], cl
mov byte [ebp - 0x101], cl
mov byte [ebp - 0x117], cl
mov byte [ebp - 0x111], cl
push eax
lea ecx, [ebp - 0xbc]
push ecx
mov byte [ebp - 0xb1], 0x6c
mov byte [ebp - 0xb0], dl
mov byte [ebp - 0xf8], 0x47
mov byte [ebp - 0xf7], 0x65
mov byte [ebp - 0xf6], 0x74
mov byte [ebp - 0xf5], 0x54
mov byte [ebp - 0xf4], 0x69
mov byte [ebp - 0xf3], 0x63
mov byte [ebp - 0xf2], 0x6b
mov byte [ebp - 0xf1], 0x43
mov byte [ebp - 0xef], 0x75
mov byte [ebp - 0xee], 0x6e
mov byte [ebp - 0xed], 0x74
mov byte [ebp - 0xec], dl
mov byte [ebp - 0x170], 0x51
mov byte [ebp - 0x16f], 0x75
mov byte [ebp - 0x16e], 0x65
mov byte [ebp - 0x16c], 0x79
mov byte [ebp - 0x16b], 0x50
mov byte [ebp - 0x16a], 0x65
mov byte [ebp - 0x168], 0x66
mov byte [ebp - 0x165], 0x6d
mov byte [ebp - 0x164], 0x61
mov byte [ebp - 0x163], 0x6e
mov byte [ebp - 0x162], 0x63
mov byte [ebp - 0x161], 0x65
mov byte [ebp - 0x160], 0x43
mov byte [ebp - 0x15e], 0x75
mov byte [ebp - 0x15d], 0x6e
mov byte [ebp - 0x15c], 0x74
mov byte [ebp - 0x15b], 0x65
mov byte [ebp - 0x159], dl
mov byte [ebp - 0x108], 0x43
mov byte [ebp - 0x106], 0x65
mov byte [ebp - 0x105], 0x61
mov byte [ebp - 0x104], 0x74
mov byte [ebp - 0x103], 0x65
mov byte [ebp - 0x102], 0x50
mov byte [ebp - 0xff], 0x63
mov byte [ebp - 0xfe], 0x65
mov byte [ebp - 0xfd], bl
mov byte [ebp - 0xfc], bl
mov byte [ebp - 0xfb], 0x41
mov byte [ebp - 0xfa], dl
mov byte [ebp - 0x118], 0x43
mov byte [ebp - 0x116], 0x65
mov byte [ebp - 0x115], 0x61
mov byte [ebp - 0x114], 0x74
mov byte [ebp - 0x113], 0x65
mov byte [ebp - 0x112], 0x50
mov byte [ebp - 0x10f], 0x63
mov byte [ebp - 0x10e], 0x65
mov byte [ebp - 0x10d], bl
mov byte [ebp - 0x10c], bl
mov byte [ebp - 0x10b], 0x57
mov byte [ebp - 0x10a], dl
call fcn.00486440
mov esi, eax
test esi, esi
je 0x41ecd1
cmp byte [esi], 0xe9
jne 0x41ecd1
push 0
push 0
call fcn.0044a0b0
push 0x600
call fcn.00450212
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41ec03
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00407090
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.004070b0
add esp, 4
push 0
push 0
push edi
push 0x401190
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push 0
push ecx
mov dword [ebp - 0x1568], 0
mov byte [ebp - 0x6c4], 0
call fcn.004737c0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0xc22]
push eax
mov word [ebp - 0xc24], dx
call fcn.004737c0
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.004012a0
mov eax, edi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ec70
sub eax, edx
je 0x41ecb7
push 0xffffffffffffffff
lea ecx, [ebp - 0x6c4]
push ecx
push 0x50f2bf
push 0x50f2bf
push 0x3d
lea edx, [ebp - 0x1c]
push 0x4d
push edx
mov byte [ebp - 0x16], 0
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1c], 0x63
call fcn.0040b130
add esp, 0x1c
push 0
push 0
push 0
push 0x40ebe0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x41d866
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00486440
mov esi, eax
test esi, esi
je 0x41edd7
cmp byte [esi], 0xe9
jne 0x41edd7
push 0
push 0
call fcn.0044a0b0
push 0x600
call fcn.00450212
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41ed54
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00407090
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.004070b0
add esp, 4
push 0
push 0
push edi
push 0x401190
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push 0
push ecx
mov dword [ebp - 0x1568], 0
mov byte [ebp - 0x6c4], 0
call fcn.004737c0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0xc22]
push eax
mov word [ebp - 0xc24], dx
call fcn.004737c0
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.004012a0
mov eax, edi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41edc1
sub eax, edx
je 0x41ecb7
push 0xfffffffffffffffe
jmp 0x41ec7d
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00486440
mov esi, eax
test esi, esi
je 0x41eedd
cmp byte [esi], 0xe9
jne 0x41eedd
push 0
push 0
call fcn.0044a0b0
push 0x600
call fcn.00450212
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41ee5a
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00407090
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.004070b0
add esp, 4
push 0
push 0
push edi
push 0x401190
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push 0
push ecx
mov dword [ebp - 0x1568], 0
mov byte [ebp - 0x6c4], 0
call fcn.004737c0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0xc22]
push eax
mov word [ebp - 0xc24], dx
call fcn.004737c0
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.004012a0
mov eax, edi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41eec7
sub eax, edx
je 0x41ecb7
push 0xfffffffffffffffd
jmp 0x41ec7d
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call fcn.00486440
mov esi, eax
test esi, esi
je 0x41efe6
cmp byte [esi], 0xe9
jne 0x41efe6
push 0
push 0
call fcn.0044a0b0
push 0x600
call fcn.00450212
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41ef60
lea edx, [ebp - 0x27c]
push edx
mov edx, edi
call fcn.00407090
lea eax, [ebp - 0x1f4]
add esp, 4
push eax
lea edx, [edi + 0x400]
call fcn.004070b0
add esp, 4
push 0
push 0
push edi
push 0x401190
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1ff
lea ecx, [ebp - 0x6c3]
push 0
push ecx
mov dword [ebp - 0x1568], 0
mov byte [ebp - 0x6c4], 0
call fcn.004737c0
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0xc22]
push eax
mov word [ebp - 0xc24], dx
call fcn.004737c0
mov edx, dword [esi + 1]
add esp, 0xc
lea ecx, [ebp - 0x1568]
push ecx
lea eax, [edx + esi + 5]
push eax
lea ecx, [ebp - 0xc24]
lea edi, [ebp - 0x6c4]
call fcn.004012a0
mov eax, edi
add esp, 8
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41efd0
sub eax, edx
je 0x41ecb7
push 0xfffffffffffffffc
jmp 0x41ec7d
mov eax, 0x25
mov edx, eax
mov word [ebp - 0x200], ax
mov word [ebp - 0x1fc], dx
mov eax, ebx
mov word [ebp - 0x1fa], ax
mov ecx, ebx
mov word [ebp - 0x1fe], cx
xor ecx, ecx
mov word [ebp - 0x1f8], cx
mov word [ebp - 0x1e4], cx
mov eax, 0x62
mov word [ebp - 0x1e6], ax
mov edx, 0x72
mov word [ebp - 0x1e8], dx
mov eax, 0x69
mov word [ebp - 0x29a], ax
mov ecx, 0x6c
mov word [ebp - 0x298], cx
mov edx, 0x46
mov word [ebp - 0x29c], dx
mov eax, 0x20
mov word [ebp - 0x294], ax
mov ecx, 0x63
mov word [ebp - 0x292], cx
mov eax, 0x72
mov ecx, eax
mov word [ebp - 0x28e], ax
mov edx, 0x65
mov word [ebp - 0x296], dx
mov word [ebp - 0x28c], cx
mov edx, 0x6f
mov word [ebp - 0x290], dx
mov eax, 0x70
mov word [ebp - 0x288], ax
mov ecx, 0x74
mov word [ebp - 0x286], cx
mov edx, 0x75
mov word [ebp - 0x28a], dx
mov eax, 0x64
mov word [ebp - 0x282], ax
mov ecx, 0x21
mov word [ebp - 0x280], cx
mov edx, 0x65
mov word [ebp - 0x284], dx
