Function at 0x4159a0
Capabilities:
Check for peb beingdebugged flag
Contain obfuscated stackstrings
Create process on windows
Get number of processors
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5521c4
mov eax, dword fs:[0]
push eax
sub esp, 0xd80
mov eax, dword [0x5a8f00]
xor eax, esp
mov dword [esp + 0xd78], eax
push ebx
push esi
push edi
mov eax, dword [0x5a8f00]
xor eax, esp
push eax
lea eax, [esp + 0xd90]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
mov dword [esp + 0x54], vtable.CHwsFile.0
xor ebx, ebx
mov dword [esp + 0xd98], ebx
mov dword [esp + 0x58], vtable.CServiceCtrl.0
mov eax, vtable.CStringUtil.0
mov dword [esp + 0x50], eax
mov edi, 0xf
mov dword [esp + 0x25c], edi
mov dword [esp + 0x258], ebx
mov byte [esp + 0x248], bl
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x48], eax
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0xd9c], 6
call fcn.0041e800
lea ecx, [esp + 0x38]
push ecx
call fcn.0041ea00
mov dword [esp + 0x4c], ebx
lea ecx, [esp + 0x184]
mov byte [esp + 0xd98], 7
call fcn.0041ed40
mov byte [esp + 0xd98], 8
mov eax, dword [esi + 0x1b0]
xor edx, edx
mov ecx, eax
mov dword [esp + 0x374], 7
mov dword [esp + 0x370], ebx
mov word [esp + 0x360], dx
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x415aa1
sub ecx, esi
sar ecx, 1
push ecx
lea ecx, [esp + 0x364]
call fcn.00408e90
sub esp, 0x1c
mov byte [esp + 0xdb4], 9
lea eax, [esp + 0x37c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0041d9c0
lea ecx, [esp + 0x88]
call fcn.00405da0
add esp, 0x1c
mov byte [esp + 0xd98], 0xb
cmp dword [esp + 0x374], 8
jb 0x415b0c
mov ecx, dword [esp + 0x360]
push ecx
call fcn.0042465c
add esp, 4
mov eax, dword [esp + 0x6c]
xor edx, edx
mov esi, 0x10
mov dword [esp + 0x374], 7
mov dword [esp + 0x370], ebx
mov word [esp + 0x360], dx
cmp dword [esp + 0x80], esi
jae 0x415b3e
lea eax, [esp + 0x6c]
mov ecx, dword [esp + 0x7c]
cmp byte [eax + ecx - 1], 0x5c
je 0x415b59
push 1
mov eax, 0x5805c0
lea ecx, [esp + 0x70]
call fcn.004042f0
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x94]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c30
call fcn.004066a0
add esp, 0x20
cmp eax, ebx
jne 0x415d66
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x90]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c30
call fcn.00407d80
add esp, 0x1c
push 3
push 0x581ba0
lea ecx, [esp + 0x90]
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
call fcn.00404410
push 1
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x74]
push edx
lea eax, [esp + 0x34]
push eax
lea edx, [esp + 0x194]
lea ecx, [esp + 0x108]
mov byte [esp + 0xda8], 0xc
call fcn.0041df30
cmp dword [esp + 0x10c], esi
jb 0x415c25
mov ecx, dword [esp + 0xf8]
push ecx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0xb
mov dword [esp + 0x10c], edi
mov dword [esp + 0x108], ebx
mov byte [esp + 0xf8], bl
cmp dword [esp + 0x9c], esi
jb 0x415c5b
mov edx, dword [esp + 0x88]
push edx
call fcn.0042465c
add esp, 4
push 3
push 0x581ba0
lea ecx, [esp + 0x90]
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
call fcn.00404410
mov byte [esp + 0xd98], 0xd
push 6
push str.SYSTEM
lea ecx, [esp + 0x154]
mov dword [esp + 0x168], edi
mov dword [esp + 0x164], ebx
mov byte [esp + 0x154], bl
call fcn.00404410
push ebx
lea eax, [esp + 0x8c]
push eax
lea ecx, [esp + 0x74]
push ecx
lea edx, [esp + 0x34]
push edx
lea edx, [esp + 0x15c]
lea ecx, [esp + 0x108]
mov byte [esp + 0xda8], 0xe
call fcn.0041df30
cmp dword [esp + 0x10c], esi
jb 0x415cfa
mov eax, dword [esp + 0xf8]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0xd
mov dword [esp + 0x10c], edi
mov dword [esp + 0x108], ebx
mov byte [esp + 0xf8], bl
cmp dword [esp + 0x160], esi
jb 0x415d30
mov ecx, dword [esp + 0x14c]
push ecx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0xb
mov dword [esp + 0x160], edi
mov dword [esp + 0x15c], ebx
mov byte [esp + 0x14c], bl
cmp dword [esp + 0x9c], esi
jb 0x415d66
mov edx, dword [esp + 0x88]
push edx
call fcn.0042465c
add esp, 4
push 1
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x30], esp
push str.log_
lea ecx, [esp + 0x90]
push ecx
push eax
call fcn.00409720
add esp, 0xc
call fcn.004066a0
add esp, 0x20
cmp eax, ebx
jne 0x415dba
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x2c], esp
push str.log_
lea eax, [esp + 0x8c]
push eax
push edx
call fcn.00409720
add esp, 0xc
call fcn.00407d80
add esp, 0x1c
lea eax, [esp + 0x3ec]
call fcn.00406520
mov esi, eax
push str.temp_new_
lea ecx, [esp + 0x70]
push ecx
lea edx, [esp + 0x3bc]
push edx
mov byte [esp + 0xda4], 0xf
call fcn.00409720
add esp, 0xc
mov ecx, eax
lea eax, [esp + 0x408]
push eax
mov eax, esi
mov byte [esp + 0xd9c], 0x10
call fcn.00409800
add esp, 4
push eax
mov eax, 0x5805c0
lea ecx, [esp + 0xe0]
mov byte [esp + 0xd9c], 0x11
call fcn.004093f0
add esp, 4
mov byte [esp + 0xd98], 0x13
cmp dword [esp + 0x41c], 0x10
jb 0x415e45
mov ecx, dword [esp + 0x408]
push ecx
call fcn.0042465c
add esp, 4
mov dword [esp + 0x41c], edi
mov dword [esp + 0x418], ebx
mov byte [esp + 0x408], bl
mov esi, 0x10
mov byte [esp + 0xd98], 0x14
cmp dword [esp + 0x3c8], esi
jb 0x415e80
mov edx, dword [esp + 0x3b4]
push edx
call fcn.0042465c
add esp, 4
mov dword [esp + 0x3c8], edi
mov dword [esp + 0x3c4], ebx
mov byte [esp + 0x3b4], bl
mov byte [esp + 0xd98], 0x15
cmp dword [esp + 0x400], esi
jb 0x415eb6
mov eax, dword [esp + 0x3ec]
push eax
call fcn.0042465c
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x100]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push edx
mov dword [esp + 0x428], edi
mov dword [esp + 0x424], ebx
mov byte [esp + 0x414], bl
mov byte [ecx], bl
call fcn.00403c30
call fcn.00407d80
add esp, 0x1c
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x104]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c30
call fcn.004066a0
add esp, 0x20
cmp eax, ebx
jne 0x41621b
push 0x12
push 0x581bc0
lea ecx, [esp + 0x90]
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
call fcn.00404410
lea eax, [esp + 0xdc]
lea ecx, [esp + 0x88]
lea ebx, [esp + 0xf8]
mov byte [esp + 0xd98], 0x16
call fcn.00409440
mov edi, eax
lea esi, [esp + 0x248]
mov byte [esp + 0xd98], 0x17
call fcn.00403af0
mov byte [esp + 0xd98], 0x16
cmp dword [esp + 0x10c], 0x10
jb 0x415fad
mov ecx, dword [esp + 0xf8]
push ecx
call fcn.0042465c
add esp, 4
xor edi, edi
mov esi, 0x10
mov ebx, 0xf
mov byte [esp + 0xd98], 0x15
mov dword [esp + 0x10c], ebx
mov dword [esp + 0x108], edi
mov byte [esp + 0xf8], 0
cmp dword [esp + 0x9c], esi
jb 0x415ff0
mov edx, dword [esp + 0x88]
push edx
call fcn.0042465c
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x168], edi
je 0x41602e
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add eax, 0x16c
push eax
push ecx
call fcn.00409720
lea edx, [esp + 0x270]
add esp, 0xc
push edx
call fcn.004052a0
