Function at 0x403b4b
Capabilities:
Execute anti-debugging instructions
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5cc
push ebx
push esi
push edi
push 0xe
call dword [sym.imp.KERNEL32.DLL_GlobalAddAtomA]
movzx eax, ax
cmp eax, 0xe
je 0x403b6f
push 1
call dword [sym.imp.msvcrt.dll_exit]
mov dword [ebp - 8], 0xfee0c1b0
xor eax, dword [0x421848]
mov dword [ebp - 0x14], eax
not dword [ebp - 0x14]
not eax
sub dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1c], eax
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcessId]
cmp eax, 0xffffffff
jne 0x403c75
push 0x62
pop eax
add eax, 0x4cf3
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
add eax, 0xcf
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
add eax, 0x8a
mov dword [ebp - 0x164], eax
push 0x36
pop eax
sub eax, dword [ebp - 0x164]
mov dword [ebp - 0x16c], eax
mov eax, 0x81
imul eax, dword [ebp - 0x16c]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
xor eax, 0x69986dc0
mov dword [ebp - 0x158], eax
mov eax, 0xf4
sub eax, dword [ebp - 0x158]
mov dword [ebp - 0x160], eax
push 0
push 0x4f7dd644
push 0x4f7dd644
push 0
call dword [sym.imp.GDI32.dll_AnimatePalette]
mov ecx, eax
and ecx, 0xfe158a5
or ecx, 0xf76a3073
mov eax, dword [ebp - 0x160]
xor edx, edx
div ecx
mov dword [ebp - 0x168], edx
push 0x46
pop eax
xor eax, dword [ebp - 0x168]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x14], eax
push 0
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
push 0
push 0
push 0
call dword [sym.imp.WINMM.dll_PlaySoundA]
push 0xc
call dword [sym.imp.msvcrt.dll_exit]
and dword [ebp - 0x10], 0
push 0xe
pop eax
or eax, 0x90
mov dword [ebp - 0x174], eax
mov eax, 0x83
or eax, dword [ebp - 0x174]
mov dword [ebp - 0x17c], eax
push 8
pop eax
imul eax, dword [ebp - 0x17c]
mov dword [ebp - 0x184], eax
push 0x1c
pop eax
or eax, dword [ebp - 0x184]
mov dword [ebp - 0x188], eax
push 0x19
pop eax
xor eax, dword [ebp - 0x188]
mov dword [ebp - 0x170], eax
mov eax, 0xad
imul eax, dword [ebp - 0x170]
mov dword [ebp - 0x178], eax
mov ecx, dword [ebp - 0x178]
or ecx, 0xbadd8371
mov eax, 0x5f51
xor edx, edx
div ecx
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x14], eax
and dword [ebp - 8], 0
push 0xfd
push 0x34
push 0x84
push 0xab
push 0x6a
push 0xe
push 0x77
push dword [ebp - 0x14]
call fcn.004039ea
add esp, 0x20
mov dword [ebp - 0x14], eax
push 0x58
call dword [sym.imp.USER32.dll_CharLowerA]
cmp eax, 0x78
jne 0x40456a
and dword [ebp - 0x18c], 0
push 0x11
push 0xed
push 0x11
push 0x35
push 0xfe
push 0x80
mov eax, 0x8f
call fcn.00403a86
add esp, 0x18
mov dword [0x4228ac], eax
mov dword [ebp - 0x29c], 0xb60bea92
mov dword [ebp - 0x2a0], 0xb60bea92
xor eax, eax
lea eax, [eax]
add eax, dword [sym.imp.KERNEL32.DLL_CloseHandle]
xor eax, dword [ebp - 0x29c]
mov dword [0x4228a8], eax
xor eax, dword [ebp - 0x2a0]
xor dword [0x4228a8], 0xb60bea92
