Function at 0x468670
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d6378
mov eax, dword fs:[0]
push eax
sub esp, 0x748
mov eax, dword [0x658d98]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov ecx, 0x6825d0
call fcn.0059e74b
push str.kllsc
push 0
lea eax, [ebp - 0x1a8]
push eax
call fcn.00457190
add esp, 8
mov dword [ebp - 0x740], eax
mov ecx, dword [ebp - 0x740]
mov dword [ebp - 0x744], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x744]
push edx
lea eax, [ebp - 0x2c]
push eax
call fcn.004279e0
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a8]
call fcn.00404f60
lea ecx, [ebp - 0x2c]
call fcn.0040d5a0
push eax
call fcn.0044f4a0
add esp, 4
test eax, eax
je 0x46871d
lea eax, [ebp - 0x2c]
push eax
call fcn.00452890
add esp, 4
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.00446430
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x44]
push ecx
call fcn.0046dbd0
add esp, 8
push str.bold
push 0
lea eax, [ebp - 0x1c0]
push eax
call fcn.00457190
add esp, 8
mov dword [ebp - 0x740], eax
mov ecx, dword [ebp - 0x740]
mov dword [ebp - 0x744], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x744]
push edx
lea eax, [ebp - 0x5c]
push eax
call fcn.004279e0
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c0]
call fcn.00404f60
movzx eax, byte [0x67fec8]
test eax, eax
je 0x4687e3
lea ecx, [ebp - 0x5c]
call fcn.0040d5a0
push eax
call fcn.0044f4a0
add esp, 4
test eax, eax
jne 0x4687e1
push 0x6050e0
lea ecx, [ebp - 0x1d8]
call fcn.00404a80
mov byte [ebp - 4], 7
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x1d8]
push ecx
call fcn.0046dbd0
add esp, 8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1d8]
call fcn.00404f60
jmp 0x468804
lea ecx, [ebp - 0x5c]
call fcn.0040d5a0
push eax
call fcn.0044f4a0
add esp, 4
test eax, eax
je 0x468804
lea eax, [ebp - 0x5c]
push eax
call fcn.00452890
add esp, 4
mov eax, dword [0x6811ec]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x68070c]
cmp eax, dword [edx + 4]
jle 0x468867
push 0x68070c
call fcn.0059ef6b
add esp, 4
cmp dword [0x68070c], 0xffffffff
jne 0x468867
mov byte [ebp - 4], 8
push str.1B20I32OSeuUpJ9zkzYuf10WNzAPsj2YGcETbo1P2CcVLxo9ZLM7aAT1OsKGx2A
mov ecx, 0x6806f4
call fcn.00404a80
push 0x5efd60
call fcn.0059e53b
add esp, 4
mov byte [ebp - 4], 6
push 0x68070c
call fcn.0059ef21
add esp, 4
mov eax, dword [0x6811ec]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x680728]
cmp eax, dword [edx + 4]
jle 0x4688ca
push 0x680728
call fcn.0059ef6b
add esp, 4
cmp dword [0x680728], 0xffffffff
jne 0x4688ca
mov byte [ebp - 4], 9
push str.6SGTBFDjfMaV9oRmi2FcMxMRICtDhjSDJ7ISeZ1Hzi4SEDssfLU7WD35IP5aXVvGJp8
mov ecx, 0x680710
call fcn.00404a80
push 0x5efba0
call fcn.0059e53b
add esp, 4
mov byte [ebp - 4], 6
push 0x680728
call fcn.0059ef21
add esp, 4
mov eax, dword [0x6811ec]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x680744]
cmp eax, dword [edx + 4]
jle 0x46892d
push 0x680744
call fcn.0059ef6b
add esp, 4
cmp dword [0x680744], 0xffffffff
jne 0x46892d
mov byte [ebp - 4], 0xa
push str._h2mMWDCVNG0yA
mov ecx, 0x68072c
call fcn.00404a80
push 0x5efb60
call fcn.0059e53b
add esp, 4
mov byte [ebp - 4], 6
push 0x680744
call fcn.0059ef21
add esp, 4
mov eax, dword [0x6811ec]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x680760]
cmp eax, dword [edx + 4]
jle 0x468990
push 0x680760
call fcn.0059ef6b
add esp, 4
cmp dword [0x680760], 0xffffffff
jne 0x468990
mov byte [ebp - 4], 0xb
push str.7huwYSacE8qQ8IU
mov ecx, 0x680748
call fcn.00404a80
push 0x5efbe0
call fcn.0059e53b
add esp, 4
mov byte [ebp - 4], 6
push 0x680760
call fcn.0059ef21
add esp, 4
mov eax, dword [0x6811ec]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x68077c]
cmp eax, dword [edx + 4]
jle 0x4689f3
push 0x68077c
call fcn.0059ef6b
add esp, 4
cmp dword [0x68077c], 0xffffffff
jne 0x4689f3
mov byte [ebp - 4], 0xc
push str._xahMnnLcMi00bJqlnZwKhgXKw
mov ecx, 0x680764
call fcn.00404a80
push 0x5efb80
call fcn.0059e53b
add esp, 4
mov byte [ebp - 4], 6
push 0x68077c
call fcn.0059ef21
add esp, 4
mov eax, dword [0x6811ec]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x680798]
cmp eax, dword [edx + 4]
jle 0x468a56
push 0x680798
call fcn.0059ef6b
add esp, 4
cmp dword [0x680798], 0xffffffff
