Function at 0x402050
Capabilities:
Get common file path
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d0
mov dword [ebp - 0x48], 0xe1ca
mov dword [ebp - 0xc], 0x765b
mov dword [ebp - 8], 0x14015
mov dword [ebp - 0x18], 0x6f22
mov dword [ebp - 0x58], 0x13da0
mov dword [ebp - 0x1c], 0x125e6
mov dword [ebp - 0x3c], 0x6648
mov dword [ebp - 0x4c], 0x999a
mov dword [ebp - 0x44], 0x13088
mov dword [ebp - 0x10], 0x13651
mov dword [ebp - 0x34], 0x15390
mov dword [ebp - 0x2c], 0xc098
mov dword [ebp - 0x30], 0xb623
mov dword [ebp - 0x5c], 0xe5d2
mov dword [ebp - 0x54], 0x12553
mov dword [ebp - 4], 0x12c6f
mov dword [ebp - 0x14], 0x7d9f
mov dword [ebp - 0x38], 0xf3c2
mov dword [ebp - 0x64], 0xeb95
mov dword [ebp - 0x20], 0x16015
mov dword [ebp - 0x60], 0xb2d
mov dword [ebp - 0x40], 0xaf78
mov dword [ebp - 0x50], 0x17fe1
mov dword [ebp - 0x24], 0xaa3
mov dword [ebp - 0x28], 0x64e9
mov dword [ebp - 0x68], 0
jmp 0x40211a
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0xaa2
cmp dword [ebp - 0x68], ecx
jge 0x40249c
mov edx, dword [ebp - 4]
cmp edx, dword [0x7f8388]
jge 0x402143
mov dword [ebp - 0xcc], 1
jmp 0x40214d
mov dword [ebp - 0xcc], 0
mov eax, dword [0x7f83b4]
cmp eax, dword [ebp - 8]
jge 0x402163
mov dword [ebp - 0xc8], 1
jmp 0x40216d
mov dword [ebp - 0xc8], 0
mov ecx, dword [ebp - 0x40]
sub ecx, dword [0x7f8334]
and ecx, dword [ebp - 0xc8]
or ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x194], ecx
mov edx, dword [0x7f8334]
add edx, 1
mov dword [0x7f8334], edx
cmp dword [ebp - 0x194], 0
je 0x402497
mov eax, dword [0x7f838c]
cmp eax, dword [ebp - 0x14]
jne 0x402497
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x54]
jne 0x402497
mov edx, dword [ebp - 0x48]
cmp edx, dword [ebp - 0xc]
jne 0x402497
push 0x2078
call dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
add esp, 4
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xc]
jge 0x4021ec
mov dword [ebp - 0xd0], 1
jmp 0x4021f6
mov dword [ebp - 0xd0], 0
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x10]
jge 0x40220a
mov dword [ebp - 0xd4], 1
jmp 0x402214
mov dword [ebp - 0xd4], 0
mov edx, dword [ebp - 0xd0]
or edx, dword [ebp - 0xd4]
je 0x402466
mov eax, dword [0x7f8334]
cmp eax, dword [ebp - 4]
jne 0x402466
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 0x2c]
jne 0x402466
mov edx, dword [0x7f8320]
cmp edx, dword [0x7f83b8]
jne 0x402466
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x198], eax
mov ecx, dword [0x7f82f8]
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x19c]
jge 0x402466
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x1a0], ecx
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1a4], edx
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x1a0]
cmp ecx, dword [ebp - 0x1a4]
jge 0x402466
mov edx, dword [0x7f8330]
cmp edx, dword [0x7f83b8]
jne 0x402466
mov eax, dword [0x7f832c]
cmp eax, dword [ebp - 0x38]
jne 0x402466
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 0x48]
jne 0x402466
mov edx, dword [ebp - 0x58]
cmp edx, dword [ebp - 0x4c]
jge 0x4022f2
mov dword [ebp - 0xd8], 1
jmp 0x4022fc
mov dword [ebp - 0xd8], 0
mov eax, dword [0x7f8334]
cmp eax, dword [ebp - 0x1c]
jge 0x402312
mov dword [ebp - 0xdc], 1
jmp 0x40231c
mov dword [ebp - 0xdc], 0
mov ecx, dword [0x7f8330]
sub ecx, 1
mov dword [0x7f8330], ecx
mov edx, dword [0x7f8330]
sub edx, dword [ebp - 0x18]
and edx, dword [ebp - 0xd8]
and edx, dword [ebp - 0xdc]
je 0x402466
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x30]
jne 0x402466
mov ecx, dword [0x7f8320]
cmp ecx, dword [ebp - 0x44]
jne 0x402466
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x44]
jne 0x402466
mov eax, dword [0x7f83b4]
cmp eax, dword [ebp - 0x38]
jne 0x402466
push 0xfaa
push 0x1254e
push 0x14c01
push 0x7363
push 0xd899
push 0xff48
push 0x1348e
call dword [sym.imp.KERNEL32.dll_GetNumberFormatEx]
add esp, 0x1c
mov ecx, dword [ebp - 0x4c]
cmp ecx, dword [0x7f8324]
jge 0x4023be
mov dword [ebp - 0xe0], 1
jmp 0x4023c8
mov dword [ebp - 0xe0], 0
mov edx, dword [0x7f8320]
and edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0x44]
jge 0x4023e2
mov dword [ebp - 0xe4], 1
jmp 0x4023ec
mov dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jge 0x402400
mov dword [ebp - 0xe8], 1
jmp 0x40240a
mov dword [ebp - 0xe8], 0
