Function at 0x412540
Capabilities:
Accept command line arguments
Authenticate hmac
Create pipe
Encode data using xor
Get file attributes
Write file on windows
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60c
push esi
push edi
mov dword [ebp - 0x28], 0x3e42
mov eax, dword [0x75a418]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 8], 0
mov ecx, dword [0x75a424]
mov dword [ebp - 0x2c], ecx
mov edx, dword [0x75a410]
mov dword [ebp - 0x30], edx
mov dword [ebp - 0xc], 0
mov eax, dword [0x75a40c]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x18], 0
mov ecx, dword [0x75a40c]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xa8], 0x36d1
mov edx, dword [0x75a418]
mov dword [ebp - 4], edx
mov dword [ebp - 0x24], 0
imul eax, dword [ebp - 0x30], 0
add eax, dword [ebp - 0x38]
add eax, dword [ebp - 0xc]
movzx ecx, word [ebp - 0x34]
mov edx, dword [ebp - 0x3c]
lea ecx, [edx + ecx - 0x2851]
sub ecx, dword [ebp - 0x14]
and ecx, 0x3700
or eax, ecx
mov edx, dword [ebp - 0x2c]
and edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x20]
and edx, ecx
or eax, edx
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x14]
and edx, 0x39be
and edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
add eax, 0x1930
sub eax, dword [ebp - 0x30]
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x10]
and edx, eax
xor ecx, ecx
sub ecx, dword [ebp - 0x34]
add ecx, 0x485
and edx, ecx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 4], 0x5cc
movzx edx, byte [ebp - 0x3c]
add edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x24]
and edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x2c]
add eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x2c]
lea eax, [eax + ecx + 0x664]
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x10]
or edx, eax
mov dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x30]
mov edx, 0xffffe68e
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
lea edx, [edx + eax + 0xa55]
and edx, dword [ebp - 8]
or ecx, edx
or ecx, dword [ebp - 0x2c]
movzx eax, byte [ebp - 0xc]
mov edx, dword [ebp - 0x1c]
sub edx, eax
sub edx, dword [ebp - 0x18]
and edx, dword [ebp - 0x28]
or ecx, edx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 4]
add eax, 0xa
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x18]
or ecx, dword [ebp - 0x38]
movzx edx, word [ebp - 0x30]
sub edx, dword [ebp - 8]
or ecx, edx
or ecx, dword [ebp - 0x34]
movzx eax, word [ebp - 0x18]
or ecx, eax
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x18]
movzx eax, byte [ebp - 0x1c]
mov esi, dword [ebp - 0x18]
sub esi, eax
sub esi, 0x459f
and edx, esi
or ecx, edx
or ecx, dword [ebp - 0x34]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x24]
movzx edx, byte [ebp - 0x2c]
imul eax, edx, 0x20ce
mov edx, dword [ebp - 0x38]
sub edx, eax
or ecx, edx
or ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x10]
lea eax, [edx + eax - 0x1bd9]
add eax, dword [ebp - 8]
sub eax, dword [ebp - 0x18]
or ecx, eax
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 4], 0x5ea
jb 0x412665
mov ecx, dword [ebp - 0x20]
add ecx, 0x26e5
imul edx, dword [ebp - 4], 0xd38
or ecx, edx
movzx eax, byte [ebp - 0x24]
or ecx, eax
movzx edx, byte [ebp - 0x1c]
sub edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x18]
or ecx, edx
movzx eax, word [ebp - 0xc]
sub eax, dword [ebp - 0x34]
or ecx, eax
xor edx, edx
sub edx, dword [ebp - 0x28]
or ecx, edx
mov dword [ebp - 0x30], ecx
push str.rescwidohffghhirotes
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xa8], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 0x63
je 0x4127ef
cmp dword [ebp - 0x88], 0x9e
je 0x4127a7
cmp dword [ebp - 0x88], 0xfb
je 0x412824
jmp 0x412850
movzx eax, byte [ebp - 0x2c]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x20]
and eax, ecx
movzx edx, byte [ebp - 0x2c]
imul ecx, edx, 0x1a5f
imul ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0xc]
sub edx, ecx
movzx ecx, word [ebp - 0x30]
sub edx, ecx
mov ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 0x30]
movzx esi, word [ebp - 0xc]
add ecx, dword [ebp - 0x24]
add esi, ecx
sub esi, dword [ebp - 4]
and edx, esi
or eax, edx
or eax, dword [ebp - 4]
mov word [ebp - 0x10], ax
jmp 0x412882
movzx edx, word [ebp - 0x24]
movzx eax, byte [ebp - 0x18]
mov ecx, 0x4de1
sub ecx, eax
sub ecx, dword [ebp - 0x18]
and edx, ecx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x1c]
and edx, eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 4]
and ecx, dword [ebp - 0x2c]
or edx, ecx
or edx, dword [ebp - 4]
or edx, dword [ebp - 0x3c]
mov dword [ebp - 8], edx
jmp 0x412882
movzx edx, byte [ebp - 0x30]
movzx eax, byte [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
and ecx, 0
mov eax, 0x835c
sub eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x20]
and ecx, eax
or edx, ecx
mov ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 0xc]
or edx, ecx
mov dword [ebp - 4], edx
jmp 0x412882
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x3c]
and edx, dword [ebp - 0x38]
imul eax, dword [ebp - 8], 0
movzx ecx, byte [ebp - 0x1c]
add eax, dword [ebp - 4]
lea eax, [ecx + eax - 0xe3d]
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x18]
add eax, dword [ebp - 0x34]
add ecx, eax
add ecx, dword [ebp - 0x1c]
or edx, ecx
mov dword [ebp - 0x14], edx
movzx edx, word [ebp - 0x24]
movzx eax, byte [ebp - 0x24]
lea ecx, [edx + eax + 0x199a]
or ecx, 0xffffebc4
movzx edx, byte [ebp - 0x30]
or ecx, edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x18]
or ecx, eax
or ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x38]
and edx, 0x446c
or ecx, edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x4e
je 0x4128f5
cmp dword [ebp - 0x98], 0x9b
je 0x41292d
cmp dword [ebp - 0x98], 0xfa
je 0x412960
jmp 0x412999
movzx ecx, word [ebp - 0xc]
mov edx, dword [ebp - 0x18]
lea eax, [ecx + edx - 0x1ee]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
and eax, ecx
movzx edx, byte [ebp - 8]
mov ecx, dword [ebp - 0x2c]
sub ecx, edx
or eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x4129cf
movzx edx, byte [ebp - 0x3c]
add edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x14]
movzx eax, byte [ebp - 0x38]
sub edx, eax
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
lea ecx, [ecx + eax - 0x87f]
sub ecx, dword [ebp - 0x24]
or edx, ecx
mov dword [ebp - 4], edx
jmp 0x4129cf
mov edx, dword [ebp - 0x18]
or edx, dword [ebp - 0x1c]
movzx eax, byte [ebp - 0x1c]
add eax, dword [ebp - 0x3c]
movzx ecx, byte [ebp - 0x34]
sub eax, ecx
movzx ecx, byte [ebp - 0x24]
add eax, dword [ebp - 0x2c]
add ecx, eax
add ecx, dword [ebp - 0x10]
movzx eax, word [ebp - 0x3c]
xor esi, esi
sub esi, eax
sub esi, dword [ebp - 0xc]
and ecx, esi
or edx, ecx
or edx, 0x2ab4
mov dword [ebp - 8], edx
jmp 0x4129cf
mov ecx, 0x3521
sub ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x38]
imul edx, dword [ebp - 0x24], 0
xor eax, eax
sub eax, edx
sub eax, 0x4465
and ecx, eax
movzx edx, word [ebp - 4]
sub edx, dword [ebp - 0xc]
and ecx, edx
xor eax, eax
sub eax, dword [ebp - 0x38]
movzx edx, word [ebp - 8]
add edx, dword [ebp - 0x30]
xor eax, edx
or ecx, eax
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xaa
ja 0x4129fc
cmp dword [ebp - 0x40], 0xaa
je 0x412acf
cmp dword [ebp - 0x40], 0x14
je 0x412a58
cmp dword [ebp - 0x40], 0x68
je 0x412a17
jmp 0x412b41
cmp dword [ebp - 0x40], 0xf3
je 0x412b02
cmp dword [ebp - 0x40], 0x13e
je 0x412a91
jmp 0x412b41
movzx ecx, byte [ebp - 4]
mov edx, dword [ebp - 0x28]
lea eax, [ecx + edx - 0x197d]
xor ecx, ecx
sub ecx, dword [ebp - 0x3c]
or eax, ecx
movzx edx, byte [ebp - 0x24]
or eax, edx
movzx ecx, word [ebp - 0x30]
movzx edx, word [ebp - 0x30]
sub edx, 0x237f
movzx esi, byte [ebp - 0x30]
sub edx, esi
add edx, dword [ebp - 0x38]
and ecx, edx
or eax, ecx
or eax, dword [ebp - 8]
mov dword [ebp - 0x14], eax
jmp 0x412b79
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x24]
add eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
movzx ecx, word [ebp - 0x38]
add eax, ecx
and eax, dword [ebp - 0x1c]
or eax, dword [ebp - 0x14]
or eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x38]
or eax, edx
or eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 0x10]
or eax, ecx
mov dword [ebp - 0x2c], eax
jmp 0x412b79
movzx edx, byte [ebp - 4]
and edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 8]
lea eax, [ecx + eax - 0x3654]
and edx, eax
movzx ecx, word [ebp - 0x38]
imul ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
sub eax, ecx
movzx ecx, word [ebp - 8]
add ecx, dword [ebp - 0x18]
and eax, ecx
or edx, eax
mov dword [ebp - 0x14], edx
jmp 0x412b79
mov edx, dword [ebp - 0x3c]
and edx, 0
movzx eax, word [ebp - 0x10]
add eax, 0xada
sub eax, dword [ebp - 0x20]
sub eax, dword [ebp - 4]
add eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x38]
add ecx, 0x4cae
and eax, ecx
or edx, eax
mov dword [ebp - 0x2c], edx
jmp 0x412b79
mov edx, dword [ebp - 0x28]
and edx, 0x286f
and edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x38]
or edx, eax
movzx ecx, word [ebp - 0x2c]
add ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
or edx, ecx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x2c]
or edx, eax
movzx ecx, word [ebp - 0x18]
or edx, ecx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
or edx, eax
or edx, dword [ebp - 0x3c]
mov word [ebp - 0x30], dx
jmp 0x412b79
imul edx, dword [ebp - 0x38], 0
add edx, 0x270e
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc]
and edx, eax
or edx, 0x1e67
movzx ecx, word [ebp - 0x24]
imul ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 4]
and ecx, dword [ebp - 0x1c]
or edx, ecx
movzx ecx, word [ebp - 0x38]
xor eax, eax
sar eax, cl
or edx, eax
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x44], 0x75a438
mov ecx, dword [ebp - 0x1c]
add ecx, 0x348
or ecx, dword [ebp - 0x30]
movzx edx, byte [ebp - 0x18]
add edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
lea edx, [edx + eax - 0xd9b]
or ecx, edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x38]
or ecx, eax
or ecx, 0x1603
mov byte [ebp - 0x3c], cl
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
and edx, dword [ebp - 0x2c]
and edx, 0x4e15
or ecx, edx
movzx eax, byte [ebp - 0x3c]
mov edx, dword [ebp - 0x20]
sub edx, eax
sub edx, dword [ebp - 0x1c]
or ecx, edx
xor eax, eax
sub eax, dword [ebp - 0x28]
mov edx, dword [ebp - 4]
lea eax, [eax + edx - 0x4242]
or ecx, eax
mov dword [ebp - 0x14], ecx
mov ecx, 0x1591
sub ecx, dword [ebp - 4]
or ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x10]
movzx eax, word [ebp - 0x1c]
lea edx, [edx + eax - 0x4b01]
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1c]
add eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x18]
and edx, eax
or ecx, edx
mov dword [ebp - 0x38], ecx
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp + 8]
mov dword [eax + edx + 0x60], ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x38]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov dword [ebp - 0x18], eax
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp + 0xc]
mov dword [ecx + eax + 0x60], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x30]
or eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x14]
or eax, ecx
movzx edx, byte [ebp - 0x10]
sub edx, dword [ebp - 0x30]
or eax, edx
imul ecx, dword [ebp - 0x34], 0
or eax, ecx
mov dword [ebp - 0x28], eax
mov edx, 4
shl edx, 1
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp + 0x10]
mov dword [eax + edx + 0x60], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x2c]
movzx eax, word [ebp - 0x18]
xor ecx, ecx
sub ecx, eax
add ecx, 0x3401
or edx, ecx
movzx eax, word [ebp - 0x3c]
add eax, dword [ebp - 0x3c]
or edx, eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
sub eax, 0x3ff2
and ecx, eax
or edx, ecx
or edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x34]
movzx edx, byte [ebp - 0x14]
sub ecx, edx
movzx eax, word [ebp - 0x1c]
sub ecx, eax
mov edx, 0x78c3
sub edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x28]
add edx, dword [ebp - 8]
movzx eax, word [ebp - 0x1c]
sub edx, eax
sub edx, dword [ebp - 0x1c]
and ecx, edx
or ecx, 0x253a
mov dword [ebp - 0x20], ecx
call fcn.0040e020
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x24]
je 0x412d29
cmp dword [ebp - 0x20], 0
je 0x413607
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 8]
xor eax, eax
sub eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
movzx ecx, byte [ebp - 0xc]
add eax, ecx
and eax, 0
or edx, eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 8]
movzx ecx, byte [ebp - 4]
add eax, ecx
or edx, eax
or edx, dword [ebp - 0x10]
or edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
movzx edx, word [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
lea edx, [edx + eax - 0x2b73]
movzx ecx, word [ebp - 0x38]
shr edx, cl
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x34]
lea eax, [ecx + eax + 0x4033]
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 4]
or edx, eax
imul ecx, dword [ebp - 0x1c], 0x3c1f
or edx, ecx
mov dword [ebp - 0x14], edx
imul edx, dword [ebp - 0x1c], 0x4ac5
movzx eax, word [ebp - 0x2c]
movzx ecx, byte [ebp - 0x28]
imul ecx, ecx, 0x11a7
sub eax, ecx
and edx, eax
movzx eax, word [ebp - 0x1c]
and edx, eax
movzx ecx, byte [ebp - 0x20]
and edx, ecx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x24]
and eax, 0
or edx, eax
movzx ecx, byte [ebp - 0x38]
xor eax, eax
sub eax, ecx
sub eax, dword [ebp - 0x30]
and eax, dword [ebp - 0xc]
or edx, eax
mov dword [ebp - 0x14], edx
movzx ecx, byte [ebp - 4]
xor edx, edx
sub edx, dword [ebp - 0x10]
or ecx, edx
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
lea eax, [edx + eax + 0x14c6]
sub eax, dword [ebp - 8]
and eax, dword [ebp - 0x14]
or ecx, eax
movzx edx, word [ebp - 0x20]
add edx, 0x3818
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
and eax, dword [ebp - 0x14]
and eax, 0
xor edx, eax
or ecx, edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_CancelIo]
mov dword [ebp - 0x1c], eax
xor edx, edx
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x38]
movzx eax, byte [ebp - 0x34]
add edx, eax
mov ecx, 0x4450
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
or edx, ecx
movzx eax, byte [ebp - 0x14]
movzx ecx, word [ebp - 0x10]
and eax, ecx
movzx ecx, word [ebp - 0x28]
xor esi, esi
sub esi, ecx
and eax, esi
or edx, eax
or edx, dword [ebp - 0x10]
or edx, dword [ebp - 0x24]
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x2c]
or edx, dword [ebp - 0x2c]
or edx, 0x1423
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
add eax, 0x20b8
or edx, eax
xor ecx, ecx
sub ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
add eax, 0x4226
sub eax, dword [ebp - 0x18]
movzx esi, word [ebp - 0x1c]
sub eax, esi
and ecx, eax
or edx, ecx
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0x34]
jae 0x412ea8
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x1c]
je 0x413120
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x18]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov dword [ebp - 0x10], eax
movzx ecx, byte [ebp - 0x3c]
sub ecx, dword [ebp - 0x1c]
movzx edx, byte [ebp - 0x2c]
movzx eax, word [ebp - 0x30]
add edx, eax
and ecx, edx
and ecx, 0x3e5a
movzx edx, word [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
sub eax, edx
movzx edx, word [ebp - 0x1c]
imul edx, dword [ebp - 4]
lea eax, [eax + edx + 0x23e8]
movzx edx, byte [ebp - 0x3c]
sub eax, edx
and eax, dword [ebp - 0xc]
and eax, dword [ebp - 8]
or ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x34]
or eax, dword [ebp - 0xc]
or eax, 0x1fe5
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 4]
lea ecx, [edx + ecx + 0xd9]
add ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x38]
imul edx, dword [ebp - 0x1c]
and ecx, edx
or eax, ecx
mov dword [ebp - 0x20], eax
movzx eax, byte [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x30]
movzx edx, byte [ebp - 0xc]
imul edx, dword [ebp - 0x18]
sub ecx, edx
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x24]
or eax, ecx
mov ecx, dword [ebp - 0x24]
add ecx, 0x3caa
and ecx, dword [ebp - 8]
or eax, ecx
mov word [ebp - 0x14], ax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 8]
lea ecx, [eax + edx - 0x1947]
and ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 4]
and ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x1c], 0x2d26
add edx, dword [ebp - 0xc]
add eax, edx
add eax, dword [ebp - 8]
and ecx, eax
or ecx, 0xa62
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x4c]
sub edx, 0x18
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0xa5
ja case.0x412fc4.1
mov eax, dword [ebp - 0x4c]
movzx ecx, byte [eax + 0x41ad30]
jmp dword [ecx*4 + 0x41ad1c]
movzx edx, word [ebp - 0x30]
imul edx, dword [ebp - 0x28]
mov eax, 0x1ca1
sub eax, edx
sub eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x14]
shr eax, cl
movzx ecx, word [ebp - 0x30]
sub ecx, dword [ebp - 0x18]
movzx edx, word [ebp - 0x28]
add ecx, dword [ebp - 0x14]
add edx, ecx
and eax, edx
movzx ecx, byte [ebp - 8]
add ecx, dword [ebp - 0x2c]
or eax, ecx
movzx edx, word [ebp - 4]
or eax, edx
mov dword [ebp - 0x10], eax
jmp 0x413112
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x2c]
lea ecx, [eax + ecx - 0x415f]
mov edx, dword [ebp - 0x2c]
shl edx, cl
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x38]
mov ecx, 0x4256
sub ecx, eax
movzx eax, word [ebp - 0x24]
add ecx, eax
movzx eax, word [ebp - 0x34]
lea ecx, [ecx + eax - 0x2ad]
and edx, ecx
movzx eax, word [ebp - 0x3c]
imul eax, dword [ebp - 0x30]
and eax, dword [ebp - 0x18]
or edx, eax
mov dword [ebp - 0xc], edx
jmp 0x413112
movzx ecx, byte [ebp - 0x10]
add ecx, dword [ebp - 0x24]
imul edx, dword [ebp - 0x3c], 0x3a22
add ecx, dword [ebp - 0x14]
add edx, ecx
sub edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x10]
movzx eax, word [ebp - 0x3c]