add esp, 0x20
jmp 0x416145
lea eax, [esp + 0x4b4]
push eax
call fcn.0040de80
lea ecx, [esp + 0x248]
push ecx
lea ecx, [esp + 0x214]
mov byte [esp + 0xd9c], 0x18
call fcn.0041db20
mov byte [esp + 0xd98], 0x19
cmp dword [eax + 0x14], 8
jb 0x416067
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x18]
call fcn.00410370
mov bl, 0x1a
push 0x581bd4
lea ecx, [esp + 0x20]
mov byte [esp + 0xd9c], bl
call fcn.00410370
lea edx, [esp + 0x14]
xor ecx, ecx
push edx
lea eax, [ecx + 3]
lea edx, [esp + 0x20]
lea esi, [esp + 0x4b8]
mov byte [esp + 0xd9c], 0x1b
call fcn.0040e1c0
mov byte [esp + 0xd98], bl
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4160d1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd98], 0x19
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4160f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd98], 0x18
cmp dword [esp + 0x224], 8
jb 0x41611b
mov ecx, dword [esp + 0x210]
push ecx
call fcn.0042465c
add esp, 4
lea ecx, [esp + 0x4b4]
call fcn.00432b23
lea ecx, [esp + 0x4b4]
mov byte [esp + 0xd98], 0x15
call fcn.0040e040
mov ebx, 0xf
mov esi, 0x10
mov byte [esp + 0xd98], 0xb
cmp dword [esp + 0xf0], esi
jb 0x416166
mov edx, dword [esp + 0xdc]
push edx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 8
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xec], edi
mov byte [esp + 0xdc], 0
cmp dword [esp + 0x80], esi
jb 0x41619a
mov eax, dword [esp + 0x6c]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 7
mov dword [esp + 0x80], ebx
mov dword [esp + 0x7c], edi
mov byte [esp + 0x6c], 0
cmp dword [esp + 0x198], esi
jb 0x4161cb
mov ecx, dword [esp + 0x184]
push ecx
call fcn.0042465c
add esp, 4
mov dword [esp + 0x198], ebx
mov dword [esp + 0x194], edi
mov byte [esp + 0x184], 0
lea edx, [esp + 0x28]
push edx
mov byte [esp + 0xd9c], 3
call fcn.0041dca0
mov byte [esp + 0xd98], 2
cmp dword [esp + 0x25c], esi
jb 0x416214
mov eax, dword [esp + 0x248]
push eax
call fcn.0042465c
add esp, 4
xor eax, eax
jmp 0x418e97
push str.src.zip
lea ecx, [esp + 0xe0]
push ecx
lea edx, [esp + 0x1fc]
push edx
call fcn.00409720
add esp, 0xc
push 0x82
sub esp, 0x1c
mov byte [esp + 0xdb8], 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 3
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push 0x581be4
mov byte [ecx], bl
call fcn.00404410
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xdd4], 0x1d
mov dword [esp + 0x58], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x238]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c30
mov ecx, dword [esp + 0x50]
push ecx
mov byte [esp + 0xdd8], 0x1c
call fcn.0041b050
cmp eax, ebx
jne 0x416465
lea eax, [esp + 0x1f4]
call fcn.00407d30
mov byte [esp + 0xd98], 0x15
cmp dword [esp + 0x208], esi
jb 0x4162d2
mov edx, dword [esp + 0x1f4]
push edx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0xb
mov dword [esp + 0x208], edi
mov dword [esp + 0x204], ebx
mov byte [esp + 0x1f4], bl
cmp dword [esp + 0xf0], esi
jb 0x416308
mov eax, dword [esp + 0xdc]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 8
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
cmp dword [esp + 0x80], esi
jb 0x41633b
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 7
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
cmp dword [esp + 0x198], esi
jb 0x41636b
mov edx, dword [esp + 0x184]
push edx
call fcn.0042465c
add esp, 4
mov dword [esp + 0x198], edi
mov dword [esp + 0x194], ebx
mov byte [esp + 0x184], bl
mov byte [esp + 0xd98], 0x1e
mov eax, dword [esp + 0x4c]
cmp eax, ebx
je 0x41639b
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [esp + 0x4c], ebx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x48], vtable.CStringUtil.0
cmp eax, ebx
je 0x4163f4
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x10], ecx
mov esi, eax
cmp eax, ecx
je 0x4163e6
lea esp, [esp]
cmp dword [esi + 0x14], 0x10
jb 0x4163d1
mov eax, dword [esi]
push eax
call fcn.0042465c
add esp, 4
mov dword [esi + 0x14], edi
mov dword [esi + 0x10], ebx
mov byte [esi], bl
add esi, 0x1c
cmp esi, dword [esp + 0x10]
jne 0x4163c0
mov eax, dword [esp + 0x38]
push eax
call fcn.0042465c
add esp, 4
mov esi, 0x10
mov byte [esp + 0xd98], 3
mov eax, dword [esp + 0x28]
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
cmp eax, ebx
je 0x416454
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x10], ecx
mov esi, eax
cmp eax, ecx
je 0x416446
mov edi, edi
cmp dword [esi + 0x14], 0x10
jb 0x416431
mov eax, dword [esi]
push eax
call fcn.0042465c
add esp, 4
mov dword [esi + 0x14], edi
mov dword [esi + 0x10], ebx
mov byte [esi], bl
add esi, 0x1c
cmp esi, dword [esp + 0x10]
jne 0x416420
mov eax, dword [esp + 0x28]
push eax
call fcn.0042465c
add esp, 4
mov esi, 0x10
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
jmp 0x4161f3
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov byte [esp + 0xd98], 0x1f
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x12c
call esi
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x100]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c30
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xdd0], 0x20
mov dword [esp + 0x54], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x234]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c30
mov byte [esp + 0xdd0], 0x1f
call fcn.0041fcd0
push 0x12c
cmp al, bl
jne 0x41673c
call esi
lea eax, [esp + 0x1f4]
call fcn.00407d30
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 0x168], ebx
je 0x416598
push 0x12
push 0x581be8
lea ecx, [esp + 0x2c0]
mov dword [esp + 0x2d4], edi
mov dword [esp + 0x2d0], ebx
mov byte [esp + 0x2c0], bl
call fcn.00404410
sub esp, 0x1c
mov byte [esp + 0xdb4], 0x21
mov eax, dword [esp + 0x30]
mov edx, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
lea ecx, [esp + 0x2e0]
add esp, 0xc
push ecx
call fcn.004052a0
mov esi, 0x10
add esp, 0x20
mov byte [esp + 0xd98], 0x1f
cmp dword [esp + 0x2cc], esi
jb 0x416668
mov edx, dword [esp + 0x2b8]
push edx
call fcn.0042465c
add esp, 4
jmp 0x416668
lea eax, [esp + 0x4b4]
push eax
call fcn.0040de80
push 0x581bfc
lea ecx, [esp + 0x18]
mov byte [esp + 0xd9c], 0x22
call fcn.00410370
push 0x581bd4
lea ecx, [esp + 0x20]
mov byte [esp + 0xd9c], 0x23
call fcn.00410370
lea ecx, [esp + 0x14]
push ecx
xor ecx, ecx
lea eax, [ecx + 3]
lea edx, [esp + 0x20]
lea esi, [esp + 0x4b8]
mov byte [esp + 0xd9c], 0x24
call fcn.0040e1c0
mov byte [esp + 0xd98], 0x23
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41661b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xd98], 0x22
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x416643
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x4b4]
call fcn.00432b23
lea ecx, [esp + 0x4b4]
mov byte [esp + 0xd98], 0x1f
call fcn.0040e040
mov esi, 0x10
mov byte [esp + 0xd98], 0x15
cmp dword [esp + 0x208], esi
jb 0x416689
mov ecx, dword [esp + 0x1f4]