mov dword [ebp - 0x2b0], 0xdbfab482
mov dword [ebp - 0x2b8], 0xc8466821
mov dword [ebp - 0x2bc], 0xc8466821
or dword [ebp - 0x2b4], 0xffffffff
mov dword [ebp - 0x2a8], 0x99d6710f
mov dword [ebp - 0x2a4], 0x99d6710f
mov dword [ebp - 0x2c4], 0x3a98739f
mov dword [ebp - 0x2c0], 0x54162a68
mov dword [ebp - 0x2ac], 0x54162a68
xor eax, eax
sub eax, 1
and eax, dword [ebp - 0x298]
mov edx, 0x55720567
mov ecx, dword [0x421858]
or ecx, dword [ebp - 0x2b0]
xor ecx, eax
not ecx
mov edx, dword [ebp - 0x2b8]
sub edx, dword [ebp - 0x2bc]
xor edx, 0x2f3e1b46
rdtsc
xor eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x298], eax
not dword [ebp - 0x298]
not eax
mov edx, dword [ebp - 0x2a8]
sub edx, dword [ebp - 0x2a4]
add edx, 0x34c53ad6
mov eax, dword [0x42185c]
sub eax, dword [ebp - 0x2c4]
or eax, ecx
mov bx, bx
mov edx, dword [ebp - 0x2c0]
sub edx, dword [ebp - 0x2ac]
xor edx, 0x700c086a
and dword [ebp - 0x328], 0
jmp 0x403e86
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 1
jge 0x403e97
call dword [sym.imp.KERNEL32.DLL_GetACP]
jmp 0x403e79
mov dword [ebp - 0x2d8], 0xd3297d24
mov dword [ebp - 0x2cc], 0xd3297d24
mov dword [ebp - 0x2d4], 0x2a0a9281
mov dword [ebp - 0x2d0], 0xd5f56d7e
mov dword [ebp - 0x2c8], 0xc4834077
mov eax, dword [ebp - 0x2d8]
xor eax, dword [ebp - 0x2cc]
xor eax, dword [ebp - 0x190]
xor edx, edx
xor edx, 0x7ad3d9d0
lea edi, [edi]
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x2dc]
push di
pop di
mov edx, dword [ebp - 0x2d4]
or edx, dword [ebp - 0x2d0]
xor edx, 0x890a18c4
not edx
lea ebp, [ebp]
rdtsc
mov edx, 0x254f6cac
lea eax, [eax]
mov dword [ebp - 0x190], eax
push bx
pop bx
xor edx, edx
or edx, 0xdb3e2fb4
mov eax, dword [ebp - 0x2c8]
or eax, dword [0x421860]
xor eax, ecx
not eax
mov edx, dword [0x421864]
sub edx, dword [0x421868]
or edx, 0x3e4f5f94
and dword [ebp - 0x32c], 0
jmp 0x403f5f
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 1
jge 0x403f7d
xor eax, eax
sub eax, 1
xor eax, dword [0x4228a8]
not eax
lea esi, [esi]
push 0
call eax
jmp 0x403f52
mov dword [ebp - 0x2e8], 0x2d7f6ae1
mov dword [ebp - 0x2ec], 0xae418f3a
mov dword [ebp - 0x2f0], 0xae418f3a
mov dword [ebp - 0x2e4], 0x80218990
mov dword [ebp - 0x2e0], 0xa89a64f0
mov eax, dword [0x42186c]
xor eax, dword [ebp - 0x2e8]
xor eax, dword [ebp - 0x194]
mov edx, 0x8b9e3fa2
mov ecx, dword [0x421870]
xor ecx, dword [0x421874]
or ecx, eax
xor edx, edx
or edx, 0x77fa6713
rdtsc
xor eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x194], eax
xor eax, dword [ebp - 0x2f0]
xor dword [ebp - 0x194], 0xae418f3a
xor edx, edx
xor edx, 0xd716d3d3
mov eax, dword [ebp - 0x2e4]
xor eax, dword [0x421878]
xor eax, ecx
not eax
mov edx, dword [ebp - 0x2e0]
xor edx, dword [0x42187c]
xor edx, 0xa530b641
not edx
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x13
jl 0x4040ce
mov dword [ebp - 0x2f8], 0x514382cb