sub eax, 0x45d2
or edx, eax
or edx, dword [ebp - 0x3c]
or edx, dword [ebp - 0x20]
movzx ecx, word [ebp - 0x34]
or edx, ecx
mov word [ebp - 8], dx
jmp 0x413112
movzx edx, word [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
sub eax, edx
movzx ecx, word [ebp - 0x3c]
sub eax, ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x30], 0
mov esi, dword [ebp - 0x3c]
lea ecx, [esi + ecx - 0x135c]
movzx esi, byte [ebp - 4]
movzx edi, byte [ebp - 0xc]
imul esi, edi
movzx edi, word [ebp - 0x1c]
imul esi, edi
sub ecx, esi
sub ecx, dword [ebp - 0x1c]
and edx, ecx
or eax, edx
mov dword [ebp - 8], eax
jmp 0x413112
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
sub eax, edx
add eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x10]
movzx ecx, word [ebp - 0x14]
sub eax, ecx
add eax, dword [ebp - 0x24]
movzx edx, word [ebp - 0x3c]
add eax, edx
movzx ecx, byte [ebp - 0x34]
or eax, ecx
movzx edx, word [ebp - 0x14]
add edx, dword [ebp - 4]
sub edx, dword [ebp - 0x24]
sub edx, 0x33f6
or eax, edx
mov dword [ebp - 0x38], eax
push str.hfhts
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x2c]
je 0x41339b
imul ecx, dword [ebp - 4], 0x422d
add ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x30]
and ecx, 0x3813
and ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x24]
imul edx, dword [ebp - 0x18]
and ecx, edx
movzx eax, word [ebp - 0x10]
xor edx, edx
sub edx, eax
sub edx, dword [ebp - 0xc]
and ecx, edx
or ecx, dword [ebp - 0x18]
or ecx, 0x2257
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x64]
sub ecx, 0x64
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x64], 0xee
ja case.0x41318a.1
mov edx, dword [ebp - 0x64]
movzx eax, byte [edx + 0x41adf0]
jmp dword [eax*4 + 0x41add8]
movzx edx, byte [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x2c], 0
add eax, ecx
sub eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 4]
shr eax, cl
movzx ecx, word [ebp - 8]
and eax, ecx
and eax, dword [ebp - 4]
or edx, eax
or edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x2c]
add eax, 0x481a
or edx, eax
mov dword [ebp - 0x18], edx
jmp 0x4132db
movzx ecx, byte [ebp - 0x30]
and ecx, 0
mov edx, dword [ebp - 0x14]
and edx, 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x18]
xor edx, eax
or ecx, edx
or ecx, 0x3cf7
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
lea edx, [eax + edx + 0x2412]
or ecx, edx
mov word [ebp - 0x3c], cx
jmp 0x4132db
mov eax, dword [ebp - 0x3c]
sub eax, 0x37fb
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x24]
or eax, ecx
or eax, dword [ebp - 0x34]
xor edx, edx
sub edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x10]
or eax, edx
movzx ecx, word [ebp - 0x20]
or eax, ecx
mov dword [ebp - 0x14], eax
jmp 0x4132db
xor edx, edx
sub edx, dword [ebp - 0x10]
movzx eax, byte [ebp - 8]
add edx, eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x28]
and edx, ecx
or edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 8]
and eax, dword [ebp - 4]
and eax, 0x13705797
or edx, eax
mov dword [ebp - 0x3c], edx
jmp 0x4132db
movzx ecx, word [ebp - 0x30]
movzx edx, word [ebp - 0x20]
imul eax, edx, 0
add ecx, eax
movzx edx, byte [ebp - 0x28]
sub edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x34]
movzx eax, byte [ebp - 0x3c]
add edx, dword [ebp - 0x20]
add eax, edx
and ecx, eax
movzx edx, byte [ebp - 0x24]
add edx, 0xa70
and ecx, edx
movzx eax, word [ebp - 0x14]
mov edx, 0x749f
sub edx, eax
and edx, dword [ebp - 0x14]
or ecx, edx
mov dword [ebp - 4], ecx
jmp 0x4132db
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
lea ecx, [edx + ecx + 0x1cdc]
and eax, ecx
movzx edx, word [ebp - 0x2c]
or eax, edx
or eax, dword [ebp - 0x24]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0xc]
add eax, 0x58fa
movzx ecx, byte [ebp - 8]
sub eax, ecx
add eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x28]
movzx edx, byte [ebp - 0xc]
imul ecx, edx, 0
or eax, ecx
movzx edx, word [ebp - 0x1c]
or eax, edx
movzx ecx, word [ebp - 0x20]
imul ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x28]
or eax, ecx
mov dword [ebp - 0x34], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0x34], eax
push 0
push 0
push 0
push 0
push 0x12c
push 4
push 3
push str.ihnl
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x28]
and edx, dword [ebp - 4]
or edx, dword [ebp - 8]
or edx, dword [ebp - 4]
movzx eax, word [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
imul eax, dword [ebp - 0x10], 0
lea ecx, [ecx + eax - 0x4754]
or edx, ecx
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0xc]
or edx, eax
mov dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x20]
and ecx, 0
or ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x18]
sub edx, eax
or ecx, edx
or ecx, dword [ebp - 4]
or ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
add edx, 0x7b7
sub edx, dword [ebp - 0x30]
or ecx, edx
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x38], 0x3cab
jb 0x4134f3
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x30]
jne 0x4134f3
push 0
lea ecx, [ebp - 0x38]
push ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x3c]
sub eax, ecx
add eax, dword [ebp - 4]
movzx ecx, word [ebp - 0x24]
sub eax, ecx
add eax, dword [ebp - 4]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x34]
lea eax, [eax + ecx - 0x4680]
sub eax, dword [ebp - 0x3c]
or edx, eax
mov dword [ebp - 0x2c], edx
movzx ecx, word [ebp - 8]
movzx edx, byte [ebp - 0x30]
sub ecx, edx
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
lea eax, [edx + eax - 0x77b5]
mov edx, dword [ebp - 0x30]
imul edx, dword [ebp - 8]
sub eax, edx
and ecx, eax
mov eax, dword [ebp - 0x18]
and eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x24]
and eax, dword [ebp - 8]
and eax, 0x1bb5
and eax, 0x4d0d
or ecx, eax
mov dword [ebp - 0x2c], ecx
push str.sfnllhbk
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x38]
and edx, 0xffffdb61
or edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x38]
mov eax, 0x2292
sar eax, cl
mov ecx, dword [ebp - 0x10]
sar eax, cl
and eax, dword [ebp - 0x3c]
or edx, eax
or edx, dword [ebp - 0x2c]
or edx, dword [ebp - 0x24]
mov dword [ebp - 4], edx
movzx ecx, word [ebp - 8]
sub ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
add edx, 0x140c
and edx, dword [ebp - 0x28]
movzx eax, byte [ebp - 0x2c]
and edx, eax
and edx, 0x11a2
or ecx, edx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x38]
add edx, 0x484
or ecx, edx
mov dword [ebp - 0x3c], ecx
movzx eax, word [ebp - 0x14]
add eax, 0x1762
movzx ecx, word [ebp - 0x20]
add ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0xc]
movzx edx, word [ebp - 0xc]
add ecx, edx
and eax, ecx
imul ecx, dword [ebp - 0x3c], 0x881
movzx edx, byte [ebp - 0x38]
lea ecx, [ecx + edx + 0x48f4]
and eax, ecx
movzx edx, byte [ebp - 8]
movzx ecx, word [ebp - 0x34]
sub edx, ecx
movzx ecx, word [ebp - 0x20]
add edx, ecx
or eax, edx
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x3c]
imul edx, dword [ebp - 0x10]
movzx eax, byte [ebp - 0x14]
sub eax, dword [ebp - 0x18]
movzx ecx, byte [ebp - 0xc]
sub eax, ecx
or edx, eax
or edx, dword [ebp - 0x2c]
movzx eax, byte [ebp - 0x14]
add eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
shl eax, cl
or edx, eax
movzx ecx, word [ebp - 0x18]
add ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0xc]
or edx, ecx
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
shl edx, cl
mov ecx, 0xfa7
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
sub ecx, 0x3c44
movzx eax, word [ebp - 0x34]
sub ecx, eax
sub ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 4]
shl edx, cl
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x24]
and edx, ecx
and edx, dword [ebp - 0x14]
mov dword [ebp - 0x3c], edx
movzx edx, word [ebp - 0x28]
mov eax, dword [ebp - 0x18]
lea ecx, [edx + eax - 0x2bad]
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
and edx, dword [ebp - 0x18]
or ecx, edx
movzx eax, byte [ebp - 0x30]
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x34]
or ecx, eax
mov dword [ebp - 4], ecx
movzx ecx, word [ebp - 0x20]
imul edx, dword [ebp - 0xc], 0
add edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
add edx, dword [ebp - 8]
movzx eax, byte [ebp - 0x3c]
mov esi, 0x2cf8
sub esi, eax
sub esi, dword [ebp - 4]
movzx eax, byte [ebp - 0x20]
add esi, eax
sub esi, dword [ebp - 0x28]
sub esi, dword [ebp - 0x20]
add esi, 0x3af
and edx, esi
or ecx, edx
mov dword [ebp - 0x2c], ecx
imul ecx, dword [ebp - 4], 0x1706
add ecx, dword [ebp - 0x3c]
or ecx, dword [ebp - 0x24]
movzx edx, byte [ebp - 0x30]
and edx, dword [ebp - 0x1c]
or ecx, edx
xor eax, eax
sub eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0xc]
movzx esi, byte [ebp - 0x30]
add edx, dword [ebp - 0x14]
add esi, edx
and eax, esi
or ecx, eax
mov dword [ebp - 0x34], ecx
jmp 0x41363c
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x38]
mov ecx, 0x4897
sub ecx, dword [ebp - 0x38]
and ecx, 0
or eax, ecx
mov edx, 0x1c8b
or eax, edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x30]
lea ecx, [edx + ecx + 0x43bf]
movzx edx, byte [ebp - 0x18]
add ecx, edx
or eax, ecx
or eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
movzx eax, word [ebp - 0x38]
and eax, dword [ebp - 0x2c]
or eax, dword [ebp - 0x24]
movzx ecx, word [ebp - 0x3c]
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x28]
movzx edx, word [ebp - 0x3c]
and ecx, edx
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x14]
and ecx, edx
or eax, ecx
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0xc]
or eax, ecx
mov dword [ebp - 0x10], eax
push str.thtnnttknilr
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x34]
sub edx, 0x2e1
sub edx, dword [ebp - 0x20]
movzx eax, word [ebp - 0x28]
movzx ecx, byte [ebp - 0x34]
add eax, ecx
or edx, eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x20]
sub eax, dword [ebp - 8]
or edx, eax
movzx ecx, word [ebp - 0x14]
imul eax, ecx, 0x2234
add eax, 0x11bd
or edx, eax
mov word [ebp - 0x1c], dx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x54]
sub edx, 0x14
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 0x60
ja case.0x4136e7.1
mov eax, dword [ebp - 0x54]
movzx ecx, byte [eax + 0x41aef4]
jmp dword [ecx*4 + 0x41aee0]
movzx edx, word [ebp - 0x28]
mov eax, dword [ebp - 0x38]
and eax, dword [ebp - 0x1c]
or edx, eax
movzx ecx, byte [ebp - 0x28]
and ecx, dword [ebp - 0x28]
imul eax, dword [ebp - 0x30], 0x24fc
add eax, dword [ebp - 4]
and ecx, eax
and ecx, dword [ebp - 0x18]
and ecx, dword [ebp - 0x2c]
or edx, ecx
mov ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x18]
and ecx, eax
or edx, ecx
mov byte [ebp - 0x14], dl
jmp 0x413816
movzx ecx, word [ebp - 0x2c]
xor edx, edx
sub edx, ecx
imul eax, dword [ebp - 0x20], 0
movzx ecx, word [ebp - 0x1c]
sub eax, ecx
sub eax, dword [ebp - 0xc]
imul ecx, dword [ebp - 0xc], 0x37d8
sub eax, ecx
and edx, eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax + 0x3c5d]
or edx, eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x2c]
or edx, ecx
mov dword [ebp - 0x30], edx
jmp 0x413816
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 4]
add edx, dword [ebp - 8]
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x18]
and edx, eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x2c]
movzx eax, byte [ebp - 0xc]
imul eax, dword [ebp - 0x30]
sub ecx, eax
add ecx, 0x421d
sub ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 4]
movzx eax, byte [ebp - 0x2c]
sub ecx, eax
and edx, ecx
mov dword [ebp - 0x1c], edx
jmp 0x413816
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x18]
and ecx, edx
movzx eax, byte [ebp - 0x3c]
mov edx, dword [ebp - 0x18]
sub edx, eax
and ecx, edx
or ecx, 0x2087
or ecx, dword [ebp - 0x28]
movzx eax, word [ebp - 8]
add eax, dword [ebp - 0x34]
movzx edx, word [ebp - 0x30]
sub eax, edx
or ecx, eax
mov dword [ebp - 0xc], ecx
jmp 0x413816
mov eax, dword [ebp - 0x30]
and eax, 0
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 8]
and eax, ecx
and eax, 0x347a
movzx edx, word [ebp - 0xc]
mov ecx, dword [ebp - 0x24]
sub ecx, edx
sub ecx, dword [ebp - 4]
and eax, ecx
movzx edx, byte [ebp - 8]
sub edx, 0x1b67
or eax, edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x74]
sub ecx, 0x3a
mov dword [ebp - 0x74], ecx
cmp dword [ebp - 0x74], 0x6c
ja case.0x413839.1
mov edx, dword [ebp - 0x74]
movzx eax, byte [edx + 0x41af70]
jmp dword [eax*4 + 0x41af58]
movzx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x24]
sub edx, ecx
sub edx, dword [ebp - 4]
movzx eax, word [ebp - 4]
add eax, 0x1ada
sub eax, dword [ebp - 8]
and eax, dword [ebp - 0x20]
movzx ecx, byte [ebp - 0x28]
add ecx, dword [ebp - 0x2c]
and eax, ecx
and eax, dword [ebp - 0x24]
or edx, eax
movzx eax, byte [ebp - 0x38]
add eax, dword [ebp - 4]
or edx, eax
mov dword [ebp - 0x14], edx
jmp 0x4139b8
mov ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0x2c]
movzx edx, byte [ebp - 8]
mov eax, 0x34ba
sub eax, edx
and ecx, eax
or ecx, 0x1e10
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x14]
movzx esi, byte [ebp - 0x28]
sub eax, esi
and edx, eax
or ecx, edx
movzx edx, byte [ebp - 0x34]
add edx, dword [ebp - 0x14]
or ecx, edx
mov dword [ebp - 0x10], ecx
jmp 0x4139b8
movzx eax, word [ebp - 0x28]
sub eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x10]
xor ecx, ecx
sub ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0x24]
and ecx, 0x42a4
or eax, ecx
mov edx, dword [ebp - 0x3c]
and edx, 0x44a8
and edx, 0x2212
or eax, edx
movzx ecx, byte [ebp - 0x38]
mov edx, 0x4702
sub edx, ecx
or eax, edx
mov word [ebp - 8], ax
jmp 0x4139b8
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x20]
movzx ecx, word [ebp - 0x10]
mov edx, dword [ebp - 0x38]
add edx, 0x43bf
sub edx, dword [ebp - 4]
and ecx, edx
or eax, ecx
movzx ecx, word [ebp - 0x14]
add ecx, 0x3c4d
sub ecx, dword [ebp - 0xc]
or eax, ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x2c]
and edx, dword [ebp - 0x20]
or eax, edx
movzx ecx, byte [ebp - 4]
or eax, ecx
or eax, dword [ebp - 8]
mov byte [ebp - 0x3c], al
jmp 0x4139b8
movzx edx, byte [ebp - 0x3c]
and edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x2c]
movzx ecx, byte [ebp - 0x10]
add eax, dword [ebp - 8]
add ecx, eax
and ecx, dword [ebp - 0x28]
or edx, ecx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax + 0x2c86]
mov ecx, dword [ebp - 0x3c]
lea eax, [eax + ecx + 0x1ae5]
mov ecx, dword [ebp - 0xc]
shr eax, cl
or edx, eax
or edx, 0x40b2
mov dword [ebp - 0x30], edx
jmp 0x4139b8
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
movzx eax, word [ebp - 0x14]
and edx, eax
movzx eax, byte [ebp - 0x20]
add eax, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x18], 0
movzx esi, byte [ebp - 0x18]
lea ecx, [ecx + esi + 0x484f]
shl eax, cl
or edx, eax
xor eax, eax
sub eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x14]
or edx, eax
or edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov ecx, 0x42ea
sub ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x34]
movzx edx, byte [ebp - 0x24]
lea eax, [ecx + edx + 0x52a4]
sub eax, dword [ebp - 0x34]
or eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 4]
add ecx, 0x61db
or eax, ecx
movzx edx, word [ebp - 0x2c]
imul edx, dword [ebp - 0x3c]
or eax, edx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x14]
mov ecx, 0xfffff9b4
sub ecx, dword [ebp - 0x38]
add ecx, 0x28e
or eax, ecx
or eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x20]
add edx, 0x798
and edx, dword [ebp - 0x38]
or eax, edx
mov ecx, dword [ebp - 0x34]
and ecx, 0x608
or eax, ecx
mov dword [ebp - 0x2c], eax
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0xc]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x34]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x30]
je 0x414a4b
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x34]
jbe 0x414a4b
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x20]
jne 0x413a6b
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x14]
jne 0x413c2a
mov edx, dword [ebp - 0x34]
add edx, 0x6a4d
sub edx, dword [ebp - 4]
movzx eax, word [ebp - 0x10]
and edx, eax
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0xc]
and edx, ecx
movzx eax, word [ebp - 0x3c]
add eax, dword [ebp - 0x2c]
xor ecx, ecx
sub ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x20]
shl eax, cl
and edx, eax
movzx ecx, byte [ebp - 0x34]
and edx, ecx
or edx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], edx
movzx edx, word [ebp - 8]
imul edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x14]
movzx eax, word [ebp - 0x38]
add ecx, eax
mov eax, dword [ebp - 0x38]
shl eax, cl
and eax, dword [ebp - 0x28]
movzx esi, byte [ebp - 0x10]
add esi, dword [ebp - 0x34]
add esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
shr esi, cl
and eax, esi
or edx, eax
mov dword [ebp - 4], edx
movzx ecx, byte [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
lea eax, [ecx + edx - 0x797]
movzx ecx, byte [ebp - 8]
sub eax, ecx
sub eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x18]
movzx edx, byte [ebp - 0x3c]
add eax, edx
mov ecx, dword [ebp - 4]
add ecx, 0xc98
sub ecx, dword [ebp - 0x14]
movzx edx, byte [ebp - 0x3c]
mov esi, 0x39a4
sub esi, edx
and ecx, esi
or eax, ecx
movzx ecx, byte [ebp - 0x2c]
or eax, ecx
mov byte [ebp - 0x10], al
mov dword [ebp - 8], 0
jmp 0x413b33
mov edx, dword [ebp - 8]
add edx, 4
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 4
jae 0x413bbe
push str.dvrlslrwapegtidieyts
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0xc], eax
imul edx, dword [ebp - 0x38], 0x3b3f
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
or edx, eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
sub eax, ecx
movzx ecx, word [ebp - 0xc]
sub eax, ecx
and eax, dword [ebp - 0x30]
or edx, eax
mov dword [ebp - 0x28], edx
movzx edx, word [ebp - 0x24]
mov eax, dword [ebp - 0x24]
sub eax, edx
