Function at 0x420750
Capabilities:
Accept command line arguments
Check mutex on windows
Contain obfuscated stackstrings
Create mailslot
Create thread
Delete file
Extract resource via kernel32 functions
Get comspec environment variable
Get file system object information
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1048
call fcn.004090a0
mov eax, dword [0x4422a0]
xor eax, ebp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x914], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x910], 0
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x908], 0
xor eax, eax
mov word [ebp - 0x498], ax
push 0x45e
push 0
lea ecx, [ebp - 0x496]
push ecx
call fcn.00402740
add esp, 0xc
xor edx, edx
mov word [ebp - 0x8f8], dx
push 0x45e
push 0
lea eax, [ebp - 0x8f6]
push eax
call fcn.00402740
add esp, 0xc
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0xb1e]
call fcn.00401a00
lea ecx, [ebp - 0xb1d]
call fcn.00401a00
mov dword [ebp - 0x14], str.ErrorInfo.log
lea ecx, [ebp - 0x8f8]
mov dword [ebp - 0xb1c], ecx
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
push edx
call fcn.0040e510
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea eax, [ebp - 0xb1e]
push eax
call fcn.00428fd0
mov byte [ebp - 0xb2c], 0x4d
mov byte [ebp - 0xb2b], 0x69
mov byte [ebp - 0xb2a], 0x63
mov byte [ebp - 0xb29], 0x72
mov ecx, dword [ebp - 0xb2c]
mov dword [0x442f5c], ecx
mov byte [ebp - 0xb2c], 0x6f
mov byte [ebp - 0xb2b], 0x73
mov byte [ebp - 0xb2a], 0x6f
mov byte [ebp - 0xb29], 0x66
mov edx, dword [ebp - 0xb2c]
mov dword [0x442f60], edx
mov byte [ebp - 0xb2c], 0x74
mov byte [ebp - 0xb2b], 0x2e
mov byte [ebp - 0xb2a], 0x4e
mov byte [ebp - 0xb29], 0x45
mov eax, dword [ebp - 0xb2c]
mov dword [0x442f64], eax
lea ecx, [ebp - 0xb2d]
call fcn.00401a00
lea ecx, [ebp - 0xb2d]
push ecx
call fcn.0042b6b0
lea ecx, [ebp - 0xb2d]
call fcn.004019f0
push str.GlobalFileEventMultexSW
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x45c2dc], eax
cmp dword [0x45c2dc], 0
jne 0x420902
mov dword [ebp - 0x914], 0x270e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
jmp 0x421e77
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
cmp dword [ebp - 0x910], 0xb7
jne 0x420933
mov dword [ebp - 0x914], 0x270d
mov dword [ebp - 0x910], 0
jmp 0x421e77
mov edx, dword [ebp + 8]
mov dword [0x45cb80], edx
push 0x118
push 0x45d310
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x904]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0xb24], eax
cmp dword [ebp - 0x904], 2
jle 0x420b09
mov dword [ebp - 0xb34], 0xffffffff
lea ecx, [ebp - 0x498]
mov dword [ebp - 0xb3c], ecx
mov dword [ebp - 0xb38], 0
lea ecx, [ebp - 0xb3d]
call fcn.00401a00
mov dword [ebp - 0x914], 0x270f
mov dword [ebp - 0x8fc], 0
jmp 0x4209c5
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
movzx ecx, word [eax*2 + 0x45d310]
test ecx, ecx
je 0x420a12
mov edx, dword [ebp - 0x8fc]
movzx eax, word [edx*2 + 0x45d310]
cmp eax, 0x5c
je 0x4209fd
mov ecx, dword [ebp - 0x8fc]
movzx edx, word [ecx*2 + 0x45d310]
cmp edx, 0x2f
jne 0x420a10
mov eax, dword [ebp - 0x8fc]
lea ecx, [eax*2 + 0x45d310]
mov dword [ebp - 0xb38], ecx
jmp 0x4209b6
cmp dword [ebp - 0xb38], 0
je 0x420a35
xor edx, edx
mov eax, dword [ebp - 0xb38]
mov word [eax], dx
mov ecx, dword [ebp - 0xb38]
add ecx, 2
mov dword [0x442f58], ecx
mov edx, dword [ebp - 0xb3c]
push edx
mov eax, dword [ebp - 0xb24]
mov ecx, dword [eax + 4]
movzx edx, word [ecx]
sub edx, 0x30
push edx
lea eax, [ebp - 0xb3d]
push eax
call fcn.0042ab70
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xb34]
push ecx
mov edx, dword [ebp - 0xb3c]
push edx
lea eax, [ebp - 0xb3d]
push eax
call fcn.00429a60
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0xb34]
push edx
push str._____d___d__r_n
mov eax, dword [ebp - 0xb3c]
add eax, 0x27
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x10
push 0x43ce80
mov ecx, dword [ebp - 0xb3c]