push ecx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0xb
mov dword [esp + 0x208], edi
mov dword [esp + 0x204], ebx
mov byte [esp + 0x1f4], bl
cmp dword [esp + 0xf0], esi
jb 0x4166bf
mov edx, dword [esp + 0xdc]
push edx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 8
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
cmp dword [esp + 0x80], esi
jb 0x4166f2
mov eax, dword [esp + 0x6c]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 7
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
cmp dword [esp + 0x198], esi
jb 0x416722
mov ecx, dword [esp + 0x184]
push ecx
call fcn.0042465c
add esp, 4
mov dword [esp + 0x198], edi
mov dword [esp + 0x194], ebx
mov byte [esp + 0x184], bl
jmp 0x4161e1
call esi
lea eax, [esp + 0x1f4]
call fcn.00407d30
push str.configquitpanel.txt
lea ecx, [esp + 0x70]
push ecx
lea edx, [esp + 0x100]
push edx
call fcn.00409720
add esp, 0xc
push 1
push 1
lea eax, [esp + 0x218]
mov byte [esp + 0xda0], 0x25
call fcn.00406520
mov esi, eax
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xdbc], 0x26
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x124]
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c30
mov ecx, esi
call fcn.004056c0
add esp, 0x24
mov byte [esp + 0xd98], 0x25
cmp dword [esp + 0x224], 0x10
jb 0x4167d3
mov ecx, dword [esp + 0x210]
push ecx
call fcn.0042465c
add esp, 4
push str.hwsccp
lea edx, [esp + 0xe0]
push edx
lea eax, [esp + 0x1e0]
push eax
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0x8c]
mov byte [esp + 0xd9c], 0x27
call fcn.004093f0
add esp, 4
mov esi, 0x10
mov byte [esp + 0xd98], 0x29
cmp dword [esp + 0x1ec], esi
jb 0x416833
mov ecx, dword [esp + 0x1d8]
push ecx
call fcn.0042465c
add esp, 4
push str.hwsccpd
lea edx, [esp + 0xe0]
push edx
lea eax, [esp + 0x170]
push eax
mov dword [esp + 0x1f8], edi
mov dword [esp + 0x1f4], ebx
mov byte [esp + 0x1e4], bl
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0x268]
mov byte [esp + 0xd9c], 0x2a
call fcn.004093f0
add esp, 4
mov byte [esp + 0xd98], 0x2c
cmp dword [esp + 0x17c], esi
jb 0x4168a3
mov ecx, dword [esp + 0x168]
push ecx
call fcn.0042465c
add esp, 4
push 0x5813c8
lea edx, [esp + 0xe0]
push edx
lea eax, [esp + 0x2dc]
push eax
mov dword [esp + 0x188], edi
mov dword [esp + 0x184], ebx
mov byte [esp + 0x174], bl
call fcn.00409720
add esp, 0xc
push 0x581c4c
lea ecx, [esp + 0xe0]
push ecx
lea edx, [esp + 0x384]
push edx
mov byte [esp + 0xda4], 0x2d
call fcn.00409720
add esp, 0xc
lea eax, [esp + 0x88]
push eax
mov byte [esp + 0xd9c], 0x2e
call fcn.00406550
add esp, 4
test eax, eax
je 0x418742
lea ecx, [esp + 0x264]
push ecx
call fcn.00406550
add esp, 4
test eax, eax
je 0x418742
lea edx, [esp + 0x2d4]
push edx
call fcn.00406550
add esp, 4
test eax, eax
je 0x418742
lea eax, [esp + 0x37c]
push eax
call fcn.00406550
add esp, 4
test eax, eax
je 0x418742
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x580469
call fcn.00402c60
push ebx
sub esp, 0x1c
mov byte [esp + 0xdd8], 0x2f
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.hwsccpd
call fcn.00402c60
mov byte [esp + 0xdd8], 0x2e
call fcn.0041d610
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x580469
call fcn.00402c60
push ebx
sub esp, 0x1c
mov byte [esp + 0xdd8], 0x30
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.hwsccp
call fcn.00402c60
mov byte [esp + 0xdd8], 0x2e
call fcn.0041d610
push str.hwsccp
lea ecx, [esp + 0x70]
push ecx
lea edx, [esp + 0x34c]
push edx
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0x1a4]
mov byte [esp + 0xd9c], 0x31
call fcn.004093f0
add esp, 4
lea ecx, [esp + 0x344]
mov byte [esp + 0xd98], 0x33
call fcn.00402cc0
lea ecx, [esp + 0x88]
lea edi, [esp + 0x1a0]
call fcn.00413640
cmp eax, ebx
jne 0x416b68
mov ecx, dword [esp + 0x14]
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add ecx, 0x16c
push ecx
push eax
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xdb4], 0x34
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0xe0]
call fcn.00406ff0
add esp, 4
mov esi, eax
push str.Copy
lea ecx, [esp + 0x2bc]
mov byte [esp + 0xdb8], 0x35
call fcn.00402c60
mov ecx, eax
mov eax, edi
lea ebx, [esp + 0x130]
mov byte [esp + 0xdb4], 0x36
call fcn.00409440
push eax
mov eax, 0x581c58
lea ecx, [esp + 0xc4]
mov byte [esp + 0xdb8], 0x37
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0x14c]
push edx
mov eax, esi
mov byte [esp + 0xdb8], 0x38
call fcn.00409800
add esp, 4
mov byte [esp + 0xdb4], 0x39
push eax
mov byte [esp + 0xdb8], 0x3e
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0x130]
mov byte [esp + 0xd98], 0x3d
call fcn.00402cc0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xd98], 0x3c
call fcn.00402cc0
mov ecx, ebx
mov byte [esp + 0xd98], 0x3b
call fcn.00402cc0
lea ecx, [esp + 0x29c]
mov byte [esp + 0xd98], 0x3a
call fcn.00402cc0
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x33
call fcn.00402cc0
xor ebx, ebx
push str.hwsccpd
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x138]
push ecx
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0xc4]
mov byte [esp + 0xd9c], 0x3f
call fcn.004093f0
add esp, 4
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xd98], 0x40
call fcn.00403af0
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x3f
call fcn.00402cc0
lea ecx, [esp + 0x130]
mov byte [esp + 0xd98], 0x33
call fcn.00402cc0
lea ecx, [esp + 0x264]
mov edi, esi
call fcn.00413640
cmp eax, ebx
jne 0x416d18
mov eax, dword [esp + 0x14]
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xdb4], 0x41
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x2bc]
call fcn.00406ff0
add esp, 4
mov esi, eax
push str.Copy
lea ecx, [esp + 0x134]
mov byte [esp + 0xdb8], 0x42
call fcn.00402c60
mov ecx, eax
mov eax, edi
lea ebx, [esp + 0xc0]
mov byte [esp + 0xdb4], 0x43
call fcn.00409440
push eax
mov eax, 0x581c58
lea ecx, [esp + 0x150]
mov byte [esp + 0xdb8], 0x44
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0xdc]
push edx
mov eax, esi
mov byte [esp + 0xdb8], 0x45
call fcn.00409800
add esp, 4
mov byte [esp + 0xdb4], 0x46
push eax
mov byte [esp + 0xdb8], 0x4b
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x4a
call fcn.00402cc0
lea ecx, [esp + 0x130]
mov byte [esp + 0xd98], 0x49
call fcn.00402cc0
mov ecx, ebx
mov byte [esp + 0xd98], 0x48
call fcn.00402cc0
lea ecx, [esp + 0x114]
mov byte [esp + 0xd98], 0x47
call fcn.00402cc0
lea ecx, [esp + 0x29c]
mov byte [esp + 0xd98], 0x33
call fcn.00402cc0
xor ebx, ebx
push 0x4be6
push 0x11f6
push 0x13ad7
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x581c68
call fcn.00402c60
lea ecx, [esp + 0x238]
call fcn.004075e0
push 0x5813c8
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0xf0]
push ecx
mov byte [esp + 0xdcc], 0x4c
call fcn.00409720
add esp, 0x34
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xd98], 0x4d
call fcn.00403af0