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x14]
and eax, ecx
imul edx, dword [ebp - 0x34], 0
or eax, edx
or eax, dword [ebp - 0x28]
or eax, dword [ebp - 0x10]
movzx ecx, byte [ebp - 0x3c]
sub ecx, dword [ebp - 0x28]
sub ecx, 0x4c48
movzx edx, word [ebp - 0x30]
and ecx, edx
or eax, ecx
mov dword [ebp - 0x2c], eax
jmp 0x413b2a
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x38], 0x235e
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x34]
and ecx, edx
mov eax, 0x419f
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x20]
or ecx, eax
mov byte [ebp - 0x28], cl
mov ecx, dword [ebp - 0x28]
and ecx, dword [ebp - 0x30]
or ecx, dword [ebp - 0x2c]
movzx edx, word [ebp - 4]
add edx, dword [ebp - 0x1c]
or ecx, edx
mov eax, dword [ebp - 4]
add eax, 0x1ae0bed
movzx edx, word [ebp - 0x10]
sub eax, edx
or ecx, eax
mov eax, dword [ebp - 0xc]
add eax, 0x4baa
sub eax, dword [ebp - 0x28]
or ecx, eax
or ecx, dword [ebp - 0x1c]
mov word [ebp - 0x20], cx
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x38]
movzx edx, word [ebp - 0x34]
add ecx, edx
or ecx, 0x4ba7
movzx eax, byte [ebp - 0x10]
sub eax, 0x4295
sub eax, dword [ebp - 0x1c]
or ecx, eax
movzx edx, byte [ebp - 4]
mov eax, dword [ebp - 0x18]
sub eax, edx
sub eax, 0x2efc
movzx edx, byte [ebp - 0x28]
sub eax, edx
or ecx, eax
or ecx, dword [ebp - 0x1c]
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x20]
and eax, ecx
or eax, dword [ebp - 0x30]
or eax, dword [ebp - 4]
mov edx, dword [ebp - 0x38]
and edx, 0
or eax, edx
mov ecx, 0x37d8
sub ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x2c]
or eax, ecx
or eax, 0x3465
mov byte [ebp - 0x34], al
cmp dword [ebp - 0x2c], 0xfb3
jbe 0x413caf
mov edx, dword [ebp - 0x1c]
cmp edx, dword [ebp - 4]
jne 0x413f03
imul eax, dword [ebp - 0x3c], 0x2397
add eax, 0x7e6
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x20]
movzx esi, byte [ebp - 4]
add edx, esi
and ecx, edx
and ecx, dword [ebp - 0xc]
or eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
sub edx, eax
movzx eax, byte [ebp - 8]
sub edx, eax
and edx, dword [ebp - 0x18]
movzx eax, byte [ebp - 0x2c]
movzx ecx, word [ebp - 0x14]
xor esi, esi
sub esi, ecx
mov ecx, esi
sar eax, cl
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x10]
and eax, ecx
xor edx, eax
mov dword [ebp - 4], edx
xor edx, edx
sub edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x38]
or edx, 0xc59
or edx, dword [ebp - 8]
movzx eax, byte [ebp - 0x14]
and eax, 0
or edx, eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x3c]
add ecx, 0x46b5
or edx, ecx
or edx, 0x4cf6
mov word [ebp - 0xc], dx
imul edx, dword [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x18]
add edx, dword [ebp - 8]
add eax, edx
sub eax, dword [ebp - 0x28]
or eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x34]
and ecx, 0
imul edx, dword [ebp - 0x28], 0x2278
and ecx, edx
or eax, ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0xd86
mov eax, 0x2999
sub eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x28]
or eax, dword [ebp - 0x10]
or eax, dword [ebp - 0x24]
xor ecx, ecx
sub ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0xc]
movzx edx, byte [ebp - 4]
mov esi, dword [ebp - 0xc]
sub esi, edx
and ecx, esi
and ecx, dword [ebp - 0xc]
or eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x2c]
and eax, 0x2ca0
movzx ecx, word [ebp - 0x14]
mov edx, dword [ebp - 0x34]
lea ecx, [edx + ecx + 0x2b3]
movzx edx, word [ebp - 0x1c]
sub ecx, edx
add ecx, 0x3524
and ecx, dword [ebp - 0x38]
or eax, ecx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x30]
add eax, 0x1f
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x2c]
or ecx, edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x3c]
movzx edx, byte [ebp - 4]
sub eax, edx
movzx edx, byte [ebp - 0xc]
add eax, edx
sub eax, dword [ebp - 4]
or ecx, eax
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x14]
or ecx, eax
mov byte [ebp - 0x38], cl
mov ecx, dword [ebp - 0x10]
and ecx, dword [ebp - 0x20]
xor edx, edx
sub edx, dword [ebp - 0xc]
and edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x34]
and edx, eax
or ecx, edx
movzx edx, word [ebp - 0x34]
add edx, 0x13c7
and edx, dword [ebp - 0x1c]
or ecx, edx
mov word [ebp - 4], cx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0xc]
movzx edx, byte [ebp - 0x10]
add ecx, edx
movzx edx, byte [ebp - 8]
sub ecx, edx
sub ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x18]
and eax, ecx
mov byte [ebp - 0x28], al
movzx eax, byte [ebp - 0x28]
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
lea ecx, [edx + ecx - 0x2e7f]
sub ecx, dword [ebp - 0x18]
add ecx, 0x4009
sub ecx, dword [ebp - 0x34]
and eax, ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x28]
and eax, edx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x30], 0xdc4
jb 0x413db7
push str.ubocrorlkyswnrdni
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x14], eax
movzx eax, word [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x3b66
sub ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 4]
and eax, ecx
or eax, dword [ebp - 0x38]
or eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x2c]
add edx, dword [ebp - 4]
movzx ecx, word [ebp - 0x3c]
add ecx, dword [ebp - 0x38]
and edx, ecx
xor edx, dword [ebp - 0x14]
or eax, edx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0
jmp 0x413f15
mov edx, dword [ebp - 0x10]
add edx, 0x10
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], 0x20
jae 0x4140fc
mov eax, dword [ebp - 0x14]
add eax, 0x4168
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x34]
sub eax, ecx
mov edx, dword [ebp - 4]
lea eax, [eax + edx - 0x2a6b]
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x30]
and eax, ecx
and eax, dword [ebp - 0x30]
and eax, 0
movzx edx, word [ebp - 8]
mov ecx, dword [ebp - 0x18]
lea edx, [ecx + edx - 0x4c0c]
or eax, edx
mov dword [ebp - 0x38], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0x20], eax
movzx eax, byte [ebp - 0x30]
cmp dword [ebp - 0x20], eax
jb 0x413ff5
movzx ecx, byte [ebp - 0x34]
cmp dword [ebp - 0x38], ecx
ja 0x413ff5
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 4]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 0x28]
movzx ecx, word [ebp - 4]
sub eax, ecx
mov ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xc]
and eax, ecx
and eax, dword [ebp - 0x20]
or edx, eax
mov dword [ebp - 0x24], edx
push 0
lea edx, [ebp - 0x14]
push edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
and eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x38]
imul edx, dword [ebp - 8]
sub ecx, edx
movzx edx, byte [ebp - 0x14]
add ecx, edx
xor edx, edx
sub edx, dword [ebp - 0x1c]
add edx, 0x4563
and ecx, edx
or eax, ecx
movzx ecx, byte [ebp - 0x34]
or eax, ecx
movzx edx, byte [ebp - 0x1c]
or eax, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
movzx ecx, word [ebp - 0x14]
add eax, dword [ebp - 0x2c]
lea edx, [ecx + eax - 0x4baf]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x28], 0
add eax, ecx
imul ecx, dword [ebp - 0x18], 0x15e2
sub eax, ecx
movzx ecx, word [ebp - 8]
add eax, ecx
or edx, eax
mov dword [ebp - 0x34], edx
movzx edx, word [ebp - 0xc]
cmp dword [ebp - 8], edx
jae 0x41403a
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x34]
jb 0x4140aa
movzx ecx, byte [ebp - 0x18]
mov edx, dword [ebp - 8]
xor edx, 0xfffff055
or ecx, edx
movzx eax, word [ebp - 0x34]
and eax, dword [ebp - 0xc]
or ecx, eax
imul edx, dword [ebp - 0x28], 0
or ecx, edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x28]
movzx edx, byte [ebp - 0xc]
add eax, edx
or ecx, eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x18]
or ecx, eax
mov byte [ebp - 0x20], cl
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_CancelIo]
mov dword [ebp - 0x34], eax
mov edx, 0x2765
sub edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x18]
add edx, dword [ebp - 4]
add edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x38]
movzx eax, word [ebp - 0x28]
and edx, eax
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], edx
movzx ecx, byte [ebp - 0x24]
imul edx, ecx, 0
add edx, dword [ebp - 8]
add edx, dword [ebp - 0x24]
add edx, dword [ebp - 4]
sub edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x30]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x18], 0xa89
and ecx, dword [ebp - 0x2c]
xor ecx, 0x1c3
or eax, ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x24]
or eax, edx
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x1c]
or eax, ecx
mov byte [ebp - 0x30], al
jmp 0x413f0c
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x1c]
xor eax, eax
sub eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0xc]
lea eax, [eax + ecx - 0x1fc9]
and edx, eax
and edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x24]
movzx eax, word [ebp - 0x18]
and ecx, eax
or edx, ecx
or edx, 0x4030
movzx ecx, word [ebp - 0x24]
or edx, ecx
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x1c]
mov eax, 0x36a9
sub eax, dword [ebp - 0xc]
and edx, eax
or edx, 0x42ab
mov ecx, dword [ebp - 0x10]
and ecx, 0x1aa4
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x30]
and ecx, eax
or edx, ecx
mov dword [ebp - 0x38], edx
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x10]
jne 0x41425f
cmp dword [ebp - 8], 0
jne 0x41425f
movzx edx, word [ebp - 0x30]
sub edx, dword [ebp - 4]
movzx eax, word [ebp - 0x38]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x30]
movzx ecx, word [ebp - 0x34]
sub eax, ecx
and eax, dword [ebp - 0x24]
and eax, 0
or edx, eax
movzx eax, byte [ebp - 0x38]
add eax, dword [ebp - 0x20]
or edx, eax
mov dword [ebp - 0x3c], edx
movzx ecx, word [ebp - 0x30]
add ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
lea eax, [ecx + edx - 0x497]
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
lea ecx, [ecx + edx - 0x1e3e]
mov edx, dword [ebp - 4]
add edx, dword [ebp - 8]
and ecx, edx
or eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x20]
movzx ecx, word [ebp - 0x38]
sub eax, ecx
sub eax, dword [ebp - 0x10]
add eax, dword [ebp - 8]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x30]
and edx, 0
xor eax, edx
or eax, 0x20d8
mov word [ebp - 0xc], ax
push str.eomfcktasn
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x38], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 8], eax
push str.gretrdwatwusi
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x3c], eax
push str.teomes
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 8]
add ecx, 0x4826
movzx edx, byte [ebp - 0x38]
sub edx, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x38]
lea eax, [esi + eax + 0x4848]
and edx, eax
or ecx, edx
mov word [ebp - 0x1c], cx
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x1c]
movzx edx, word [ebp - 0x34]
add ecx, dword [ebp - 0x3c]
add edx, ecx
sub edx, dword [ebp - 0x10]
sub edx, 0x18e9
imul eax, dword [ebp - 0x24], 0x1190
and edx, eax
or edx, dword [ebp - 0x34]
or edx, dword [ebp - 0x1c]
mov word [ebp - 0x38], dx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x2c]
or edx, dword [ebp - 0x24]
movzx eax, byte [ebp - 0x38]
and eax, dword [ebp - 0x14]
movzx ecx, byte [ebp - 0x20]
add ecx, dword [ebp - 0xc]
and eax, ecx
or edx, eax
xor eax, eax
sub eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0xc]
shr eax, cl
and eax, dword [ebp - 0xc]
or edx, eax
mov dword [ebp - 0x3c], edx
movzx ecx, word [ebp - 0x14]
add ecx, dword [ebp - 0x14]
movzx edx, byte [ebp - 0x30]
imul edx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x28]
add edx, ecx
imul eax, dword [ebp - 0x24], 0
add eax, dword [ebp - 4]
movzx ecx, word [ebp - 0x18]
sub eax, ecx
add eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x30]
add eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x10]
or edx, eax
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 0x20]
jne 0x41469e
cmp dword [ebp - 0x38], 0
jne 0x41469e
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x36
je 0x4143d2
cmp dword [ebp - 0x7c], 0x8d
je 0x4143a1
cmp dword [ebp - 0x7c], 0xb7
je 0x414366
jmp 0x41440e
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x1c]
add edx, 0x1b89
movzx eax, byte [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x24]
and eax, 0
mov esi, dword [ebp - 0x38]
mov ecx, dword [ebp - 0xc]
shr esi, cl
and eax, esi
or edx, eax
movzx ecx, word [ebp - 0xc]
imul eax, ecx, 0x19e0
add eax, dword [ebp - 0x24]
or edx, eax
mov dword [ebp - 0x30], edx
jmp 0x414448
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x28]
and ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x2c]
sub edx, 0x34d6
sub edx, dword [ebp - 0x14]
movzx eax, word [ebp - 0x14]
movzx esi, byte [ebp - 0x38]
add eax, esi
sub eax, dword [ebp - 0x14]
and edx, eax
or ecx, edx
movzx edx, byte [ebp - 0x3c]
or ecx, edx
mov dword [ebp - 8], ecx
jmp 0x414448
xor eax, eax
sub eax, dword [ebp - 8]
or eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x14]
or eax, ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x24]
or eax, edx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x10]
movzx ecx, byte [ebp - 0x3c]
imul ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 8]
sub esi, ecx
mov ecx, esi
shl edx, cl
or eax, edx
mov dword [ebp - 0x30], eax
jmp 0x414448
xor edx, edx
sub edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x10]
and edx, eax
movzx ecx, byte [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
sub eax, ecx
movzx ecx, byte [ebp - 0x3c]
sub eax, ecx
and edx, eax
or edx, dword [ebp - 0x18]
movzx eax, byte [ebp - 0x24]
add eax, dword [ebp - 0xc]
or edx, eax
or edx, dword [ebp - 0x30]
mov dword [ebp - 0x2c], edx
movzx ecx, byte [ebp - 4]
imul ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x30]
and ecx, dword [ebp - 0x38]
or ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
imul edx, dword [ebp - 0x34]
or ecx, edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x2c]
and eax, 0x22b1
and eax, dword [ebp - 0x38]
or ecx, eax
mov word [ebp - 0x18], cx
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 8]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x5c]
sub eax, 0x40
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xd2
ja case.0x4144ba.1
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + 0x41aff4]
jmp dword [edx*4 + 0x41afe0]
movzx eax, byte [ebp - 0x10]
movzx ecx, byte [ebp - 0x20]
sub eax, ecx
movzx edx, byte [ebp - 0x30]
add edx, dword [ebp - 0x10]
add edx, dword [ebp - 4]
and edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x20]
and edx, ecx
and edx, dword [ebp - 4]
or eax, edx
or eax, dword [ebp - 8]
movzx edx, word [ebp - 0x20]
add edx, 0x47f5
or eax, edx
or eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
jmp 0x4145fc
movzx eax, byte [ebp - 0x10]
and eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x38]
movzx edx, word [ebp - 0xc]
imul edx, dword [ebp - 0x3c]
add ecx, edx
or eax, ecx
xor ecx, ecx
sub ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x10]
or eax, ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x28]
or eax, edx
mov dword [ebp - 0x34], eax
jmp 0x4145fc
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x30]
movzx ecx, byte [ebp - 0x10]
sub eax, ecx
movzx edx, byte [ebp - 0xc]
or eax, edx
movzx ecx, byte [ebp - 0x28]
imul ecx, dword [ebp - 0x34]
movzx edx, word [ebp - 4]
add ecx, edx
movzx edx, byte [ebp - 0x34]
add ecx, dword [ebp - 0x34]
add edx, ecx
or eax, edx
movzx ecx, word [ebp - 0x1c]
add ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x30]
or eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x4145fc
movzx edx, byte [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0xc]
or edx, eax
mov ecx, dword [ebp - 4]
and ecx, 0x368d
or edx, ecx
movzx eax, byte [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
shl eax, cl
or edx, eax
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x18]
or edx, ecx
mov eax, 0xfb4
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x18]
and eax, 0
or edx, eax
mov dword [ebp - 0x10], edx
jmp 0x4145fc
movzx ecx, byte [ebp - 0x10]
sub ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
sub edx, 0xa90
and ecx, edx
movzx eax, word [ebp - 0x10]
add eax, 0x9cd
and ecx, eax
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2c]
and ecx, edx
mov eax, dword [ebp - 0x2c]
add eax, 0x2a0b
sub eax, dword [ebp - 0x10]
or ecx, eax
or ecx, dword [ebp - 0x3c]
or ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x34]
and ecx, dword [ebp - 8]
mov edx, 0x46d7
sub edx, dword [ebp - 0x1c]
movzx eax, byte [ebp - 4]
add edx, eax
and edx, dword [ebp - 0x34]
or ecx, edx
mov edx, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x14]
or ecx, edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0xc]
or ecx, eax
imul edx, dword [ebp - 0xc], 0x4664
or ecx, edx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x28]
sub eax, 0x42f1
sub eax, dword [ebp - 0x20]
and eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x1c]
movzx edx, byte [ebp - 0x28]
add ecx, dword [ebp - 4]
add edx, ecx
add edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x3c]
and edx, dword [ebp - 0x2c]
and edx, dword [ebp - 0x3c]
or eax, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 8]
lea edx, [eax + ecx - 0x810]
sub edx, dword [ebp - 0x34]
movzx eax, byte [ebp - 0xc]
imul eax, dword [ebp - 0xc]
and edx, eax
movzx ecx, byte [ebp - 0x18]
add ecx, dword [ebp - 0x24]
or edx, ecx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0xc]
or edx, eax
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x38]
jne 0x4149d5
mov edx, dword [ebp - 0x2c]
cmp edx, dword [ebp - 0x18]
jbe 0x4149d5
mov eax, dword [ebp - 0x20]
sub eax, 0x4cf7
movzx ecx, word [ebp - 0x20]
movzx edx, word [ebp - 0x24]
sub ecx, edx
movzx edx, word [ebp - 4]
sub ecx, edx
and eax, ecx
or eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x20]
imul edx, dword [ebp - 4]
xor esi, esi
sub esi, edx
and ecx, esi
or eax, ecx
mov dword [ebp - 0x14], eax