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push str.wiatrcvw.txt
push 0x45d310
push 0x43cea8
lea edx, [ebp - 0x8f8]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0xb3c]
push eax
mov ecx, dword [ebp - 0xb3c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0x8f8]
push edx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xb3d]
call fcn.004019f0
jmp 0x421e77
lea ecx, [ebp - 0xb25]
call fcn.00401a00
lea ecx, [ebp - 0xb26]
call fcn.00401a00
lea eax, [ebp - 0xb25]
push eax
call fcn.004291f0
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xb26]
push ecx
call fcn.0042ce80
lea edx, [ebp - 0xb1e]
push edx
call fcn.00428fa0
push 1
push str.HTTP_Parser_Log.txt
call fcn.00428520
push 0x43cedc
call fcn.004283a0
add esp, 4
push 0x45d310
push 0x43cee0
call fcn.004283a0
add esp, 8
mov eax, dword [ebp - 0xc]
push eax
push str.__tWinMain__________________CodePage_______________________d_
call fcn.004283a0
add esp, 8
mov ecx, dword [ebp - 0x904]
push ecx
push str.__tWinMain__________________Arg_Count______________________d_
call fcn.004283a0
add esp, 8
mov edx, dword [ebp - 4]
push edx
push str.__tWinMain__________________ActUserNameInformation_________d_
call fcn.004283a0
add esp, 8
lea eax, [ebp - 0xb25]
push eax
call fcn.00429340
push eax
push str.__tWinMain__________________Logon_UserCount________________d_
call fcn.004283a0
add esp, 8
lea ecx, [ebp - 0xb25]
push ecx
call fcn.00429350
push eax
push str.__tWinMain__________________ActiveUserName_________________s_
call fcn.004283a0
add esp, 8
lea edx, [ebp - 0xb1e]
push edx
call fcn.00428cd0
push eax
push str.__tWinMain__________________MainGetUserName________________s_
call fcn.004283a0
add esp, 8
push str.__tWinMain__________________Start________
call fcn.004283a0
add esp, 4
lea ecx, [ebp - 0xd60]
call fcn.00428c70
push 1
lea ecx, [ebp - 0xd60]
call fcn.00428990
test eax, eax
je 0x420c3c
lea eax, [ebp - 0xd60]
push eax
call fcn.004113a0
push 1
lea ecx, [ebp - 0xd60]
call fcn.004288b0
jmp 0x420d2d
mov dword [ebp - 0x914], 0x3e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x14]
push edx
push 0x45d310
push 0x43d2e0
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0x910]
push ecx
lea ecx, [ebp - 0xd60]
call fcn.00428ba0
push eax
movzx edx, word [ebp - 0x1c]
push edx
movzx eax, word [ebp - 0x1e]
push eax
movzx ecx, word [ebp - 0x20]
push ecx
movzx edx, word [ebp - 0x22]
push edx
movzx eax, word [ebp - 0x26]
push eax
movzx ecx, word [ebp - 0x28]
push ecx
push str._d__02d__02d__02d:_02d:_02d__s_Step___d__r_n
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xb1c]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x498]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xb1c]
push edx
mov eax, dword [ebp - 0xb1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xd60]
call fcn.00428be0
lea ecx, [ebp - 0xb26]
call fcn.004019f0
lea ecx, [ebp - 0xb25]
call fcn.004019f0
jmp 0x421e77
lea ecx, [ebp - 0xd60]
call fcn.00428be0
push 0x118
lea edx, [ebp - 0x8f8]
push edx
push 0xffffffffffffffff
push str.sysinfoview.xml
push 0
push 1
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [ebp - 0x8f8]
push eax
push str.__tWinMain__________________FirstRunFile___________________s_
call fcn.004283a0
add esp, 8
mov dword [ebp - 0xd64], 0
mov dword [ebp - 0x18], 0x36387828
mov dword [ebp - 0x8fc], 0
jmp 0x420d95
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
mov edx, dword [ebp - 0x8fc]
movzx eax, word [edx*2 + 0x45d310]
test eax, eax
je 0x420de2
mov ecx, dword [ebp - 0x8fc]
movzx edx, word [ecx*2 + 0x45d310]
cmp edx, 0x5c
je 0x420dcd
mov eax, dword [ebp - 0x8fc]
movzx ecx, word [eax*2 + 0x45d310]
cmp ecx, 0x2f
jne 0x420de0
mov edx, dword [ebp - 0x8fc]
lea eax, [edx*2 + 0x45d310]
mov dword [ebp - 0xd64], eax
jmp 0x420d86
cmp dword [ebp - 0xd64], 0
je 0x420e04
xor ecx, ecx
mov edx, dword [ebp - 0xd64]
mov word [edx], cx
mov eax, dword [ebp - 0xd64]
add eax, 2