mov dword [ebp - 0x2f4], 0xab422a87
mov dword [ebp - 0x2fc], 0xab422a87
push esp
pop dword [0x4228a0]
mov edx, dword [ebp - 0x2f8]
sub edx, dword [0x421880]
xor edx, 0x462c2ee
mov edx, 0x85881745
mov edx, dword [ebp - 0x2f4]
sub edx, dword [ebp - 0x2fc]
xor edx, 0xfd0cdcdd
mov edx, 0xb718f16e
push si
pop si
mov edx, dword [0x421884]
xor edx, dword [0x421888]
xor edx, 0x513a118d
xor edx, edx
dec edx
and edx, 0xd13aa2a8
mov edx, dword [0x42188c]
or edx, dword [0x421890]
xor edx, 0xd457a777
not edx
and dword [ebp - 0x330], 0
jmp 0x4040fd
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x190]
sub ecx, dword [ebp - 0x298]
xor edx, edx
div ecx
cmp eax, 3
jbe 0x403d9d
mov dword [ebp - 0x330], 1
cmp dword [ebp - 0x330], 0
je 0x40456a
and dword [ebp - 0x404], 0
mov ecx, dword [ebp - 0x33c]
call fcn.00403916
mov dword [0x4228ac], eax
push dword [sym.imp.USER32.dll_SendMessageA]
pop dword [ebp - 0x404]
mov eax, dword [ebp - 0x404]
movzx ecx, byte [eax]
shl ecx, 0xe
or ecx, 0xa0f3585f
xor eax, eax
xor edx, edx
div ecx
mov dword [ebp - 0x358], edx
mov eax, dword [ebp - 0x358]
xor edx, edx
mov ecx, 0xae27f4df
div ecx
mov dword [ebp - 0x35c], edx
mov ecx, dword [ebp - 0x35c]
or ecx, 0xf2318c46
mov eax, 0x7b07
xor edx, edx
div ecx
mov dword [ebp - 0x360], eax
mov eax, dword [0x4228ac]
sub eax, dword [ebp - 0x360]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x364]
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x404]
movzx eax, byte [eax]
shl eax, 4
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
imul eax, eax, 0x2e2debc5
mov dword [ebp - 0x370], eax
mov eax, dword [0x4228ac]
and eax, dword [ebp - 0x370]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
xor eax, 0x225d9af
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
xor edx, edx
mov ecx, 0xfd9ffdd3
div ecx
mov dword [ebp - 0x368], edx
mov eax, dword [ebp - 0x368]
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x354]
mov al, byte [eax]
mov byte [ebp - 0x34d], al
mov eax, dword [ebp - 0x404]
movzx eax, byte [eax]
shl eax, 0xe
push 0
call fcn.00403b1b
pop ecx
mov dword [0x4228ac], eax
movzx eax, byte [ebp - 0x34d]
cmp eax, 0xe9
je 0x40424a
and dword [ebp - 0x408], 0
jmp 0x404561
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
mov eax, dword [eax]
call fcn.0040392e
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x33c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x404]
lea eax, [ecx + eax + 5]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
movzx ecx, byte [eax + 7]
mov eax, dword [ebp - 0x33c]
mov eax, dword [eax]
call fcn.0040393a
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x340]
movzx ecx, byte [eax]
shl ecx, 0xe
or ecx, 0xa0f3585f
xor eax, eax
xor edx, edx
div ecx
mov dword [ebp - 0x390], edx
mov eax, dword [ebp - 0x390]
xor edx, edx
mov ecx, 0xae27f4df
div ecx
mov dword [ebp - 0x394], edx