mov ecx, dword [ebp - 4]
or ecx, dword [ebp - 0xe0]
or ecx, dword [ebp - 0xe4]
or ecx, dword [ebp - 0xe8]
je 0x402430
mov edx, dword [0x7f832c]
add edx, 1
mov dword [0x7f832c], edx
push 0x17b1
push 0x12edb
push 0x1e4f
push 0x2cfc
push 0x4ea8
push 0x8fe9
push 0x2331
push 0x142e3
push 0x15b70
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
add esp, 0x24
push 0x15bb6
push 0xbf19
push 0x17bd5
push 0xb001
push 0x455c
push 0xa175
push 0xdf30
push 0xe0e4
call dword [sym.imp.KERNEL32.dll_GlobalGetAtomNameW]
add esp, 0x20
jmp 0x402111
mov eax, dword [ebp - 0x64]
xor eax, dword [0x7f83b8]
je 0x402563
mov ecx, dword [ebp - 0x54]
cmp ecx, dword [ebp - 8]
jne 0x402563
mov edx, dword [0x7f83b4]
cmp edx, dword [ebp - 0x10]
jne 0x402563
mov eax, dword [ebp - 0x58]
cmp eax, dword [0x7f838c]
jge 0x4024dd
mov dword [ebp - 0xec], 1
jmp 0x4024e7
mov dword [ebp - 0xec], 0
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x48]
or ecx, dword [ebp - 0xec]
je 0x402563
mov edx, dword [0x7f8320]
cmp edx, dword [0x7f8388]
jne 0x402563
mov eax, dword [0x7f83b4]
cmp eax, dword [ebp - 0x38]
jne 0x402563
mov ecx, dword [0x7f8324]
cmp ecx, dword [ebp - 0x2c]
jne 0x402563
mov edx, dword [ebp - 0x2c]
cmp edx, dword [ebp - 0x30]
jne 0x402563
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x4c]
jne 0x402563
push 0xa5a3
push 0x4281
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
add esp, 8
mov ecx, dword [0x7f8320]
sub ecx, 1
mov dword [0x7f8320], ecx
push 0x351a
push 0x3bd0
push 0x3280
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
add esp, 0xc
mov dword [ebp - 0x6c], 0
jmp 0x402575
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 8]
sub eax, 0x14014
cmp dword [ebp - 0x6c], eax
jge 0x40258d
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
jmp 0x40256c
mov dword [ebp - 0x70], 0
jmp 0x40259f
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x58]
sub eax, 0x13d9f
cmp dword [ebp - 0x70], eax
jge 0x402661
mov ecx, dword [0x7f83b4]
cmp ecx, dword [ebp - 0x24]
jge 0x4025c7
mov dword [ebp - 0xf0], 1
jmp 0x4025d1
mov dword [ebp - 0xf0], 0
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x18]
jge 0x4025e5
mov dword [ebp - 0xf4], 1
jmp 0x4025ef
mov dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x20]
jge 0x402603
mov dword [ebp - 0xf8], 1
jmp 0x40260d
mov dword [ebp - 0xf8], 0
mov ecx, dword [ebp - 0xf0]
or ecx, dword [ebp - 0xf4]
or ecx, dword [ebp - 0xf8]
je 0x40265c
mov edx, dword [0x7f82f8]
cmp edx, dword [ebp - 0x3c]
jne 0x40265c
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x1c]
jne 0x40265c
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [0x7f82fc]
jne 0x40265c
mov edx, dword [0x7f83b4]
add edx, 1
mov dword [0x7f83b4], edx
push 0x17b34
call dword [sym.imp.KERNEL32.dll_EnumLanguageGroupLocalesW]
add esp, 4
jmp 0x402596
mov dword [ebp - 0x74], 0
jmp 0x402673
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x765a
cmp dword [ebp - 0x74], ecx
jge 0x402733
mov edx, dword [0x7f838c]
add edx, dword [0x7f82fc]
cmp edx, dword [ebp - 0x14]
jge 0x4026a2
mov dword [ebp - 0xfc], 1
jmp 0x4026ac
mov dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [0x7f8334]
or eax, dword [ebp - 0xfc]
je 0x40272e
mov ecx, dword [0x7f8388]
sub ecx, 1
mov dword [0x7f8388], ecx
mov edx, dword [0x7f8388]
sub edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 8]
jge 0x4026e7
mov dword [ebp - 0x100], 1
jmp 0x4026f1
mov dword [ebp - 0x100], 0
mov eax, dword [0x7f8330]
cmp eax, dword [ebp - 0x14]
jge 0x402707
mov dword [ebp - 0x104], 1
jmp 0x402711
mov dword [ebp - 0x104], 0
mov ecx, dword [ebp - 0x100]
and ecx, dword [ebp - 0x104]
je 0x40272e
mov edx, dword [0x7f8328]
sub edx, 1
mov dword [0x7f8328], edx
jmp 0x40266a
mov dword [ebp - 0x78], 0
jmp 0x402745
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x16014
cmp dword [ebp - 0x78], ecx
jge 0x4027ba
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 8]
jge 0x402767
mov dword [ebp - 0x108], 1
jmp 0x402771
mov dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp - 0x38]
jge 0x40278e
mov dword [ebp - 0x10c], 1
jmp 0x402798
mov dword [ebp - 0x10c], 0
mov edx, dword [ebp - 0x108]
and edx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x60]
or edx, eax
je 0x4027b8
mov ecx, dword [ebp - 0x18]
sub ecx, 1
mov dword [ebp - 0x18], ecx
jmp 0x40273c