mov dword [0x442f58], eax
mov ecx, dword [0x442f58]
push ecx
push 0x43d3d0
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x420e3f
mov dword [ebp - 0x914], 0x3df
lea ecx, [ebp - 0xb26]
call fcn.004019f0
lea ecx, [ebp - 0xb25]
call fcn.004019f0
jmp 0x421e77
lea edx, [ebp - 0x8f8]
push edx
push 0x45d310
push 0x43d2ec
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0x910]
push ecx
lea edx, [ebp - 0x498]
push edx
call fcn.004010b0
add esp, 8
test eax, eax
jge 0x420e9f
mov dword [ebp - 0x914], 0x3e0
lea ecx, [ebp - 0xb26]
call fcn.004019f0
lea ecx, [ebp - 0xb25]
call fcn.004019f0
jmp 0x421e77
lea eax, [ebp - 0x900]
push eax
push 0
mov ecx, dword [ebp - 0x18]
push ecx
push fcn.0041ba70
push 0
push 0
call fcn.00404467
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x420fb0
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x14]
push eax
push 0x45d310
push 0x43d3f0
lea ecx, [ebp - 0xb18]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0x910]
push edx
push str.parserSearchThread_Call_Error
movzx eax, word [ebp - 0x1c]
push eax
movzx ecx, word [ebp - 0x1e]
push ecx
movzx edx, word [ebp - 0x20]
push edx
movzx eax, word [ebp - 0x22]
push eax
movzx ecx, word [ebp - 0x26]
push ecx
movzx edx, word [ebp - 0x28]
push edx
push 0x43d438
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov ecx, dword [ebp - 0xb1c]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x498]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0xb1c]
push eax
mov ecx, dword [ebp - 0xb1c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0xb18]
push edx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.004019f0
lea ecx, [ebp - 0xb25]
call fcn.004019f0
jmp 0x421e77
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
lea ecx, [ebp - 0x498]
push ecx
call fcn.00418860
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x421057
cmp dword [ebp - 4], 0xc9
jne 0x420ff3
mov dword [ebp - 0x914], 0x3e9
jmp 0x42103c
cmp dword [ebp - 4], 0xca
jne 0x421008
mov dword [ebp - 0x914], 0x3ea
jmp 0x42103c
cmp dword [ebp - 4], 0xcb
jne 0x42101d
mov dword [ebp - 0x914], 0x3eb
jmp 0x42103c
cmp dword [ebp - 4], 0x96
jl 0x421032
mov dword [ebp - 0x914], 0x3ec
jmp 0x42103c
mov dword [ebp - 0x914], 0x3ed
lea ecx, [ebp - 0xb26]
call fcn.004019f0
lea ecx, [ebp - 0xb25]
call fcn.004019f0
jmp 0x421e77
push str.parserchk.txt
push 0x45d310
push 0x43d4a0
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x498]
push ecx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x4210dd
mov dword [0x45cbac], 1
push str.parsernot.txt
push 0x45d310
push 0x43d4c8
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x910]
push eax
lea ecx, [ebp - 0x498]
push ecx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x4210dd
mov dword [0x45cbac], 2
push 0x45d310
push str._sHTTP_Parser.chm
push 0x45d540
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x904], 0
jle 0x42115b
mov dword [ebp - 0x8fc], 0
jmp 0x421124
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
cmp eax, dword [ebp - 0x904]
jge 0x42115b
mov ecx, dword [ebp - 0x8fc]
mov edx, dword [ebp - 0xb24]
mov eax, dword [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
push ecx
push str.__tWinMain__________________Arg_List_______________________d___s_
call fcn.004283a0
add esp, 0xc
jmp 0x421115
push 0x45d310
push str.__tWinMain__________________Base_Folder____________________s_
call fcn.004283a0
add esp, 8
mov dword [ebp - 0xd74], 0
mov dword [ebp - 0xd68], 0
mov dword [ebp - 0xd6c], 0
mov dword [ebp - 0xd70], 0
push str.BINTYPE
push 0x12d
mov edx, dword [0x45cb80]
push edx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0xd74], eax
cmp dword [ebp - 0xd74], 0
je 0x421261
push 0x460
push 0
lea eax, [ebp - 0x498]
push eax
call fcn.00402740
add esp, 0xc
cmp dword [ebp - 0xd74], 0
je 0x4211f5
mov ecx, dword [ebp - 0xd74]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0xd68], eax
cmp dword [ebp - 0xd74], 0