jne 0x468a56
mov byte [ebp - 4], 0xd
push str.7huwBWbLcsOjtccx10BtOxgLJhRAvDDHpM
mov ecx, 0x680780
call fcn.00404a80
push 0x5efc00
call fcn.0059e53b
add esp, 4
mov byte [ebp - 4], 6
push 0x680798
call fcn.0059ef21
add esp, 4
mov eax, dword [0x6811ec]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x6807b4]
cmp eax, dword [edx + 4]
jle 0x468ab9
push 0x6807b4
call fcn.0059ef6b
add esp, 4
cmp dword [0x6807b4], 0xffffffff
jne 0x468ab9
mov byte [ebp - 4], 0xe
push str.7huwB3zAROqX1595gA
mov ecx, 0x68079c
call fcn.00404a80
push 0x5efc20
call fcn.0059e53b
add esp, 4
mov byte [ebp - 4], 6
push 0x6807b4
call fcn.0059ef21
add esp, 4
mov eax, dword [0x6811ec]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x6807d0]
cmp eax, dword [edx + 4]
jle 0x468b1c
push 0x6807d0
call fcn.0059ef6b
add esp, 4
cmp dword [0x6807d0], 0xffffffff
jne 0x468b1c
mov byte [ebp - 4], 0xf
push str.6RmjO1reVPY
mov ecx, 0x6807b8
call fcn.00404a80
push 0x5efbc0
call fcn.0059e53b
add esp, 4
mov byte [ebp - 4], 6
push 0x6807d0
call fcn.0059ef21
add esp, 4
cmp dword [0x6806f0], 0
jne 0x469da3
mov dword [0x6806f0], 1
mov dword [ebp - 0x60], reloc.WS2_32.dll_bind
movzx eax, byte [0x658230]
test eax, eax
je 0x46903a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1dc], esp
push 0x68072c
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x1f4]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1f8], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x210]
push edx
mov byte [ebp - 4], 0x11
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.004676f0
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x210]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1f4]
call fcn.00404f60
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x214], esp
push 0x680748
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x22c]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x230], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x16
lea edx, [ebp - 0x248]
push edx
mov byte [ebp - 4], 0x15
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.004676f0
add esp, 0xc
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x248]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x22c]
call fcn.00404f60
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x24c], esp
push 0x680764
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x264]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x268], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x280]
push edx
mov byte [ebp - 4], 0x19
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.004676f0
add esp, 0xc
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x280]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x264]
call fcn.00404f60
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x284], esp
push 0x680780
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x29c]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2a0], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0x2b8]
push edx
mov byte [ebp - 4], 0x1d
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.004676f0
add esp, 0xc
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2b8]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x29c]
call fcn.00404f60
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2bc], esp
push 0x68079c
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x2d4]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2d8], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x2f0]
push edx
mov byte [ebp - 4], 0x21
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.004676f0
add esp, 0xc
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x2f0]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2d4]
call fcn.00404f60
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2f4], esp
push 0x6807b8
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x30c]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x310], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0x328]
push edx
mov byte [ebp - 4], 0x25
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.004676f0
add esp, 0xc
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x328]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x30c]