mov eax, 0x2d4
sub eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0xc]
or eax, dword [ebp - 0x24]
or eax, dword [ebp - 0xc]
or eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
add ecx, 0x3ae
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0x20]
sub ecx, edx
add ecx, dword [ebp - 0x10]
or eax, ecx
or eax, dword [ebp - 8]
mov byte [ebp - 0x34], al
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x28]
and eax, ecx
movzx edx, word [ebp - 0x1c]
mov ecx, 0x2015
sub ecx, edx
movzx edx, byte [ebp - 0x18]
imul edx, dword [ebp - 0x1c]
and ecx, edx
or eax, ecx
or eax, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x38], 0x9b3
imul ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x10]
or eax, ecx
mov word [ebp - 0x14], ax
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
lea ecx, [edx + eax - 0x1bc4]
sub ecx, dword [ebp - 8]
movzx edx, byte [ebp - 4]
add edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0x30]
and ecx, edx
and ecx, dword [ebp - 0xc]
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x3c]
sub eax, 0x4645
and eax, dword [ebp - 0x3c]
and eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x38]
movzx edx, byte [ebp - 0xc]
xor esi, esi
sub esi, edx
sub esi, dword [ebp - 0x24]
and ecx, esi
and ecx, dword [ebp - 0x18]
and ecx, dword [ebp - 8]
or eax, ecx
movzx ecx, word [ebp - 0x24]
or eax, ecx
mov dword [ebp - 0x34], eax
movzx edx, word [ebp - 4]
add edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x18]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x14]
sub edx, eax
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x10]
sub edx, ecx
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 4]
and eax, dword [ebp - 0x18]
or edx, eax
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x34], 0xd2
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x24]
add edx, dword [ebp - 0xc]
or ecx, edx
mov dword [ebp - 0x14], ecx
movzx eax, word [ebp - 0x38]
mov ecx, dword [ebp - 4]
sub ecx, eax
sub ecx, dword [ebp - 0x28]
add ecx, 0x2b89
movzx edx, byte [ebp - 8]
sub ecx, edx
add ecx, dword [ebp - 0x10]
movzx eax, byte [ebp - 0x38]
and ecx, eax
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
and edx, eax
or ecx, edx
mov byte [ebp - 0x30], cl
mov ecx, dword [ebp - 0x34]
add ecx, 5
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x1c]
mov ecx, dword [ebp - 4]
sub ecx, eax
sub ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x10]
add ecx, eax
or edx, ecx
or edx, dword [ebp - 0x2c]
mov word [ebp - 0x14], dx
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x28]
movzx edx, word [ebp - 0xc]
add ecx, dword [ebp - 0x28]
add edx, ecx
sub edx, dword [ebp - 0xc]
or edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x38]
and eax, dword [ebp - 8]
movzx ecx, byte [ebp - 0x1c]
mov esi, dword [ebp - 0x14]
sub esi, ecx
and eax, esi
or edx, eax
mov dword [ebp - 0x20], edx
imul edx, dword [ebp - 0xc], 0x3f7d
mov eax, 0x2e43
sub eax, dword [ebp - 0x30]
and edx, eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x3c8a
or edx, ecx
mov eax, dword [ebp - 0x18]
and eax, dword [ebp - 0x30]
or edx, eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x30]
or edx, ecx
movzx eax, word [ebp - 0x2c]
or edx, eax
mov dword [ebp - 4], edx
mov dword [ebp - 8], 0xf86
movzx ecx, byte [ebp - 0x24]
and ecx, 0
or ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x1c]
sub edx, 0xeff
sub edx, dword [ebp - 0x28]
or ecx, edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x18]
and eax, 0
or ecx, eax
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x10]
movzx edx, byte [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
sub eax, edx
movzx edx, word [ebp - 0xc]
and eax, edx
and eax, dword [ebp - 0xc]
and eax, 0
or ecx, eax
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x20]
movzx edx, word [ebp - 0x3c]
add eax, dword [ebp - 0x3c]
add edx, eax
or ecx, edx
mov byte [ebp - 0x30], cl
mov eax, dword [ebp - 8]
add eax, 0x10
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x24]
movzx edx, byte [ebp - 0x24]
mov eax, dword [ebp - 0x24]
sub eax, edx
and eax, dword [ebp - 0x20]
movzx edx, word [ebp - 0x14]
mov esi, dword [ebp - 0x1c]
sub esi, edx
movzx edx, byte [ebp - 0xc]
sub esi, edx
sub esi, dword [ebp - 0x14]
add esi, dword [ebp - 0x30]
add esi, dword [ebp - 0x20]
xor eax, esi
or ecx, eax
mov dword [ebp - 0x18], ecx
movzx eax, byte [ebp - 0x10]
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x3c]
or eax, ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
or eax, edx
or eax, 0x12f2
movzx ecx, word [ebp - 0xc]
or eax, ecx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 8], 0xfa6
jb 0x41491e
cmp dword [ebp - 0x34], 0xdc
jb 0x414818
jmp 0x414a12
mov edx, dword [ebp - 0x10]
or edx, 0x120d
mov eax, 0x3c93
sub eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x30]
movzx ecx, byte [ebp - 0x20]
add ecx, dword [ebp - 0x3c]
and eax, ecx
xor eax, dword [ebp - 0x30]
or edx, eax
mov eax, dword [ebp - 0x20]
add eax, 0x3aee
movzx ecx, word [ebp - 0x24]
sub eax, ecx
or edx, eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x18]
or edx, eax
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x3c]
lea eax, [ecx + edx + 0xbb5]
sub eax, dword [ebp - 0x34]
imul ecx, dword [ebp - 0xc], 0x923
add ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x28]
or eax, ecx
mov edx, dword [ebp - 0x24]
add edx, 0x478
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x2c]
shl edx, cl
or eax, edx
mov word [ebp - 0x20], ax
cmp dword [ebp - 0x10], 0x2ac3
jne 0x414fec
cmp dword [ebp - 0x18], 0x423d
ja 0x414fec
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x38]
jbe 0x414bcd
cmp dword [ebp - 0x20], 0
jne 0x414bcd
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x34]
sub edx, ecx
and edx, 0x3e21
movzx eax, byte [ebp - 0x24]
sub eax, dword [ebp - 4]
movzx ecx, word [ebp - 0x3c]
mov esi, dword [ebp - 0x3c]
sub esi, ecx
and eax, esi
mov ecx, dword [ebp - 0x34]
shl ecx, 0x7f
and eax, ecx
or edx, eax
mov eax, dword [ebp - 0x1c]
add eax, 0x31a1
or edx, eax
movzx ecx, byte [ebp - 8]
or edx, ecx
mov dword [ebp - 0x38], edx
xor edx, edx
sub edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x34]
movzx eax, word [ebp - 0x1c]
add edx, eax
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x18]
or edx, ecx
or edx, dword [ebp - 4]
movzx eax, byte [ebp - 0x34]
and eax, 0
or edx, eax
mov dword [ebp - 0x14], edx
movzx ecx, byte [ebp - 0xc]
add ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x24]
mov edx, 0x2530
shl edx, cl
or edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x34]
or edx, eax
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x4f8], 0x114
lea ecx, [ebp - 0x4f8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x3c]
movzx eax, byte [ebp - 4]
sub eax, dword [ebp - 0x30]
and edx, eax
and edx, dword [ebp - 0x30]
movzx ecx, byte [ebp - 0x38]
add ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x2c]
or edx, ecx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 4]
movzx ecx, byte [ebp - 0x10]
add ecx, dword [ebp - 0x34]
and eax, ecx
or edx, eax
mov dword [ebp - 0x28], edx
imul edx, dword [ebp - 0x24], 0
movzx eax, byte [ebp - 0xc]
sub edx, eax
sub edx, 0xe0
or edx, dword [ebp - 0x24]
or edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x24]
or edx, ecx
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x14]
or edx, eax
xor eax, eax
mov ecx, dword [ebp - 0x14]
shl eax, cl
or edx, eax
mov dword [ebp - 0x38], edx
imul edx, dword [ebp - 4], 0x4b72
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 4]
or edx, eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 4]
xor eax, eax
shl eax, cl
or edx, eax
mov dword [ebp - 0x2c], edx
jmp 0x414c03
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 0x38]
or ecx, edx
movzx eax, byte [ebp - 0x14]
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 8]
movzx edx, byte [ebp - 0x20]
add eax, edx
movzx edx, word [ebp - 0x34]
add edx, dword [ebp - 0x34]
and eax, edx
and eax, 0
or ecx, eax
or ecx, 0x3e63
mov dword [ebp - 0xc], ecx
movzx eax, word [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
sub ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x24]
or ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0xc]
or ecx, edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x18]
or ecx, eax
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_CancelIo]
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x2c]
add edx, 0x4dfa
or edx, 0x10b3
or edx, dword [ebp - 0x18]
movzx eax, byte [ebp - 8]
and eax, 0x253e
or edx, eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x38]
movzx eax, word [ebp - 0x20]
sub ecx, eax
movzx eax, word [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
and ecx, eax
or edx, ecx
mov byte [ebp - 0xc], dl
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x20]
movzx edx, byte [ebp - 0x30]
mov eax, dword [ebp - 0x14]
sub eax, edx
and ecx, eax
and ecx, 0
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x14]
and edx, eax
or ecx, edx
mov dword [ebp - 4], ecx
movzx ecx, word [ebp - 0x20]
mov edx, dword [ebp - 0x10]
sub edx, ecx
imul eax, dword [ebp - 0x24], 0x1a65
add eax, dword [ebp - 4]
movzx ecx, word [ebp - 0x38]
add eax, dword [ebp - 0x18]
add ecx, eax
or edx, ecx
or edx, dword [ebp - 0x34]
or edx, dword [ebp - 0x1c]
or edx, dword [ebp - 0xc]
movzx eax, word [ebp - 4]
imul ecx, eax, 0x40a
or edx, ecx
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0x28]
or edx, dword [ebp - 4]
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x3c]
and eax, 0
or edx, eax
or edx, dword [ebp - 0x1c]
movzx ecx, byte [ebp - 0x24]
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x3c]
and ecx, eax
and ecx, dword [ebp - 0x38]
or edx, ecx
mov dword [ebp - 8], edx
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x24]
lea eax, [edx + ecx + 0xbd4]
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x10]
sub ecx, edx
add ecx, dword [ebp - 0x1c]
or eax, ecx
mov ecx, 0x131e
sub ecx, dword [ebp - 0x38]
or eax, ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x18]
or eax, edx
movzx ecx, byte [ebp - 8]
or eax, ecx
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 8]
movzx eax, word [ebp - 0x2c]
sub eax, 0x2a0c
imul ecx, dword [ebp - 0x18], 0
sub eax, ecx
movzx ecx, byte [ebp - 0x24]
add eax, ecx
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 4]
and eax, ecx
and eax, dword [ebp - 0x3c]
or edx, eax
or edx, 0xc9e
or edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x24]
movzx eax, word [ebp - 0xc]
mov ecx, 0x421e
sub ecx, eax
and ecx, 0x4c33
mov eax, dword [ebp - 0x14]
add eax, 0x8d0
and ecx, eax
and ecx, 0
or edx, ecx
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x18]
or edx, ecx
or edx, dword [ebp - 0x14]
movzx eax, byte [ebp - 0x2c]
add eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
or edx, eax
mov dword [ebp - 0x30], edx
imul ecx, dword [ebp - 0x24], 0
mov edx, dword [ebp - 0x34]
sub edx, ecx
sub edx, 0x776e
sub edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x1c]
and edx, eax
movzx ecx, word [ebp - 8]
imul ecx, dword [ebp - 0x18]
and edx, ecx
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 0x1c]
jbe 0x414f52
movzx eax, word [ebp - 0x10]
mov ecx, 0x3b4a
sub ecx, eax
xor edx, edx
sar edx, cl
or edx, dword [ebp - 0x30]
movzx eax, word [ebp - 0x1c]
add eax, dword [ebp - 0x38]
or edx, eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
or edx, ecx
mov byte [ebp - 0x28], dl
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0xc]
and edx, dword [ebp - 0x1c]
or edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x2c]
or edx, eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x27f1
and ecx, dword [ebp - 0x30]
or edx, ecx
mov eax, 0x2f4b
sub eax, dword [ebp - 0x30]
and eax, dword [ebp - 0x1c]
movzx ecx, byte [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
sub esi, ecx
and eax, esi
or edx, eax
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x30]
add edx, dword [ebp - 8]
add edx, dword [ebp - 4]
movzx eax, byte [ebp - 0x18]
or edx, eax
mov ecx, dword [ebp - 0x3c]
add ecx, 0x3a95
or edx, ecx
movzx eax, byte [ebp - 0x24]
add eax, 0x3ed8
sub eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x1c]
or edx, eax
or edx, dword [ebp - 0x30]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1bc], 0x114
lea ecx, [ebp - 0x1bc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 8]
sub edx, dword [ebp - 0x18]
imul eax, dword [ebp - 8], 0
sub edx, eax
sub edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
lea edx, [edx + ecx - 0x3cdd]
mov eax, dword [ebp - 0x38]
lea ecx, [edx + eax - 0x2fa1]
sub ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0xc]
lea eax, [ecx + edx - 0x22de]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x14]
movzx edx, byte [ebp - 0x2c]
add edx, dword [ebp - 0x14]
or ecx, edx
mov eax, dword [ebp - 0x28]
add eax, 0xc3d
or ecx, eax
or ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 0x3c]
and edx, dword [ebp - 0x28]
or ecx, edx
or ecx, dword [ebp - 0x38]
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 8]
lea ecx, [edx + ecx + 0x38b2]
sub ecx, dword [ebp - 0x28]
shl eax, cl
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x38]
or eax, ecx
or eax, dword [ebp - 0x28]
movzx edx, byte [ebp - 0x30]
add edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x2c]
or eax, edx
or eax, dword [ebp - 0x28]
mov dword [ebp - 4], eax
imul eax, dword [ebp - 0x28], 0
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
add ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
lea edx, [eax + edx + 0x1f8a]
sub edx, dword [ebp - 0x2c]
or ecx, edx
or ecx, 0x1af
or ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x30]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
or eax, dword [ebp - 0x10]
movzx ecx, word [ebp - 0x18]
add ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x2c]
or eax, ecx
mov edx, 0x439
sub edx, dword [ebp - 0x20]
movzx ecx, byte [ebp - 0x2c]
sub edx, ecx
sub edx, 0x3bdf
and edx, dword [ebp - 0x24]
and edx, 0x1e66
or eax, edx
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x38]
and edx, 0
movzx eax, byte [ebp - 0x34]
add eax, dword [ebp - 0x28]
or edx, eax
movzx ecx, word [ebp - 0x24]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x1c]
add ecx, eax
or edx, ecx
movzx ecx, word [ebp - 0x30]
add ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x28]
add ecx, eax
or edx, ecx
mov dword [ebp - 0x18], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
and ecx, 0
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 8]
sub edx, dword [ebp - 0x34]
and ecx, edx
movzx eax, word [ebp - 0x3c]
and ecx, eax
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x34]
xor ecx, edx
or ecx, dword [ebp - 0x3c]
mov word [ebp - 0x14], cx
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x30]
shr eax, cl
movzx ecx, word [ebp - 0xc]
add ecx, 0x1e0c
or eax, ecx
movzx edx, byte [ebp - 0x1c]
imul edx, dword [ebp - 0x34]
sub edx, 0x10d
and edx, dword [ebp - 0x28]
or eax, edx
mov ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x3c]
or eax, ecx
mov word [ebp - 4], ax
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
shl edx, cl
and edx, dword [ebp - 0x10]
and edx, dword [ebp - 0x24]
movzx eax, word [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
movzx eax, word [ebp - 0x38]
sub ecx, eax
and edx, ecx
and edx, 0x45a8
imul ecx, dword [ebp - 8], 0
sub ecx, dword [ebp - 8]
or edx, ecx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
or edx, eax
mov dword [ebp - 0x2c], edx
movzx ecx, word [ebp - 0x1c]
movzx edx, byte [ebp - 0x3c]
add edx, dword [ebp - 0x34]
and ecx, edx
movzx eax, byte [ebp - 0x14]
and eax, 0
or ecx, eax
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x34]
or ecx, edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x3c]
movzx edx, word [ebp - 0x3c]
mov esi, dword [ebp - 0x1c]
sub esi, edx
and eax, esi
or ecx, eax
mov dword [ebp - 0x24], ecx
movzx eax, word [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
and eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 0x1c]
add edx, 0xf38
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x28]
shr edx, cl
and eax, edx
mov ecx, 0xffffde56
sub ecx, dword [ebp - 0x10]
movzx edx, byte [ebp - 8]
sub ecx, edx
and eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x34]
jne 0x4158c1
mov ecx, 0x2a20
sub ecx, dword [ebp - 0x20]
movzx edx, byte [ebp - 0x28]
movzx eax, byte [ebp - 0x28]
add edx, eax
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
lea eax, [esi + eax + 0x4530]
sub eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x3c]
and edx, eax
or ecx, edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 4]
jb 0x4152be
movzx edx, byte [ebp - 0x34]
sub edx, dword [ebp - 0xc]
and edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax - 0x3219]
movzx ecx, byte [ebp - 0x20]
add eax, dword [ebp - 0x18]
add ecx, eax
add ecx, dword [ebp - 0x14]
movzx eax, word [ebp - 0x30]
add ecx, eax
and edx, ecx
or edx, 0xffffffd0
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x3c]
add edx, 0x4133
or ecx, edx
movzx eax, byte [ebp - 0x14]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x3c]
or ecx, eax
mov word [ebp - 0x1c], cx
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
movzx edx, word [ebp - 0x28]
add ecx, dword [ebp - 0x1c]
add edx, ecx
and edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x38]
xor edx, dword [ebp - 0x3c]
or edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x28]
or edx, eax
imul ecx, dword [ebp - 4], 0x1b32
sub ecx, dword [ebp - 0x10]
or edx, ecx
mov dword [ebp - 0x34], edx
movzx edx, word [ebp - 8]
imul edx, dword [ebp - 0x10]
add edx, 0x20a6
sub edx, dword [ebp - 0x2c]
and edx, 0x235f
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
lea eax, [eax + ecx + 0x283c960]