je 0x421215
mov eax, dword [ebp - 0xd74]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0xd6c], eax
cmp dword [ebp - 0xd68], 0
je 0x421231
mov edx, dword [ebp - 0xd68]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0xd70], eax
lea eax, [ebp - 0x498]
push eax
push str.logo.gif
mov ecx, dword [ebp - 0xd6c]
push ecx
mov edx, dword [ebp - 0xd70]
push edx
call fcn.00418790
lea eax, [ebp - 0x498]
push eax
call fcn.0040dd50
mov dword [0x45cb84], eax
cmp dword [ebp - 0xd68], 0
je 0x421277
mov ecx, dword [ebp - 0xd68]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0x45d310
push str._s_themes_b_good.bmp
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x45d310
push str._s_themes_b_bad.bmp
lea eax, [ebp - 0x8f8]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x45d310
push str._s_themes_b_desktop.bmp
lea ecx, [ebp - 0xb18]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0x498]
push edx
call fcn.0040dd50
mov dword [0x45cb88], eax
lea eax, [ebp - 0x8f8]
push eax
call fcn.0040dd50
mov dword [0x45cb8c], eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.0040dd50
mov dword [0x45cb90], eax
mov dword [ebp - 0xd78], 0xa00000
push 0
push 0
push 0x878
push str..mailslotparser_manage
call dword [sym.imp.KERNEL32.dll_CreateMailslotW]
mov dword [0x45c2ec], eax
cmp dword [0x45c2ec], 0xffffffff
jne 0x421418
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
mov dword [0x45c2ec], 0
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x14]
push eax
push 0x45d310
push 0x43d6e8
lea ecx, [ebp - 0xb18]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov edx, dword [ebp - 0x910]
push edx
push str.Mail_Handle_Create_Error
movzx eax, word [ebp - 0x1c]
push eax
movzx ecx, word [ebp - 0x1e]
push ecx
movzx edx, word [ebp - 0x20]
push edx
movzx eax, word [ebp - 0x22]
push eax
movzx ecx, word [ebp - 0x26]
push ecx
movzx edx, word [ebp - 0x28]
push edx
push 0x43d728
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov ecx, dword [ebp - 0xb1c]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x498]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 0xb1c]
push eax
mov ecx, dword [ebp - 0xb1c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0xb18]
push edx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.004019f0
lea ecx, [ebp - 0xb25]
call fcn.004019f0
jmp 0x421e77
push str.PARSER_SHARED_MAPMEMORY
mov eax, dword [ebp - 0xd78]
push eax
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x45c2f0], eax
cmp dword [0x45c2f0], 0
jne 0x42152a
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x14]
push edx
push 0x45d310
push 0x43d7a4
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0x910]
push ecx
push 0x43d7b0
movzx edx, word [ebp - 0x1c]
push edx
movzx eax, word [ebp - 0x1e]
push eax
movzx ecx, word [ebp - 0x20]
push ecx
movzx edx, word [ebp - 0x22]
push edx
movzx eax, word [ebp - 0x26]
push eax
movzx ecx, word [ebp - 0x28]
push ecx
push 0x43d7e0
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xb1c]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x498]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xb1c]
push edx
mov eax, dword [ebp - 0xb1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.004019f0
lea ecx, [ebp - 0xb25]
call fcn.004019f0
jmp 0x421e77
mov edx, dword [ebp - 0xd78]
push edx
push 0
push 0
push 2
mov eax, dword [0x45c2f0]
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [0x45c2f8], eax
cmp dword [0x45c2f8], 0
jne 0x42163b
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea ecx, [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x14]
push edx
push 0x45d310
push 0x43d82c
lea eax, [ebp - 0xb18]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ecx, dword [ebp - 0x910]
push ecx
push str.Map_Handle_Create_Error
movzx edx, word [ebp - 0x1c]
push edx
movzx eax, word [ebp - 0x1e]
push eax
movzx ecx, word [ebp - 0x20]
push ecx
movzx edx, word [ebp - 0x22]