call fcn.00404f60
jmp 0x469535
push 0x40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x32c], esp
push 0x68072c
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x344]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x348], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x2a
lea edx, [ebp - 0x360]
push edx
mov byte [ebp - 4], 0x29
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00467aa0
add esp, 0x10
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x360]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x344]
call fcn.00404f60
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x364], esp
push 0x680748
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x2c
lea eax, [ebp - 0x37c]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x380], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x2e
lea edx, [ebp - 0x398]
push edx
mov byte [ebp - 4], 0x2d
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00467aa0
add esp, 0x10
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x398]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x37c]
call fcn.00404f60
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x39c], esp
push 0x680764
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x3b4]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3b8], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x32
lea edx, [ebp - 0x3d0]
push edx
mov byte [ebp - 4], 0x31
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00467aa0
add esp, 0x10
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x3d0]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3b4]
call fcn.00404f60
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3d4], esp
push 0x680780
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0x3ec]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x3f0], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x36
lea edx, [ebp - 0x408]
push edx
mov byte [ebp - 4], 0x35
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00467aa0
add esp, 0x10
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x408]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3ec]
call fcn.00404f60
push 0x4000
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x40c], esp
push 0x68079c
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x424]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x428], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x3a
lea edx, [ebp - 0x440]
push edx
mov byte [ebp - 4], 0x39
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00467aa0
add esp, 0x10
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x440]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x424]
call fcn.00404f60
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x444], esp
push 0x6807b8
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x45c]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x748]
call fcn.0040d5a0
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x460], esp
push 0x680710
call fcn.00407f40
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 0x3e
lea edx, [ebp - 0x478]
push edx
mov byte [ebp - 4], 0x3d
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x754], eax
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x754]
call fcn.0040d5a0
push eax
mov ecx, dword [ebp - 0x60]
push ecx
call fcn.00467aa0
add esp, 0x10
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x478]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x45c]
call fcn.00404f60
push 2
push 0
push 0
push 0x57
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
call fcn.004420f0
movzx eax, al
test eax, eax
je 0x469da3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x47c], esp
push 0x6806f4
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x40
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 6
call fcn.00447270
add esp, 0x1c
mov dword [ebp - 0x744], eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x90]
call fcn.00404b30
mov byte [ebp - 4], 0x42
movzx eax, byte [0x658230]
test eax, eax
je 0x469995
push 0x605770
lea ecx, [ebp - 0x494]
call fcn.00404a80
mov byte [ebp - 4], 0x43
push 0x605774
lea ecx, [ebp - 0x4ac]
call fcn.00404a80
mov byte [ebp - 4], 0x44
push 0
lea eax, [ebp - 0x494]
push eax