sub eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
or edx, eax
mov dword [ebp - 0x24], edx
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x16c9
and ecx, 0x3c1b
mov edx, dword [ebp - 0x18]
imul edx, dword [ebp - 0x18]
and edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
imul esi, dword [ebp - 0x3c], 0x8b0
add eax, esi
sub eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x18]
add eax, 0x46b2
and edx, eax
or ecx, edx
mov byte [ebp - 0x14], cl
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 0x34]
and edx, dword [ebp - 0x2c]
or ecx, edx
mov eax, 0x3305
sub eax, dword [ebp - 4]
add eax, dword [ebp - 8]
movzx edx, byte [ebp - 0x1c]
sub eax, edx
mov edx, dword [ebp - 0x3c]
imul edx, dword [ebp - 0x3c]
sub eax, edx
sub eax, dword [ebp - 0x10]
movzx edx, byte [ebp - 4]
imul edx, dword [ebp - 0x1c]
sub eax, edx
or ecx, eax
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x24]
add eax, 0x5da
sub eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
shl esi, cl
and edx, esi
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x3c]
and edx, ecx
or eax, edx
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x3c]
cmp edx, dword [ebp - 0x20]
jne 0x415442
push str.gssadhssajto
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30]
lea edx, [ecx + eax + 0x9be]
movzx eax, byte [ebp - 0x10]
sub edx, eax
add edx, dword [ebp - 0x30]
and edx, 0
movzx ecx, word [ebp - 0x30]
add ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0xc]
movzx eax, word [ebp - 0x38]
sub ecx, eax
and ecx, 0x208b
or edx, ecx
movzx ecx, word [ebp - 0x18]
or edx, ecx
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
add eax, 0x4872
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 0x24]
add eax, dword [ebp - 8]
and edx, eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x2c]
or edx, ecx
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc]
or edx, eax
mov dword [ebp - 0x34], edx
movzx ecx, byte [ebp - 0x24]
mov edx, dword [ebp - 0x20]
sub edx, ecx
and edx, dword [ebp - 0x24]
or edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x3c]
or edx, eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x30bc
or edx, ecx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x20]
and eax, ecx
and eax, dword [ebp - 4]
movzx ecx, word [ebp - 0xc]
and eax, ecx
or edx, eax
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x20]
sub edx, 0x47f
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x10]
imul ecx, dword [ebp - 8], 0x4953
imul ecx, dword [ebp - 0x28]
sub eax, ecx
sub eax, dword [ebp - 8]
add eax, 0x2aaa
or edx, eax
movzx eax, word [ebp - 0xc]
and eax, dword [ebp - 0xc]
or edx, eax
or edx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], edx
movzx ecx, byte [ebp - 8]
mov edx, dword [ebp - 0x20]
lea eax, [edx + ecx - 0x1d01]
movzx ecx, word [ebp - 0x3c]
sub eax, ecx
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x2c]
shl eax, cl
mov edx, dword [ebp - 0x30]
add edx, 0x248f
sub edx, dword [ebp - 0x34]
or eax, edx
movzx ecx, word [ebp - 0x3c]
mov edx, 0x431d
sub edx, ecx
or eax, edx
movzx ecx, word [ebp - 0x2c]
mov edx, dword [ebp - 4]
sub edx, ecx
or eax, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x1c], 0x307a
sub ecx, dword [ebp - 0xc]
or eax, ecx
movzx edx, word [ebp - 0x3c]
or eax, edx
movzx ecx, byte [ebp - 0x28]
imul ecx, dword [ebp - 0x14]
mov edx, 0xffffc0f8
sub edx, ecx
mov ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 4]
add edx, ecx
or eax, edx
mov dword [ebp - 0x10], eax
movzx edx, byte [ebp - 0x38]
imul edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x2c]
movzx eax, byte [ebp - 0x24]
sub edx, eax
add edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x2c]
movzx ecx, byte [ebp - 0xc]
add edx, ecx
sub edx, dword [ebp - 0x20]
movzx eax, word [ebp - 4]
add edx, dword [ebp - 0x14]
add eax, edx
movzx ecx, byte [ebp - 0x18]
sub eax, ecx
xor eax, dword [ebp - 0x24]
or eax, 0x724
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x3c]
imul edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x18]
sub eax, 0x1712
sub eax, dword [ebp - 0x24]
and edx, eax
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x3c]
movzx eax, byte [ebp - 0x30]
sub ecx, eax
add ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x1c]
and edx, ecx
movzx ecx, word [ebp - 0x38]
imul eax, ecx, 0x413
or edx, eax
mov dword [ebp - 0x14], edx
mov edx, 0x2490
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx + eax - 0xd80]
shr edx, cl
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x20]
and eax, dword [ebp - 0xc]
movzx ecx, byte [ebp - 4]
add ecx, 0x27c9
and eax, ecx
or edx, eax
mov dword [ebp - 0x18], edx
movzx edx, byte [ebp - 0x10]
movzx eax, word [ebp - 0x34]
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
sub ecx, dword [ebp - 0x14]
and edx, ecx
movzx eax, word [ebp - 0x24]
sub eax, dword [ebp - 0x14]
mov ecx, 0x5507
sub ecx, dword [ebp - 0xc]
and eax, ecx
or edx, eax
mov eax, dword [ebp - 0x28]
and eax, dword [ebp - 0xc]
or edx, eax
movzx ecx, word [ebp - 0x28]
add ecx, dword [ebp - 0x1c]
or edx, ecx
mov byte [ebp - 4], dl
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x14]
xor edx, edx
shl edx, cl
and edx, 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 8]
sub eax, dword [ebp - 0x1c]
and edx, eax
and edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x15a9
or edx, ecx
mov byte [ebp - 0xc], dl
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x10]
je 0x4156c8
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x20]
movzx ecx, word [ebp - 0x2c]
add ecx, 0x4bd
or eax, ecx
or eax, 0x36fb
imul edx, dword [ebp - 4], 0x1bb5
imul ecx, edx, 0
imul edx, dword [ebp - 0xc], 0x1d91
add edx, dword [ebp - 4]
xor ecx, edx
or eax, ecx
mov dword [ebp - 8], eax
xor eax, eax
sub eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x1c]
xor ecx, ecx
sub ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 4]
and ecx, dword [ebp - 0xc]
or eax, ecx
movzx edx, word [ebp - 0x1c]
imul edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x3c]
sub ecx, edx
add ecx, dword [ebp - 8]
or eax, ecx
mov dword [ebp - 0x10], eax
movzx edx, word [ebp - 0x30]
movzx eax, byte [ebp - 8]
sub eax, dword [ebp - 0x38]
and edx, eax
movzx ecx, word [ebp - 0x24]
sub ecx, dword [ebp - 0x10]
and edx, ecx
movzx eax, byte [ebp - 0x10]
and edx, eax
movzx ecx, byte [ebp - 0x30]
or edx, ecx
movzx eax, word [ebp - 0x2c]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
movzx eax, word [ebp - 8]
add ecx, eax
movzx eax, byte [ebp - 0x20]
sub ecx, eax
or edx, ecx
mov dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 8]
movzx edx, byte [ebp - 0x24]
sub ecx, edx
sub ecx, dword [ebp - 0x1c]
and ecx, 0x1b68
movzx eax, byte [ebp - 0x24]
and ecx, eax
and ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x14]
movzx eax, word [ebp - 0x3c]
sub edx, eax
or ecx, edx
or ecx, dword [ebp - 0x38]
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
add ecx, 0x41c9
or ecx, 0x45d1
movzx edx, word [ebp - 0x2c]
or ecx, edx
mov eax, dword [ebp - 0x24]
and eax, dword [ebp - 0x30]
or ecx, eax
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 4]
add edx, dword [ebp - 4]
add edx, dword [ebp - 0x20]
and edx, dword [ebp - 0xc]
and edx, 0x2ad3
or ecx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x24]
add eax, 0x44d2
mov ecx, dword [ebp - 0x30]
sub ecx, 0x33ea
and eax, ecx
and eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
imul edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
sub ecx, edx
add ecx, dword [ebp - 0x18]
and eax, ecx
mov edx, 0x1313
sub edx, dword [ebp - 0x14]
and eax, edx
or eax, dword [ebp - 4]
mov dword [ebp - 0x34], eax
xor eax, eax
sub eax, dword [ebp - 0x1c]
movzx ecx, word [ebp - 0x34]
add eax, dword [ebp - 0x28]
add ecx, eax
add ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 8]
and ecx, edx
or ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ecx
imul eax, dword [ebp - 0x24], 0
xor ecx, ecx
sub ecx, eax
add ecx, dword [ebp - 0x1c]
movzx edx, byte [ebp - 0x38]
mov eax, dword [ebp - 0x30]
sub eax, edx
mov edx, dword [ebp - 0x1c]
add edx, 0x7c2
sub edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x20]
mov esi, dword [ebp - 4]
lea edx, [edx + esi + 0x3be9]
sub edx, dword [ebp - 0xc]
and eax, edx
or ecx, eax
or ecx, dword [ebp - 0x28]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x10]
movzx edx, word [ebp - 0x10]
add edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
shr edx, cl
and edx, dword [ebp - 0x24]
or eax, edx
mov ecx, dword [ebp - 0x28]
add ecx, 0x34b6
sub ecx, dword [ebp - 0x20]
or eax, ecx
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + edx - 0x2c6d]
or eax, edx
mov byte [ebp - 0x14], al
push 0
push 0
push 0
push 0
push 0x12c
push 4
push 3
push str.lahnnhwdsotseidht
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 4]
movzx ecx, word [ebp - 0x18]
or eax, ecx
movzx edx, byte [ebp - 8]
add edx, 0x5c75
or eax, edx
movzx ecx, word [ebp - 8]
add ecx, dword [ebp - 0x34]
and ecx, dword [ebp - 0x24]
or eax, ecx
movzx edx, byte [ebp - 0x38]
add edx, dword [ebp - 0x34]
or eax, edx
mov ecx, dword [ebp - 0x1c]
add ecx, 0x34c8
or eax, ecx
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xa0], edx
cmp dword [ebp - 0xa0], 0x1c
je 0x4157ff
cmp dword [ebp - 0xa0], 0x6c
je 0x415839
cmp dword [ebp - 0xa0], 0x94
je 0x4157c6
jmp 0x415874
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
lea edx, [eax + ecx - 0xcef]
sub edx, dword [ebp - 0x14]
and edx, 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
or edx, eax
movzx ecx, byte [ebp - 0x1c]
xor eax, eax
sub eax, ecx
sub eax, dword [ebp - 8]
or edx, eax
or edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
jmp 0x4158b4
movzx ecx, word [ebp - 0x14]
movzx edx, word [ebp - 0xc]
add ecx, edx
imul eax, dword [ebp - 0x10], 0
and ecx, eax
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x34]
movzx eax, word [ebp - 0x30]
sub edx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x3c]
movzx esi, word [ebp - 0x2c]
sub eax, esi
add eax, dword [ebp - 0x34]
shr eax, 0x6e
and edx, eax
and edx, dword [ebp - 0x34]
or ecx, edx
mov dword [ebp - 0x38], ecx
jmp 0x4158b4
mov ecx, dword [ebp - 0x1c]
and ecx, 0x3b3e
mov edx, dword [ebp - 8]
add edx, 0x3020
and ecx, edx
or ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x1c]
or ecx, dword [ebp - 0x14]
movzx eax, byte [ebp - 0x24]
sub eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x28]
lea edx, [esi + edx - 0x4221]
and eax, edx
or ecx, eax
mov word [ebp - 0x18], cx
jmp 0x4158b4
mov eax, dword [ebp - 0x20]
sub eax, 0x3bd2
sub eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x24]
and ecx, 0x18f0
and ecx, 0
or eax, ecx
or eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x3c]
sub edx, 0x348a
or eax, edx
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 4]
or eax, ecx
movzx edx, byte [ebp - 0xc]
mov ecx, dword [ebp - 0x34]
sub ecx, edx
or eax, ecx
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.KERNEL32.dll_CancelIo]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
sub eax, 0x7d6c
sub eax, dword [ebp - 0x24]
movzx ecx, byte [ebp - 0x34]
and eax, ecx
movzx edx, word [ebp - 0x28]
imul ecx, edx, 0
and eax, ecx
movzx edx, word [ebp - 0x24]
add edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
and eax, edx
movzx ecx, word [ebp - 0x24]
add ecx, dword [ebp - 0x30]
or eax, ecx
mov byte [ebp - 0x38], al
movzx edx, word [ebp - 4]
mov eax, 0x19c4
sub eax, edx
imul ecx, dword [ebp - 0x14], 0
sub ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x28], 0
add ecx, edx
movzx edx, word [ebp - 0x2c]
sub ecx, edx
movzx edx, byte [ebp - 0x10]
add ecx, edx
sub ecx, dword [ebp - 0x2c]
movzx edx, byte [ebp - 0x1c]
add ecx, edx
or eax, ecx
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x2c]
jbe 0x415940
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x18]
jne 0x416955
mov edx, 0x4d59
sub edx, dword [ebp - 0x38]
movzx eax, word [ebp - 0x10]
and edx, eax
movzx ecx, word [ebp - 0x3c]
add ecx, 0x1629
or edx, ecx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
sub ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x34]
or edx, ecx
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x34]
or edx, eax
mov dword [ebp - 4], edx
push 0
lea ecx, [ebp - 0xc]
push ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 8], eax
movzx edx, word [ebp - 8]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x34]
or edx, eax
movzx ecx, byte [ebp - 0x18]
movzx eax, byte [ebp - 0x3c]
lea ecx, [ecx + eax + 0x48a]
and ecx, dword [ebp - 0x30]
or edx, ecx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xc]
or edx, eax
mov dword [ebp - 0x2c], edx
movzx ecx, byte [ebp - 0x20]
mov edx, dword [ebp - 0x28]
sub edx, ecx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x14]
mov esi, dword [ebp - 4]
imul esi, dword [ebp - 8]
sub ecx, esi
shl eax, cl
and eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x3c]
add ecx, 0x4176
and eax, ecx
or edx, eax
mov dword [ebp - 0x10], edx
movzx edx, byte [ebp - 0x2c]
xor eax, eax
sub eax, edx
add eax, dword [ebp - 0x24]
and eax, dword [ebp - 0x18]
or eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x3c]
and ecx, dword [ebp - 0x34]
or eax, ecx
movzx edx, word [ebp - 0x38]
movzx ecx, word [ebp - 0x2c]
sub edx, ecx
sub edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x30]
movzx ecx, word [ebp - 0x24]
lea edx, [edx + ecx - 0x29c]
or eax, edx
mov word [ebp - 0x20], ax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x28]
shl eax, cl
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x1c]
add ecx, 0x258b
shl eax, cl
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x18]
lea ecx, [edx + ecx + 0x360c]
and ecx, dword [ebp - 0x38]
or eax, ecx
or eax, dword [ebp - 0x10]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x34]
jb 0x415a85
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 4]
ja 0x415de8
mov dword [ebp - 0x18], 0x185
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x10]
lea eax, [ecx + edx - 0x2766]
sub eax, dword [ebp - 0x34]
movzx ecx, word [ebp - 0x2c]
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x2c]
lea edx, [esi + edx + 0x35bc]
and ecx, edx
or eax, ecx
movzx ecx, word [ebp - 4]
add ecx, 0x2a0a
or eax, ecx
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0xc]
or edx, 0x3ad4
mov eax, dword [ebp - 8]
and eax, dword [ebp - 4]
or edx, eax
mov ecx, dword [ebp - 0x34]
add ecx, 0xe8f
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0xc]
add eax, 0x490
sub eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
and ecx, eax
or edx, ecx
mov dword [ebp - 0x24], edx
mov ecx, dword [ebp - 0x18]
add ecx, 3
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 4]
lea ecx, [eax + edx - 0x14cb]
add ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x24]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0xc]
and edx, eax
and edx, dword [ebp - 0x14]
or ecx, edx
or ecx, dword [ebp - 0x3c]
or ecx, dword [ebp - 0x30]
mov byte [ebp - 0x28], cl
movzx ecx, byte [ebp - 0x24]
xor edx, edx
sub edx, ecx
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 4]
add eax, dword [ebp - 4]
or edx, eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xc]
or edx, ecx
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x28]
movzx ecx, byte [ebp - 0x38]
add eax, dword [ebp - 0x28]
lea eax, [ecx + eax + 0x212f]
or edx, eax
mov dword [ebp - 0x3c], edx
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 4]
mov edx, 0x935
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
sub edx, 0x316c
movzx eax, byte [ebp - 0x30]
sub edx, eax
and ecx, edx
and ecx, 0
mov edx, dword [ebp - 0x20]
imul edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x34]
and ecx, edx
and ecx, dword [ebp - 0x10]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x5c
je 0x415c39
cmp dword [ebp - 0x9c], 0x9b
je 0x415c09
cmp dword [ebp - 0x9c], 0xe0
je 0x415bd1
jmp 0x415c66
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 8]
movzx edx, word [ebp - 4]
sub ecx, edx
or ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x2c]
movzx edx, byte [ebp - 0x34]
sub eax, edx
or ecx, eax
or ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 8]
movzx eax, word [ebp - 0x38]
sub eax, dword [ebp - 0x1c]
or ecx, eax
or ecx, dword [ebp - 0x38]
mov dword [ebp - 0x28], ecx
jmp 0x415c9f
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x10]
sub edx, dword [ebp - 8]
movzx eax, byte [ebp - 0x30]
add eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x24]
shl eax, cl
and edx, eax
and edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 4]
or edx, ecx
mov byte [ebp - 0x14], dl
jmp 0x415c9f
movzx edx, byte [ebp - 0x14]
or edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x30]
or edx, eax
movzx ecx, byte [ebp - 0x30]
add ecx, dword [ebp - 0x24]
or edx, ecx
movzx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax + 0x1f52]
or edx, eax
mov dword [ebp - 0x34], edx
jmp 0x415c9f
movzx ecx, byte [ebp - 0x20]
mov edx, dword [ebp - 0x34]
imul edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x1c]
and ecx, edx
movzx eax, byte [ebp - 0x10]
movzx edx, word [ebp - 0x1c]
imul edx, dword [ebp - 0x10]
sub eax, edx
and ecx, eax
imul eax, dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x10]
lea eax, [edx + eax + 0x305a]
and ecx, eax
and ecx, 0
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x18], 0x18b
jb 0x415ac3
movzx ecx, byte [ebp - 0x20]
sub ecx, dword [ebp - 0x38]
movzx edx, byte [ebp - 0x18]
sub edx, dword [ebp - 0x38]
or ecx, edx
mov eax, dword [ebp - 0x28]
add eax, 0x4bbd
sub eax, dword [ebp - 4]
shr eax, 0x3e
or ecx, eax
movzx edx, word [ebp - 0x1c]
movzx eax, byte [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
xor edx, eax
or ecx, edx
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x24]
mov edx, 0x274c
sub edx, dword [ebp - 0x1c]
imul eax, dword [ebp - 4], 0x28be