mov eax, 0x4c
xor edx, edx
mov word [ebp - 0x218], ax
mov ecx, 0x6f
mov word [ebp - 0x216], cx
mov eax, 0x69
mov word [ebp - 0x27e], dx
mov word [ebp - 0x212], ax
mov ecx, 0x6e
xor eax, eax
mov edx, 0x67
push 0x206
mov word [ebp - 0x210], cx
mov word [ebp - 0x214], dx
xor edx, edx
push eax
lea ecx, [ebp - 0x112a]
push ecx
mov word [ebp - 0x20e], dx
mov dword [ebp - 0x1574], edx
mov word [ebp - 0x112c], ax
call fcn.004737c0
add esp, 0xc
lea eax, [edi + 0x4da]
push eax
lea edx, [ebp - 0x200]
push 0x5294f8
push edx
lea edx, [ebp - 0x112c]
mov dword [ebp - 0x1560], eax
call fcn.0040bf60
add esp, 0xc
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x112c]
push ecx
lea edx, [ebp - 0x1574]
push edx
call fcn.0046eb9c
mov eax, dword [ebp - 0x1574]
add esp, 0xc
test eax, eax
jne 0x41f246
push eax
push eax
call fcn.0044a0b0
push 0x600
call fcn.00450212
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x41f207
lea eax, [ebp - 0x29c]
push eax
mov edx, esi
call fcn.00407090
lea ecx, [ebp - 0x218]
add esp, 4
push ecx
lea edx, [esi + 0x400]
call fcn.004070b0
add esp, 4
push 0
push 0
push esi
push 0x401190
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffb
push 0x50f2bf
push 0x50f2bf
push 0x50f2bf
push 0x3d
lea edx, [ebp - 0x1c]
push 0x4d
push edx
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], 0
call fcn.0040b130
add esp, 0x1c
jmp 0x41daea
push 2
push 0
push eax
call fcn.004708fd
mov eax, dword [ebp - 0x1574]
add esp, 0xc
push eax
call fcn.00470b1f
mov ecx, dword [ebp - 0x1574]
add esp, 4
push 0
push 0
push ecx
mov esi, eax
call fcn.004708fd
add esp, 0xc
push esi
call fcn.00450241
mov edx, dword [ebp - 0x1574]
add esp, 4
push edx
push 1
mov edi, eax
push esi
push edi
call fcn.00470e2d
mov eax, dword [ebp - 0x1574]
push eax
call fcn.0046f030
xor eax, eax
lea ecx, [ebp - 0x1d4]
add esp, 0x14
push ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
call fcn.00491360
add esp, 4
push esi
lea edx, [ebp - 0x1d4]
push edi
push edx
call fcn.00491130
add esp, 0xc
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x44]
push ecx
call fcn.00491210
push edi
call fcn.0045024c
xor eax, eax
lea edx, [ebp - 0x4c4]
add esp, 0xc
push edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
call fcn.004910f0
add esp, 4
push 0x14
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x4c4]
push ecx
call fcn.00490ee0
add esp, 0xc
lea edx, [ebp - 0x4c4]
push edx
lea eax, [ebp - 0x2c]
push eax
call fcn.00490fc0
mov ecx, dword [ebp - 0x1578]
add esp, 8
call fcn.00449e50
mov edx, 0x10
add eax, 0xc
lea ecx, [ebp - 0x2c]
sub ecx, eax
jmp 0x41f350
mov esi, dword [eax + ecx]
cmp esi, dword [eax]
jne 0x41f442
sub edx, 4
add eax, 4
cmp edx, 4
jae 0x41f350
mov ecx, dword [0x529dc4]
call fcn.00449e50
test eax, eax
je 0x41f43b
mov ecx, dword [0x529dc8]
call fcn.00449e50
test eax, eax
je 0x41f43b
push 0x208
lea ecx, [ebp - 0x112c]
push 0
push ecx
call fcn.004737c0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x112c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x30
lea eax, [ebp - 0x15fc]
push 0
push eax
call fcn.004737c0
add esp, 0xc
lea ecx, [ebp - 0x15fc]
push ecx
lea edx, [ebp - 0x112c]
push edx
call fcn.004716a4
add esp, 8
test eax, eax
jne 0x41f4e0
cmp dword [ebp - 0x15e8], 0x864700
jl 0x41f4e0
push 0xfffffffffffffff9
push 0x50f2bf
push 0x50f2bf
push 0x50f2bf
push 0x3d
mov byte [ebp - 0x16], al
lea eax, [ebp - 0x1c]
push 0x4d
push eax
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x64
call fcn.0040b130
mov esi, dword [ebp - 0x1540]
add esp, 0x1c
call fcn.0042cde0
push 0
call fcn.0047002e
push 0
push 0
call fcn.0044a0b0
push 0x600
call fcn.00450212
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x41f4a1
lea ecx, [ebp - 0x29c]
push ecx
mov edx, esi
call fcn.00407090
lea edx, [ebp - 0x218]
add esp, 4
push edx
lea edx, [esi + 0x400]
call fcn.004070b0
add esp, 4
push 0
push 0
push esi
push 0x401190
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffffa
push 0x50f2bf
push 0x50f2bf
push 0x50f2bf
push 0x3d
lea eax, [ebp - 0x1c]
push 0x4d
push eax
mov byte [ebp - 0x1c], 0x63
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x1a], bl
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x64
mov byte [ebp - 0x16], 0
call fcn.0040b130
add esp, 0x1c
jmp 0x41daea
push 0xc
xor eax, eax
lea ecx, [ebp - 0x1598]
push ecx
push eax
mov dword [ebp - 0x1598], 0
mov dword [ebp - 0x1594], eax
mov dword [ebp - 0x1590], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
push eax
call sub.PSAPI.DLL_GetModuleInformation
mov ecx, dword [0x529d94]
cmp byte [ecx], 0xe9
mov eax, dword [ebp - 0x1598]
mov edx, dword [ebp - 0x1594]
lea edi, [edx + eax]
je 0x41f54e
push 0
call esi
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov esi, dword [ebp - 0x1540]
call fcn.0042cde0
push 0
call fcn.0047002e
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x41f531
cmp ecx, edi
ja 0x41f531
mov ecx, dword [0x529db0]
cmp byte [ecx], 0xe9
jne 0x41f531
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x41f531
cmp ecx, edi
ja 0x41f531
mov ecx, dword [0x529db8]
cmp byte [ecx], 0xe9
jne 0x41f531
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x41f531
cmp ecx, edi
ja 0x41f531
mov ecx, dword [0x529dc0]
cmp byte [ecx], 0xe9
jne 0x41f531
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jb 0x41f531
cmp ecx, edi
ja 0x41f531
xor eax, eax
push 0x44
push eax
mov dword [ebp - 0x1554], eax
mov dword [ebp - 0x1550], eax
mov dword [ebp - 0x154c], eax
mov dword [ebp - 0x1548], eax
lea eax, [ebp - 0x1644]
push eax
call fcn.004737c0
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x153a]
push edx
mov dword [ebp - 0x1644], 0x44
mov word [ebp - 0x153c], cx
call fcn.004737c0
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0xa1a]
push ecx
mov word [ebp - 0xa1c], ax
call fcn.004737c0
add esp, 0xc
push 0x103
lea edx, [ebp - 0x813]
push 0
push edx
mov byte [ebp - 0x814], 0
call fcn.004737c0
mov eax, 0xb1be
mov word [ebp - 0x594], ax
mov ecx, 0xbeab
mov word [ebp - 0x592], cx
mov edx, 0xbbaa
mov word [ebp - 0x590], dx
mov eax, 0xcad6
mov word [ebp - 0x58e], ax
mov ecx, 0xb2e1
mov word [ebp - 0x58c], cx
mov edx, 0xcad5
mov word [ebp - 0x58a], dx
mov eax, 0x2e
mov word [ebp - 0x588], ax
mov ecx, 0xc2bc
mov word [ebp - 0x586], cx
mov edx, 0xb5c4
mov word [ebp - 0x584], dx
mov eax, 0xcec4
mov word [ebp - 0x582], ax
mov ecx, 0xd5c2
mov word [ebp - 0x580], cx
mov edx, 0x71
mov eax, 0x77
mov word [ebp - 0x57e], dx
mov word [ebp - 0x57c], ax
mov ecx, 0x65
mov word [ebp - 0x57a], cx
mov edx, 0x72
mov eax, 0x74
mov word [ebp - 0x578], dx
mov word [ebp - 0x576], ax
mov ecx, 0x79
mov edx, 0xd2d4
mov eax, 0xbfb4
mov word [ebp - 0x574], cx