push edx
movzx eax, word [ebp - 0x26]
push eax
movzx ecx, word [ebp - 0x28]
push ecx
push 0x43d868
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov eax, dword [ebp - 0xb1c]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x498]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edx, dword [ebp - 0xb1c]
push edx
mov eax, dword [ebp - 0xb1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea ecx, [ebp - 0xb18]
push ecx
call fcn.00401540
add esp, 0xc
lea ecx, [ebp - 0xb26]
call fcn.004019f0
lea ecx, [ebp - 0xb25]
call fcn.004019f0
jmp 0x421e77
mov edx, dword [0x45c2f8]
push edx
push str.__tWinMain__________________SharedMemory___________________08X_
call fcn.004283a0
add esp, 8
mov dword [ebp - 0xd80], 8
mov dword [ebp - 0xd7c], 0x3ff
lea eax, [ebp - 0xd80]
push eax
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
lea ecx, [ebp - 0xb26]
call fcn.004019f0
lea ecx, [ebp - 0xb25]
call fcn.004019f0
push 0x100
push 0x45cee0
push str.COMSPEC
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x4216af
push str.cmd.exe
push 0x45cee0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x5460
push 0
push 0x4551d0
call fcn.00402740
add esp, 0xc
push 0x43d8b4
push 0x45d310
push 0x43d974
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea edx, [ebp - 0x910]
push edx
lea eax, [ebp - 0x498]
push eax
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x421715
push 0x4551d0
push 0x5460
lea ecx, [ebp - 0x498]
push ecx
call fcn.004012f0
add esp, 0xc
push 0x442f5c
push str.sysinfoview.xml
call fcn.0040dd90
mov dword [0x45cb94], 1
lea edx, [ebp - 0x900]
push edx
push 0
push 0
push 0x419600
push 0
push 0
call fcn.00404467
add esp, 0x18
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x421827
mov dword [ebp - 0x914], 0x3e1
mov dword [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x910], eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [ebp - 0x14]
push ecx
push 0x45d310
push 0x43d980
lea edx, [ebp - 0xb18]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0x910]
push eax
push str.sessionSearchThread_Call_Error
movzx ecx, word [ebp - 0x1c]
push ecx
movzx edx, word [ebp - 0x1e]
push edx
movzx eax, word [ebp - 0x20]
push eax
movzx ecx, word [ebp - 0x22]
push ecx
movzx edx, word [ebp - 0x26]
push edx
movzx eax, word [ebp - 0x28]
push eax
push str._d__02d__02d__02d:_02d:_02d__s___d__r_n
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x28
push 0
push 0
push 0x118
mov edx, dword [ebp - 0xb1c]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x498]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, dword [ebp - 0xb1c]
push ecx
mov edx, dword [ebp - 0xb1c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0xb18]
push eax
call fcn.00401540
add esp, 0xc
jmp 0x421e77
call fcn.0040e090
mov dword [ebp - 0x8fc], 0
jmp 0x421847
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
mov edx, dword [ebp - 0x8fc]
shl edx, 7
movzx eax, word [edx + 0x454c90]
test eax, eax
je 0x42187a
mov ecx, dword [ebp - 0x8fc]
shl ecx, 7
add ecx, 0x454c90
push ecx
push str.__tWinMain__________________InstBrowser____________________s_
call fcn.004283a0
add esp, 8
jmp 0x421838
push str._test.html
call fcn.00411a20
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x421a94
mov dword [ebp - 0x8fc], 0
jmp 0x4218ac
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + eax*2]
test edx, edx
je 0x4218e1
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + eax*2]
cmp edx, 0x5c
jne 0x4218df
mov eax, dword [ebp - 0x8fc]
mov ecx, dword [ebp - 0x30]
lea edx, [ecx + eax*2 + 2]
mov dword [ebp - 0x10], edx
jmp 0x42189d
cmp dword [ebp - 0x10], 0
jne 0x4218ee
mov dword [ebp - 0x10], 0x43dad0
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x90c], eax
mov dword [0x45cb98], 0xffffffff
mov dword [ebp - 0x8fc], 0
jmp 0x421923
mov ecx, dword [ebp - 0x8fc]
add ecx, 1
mov dword [ebp - 0x8fc], ecx
mov edx, dword [ebp - 0x8fc]