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x4c
call fcn.00402cc0
lea ecx, [esp + 0x2d4]
mov edi, esi
call fcn.00413640
cmp eax, ebx
jne 0x416ed0
mov eax, dword [esp + 0x14]
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xdb4], 0x4e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x2bc]
call fcn.00406ff0
add esp, 4
mov esi, eax
push str.Copy
lea ecx, [esp + 0x134]
mov byte [esp + 0xdb8], 0x4f
call fcn.00402c60
mov ecx, eax
mov eax, edi
lea ebx, [esp + 0xc0]
mov byte [esp + 0xdb4], 0x50
call fcn.00409440
push eax
mov eax, 0x581c58
lea ecx, [esp + 0x150]
mov byte [esp + 0xdb8], 0x51
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0xdc]
push edx
mov eax, esi
mov byte [esp + 0xdb8], 0x52
call fcn.00409800
add esp, 4
mov byte [esp + 0xdb4], 0x53
push eax
mov byte [esp + 0xdb8], 0x58
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x57
call fcn.00402cc0
lea ecx, [esp + 0x130]
mov byte [esp + 0xd98], 0x56
call fcn.00402cc0
mov ecx, ebx
mov byte [esp + 0xd98], 0x55
call fcn.00402cc0
lea ecx, [esp + 0x114]
mov byte [esp + 0xd98], 0x54
call fcn.00402cc0
lea ecx, [esp + 0x29c]
mov byte [esp + 0xd98], 0x4c
call fcn.00402cc0
xor ebx, ebx
push 0x581c4c
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0xc8]
push ecx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xd98], 0x59
call fcn.00403af0
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x4c
call fcn.00402cc0
lea ecx, [esp + 0x37c]
mov edi, esi
call fcn.00413640
cmp eax, ebx
jne 0x41704f
mov eax, dword [esp + 0x14]
sub esp, 0x1c
mov edx, esp
mov dword [esp + 0x2c], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xdb4], 0x5a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x2bc]
call fcn.00406ff0
add esp, 4
mov esi, eax
push str.Copy
lea ecx, [esp + 0x134]
mov byte [esp + 0xdb8], 0x5b
call fcn.00402c60
mov ecx, eax
mov eax, edi
lea ebx, [esp + 0xc0]
mov byte [esp + 0xdb4], 0x5c
call fcn.00409440
push eax
mov eax, 0x581c58
lea ecx, [esp + 0x150]
mov byte [esp + 0xdb8], 0x5d
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0xdc]
push edx
mov eax, esi
mov byte [esp + 0xdb8], 0x5e
call fcn.00409800
add esp, 4
mov byte [esp + 0xdb4], 0x5f
push eax
mov byte [esp + 0xdb8], 0x64
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x63
call fcn.00402cc0
lea ecx, [esp + 0x130]
mov byte [esp + 0xd98], 0x62
call fcn.00402cc0
mov ecx, ebx
mov byte [esp + 0xd98], 0x61
call fcn.00402cc0
lea ecx, [esp + 0x114]
mov byte [esp + 0xd98], 0x60
call fcn.00402cc0
lea ecx, [esp + 0x29c]
mov byte [esp + 0xd98], 0x4c
call fcn.00402cc0
xor ebx, ebx
push str.http_
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0xc8]
push ecx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xd98], 0x65
call fcn.00403af0
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x4c
call fcn.00402cc0
push str.http_
lea edx, [esp + 0xe0]
push edx
lea eax, [esp + 0x1c4]
push eax
call fcn.00409720
add esp, 0xc
push str.index.html
lea ecx, [esp + 0x1c0]
push ecx
lea edx, [esp + 0x138]
push edx
mov byte [esp + 0xda4], 0x66
call fcn.00409720
add esp, 0xc
push eax
mov byte [esp + 0xd9c], 0x67
call fcn.00406550
add esp, 4
lea ecx, [esp + 0x130]
mov esi, eax
mov byte [esp + 0xd98], 0x66
call fcn.00402cc0
mov edi, 0x10
cmp esi, ebx
je 0x41712d
mov ecx, dword [esp + 0x1a0]
cmp dword [esp + 0x1b4], edi
jae 0x41711c
lea ecx, [esp + 0x1a0]
cmp ecx, ebx
je 0x417125
call fcn.00412bd0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x1c
lea eax, [esp + 0x1bc]
mov esi, esp
mov dword [esp + 0x2c], esp
call fcn.00402c40
call fcn.00407d80
mov ecx, dword [esp + 0x1d8]
add esp, 0x1c
cmp dword [esp + 0x1d0], edi
jae 0x417161
lea ecx, [esp + 0x1bc]
mov eax, dword [esp + 0x6c]
cmp dword [esp + 0x80], edi
jae 0x417172
lea eax, [esp + 0x6c]
push eax
mov edi, ecx
call fcn.00413110
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esp + 0x1d0], 0x10
mov ecx, dword [esp + 0x1bc]
jae 0x41719d
lea ecx, [esp + 0x1bc]
cmp ecx, ebx
je 0x4171a6
call fcn.00412bd0
push str.config_
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0xc8]
push ecx
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x1a0]
mov byte [esp + 0xd98], 0x68
call fcn.00403af0
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x66
call fcn.00402cc0
push str.config_
lea edx, [esp + 0xe0]
push edx
lea eax, [esp + 0x138]
push eax
call fcn.00409720
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x1bc]
mov byte [esp + 0xd98], 0x69
call fcn.00403af0
lea ecx, [esp + 0x130]
mov byte [esp + 0xd98], 0x66
call fcn.00402cc0
push str.config.db
lea ecx, [esp + 0x1a4]
push ecx
lea edx, [esp + 0xac]
push edx
call fcn.00409720
add esp, 0xc
push eax
mov byte [esp + 0xd9c], 0x6a
call fcn.00406550
add esp, 4
test eax, eax
lea ecx, [esp + 0xa4]
sete byte [esp + 0x27]
mov byte [esp + 0xd98], 0x66
call fcn.00402cc0
mov esi, 0x10
cmp byte [esp + 0x27], bl
je 0x4172b3
mov edi, dword [esp + 0x1bc]
cmp dword [esp + 0x1d0], esi
jae 0x41729c
lea edi, [esp + 0x1bc]
mov eax, dword [esp + 0x6c]
cmp dword [esp + 0x80], esi
jae 0x4172ad
lea eax, [esp + 0x6c]
push eax
call fcn.00413110
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [esp + 0x1bc]
cmp dword [esp + 0x1d0], esi
jae 0x4172d5
lea ecx, [esp + 0x1bc]
cmp ecx, ebx
je 0x4172de
call fcn.00412bd0
mov dword [esp + 0x160], 0xf
mov dword [esp + 0x15c], ebx
mov byte [esp + 0x14c], bl
mov dword [esp + 0x29c], ebx
mov dword [esp + 0x2a0], ebx
mov dword [esp + 0x2a4], ebx
sub esp, 0x1c
mov byte [esp + 0xdb4], 0x6c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x580469
call fcn.00402c60
lea edx, [esp + 0xf8]
lea ecx, [esp + 0x2b8]
call fcn.004077c0
mov ecx, dword [esp + 0x2bc]
mov esi, dword [esp + 0x2b8]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add esp, 0x1c
add eax, edx
je 0x417673
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], eax
mov edi, edi
mov eax, dword [esp + 0x1c]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c30
lea esi, [esp + 0x14c]
call fcn.004059d0
add esp, 0x1c
mov edi, eax
lea esi, [esp + 0x14c]
mov byte [esp + 0xd98], 0x6d
call fcn.00403af0
mov byte [esp + 0xd98], 0x6c
cmp dword [esp + 0x144], 0x10
jb 0x4173d9
mov ecx, dword [esp + 0x130]
push ecx
call fcn.0042465c
add esp, 4
mov ecx, str.readme.txt
lea edi, [esp + 0x14c]
call fcn.00409950
test al, al
jne 0x417400
mov ecx, 0x581cc0
call fcn.00409950
test al, al
je 0x417485
mov edx, dword [esp + 0x1c]
push edx
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0xac]
push ecx
call fcn.004099b0
add esp, 0xc
lea edx, [esp + 0xa4]
push edx
mov byte [esp + 0xd9c], 0x6e
call fcn.00406550
add esp, 4
test eax, eax
jne 0x417642
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xcc]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c30
call fcn.004066a0
add esp, 0x20
cmp eax, ebx
jne 0x417642
lea ecx, [esp + 0xa4]