mov ecx, 0xd1a9
mov word [ebp - 0x572], dx
mov word [ebp - 0x570], ax
mov edx, 0x2e
mov eax, 0xc2db
mov word [ebp - 0x56e], cx
add esp, 0xc
mov byte [ebp - 0x1559], 0
mov word [ebp - 0x56c], dx
mov word [ebp - 0x56a], ax
mov ecx, 0xccb3
mov word [ebp - 0x568], cx
mov edx, 0xd4ad
mov word [ebp - 0x566], dx
mov eax, 0x51
mov word [ebp - 0x564], ax
mov ecx, 0x57
mov word [ebp - 0x562], cx
mov edx, 0x45
mov word [ebp - 0x560], dx
mov eax, 0x52
mov word [ebp - 0x55e], ax
mov ecx, 0x54
mov word [ebp - 0x55c], cx
mov edx, 0x59
mov word [ebp - 0x55a], dx
mov eax, 0x75
mov word [ebp - 0x558], ax
mov ecx, 0x69
mov word [ebp - 0x556], cx
mov edx, 0x6f
mov word [ebp - 0x554], dx
mov eax, 0x70
mov word [ebp - 0x552], ax
mov ecx, 0xb4b4
mov word [ebp - 0x550], cx
mov edx, 0xcec4
mov word [ebp - 0x54e], dx
mov eax, 0xd5c2
mov word [ebp - 0x54c], ax
mov ecx, 0xceaa
mov word [ebp - 0x54a], cx
mov edx, 0xd6f7
mov word [ebp - 0x548], dx
mov eax, 0xd7aa
mov word [ebp - 0x546], ax
mov ecx, 0xccfb
mov word [ebp - 0x544], cx
mov edx, 0x62
mov word [ebp - 0x542], dx
mov eax, 0x6e
mov word [ebp - 0x540], ax
mov ecx, 0x6d
mov word [ebp - 0x53e], cx
mov edx, 0x4b
mov word [ebp - 0x53c], dx
mov eax, 0x48
mov word [ebp - 0x53a], ax
mov ecx, 0x46
mov word [ebp - 0x538], cx
mov edx, 0x44
mov word [ebp - 0x536], dx
mov eax, 0x53
mov word [ebp - 0x534], ax
mov ecx, 0xc2db
mov word [ebp - 0x532], cx
mov edx, 0xccb3
mov word [ebp - 0x530], dx
mov eax, 0xbbf2
mov ecx, 0xcfe0
mov edx, 0xb9d8
mov word [ebp - 0x52e], ax
mov word [ebp - 0x52c], cx
mov word [ebp - 0x52a], dx
mov eax, 0xb5c4
mov ecx, 0xc2db
mov edx, 0xccb3
mov word [ebp - 0x528], ax
mov word [ebp - 0x526], cx
mov word [ebp - 0x524], dx
mov eax, 0xd7a2
mov ecx, 0xb2e1
mov edx, 0xd3c3
mov word [ebp - 0x522], ax
mov word [ebp - 0x520], cx
mov word [ebp - 0x51e], dx
mov eax, 0xbba7
mov ecx, 0xcbf9
mov edx, 0xd3d0
mov word [ebp - 0x51c], ax
mov word [ebp - 0x51a], cx
mov word [ebp - 0x518], dx
mov eax, 0xb5c4
mov word [ebp - 0x516], ax
mov ecx, 0xb9a4
mov word [ebp - 0x514], cx
mov edx, 0xd7f7
mov word [ebp - 0x512], dx
mov eax, 0xbcb0
mov word [ebp - 0x510], ax
mov ecx, 0xcbf9
mov word [ebp - 0x50e], cx
mov edx, 0xd3d0
mov word [ebp - 0x50c], dx
mov eax, 0xcdf8
mov word [ebp - 0x50a], ax
mov ecx, 0xd3d1
mov word [ebp - 0x508], cx
mov edx, 0xb6d4
mov word [ebp - 0x506], dx
mov eax, 0x42
mov word [ebp - 0x504], ax
mov ecx, 0x31
mov word [ebp - 0x502], cx
mov edx, 0x32
mov word [ebp - 0x500], dx
mov eax, 0x33
mov word [ebp - 0x4fe], ax
mov ecx, 0x34
mov word [ebp - 0x4fc], cx
mov edx, 0x35
mov word [ebp - 0x4fa], dx
mov eax, 0x36
mov word [ebp - 0x4f8], ax
mov ecx, 0x37
mov word [ebp - 0x4f6], cx
mov edx, 0x38
mov word [ebp - 0x4f4], dx
mov eax, 0x39
mov word [ebp - 0x4f2], ax
mov ecx, 0xd0d4
mov word [ebp - 0x4f0], cx
mov edx, 0xd6ca
mov word [ebp - 0x4ee], dx
mov eax, 0xb5c4
mov word [ebp - 0x4ec], ax
mov ecx, 0xcec4
mov word [ebp - 0x4ea], cx
mov edx, 0xd5c2
mov word [ebp - 0x4e8], dx
mov eax, 0xb3fd
mov word [ebp - 0x4e6], ax
mov ecx, 0xb7c7
mov word [ebp - 0x4e4], cx
mov edx, 0xccd8
mov word [ebp - 0x4e2], dx
mov eax, 0x2e
mov word [ebp - 0x4e0], ax
mov ecx, 0xb1f0
mov word [ebp - 0x4de], cx
mov edx, 0xd3c5
mov word [ebp - 0x4dc], dx
mov eax, 0xd0e3
mov ecx, 0xb5c4
mov word [ebp - 0x4da], ax
mov edx, 0xd2bb
mov word [ebp - 0x4d8], cx
mov word [ebp - 0x4d6], dx
mov eax, 0xb0e3
mov ecx, 0xb2bb
mov edx, 0xcad5
mov word [ebp - 0x4d4], ax
mov word [ebp - 0x4d2], cx
mov eax, 0xc2bc
xor ecx, ecx
mov word [ebp - 0x4d0], dx
xor edx, edx
push 0x3e
mov word [ebp - 0x4ce], ax
mov word [ebp - 0x4cc], cx
mov word [ebp - 0x70c], dx
push edx
lea eax, [ebp - 0x70a]
push eax
call fcn.004737c0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00471a7f
add esp, 4
call fcn.00471a91
cdq
mov ecx, 0xa
idiv ecx
xor edi, edi
mov esi, edx
add esi, 3
test esi, esi
jle 0x41fb87
lea esp, [esp]
lea eax, [ebp - 0x594]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41fb50
sub eax, edx
sar eax, 1
mov dword [ebp - 0x156c], eax
call fcn.00471a91
xor edx, edx
div dword [ebp - 0x156c]
inc edi
cmp edi, esi
mov dx, word [ebp + edx*2 - 0x594]
mov word [ebp + edi*2 - 0x70e], dx
jl 0x41fb40
xor edi, edi
lea esp, [esp]
mov ecx, dword [ebp - 0x1560]
lea eax, [ebp - 0x70c]
push eax
push ecx
call fcn.00471ab3
mov esi, eax
add esp, 8
test esi, esi
je 0x41fc10
inc edi
cmp edi, 0x64
jl 0x41fb90
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp esi, 0xffffffff
je 0x41fbe7
test edi, edi
je 0x41fc10
push 0
push 0
call fcn.0044a0b0
push esi
mov esi, edi
mov edi, 0x511998
call fcn.00438400
add esp, 0xc
mov esi, dword [ebp - 0x1540]
jmp 0x41d861
test edi, edi
je 0x41fc10
push 0
push 0
call fcn.0044a0b0
mov esi, edi
push 0xffffffffffffffff
mov edi, 0x5119c8
call fcn.00438400
mov esi, dword [ebp - 0x1540]
add esp, 0xc
jmp 0x41d861
lea edx, [ebp - 0x70c]
push edx
lea eax, [ebp - 0x200]
push 0x5294f8
push eax
lea edx, [ebp - 0x153c]
call fcn.0040bf60
mov eax, dword [ebp - 0x1588]
add esp, 0xc
add eax, 0x51b
push eax
lea ecx, [ebp - 0x200]
push 0x5294f8
push ecx
lea edx, [ebp - 0xa1c]
mov dword [ebp - 0x156c], eax
call fcn.0040bf60
lea edx, [ebp - 0x814]
add esp, 0xc
push edx
lea esi, [ebp - 0xa1c]
call fcn.0044a7c0
mov ecx, dword [0x529dcc]
add esp, 4
call fcn.00449e50
mov ecx, dword [0x529dd8]
mov esi, eax
call fcn.00449e50
xor edi, edi
cmp esi, edi
je 0x41fbdc
cmp eax, edi
je 0x41fbdc
cmp esi, eax
jne 0x41fbdc
mov ecx, dword [0x529dd0]
call fcn.00449e50
mov ecx, dword [0x529ddc]
mov esi, eax
call fcn.00449e50
cmp esi, edi
je 0x41fbdc
cmp eax, edi
je 0x41fbdc
cmp esi, 2
jb 0x41fbdc
cmp eax, 2
jb 0x41fbdc
cmp esi, eax
jne 0x41fbdc
mov ecx, dword [0x529dd4]
call fcn.00449e50
mov ecx, dword [0x529de0]
mov esi, eax
call fcn.00449e50
cmp esi, eax
jne 0x41fbdc
push 0x30
lea eax, [ebp - 0x15cc]
push edi
push eax
mov dword [ebp - 0x1558], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1580], edi
mov dword [ebp - 0x1564], edi
mov dword [ebp - 0x1570], edi
call fcn.004737c0
add esp, 0xc
lea ecx, [ebp - 0x1e8]
push ecx
lea edx, [ebp - 0xa1c]
push edx
lea eax, [ebp - 0x158c]
push eax
call fcn.0046eb9c
add esp, 0xc
test eax, eax
jne 0x421aa9
lea ecx, [ebp - 0x15cc]
push ecx
lea edx, [ebp - 0xa1c]
push edx
call fcn.004716a4
add esp, 8
test eax, eax
je 0x41fda2
mov eax, dword [ebp - 0x158c]
push eax
call fcn.0046f030
mov ecx, dword [ebp - 0x1560]
add esp, 4
push ecx
lea edx, [ebp - 0x70c]
push edx
call fcn.00471ab3
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x41d861
mov edi, dword [ebp - 0x15b8]
push edi
call fcn.00450241
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x158c]
push eax
push 1