mov edx, dword [0x7f8320]
add edx, 0x2b10
push edx
mov eax, dword [0x7f8324]
add eax, 0x13c4
push eax
mov ecx, dword [0x7f832c]
sub ecx, 0x896c
push ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x11bc0
push edx
mov eax, dword [ebp - 0x1c]
add eax, 0x4051
push eax
call fcn.004093e0
add esp, 0x14
mov dword [ebp - 0x7c], 0
jmp 0x40280c
mov ecx, dword [ebp - 0x7c]
add ecx, 1
mov dword [ebp - 0x7c], ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0x6647
cmp dword [ebp - 0x7c], edx
jge 0x40283d
mov eax, dword [0x7f8330]
sub eax, 1
mov dword [0x7f8330], eax
mov ecx, dword [0x7f8330]
cmp ecx, dword [ebp - 4]
jge 0x40283b
mov edx, dword [ebp - 0x30]
sub edx, 1
mov dword [ebp - 0x30], edx
jmp 0x402803
mov eax, 0xffffb1c5
sub eax, dword [ebp + 0x1c]
xor eax, 0xee27
xor eax, 0x968b5d07
mov ecx, dword [ebp + 0xc]
sub ecx, 0x9a1d
xor ecx, 0xffff848b
mov dword [ecx + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], eax
mov dword [ebp - 0x80], 0
jmp 0x402876
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x38]
sub eax, 0xf3c1
cmp dword [ebp - 0x80], eax
jge 0x40288e
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
jmp 0x40286d
mov edx, dword [ebp - 0x38]
sub edx, 0xd1d9
push edx
mov eax, dword [ebp - 0xc]
add eax, 0x9c01
push eax
mov ecx, dword [0x7f8324]
sub ecx, 0x2726
push ecx
mov edx, dword [ebp - 0x14]
add edx, 0xb9b3
push edx
mov eax, dword [ebp - 0x20]
sub eax, 0xd9a
push eax
mov ecx, dword [0x7f8334]
add ecx, 0x3429
push ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x4e79
push edx
mov eax, dword [ebp - 0x3c]
add eax, 0x103cc
push eax
call fcn.00412040
add esp, 0x20
mov ecx, dword [ebp - 0x34]
or ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x34]
sub edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x1a8], 0
je 0x402a8e
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x40]
jne 0x402a8e
mov ecx, dword [0x7f82fc]
cmp ecx, dword [ebp - 0x18]
jne 0x402a8e
push 0x150c1
push 0xcf53
push 0x1470f
push 0x34ab
push 0x171a3
push 0x1e68
push 0xbe72
call dword [sym.imp.KERNEL32.dll_CloseThreadpoolWait]
add esp, 0x1c
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1ac], edx
mov eax, dword [0x7f832c]
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x1ac]
cmp edx, dword [ebp - 0x1b0]
jge 0x402989
mov dword [ebp - 0x110], 1
jmp 0x402993
mov dword [ebp - 0x110], 0
mov eax, dword [0x7f82f8]
add eax, 1
mov dword [0x7f82f8], eax
mov ecx, dword [0x7f82f8]
cmp ecx, dword [0x7f838c]
jge 0x4029ba
mov dword [ebp - 0x114], 1
jmp 0x4029c4
mov dword [ebp - 0x114], 0
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1b4], eax
mov ecx, dword [0x7f8324]
mov dword [ebp - 0x1b8], ecx
mov edx, dword [0x7f8324]
sub edx, 1
mov dword [0x7f8324], edx
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x1b8]
jge 0x402a0b
mov dword [ebp - 0x118], 1
jmp 0x402a15
mov dword [ebp - 0x118], 0
mov ecx, dword [ebp - 0x110]
or ecx, dword [ebp - 0x114]
or ecx, dword [ebp - 0x118]
je 0x402a8e
mov edx, dword [ebp - 0x4c]
cmp edx, dword [ebp - 0x44]
jne 0x402a8e
mov eax, dword [0x7f82fc]
cmp eax, dword [ebp - 0x18]
jne 0x402a8e
mov ecx, dword [0x7f8330]
cmp ecx, dword [ebp - 0x48]
jne 0x402a8e
mov edx, dword [ebp - 0x3c]
cmp edx, dword [0x7f8328]
jne 0x402a8e
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x50]
jne 0x402a8e
mov ecx, dword [ebp - 0xc]
sub ecx, 1
mov dword [ebp - 0xc], ecx
push 0xcaf0
push 0x4030
push 0xf606
push 0x1058f
push 0xa984
push 0x3481
push 0xef63
call dword [sym.imp.KERNEL32.dll_GetThreadSelectorEntry]
add esp, 0x1c
mov edx, dword [ebp - 0x64]
sub edx, 0xc9ac
push edx
mov eax, dword [ebp - 0x18]
add eax, 0xa33b
push eax
mov ecx, dword [ebp - 0x50]
sub ecx, 0x13c67
push ecx
mov edx, dword [ebp - 0x10]
add edx, 0x102
push edx
mov eax, dword [0x7f8320]
add eax, 0x665d
push eax
mov ecx, dword [0x7f8388]
add ecx, 0xb3a9
push ecx
mov edx, dword [ebp - 0x34]
sub edx, 0x7c22
push edx
mov eax, dword [0x7f82fc]
add eax, 0x127da
push eax
call fcn.00412040
add esp, 0x20
mov ecx, 0x1077
sub ecx, dword [ebp + 8]
xor ecx, 0x9b93
xor ecx, 0xafb0e7a0
mov edx, dword [ebp + 0xc]
add edx, 0x528f
xor edx, 0x711b
mov dword [edx + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], ecx
mov dword [ebp - 0x84], 0
jmp 0x402b2e
mov eax, dword [ebp - 0x84]
add eax, 1