mov ecx, dword [ebp - 0x394]
or ecx, 0xf2318c46
mov eax, 0x7b07
xor edx, edx
div ecx
mov dword [ebp - 0x398], eax
mov eax, dword [0x4228ac]
sub eax, dword [ebp - 0x398]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x340]
movzx eax, byte [eax]
shl eax, 4
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
imul eax, eax, 0x2e2debc5
mov dword [ebp - 0x3a8], eax
mov eax, dword [0x4228ac]
and eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
xor eax, 0x225d9af
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3b0]
xor edx, edx
mov ecx, 0xfd9ffdd3
div ecx
mov dword [ebp - 0x3a0], edx
mov eax, dword [ebp - 0x3a0]
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x38c]
mov al, byte [eax]
mov byte [ebp - 0x385], al
mov eax, dword [ebp - 0x340]
movzx eax, byte [eax]
shl eax, 0xe
push 0
call fcn.00403b1b
pop ecx
mov dword [0x4228ac], eax
movzx eax, byte [ebp - 0x385]
cmp eax, 0xe9
je 0x4043ba
and dword [ebp - 0x408], 0
jmp 0x404561
mov eax, dword [ebp - 0x340]
movzx eax, byte [eax + 0xd]
push eax
mov eax, dword [ebp - 0x33c]
mov eax, dword [eax]
call fcn.00403958
pop ecx
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x340]
movzx ecx, byte [eax + 9]
mov eax, dword [ebp - 0x334]
mov eax, dword [eax]
call fcn.00403998
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x334]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x340]
lea eax, [ecx + eax + 5]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x340]
movzx ecx, byte [eax + 7]
mov eax, dword [ebp - 0x33c]
push dword [eax]
call fcn.004039cc
pop ecx
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x338]
movzx ecx, byte [eax]
shl ecx, 0xe
or ecx, 0xa0f3585f
push 0xc
pop eax
xor edx, edx
div ecx
mov dword [ebp - 0x3d4], edx
mov eax, dword [ebp - 0x3d4]
xor edx, edx
mov ecx, 0xae27f4df
div ecx
mov dword [ebp - 0x3d8], edx
mov ecx, dword [ebp - 0x3d8]
or ecx, 0xf2318c46
mov eax, 0x7b07
xor edx, edx
div ecx
mov dword [ebp - 0x3dc], eax
mov eax, dword [0x4228ac]
sub eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x3e0]
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x338]
add eax, 0xc
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x338]
movzx eax, byte [eax]
shl eax, 4
add eax, 0xc
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x3e8]
imul eax, eax, 0x2e2debc5
mov dword [ebp - 0x3ec], eax
mov eax, dword [0x4228ac]
and eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x3f0]
xor eax, 0x225d9af
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x3f4]
xor edx, edx
mov ecx, 0xfd9ffdd3
div ecx
mov dword [ebp - 0x3e4], edx
mov eax, dword [ebp - 0x3e4]
mov dword [0x4228ac], eax
mov eax, dword [ebp - 0x3d0]
mov al, byte [eax]
mov byte [ebp - 0x3c9], al
mov eax, dword [ebp - 0x338]
movzx eax, byte [eax]
shl eax, 0xe
push 0xc
call fcn.00403b1b
pop ecx
mov dword [0x4228ac], eax
movzx eax, byte [ebp - 0x3c9]
cmp eax, 0xe8