add edx, eax
sub edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x18]
add edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x20]
add edx, 0x32d3
sub edx, dword [ebp - 0x24]
or ecx, edx
mov dword [ebp - 0x3c], ecx
movzx ecx, word [ebp - 4]
or ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x3c]
imul edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x10]
movzx eax, byte [ebp - 0x14]
add edx, eax
and edx, dword [ebp - 0x2c]
or ecx, edx
movzx edx, word [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
sub eax, edx
or ecx, eax
mov dword [ebp - 0x38], ecx
xor ecx, ecx
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x34]
lea eax, [ecx + edx - 0x4c46]
imul ecx, dword [ebp - 0x10], 0x2e66
add eax, ecx
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x38]
sub eax, edx
movzx ecx, byte [ebp - 0x10]
sub eax, ecx
add eax, dword [ebp - 0xc]
and eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
movzx edx, word [ebp - 0x14]
add edx, dword [ebp - 0x34]
movzx eax, byte [ebp - 0x2c]
imul eax, dword [ebp - 0xc]
mov ecx, 0xffffb8ec
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
and ecx, eax
or edx, ecx
movzx ecx, byte [ebp - 0x20]
mov eax, dword [ebp - 0x20]
sub eax, 0x3e18
and ecx, eax
or edx, ecx
mov byte [ebp - 8], dl
mov ecx, dword [ebp - 0x14]
add ecx, 0x3847
sub ecx, dword [ebp - 0x20]
movzx edx, byte [ebp - 0x38]
add ecx, edx
mov eax, 0x2854
sub eax, dword [ebp - 0x18]
or ecx, eax
movzx edx, byte [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
sub eax, edx
and eax, dword [ebp - 0x38]
or ecx, eax
mov edx, 0x3065
sub edx, dword [ebp - 4]
and edx, dword [ebp - 0x2c]
or ecx, edx
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x10]
and eax, dword [ebp - 0x3c]
or eax, dword [ebp - 0x14]
movzx ecx, byte [ebp - 0x14]
mov edx, dword [ebp - 0x30]
sub edx, ecx
add edx, dword [ebp - 0x28]
movzx ecx, byte [ebp - 8]
add edx, ecx
movzx ecx, byte [ebp - 0x2c]
add edx, ecx
sub edx, dword [ebp - 0x2c]
or eax, edx
movzx edx, word [ebp - 0x3c]
and edx, dword [ebp - 0x3c]
or eax, edx
or eax, dword [ebp - 0x30]
or eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x38]
jae 0x416108
movzx ecx, word [ebp - 0x1c]
cmp dword [ebp - 0x14], ecx
jne 0x416108
mov edx, dword [ebp - 0x38]
sub edx, 0x1b9a
sub edx, dword [ebp - 0x34]
movzx eax, word [ebp - 0x18]
imul ecx, eax, 0x215
add edx, ecx
sub edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x2c]
movzx eax, word [ebp - 4]
or edx, eax
mov eax, dword [ebp - 0x38]
add eax, 0x4616
mov ecx, dword [ebp - 0x20]
add ecx, 0x1b04
shr eax, cl
xor eax, 0x475d
or edx, eax
mov dword [ebp - 0x10], edx
xor ecx, ecx
sub ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 4]
or ecx, 0x7e6
or ecx, dword [ebp - 0x2c]
movzx edx, byte [ebp - 0x14]
imul edx, dword [ebp - 0x20]
movzx eax, byte [ebp - 0x24]
add edx, eax
sub edx, dword [ebp - 0x20]
movzx eax, word [ebp - 0x3c]
add edx, dword [ebp - 0x14]
add eax, edx
or ecx, eax
mov edx, dword [ebp - 0x14]
and edx, dword [ebp - 0x2c]
or ecx, edx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 8]
or eax, 0x329c
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 4]
or eax, ecx
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x2c]
movzx esi, word [ebp - 0x18]
imul esi, esi, 0x4377
add ecx, esi
sub ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 8]
and edx, ecx
or eax, edx
mov dword [ebp - 0x24], eax
movzx edx, byte [ebp - 0xc]
add edx, dword [ebp - 0x1c]
movzx eax, byte [ebp - 8]
sub eax, dword [ebp - 0x20]
movzx ecx, word [ebp - 0x24]
sub eax, ecx
add eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x1c]
or edx, eax
mov eax, dword [ebp - 0x28]
sub eax, 0x5ce
or edx, eax
movzx ecx, byte [ebp - 8]
imul ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
sub eax, ecx
or edx, eax
mov dword [ebp - 0x14], edx
movzx ecx, word [ebp - 0x3c]
movzx edx, byte [ebp - 0x3c]
add ecx, edx
and ecx, dword [ebp - 8]
movzx eax, byte [ebp - 0x3c]
sub eax, dword [ebp - 0xc]
and ecx, eax
and ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x3c]
add edx, 0x29b8
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 4]
add eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x28]
and edx, eax
or ecx, edx
mov word [ebp - 0x24], cx
movzx ecx, word [ebp - 0x14]
imul ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0x3c]
movzx edx, byte [ebp - 0xc]
sub edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x10]
add edx, 0x9da
sub edx, dword [ebp - 4]
sub edx, 0x20fb
or ecx, edx
movzx eax, byte [ebp - 0x28]
sub eax, dword [ebp - 0x24]
or ecx, eax
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 0x6c]
sub edx, 0x52
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 0xcf
ja case.0x415fba.1
mov eax, dword [ebp - 0x6c]
movzx ecx, byte [eax + 0x41b0dc]
jmp dword [ecx*4 + 0x41b0c8]
mov edx, 0x46c4
sub edx, dword [ebp - 0x38]
movzx eax, word [ebp - 0x18]
movzx ecx, word [ebp - 0x2c]
sub eax, ecx
add eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x38]
sub eax, 0x31c7
movzx ecx, word [ebp - 0x24]
sub eax, ecx
and edx, eax
movzx eax, word [ebp - 0x18]
or edx, eax
movzx ecx, byte [ebp - 0x30]
mov eax, 0x1522
sub eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x10]
xor ecx, eax
or edx, ecx
mov dword [ebp - 4], edx
jmp 0x416108
movzx ecx, byte [ebp - 0x38]
or ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 4]
or ecx, dword [ebp - 0x28]
movzx edx, byte [ebp - 0x20]
movzx eax, word [ebp - 0x30]
and edx, eax
and edx, dword [ebp - 0x24]
movzx eax, word [ebp - 0x38]
and edx, eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x1c]
movzx esi, byte [ebp - 0x28]
add eax, esi
and edx, eax
movzx eax, byte [ebp - 0x34]
sub eax, dword [ebp - 0x1c]
and edx, eax
and edx, dword [ebp - 0x2c]
or ecx, edx
mov dword [ebp - 0x18], ecx
jmp 0x416108
mov ecx, 0x405
sub ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x3c]
movzx edx, word [ebp - 0x1c]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x14]
add edx, dword [ebp - 4]
and ecx, edx
and ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x34]
movzx edx, word [ebp - 0xc]
sub eax, edx
or ecx, eax
mov dword [ebp - 0x2c], ecx
jmp 0x416108
mov eax, dword [ebp - 0xc]
sub eax, 0x180a
sub eax, dword [ebp - 0x1c]
or eax, dword [ebp - 0x38]
movzx ecx, byte [ebp - 0x20]
movzx edx, word [ebp - 0x14]
mov esi, 0x4098
sub esi, edx
sub esi, dword [ebp - 0x38]
xor ecx, esi
or eax, ecx
or eax, dword [ebp - 0x2c]
movzx ecx, byte [ebp - 0x34]
add ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x10]
and ecx, edx
or eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x416108
imul eax, dword [ebp - 0xc], 0x3a57
and eax, 0x2552
movzx ecx, byte [ebp - 0x24]
xor eax, ecx
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + edx + 0x18ff]
movzx edx, word [ebp - 0x10]
add ecx, edx
movzx edx, word [ebp - 0x30]
sub ecx, edx
xor edx, edx
shl edx, cl
or eax, edx
or eax, dword [ebp - 0xc]
movzx ecx, byte [ebp - 0x38]
sub ecx, 0x1cd1
or eax, ecx
mov word [ebp - 0x1c], ax
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x24]
jbe 0x41611d
cmp dword [ebp - 4], 0x9bf
jbe 0x41639f
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
lea edx, [ecx + eax - 0x33c5]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx + eax - 0x3996]
movzx eax, byte [ebp - 4]
sub ecx, eax
shl edx, cl
and edx, dword [ebp - 4]
movzx ecx, word [ebp - 0x28]
or edx, ecx
or edx, dword [ebp - 0x3c]
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x30]
imul eax, dword [ebp - 8], 0x26b2
add edx, eax
movzx ecx, byte [ebp - 0x34]
imul ecx, dword [ebp - 0x34]
movzx eax, word [ebp - 0x34]
add ecx, eax
shr edx, cl
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
and edx, ecx
or edx, dword [ebp - 0xc]
mov dword [ebp - 0x18], edx
movzx edx, byte [ebp - 0x34]
mov eax, dword [ebp - 0x14]
sub eax, edx
movzx ecx, word [ebp - 0x10]
sub eax, ecx
and eax, 0x46a9
xor edx, edx
sub edx, dword [ebp - 0x1c]
add edx, 0xa3a
sub edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x28]
or eax, edx
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
sub edx, ecx
or eax, edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
and eax, dword [ebp - 0x1c]
movzx ecx, byte [ebp - 0x20]
add ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
lea ecx, [ecx + edx - 0x3497]
and ecx, 0x255a
or eax, ecx
movzx edx, byte [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
sub ecx, edx
and ecx, dword [ebp - 4]
or eax, ecx
mov dword [ebp - 0x2c], eax
movzx edx, byte [ebp - 0x28]
mov eax, dword [ebp - 0x14]
lea ecx, [eax + edx + 0x1bb5]
and ecx, dword [ebp - 0x34]
movzx edx, byte [ebp - 8]
and ecx, edx
movzx eax, byte [ebp - 0x10]
imul edx, eax, 0x45a8
or ecx, edx
or ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 8]
movzx edx, word [ebp - 0x3c]
and eax, edx
and eax, dword [ebp - 0x30]
or ecx, eax
mov dword [ebp - 0x18], ecx
movzx eax, word [ebp - 8]
add eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x28]
and eax, 0x3909
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x24]
movzx edx, byte [ebp - 0x24]
add ecx, edx
movzx edx, byte [ebp - 0x10]
imul edx, dword [ebp - 0x18]
movzx esi, byte [ebp - 0x28]
sub edx, esi
and ecx, edx
or eax, ecx
movzx ecx, byte [ebp - 0x2c]
xor edx, edx
sub edx, ecx
or eax, edx
or eax, dword [ebp - 4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x34
je 0x4162ee
cmp dword [ebp - 0x94], 0x81
je 0x416328
cmp dword [ebp - 0x94], 0xba
je 0x4162ac
jmp 0x416366
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1710
movzx edx, byte [ebp - 0x34]
mov eax, dword [ebp - 0x10]
sub eax, edx
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x10]
sub eax, edx
and ecx, eax
movzx eax, byte [ebp - 0xc]
mov edx, dword [ebp - 0x24]
sub edx, eax
add edx, 0x20c0
movzx eax, byte [ebp - 0x14]
sub edx, eax
sub edx, dword [ebp - 0xc]
and ecx, edx
or ecx, dword [ebp - 0x2c]
mov dword [ebp - 4], ecx
jmp 0x41639f
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0xc]
and ecx, 0
movzx edx, word [ebp - 8]
mov eax, 0x2319
sub eax, edx
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
and eax, 0x303f
mov edx, dword [ebp - 0x18]
sub edx, 0x2bbf
mov esi, dword [ebp - 0x2c]
imul esi, dword [ebp - 0x10]
sub edx, esi
and eax, edx
or ecx, eax
mov dword [ebp - 0x34], ecx
jmp 0x41639f
imul eax, dword [ebp - 0x18], 0x3b75
movzx ecx, word [ebp - 0x30]
sub ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x24]
and ecx, dword [ebp - 0x30]
movzx edx, word [ebp - 0xc]
and ecx, edx
or eax, ecx
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x3c]
or eax, ecx
movzx edx, word [ebp - 0xc]
sub edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x28]
sub edx, ecx
add edx, dword [ebp - 0xc]
or eax, edx
mov dword [ebp - 0x38], eax
jmp 0x41639f
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0xc]
movzx eax, word [ebp - 0x38]
add edx, dword [ebp - 0x3c]
add eax, edx
movzx ecx, word [ebp - 8]
movzx edx, byte [ebp - 4]
imul ecx, edx
sub eax, ecx
or eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
xor ecx, dword [ebp - 0x34]
or eax, ecx
movzx edx, word [ebp - 0x28]
add edx, dword [ebp - 0x38]
add edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
or eax, edx
mov dword [ebp - 0x20], eax
movzx eax, byte [ebp - 0x18]
cmp dword [ebp - 0x2c], eax
je 0x4164c3
push str.eoleesgdhraswetatfn
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
and ecx, 0
or ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x24]
or ecx, edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 8]
add eax, dword [ebp - 0x30]
or ecx, eax
mov dword [ebp - 0x38], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 8], eax
imul ecx, dword [ebp - 0x20], 0
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x3c]
movzx eax, word [ebp - 0x1c]
add edx, eax
and ecx, edx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x38]
or ecx, edx
imul eax, dword [ebp - 0x30], 0
sub eax, dword [ebp - 0x1c]
movzx edx, word [ebp - 0x1c]
add eax, edx
sub eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x10]
movzx edx, word [ebp - 0x28]
sub eax, edx
or ecx, eax
mov word [ebp - 4], cx
push 0
push 0
push 0
push 0
push 0x12c
push 4
push 3
push str.oevsbri
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 8], eax
movzx eax, word [ebp - 0x3c]
movzx ecx, word [ebp - 0xc]
mov edx, dword [ebp - 0x30]
sub edx, ecx
or eax, edx
mov ecx, 0x3afa
sub ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x20]
movzx edx, word [ebp - 0x10]
sub ecx, edx
add ecx, dword [ebp - 0x3c]
movzx edx, word [ebp - 0x20]
add ecx, edx
or eax, ecx
or eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x30]
movzx edx, byte [ebp - 0x20]
add ecx, edx
or eax, ecx
mov word [ebp - 4], ax
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x20]
sub eax, ecx
sub eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
and eax, dword [ebp - 4]
mov edx, dword [ebp - 0x30]
shr edx, 0xae
and edx, 0x3fb8
or eax, edx
mov word [ebp - 0x24], ax
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x14]
or eax, dword [ebp - 0x3c]
or eax, dword [ebp - 0x28]
or eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x38]
or eax, ecx
movzx edx, word [ebp - 4]
or eax, edx
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x30]
or eax, ecx
mov byte [ebp - 8], al
movzx edx, word [ebp - 0x20]
cmp dword [ebp - 0x34], edx
ja 0x416729
movzx eax, word [ebp - 0x1c]
or eax, dword [ebp - 0x10]
or eax, dword [ebp - 0x14]
movzx ecx, byte [ebp - 0x30]
add ecx, 0x3eab
imul edx, dword [ebp - 0x3c], 0x680
sub ecx, edx
sub ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x34]
sub ecx, edx
add ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x24]
or eax, ecx
mov byte [ebp - 0xc], al
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x10]
or eax, ecx
movzx edx, word [ebp - 0x1c]
add edx, dword [ebp - 0x10]
movzx ecx, word [ebp - 0x38]
sub edx, ecx
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x38]
and edx, ecx
or eax, edx
mov edx, dword [ebp - 4]
and edx, 0x16fe
movzx ecx, word [ebp - 0x34]
and edx, ecx
or eax, edx
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x30]
and edx, dword [ebp - 0x20]
movzx eax, word [ebp - 0x28]
imul ecx, eax, 0
imul ecx, ecx, 0
mov eax, 0x316c
sar eax, cl
or edx, eax
mov ecx, dword [ebp - 8]
add ecx, 0x35d3
and ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 4]
and ecx, eax
or edx, ecx
mov word [ebp - 0x14], dx
imul ecx, dword [ebp - 8], 0
add ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
lea edx, [eax + edx + 0x3410]
sub edx, dword [ebp - 0x38]
or ecx, edx
mov eax, dword [ebp - 0x28]
and eax, 0
or ecx, eax
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
lea edx, [edx + eax + 0x1542]
or ecx, edx
or ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0x4bc
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x3c]
lea edx, [ecx + eax + 0x2fd8]
add edx, dword [ebp - 0x18]
and edx, dword [ebp - 0x28]
movzx eax, word [ebp - 0x20]
movzx ecx, word [ebp - 0x18]
sub eax, ecx
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 8]
and edx, eax
mov dword [ebp - 0x34], edx
movzx edx, word [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x28]
add edx, eax
sub edx, dword [ebp - 0x18]
movzx ecx, word [ebp - 0x14]
add ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x20]
and edx, ecx
movzx eax, byte [ebp - 0x10]
add eax, 0x598
sub eax, dword [ebp - 0x2c]
or edx, eax
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov dword [ebp - 0x1c], ecx
mov edx, 0xe6e
sub edx, dword [ebp - 0x3c]
movzx eax, word [ebp - 0x30]
sub edx, eax
or edx, dword [ebp - 4]
movzx ecx, word [ebp - 0x2c]
add ecx, dword [ebp - 0x30]
or edx, ecx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
movzx ecx, word [ebp - 0x38]
add eax, ecx
movzx ecx, word [ebp - 8]
imul ecx, ecx, 0
sub eax, ecx
movzx ecx, word [ebp - 0x24]
and eax, ecx
or edx, eax
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x38]
push edx
call dword [sym.imp.KERNEL32.dll_CancelIo]
mov dword [ebp - 0x20], eax
movzx eax, word [ebp - 0x2c]
sub eax, dword [ebp - 4]
and eax, 0x43c0
movzx ecx, word [ebp - 8]
sub ecx, dword [ebp - 0x28]
movzx edx, byte [ebp - 0x10]
mov esi, dword [ebp - 4]
sub esi, edx
and ecx, esi
or eax, ecx
or eax, 0xffffd640
xor ecx, ecx
sub ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x3c]
or eax, ecx
mov dword [ebp - 0x30], eax
push str.irharsdphitaote
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x1c], 0x4c0
jb 0x416611
movzx edx, word [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
sar edx, cl
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x18]
and eax, 0x40ec
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x30]
and eax, ecx
and eax, 0
or edx, eax
mov byte [ebp - 0x10], dl
push str.piulgntenit
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x2c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x1c], eax
jmp 0x416766
movzx ecx, byte [ebp - 0x2c]
xor edx, edx
sub edx, ecx
mov eax, dword [ebp - 0x1c]
lea ecx, [edx + eax + 0x36fc]
movzx edx, word [ebp - 0x34]
sub ecx, edx
movzx eax, word [ebp - 0x24]
sub eax, 0x36b5
sub eax, dword [ebp - 0xc]
and ecx, eax
movzx edx, word [ebp - 0x20]
mov eax, dword [ebp - 4]
lea edx, [edx + eax + 0x247f]
sub edx, dword [ebp - 0x24]
xor ecx, edx
mov word [ebp - 0x30], cx
cmp dword [ebp - 0x38], 0
je 0x416776
cmp dword [ebp - 0x2c], 0
jae 0x416921
push 0
lea eax, [ebp - 0x1c]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x10], eax
push str.hmwrto
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x3c]
and ecx, dword [ebp - 4]
mov edx, dword [ebp - 4]
sub edx, 0x43ee
sub edx, dword [ebp - 4]
or ecx, edx
movzx eax, byte [ebp - 0x30]
and eax, 0x1c7e
or ecx, eax
xor edx, edx
sub edx, dword [ebp - 0x14]
or ecx, edx
xor eax, eax
sub eax, dword [ebp - 4]
or ecx, eax
or ecx, dword [ebp - 0x18]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x20]