lea ecx, [ebp - 0x4ac]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4b0], esp
lea edx, [ebp - 0x78]
push edx
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x4c8]
push eax
mov byte [ebp - 4], 0x44
call fcn.00467d70
add esp, 0x28
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0x748]
push edx
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x4c8]
call fcn.00404f60
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x4ac]
call fcn.00404f60
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x494]
call fcn.00404f60
push 0x605778
lea ecx, [ebp - 0x4e0]
call fcn.00404a80
mov byte [ebp - 4], 0x47
push 0x60577c
lea ecx, [ebp - 0x4f8]
call fcn.00404a80
mov byte [ebp - 4], 0x48
push 0
lea eax, [ebp - 0x4e0]
push eax
lea ecx, [ebp - 0x4f8]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x4fc], esp
lea edx, [ebp - 0x90]
push edx
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x514]
push eax
mov byte [ebp - 4], 0x48
call fcn.00467d70
add esp, 0x28
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x748]
push edx
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x514]
call fcn.00404f60
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x4f8]
call fcn.00404f60
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x4e0]
call fcn.00404f60
lea eax, [ebp - 0x90]
push eax
push 0x605780
lea ecx, [ebp - 0x52c]
push ecx
call fcn.004369c0
add esp, 0xc
mov dword [ebp - 0x740], eax
mov edx, dword [ebp - 0x740]
mov dword [ebp - 0x744], edx
mov byte [ebp - 4], 0x4b
mov eax, dword [ebp - 0x744]
push eax
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x52c]
call fcn.00404f60
push 0
push 0
lea ecx, [ebp - 0x90]
call fcn.0040d5a0
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x605794
lea ecx, [ebp - 0x544]
call fcn.00404a80
mov byte [ebp - 4], 0x4c
push 0x605774
lea ecx, [ebp - 0x55c]
call fcn.00404a80
mov byte [ebp - 4], 0x4d
push 0
lea eax, [ebp - 0x544]
push eax
lea ecx, [ebp - 0x55c]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x560], esp
lea edx, [ebp - 0x78]
push edx
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x4e
lea eax, [ebp - 0x578]
push eax
mov byte [ebp - 4], 0x4d
call fcn.00467d70
add esp, 0x28
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x4f
mov edx, dword [ebp - 0x748]
push edx
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x578]
call fcn.00404f60
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x55c]
call fcn.00404f60
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x544]
call fcn.00404f60
push 0x605778
lea ecx, [ebp - 0x590]
call fcn.00404a80
mov byte [ebp - 4], 0x50
push 0x60577c
lea ecx, [ebp - 0x5a8]
call fcn.00404a80
mov byte [ebp - 4], 0x51
push 0
lea eax, [ebp - 0x590]
push eax
lea ecx, [ebp - 0x5a8]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x5ac], esp
lea edx, [ebp - 0x90]
push edx
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0x5c4]
push eax
mov byte [ebp - 4], 0x51
call fcn.00467d70
add esp, 0x28
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x53
mov edx, dword [ebp - 0x748]
push edx
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x5c4]
call fcn.00404f60
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x5a8]
call fcn.00404f60
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x590]
call fcn.00404f60
lea eax, [ebp - 0x90]
push eax
push 0x605780
lea ecx, [ebp - 0x5dc]
push ecx
call fcn.004369c0
add esp, 0xc
mov dword [ebp - 0x740], eax
mov edx, dword [ebp - 0x740]
mov dword [ebp - 0x744], edx
mov byte [ebp - 4], 0x54
mov eax, dword [ebp - 0x744]
push eax
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x5dc]
call fcn.00404f60
push 0
push 0
lea ecx, [ebp - 0x90]
call fcn.0040d5a0
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x469d7b
push 0x605770
lea ecx, [ebp - 0x5f4]
call fcn.00404a80
mov byte [ebp - 4], 0x55
push 0x605774
lea ecx, [ebp - 0x60c]
call fcn.00404a80
mov byte [ebp - 4], 0x56
push 0
lea eax, [ebp - 0x5f4]
push eax
lea ecx, [ebp - 0x60c]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x610], esp
lea edx, [ebp - 0x78]
push edx
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x628]
push eax
mov byte [ebp - 4], 0x56
call fcn.00467d70
add esp, 0x28