je 0x404557
and dword [ebp - 0x408], 0
jmp 0x404561
mov dword [ebp - 0x408], 1
cmp dword [ebp - 0x408], 0
je 0x40457f
mov eax, 0xa0
call fcn.00403a69
mov dword [ebp - 0x14], eax
push 0
call dword [sym.imp.msvcrt.dll_exit]
and dword [ebp - 0x130], 0
lea eax, [ebp - 0x1c]
push eax
push 0x4184b8
push reloc.OLEAUT32.dll_SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 6
je 0x404608
mov eax, 0xdb
or eax, 0x6bff3b64
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x410]
add eax, 0x2f
mov dword [ebp - 0x414], eax
push 0x68
pop eax
or eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x130]
sub eax, dword [ebp - 0x418]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x41c]
add eax, 0x5aea
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x14], eax
jmp fcn.00404ae7
and dword [ebp - 0x420], 0
push 0x11
push 0xed
push 0x11
push 0x35
push 0xfe
push 0x80
mov eax, 0x8f
call fcn.00403a86
add esp, 0x18
mov dword [0x4228ac], eax
mov dword [ebp - 0x530], 0xb60bea92
mov dword [ebp - 0x534], 0xb60bea92
xor eax, eax
lea eax, [eax]
add eax, dword [sym.imp.KERNEL32.DLL_CloseHandle]
xor eax, dword [ebp - 0x530]
mov dword [0x4228a8], eax
xor eax, dword [ebp - 0x534]
xor dword [0x4228a8], 0xb60bea92
mov dword [ebp - 0x544], 0xdbfab482
mov dword [ebp - 0x54c], 0xc8466821
mov dword [ebp - 0x550], 0xc8466821
or dword [ebp - 0x548], 0xffffffff
mov dword [ebp - 0x53c], 0x99d6710f
mov dword [ebp - 0x538], 0x99d6710f
mov dword [ebp - 0x558], 0x3a98739f
mov dword [ebp - 0x554], 0x54162a68
mov dword [ebp - 0x540], 0x54162a68
xor eax, eax
sub eax, 1
and eax, dword [ebp - 0x52c]
mov edx, 0x55720567
mov ecx, dword [0x421858]
or ecx, dword [ebp - 0x544]
xor ecx, eax
not ecx
mov edx, dword [ebp - 0x54c]
sub edx, dword [ebp - 0x550]
xor edx, 0x2f3e1b46
rdtsc
xor eax, dword [ebp - 0x548]
mov dword [ebp - 0x52c], eax
not dword [ebp - 0x52c]
not eax
mov edx, dword [ebp - 0x53c]
sub edx, dword [ebp - 0x538]
add edx, 0x34c53ad6
mov eax, dword [0x42185c]
sub eax, dword [ebp - 0x558]
or eax, ecx
mov bx, bx
mov edx, dword [ebp - 0x554]
sub edx, dword [ebp - 0x540]
xor edx, 0x700c086a
and dword [ebp - 0x5bc], 0
jmp 0x404758
mov eax, dword [ebp - 0x5bc]
inc eax
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 1
jge 0x404769
call dword [sym.imp.KERNEL32.DLL_GetACP]
jmp 0x40474b
mov dword [ebp - 0x56c], 0xd3297d24
mov dword [ebp - 0x560], 0xd3297d24
mov dword [ebp - 0x568], 0x2a0a9281
mov dword [ebp - 0x564], 0xd5f56d7e
mov dword [ebp - 0x55c], 0xc4834077
mov eax, dword [ebp - 0x56c]
xor eax, dword [ebp - 0x560]
xor eax, dword [ebp - 0x424]
xor edx, edx
xor edx, 0x7ad3d9d0
lea edi, [edi]
mov dword [ebp - 0x570], eax
mov ecx, dword [ebp - 0x570]
push di
pop di
mov edx, dword [ebp - 0x568]
or edx, dword [ebp - 0x564]
xor edx, 0x890a18c4
not edx
lea ebp, [ebp]
rdtsc
mov edx, 0x254f6cac
lea eax, [eax]
mov dword [ebp - 0x424], eax