sub edx, 0x3ce3
or ecx, edx
imul eax, dword [ebp - 0x14], 0
imul edx, eax, 0xe68
or ecx, edx
or ecx, dword [ebp - 0x38]
or ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x10]
add eax, 0x11f7
sub eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x3c]
or eax, ecx
movzx edx, word [ebp - 0x38]
imul ecx, edx, 0x29cd
add ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x18]
or eax, ecx
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
lea ecx, [edx + eax + 0x4027]
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xc]
lea edx, [edx + eax + 0x2c77]
sub edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x28]
add eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x3c]
and edx, eax
or ecx, edx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
or ecx, edx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x3c], 0x674
jmp 0x41687a
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x676
jae 0x416921
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0xc], 0x263f
movzx eax, byte [ebp - 0x38]
imul edx, eax
add edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x38]
sub edx, 0x4d38
movzx eax, word [ebp - 8]
sub edx, eax
or ecx, edx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x2c]
lea eax, [edx + ecx - 0x6ff2]
imul ecx, dword [ebp - 0x38], 0
sub eax, ecx
sub eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x30]
lea eax, [eax + edx - 0x475]
xor ecx, ecx
sub ecx, dword [ebp - 0x28]
movzx edx, byte [ebp - 0x18]
sub ecx, edx
sub ecx, dword [ebp - 0x28]
or eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x10]
or eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x18]
add ecx, 0x213a
and ecx, dword [ebp - 0x30]
or eax, ecx
or eax, 0x2b00
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0xc]
or eax, edx
mov dword [ebp - 4], eax
jmp 0x416871
mov eax, dword [ebp - 0x10]
or eax, 0x1a9e
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x34]
or eax, ecx
or eax, dword [ebp - 0x14]
movzx edx, word [ebp - 0x10]
add edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x18]
or eax, edx
or eax, dword [ebp - 0x20]
movzx ecx, word [ebp - 0xc]
imul edx, ecx, 0
xor ecx, ecx
sub ecx, edx
or eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x416996
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x18]
movzx eax, word [ebp - 4]
add edx, eax
sub edx, dword [ebp - 8]
xor ecx, ecx
sub ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x38]
or edx, ecx
or edx, 0x2237
movzx eax, byte [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
or edx, eax
or edx, dword [ebp - 4]
movzx ecx, byte [ebp - 0x20]
movzx eax, word [ebp - 4]
and ecx, eax
and ecx, 0x1d97
or edx, ecx
mov word [ebp - 0x28], dx
movzx ecx, byte [ebp - 0x1c]
cmp dword [ebp - 0xc], ecx
jbe 0x417249
cmp dword [ebp - 8], 0x2d19
jae 0x416b1d
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 4]
jne 0x416b1d
xor eax, eax
sub eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 8]
lea ecx, [ecx + edx - 0x4d0d]
or eax, ecx
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x10]
or eax, edx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x18]
shl edx, cl
or eax, edx
movzx ecx, word [ebp - 0xc]
add ecx, dword [ebp - 0x38]
or eax, ecx
mov word [ebp - 0x2c], ax
movzx edx, byte [ebp - 0x28]
imul edx, dword [ebp - 8]
movzx eax, word [ebp - 4]
lea ecx, [edx + eax + 0x39cb]
and ecx, dword [ebp - 0x20]
and ecx, dword [ebp - 4]
and ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 4]
add edx, dword [ebp - 0x30]
movzx eax, word [ebp - 0x1c]
add edx, eax
and ecx, edx
or ecx, dword [ebp - 0xc]
mov word [ebp - 0x24], cx
imul ecx, dword [ebp - 4], 0
mov edx, dword [ebp - 8]
lea eax, [edx + ecx + 0x9ff]
sub eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x34]
or eax, ecx
movzx edx, word [ebp - 0x18]
add edx, dword [ebp - 8]
sub edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x20]
or eax, edx
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 4]
or eax, ecx
mov dword [ebp - 0x38], eax
movzx edx, word [ebp - 4]
add edx, 0x336c
movzx eax, word [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
sub ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0xc]
and edx, ecx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x24]
and edx, eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x1c]
or edx, ecx
mov dword [ebp - 0x3c], edx
push 0
lea edx, [ebp - 0xc]
push edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x28]
or eax, ecx
movzx edx, word [ebp - 4]
mov ecx, dword [ebp - 0x38]
sub ecx, edx
and ecx, dword [ebp - 8]
or eax, ecx
movzx edx, word [ebp - 0x28]
imul edx, dword [ebp - 0x24]
add edx, 0x218a
or eax, edx
mov dword [ebp - 0x2c], eax
movzx eax, byte [ebp - 0x14]
add eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x28]
movzx ecx, word [ebp - 4]
shl eax, cl
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x2c]
and eax, ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x34]
and eax, edx
movzx ecx, word [ebp - 0x34]
and eax, ecx
or eax, dword [ebp - 8]
movzx edx, byte [ebp - 8]
or eax, edx
mov dword [ebp - 0xc], eax
jmp 0x416b49
movzx eax, byte [ebp - 0x18]
add eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x24]
add eax, dword [ebp - 8]
add eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc]
shr edx, 0x5f
and ecx, edx
or eax, ecx
or eax, dword [ebp - 0x20]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x1c]
movzx ecx, word [ebp - 8]
imul eax, ecx
add eax, dword [ebp - 0xc]
sub eax, dword [ebp - 4]
sub eax, 0x2931
sub eax, dword [ebp - 0xc]
movzx edx, word [ebp - 0x24]
imul edx, dword [ebp - 0x18]
sub eax, edx
add eax, dword [ebp - 0x10]
add eax, dword [ebp - 4]
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x24]
or eax, ecx
mov byte [ebp - 0x30], al
xor edx, edx
sub edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x30]
xor edx, eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x20]
movzx eax, word [ebp - 0x34]
add ecx, eax
sub ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
lea ecx, [ecx + eax - 0x2d58]
or edx, ecx
mov byte [ebp - 4], dl
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x24]
movzx eax, byte [ebp - 0x18]
imul ecx, dword [ebp - 0x24], 0xb8a
mov esi, dword [ebp - 8]
sub esi, ecx
imul ecx, dword [ebp - 0x20], 0
add esi, ecx
sub esi, dword [ebp - 0x10]
and eax, esi
xor edx, eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 0x4379]
sub eax, dword [ebp - 0x20]
or edx, eax
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0x18]
add ecx, 0x1212
or ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x24]
lea edx, [eax + edx + 0x1dda]
sub edx, dword [ebp - 4]
movzx eax, byte [ebp - 0x18]
sub edx, eax
add edx, 0x107
sub edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x18]
movzx eax, word [ebp - 0x20]
add edx, eax
and edx, dword [ebp - 4]
or ecx, edx
or ecx, dword [ebp - 0x1c]
mov word [ebp - 0xc], cx
movzx ecx, byte [ebp - 0x3c]
add ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
add edx, 0x3bf9
and ecx, edx
or ecx, dword [ebp - 0x28]
movzx eax, word [ebp - 0x34]
or ecx, eax
mov edx, dword [ebp - 0x30]
sub edx, 0x2832
and edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 8]
and edx, eax
or ecx, edx
mov dword [ebp - 0x10], ecx
xor ecx, ecx
sub ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x3c]
or ecx, edx
movzx eax, word [ebp - 0x38]
imul eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xc]
or ecx, eax
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x20]
or ecx, edx
mov byte [ebp - 8], cl
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x30]
ja 0x416de3
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x24]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 4]
and edx, 0
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x18]
movzx ecx, byte [ebp - 0x38]
sub eax, ecx
and edx, eax
mov eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0xc]
and eax, ecx
or edx, eax
mov eax, dword [ebp - 0x3c]
and eax, dword [ebp - 0x38]
or edx, eax
movzx ecx, byte [ebp - 0x1c]
or edx, ecx
mov word [ebp - 0x14], dx
movzx edx, word [ebp - 0x24]
imul eax, dword [ebp - 0x24], 0x2661
sub edx, eax
and edx, 0
or edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 4]
and ecx, dword [ebp - 4]
or edx, ecx
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0xc]
sub eax, 0x2dfa
sub eax, dword [ebp - 0xc]
movzx ecx, word [ebp - 0x10]
sub eax, ecx
and eax, dword [ebp - 4]
or edx, eax
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x20]
movzx eax, byte [ebp - 0x10]
sub edx, eax
add edx, dword [ebp - 0xc]
movzx ecx, word [ebp - 0x10]
sub edx, ecx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x20]
or edx, eax
movzx ecx, byte [ebp - 0xc]
and ecx, dword [ebp - 0x14]
and ecx, 0xfb8
imul eax, dword [ebp - 0x34], 0x3606
imul eax, eax, 0
and ecx, eax
or edx, ecx
movzx ecx, byte [ebp - 8]
or edx, ecx
mov byte [ebp - 0x30], dl
mov edx, dword [ebp - 4]
and edx, dword [ebp - 0x10]
and edx, dword [ebp - 4]
imul ecx, dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x30]
shl eax, cl
or edx, eax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
xor eax, eax
sub eax, ecx
or edx, eax
movzx ecx, word [ebp - 0x30]
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x34]
add ecx, eax
or edx, ecx
mov byte [ebp - 0x2c], dl
push str.gteionssyt
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x38], 0x47eb
sub eax, ecx
and eax, dword [ebp - 0x28]
and eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
and edx, 0
and edx, dword [ebp - 0x3c]
or eax, edx
or eax, dword [ebp - 0x34]
or eax, dword [ebp - 8]
or eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
jmp 0x416e20
mov eax, dword [ebp - 0x38]
and eax, dword [ebp - 0x2c]
movzx ecx, byte [ebp - 0x28]
xor edx, edx
sub edx, dword [ebp - 0x10]
and ecx, edx
or eax, ecx
movzx ecx, byte [ebp - 8]
mov edx, dword [ebp - 0x20]
sub edx, ecx
or eax, edx
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2556
movzx edx, word [ebp - 0x20]
sub ecx, edx
add ecx, dword [ebp - 0x20]
or eax, ecx
or eax, 0x2697
or eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x20]
jne 0x416f8d
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x14]
ja 0x416f8d
movzx edx, word [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
sub eax, edx
sub eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
or eax, dword [ebp - 0x30]
or eax, dword [ebp - 0x18]
imul ecx, dword [ebp - 0xc], 0
add ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x34]
and ecx, dword [ebp - 0x2c]
xor edx, edx
sub edx, dword [ebp - 0x34]
and ecx, edx
and ecx, dword [ebp - 0x24]
or eax, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x10]
and eax, dword [ebp - 8]
or eax, dword [ebp - 0x38]
or eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x2c]
movzx edx, byte [ebp - 0x34]
add ecx, edx
sub ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x28]
and ecx, dword [ebp - 0x18]
or eax, ecx
mov dword [ebp - 0x24], eax
mov eax, 0x16df
sub eax, dword [ebp - 4]
movzx ecx, word [ebp - 0x14]
mov edx, dword [ebp - 0x28]
add edx, 0x2a8c
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x3c]
and ecx, edx
and ecx, 0x17d0
or eax, ecx
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x38]
or eax, ecx
or eax, dword [ebp - 0xc]
mov dword [ebp - 0x34], eax
imul edx, dword [ebp - 0x1c], 0xb0d
movzx eax, word [ebp - 0x20]
mov ecx, eax
imul ecx, dword [ebp - 0xc]
shr edx, cl
and edx, 0
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
and eax, dword [ebp - 0x34]
and eax, 0x3141
xor ecx, eax
or edx, ecx
mov dword [ebp - 0x3c], edx
mov ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 4]
or ecx, edx
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x34]
or ecx, eax
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x14]
and edx, eax
or ecx, edx
mov word [ebp - 0x38], cx
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x14]
movzx edx, word [ebp - 0x10]
imul edx, dword [ebp - 0x34]
imul edx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x14]
lea eax, [edx + ecx + 0x2ab5]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x24]
add ecx, 0x4d39
and eax, ecx
movzx edx, byte [ebp - 0xc]
add edx, dword [ebp - 0x3c]
and eax, edx
imul ecx, dword [ebp - 0x10], 0x3c87
or eax, ecx
mov dword [ebp - 4], eax
push str.adnii
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x18], 0
jb 0x416f9f
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 0x18]
jae 0x4170ff
imul eax, dword [ebp - 0x24], 0x30ad
add eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x20]
movzx ecx, word [ebp - 0x1c]
imul ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x28]
sub ecx, edx
sub ecx, dword [ebp - 0x2c]
add ecx, 0x33c9
or eax, ecx
movzx ecx, word [ebp - 0xc]
sub ecx, dword [ebp - 0x10]
or eax, ecx
mov dword [ebp - 0x30], eax
movzx edx, word [ebp - 8]
add edx, dword [ebp - 0x30]
movzx eax, byte [ebp - 0x2c]
imul eax, dword [ebp - 0x10]
add edx, eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
lea ecx, [ecx + eax + 0x610e]
sub ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 0x34]
or edx, ecx
or edx, dword [ebp - 0x38]
or edx, 0x316
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc]
add eax, 0x213b
sub eax, dword [ebp - 0xc]
sub eax, dword [ebp - 4]
and edx, eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x3c]
lea ecx, [esi + ecx - 0x503]
shr eax, cl
or edx, eax
mov dword [ebp - 0x10], edx
movzx edx, word [ebp - 0x3c]
mov eax, 0x13c9
sub eax, dword [ebp - 0x3c]
and eax, 0
and eax, dword [ebp - 0x24]
and eax, dword [ebp - 0x14]
xor eax, dword [ebp - 0x14]
or edx, eax
or edx, 0x35d3
or edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x24]
and ecx, 0x1eb9feb
or edx, ecx
mov dword [ebp - 0x30], edx
movzx edx, byte [ebp - 0x34]
sub edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x10]
add eax, dword [ebp - 0xc]
movzx ecx, word [ebp - 0x34]
add eax, dword [ebp - 0x2c]
add ecx, eax
sub ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
lea ecx, [ecx + eax - 0x49b9]
movzx eax, word [ebp - 0x3c]
sub ecx, eax
or edx, ecx
mov dword [ebp - 0x28], edx
push 0
push 0
push 0
push 0
push 0x12c
push 4
push 1
push str.nsfohupefhectegaklng
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x24]
imul edx, dword [ebp - 0x18], 0x2d05
sub ecx, edx
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x24]
sub ecx, eax
sub ecx, dword [ebp - 0x20]
sub ecx, 0x3383
mov edx, dword [ebp - 8]
and edx, 0xffffe4b5
or ecx, edx
mov byte [ebp - 0x1c], cl
jmp 0x417140
movzx eax, byte [ebp - 0xc]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
lea edx, [eax + edx - 0x4a7f]
and edx, 0x44e8
and edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
add eax, 0x3ace
and edx, eax
or ecx, edx
movzx edx, byte [ebp - 0x1c]
imul eax, dword [ebp - 0x28], 0
add eax, dword [ebp - 8]
and edx, eax
or ecx, edx
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x34]
movzx edx, word [ebp - 0x3c]
imul ecx, edx
imul eax, dword [ebp - 0x2c], 0x2f77
add ecx, dword [ebp - 0x10]
lea ecx, [eax + ecx - 0x14c]
sub ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x10]
movzx edx, byte [ebp - 0x10]
add edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x38]
or ecx, edx
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x24]
and eax, dword [ebp - 4]
and eax, 0x4517
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x2c]
movzx edx, byte [ebp - 8]
add ecx, edx
sub ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
lea ecx, [ecx + edx - 0x2b9e]
sub ecx, dword [ebp - 0x1c]
and eax, ecx
or eax, dword [ebp - 0xc]
or eax, dword [ebp - 8]
or eax, 0xdfa
or eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
movzx eax, word [ebp - 0x18]
imul eax, dword [ebp - 0x24]
or edx, eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x201
sub ecx, dword [ebp - 0x30]
or edx, ecx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x1c]
or edx, eax
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x34]
and ecx, dword [ebp - 8]
and ecx, 0
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x24]
movzx eax, byte [ebp - 0x30]
mov esi, 0x10df
sub esi, eax
sub esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
lea eax, [esi + eax - 0x881]
movzx esi, word [ebp - 0x18]
sub eax, esi
and edx, eax
or ecx, edx
mov dword [ebp - 0x3c], ecx
movzx ecx, byte [ebp - 0x34]
mov edx, dword [ebp - 8]
sub edx, ecx
and edx, 0x403
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x14]
add eax, 0x3502
or edx, eax
movzx ecx, byte [ebp - 0x10]
sub ecx, dword [ebp - 0x28]
sub ecx, 0x46c0
sub ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x20]
or edx, ecx
mov dword [ebp - 0x30], edx
jmp 0x417280
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x24]
add edx, eax
or edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xc]
sub eax, ecx
add eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x18]
or edx, eax
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0xc]
or edx, ecx
mov byte [ebp - 8], dl
cmp dword [ebp - 0x28], 0
jb 0x4181ff
cmp dword [ebp - 0x18], 0
ja 0x4181ff
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x20]
add edx, 0xd0d
sub edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x34]
movzx eax, word [ebp - 0x18]
add edx, eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 8]
and edx, ecx
movzx eax, word [ebp - 0x28]
add eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x28]
movzx ecx, word [ebp - 4]
sub eax, ecx
and edx, eax
and edx, 0
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x34]
je 0x4174d8
mov dword [ebp - 0x10], 0xc1e
jmp 0x4172ed
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xc20
jae 0x417395
movzx edx, byte [ebp - 0x38]
or edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x30]
movzx ecx, word [ebp - 4]
movzx esi, byte [ebp - 0x2c]
imul ecx, esi
add ecx, dword [ebp - 0x34]
shl eax, cl