push edi
push esi
call fcn.00470e2d
mov ecx, dword [ebp - 0x158c]
push ecx
call fcn.0046f030
xor eax, eax
lea edx, [ebp - 0x1d4]
add esp, 0x14
push edx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
call fcn.00491360
add esp, 4
push edi
lea eax, [ebp - 0x1d4]
push esi
push eax
call fcn.00491130
add esp, 0xc
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00491210
push esi
call fcn.0045024c
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x4c4]
add esp, 0xc
push eax
call fcn.004910f0
add esp, 4
push 0x14
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x4c4]
push edx
call fcn.00490ee0
add esp, 0xc
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00490fc0
mov ecx, dword [ebp - 0x1578]
add esp, 8
call fcn.00449e50
mov esi, eax
lea eax, [esi + 0x1c]
lea ecx, [ebp - 0x2c]
mov edx, 0x10
sub ecx, eax
jmp 0x41fe80
mov edi, dword [ecx + eax]
cmp edi, dword [eax]
jne 0x41feec
sub edx, 4
add eax, 4
cmp edx, 4
jae 0x41fe80
mov esi, dword [ebp - 0x1540]
push 0x409
mov ecx, esi
call fcn.0045fca8
mov ecx, eax
call fcn.0045fe2f
test eax, eax
je 0x41ff46
cmp dword [esi + 0x194], 0
mov eax, dword [esi + 0x190]
mov dword [ebp - 0x1568], eax
je 0x41ff50
test eax, eax
je 0x41ff50
call fcn.0041d480
cmp eax, 0x10
je 0x41ff50
call fcn.0041d4c0
jmp 0x41ff50
xor edx, edx
xor eax, eax
mov word [ebp - 0xa1c], dx
mov word [ebp - 0xa1a], ax
mov ecx, dword [esi + 0xb4]
push ecx
call fcn.0045024c
mov edx, dword [esi + 0xb8]
add esp, 4
push edx
call fcn.0045024c
add esp, 4
push esi
call fcn.0045024c
mov eax, dword [ebp - 0x1560]
add esp, 4
push eax
lea ecx, [ebp - 0x70c]
push ecx
call fcn.00471ab3
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x41d861
mov dword [ebp - 0x1568], 0xffffffff
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x1332]
push eax
mov word [ebp - 0x1334], dx
call fcn.004737c0
mov ecx, 0x25
mov eax, ecx
mov word [ebp - 0x230], cx
mov word [ebp - 0x22c], ax
mov edx, ebx
mov word [ebp - 0x22e], dx
xor edx, edx
mov word [ebp - 0x228], dx
mov ecx, ebx
mov word [ebp - 0x22a], cx
mov ecx, 0x74
mov word [ebp - 0x20a], cx
mov eax, 0x4f
mov word [ebp - 0x20c], ax
mov edx, 0x68
mov word [ebp - 0x208], dx
xor edx, edx
mov ecx, 0x72
mov word [ebp - 0x204], cx
mov word [ebp - 0x202], dx
mov eax, 0x65
mov word [ebp - 0x206], ax
mov ecx, 0x6f
mov word [ebp - 0x316], cx
mov eax, 0x43
mov word [ebp - 0x318], ax
mov edx, 0x6d
mov word [ebp - 0x314], dx
mov ecx, 0x61
mov word [ebp - 0x310], cx
mov eax, 0x70
mov word [ebp - 0x312], ax
mov edx, 0x74
mov word [ebp - 0x30e], dx
mov ecx, 0x6e
add esp, 0xc
mov eax, 0x45
mov word [ebp - 0x30a], cx
mov word [ebp - 0x30c], ax
mov edx, 0x61
mov word [ebp - 0x308], dx
mov ecx, 0x6c
mov eax, 0x62
push 0x529780
mov word [ebp - 0x304], cx
mov edx, 0x65
mov word [ebp - 0x306], ax
lea ecx, [ebp - 0x230]
mov word [ebp - 0x302], dx
xor eax, eax
push 0x51183c
push ecx
lea edx, [ebp - 0x1334]
mov word [ebp - 0x300], ax
call fcn.0040bf60
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
add esp, 0xc
lea edx, [ebp - 0x1334]
push edx
push 1
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call esi
cmp eax, 1
jl 0x4200c4
call fcn.0041d790
mov eax, 0x70
mov word [ebp - 0x332], ax
mov edx, 0x4f
mov word [ebp - 0x334], dx
mov eax, 0x6d
mov word [ebp - 0x32c], ax
mov ecx, 0x74
mov word [ebp - 0x330], cx
mov edx, 0x69
mov ecx, edx
mov word [ebp - 0x32e], dx
mov eax, 0x61
mov word [ebp - 0x32a], cx
mov word [ebp - 0x326], ax
mov edx, 0x7a
mov word [ebp - 0x328], dx
mov eax, 0x6f
mov ecx, 0x74
mov word [ebp - 0x324], cx
mov word [ebp - 0x320], ax
mov edx, 0x69
lea eax, [ebp - 0x1334]
push eax
mov word [ebp - 0x322], dx
mov ecx, 0x6e
xor edx, edx
mov word [ebp - 0x31e], cx
push 2
lea ecx, [ebp - 0x334]
mov word [ebp - 0x31c], dx
push ecx
lea edx, [ebp - 0x20c]
push edx
call esi
cmp eax, 2
jl 0x42027f
mov eax, 0x64
mov ecx, eax
mov word [ebp - 0x2e], cx
mov word [ebp - 0x30], ax
mov edx, 0x72
mov word [ebp - 0x2c], dx
mov ecx, 0x77
mov word [ebp - 0x28], cx
mov eax, 0x61
mov word [ebp - 0x2a], ax
mov edx, 0x2e
mov word [ebp - 0x26], dx
mov ecx, 0x6c
mov edx, ecx
mov word [ebp - 0x22], cx
mov word [ebp - 0x20], dx
mov eax, 0x64
mov word [ebp - 0x24], ax
xor eax, eax
mov word [ebp - 0x1e], ax
mov ecx, 0x64
mov edx, ecx
mov word [ebp - 0xac], cx
mov word [ebp - 0xaa], dx
mov eax, 0x72
mov word [ebp - 0xa8], ax
mov edx, 0x77
mov word [ebp - 0xa4], dx
mov ecx, 0x61
mov word [ebp - 0xa6], cx
mov eax, 0x2e
mov word [ebp - 0xa2], ax
mov edx, 0x6c
mov eax, edx
mov ecx, 0x64
mov word [ebp - 0xa0], cx
mov word [ebp - 0x9c], ax
mov ecx, 0x2e
mov word [ebp - 0x9a], cx
mov eax, 0x61
mov word [ebp - 0x9e], dx
mov word [ebp - 0x96], ax
mov ecx, 0x6b
mov edx, 0x62
lea eax, [ebp - 0xac]
mov word [ebp - 0x94], cx
mov word [ebp - 0x98], dx
push eax
lea ecx, [ebp - 0x30]
xor edx, edx
push ecx
mov word [ebp - 0x92], dx
call fcn.00471ab3
add esp, 8
call fcn.0041d230
cmp eax, 1
jne 0x42029e
mov esi, dword [ebp - 0x156c]
lea edx, [ebp - 0x814]
push edx
call fcn.0044a7c0
add esp, 4
mov esi, dword [ebp - 0x1580]
mov edi, dword [ebp - 0x1c]
cmp edi, 0x32
jg 0x420306
cmp esi, 0x64
jg 0x420306
push 0
lea eax, [ebp - 0x814]
push eax
lea ecx, [ebp - 0x1554]
push ecx
lea edx, [ebp - 0x1644]
push edx
push 0
push 0
push 0x404
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x153c]
push eax
call fcn.00489da0
mov dword [ebp - 0x1558], eax
test eax, eax
jne 0x420306
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1564], eax
cmp eax, 2
jne 0x420303
inc edi
jmp 0x4202a7
inc esi
jmp 0x4202a7
mov eax, dword [0x52afe8]
sub eax, dword [0x52afe4]
mov byte [ebp - 0x1541], 0
sar eax, 2
mov dword [ebp - 0x1580], eax
test eax, eax
ja 0x42032c
mov byte [ebp - 0x1541], 1
mov edi, dword [sym.imp.KERNEL32.dll_ResumeThread]
xor esi, esi
test eax, eax
jbe 0x4205f3
lea esp, [esp]
call fcn.00440aa0
mov edx, dword [eax]
lea ecx, [ebp - 0x1c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
test eax, eax
je 0x4204e4
cmp dword [ebp - 0x1c], 0x103
jne 0x420437
call fcn.00440aa0
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
test eax, eax
jbe 0x420428
push 0xffffffffffffffff
push 0x50f2bf
push 0x50f2bf
lea ecx, [ebp - 0x68]
push ecx
push 0x35
lea edx, [ebp - 0x4c]
push 0x4d
push edx
mov byte [ebp - 0x1541], 1
mov byte [ebp - 0x4c], 0x63
mov byte [ebp - 0x4b], 0x64
mov byte [ebp - 0x4a], bl
mov byte [ebp - 0x49], bl
mov byte [ebp - 0x48], bl
mov byte [ebp - 0x47], 0x64
mov byte [ebp - 0x46], 0
mov byte [ebp - 0x68], 0x43
mov byte [ebp - 0x67], 0x68
mov byte [ebp - 0x66], 0x65
mov byte [ebp - 0x65], 0x63
mov byte [ebp - 0x64], 0x6b
mov byte [ebp - 0x63], 0x20
mov byte [ebp - 0x62], 0x54