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x125e5
cmp dword [ebp - 0x84], ecx
jge 0x402b4a
mov edx, dword [ebp - 8]
sub edx, 1
mov dword [ebp - 8], edx
jmp 0x402b1f
mov eax, dword [ebp - 0x28]
cmp eax, dword [0x7f82fc]
jge 0x402b61
mov dword [ebp - 0x11c], 1
jmp 0x402b6b
mov dword [ebp - 0x11c], 0
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0x11c]
mov edx, dword [0x7f832c]
and edx, dword [0x7f8320]
or ecx, edx
je 0x402c1a
mov eax, dword [ebp - 0x10]
sub eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [0x7f8334]
cmp ecx, dword [ebp - 0x10]
jge 0x402bab
mov dword [ebp - 0x128], 1
jmp 0x402bb5
mov dword [ebp - 0x128], 0
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x24]
jge 0x402bcc
mov dword [ebp - 0x120], 1
jmp 0x402bd6
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x3c]
jge 0x402bed
mov dword [ebp - 0x124], 1
jmp 0x402bf7
mov dword [ebp - 0x124], 0
mov ecx, dword [ebp - 0x120]
and ecx, dword [ebp - 0x124]
or ecx, dword [ebp - 0x128]
je 0x402c1a
mov edx, dword [0x7f8324]
sub edx, 1
mov dword [0x7f8324], edx
mov eax, dword [ebp + 0x1c]
add eax, 0x1a7f
and eax, 0x16a0
xor eax, 0x38373695
mov ecx, dword [ebp + 0x10]
add ecx, 0xebb6
xor ecx, 0x170f0
mov dword [ecx + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], eax
mov dword [ebp - 0x88], 0
jmp 0x402c5c
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x7d9f
cmp dword [ebp - 0x88], eax
jge 0x402c77
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
jmp 0x402c4d
mov edx, dword [ebp + 0xc]
and edx, 0x6080
xor edx, 0x736170ef
mov eax, dword [ebp + 0x18]
xor eax, 0xfedd
sub eax, 0xaaa0
xor eax, 0x1944
mov dword [eax + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], edx
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x64]
jge 0x402cb2
mov dword [ebp - 0x12c], 1
jmp 0x402cbc
mov dword [ebp - 0x12c], 0
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [0x7f82fc]
jge 0x402cdc
mov dword [ebp - 0x130], 1
jmp 0x402ce6
mov dword [ebp - 0x130], 0
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
cmp edx, dword [0x7f83b4]
jge 0x402d06
mov dword [ebp - 0x134], 1
jmp 0x402d10
mov dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x12c]
and ecx, dword [ebp - 0x30]
or ecx, dword [ebp - 0x130]
or ecx, dword [ebp - 0x134]
je 0x402dad
mov edx, dword [ebp - 0x2c]
cmp edx, dword [ebp - 0x54]
jge 0x402d44
mov dword [ebp - 0x138], 1
jmp 0x402d4e
mov dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [0x7f8320]
jge 0x402d65
mov dword [ebp - 0x13c], 1
jmp 0x402d6f
mov dword [ebp - 0x13c], 0
mov ecx, dword [0x7f8328]
cmp ecx, dword [ebp - 0x30]
jge 0x402d86
mov dword [ebp - 0x140], 1
jmp 0x402d90
mov dword [ebp - 0x140], 0
mov edx, dword [ebp - 0x138]
and edx, dword [ebp - 0x13c]
and edx, dword [ebp - 0x140]
je 0x402dad
mov eax, dword [ebp - 0x10]
sub eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp + 8]
add ecx, 0xa4b5
xor ecx, 0x575012a8
mov edx, dword [ebp + 0x24]
or edx, 0x182f
add edx, 0xfab
xor edx, 0x2a32
mov dword [edx + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], ecx
mov eax, dword [ebp - 0x30]
sub eax, 0xa6e8
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x327e
push ecx
mov edx, dword [ebp - 0x24]
add edx, 0xdb1a
push edx
mov eax, dword [ebp - 8]
sub eax, 0xe7f0
push eax
mov ecx, dword [0x7f838c]
sub ecx, 0x1535
push ecx
mov edx, dword [0x7f8328]
add edx, 0x894d
push edx
call fcn.00417250
add esp, 0x18
mov dword [ebp - 0x8c], 0
jmp 0x402e3a
mov eax, dword [ebp - 0x8c]
add eax, 1
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0xaa2
cmp dword [ebp - 0x8c], ecx
jge 0x402fdf
mov edx, dword [0x7f82f8]
add edx, 1
mov dword [0x7f82f8], edx
mov eax, dword [0x7f82f8]
cmp eax, dword [ebp - 0x28]
jge 0x402fda
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 0x14]
jge 0x402e80
mov dword [ebp - 0x144], 1
jmp 0x402e8a
mov dword [ebp - 0x144], 0
mov edx, dword [ebp - 4]
cmp edx, dword [0x7f8324]
jge 0x402ea1
mov dword [ebp - 0x148], 1
jmp 0x402eab
mov dword [ebp - 0x148], 0
mov eax, dword [0x7f8320]
add eax, 1
mov dword [0x7f8320], eax
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [0x7f8320]
and ecx, dword [ebp - 0x144]
and ecx, dword [ebp - 0x148]
je 0x402fda
mov edx, dword [ebp - 0x20]
cmp edx, dword [0x7f8328]
jne 0x402fda
mov eax, dword [ebp - 0x40]