mov byte [esp + 0xd98], 0x6c
call fcn.00402cc0
mov ecx, 0x581ccc
lea edi, [esp + 0x14c]
call fcn.00409a70
test al, al
je 0x417664
mov ecx, 0x581cd8
call fcn.00409a70
test al, al
je 0x417664
mov ecx, str.hwsccppanel.exe
call fcn.00409a70
test al, al
je 0x417664
mov ecx, 0x581c4c
call fcn.00409a70
test al, al
je 0x417664
mov ecx, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0xe0]
push edx
lea eax, [esp + 0xc8]
push eax
call fcn.004099b0
add esp, 0xc
mov ecx, 0x10
mov byte [esp + 0xd98], 0x6f
cmp dword [eax + 0x14], ecx
jb 0x417505
mov eax, dword [eax]
cmp dword [esp + 0x80], ecx
mov ecx, dword [esp + 0x6c]
jae 0x417516
lea ecx, [esp + 0x6c]
push ecx
mov edi, eax
call fcn.00413110
lea ecx, [esp + 0xc0]
mov esi, eax
mov byte [esp + 0xd98], 0x6c
call fcn.00402cc0
cmp esi, ebx
jne 0x417664
mov edx, dword [esp + 0x14]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push str.logupdate.log
add edx, 0x16c
push edx
push ecx
call fcn.00409720
add esp, 0xc
mov byte [esp + 0xdb4], 0x70
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x134]
call fcn.00406ff0
add esp, 4
mov esi, eax
lea eax, [esp + 0xc0]
mov byte [esp + 0xdb4], 0x71
mov ebx, dword [esp + 0x38]
push 0x581cfc
push eax
call fcn.00409880
push eax
mov eax, 0x581cf4
lea ecx, [esp + 0x158]
mov byte [esp + 0xdc0], 0x72
call fcn.004093f0
add esp, 0xc
mov ecx, eax
lea edx, [esp + 0xdc]
push edx
mov eax, esi
mov byte [esp + 0xdb8], 0x73
call fcn.00409800
add esp, 4
mov byte [esp + 0xdb4], 0x74
push eax
mov byte [esp + 0xdb8], 0x78
call fcn.004052a0
add esp, 0x20
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x77
call fcn.00402cc0
lea ecx, [esp + 0x130]
mov byte [esp + 0xd98], 0x76
call fcn.00402cc0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xd98], 0x75
call fcn.00402cc0
lea ecx, [esp + 0x114]
mov byte [esp + 0xd98], 0x6c
call fcn.00402cc0
xor ebx, ebx
jmp 0x417664
mov byte [esp + 0xd98], 0x6c
cmp dword [esp + 0xb8], 0x10
jb 0x417664
mov eax, dword [esp + 0xa4]
push eax
call fcn.0042465c
add esp, 4
add dword [esp + 0x1c], 0x1c
dec dword [esp + 0x10]
jne 0x417370
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x4be6
push 0x11f6
push 0x13ad7
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0xea
mov esi, 0xf
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push 0x581d10
mov byte [ecx], bl
call fcn.00404410
lea ecx, [esp + 0x2e0]
call fcn.004075e0
add esp, 0x28
mov byte [esp + 0xd98], 0x79
push 1
push 0x5805d8
lea ecx, [esp + 0xac]
mov dword [esp + 0xc0], esi
mov dword [esp + 0xbc], ebx
mov byte [esp + 0xac], bl
call fcn.00404410
mov byte [esp + 0xd98], 0x7a
push 2
push 0x5806d0
lea ecx, [esp + 0x11c]
mov dword [esp + 0x130], esi
mov dword [esp + 0x12c], ebx
mov byte [esp + 0x11c], bl
call fcn.00404410
lea ecx, [esp + 0xa4]
push ecx
lea edx, [esp + 0x118]
lea ebx, [esp + 0x2bc]
mov byte [esp + 0xd9c], 0x7b
call fcn.00405bf0
mov esi, 0x10
add esp, 4
mov byte [esp + 0xd98], 0x7a
cmp dword [esp + 0x128], esi
jb 0x41776d
mov edx, dword [esp + 0x114]
push edx
call fcn.0042465c
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov byte [esp + 0xd98], 0x79
mov dword [esp + 0x128], edi
mov dword [esp + 0x124], ebx
mov byte [esp + 0x114], bl
cmp dword [esp + 0xb8], esi
jb 0x4177aa
mov eax, dword [esp + 0xa4]
push eax
call fcn.0042465c
add esp, 4
lea eax, [esp + 0x130]
call fcn.00406520
mov dword [esp + 0x10], eax
push str.hwsup_
lea ecx, [esp + 0xe0]
push ecx
lea edx, [esp + 0x11c]
push edx
mov byte [esp + 0xda4], 0x7c
call fcn.00409720
add esp, 0xc
mov ecx, eax
lea eax, [esp + 0xa4]
mov byte [esp + 0xd98], 0x7d
push eax
mov eax, dword [esp + 0x14]
call fcn.00409800
add esp, 4
push eax
mov eax, str..bat
lea ecx, [esp + 0x230]
mov byte [esp + 0xd9c], 0x7e
call fcn.004093f0
add esp, 4
mov byte [esp + 0xd98], 0x80
cmp dword [esp + 0xb8], esi
jb 0x41783b
mov ecx, dword [esp + 0xa4]
push ecx
call fcn.0042465c
add esp, 4
mov dword [esp + 0xb8], edi
mov dword [esp + 0xb4], ebx
mov byte [esp + 0xa4], bl
mov byte [esp + 0xd98], 0x81
cmp dword [esp + 0x128], esi
jb 0x417871
mov edx, dword [esp + 0x114]
push edx
call fcn.0042465c
add esp, 4
mov dword [esp + 0x128], edi
mov dword [esp + 0x124], ebx
mov byte [esp + 0x114], bl
mov byte [esp + 0xd98], 0x82
cmp dword [esp + 0x144], esi
jb 0x4178a7
mov eax, dword [esp + 0x130]
push eax
call fcn.0042465c
add esp, 4
lea ecx, [esp + 0x2b8]
push ecx
lea esi, [esp + 0x230]
mov dword [esp + 0x148], edi
mov dword [esp + 0x144], ebx
mov byte [esp + 0x134], bl
call fcn.00408170
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
push 0x64
call esi
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push 0x580469
mov byte [ecx], bl
call fcn.00404410
push 1
sub esp, 0x1c
mov byte [esp + 0xdd8], 0x83
mov ecx, esp
mov dword [esp + 0x50], esp
push 7
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str.hwsccpd
mov byte [ecx], bl
call fcn.00404410
mov byte [esp + 0xdd8], 0x82
call fcn.0041d610
push 0x64
call esi
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push 0x580469
mov byte [ecx], bl
call fcn.00404410
push 1
sub esp, 0x1c
mov byte [esp + 0xdd8], 0x84
mov ecx, esp
mov dword [esp + 0x50], esp
push 6
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str.hwsccp
mov byte [ecx], bl
call fcn.00404410
mov byte [esp + 0xdd8], 0x82
call fcn.0041d610
mov byte [esp + 0xd98], 0x79
cmp dword [esp + 0x240], 0x10
jb 0x4179a5
mov edx, dword [esp + 0x22c]
push edx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x6c
cmp dword [esp + 0x2cc], 0x10
mov dword [esp + 0x240], edi
mov dword [esp + 0x23c], ebx
mov byte [esp + 0x22c], bl
jb 0x4179dc
mov eax, dword [esp + 0x2b8]
push eax
call fcn.0042465c
add esp, 4
lea esi, [esp + 0x29c]
mov dword [esp + 0x2cc], edi
mov dword [esp + 0x2c8], ebx
mov byte [esp + 0x2b8], bl
mov byte [esp + 0xd98], 0x6b
call fcn.00408930
mov byte [esp + 0xd98], 0x66
cmp dword [esp + 0x160], 0x10
jb 0x417a27
mov ecx, dword [esp + 0x14c]
push ecx
call fcn.0042465c
add esp, 4
mov esi, 0x10
mov byte [esp + 0xd98], 0x4c
mov dword [esp + 0x160], edi
mov dword [esp + 0x15c], ebx
mov byte [esp + 0x14c], bl
cmp dword [esp + 0x1d0], esi
jb 0x417a62
mov edx, dword [esp + 0x1bc]
push edx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x33
mov dword [esp + 0x1d0], edi
mov dword [esp + 0x1cc], ebx
mov byte [esp + 0x1bc], bl
cmp dword [esp + 0x224], esi
jb 0x417a98
mov eax, dword [esp + 0x210]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x2e
mov dword [esp + 0x224], edi
mov dword [esp + 0x220], ebx
mov byte [esp + 0x210], bl
cmp dword [esp + 0x1b4], esi
jb 0x417ace
mov ecx, dword [esp + 0x1a0]
push ecx
call fcn.0042465c
add esp, 4
xor ebx, ebx
mov edi, 0x10
push 0x12c
lea esi, [edi - 1]
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [esp + 0xdc]
cmp dword [esp + 0xf0], edi
jae 0x417afa
lea ecx, [esp + 0xdc]