mov byte [ebp - 0x61], 0x68
mov byte [ebp - 0x60], 0x72
mov byte [ebp - 0x5f], 0x65
mov byte [ebp - 0x5e], 0x61
mov byte [ebp - 0x5d], 0x64
mov byte [ebp - 0x5c], 0x20
mov byte [ebp - 0x5b], 0x53
mov byte [ebp - 0x5a], 0x75
mov byte [ebp - 0x59], bl
mov byte [ebp - 0x58], 0x70
mov byte [ebp - 0x57], 0x65
mov byte [ebp - 0x56], 0x6e
mov byte [ebp - 0x55], 0x64
mov byte [ebp - 0x54], 0
call fcn.0040b130
add esp, 0x1c
call fcn.00416200
call fcn.00440aa0
mov eax, dword [eax]
push eax
call edi
test eax, eax
jne 0x420415
jmp 0x4205e6
call fcn.00440aa0
mov ecx, dword [eax]
push ecx
call edi
jmp 0x4205e6
push 0xffffffffffffffff
push 0x50f2bf
push 0x50f2bf
lea edx, [ebp - 0x6c]
push edx
push 0x36
push 0x4d
lea eax, [ebp - 0x38]
mov byte [ebp - 0x1541], 1
mov byte [ebp - 0x38], 0x63
mov byte [ebp - 0x37], 0x64
mov byte [ebp - 0x36], bl
mov byte [ebp - 0x35], bl
mov byte [ebp - 0x34], bl
mov byte [ebp - 0x33], 0x64
mov byte [ebp - 0x32], 0
mov byte [ebp - 0x6c], 0x43
mov byte [ebp - 0x6b], 0x68
mov byte [ebp - 0x6a], 0x65
mov byte [ebp - 0x69], 0x63
mov byte [ebp - 0x68], 0x6b
mov byte [ebp - 0x67], 0x20
mov byte [ebp - 0x66], 0x54
mov byte [ebp - 0x65], 0x68
mov byte [ebp - 0x64], 0x72
mov byte [ebp - 0x63], 0x65
mov byte [ebp - 0x62], 0x61
mov byte [ebp - 0x61], 0x64
mov byte [ebp - 0x60], 0x20
mov byte [ebp - 0x5f], 0x53
mov byte [ebp - 0x5e], 0x74
mov byte [ebp - 0x5d], 0x6f
mov byte [ebp - 0x5c], 0x70
mov byte [ebp - 0x5b], 0x20
mov byte [ebp - 0x5a], 0x6f
mov byte [ebp - 0x59], 0x72
mov byte [ebp - 0x58], 0x20
mov byte [ebp - 0x57], 0x43
mov byte [ebp - 0x56], 0x61
mov byte [ebp - 0x55], 0x6e
mov byte [ebp - 0x54], 0x63
mov byte [ebp - 0x53], 0x65
mov byte [ebp - 0x52], 0x6c
mov byte [ebp - 0x51], 0
push eax
jmp 0x4205d9
push 0xffffffffffffffff
push 0x50f2bf
push 0x50f2bf
lea ecx, [ebp - 0x90]
push ecx
push 0x37
push 0x4d
lea edx, [ebp - 0x24]
mov byte [ebp - 0x1541], 1
mov byte [ebp - 0x24], 0x63
mov byte [ebp - 0x23], 0x64
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], 0x64
mov byte [ebp - 0x1e], 0
mov byte [ebp - 0x90], 0x43
mov byte [ebp - 0x8f], 0x68
mov byte [ebp - 0x8e], 0x65
mov byte [ebp - 0x8d], 0x63
mov byte [ebp - 0x8c], 0x6b
mov byte [ebp - 0x8b], 0x20
mov byte [ebp - 0x8a], 0x54
mov byte [ebp - 0x89], 0x68
mov byte [ebp - 0x88], 0x72
mov byte [ebp - 0x87], 0x65
mov byte [ebp - 0x86], 0x61
mov byte [ebp - 0x85], 0x64
mov byte [ebp - 0x84], 0x20
mov byte [ebp - 0x83], 0x4d
mov byte [ebp - 0x82], 0x69
mov byte [ebp - 0x81], bl
mov byte [ebp - 0x80], bl
mov byte [ebp - 0x7f], 0x69
mov byte [ebp - 0x7e], 0x6e
mov byte [ebp - 0x7d], 0x67
mov byte [ebp - 0x7c], 0x20
mov byte [ebp - 0x7b], 0x6f
mov byte [ebp - 0x7a], 0x72
mov byte [ebp - 0x79], 0x20
mov byte [ebp - 0x78], 0x4e
mov byte [ebp - 0x77], 0x6f
mov byte [ebp - 0x76], 0x74
mov byte [ebp - 0x75], 0x20
mov byte [ebp - 0x74], 0x43
mov byte [ebp - 0x73], 0x72
mov byte [ebp - 0x72], 0x65
mov byte [ebp - 0x71], 0x61
mov byte [ebp - 0x70], 0x74
mov byte [ebp - 0x6f], 0x65
mov byte [ebp - 0x6e], 0
push edx
call fcn.0040b130
add esp, 0x1c
call fcn.00416200
inc esi
cmp esi, dword [ebp - 0x1580]
jb 0x420340
push 0x103
lea eax, [ebp - 0xf23]
push 0
push eax
mov byte [ebp - 0xe8], 0x6b
mov byte [ebp - 0xe7], 0x65
mov byte [ebp - 0xe6], 0x72
mov byte [ebp - 0xe5], 0x6e
mov byte [ebp - 0xe4], 0x65
mov byte [ebp - 0xe3], 0x6c
mov byte [ebp - 0xe2], 0x33
mov byte [ebp - 0xe1], 0x32
mov byte [ebp - 0xe0], 0x2e
mov byte [ebp - 0xdf], 0x64
mov byte [ebp - 0xde], 0x6c
mov byte [ebp - 0xdd], 0x6c
mov byte [ebp - 0xdc], 0
mov byte [ebp - 0xf24], 0
call fcn.004737c0
add esp, 0xc
lea ecx, [ebp - 0x158]
push ecx
lea edx, [ebp - 0xe8]
push edx
mov byte [ebp - 0x158], 0x47
mov byte [ebp - 0x157], 0x65
mov byte [ebp - 0x156], 0x74
mov byte [ebp - 0x155], 0x57
mov byte [ebp - 0x154], 0x69
mov byte [ebp - 0x153], 0x6e
mov byte [ebp - 0x152], 0x64
mov byte [ebp - 0x151], 0x6f
mov byte [ebp - 0x150], 0x77
mov byte [ebp - 0x14f], bl
mov byte [ebp - 0x14e], 0x44
mov byte [ebp - 0x14d], 0x69
mov byte [ebp - 0x14c], 0x72
mov byte [ebp - 0x14b], 0x65
mov byte [ebp - 0x14a], 0x63
mov byte [ebp - 0x149], 0x74
mov byte [ebp - 0x148], 0x6f
mov byte [ebp - 0x147], 0x72
mov byte [ebp - 0x146], 0x79
mov byte [ebp - 0x145], 0x41
mov byte [ebp - 0x144], 0
mov byte [ebp - 0xc8], 0x5c
mov byte [ebp - 0xc7], 0x79
mov byte [ebp - 0xc6], 0x78
mov byte [ebp - 0xc5], 0x62
mov byte [ebp - 0xc4], bl
mov byte [ebp - 0xc3], 0x71
mov byte [ebp - 0xc2], 0x2e
mov byte [ebp - 0xc1], 0x69
mov byte [ebp - 0xc0], 0x6e
mov byte [ebp - 0xbf], 0x69
mov byte [ebp - 0xbe], 0
call fcn.00486440
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x420baf
push 0x104
lea ecx, [ebp - 0xf24]
push ecx
call eax
test eax, eax
jbe 0x420baf
push 0x103
lea edx, [ebp - 0x5cb]
push 0
push edx
mov byte [ebp - 0x5cc], 0
call fcn.004737c0
add esp, 0xc
lea eax, [ebp - 0xf24]
push eax
lea ecx, [ebp - 0x5cc]
push 0x104
push ecx
call fcn.004711fb
add esp, 0xc
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0x5cc]
push 0x104
push eax
call fcn.00472cc8
add esp, 0xc
lea eax, [ebp - 0x5cc]
call fcn.004083d0
test al, al
je 0x420baf
lea ecx, [ebp - 0x5cc]
push ecx
call fcn.00471ae6
mov edx, 0x61
mov word [ebp - 0x4b4], dx
mov eax, 0x78
mov word [ebp - 0x4b2], ax
mov ecx, 0x63
mov word [ebp - 0x4b0], cx
mov edx, 0x76
mov word [ebp - 0x4ae], dx
mov eax, 0x6a
mov word [ebp - 0x4ac], ax
mov ecx, 0x32
mov word [ebp - 0x4aa], cx
mov edx, 0x33
mov word [ebp - 0x4a8], dx
mov eax, 0x34
mov word [ebp - 0x4a6], ax
mov ecx, 0x38
mov word [ebp - 0x4a4], cx
mov edx, 0x30
mov word [ebp - 0x4a2], dx
mov eax, 0x39
mov word [ebp - 0x4a0], ax
mov ecx, ebx
mov word [ebp - 0x49e], cx
mov ecx, 0x40
mov word [ebp - 0x498], cx
mov edx, 0x64
mov word [ebp - 0x49c], dx
mov edx, ecx
mov eax, 0x66
mov word [ebp - 0x49a], ax
mov eax, ecx
mov word [ebp - 0x496], dx
mov word [ebp - 0x494], ax
mov ecx, 0x31
mov eax, ecx
mov word [ebp - 0x492], cx
mov edx, 0x32
mov word [ebp - 0x490], dx
mov edx, eax
mov ecx, 0x33
mov word [ebp - 0x48c], cx
mov word [ebp - 0x48e], ax
mov word [ebp - 0x48a], dx
mov ecx, ebx
mov word [ebp - 0x486], cx
mov eax, 0x6b
mov word [ebp - 0x488], ax
mov edx, 0x64
mov word [ebp - 0x484], dx
mov word [ebp - 0x482], ax
mov ecx, 0x6c
mov word [ebp - 0x480], cx
mov edx, 0x78
mov eax, 0x63
mov ecx, 0x76
mov word [ebp - 0x47e], dx
mov word [ebp - 0x47c], ax
mov word [ebp - 0x47a], cx
mov edx, 0x6b
mov eax, 0x3b
mov ecx, 0x6c
mov word [ebp - 0x478], dx
mov word [ebp - 0x476], ax
mov word [ebp - 0x474], cx
mov edx, ebx
mov eax, 0x64
mov ecx, 0x66
add esp, 4
mov word [ebp - 0x472], dx
mov word [ebp - 0x470], ax