cmp eax, dword [0x7f82f8]
jne 0x402fda
mov ecx, dword [0x7f832c]
cmp ecx, dword [0x7f8330]
jge 0x402f0c
mov dword [ebp - 0x154], 1
jmp 0x402f16
mov dword [ebp - 0x154], 0
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x2c]
jge 0x402f2a
mov dword [ebp - 0x14c], 1
jmp 0x402f34
mov dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x18]
jge 0x402f48
mov dword [ebp - 0x150], 1
jmp 0x402f52
mov dword [ebp - 0x150], 0
mov ecx, dword [ebp - 0x14c]
and ecx, dword [ebp - 0x150]
or ecx, dword [ebp - 0x154]
je 0x402fda
mov edx, dword [0x7f8320]
cmp edx, dword [ebp - 0x40]
jne 0x402fda
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 4]
jne 0x402fda
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x7f8324]
jne 0x402fda
mov edx, dword [0x7f838c]
cmp edx, dword [ebp - 0x28]
jne 0x402fda
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x10]
jne 0x402fda
push 0x28c1
push 0xacba
push 0x11342
push 0x12524
push 0xc841
push 0x12bd1
call dword [sym.imp.ADVAPI32.dll_RegFlushKey]
add esp, 0x18
mov ecx, dword [ebp - 0x38]
sub ecx, 1
mov dword [ebp - 0x38], ecx
push 0x13d11
push 0xa48c
call dword [sym.imp.KERNEL32.dll_Process32First]
add esp, 8
jmp 0x402e2b
mov dword [ebp - 0x90], 0
jmp 0x402ffa
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 4]
sub eax, 0x12c6f
cmp dword [ebp - 0x90], eax
jge 0x40301b
mov ecx, dword [0x7f8388]
add ecx, 1
mov dword [0x7f8388], ecx
jmp 0x402feb
mov edx, dword [ebp + 8]
and edx, 0x421c
add edx, 0xc406
xor edx, 0x59555453
mov eax, dword [ebp + 0x10]
and eax, 0x77b
xor eax, 0x50e
mov dword [eax + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], edx
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x20]
cmp ecx, dword [0x7f83b8]
jge 0x40307b
mov edx, dword [ebp - 0x30]
cmp edx, dword [ebp - 0x40]
jne 0x40307b
mov eax, dword [0x7f832c]
cmp eax, dword [ebp - 0x58]
jne 0x40307b
push 0x14811
call dword [sym.imp.KERNEL32.dll_Wow64SetThreadContext]
add esp, 4
mov ecx, dword [ebp - 0x38]
sub ecx, 1
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp + 0xc]
and edx, 0x9b60
xor edx, 0x62767958
mov eax, 0xa8dc
sub eax, dword [ebp + 0x20]
add eax, 0xcd4f
xor eax, 0xadf0
xor eax, 0x1e22b
mov dword [eax + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], edx
mov ecx, dword [ebp - 0x44]
or ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp - 0x54]
jge 0x403131
mov edx, dword [0x7f83b8]
cmp edx, dword [ebp - 0xc]
jge 0x403131
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x3c]
jge 0x4030d1
mov dword [ebp - 0x158], 1
jmp 0x4030db
mov dword [ebp - 0x158], 0
mov ecx, dword [0x7f832c]
or ecx, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x158]
mov edx, dword [ebp - 0x58]
xor edx, dword [0x7f8388]
and ecx, edx
mov dword [ebp - 0x1bc], ecx
mov eax, dword [0x7f832c]
sub eax, 1
mov dword [0x7f832c], eax
cmp dword [ebp - 0x1bc], 0
je 0x403131
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp - 0x10]
jge 0x403131
mov edx, dword [ebp - 8]
cmp edx, dword [0x7f8330]
jge 0x403131
mov eax, dword [0x7f8328]
sub eax, 1
mov dword [0x7f8328], eax
mov dword [ebp - 0x94], 0
jmp 0x40314c
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x94], ecx
mov edx, dword [ebp - 0x50]
sub edx, 0x17fe0
cmp dword [ebp - 0x94], edx
jge 0x4031ce
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [0x7f8334]
sub ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x38]
or edx, ecx
je 0x4031c9
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x28]
jne 0x4031c9
mov ecx, dword [0x7f8330]
cmp ecx, dword [0x7f83b8]
jne 0x4031c9
push 0x5fb2
push 0xe02a
push 0x1da0
push 0xc159
push 0x588f
push 0x4de7
push 0xf64d
push 0x1616e
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsExEx]
add esp, 0x20
mov edx, dword [ebp - 0x54]
sub edx, 1
mov dword [ebp - 0x54], edx
jmp 0x40313d
mov eax, dword [ebp - 0x18]
add eax, 0xea1a
push eax
mov ecx, dword [ebp - 0x5c]
add ecx, 0x430
push ecx
mov edx, dword [ebp - 0x28]
add edx, 0xa774
push edx
mov eax, dword [ebp - 0x38]
add eax, 0x104f
push eax
mov ecx, dword [0x7f82f8]
add ecx, 0x987d
push ecx
mov edx, dword [ebp - 0x50]
sub edx, 0x6caf
push edx
mov eax, dword [ebp - 0x34]
sub eax, 0x6b20
push eax
call fcn.00411db0
add esp, 0x1c
mov ecx, dword [ebp + 0x28]
xor ecx, 0xad2e
xor ecx, 0x68672b1a
mov edx, dword [ebp + 0x28]
or edx, 0x2726