shl edx, 7
movzx eax, word [edx + 0x454790]
test eax, eax
je 0x42196d
mov ecx, dword [ebp - 0x90c]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x8fc]
shl eax, 7
add eax, 0x454790
push eax
call fcn.00401670
add esp, 0xc
test eax, eax
jne 0x42196b
mov ecx, dword [ebp - 0x8fc]
mov dword [0x45cb98], ecx
jmp 0x42196d
jmp 0x421914
cmp dword [0x45cb98], 0xffffffff
jne 0x421a00
mov dword [ebp - 0x10], str.msedge.exe
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x90c], eax
mov dword [0x45cb98], 0xffffffff
mov dword [ebp - 0x8fc], 0
jmp 0x4219b6
mov eax, dword [ebp - 0x8fc]
add eax, 1
mov dword [ebp - 0x8fc], eax
mov ecx, dword [ebp - 0x8fc]
shl ecx, 7
movzx edx, word [ecx + 0x454790]
test edx, edx
je 0x421a00
mov eax, dword [ebp - 0x90c]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x8fc]
shl edx, 7
add edx, 0x454790
push edx
call fcn.00401670
add esp, 0xc
test eax, eax
jne 0x4219fe
mov eax, dword [ebp - 0x8fc]
mov dword [0x45cb98], eax
jmp 0x421a00
jmp 0x4219a7
cmp dword [0x45cb98], 0xffffffff
jne 0x421a94
mov dword [ebp - 0x10], str.iexplore.exe
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x90c], eax
mov dword [0x45cb98], 0xffffffff
mov dword [ebp - 0x8fc], 0
jmp 0x421a49
mov edx, dword [ebp - 0x8fc]
add edx, 1
mov dword [ebp - 0x8fc], edx
mov eax, dword [ebp - 0x8fc]
shl eax, 7
movzx ecx, word [eax + 0x454790]
test ecx, ecx
je 0x421a94
mov edx, dword [ebp - 0x90c]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x8fc]
shl ecx, 7
add ecx, 0x454790
push ecx
call fcn.00401670
add esp, 0xc
test eax, eax
jne 0x421a92
mov edx, dword [ebp - 0x8fc]
mov dword [0x45cb98], edx
jmp 0x421a94
jmp 0x421a3a
mov eax, dword [0x45cb98]
shl eax, 7
add eax, 0x454790
push eax
mov ecx, dword [0x45cb98]
shl ecx, 7
add ecx, 0x454c90
push ecx
mov edx, dword [0x45cb98]
push edx
push str.__tWinMain__________________DefaultBrowser_________________d___s_:__s_
call fcn.004283a0
add esp, 0x10
push str.parsercommon.data
push 0x45d310
push 0x43dbb4
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0x910]
push ecx
lea edx, [ebp - 0x498]
push edx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x421b47
push 0x45a630
push 0x310
lea eax, [ebp - 0x498]
push eax
call fcn.004012f0
add esp, 0xc
test eax, eax
jl 0x421b40
mov ecx, dword [0x45a638]
mov dword [0x45cb98], ecx
mov edx, dword [0x45a63c]
mov dword [0x442f30], edx
mov eax, dword [0x45a634]
mov dword [0x45cb9c], eax
jmp 0x421b47
mov byte [0x45a630], 0
movzx ecx, byte [0x45a630]
test ecx, ecx
jne 0x421bc7
mov byte [0x45a630], 9
mov byte [0x45a631], 9
mov byte [0x45a632], 3
mov byte [0x45a633], 3
mov edx, dword [0x45cb9c]
mov dword [0x45a634], edx
mov eax, dword [0x45cb98]
mov dword [0x45a638], eax
mov ecx, dword [0x442f30]
mov dword [0x45a63c], ecx
mov byte [0x45a640], 0
mov byte [0x45a641], 0
mov byte [0x45a642], 0
mov byte [0x45a644], 0
push 0
push 0x45a630
push 0x310
lea edx, [ebp - 0x498]
push edx
call fcn.00401400
add esp, 0x10
push 0
push 0
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [0x45d77c], eax
cmp dword [0x45d77c], 0
je 0x421c47
mov dword [ebp - 0x1040], 0x99
jmp 0x421c00
mov eax, dword [ebp - 0x1040]
add eax, 1
mov dword [ebp - 0x1040], eax
cmp dword [ebp - 0x1040], 0xb5
jg 0x421c47
push 0
push 0x10
push 0x10
push 1
movzx ecx, word [ebp - 0x1040]
push ecx
mov edx, dword [0x45cb80]
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0x103c]
push eax
push 0xffffffffffffffff
mov ecx, dword [0x45d77c]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
jmp 0x421bf1
push 0x1000
push 0
push 0xff000000
push 0
push 0xf
push 0x14c
mov edx, dword [0x45cb80]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
mov dword [0x45d778], eax
push 0x4000
push 0x2b4
lea eax, [ebp - 0x1038]
push eax
push 0
push 0x43dbc0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x45d770], eax
push 0x4001
push 0x2b4
lea ecx, [ebp - 0x1038]
push ecx
push 0
push 0x43dbc8