push bx
pop bx
xor edx, edx
or edx, 0xdb3e2fb4
mov eax, dword [ebp - 0x55c]
or eax, dword [0x421860]
xor eax, ecx
not eax
mov edx, dword [0x421864]
sub edx, dword [0x421868]
or edx, 0x3e4f5f94
and dword [ebp - 0x5c0], 0
jmp 0x404831
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 1
jge 0x40484f
xor eax, eax
sub eax, 1
xor eax, dword [0x4228a8]
not eax
lea esi, [esi]
push 0
call eax
jmp 0x404824
mov dword [ebp - 0x57c], 0x2d7f6ae1
mov dword [ebp - 0x580], 0xae418f3a
mov dword [ebp - 0x584], 0xae418f3a
mov dword [ebp - 0x578], 0x80218990
mov dword [ebp - 0x574], 0xa89a64f0
mov eax, dword [0x42186c]
xor eax, dword [ebp - 0x57c]
xor eax, dword [ebp - 0x428]
mov edx, 0x8b9e3fa2
mov ecx, dword [0x421870]
xor ecx, dword [0x421874]
or ecx, eax
xor edx, edx
or edx, 0x77fa6713
rdtsc
xor eax, dword [ebp - 0x580]
mov dword [ebp - 0x428], eax
xor eax, dword [ebp - 0x584]
xor dword [ebp - 0x428], 0xae418f3a
xor edx, edx
xor edx, 0xd716d3d3
mov eax, dword [ebp - 0x578]
xor eax, dword [0x421878]
xor eax, ecx
not eax
mov edx, dword [ebp - 0x574]
xor edx, dword [0x42187c]
xor edx, 0xa530b641
not edx
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0x13
jl 0x4049a0
mov dword [ebp - 0x58c], 0x514382cb
mov dword [ebp - 0x588], 0xab422a87
mov dword [ebp - 0x590], 0xab422a87
push esp
pop dword [0x4228a0]
mov edx, dword [ebp - 0x58c]
sub edx, dword [0x421880]
xor edx, 0x462c2ee
mov edx, 0x85881745
mov edx, dword [ebp - 0x588]
sub edx, dword [ebp - 0x590]
xor edx, 0xfd0cdcdd
mov edx, 0xb718f16e
push si
pop si
mov edx, dword [0x421884]
xor edx, dword [0x421888]
xor edx, 0x513a118d
xor edx, edx
dec edx
and edx, 0xd13aa2a8
mov edx, dword [0x42188c]
or edx, dword [0x421890]
xor edx, 0xd457a777
not edx
and dword [ebp - 0x5c4], 0
jmp 0x4049cf
mov eax, dword [ebp - 0x428]
sub eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x424]
sub ecx, dword [ebp - 0x52c]
xor edx, edx
div ecx
cmp eax, 3
jbe 0x40466f
mov dword [ebp - 0x5c4], 1
cmp dword [ebp - 0x5c4], 0
je 0x404a8e
mov dword [ebp - 0x13c], 0xd20935d4
mov dword [ebp - 0x148], 0xd20935d4
mov dword [ebp - 0x138], 0xf9949ed9
mov dword [ebp - 0x144], 0x858cfe1e
mov dword [ebp - 0x140], 0x7a7301e1
xor eax, eax
or eax, 0x43ff9a4f
mov eax, 0
xor eax, eax
sub eax, 1
xor eax, 0x4b46775c
not eax
xor ecx, ecx
dec ecx
and ecx, 0x40c612
mov eax, dword [ebp - 0x13c]
xor eax, dword [ebp - 0x148]
xor eax, 0x129bae32
push ecx
mov eax, dword [0x42184c]
xor eax, dword [ebp - 0x138]
xor eax, 0x597241c1
not eax
xor ecx, ecx
xor ecx, 0x40348b
mov eax, dword [ebp - 0x144]
or eax, dword [ebp - 0x140]
and eax, 0x624fd9f
push 0x404a7c
push ecx
ret
mov eax, 0x404c6f
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x5c8]
and eax, 0x10
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x14], eax
push 0
call dword [sym.imp.msvcrt.dll_exit]
pop edi
pop esi
pop ebx
leave
ret 0x10