sub edx, 0x6e32
xor edx, 0x53d
xor edx, 0x7c75
mov dword [edx + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], ecx
mov eax, dword [0x7f83b4]
add eax, 1
mov dword [0x7f83b4], eax
mov ecx, 0x1dfc
sub ecx, dword [ebp + 0x24]
xor ecx, 0xba4
mov edx, dword [ebp + 0x28]
and edx, 0x7b4b
sub edx, 0x2aa9
xor edx, 0x35ab
mov byte [edx + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], cl
mov dword [ebp - 0x98], 0
jmp 0x40329d
mov eax, dword [ebp - 0x98]
add eax, 1
mov dword [ebp - 0x98], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x16014
cmp dword [ebp - 0x98], ecx
jge 0x4032bf
mov edx, dword [0x7f8328]
sub edx, 1
mov dword [0x7f8328], edx
jmp 0x40328e
mov eax, dword [ebp + 0x10]
xor eax, 0x5a61
xor eax, 0x4b4a9734
mov ecx, 0x69b8
sub ecx, dword [ebp + 0x20]
xor ecx, 0x4374
mov dword [ecx + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], eax
mov dword [ebp - 0x9c], 0
jmp 0x4032fb
mov edx, dword [ebp - 0x9c]
add edx, 1
mov dword [ebp - 0x9c], edx
mov eax, dword [ebp - 0x50]
sub eax, 0x17fe0
cmp dword [ebp - 0x9c], eax
jge 0x40331c
mov ecx, dword [0x7f8320]
add ecx, 1
mov dword [0x7f8320], ecx
jmp 0x4032ec
mov dword [ebp - 0xa0], 0
jmp 0x403337
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
mov eax, dword [ebp - 0x38]
sub eax, 0xf3bf
cmp dword [ebp - 0xa0], eax
jge 0x4033b7
mov ecx, dword [0x7f83b4]
add ecx, 1
mov dword [0x7f83b4], ecx
mov edx, dword [ebp - 0x4c]
sub edx, dword [0x7f83b4]
cmp edx, dword [ebp - 0x64]
jge 0x403370
mov dword [ebp - 0x15c], 1
jmp 0x40337a
mov dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [0x7f838c]
jge 0x403391
mov dword [ebp - 0x160], 1
jmp 0x40339b
mov dword [ebp - 0x160], 0
mov ecx, dword [ebp - 0x15c]
and ecx, dword [ebp - 0x160]
je 0x4033b2
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
jmp 0x403328
mov eax, dword [0x7f8388]
add eax, 1
mov dword [0x7f8388], eax
mov ecx, dword [0x7f8334]
add ecx, 1
mov dword [0x7f8334], ecx
mov edx, dword [ebp + 0x1c]
and edx, 0xcd21
sub edx, 0x31b9
xor edx, 0x7a6cf802
mov eax, dword [ebp + 0x20]
add eax, 0xe3f8
xor eax, 0x10a44
mov dword [eax + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], edx
mov dword [ebp - 0xa4], 0
jmp 0x403416
mov ecx, dword [ebp - 0xa4]
add ecx, 1
mov dword [ebp - 0xa4], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x765a
cmp dword [ebp - 0xa4], edx
jge 0x403432
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x403407
mov dword [ebp - 0xa8], 0
jmp 0x40344d
mov ecx, dword [ebp - 0xa8]
add ecx, 1
mov dword [ebp - 0xa8], ecx
mov edx, dword [ebp - 0x5c]
sub edx, 0xe5d1
cmp dword [ebp - 0xa8], edx
jge 0x40346d
mov eax, dword [0x7f83b4]
add eax, 1
mov dword [0x7f83b4], eax
jmp 0x40343e
mov ecx, dword [ebp + 0x24]
and ecx, 0xebb
add ecx, 0x26eb
xor ecx, 0x4d4e6b50
mov edx, dword [ebp + 8]
xor edx, 0x31ba
xor edx, 0x6966
xor edx, 0x83fd
mov dword [edx + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], ecx
mov eax, dword [0x7f8324]
add eax, 0x115ec
push eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x5066
push ecx
mov edx, dword [0x7f82fc]
sub edx, 0x72
push edx
mov eax, dword [ebp - 0xc]
add eax, 0x10d67
push eax
mov ecx, dword [0x7f8388]
add ecx, 0xd46d
push ecx
call fcn.00407be0
add esp, 0x14
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
mov eax, dword [ebp + 0x20]
add eax, 0x1d76
xor eax, 0x343371e3
mov ecx, dword [ebp + 0xc]
xor ecx, 0xf5dd
xor ecx, 0xeb45
mov dword [ecx + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], eax
mov dword [ebp - 0xac], 0
jmp 0x403520
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0x54]
sub eax, 0x12551
cmp dword [ebp - 0xac], eax
jge 0x40353b
mov ecx, dword [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x24], ecx
jmp 0x403511
mov dword [ebp - 0xb0], 0
jmp 0x403556
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x16015
cmp dword [ebp - 0xb0], eax
jge 0x403571
mov ecx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 8], ecx
jmp 0x403547
mov dword [ebp - 0xb4], 0
jmp 0x40358c
mov edx, dword [ebp - 0xb4]
add edx, 1
mov dword [ebp - 0xb4], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x765a
cmp dword [ebp - 0xb4], eax
jge 0x4035a7
mov ecx, dword [ebp - 0x5c]
sub ecx, 1
mov dword [ebp - 0x5c], ecx
jmp 0x40357d
mov edx, dword [ebp + 0x20]
add edx, 0x61a7