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x58
mov edx, dword [ebp - 0x748]
push edx
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x628]
call fcn.00404f60
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x60c]
call fcn.00404f60
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x5f4]
call fcn.00404f60
push 0x605798
lea ecx, [ebp - 0x640]
call fcn.00404a80
mov byte [ebp - 4], 0x59
push 0x60577c
lea ecx, [ebp - 0x658]
call fcn.00404a80
mov byte [ebp - 4], 0x5a
push 0
lea eax, [ebp - 0x640]
push eax
lea ecx, [ebp - 0x658]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x65c], esp
lea edx, [ebp - 0x90]
push edx
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x5b
lea eax, [ebp - 0x674]
push eax
mov byte [ebp - 4], 0x5a
call fcn.00467d70
add esp, 0x28
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x5c
mov edx, dword [ebp - 0x748]
push edx
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x674]
call fcn.00404f60
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x658]
call fcn.00404f60
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x640]
call fcn.00404f60
lea eax, [ebp - 0x90]
push eax
push 0x605780
lea ecx, [ebp - 0x68c]
push ecx
call fcn.004369c0
add esp, 0xc
mov dword [ebp - 0x740], eax
mov edx, dword [ebp - 0x740]
mov dword [ebp - 0x744], edx
mov byte [ebp - 4], 0x5d
mov eax, dword [ebp - 0x744]
push eax
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x68c]
call fcn.00404f60
push 0
push 0
lea ecx, [ebp - 0x90]
call fcn.0040d5a0
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x605794
lea ecx, [ebp - 0x6a4]
call fcn.00404a80
mov byte [ebp - 4], 0x5e
push 0x605774
lea ecx, [ebp - 0x6bc]
call fcn.00404a80
mov byte [ebp - 4], 0x5f
push 0
lea eax, [ebp - 0x6a4]
push eax
lea ecx, [ebp - 0x6bc]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x6c0], esp
lea edx, [ebp - 0x78]
push edx
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x60
lea eax, [ebp - 0x6d8]
push eax
mov byte [ebp - 4], 0x5f
call fcn.00467d70
add esp, 0x28
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x61
mov edx, dword [ebp - 0x748]
push edx
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x6d8]
call fcn.00404f60
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x6bc]
call fcn.00404f60
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x6a4]
call fcn.00404f60
push 0x605798
lea ecx, [ebp - 0x6f0]
call fcn.00404a80
mov byte [ebp - 4], 0x62
push 0x60577c
lea ecx, [ebp - 0x708]
call fcn.00404a80
mov byte [ebp - 4], 0x63
push 0
lea eax, [ebp - 0x6f0]
push eax
lea ecx, [ebp - 0x708]
push ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x70c], esp
lea edx, [ebp - 0x90]
push edx
call fcn.00407f40
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x64
lea eax, [ebp - 0x724]
push eax
mov byte [ebp - 4], 0x63
call fcn.00467d70
add esp, 0x28
mov dword [ebp - 0x744], eax
mov ecx, dword [ebp - 0x744]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 4], 0x65
mov edx, dword [ebp - 0x748]
push edx
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x724]
call fcn.00404f60
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x708]
call fcn.00404f60
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x6f0]
call fcn.00404f60
lea eax, [ebp - 0x90]
push eax
push 0x605780
lea ecx, [ebp - 0x73c]
push ecx
call fcn.004369c0
add esp, 0xc
mov dword [ebp - 0x740], eax
mov edx, dword [ebp - 0x740]
mov dword [ebp - 0x744], edx
mov byte [ebp - 4], 0x66
mov eax, dword [ebp - 0x744]
push eax
lea ecx, [ebp - 0x90]
call fcn.00409d80
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x73c]
call fcn.00404f60
push 0
push 0
lea ecx, [ebp - 0x90]
call fcn.0040d5a0
push eax
push str.cmd.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push str.TTLHasChanged___
call fcn.00477e50
add esp, 4
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x90]
call fcn.00404f60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x78]
call fcn.00404f60
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.00404f60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x44]
call fcn.00404f60
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00404f60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0059e77d
mov esp, ebp
pop ebp
ret