cmp ecx, ebx
je 0x417b03
call fcn.00412bd0
mov byte [esp + 0xd98], 0x2d
cmp dword [esp + 0x390], edi
jb 0x417b24
mov eax, dword [esp + 0x37c]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x2c
mov dword [esp + 0x390], esi
mov dword [esp + 0x38c], ebx
mov byte [esp + 0x37c], bl
cmp dword [esp + 0x2e8], edi
jb 0x417b5a
mov ecx, dword [esp + 0x2d4]
push ecx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x29
mov dword [esp + 0x2e8], esi
mov dword [esp + 0x2e4], ebx
mov byte [esp + 0x2d4], bl
cmp dword [esp + 0x278], edi
jb 0x417b90
mov edx, dword [esp + 0x264]
push edx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x25
mov dword [esp + 0x278], esi
mov dword [esp + 0x274], ebx
mov byte [esp + 0x264], bl
cmp dword [esp + 0x9c], edi
jb 0x417bc6
mov eax, dword [esp + 0x88]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x1f
mov dword [esp + 0x9c], esi
mov dword [esp + 0x98], ebx
mov byte [esp + 0x88], bl
cmp dword [esp + 0x10c], edi
jb 0x417bfc
mov ecx, dword [esp + 0xf8]
push ecx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x15
mov dword [esp + 0x10c], esi
mov dword [esp + 0x108], ebx
mov byte [esp + 0xf8], bl
cmp dword [esp + 0x208], edi
jb 0x417c32
mov edx, dword [esp + 0x1f4]
push edx
call fcn.0042465c
add esp, 4
mov dword [esp + 0x304], esi
mov dword [esp + 0x300], ebx
mov byte [esp + 0x2f0], bl
push str.hwsccp
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x218]
push ecx
mov byte [esp + 0xda4], 0x86
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0x32c]
mov byte [esp + 0xd9c], 0x87
call fcn.004093f0
add esp, 4
mov byte [esp + 0xd98], 0x89
cmp dword [esp + 0x224], edi
jb 0x417ca7
mov edx, dword [esp + 0x210]
push edx
call fcn.0042465c
add esp, 4
mov dword [esp + 0x224], esi
mov dword [esp + 0x220], ebx
mov byte [esp + 0x210], bl
cmp dword [ebp + 8], ebx
jne 0x417db2
lea eax, [esp + 0x328]
push eax
call fcn.00406550
add esp, 4
test eax, eax
je 0x417db2
lea edi, [esp + 0xc0]
call fcn.00406900
mov edi, eax
lea esi, [esp + 0x2f0]
mov byte [esp + 0xd98], 0x8a
call fcn.00403af0
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x89
call fcn.00402cc0
call fcn.00405980
push str.install
lea ecx, [esp + 0x348]
call fcn.00402c60
mov ecx, eax
mov eax, esi
lea ebx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x8b
call fcn.00409440
mov edx, eax
lea ecx, [esp + 0x328]
mov byte [esp + 0xd98], 0x8c
call fcn.00408200
mov ecx, ebx
mov byte [esp + 0xd98], 0x8b
call fcn.00402cc0
lea ecx, [esp + 0x344]
mov byte [esp + 0xd98], 0x89
call fcn.00402cc0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push 0
lea edx, [esp + 0x90]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push edx
mov byte [ecx], 0
call fcn.00403c30
call fcn.00413be0
xor ebx, ebx
lea edi, [ebx + 0x10]
lea esi, [ebx + 0xf]
push str.hwsccpd
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x138]
push ecx
call fcn.00409720
add esp, 0xc
push eax
mov eax, str..exe
lea ecx, [esp + 0x39c]
mov byte [esp + 0xd9c], 0x8d
call fcn.004093f0
add esp, 4
mov byte [esp + 0xd98], 0x8f
cmp dword [esp + 0x144], edi
jb 0x417e0a
mov edx, dword [esp + 0x130]
push edx
call fcn.0042465c
add esp, 4
mov eax, dword [esp + 0x328]
mov dword [esp + 0x144], esi
mov dword [esp + 0x140], ebx
mov byte [esp + 0x130], bl
cmp dword [esp + 0x33c], edi
jae 0x417e36
lea eax, [esp + 0x328]
push ebx
push 0x580469
push 0x581e28
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov eax, dword [esp + 0x398]
cmp dword [esp + 0x3ac], edi
jae 0x417e65
lea eax, [esp + 0x398]
push ebx
push 0x580469
push 0x581e28
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 6
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push str.hwsccp
mov byte [ecx], bl
call fcn.00404410
call fcn.0041d820
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 7
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push str.hwsccpd
mov byte [ecx], bl
call fcn.00404410
call fcn.0041d820
push 0x5813c8
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x314]
push ecx
call fcn.00409720
add esp, 0xc
mov dword [esp + 0x294], esi
mov dword [esp + 0x290], ebx
mov byte [esp + 0x280], bl
mov dword [esp + 0x240], esi
mov dword [esp + 0x23c], ebx
mov byte [esp + 0x22c], bl
mov byte [esp + 0xd98], 0x92
cmp dword [esp + 0x300], ebx
je 0x418092
mov edx, dword [esp + 0x14]
cmp dword [edx + 0xc20], ebx
je 0x418092
lea eax, [esp + 0xc0]
push str.http:__localhost:6689_
push eax
lea ebx, [esp + 0x2f8]
call fcn.00409880
add esp, 8
mov edi, eax
lea esi, [esp + 0x280]
mov byte [esp + 0xd98], 0x93
call fcn.00403af0
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x92
call fcn.00402cc0
lea ecx, [esp + 0x424]
push ecx
call fcn.004104d0
sub esp, 0x1c
mov byte [esp + 0xdb4], 0x94
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x580fb8
call fcn.00402c60
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xdd0], 0x95
mov dword [esp + 0x48], esp
xor ebx, ebx
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x34c]
mov esi, 0xf
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c30
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xdec], 0x96
mov dword [esp + 0x70], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x368]
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push eax
mov byte [ecx], bl
call fcn.00403c30
mov byte [esp + 0xdec], 0x94
call fcn.00411700
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x580fb8
call fcn.00402c60
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xdd0], 0x97
mov dword [esp + 0x48], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x2c0]
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push edx
mov byte [ecx], bl
call fcn.00403c30
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0xdec], 0x98
mov dword [esp + 0x70], esp
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
mov byte [ecx], bl
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xc8]
push eax
call fcn.00403c30
mov byte [esp + 0xdec], 0x94
call fcn.00411980
lea ecx, [esp + 0x424]
mov byte [esp + 0xd98], 0x92
call fcn.004105f0
lea edi, [esi + 1]
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 0x168], ebx
jne 0x41830c
cmp dword [esp + 0x290], ebx
jne 0x418319
push 0x190
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [esp + 0x17c], 0xf
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], bl
push str.getentrylocalurl
lea ecx, [esp + 0x268]
mov byte [esp + 0xd9c], 0x99
call fcn.00402c60
lea eax, [esp + 0xc0]
mov byte [esp + 0xd98], 0x9a
call fcn.00406520
push eax
mov eax, str..tmp
lea ecx, [esp + 0xfc]
mov byte [esp + 0xd9c], 0x9b
call fcn.004093f0
add esp, 4
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0x9d
call fcn.00402cc0
push 0x580690
lea edx, [esp + 0x268]
push edx
lea eax, [esp + 0xac]
push eax
call fcn.00409720
add esp, 0xc
mov ecx, eax
lea eax, [esp + 0xf8]
lea ebx, [esp + 0x344]