mov word [ebp - 0x46e], cx
mov edx, 0x6b
xor eax, eax
mov ecx, 0x23
mov word [ebp - 0x46c], dx
mov word [ebp - 0x46a], ax
mov word [ebp - 0x1bc], cx
mov edx, 0x7e
mov eax, edx
mov ecx, eax
mov word [ebp - 0x1b8], ax
mov word [ebp - 0x1ba], dx
mov word [ebp - 0x1b4], dx
mov word [ebp - 0x1b6], cx
mov eax, 0x58
mov word [ebp - 0x1b2], ax
mov edx, 0x67
mov word [ebp - 0x1ae], dx
mov ecx, 0x69
mov word [ebp - 0x1b0], cx
mov eax, 0x6e
mov word [ebp - 0x1ac], ax
mov edx, 0x6f
mov word [ebp - 0x1a8], dx
mov ecx, 0x63
mov word [ebp - 0x1aa], cx
mov eax, 0x64
mov word [ebp - 0x1a6], ax
mov eax, 0x7e
mov edx, 0x33
mov word [ebp - 0x1a2], dx
mov edx, eax
mov ecx, 0x65
mov word [ebp - 0x1a4], cx
mov ecx, eax
mov word [ebp - 0x1a0], ax
mov word [ebp - 0x19c], dx
mov word [ebp - 0x19a], ax
mov word [ebp - 0x19e], cx
mov word [ebp - 0x198], cx
mov edx, 0x41
mov word [ebp - 0x196], dx
mov eax, 0x6c
mov word [ebp - 0x194], ax
mov ecx, 0x65
mov word [ebp - 0x192], cx
mov ecx, 0x7e
mov edx, 0x72
mov eax, 0x74
mov word [ebp - 0x190], dx
mov word [ebp - 0x18e], ax
mov edx, ecx
mov eax, ecx
mov word [ebp - 0x18a], dx
mov word [ebp - 0x188], ax
mov word [ebp - 0x184], dx
mov word [ebp - 0x182], ax
mov edx, 0x23
xor eax, eax
push 0x600
mov word [ebp - 0x18c], cx
mov word [ebp - 0x186], cx
mov word [ebp - 0x180], cx
mov word [ebp - 0x17e], dx
mov word [ebp - 0x17c], ax
call fcn.00450212
mov esi, eax
add esp, 4
test esi, esi
je 0x420b44
lea ecx, [ebp - 0x4b4]
push ecx
mov edx, esi
call fcn.00407090
lea edx, [ebp - 0x1bc]
add esp, 4
push edx
lea edx, [esi + 0x400]
call fcn.004070b0
add esp, 4
push 0
push 0
push esi
push 0x401190
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call edi
push 0xffffffffffffffff
push 0x50f2bf
push 0x50f2bf
lea eax, [ebp - 0x3c]
push eax
push 0x39
lea ecx, [ebp - 0x24]
push 0x4d
push ecx
mov byte [ebp - 0x24], 0x63
mov byte [ebp - 0x23], 0x64
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], 0x64
mov byte [ebp - 0x1e], 0
mov byte [ebp - 0x3c], bl
mov byte [ebp - 0x3b], 0x70
mov byte [ebp - 0x3a], 0x65
mov byte [ebp - 0x39], 0x65
mov byte [ebp - 0x38], 0x64
mov byte [ebp - 0x37], 0x20
mov byte [ebp - 0x36], 0x68
mov byte [ebp - 0x35], 0x61
mov byte [ebp - 0x34], 0x63
mov byte [ebp - 0x33], 0x6b
mov byte [ebp - 0x32], 0
call fcn.0040b130
add esp, 0x1c
call fcn.00416200
jmp 0x420bbc
cmp byte [ebp - 0x1541], 1
jne 0x420c2a
mov edx, dword [ebp - 0x1560]
push edx
lea eax, [ebp - 0x70c]
push eax
call fcn.00471ab3
xor esi, esi
push esi
push esi
call fcn.0044a0b0
mov ecx, dword [ebp - 0x1554]
add esp, 0x10
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [ebp - 0x1558], esi
je 0x41fbdc
mov eax, dword [ebp - 0x1554]
cmp eax, esi
je 0x420c08
push eax
call edi
mov dword [ebp - 0x1554], esi
mov eax, dword [ebp - 0x1550]
cmp eax, esi
je 0x41fbdc
push eax
call edi
mov dword [ebp - 0x1550], esi
mov esi, dword [ebp - 0x1540]
jmp 0x41d861
xor esi, esi
cmp dword [ebp - 0x1558], esi
je 0x42182d
jmp 0x420c40
mov edx, dword [ebp - 0x1560]
push edx
lea eax, [ebp - 0x70c]
push eax
call fcn.00471ab3
mov edi, eax
add esp, 8
test edi, edi
je 0x420cc2
inc esi
cmp esi, 0x64
jl 0x420c40
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp edi, 0xffffffff
je 0x420cab
test esi, esi
je 0x420cc2
push 0
push 0
call fcn.0044a0b0
mov ecx, dword [ebp - 0x1554]
add esp, 8
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push edi
mov edi, 0x5119f8
call fcn.00438400
mov esi, dword [ebp - 0x1540]
add esp, 4
jmp 0x41d861
test esi, esi
je 0x420cc2
cmp esi, 0x20
jne 0x4214a1
mov dword [ebp - 0x1570], 1
lea ecx, [ebp - 0x1564]
call fcn.00409220
lea eax, [ebp - 0x4c4]
push eax
mov dword [ebp - 4], 0
call fcn.00491360
mov ecx, dword [0x529910]
add esp, 4
push 7
call fcn.00449e50
mov ecx, eax
xor eax, eax
call fcn.00448670
mov ecx, dword [0x529910]
add esp, 4
push 0x10
call fcn.00449e50
add eax, 8
push eax
lea ecx, [ebp - 0x4c4]
push ecx
call fcn.00491130
mov ecx, dword [0x529910]
add esp, 0xc
push 0x10
call fcn.00449e50
mov edi, eax
add edi, 8
call fcn.00449e10
mov ecx, dword [0x529910]
add esp, 4
push 0x10
call fcn.00449e50
add eax, 8
push eax
lea edx, [ebp - 0x4c4]
push edx
call fcn.00491130
mov ecx, dword [0x529910]
add esp, 0xc
push 0x10
call fcn.00449e50
mov edi, eax
add edi, 8
call fcn.00449e10
mov ecx, dword [0x529910]
add esp, 4
push 0
call fcn.00449e50
mov ecx, 7
call fcn.004486c0
add esp, 4
lea eax, [ebp - 0x4c4]
push eax
lea ecx, [ebp - 0x64]
push ecx
call fcn.00491210
mov edx, 0x25
mov word [ebp - 0x28], dx
mov ecx, 0x32
mov eax, 0x30
mov word [ebp - 0x24], cx
mov edx, 0x58
mov word [ebp - 0x26], ax
mov word [ebp - 0x22], dx
xor eax, eax
mov ecx, 0x25
mov edx, 0x30
mov word [ebp - 0x3c], cx
add esp, 8
mov ecx, 0x58
mov word [ebp - 0x20], ax
mov word [ebp - 0x3a], dx
mov eax, 0x38
xor edx, edx
mov word [ebp - 0x36], cx
mov word [ebp - 0x38], ax
mov word [ebp - 0x34], dx
push 0x51130c
lea ecx, [ebp - 0x1564]
call fcn.0040cbb0
lea eax, [ebp - 0x64]
dec eax
mov esi, 1
mov dword [ebp - 0x1558], eax
mov eax, dword [ebp - 0x1558]
movzx ecx, byte [eax + esi]
push ecx
lea edx, [ebp - 0x28]
push edx
lea edi, [ebp - 0x1564]
call fcn.00408dd0
mov eax, dword [ebp - 0x1558]
mov ecx, esi
add esp, 8
and ecx, reloc.WS2_32.dll_closesocket
mov byte [eax + esi], 0
jns 0x420e46
dec ecx
or ecx, 0xfffffffc
inc ecx
jne 0x420e60
lea edx, [esi - 1]
cmp edx, 0x13
jge 0x420e60
push 0x511a58
lea ecx, [ebp - 0x1564]
call fcn.0040cbb0
mov eax, esi
cdq
mov ecx, 0xc
idiv ecx
test edx, edx
jne 0x420ea0
lea edx, [esi - 1]
cmp edx, 0x13
jge 0x420ea0
mov eax, dword [ebp - 0x154c]
xor eax, 0x5b429d65
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edi, [ebp - 0x1564]
call fcn.00408dd0
add esp, 8
push 0x511a58
mov ecx, edi
call fcn.0040cbb0
inc esi
lea edx, [esi - 1]
cmp edx, 0x14
jl 0x420e10
push 0x51131c
lea ecx, [ebp - 0x1564]
call fcn.0040cbb0
lea ecx, [ebp - 0x1564]
call fcn.0040cbf0
push eax
call fcn.00449fa0
add esp, 4
test eax, eax
je 0x421617
call fcn.00449fe0
mov ecx, dword [ebp - 0x1578]
mov esi, eax
mov dword [esi + 0x4002a4], 0x134da7e
call fcn.00449e50
mov edi, eax
mov edx, dword [edi + 0xb8]
push esi
mov ecx, 0x4c
call fcn.00446a20
add esp, 4
cmp byte [0x529b4e], 1
jne 0x420f24
push esi
mov ecx, 1
xor edx, edx
call fcn.00446a20
add esp, 4
mov eax, dword [ebp - 0x1568]
push 0x529780
mov dword [esi + 0x4c], eax
mov dword [esi + 0x50], 0xffffffff
mov ecx, dword [ebp - 0x1548]
lea edx, [esi + 0x58]
push 0x20
push edx
mov dword [esi + 0x54], ecx
call fcn.0046e8b6
mov ecx, dword [0x529b64]
add esp, 0xc
test ecx, ecx
je 0x420f74
lea eax, [esi + 0x9c]
push eax
mov edx, 0x529b68
mov dword [esi + 0x98], ecx
call fcn.00446a20