xor edx, 0x43cd
xor edx, 0x7265bcbf
mov eax, dword [ebp + 0x10]
or eax, 0x6c86
sub eax, 0xbdb3
xor eax, 0x2fe3
mov dword [eax + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], edx
mov ecx, dword [ebp - 0x3c]
add ecx, 0xfc55
push ecx
mov edx, dword [ebp - 0x24]
add edx, 0x2d9f
push edx
mov eax, dword [0x7f832c]
sub eax, 0x90e3
push eax
call fcn.0040fff0
add esp, 0xc
mov dword [ebp - 0xb8], 0
jmp 0x403616
mov ecx, dword [ebp - 0xb8]
add ecx, 1
mov dword [ebp - 0xb8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x12c6f
cmp dword [ebp - 0xb8], edx
jge 0x403632
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x403607
mov ecx, dword [0x7f83b8]
sub ecx, 1
mov dword [0x7f83b8], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x103fd
push edx
mov eax, dword [ebp - 0x30]
add eax, 0x5c39
push eax
mov ecx, dword [0x7f83b8]
sub ecx, 0x10076
push ecx
mov edx, dword [ebp - 8]
sub edx, 0x8c0
push edx
mov eax, dword [ebp - 0x54]
add eax, 0x2d29
push eax
mov ecx, dword [0x7f8330]
add ecx, 0x2f77
push ecx
mov edx, dword [0x7f83b4]
sub edx, 0x1ea2
push edx
mov eax, dword [ebp - 0x44]
add eax, 0x398c
push eax
call fcn.00412040
add esp, 0x20
mov ecx, dword [ebp + 0x14]
add ecx, 0xadfb
or ecx, 0xf5a
xor ecx, 0x4645dcba
mov edx, dword [ebp + 0x28]
or edx, 0xcc64
xor edx, 0xd2c9
xor edx, 0x3e99
mov dword [edx + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], ecx
mov dword [ebp - 0xbc], 0
jmp 0x4036ea
mov eax, dword [ebp - 0xbc]
add eax, 1
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x1364e
cmp dword [ebp - 0xbc], ecx
jge 0x40377a
mov edx, dword [0x7f83b8]
cmp edx, dword [0x7f8388]
jge 0x403715
mov dword [ebp - 0x164], 1
jmp 0x40371f
mov dword [ebp - 0x164], 0
mov eax, dword [ebp - 4]
and eax, dword [0x7f832c]
mov ecx, dword [ebp - 0x34]
and ecx, dword [0x7f82fc]
and ecx, dword [ebp - 0x164]
or eax, ecx
je 0x403775
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x3c]
jne 0x403775
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x2c]
jne 0x403775
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x7f8320]
jne 0x403775
mov edx, dword [ebp - 0x4c]
cmp edx, dword [ebp - 0x2c]
jne 0x403775
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x24]
jne 0x403775
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
call dword [sym.imp.KERNEL32.dll_BackupRead]
jmp 0x4036db
mov edx, dword [ebp + 0x2c]
xor edx, 0x1b3a1
xor edx, 0x43598a69
mov eax, dword [ebp + 0x2c]
or eax, 0x8016
xor eax, 0xe3ba
mov dword [eax + str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT], edx
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x28]
or edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0xc]
jge 0x403809
mov eax, dword [0x7f82f8]
xor eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0xc]
jge 0x403809
mov ecx, dword [0x7f8330]
cmp ecx, dword [ebp - 8]
jne 0x403809
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 8]
jne 0x403809
mov eax, dword [0x7f838c]
cmp eax, dword [ebp - 0x14]
jne 0x403809
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x18]
jne 0x403809
mov edx, dword [ebp - 0x18]
cmp edx, dword [0x7f83b8]
jne 0x403809
push 0x6737
push 0xd8d6
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
add esp, 8
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xc0], 0
jmp 0x403824
mov ecx, dword [ebp - 0xc0]
add ecx, 1
mov dword [ebp - 0xc0], ecx
mov edx, dword [ebp - 0x60]
sub edx, 0xb2c
cmp dword [ebp - 0xc0], edx
jge 0x403a87
mov eax, dword [ebp - 0x18]
sub eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x58]
jge 0x403856
mov dword [ebp - 0x168], 1
jmp 0x403860
mov dword [ebp - 0x168], 0
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0x1c]
cmp edx, dword [ebp - 4]
jge 0x403878
mov dword [ebp - 0x16c], 1
jmp 0x403882
mov dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x168]
and eax, dword [ebp - 0x16c]
je 0x403a82
mov ecx, dword [0x7f83b4]
cmp ecx, dword [ebp - 0x2c]
jne 0x403a82
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x34]
jne 0x403a82
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x3c]
jne 0x403a82
mov ecx, dword [0x7f832c]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x1c0], ecx
mov edx, dword [0x7f8320]
mov dword [ebp - 0x1c4], edx
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x1c0]
cmp ecx, dword [ebp - 0x1c4]