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [0x45d774], eax
push str.RICHED20.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
push str.HHCTRL.OCX
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x421cea
push str.HtmlHelpW
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x45d9c4], eax
push str.imm32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x421d12
push str.ImmAssociateContext
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x45d9c0], eax
mov ecx, dword [0x442f4c]
push ecx
mov edx, dword [0x442f48]
push edx
mov eax, dword [0x442f44]
push eax
mov ecx, dword [0x442f40]
push ecx
mov edx, dword [0x442f50]
push edx
mov eax, dword [ebp - 0x908]
push eax
push str.__tWinMain______________Run_____IDD_PARSER_BASE_____1______d___d:_d:_d:_d:_d_
call fcn.004283a0
add esp, 0x1c
mov dword [0x45cb78], 0
mov dword [0x45cb94], 0
mov ecx, dword [0x442f4c]
push ecx
mov edx, dword [0x442f48]
push edx
mov eax, dword [0x442f44]
push eax
mov ecx, dword [0x442f40]
push ecx
mov edx, dword [0x442f50]
push edx
mov eax, dword [ebp - 0x908]
push eax
push str.__tWinMain______________End_____parserSearchThread__1______d___d:_d:_d:_d:_d_
call fcn.004283a0
add esp, 0x1c
push 2
call fcn.0041ba70
mov ecx, dword [ebp - 0x908]
push ecx
push str.__tWinMain______________End_____parserSearchThread__2______d_
call fcn.004283a0
add esp, 8
push 0x45d310
push str._slist.txt
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x7530
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x45c2f4], 0
je 0x421e14
push 0x1388
mov eax, dword [0x45c2f4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x45c2f4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call fcn.00411b40
push str.sitelink.txt
push 0x45d310
push str._s_s
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
push 0x4551d0
push 0x5460
lea eax, [ebp - 0x498]
push eax
call fcn.00401400
add esp, 0x10
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, dword [ebp - 4]
push edx
push str.__tWinMain__________________SITE_CHECKST_FILE______________d___d___s_
call fcn.004283a0
add esp, 0x10
mov dword [ebp - 0xc], 0x10
cmp dword [0x45d780], 0
je 0x421e93
mov eax, dword [0x45d780]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x45d778], 0
je 0x421ea9
mov ecx, dword [0x45d778]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x45d77c], 0
je 0x421ebf
mov edx, dword [0x45d77c]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_Destroy]
cmp dword [0x45c2f8], 0
je 0x421ed4
mov eax, dword [0x45c2f8]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp dword [0x45c2f0], 0
je 0x421eea
mov ecx, dword [0x45c2f0]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x45c2ec], 0
je 0x421f00
mov edx, dword [0x45c2ec]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x45c2dc], 0
je 0x421f15
mov eax, dword [0x45c2dc]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x914]
mov dword [ebp - 0x1048], ecx
cmp dword [ebp - 0x1048], 0x3df
jg 0x421f4f
cmp dword [ebp - 0x1048], 0x3df
je 0x421ffb
cmp dword [ebp - 0x1048], 0
je 0x421fed
jmp case.default.0x421fe1
cmp dword [ebp - 0x1048], 0x3e9
jg 0x421fa0
cmp dword [ebp - 0x1048], 0x3e9
je 0x4220fd
cmp dword [ebp - 0x1048], 0x3e0
je 0x422031
cmp dword [ebp - 0x1048], 0x3e1
je 0x422067
cmp dword [ebp - 0x1048], 0x3e2
je 0x4220c0
jmp case.default.0x421fe1
cmp dword [ebp - 0x1048], 0x270e
jg 0x421fe8
cmp dword [ebp - 0x1048], 0x270d
jge 0x422284
mov edx, dword [ebp - 0x1048]
sub edx, 0x3ea
mov dword [ebp - 0x1048], edx
cmp dword [ebp - 0x1048], 3
ja case.default.0x421fe1
mov eax, dword [ebp - 0x1048]
jmp dword [eax*4 + 0x42237c]
jmp case.default.0x421fe1
xor ecx, ecx
mov word [ebp - 0x498], cx
jmp 0x4222db
push 0
call fcn.0040e510
test eax, eax
je 0x42201a
push 0x43dec8
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x42202c
push str.There_is_a_problem_with_the_contents_of_the_module._n__1___I_cannot_run_the_program.