add esp, 4
mov ecx, dword [0x529d68]
test ecx, ecx
je 0x420f99
lea edx, [esi + 0x2a0]
push edx
mov edx, dword [0x529d6c]
mov dword [esi + 0x29c], ecx
call fcn.00446a20
add esp, 4
mov eax, dword [edi + 0x2c]
lea ecx, [esi + 0x4002ac]
push ecx
lea edx, [edi + 0x30]
mov ecx, 0x80
mov dword [esi + 0x4002a8], eax
call fcn.00446a20
lea edx, [esi + 0x40032c]
add esp, 4
push edx
mov edx, dword [edi + 0xb4]
mov ecx, 0x1d9
call fcn.00446a20
mov ecx, dword [0x529d70]
add esp, 4
call fcn.00449e50
lea ecx, [esi + 0x400505]
push ecx
mov ecx, 0x14
mov edx, eax
call fcn.00446a20
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [esi + 0x400519], eax
mov eax, dword [ebp - 0x1588]
mov dl, byte [eax + 0xa1f]
mov byte [esi + 0x40051d], dl
lea edx, [eax + 0xa20]
lea eax, [esi + 0x40051e]
push eax
mov ecx, 0x100
call fcn.00446a20
mov eax, dword [ebp - 0x1588]
mov cl, byte [eax + 0xb20]
lea edx, [eax + 0xb21]
lea eax, [esi + 0x40061f]
add esp, 4
mov byte [esi + 0x40061e], cl
push eax
mov ecx, 0x100
call fcn.00446a20
add esp, 4
mov dword [esi + 0x4002a0], 0
cmp dword [edi + 8], 4
jne 0x42115e
mov ecx, 0x57
mov word [ebp - 0x8c], cx
mov edx, 0x69
mov word [ebp - 0x8a], dx
mov eax, 0x6e
mov word [ebp - 0x88], ax
mov ecx, 0x44
mov word [ebp - 0x86], cx
mov edx, 0x6f
mov word [ebp - 0x84], dx
mov eax, ebx
mov word [ebp - 0x82], ax
mov ecx, 0x47
mov word [ebp - 0x80], cx
mov edx, 0x64
mov eax, 0x69
mov word [ebp - 0x7e], dx
mov word [ebp - 0x7c], ax
mov ecx, 0x5f
mov word [ebp - 0x7a], cx
mov edx, 0x25
mov eax, 0x30
mov ecx, 0x38
mov word [ebp - 0x78], dx
mov word [ebp - 0x76], ax
mov word [ebp - 0x74], cx
mov edx, 0x58
xor eax, eax
lea ecx, [ebp - 0x1558]
mov word [ebp - 0x72], dx
mov word [ebp - 0x70], ax
call fcn.00409220
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x154c]
xor ecx, 0x2b429d65
push ecx
lea edx, [ebp - 0x8c]
push edx
lea edi, [ebp - 0x1558]
call fcn.00408dd0
add esp, 8
mov ecx, edi
call fcn.0040cbf0
push eax
push 0x80
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov ecx, edi
mov dword [0x529d8c], eax
call fcn.00408e20
mov ecx, edi
call fcn.00406720
mov eax, dword [ebp - 0x1550]
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp byte [0x529b4e], 0
je 0x421195
push esi
mov ecx, 1
xor edx, edx
call fcn.00446a20
add esp, 4
mov dword [esi + 0x50], 0xffffffff
mov dword [esi + 0x4002a4], 0x42e576f7
xor edi, edi
cmp dword [esi + 0x50], 0xffffffff
jne 0x4211bd
cmp dword [esi + 0x4002a0], 0
jne 0x4211bd
cmp edi, 0xbb8
jge 0x4211bd
push 1
inc edi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0x50], 0xffffffff
je 0x42119d
push 0xc6
xor edi, edi
lea edx, [ebp - 0x58a]
xor ecx, ecx
push edi
push edx
mov word [ebp - 0x58c], cx
call fcn.004737c0
add esp, 0xc
push 0x3ff
lea eax, [ebp - 0xe1b]
push edi
push eax
mov byte [ebp - 0xe1c], 0
call fcn.004737c0
mov edx, 0x69
mov ecx, 0x57
mov eax, 0x6e
mov word [ebp - 0xa8], cx
mov word [ebp - 0xa6], dx
mov word [ebp - 0xa4], ax
mov word [ebp - 0xa0], dx
mov ecx, 0x4c
mov eax, 0x63
mov edx, 0x6e
add esp, 0xc
mov word [ebp - 0xa2], cx
mov ecx, 0x65
mov word [ebp - 0x9e], ax
mov word [ebp - 0x9a], dx
mov eax, ebx
xor edx, edx
mov byte [ebp - 0x50], 0x57
mov byte [ebp - 0x4f], 0x69
mov byte [ebp - 0x4e], 0x6e
mov byte [ebp - 0x4d], 0x4c
mov byte [ebp - 0x4c], 0x69
mov byte [ebp - 0x4b], 0x63
mov byte [ebp - 0x4a], 0x65
mov byte [ebp - 0x49], 0x6e
mov byte [ebp - 0x48], bl
mov byte [ebp - 0x47], 0x65
mov byte [ebp - 0x46], 0
mov word [ebp - 0x9c], cx
mov word [ebp - 0x98], ax
mov word [ebp - 0x96], cx
mov word [ebp - 0x94], dx
mov byte [ebp - 0x1a8], 0x52
mov byte [ebp - 0x1a7], 0x75
mov byte [ebp - 0x1a6], 0x6e
mov byte [ebp - 0x1a5], 0x54
mov byte [ebp - 0x1a4], 0x69
mov byte [ebp - 0x1a3], 0x6d
mov byte [ebp - 0x1a2], cl
mov byte [ebp - 0x1a1], 0x20
mov byte [ebp - 0x1a0], 0x45
mov byte [ebp - 0x19f], 0x72
mov byte [ebp - 0x19e], 0x72
mov byte [ebp - 0x19d], 0x6f
mov byte [ebp - 0x19c], 0x72
mov byte [ebp - 0x19b], 0x2e
mov byte [ebp - 0x19a], 0x20
mov byte [ebp - 0x199], 0x50
mov byte [ebp - 0x198], 0x6c
mov byte [ebp - 0x197], cl
mov byte [ebp - 0x196], 0x61
mov byte [ebp - 0x195], bl
mov byte [ebp - 0x194], cl
mov byte [ebp - 0x193], 0x2c
mov byte [ebp - 0x192], 0x20
mov byte [ebp - 0x191], 0x72
mov byte [ebp - 0x190], cl
mov byte [ebp - 0x18f], 0x2d
mov byte [ebp - 0x18e], 0x69
mov byte [ebp - 0x18d], 0x6e
mov byte [ebp - 0x18c], bl
mov byte [ebp - 0x18b], 0x74
mov byte [ebp - 0x18a], 0x61
mov byte [ebp - 0x189], 0x6c
mov byte [ebp - 0x188], 0x6c
mov byte [ebp - 0x187], 0x20
mov byte [ebp - 0x186], 0x74
mov byte [ebp - 0x185], 0x68
mov byte [ebp - 0x184], 0x69
mov byte [ebp - 0x183], bl
mov byte [ebp - 0x182], 0x20
mov byte [ebp - 0x181], 0x61
mov byte [ebp - 0x180], 0x70
mov byte [ebp - 0x17f], 0x70
mov byte [ebp - 0x17e], 0x6c
mov byte [ebp - 0x17d], 0x69
mov byte [ebp - 0x17c], 0x63
mov byte [ebp - 0x17b], 0x61
mov byte [ebp - 0x17a], 0x74
mov byte [ebp - 0x179], 0x69
mov byte [ebp - 0x178], 0x6f
mov byte [ebp - 0x177], 0x6e
mov byte [ebp - 0x176], 0x2e
mov byte [ebp - 0x175], dl
mov ebx, dword [esi + 0x50]
mov esi, dword [esi + 0x4002a0]
cmp ebx, 0x4d236ad
ja 0x4214d6
je 0x421424
cmp ebx, edi
jbe 0x4214df
cmp ebx, 2
ja 0x4214df
mov byte [ebp - 0x1559], 1
cmp esi, 0x134da7e
je 0x42166c
cmp ebx, 0x4d236ad
jne 0x42166c
mov eax, dword [ebp - 0x1554]
xor esi, esi
push esi
push eax
mov byte [ebp - 0x1559], dl
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, esi
je 0x421470
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], esi
mov eax, dword [ebp - 0x1550]
cmp eax, esi
je 0x421487
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], esi
lea ecx, [ebp - 0x1a8]
push ecx
lea edx, [ebp - 0xe1c]
call fcn.004440c0
add esp, 4
jmp 0x4215fb
push 0
push 0
call fcn.0044a0b0
mov edx, dword [ebp - 0x1554]
add esp, 8
push 0
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0xffffffffffffffff
mov edi, 0x511a28
call fcn.00438400
mov esi, dword [ebp - 0x1540]
add esp, 4
jmp 0x41d861
cmp ebx, 0xffffffff
je 0x421551
mov edx, dword [ebp - 0x1554]
push edi
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, edi
je 0x421504
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], edi
mov eax, dword [ebp - 0x1550]
cmp eax, edi
je 0x42151b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], edi
push ebx
push str.File_corrupted_._This_application_has_been_manipulated_and_maybe_r_nits_infected_by_a_Virus_or_cracked._This_application_wont_work_anymore._r_nError:_08X
lea edx, [ebp - 0x58c]
call fcn.004440e0
mov edx, dword [0x529908]
add esp, 8
push 0x10
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x58c]
push ecx