mov byte [esp + 0xd98], 0x9e
call fcn.00409440
mov edx, eax
lea ecx, [esp + 0x328]
mov byte [esp + 0xd98], 0x9f
call fcn.00408200
mov ecx, ebx
mov byte [esp + 0xd98], 0x9e
call fcn.00402cc0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xd98], 0x9d
call fcn.00402cc0
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.temp_
lea ecx, [esp + 0x70]
push ecx
lea edx, [esp + 0x2dc]
push edx
call fcn.00409720
add esp, 0xc
mov ecx, eax
lea eax, [esp + 0xf8]
lea ebx, [esp + 0x1d8]
mov byte [esp + 0xd98], 0xa0
call fcn.00409440
lea ecx, [esp + 0x2d4]
mov byte [esp + 0xd98], 0xa2
call fcn.00402cc0
mov eax, ebx
push eax
lea ecx, [esp + 0x16c]
call fcn.00405550
add esp, 4
mov eax, ebx
call fcn.00407d30
push str.__entry_
lea ecx, [esp + 0x8c]
call fcn.00402c60
push str._entry_
lea ecx, [esp + 0xa8]
mov byte [esp + 0xd9c], 0xa3
call fcn.00402c60
lea ecx, [esp + 0x88]
push ecx
lea edx, [esp + 0xa8]
lea ecx, [esp + 0x16c]
lea ebx, [esp + 0x348]
mov byte [esp + 0xd9c], 0xa4
call fcn.00406bd0
add esp, 4
mov edi, eax
lea esi, [esp + 0x280]
mov byte [esp + 0xd98], 0xa5
call fcn.00403af0
mov ecx, ebx
mov byte [esp + 0xd98], 0xa4
call fcn.00402cc0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xd98], 0xa3
call fcn.00402cc0
lea ecx, [esp + 0x88]
mov byte [esp + 0xd98], 0xa2
call fcn.00402cc0
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xd98], 0x9d
call fcn.00402cc0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xd98], 0x9a
call fcn.00402cc0
lea ecx, [esp + 0x264]
mov byte [esp + 0xd98], 0x99
call fcn.00402cc0
lea ecx, [esp + 0x168]
mov byte [esp + 0xd98], 0x92
call fcn.00402cc0
xor ebx, ebx
lea edi, [ebx + 0x10]
lea esi, [ebx + 0xf]
cmp dword [esp + 0x290], ebx
je 0x41859f
mov eax, 7
xor edx, edx
mov dword [esp + 0x444], eax
mov dword [esp + 0x440], ebx
mov word [esp + 0x430], dx
mov dword [esp + 0x460], eax
xor eax, eax
mov dword [esp + 0x45c], ebx
mov word [esp + 0x44c], ax
mov byte [esp + 0xd98], 0xa7
call fcn.0041f220
test eax, eax
je 0x41858a
push 0x4be6
push 0x11f6
push 0x13ad7
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x581e80
call fcn.00402c60
lea ecx, [esp + 0x2fc]
call fcn.004075e0
lea ecx, [esp + 0x2fc]
push ecx
lea ecx, [esp + 0x290]
mov byte [esp + 0xdc4], 0xa8
call fcn.00406e60
add esp, 0x2c
mov dword [esp + 0x17c], esi
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], bl
lea edx, [esp + 0x10]
mov byte [esp + 0xd98], 0xaa
push edx
lea eax, [esp + 0x268]
mov dword [esp + 0x14], ebx
push eax
lea ecx, [esp + 0x170]
lea ebx, [esp + 0x42c]
call fcn.0041fa50
push str.__ip_
lea ecx, [esp + 0xa8]
call fcn.00402c60
push str._ip_
lea ecx, [esp + 0xfc]
mov byte [esp + 0xd9c], 0xab
call fcn.00402c60
lea ecx, [esp + 0xa4]
push ecx
lea edx, [esp + 0xfc]
lea ecx, [esp + 0x16c]
lea ebx, [esp + 0x1dc]
mov byte [esp + 0xd9c], 0xac
call fcn.00406bd0
add esp, 4
lea ecx, [esp + 0xf8]
mov byte [esp + 0xd98], 0xae
call fcn.00402cc0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xd98], 0xaf
call fcn.00402cc0
mov ecx, ebx
call fcn.00405fc0
test eax, eax
je 0x418530
push 0xffffffffffffffff
push 0
lea edx, [esp + 0x288]
push edx
mov ecx, 0x5aaa00
call fcn.00403c30
push str.:__localhost
lea ecx, [esp + 0x8c]
call fcn.00402c60
push 0x581ee8
lea ecx, [esp + 0x348]
mov byte [esp + 0xd9c], 0xb0
call fcn.00402c60
mov ecx, eax
mov eax, ebx
lea ebx, [esp + 0xc0]
mov byte [esp + 0xd98], 0xb1
call fcn.00409440
push eax
lea edx, [esp + 0x8c]
mov ebx, 0x5aaa00
mov byte [esp + 0xd9c], 0xb2
call fcn.00405bf0
add esp, 4
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], 0xb1
call fcn.00402cc0
lea ecx, [esp + 0x344]
mov byte [esp + 0xd98], 0xb0
call fcn.00402cc0
lea ecx, [esp + 0x88]
mov byte [esp + 0xd98], 0xaf
call fcn.00402cc0
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xd98], 0xaa
call fcn.00402cc0
lea ecx, [esp + 0x168]
mov byte [esp + 0xd98], 0xa9
call fcn.00402cc0
lea esi, [esp + 0x264]
mov byte [esp + 0xd98], 0xa8
call fcn.004086b0
lea ecx, [esp + 0x2d4]
mov byte [esp + 0xd98], 0xa7
call fcn.00402cc0
mov esi, 0xf
lea edi, [esi + 1]
xor ebx, ebx
lea eax, [esp + 0x424]
push eax
mov byte [esp + 0xd9c], 0x92
call fcn.0041f180
lea ecx, [esp + 0x474]
push ecx
call fcn.004104d0
mov byte [esp + 0xd98], 0xb3
call fcn.00410680
push 0xb
push str.HwsCcpPanel
lea ecx, [esp + 0x11c]
mov dword [esp + 0x130], esi
mov dword [esp + 0x12c], ebx
mov byte [esp + 0x11c], bl
call fcn.00404410
lea edx, [esp + 0x114]
push edx
lea edx, [esp + 0x310]
lea ecx, [esp + 0x3d4]
mov byte [esp + 0xd9c], 0xb4
call fcn.00410a10
mov byte [esp + 0xd98], 0xb6
cmp dword [esp + 0x128], edi
jb 0x418625
mov eax, dword [esp + 0x114]
push eax
call fcn.0042465c
add esp, 4
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x128], esi
mov dword [esp + 0x124], ebx
mov byte [esp + 0x114], bl
cmp dword [ecx + 0x168], ebx
jne 0x418a90
mov eax, dword [esp + 0x30c]
cmp dword [esp + 0x320], edi
jae 0x418661
lea eax, [esp + 0x30c]
push 8
push 0x580469
push str.autorun
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea esi, [esp + 0x1c]
call fcn.004138e0
push 0x580fb8
lea ecx, [esp + 0x16c]
mov byte [esp + 0xd9c], 0xb7
call fcn.00402c60
push eax
mov eax, 0x581f10
lea ecx, [esp + 0x8c]
mov byte [esp + 0xd9c], 0xb8
call fcn.004093f0
add esp, 4
mov byte [esp + 0xd98], 0xba
cmp dword [esp + 0x17c], edi
jb 0x4186da
mov edx, dword [esp + 0x168]
push edx
call fcn.0042465c
add esp, 4
lea edi, [esp + 0x10]
lea eax, [esp + 0x1c]
mov dword [esp + 0x17c], 0xf
mov dword [esp + 0x178], ebx
mov byte [esp + 0x168], bl
mov dword [esp + 0x10], ebx
call fcn.00413960
test eax, eax
je 0x418712
cmp dword [esp + 0x10], ebx
jne 0x418a2b
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0xc4]
call fcn.00406e60
add esp, 4
mov byte [esp + 0xd98], 0xbb
cmp dword [eax + 0x14], 8
jb 0x4187cd
mov esi, dword [eax]
jmp 0x4187cf
push 0x14
push 0x581e04
lea ecx, [esp + 0x234]
mov dword [esp + 0x248], edi
mov dword [esp + 0x244], ebx
mov byte [esp + 0x234], bl
call fcn.00404410
sub esp, 0x1c
mov byte [esp + 0xdb4], 0x85
mov eax, dword [esp + 0x30]
mov edx, esp
mov dword [esp + 0x34], esp
push str.logupdate.log
add eax, 0x16c
push eax
push edx
call fcn.00409720
lea ecx, [esp + 0x254]
add esp, 0xc
push ecx
call fcn.004052a0
add esp, 0x20
mov byte [esp + 0xd98], 0x2e
cmp dword [esp + 0x240], esi
jb 0x417ad0
mov edx, dword [esp + 0x22c]
push edx
call fcn.0042465c
add esp, 4
jmp 0x417ad0
mov esi, eax
call fcn.004139f0
lea esi, [esp + 0xc0]
mov edi, eax
mov byte [esp + 0xd98], 0xba
call fcn.004086b0
cmp edi, ebx
je 0x41880d
lea edi, [esp + 0x10]
lea eax, [esp + 0x1c]
mov dword [esp + 0x10], ebx
call fcn.00413960
test eax, eax
je 0x41880d
cmp dword [esp + 0x10], ebx
jne 0x418a2b
mov dword [esp + 0x1ec], 0xf
mov dword [esp + 0x1e8], ebx
mov byte [esp + 0x1d8], bl
mov bl, 0xbc
push 0x1a21
