Function at 0x40103f
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, edx
push esp
pop ebp
push ebp
lea esp, [ebp - 0x50]
inc ecx
inc ecx
mov edx, 0x5b
cmp bp, 0xfe04
nop
jb 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
inc ebp
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [edx + 0xb], ch
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0x40576e
call dword [esp]
add byte [edx + 0xb], ch
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [edx + 0xb], ch
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax - 0x4b], ch
xchg edx, eax
inc ecx
add byte [edx + 1], ch
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0x40576e
call dword [esp]
add byte [eax - 0x4b], ch
xchg edx, eax
inc ecx
add byte [edx + 1], ch
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [edx + 0xb], ch
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0x40576e
call dword [esp]
add byte [eax - 0x4b], ch
xchg edx, eax
inc ecx
add byte [edx + 1], ch
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax - 0x4b], ch
xchg edx, eax
inc ecx
add byte [edx + 1], ch
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0x40576e
call dword [esp]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push 0xb
dec dword [esp]
push 0x4192ab
call main
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push 0xb
dec dword [esp]
push 0x4192ab
call main
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
cmp eax, 0
jne 0x405962
push str.uroawknylnyhau
push 1
dec dword [esp]
push 0x100001
dec dword [esp]
call sub.kernel32.dll_OpenWaitableTimerW
test eax, eax
jne 0x405962
mov esp, ebp
pop ebp
int3