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x42166c
cmp word [ebp - 0xa1c], di
je 0x42166c
cmp word [ebp - 0xa1a], dx
je 0x42166c
mov eax, dword [ebp - 0x1554]
xor esi, esi
push esi
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, esi
je 0x421592
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], esi
mov eax, dword [ebp - 0x1550]
cmp eax, esi
je 0x4215a9
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], esi
mov edi, dword [ebp - 0x156c]
cmp edi, esi
jne 0x4215b7
xor eax, eax
jmp 0x4215e0
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x4215ca
xor eax, eax
jmp 0x4215e0
lea esi, [eax + eax]
mov eax, esi
call fcn.00474600
mov eax, esp
push 3
push esi
push edi
push eax
call fcn.00446320
lea ecx, [ebp - 0x814]
push ecx
push eax
push str.Cannot_find__s._Please__re_install_this_application._r_nMissing_file_path:_s
lea edx, [ebp - 0xe1c]
call fcn.004440c0
add esp, 0xc
mov ecx, dword [0x529908]
push 0x10
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0xe1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x42166c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebp - 0x1554]
xor ebx, ebx
push ebx
push edx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 2
mov edi, 0x511be0
call fcn.00438400
mov eax, dword [ebp - 0x1554]
add esp, 4
cmp eax, ebx
je 0x421655
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x42166c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
call fcn.0044a010
lea ecx, [ebp - 0x1564]
call fcn.00408e20
lea ecx, [ebp - 0x1564]
mov dword [ebp - 4], 0xffffffff
call fcn.00406720
cmp byte [ebp - 0x1559], 0
je 0x4218a1
mov edi, dword [sym.imp.USER32.dll_EnumThreadWindows]
mov eax, 0x69
mov word [ebp - 0xa6], ax
mov edx, 0x6c
mov word [ebp - 0xa8], dx
mov eax, 0x61
mov word [ebp - 0xa0], ax
mov edx, 0x65
mov word [ebp - 0xa2], dx
mov word [ebp - 0x9c], dx
mov eax, 0x2e
mov word [ebp - 0x9a], ax
mov ecx, 0x6e
mov word [ebp - 0xa4], cx
mov edx, 0x66
mov eax, 0x67
mov ecx, 0x67
mov word [ebp - 0x96], dx
mov word [ebp - 0x94], ax
xor eax, eax
mov word [ebp - 0x9e], cx
lea edx, [ebp - 0x1584]
push edx
mov ecx, 0x63
mov dword [ebp - 0x1584], eax
mov dword [ebp - 0x1580], eax
mov eax, dword [ebp - 0x1548]
mov word [ebp - 0x98], cx
push 0x415cf0
xor ecx, ecx
push eax
mov word [ebp - 0x92], cx
xor esi, esi
call edi
test eax, eax
je 0x42177e
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, 0x1388
jge 0x42177e
push 1
inc esi
call ebx
mov edx, dword [ebp - 0x1548]
lea ecx, [ebp - 0x1584]
push ecx
push 0x415cf0
push edx
call edi
test eax, eax
jne 0x421758
mov eax, dword [ebp - 0x1584]
xor ebx, ebx
cmp eax, ebx
je 0x42194e
push ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [ebp - 0x1548]
je 0x4218a1
cmp dword [ebp - 0x1580], 1
je 0x4218a1
mov ecx, dword [ebp - 0x1554]
lea eax, [ebp - 0x156c]
push eax
push ecx
mov dword [ebp - 0x156c], ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x4218f9
mov edx, dword [ebp - 0x1554]
push ebx
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xc
mov esi, eax
mov edi, 0x511c54
call fcn.00438400
mov eax, dword [ebp - 0x1554]
add esp, 4
cmp eax, ebx
je 0x42180d
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x4218a3
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
jmp 0x4218a3
mov eax, dword [ebp - 0x1560]
push eax
lea ecx, [ebp - 0x70c]
push ecx
call fcn.00471ab3
mov edi, eax
add esp, 8
test edi, edi
je 0x42188c
inc esi
cmp esi, 0x64
jl 0x42182d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp edi, 0xffffffff
je 0x421868
test esi, esi
je 0x42188c
push edi
mov edi, 0x511bf4
jmp 0x421884
test esi, esi
je 0x42188c
cmp esi, 0x20
jne 0x42187d
mov dword [ebp - 0x1570], 1
jmp 0x42188c
push 0xffffffffffffffff
mov edi, 0x511c24
call fcn.00438400
add esp, 4
mov esi, dword [ebp - 0x1564]
push 1
mov edi, 0x511be0
call fcn.00438400
add esp, 4
xor ebx, ebx
cmp dword [ebp - 0x1570], ebx
je 0x421a10
mov ebx, dword [ebp - 0x1560]
xor edi, edi
lea eax, [ebp - 0x70c]
push ebx
push eax
call fcn.00471ab3
mov esi, eax
add esp, 8
test esi, esi
je 0x421a10
inc edi
cmp edi, 0x64
jl 0x4218b7
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, 0xffffffff
je 0x4219ed
test eax, eax
je 0x421a10
push esi
mov edi, 0x511ca8
jmp 0x421a06
cmp dword [ebp - 0x156c], 0x103
jne 0x421932
mov esi, dword [ebp - 0x1540]
mov eax, dword [esi + 0x278]
cmp eax, 3
jl 0x421963
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 2
mov esi, eax
mov edi, 0x511be0
call fcn.00438400
add esp, 4
jmp 0x4218a3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xd
mov esi, eax
mov edi, 0x511c70
call fcn.00438400
add esp, 4
jmp 0x4218a3
mov esi, dword [ebp - 0x1540]
mov eax, dword [esi + 0x278]
cmp eax, 3
jge 0x4219d1
inc eax
mov dword [esi + 0x278], eax
mov eax, dword [ebp - 0x1554]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, ebx
je 0x42198f
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], ebx
mov eax, dword [ebp - 0x1550]
cmp eax, ebx
je 0x4219a6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], ebx
cmp dword [esi + 0x278], 2
jne 0x4219be
lea ecx, [ebp - 0xa8]
push ecx
call fcn.00471b16
add esp, 4
mov edx, dword [ebp - 0x1578]
push edx
mov ecx, esi
call fcn.0041d7f0
jmp 0x4218a3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0xb
mov esi, eax
mov edi, 0x511c90
call fcn.00438400
add esp, 4
jmp 0x4218a3
test eax, eax
je 0x421a10
push 0xffffffffffffffff
cmp eax, 0x20
jne 0x421a01
mov esi, eax
mov edi, 0x511cd8
jmp 0x421a08
mov edi, 0x511d08
mov esi, eax
call fcn.00438400
add esp, 4
xor esi, esi
cmp byte [0x529b4e], 0
je 0x421a66
mov ecx, dword [ebp - 0x1554]
push esi
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x1554]
cmp eax, esi
je 0x421a40
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], esi
mov eax, dword [ebp - 0x1550]
cmp eax, esi
je 0x41fbdc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], esi
mov esi, dword [ebp - 0x1540]
jmp 0x41d861
mov eax, dword [ebp - 0x1554]
cmp eax, esi
je 0x421a7d
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1554], esi
mov eax, dword [ebp - 0x1550]
cmp eax, esi
je 0x421a94
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1550], esi
push esi
push esi
call fcn.0044a0b0
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x41d861
mov edx, dword [ebp - 0x1560]
push edx
lea eax, [ebp - 0x70c]
push eax
call fcn.00471ab3
mov esi, dword [ebp - 0x1540]
add esp, 8
jmp 0x41d861
mov ecx, dword [edi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x421af9
mov edx, dword [edi + 0x20]
push edx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x421aed
mov ecx, edi
call fcn.0045c5ba
mov ecx, edi
call fcn.004623b6
jmp 0x41d866
mov eax, edi
call fcn.0042c8f0
jmp 0x41f547