jge 0x4038f9
mov dword [ebp - 0x170], 1
jmp 0x403903
mov dword [ebp - 0x170], 0
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
xor eax, dword [0x7f8334]
and eax, dword [ebp - 0x170]
je 0x403a82
mov ecx, dword [0x7f82f8]
cmp ecx, dword [ebp - 8]
jne 0x403a82
mov edx, dword [0x7f8388]
cmp edx, dword [ebp - 0xc]
jne 0x403a82
mov eax, dword [0x7f8328]
cmp eax, dword [ebp - 0x3c]
jne 0x403a82
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [0x7f8330]
jne 0x403a82
push 0x9abb
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
add esp, 4
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
mov eax, dword [0x7f8328]
sub eax, dword [ebp - 0x24]
cmp eax, dword [0x7f8320]
jge 0x40398f
mov dword [ebp - 0x174], 1
jmp 0x403999
mov dword [ebp - 0x174], 0
mov ecx, dword [ebp - 8]
xor ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0x40]
jge 0x4039b0
mov dword [ebp - 0x178], 1
jmp 0x4039ba
mov dword [ebp - 0x178], 0
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c8], edx
mov eax, dword [0x7f82f8]
mov dword [ebp - 0x1cc], eax
mov ecx, dword [0x7f82f8]
sub ecx, 1
mov dword [0x7f82f8], ecx
mov edx, dword [ebp - 0x1c8]
cmp edx, dword [ebp - 0x1cc]
jge 0x4039f7
mov dword [ebp - 0x17c], 1
jmp 0x403a01
mov dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x174]
and eax, dword [ebp - 0x178]
or eax, dword [ebp - 0x17c]
je 0x403a51
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [ebp - 0x40]
jne 0x403a51
mov edx, dword [ebp - 0x40]
cmp edx, dword [0x7f82fc]
jne 0x403a51
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x58]
jne 0x403a51
push 0x25c8
push 0xcf76
push 0x4228
call dword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
add esp, 0xc
mov ecx, dword [ebp - 0x58]
sub ecx, 1
mov dword [ebp - 0x58], ecx
push 0xd2ff
push 0x17189
push 0x6ad3
push 0xef2a
push 0xa0e9
push 0x3814
push 0x1555
push 0x16fe2
call dword [sym.imp.KERNEL32.dll_FindActCtxSectionStringW]
add esp, 0x20
jmp 0x403815
mov dword [ebp - 0xc4], 0
jmp 0x403aa2
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0x48]
sub eax, 0xe1ca
cmp dword [ebp - 0xc4], eax
jge 0x403c57
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
mov edx, dword [0x7f82fc]
cmp edx, dword [ebp - 0x20]
jge 0x403ad6
mov dword [ebp - 0x188], 1
jmp 0x403ae0
mov dword [ebp - 0x188], 0
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
cmp ecx, dword [0x7f8320]
jge 0x403b00
mov dword [ebp - 0x180], 1
jmp 0x403b0a
mov dword [ebp - 0x180], 0
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x40]
jge 0x403b1e
mov dword [ebp - 0x184], 1
jmp 0x403b28
mov dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x180]
and eax, dword [ebp - 0x10]
xor eax, dword [ebp - 0x184]
or eax, dword [ebp - 0x188]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 1
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x1d0], 0
je 0x403c52
mov edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0xc]
jne 0x403c52
mov eax, dword [0x7f8334]
cmp eax, dword [ebp - 0x40]
jne 0x403c52
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x5c]
jne 0x403c52
mov edx, dword [ebp - 0x30]
cmp edx, dword [ebp - 0x34]
jne 0x403c52
push 0x12290
push 0x142a0
push 0x8328
push 0xac5
push 0x18440
push 0x15f3
push 0xdf7f
push 0x61a3
call dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
add esp, 0x20
mov eax, dword [ebp - 0x20]
xor eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x50]
jge 0x403bd3
mov dword [ebp - 0x18c], 1
jmp 0x403bdd
mov dword [ebp - 0x18c], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 8]
jge 0x403bf1
mov dword [ebp - 0x190], 1
jmp 0x403bfb
mov dword [ebp - 0x190], 0
mov edx, dword [ebp - 0x60]
or edx, dword [ebp - 0x3c]
or edx, dword [ebp - 0x18c]
or edx, dword [ebp - 0x190]
je 0x403c52
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 4]
jne 0x403c52
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [0x7f8330]
jne 0x403c52
mov edx, dword [0x7f8320]
cmp edx, dword [0x7f82f8]
jne 0x403c52
mov eax, dword [ebp - 0x5c]
cmp eax, dword [0x7f8330]
jne 0x403c52
mov ecx, dword [ebp - 0x20]
sub ecx, 1
mov dword [ebp - 0x20], ecx
push 0x15aa1
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 4
jmp 0x403a93
mov eax, str.AVvgjXMtfnjLSxsARGIHzxfeNVkhSSsXqCLUrnDQrOBrghuGLKFKvNhvlsWhT
jmp 0x403cd3
mov esp, ebp
pop ebp
ret