lea esi, [esp + 0xc4]
mov byte [esp + 0xd9c], bl
call fcn.00407080
add esp, 4
mov edi, eax
lea esi, [esp + 0x1d8]
mov byte [esp + 0xd98], 0xbd
call fcn.00403af0
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd98], bl
call fcn.00402cc0
push 0x4be6
push 0x11f6
push 0x13ad7
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x581f20
call fcn.00402c60
lea ecx, [esp + 0x3a4]
call fcn.004075e0
add esp, 0x28
mov edi, eax
push 0x4be6
push 0x11f6
push 0x13ad7
sub esp, 0x1c
mov byte [esp + 0xdc0], 0xbe
mov ecx, esp
mov dword [esp + 0x40], esp
push 0x581f20
lea ebx, [esp + 0xb4]
call fcn.00402c60
lea ecx, [esp + 0x2fc]
call fcn.004075e0
push eax
mov eax, str.____1
lea ecx, [esp + 0x290]
mov byte [esp + 0xdc4], 0xbf
call fcn.004093f0
add esp, 0x2c
mov ecx, eax
mov eax, ebx
lea ebx, [esp + 0xa4]
mov byte [esp + 0xd98], 0xc0
call fcn.00409440
push eax
mov eax, 0x581f74
lea ecx, [esp + 0x348]
mov byte [esp + 0xd9c], 0xc1
call fcn.004093f0
add esp, 4
mov ecx, eax
lea edx, [esp + 0xc0]
push edx
mov eax, edi
mov byte [esp + 0xd9c], 0xc2
call fcn.00409800
add esp, 4
mov ecx, eax
mov eax, esi
lea ebx, [esp + 0xf8]
mov byte [esp + 0xd98], 0xc3
call fcn.00409440
mov byte [esp + 0xd98], 0xc5
lea ecx, [esp + 0xc0]
call fcn.00402cc0
lea ecx, [esp + 0x344]
mov byte [esp + 0xd98], 0xc6
call fcn.00402cc0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xd98], 0xc7
call fcn.00402cc0
lea ecx, [esp + 0x264]
mov byte [esp + 0xd98], 0xc8
call fcn.00402cc0
lea ecx, [esp + 0x2d4]
mov byte [esp + 0xd98], 0xc9
call fcn.00402cc0
lea ecx, [esp + 0x37c]
mov byte [esp + 0xd98], 0xca
call fcn.00402cc0
cmp dword [esp + 0x10c], 0x10
mov eax, dword [esp + 0xf8]
jae 0x4189ed
mov eax, ebx
push eax
call fcn.00525e16
add esp, 4
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0xf8]
mov byte [esp + 0xd98], 0xbc
call fcn.00402cc0
lea ecx, [esp + 0x1d8]
mov byte [esp + 0xd98], 0xba
call fcn.00402cc0
xor ebx, ebx
mov byte [esp + 0xd98], 0xb7
cmp dword [esp + 0x9c], 0x10
jb 0x418a4d
mov eax, dword [esp + 0x88]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0xb6
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x9c], 0xf
mov dword [esp + 0x98], ebx
mov byte [esp + 0x88], bl
cmp eax, ebx
je 0x418a82
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x1c], ebx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov edi, 0x10
lea esi, [edi - 1]
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x248]
cmp dword [ebp + 8], ebx
je 0x418ab0
push 0xa
push 0x581f78
jmp 0x418ab7
push 0x72
push 0x581f88
call fcn.00404410
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push ebx
mov dword [ecx + 0x14], esi
mov dword [ecx + 0x10], ebx
push 0x580469
mov byte [ecx], bl
call fcn.00404410
push 1
sub esp, 0x1c
mov byte [esp + 0xdd8], 0xcb
mov ecx, esp
mov dword [esp + 0x50], esp
push str.hwsccp
call fcn.00402c60
mov byte [esp + 0xdd8], 0xb6
call fcn.0041d610
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x580469
call fcn.00402c60
push 1
sub esp, 0x1c
mov byte [esp + 0xdd8], 0xcc
mov ecx, esp
mov dword [esp + 0x50], esp
push str.hwsccpd
call fcn.00402c60
mov byte [esp + 0xdd8], 0xb6
call fcn.0041d610
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x168], ebx
je 0x418b82
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
mov edx, eax
push str.logupdate.log
add edx, 0x16c
push edx
push ecx
call fcn.00409720
lea eax, [esp + 0x270]
add esp, 0xc
push eax
call fcn.004052a0
add esp, 0x20
jmp 0x418c6e
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x580469
call fcn.00402c60
push 1
sub esp, 0x1c
mov byte [esp + 0xdd8], 0xcd
mov ecx, esp
mov dword [esp + 0x50], esp
push str.hwsccpd
call fcn.00402c60
mov byte [esp + 0xdd8], 0xb6
call fcn.0041d610
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x580469
call fcn.00402c60
push 1
sub esp, 0x1c
mov byte [esp + 0xdd8], 0xce
mov ecx, esp
mov dword [esp + 0x50], esp
push str.hwsccp
call fcn.00402c60
mov byte [esp + 0xdd8], 0xb6
call fcn.0041d610
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x20]
push ebx
push 0x32
push 2
push edx
call dword [sym.imp.USER32.dll_SetTimer]
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x288]
push eax
mov ecx, 0x5aa9e4
call fcn.00403c30
lea ecx, [esp + 0x4b4]
push ecx
call fcn.0040ec80
lea ecx, [esp + 0x4b4]
mov byte [esp + 0xd98], 0xcf
call fcn.00432b23
lea ecx, [esp + 0x4b4]
mov byte [esp + 0xd98], 0xb6
call fcn.0040ed90
mov byte [esp + 0xd98], 0xb3
cmp dword [esp + 0x3e4], edi
jb 0x418c8f
mov edx, dword [esp + 0x3d0]
push edx
call fcn.0042465c
add esp, 4
lea ecx, [esp + 0x474]
mov dword [esp + 0x3e4], esi
mov dword [esp + 0x3e0], ebx
mov byte [esp + 0x3d0], bl
mov byte [esp + 0xd98], 0x92
call fcn.004105f0
mov byte [esp + 0xd98], 0x90
cmp dword [esp + 0x294], edi
jb 0x418cd9
mov eax, dword [esp + 0x280]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x8f
mov dword [esp + 0x294], esi
mov dword [esp + 0x290], ebx
mov byte [esp + 0x280], bl
cmp dword [esp + 0x320], edi
jb 0x418d0f
mov ecx, dword [esp + 0x30c]
push ecx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x89
mov dword [esp + 0x320], esi
mov dword [esp + 0x31c], ebx
mov byte [esp + 0x30c], bl
cmp dword [esp + 0x3ac], edi
jb 0x418d45
mov edx, dword [esp + 0x398]
push edx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x86
mov dword [esp + 0x3ac], esi
mov dword [esp + 0x3a8], ebx
mov byte [esp + 0x398], bl
cmp dword [esp + 0x33c], edi
jb 0x418d7b
mov eax, dword [esp + 0x328]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0x15
mov dword [esp + 0x33c], esi
mov dword [esp + 0x338], ebx
mov byte [esp + 0x328], bl
cmp dword [esp + 0x304], edi
jb 0x418db1
mov ecx, dword [esp + 0x2f0]
push ecx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 0xb
mov dword [esp + 0x304], esi
mov dword [esp + 0x300], ebx
mov byte [esp + 0x2f0], bl
cmp dword [esp + 0xf0], edi
jb 0x418de7
mov edx, dword [esp + 0xdc]
push edx
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 8
mov dword [esp + 0xf0], esi
mov dword [esp + 0xec], ebx
mov byte [esp + 0xdc], bl
cmp dword [esp + 0x80], edi
jb 0x418e1a
mov eax, dword [esp + 0x6c]
push eax
call fcn.0042465c
add esp, 4
mov byte [esp + 0xd98], 7
mov dword [esp + 0x80], esi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
cmp dword [esp + 0x198], edi
jb 0x418e4a
mov ecx, dword [esp + 0x184]
push ecx
call fcn.0042465c
add esp, 4
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x19c], esi
mov dword [esp + 0x198], ebx
mov byte [esp + 0x188], bl
mov byte [esp + 0xd9c], 3
call fcn.0041dca0
mov byte [esp + 0xd98], 2
cmp dword [esp + 0x25c], edi
jb 0x418e92
mov eax, dword [esp + 0x248]
push eax
call fcn.0042465c
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0xd90]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xd78]
xor ecx, esp
call fcn.00523079
mov esp, ebp
pop ebp
ret 4