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4222db
push 0
call fcn.0040e510
test eax, eax
je 0x422050
push 0x43dfc8
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x422062
push str.I_have_a_problem_with_my_module_configuration._n__2___I_cannot_run_the_program.
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4222db
push 0
call fcn.0040e510
test eax, eax
je 0x422094
mov eax, dword [ebp - 0x910]
push eax
mov ecx, dword [ebp - 4]
push ecx
push 0x43e0c0
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x4220b4
mov eax, dword [ebp - 0x910]
push eax
mov ecx, dword [ebp - 4]
push ecx
push str.OS_state_is_unstable___d_:__d_
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0xc], 0x30
jmp 0x4222db
push 0
call fcn.0040e510
test eax, eax
je 0x4220df
push 0x43e188
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4220f1
push str.The_operating_environment_of_the_PC_is_unknown._nAbort_program_execution.
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 0xc], 0x30
jmp 0x4222db
push 0
call fcn.0040e510
test eax, eax
je 0x42212c
lea edx, [ebp - 0xb1e]
push edx
call fcn.00428ce0
push eax
push 0x43e268
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42214e
lea ecx, [ebp - 0xb1e]
push ecx
call fcn.00428ce0
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__1_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4222db
push 0
call fcn.0040e510
test eax, eax
je 0x422182
lea eax, [ebp - 0xb1e]
push eax
call fcn.00428ce0
push eax
push 0x43e468
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4221a4
lea edx, [ebp - 0xb1e]
push edx
call fcn.00428ce0
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__2_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4222db
push 0
call fcn.0040e510
test eax, eax
je 0x4221d8
lea ecx, [ebp - 0xb1e]
push ecx
call fcn.00428ce0
push eax
push 0x43e668
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4221fa
lea eax, [ebp - 0xb1e]
push eax
call fcn.00428ce0
push eax
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__3_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4222db
push 0
call fcn.0040e510
test eax, eax
je 0x422225
mov edx, dword [ebp - 4]
push edx
push 0x43e868
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x42223e
mov ecx, dword [ebp - 4]
push ecx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__4_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4222db
push 0
call fcn.0040e510
test eax, eax
je 0x422269
mov eax, dword [ebp - 4]
push eax
push 0x43ea68
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x422282
mov edx, dword [ebp - 4]
push edx
push str.There_is_a_defect_in_the_registered_contents_of_the_operating_environment._nI_cannot_run_the_program._n__5_:__d___If_you_want_to_continue_using_it__please_contact_the_developer.
lea eax, [ebp - 0x498]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4222db
push 0
call fcn.0040e510
test eax, eax
je 0x4222ad
mov ecx, dword [ebp - 0x910]
push ecx
push 0x43ec68
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x4222c9
mov eax, dword [ebp - 0x910]
push eax
push 0x43ec98
lea ecx, [ebp - 0x498]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0xc], 0x30
jmp 0x4222db
xor edx, edx
mov word [ebp - 0x498], dx
movzx eax, word [ebp - 0x498]
test eax, eax
je 0x422303
mov ecx, dword [ebp - 0xc]
push ecx
push str._notification_BOX
lea edx, [ebp - 0x498]
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
push str.__tWinMain__________________End__________
call fcn.004283a0
add esp, 4
mov eax, dword [ebp - 0x910]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x914]
push edx
push str.__tWinMain__________________fcret__________________________d_:__d___d_
call fcn.004283a0
add esp, 0x10
push 0x43ec94
call fcn.004283a0
add esp, 4
call fcn.004284f0
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x1044], eax
lea ecx, [ebp - 0xb1d]
call fcn.004019f0
lea ecx, [ebp - 0xb1e]
call fcn.004019f0
mov eax, dword [ebp - 0x1044]
mov ecx, dword [ebp - 0x34]
xor ecx, ebp
call fcn.00402730
mov esp, ebp
pop ebp
ret 0x10