movzx ecx, word [ebp - 0xc]
mov esi, dword [ebp - 0x30]
sub esi, ecx
and eax, esi
or edx, eax
mov byte [ebp - 8], dl
imul edx, dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x30]
sub eax, dword [ebp - 8]
add eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x14]
or edx, eax
or edx, dword [ebp - 0x34]
movzx ecx, byte [ebp - 0x14]
add ecx, dword [ebp - 4]
and ecx, dword [ebp - 0x3c]
or edx, ecx
movzx eax, word [ebp - 4]
or edx, eax
or edx, dword [ebp - 0x34]
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x14]
sub ecx, 0x209d
movzx edx, byte [ebp - 4]
mov eax, dword [ebp - 0x34]
lea edx, [edx + eax + 0x428d]
movzx eax, word [ebp - 0x18]
mov esi, dword [ebp - 0x28]
sub esi, eax
and edx, esi
or ecx, edx
or ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x2c]
add edx, dword [ebp - 8]
or ecx, edx
mov dword [ebp - 0x38], ecx
jmp 0x4172e4
mov eax, dword [ebp - 4]
and eax, dword [ebp - 0x1c]
or eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x28]
or eax, ecx
movzx edx, word [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
sub ecx, edx
or eax, ecx
movzx edx, byte [ebp - 4]
add edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x10]
or eax, edx
mov ecx, dword [ebp - 0x34]
and ecx, dword [ebp - 0x14]
or eax, ecx
mov dword [ebp - 0x2c], eax
movzx edx, byte [ebp - 0xc]
mov eax, dword [ebp - 4]
sub eax, edx
sub eax, dword [ebp - 0x20]
and eax, dword [ebp - 0x24]
and eax, dword [ebp - 0x3c]
and eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x18]
sub ecx, 0x49a2
and ecx, dword [ebp - 0x1c]
and ecx, 0x1d01
and ecx, 0x4b51
or eax, ecx
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x1c]
or eax, edx
mov dword [ebp - 0x2c], eax
movzx eax, byte [ebp - 0x20]
mov ecx, 0x305c
sub ecx, eax
mov edx, dword [ebp - 0x10]
sub edx, 0x44fd
sub edx, dword [ebp - 4]
add edx, 0x134f
and edx, dword [ebp - 0x28]
or ecx, edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x10]
or ecx, eax
xor edx, edx
sub edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x38]
or ecx, edx
mov byte [ebp - 0x2c], cl
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 4]
or eax, dword [ebp - 0x18]
movzx ecx, byte [ebp - 0x2c]
imul ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
lea ecx, [ecx + edx - 0x45bc]
sub ecx, dword [ebp - 0xc]
add ecx, 0x3f54
movzx edx, word [ebp - 0x1c]
sub ecx, edx
add ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x30]
or eax, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
add eax, 0x3b31
and eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x34]
and ecx, 0
and ecx, dword [ebp - 4]
or eax, ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x14]
or eax, edx
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 0x14]
or eax, ecx
or eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x30]
sub edx, eax
add edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x10]
and edx, dword [ebp - 0x3c]
or edx, 0x6e6
mov ecx, dword [ebp - 0x30]
add ecx, 0x3cd9
or edx, ecx
or edx, dword [ebp - 0x34]
mov byte [ebp - 0x2c], dl
jmp 0x417511
movzx edx, byte [ebp - 0x38]
movzx eax, byte [ebp - 0x38]
movzx ecx, byte [ebp - 4]
imul eax, ecx
or edx, eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x28]
and eax, dword [ebp - 0x2c]
and eax, 0
and eax, 0
or edx, eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x24]
movzx eax, word [ebp - 0x3c]
and ecx, eax
or edx, ecx
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 0x34]
or ecx, 0xeef
mov edx, dword [ebp - 0x20]
sub edx, 0x460
movzx eax, word [ebp - 4]
sub edx, eax
or ecx, edx
mov edx, dword [ebp - 0x3c]
add edx, 0x180b
or ecx, edx
movzx eax, word [ebp - 0x30]
mov edx, dword [ebp - 0xc]
lea eax, [edx + eax - 0xa8f]
sub eax, dword [ebp - 0x20]
or ecx, eax
mov dword [ebp - 0x18], ecx
push str.ihhaonn
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x18], eax
movzx ecx, byte [ebp - 8]
add ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x38]
movzx edx, word [ebp - 4]
and ecx, edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
movzx edx, byte [ebp - 0x20]
movzx esi, word [ebp - 8]
sub edx, esi
and eax, edx
or ecx, eax
movzx eax, word [ebp - 0x18]
mov edx, dword [ebp - 0x18]
sub edx, eax
sub edx, dword [ebp - 8]
or ecx, edx
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x38], 0x35c1
jne 0x417747
movzx eax, word [ebp - 0x18]
and eax, dword [ebp - 0x18]
movzx ecx, byte [ebp - 0x30]
and eax, ecx
movzx edx, word [ebp - 0x20]
sub edx, dword [ebp - 0x1c]
movzx ecx, byte [ebp - 4]
imul ecx, ecx, 0x7cd
sub edx, ecx
and edx, dword [ebp - 0x2c]
movzx ecx, word [ebp - 0x10]
mov esi, dword [ebp - 0x28]
sub esi, ecx
add esi, dword [ebp - 0xc]
sub esi, dword [ebp - 0x20]
and edx, esi
or eax, edx
mov edx, 0x16ae
sub edx, dword [ebp - 0x18]
or eax, edx
mov dword [ebp - 0x38], eax
movzx eax, word [ebp - 0x38]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
movzx edx, word [ebp - 0x34]
xor edx, dword [ebp - 8]
or ecx, edx
or ecx, dword [ebp - 0x10]
movzx eax, word [ebp - 0x38]
add eax, dword [ebp - 0x18]
movzx edx, word [ebp - 0x10]
sub eax, edx
add eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x28]
or ecx, eax
movzx eax, word [ebp - 0x10]
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0x3c]
sub eax, edx
or ecx, eax
mov dword [ebp - 0x30], ecx
movzx eax, byte [ebp - 0x18]
mov edx, dword [ebp - 0x30]
sub edx, eax
add edx, dword [ebp - 0x10]
and edx, dword [ebp - 8]
movzx eax, byte [ebp - 4]
mov ecx, dword [ebp - 0x18]
sub ecx, 0x1942
sar eax, cl
movzx ecx, word [ebp - 0x34]
movzx esi, byte [ebp - 0x14]
imul ecx, esi
movzx esi, word [ebp - 0xc]
imul esi, dword [ebp - 0x18]
add ecx, esi
xor eax, ecx
or edx, eax
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0xc]
sub edx, 0x3934
sub edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x1c]
and edx, eax
movzx ecx, byte [ebp - 0x18]
imul ecx, dword [ebp - 0x3c]
or edx, ecx
or edx, dword [ebp - 0x24]
movzx eax, byte [ebp - 0x28]
add eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
imul ecx, dword [ebp - 0x30]
and eax, ecx
or edx, eax
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x2c]
and edx, dword [ebp - 0x34]
movzx eax, word [ebp - 0x38]
and edx, eax
or edx, dword [ebp - 0xc]
movzx ecx, word [ebp - 0x1c]
movzx eax, byte [ebp - 0x10]
sub ecx, eax
add ecx, dword [ebp - 0x20]
movzx eax, word [ebp - 0x28]
movzx esi, byte [ebp - 0x3c]
add eax, dword [ebp - 0x20]
add esi, eax
and ecx, esi
and ecx, dword [ebp - 0x18]
or edx, ecx
mov ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 4]
or edx, ecx
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
lea ecx, [eax + edx - 0x1cda]
movzx edx, word [ebp - 0x20]
imul eax, edx, 0
sub ecx, eax
and ecx, 0
xor edx, edx
sub edx, dword [ebp - 0x20]
movzx eax, byte [ebp - 0x28]
sub edx, eax
and edx, dword [ebp - 0x1c]
or ecx, edx
movzx edx, word [ebp - 0x24]
add edx, dword [ebp - 0x38]
or ecx, edx
mov dword [ebp - 0x2c], ecx
movzx eax, byte [ebp - 0x10]
movzx ecx, byte [ebp - 0x28]
xor eax, ecx
movzx edx, word [ebp - 0x24]
add edx, dword [ebp - 0x18]
or eax, edx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
lea edx, [edx + ecx + 0x1bbb]
sub edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
lea ecx, [ecx + esi + 0x366a]
shl edx, cl
or eax, edx
mov byte [ebp - 0x3c], al
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x20]
sub edx, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 8]
sub eax, dword [ebp - 0x30]
movzx ecx, word [ebp - 0x14]
add eax, ecx
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x38]
and eax, ecx
or edx, eax
mov byte [ebp - 0x28], dl
movzx edx, byte [ebp - 0xc]
mov eax, dword [ebp - 0x34]
sub eax, edx
xor eax, dword [ebp - 0x1c]
movzx ecx, byte [ebp - 0x28]
mov edx, dword [ebp - 4]
sub edx, ecx
mov ecx, dword [ebp - 0x18]
lea edx, [edx + ecx + 0x2f7d]
or eax, edx
or eax, dword [ebp - 0x28]
movzx ecx, word [ebp - 4]
sub ecx, dword [ebp - 4]
or eax, ecx
mov edx, dword [ebp - 0xc]
add edx, 0x953
movzx ecx, byte [ebp - 0x10]
and edx, ecx
or eax, edx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x3c], 0xfb9
mov edx, dword [ebp - 0x2c]
or edx, 0x176e
mov eax, dword [ebp - 0x2c]
and eax, 0
movzx ecx, word [ebp - 0x14]
and eax, ecx
or edx, eax
movzx eax, word [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
and ecx, 0x43b7
or edx, ecx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x30]
movzx ecx, byte [ebp - 0x24]
add eax, ecx
sub eax, dword [ebp - 0x14]
or edx, eax
or edx, dword [ebp - 0xc]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x30]
movzx eax, byte [ebp - 0x24]
sub edx, eax
movzx ecx, word [ebp - 0x38]
movzx eax, byte [ebp - 0xc]
imul ecx, eax
sub edx, ecx
movzx ecx, word [ebp - 0x38]
sub edx, ecx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
and edx, eax
and edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x28]
and edx, ecx
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x3c]
add edx, 5
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 8]
and eax, ecx
or eax, dword [ebp - 0x38]
imul edx, dword [ebp - 0x2c], 0
mov ecx, dword [ebp - 8]
lea edx, [ecx + edx + 0x630]
or eax, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 7
je 0x41790a
cmp dword [ebp - 0x8c], 0x50
je 0x4178d5
cmp dword [ebp - 0x8c], 0x51
je 0x417897
jmp 0x41793b
movzx ecx, byte [ebp - 0x30]
mov edx, dword [ebp - 0x28]
sub edx, ecx
and edx, dword [ebp - 8]
movzx eax, word [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
lea eax, [ecx + eax - 0x4baa]
and eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov esi, dword [ebp - 8]
lea ecx, [esi + ecx + 0x3da7]
and eax, ecx
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x20]
and eax, ecx
or edx, eax
mov dword [ebp - 0x1c], edx
jmp 0x41796a
movzx edx, byte [ebp - 0xc]
imul eax, dword [ebp - 0x10], 0
add edx, eax
xor ecx, ecx
sub ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x1c]
shr edx, cl
mov ecx, dword [ebp - 0x30]
add ecx, 0x1e34
or edx, ecx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x24]
or edx, eax
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x1c]
or edx, ecx
mov byte [ebp - 0x2c], dl
jmp 0x41796a
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0xc]
add edx, 0x2833
movzx eax, word [ebp - 0x30]
sub edx, eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x30]
and edx, ecx
and edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x24]
add eax, dword [ebp - 4]
or edx, eax
mov dword [ebp - 0x20], edx
jmp 0x41796a
imul ecx, dword [ebp - 8], 0
sub ecx, dword [ebp - 0x28]
or ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
add edx, 0x1f90
xor edx, dword [ebp - 0x30]
or ecx, edx
or ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x18], 0x4cdc
sub eax, edx
or ecx, eax
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
and eax, 0
movzx ecx, byte [ebp - 0x24]
imul ecx, dword [ebp - 0x34]
movzx edx, byte [ebp - 0xc]
add ecx, dword [ebp - 0x1c]
lea ecx, [edx + ecx + 0x566]
or eax, ecx
mov edx, dword [ebp - 8]
and edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x1c]
add ecx, 0x3bc6
and edx, ecx
or eax, edx
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x24]
add edx, eax
mov ecx, dword [ebp - 0x18]
shl ecx, 0x4b
or edx, ecx
movzx eax, byte [ebp - 0x20]
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x34]
add eax, ecx
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x38]
or edx, eax
or edx, 0xffffd639
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x20]
or edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
sub ecx, dword [ebp - 0xc]
or edx, ecx
movzx eax, byte [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x10]
and eax, ecx
or edx, eax
or edx, dword [ebp - 0x38]
mov dword [ebp - 0x34], edx
mov edx, 0xffffe581
mov ecx, dword [ebp - 0x34]
shl edx, cl
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 0x24]
add eax, 0x2b9f
and eax, 0
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x1c]
movzx esi, word [ebp - 0x28]
sub ecx, esi
xor eax, ecx
or edx, eax
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], 0x573
movzx edx, byte [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
movzx eax, byte [ebp - 0x30]
sub edx, eax
mov ecx, dword [ebp - 0x28]
lea edx, [edx + ecx + 0x12f1]
movzx eax, word [ebp - 0x24]
sub edx, eax
mov ecx, dword [ebp - 0x28]
imul ecx, dword [ebp - 0x2c]
sub edx, ecx
sub edx, dword [ebp - 8]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], edx
movzx edx, word [ebp - 0x30]
mov eax, dword [ebp - 0x38]
sub eax, edx
or eax, dword [ebp - 0x30]
imul ecx, dword [ebp - 8], 0x3904
imul ecx, dword [ebp - 0x30]
xor edx, edx
sub edx, dword [ebp - 0x14]
and ecx, edx
or eax, ecx
movzx ecx, word [ebp - 0x30]
imul edx, ecx, 0
add edx, 0x107d
or eax, edx
mov byte [ebp - 0x10], al
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
movzx ecx, word [ebp - 0x28]
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x2c]
or ecx, edx
movzx eax, word [ebp - 0x1c]
mov edx, dword [ebp - 0x34]
sub edx, eax
and edx, dword [ebp - 0x20]
or ecx, edx
mov eax, dword [ebp - 0x14]
add eax, 0x17da
movzx edx, word [ebp - 0x1c]
sub eax, edx
movzx edx, word [ebp - 0x14]
sub eax, edx
add eax, dword [ebp - 0x30]
and eax, dword [ebp - 4]
or ecx, eax
mov dword [ebp - 0x10], ecx
movzx eax, word [ebp - 8]
cmp dword [ebp - 0x18], eax
jb 0x417c10
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x14]
jb 0x417c10
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x48]
sub eax, 0x35
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xe3
ja case.0x417b1e.1
mov ecx, dword [ebp - 0x48]
movzx edx, byte [ecx + 0x41b1c0]
jmp dword [edx*4 + 0x41b1ac]
movzx eax, byte [ebp - 0x24]
and eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x18]
sub ecx, 0x3b56
mov edx, 0xf2a
sub edx, dword [ebp - 0x18]
and ecx, edx
or eax, ecx
or eax, 0x2f08
or eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
jmp 0x417c10
imul ecx, dword [ebp - 0x10], 0
add ecx, dword [ebp - 0x20]
xor eax, eax
shl eax, cl
movzx ecx, word [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
sub edx, ecx
add edx, 0x3129
sub edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x30]
movzx ecx, byte [ebp - 8]
sub edx, ecx
movzx ecx, byte [ebp - 0x14]
imul ecx, dword [ebp - 4]
and edx, ecx
or eax, edx
mov word [ebp - 0x2c], ax
jmp 0x417c10
movzx edx, byte [ebp - 4]
mov eax, dword [ebp - 0x30]
sub eax, edx
imul ecx, dword [ebp - 4], 0x3c26
add eax, ecx
movzx edx, byte [ebp - 0x38]
add eax, dword [ebp - 0x2c]
add edx, eax
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
lea ecx, [edx + eax + 0x376b]
and ecx, 0
mov edx, dword [ebp - 0x10]
add edx, 0x3363
or ecx, edx
mov dword [ebp - 8], ecx
jmp 0x417c10
mov eax, dword [ebp - 0x28]
add eax, 0x4cc4
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x1c]
sub eax, ecx
sub eax, dword [ebp - 8]
and eax, dword [ebp - 0x14]
or eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
jmp 0x417c10
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
and edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x2c]
add eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x1c]
lea eax, [eax + ecx - 0x5a5c]
sub eax, dword [ebp - 0x24]
and edx, eax
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x28], 0
jae 0x417c1e
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 8]
jb 0x417c49
mov edx, dword [ebp - 0x38]
add edx, 0x2d1a
and edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
add eax, 0x3fd3
or edx, eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
shl eax, cl
or edx, eax
mov dword [ebp - 0x2c], edx
jmp 0x417c74
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x24]
and ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 8]
and edx, dword [ebp - 8]
or ecx, edx
movzx eax, word [ebp - 0x2c]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 0x20]
or ecx, eax
mov edx, dword [ebp - 0x20]
and edx, 0
or ecx, edx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x2d0], 0x114
lea eax, [ebp - 0x2d0]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0xc], 0x575
jb 0x417a6b
mov dword [ebp - 0x38], 0
jmp 0x417cad
mov ecx, dword [ebp - 0x38]
add ecx, 0x10
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0x30
jae 0x417d41
mov edx, dword [ebp - 0x1c]
cmp edx, dword [ebp - 0x10]
jbe 0x417ce4
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x18]
movzx ecx, byte [ebp - 0x1c]
add eax, dword [ebp - 0x20]
add ecx, eax
and ecx, dword [ebp - 0x1c]
or ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x521
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x24]
or edx, eax
movzx ecx, byte [ebp - 0x14]
add ecx, dword [ebp - 0xc]
or edx, ecx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x1c]
or edx, eax
or edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 4]
or ecx, 0x2180
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x2c]
movzx eax, word [ebp - 0x28]
imul eax, dword [ebp - 8]
add edx, eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
add edx, eax
or ecx, edx
mov dword [ebp - 0x14], ecx
jmp 0x417ca4
cmp dword [ebp - 0x3c], 0xfc8
jb 0x4177fc
mov ecx, dword [ebp - 0x2c]
and ecx, 0x2d68
movzx edx, byte [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
sub eax, edx
and eax, dword [ebp - 0x1c]
or ecx, eax
mov edx, dword [ebp - 0x20]
sub edx, 0x4c8e
or ecx, edx
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x18]
and eax, 0x20f5
and eax, dword [ebp - 0x28]
or ecx, eax
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x14]
jae 0x417ec2
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x30]
and edx, dword [ebp - 0x2c]
or edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
add eax, 0x793
or edx, eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x30]
or edx, ecx
movzx eax, byte [ebp - 0x18]
sub eax, dword [ebp - 4]
add eax, 0x146b
sub eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x24]
add eax, ecx
or edx, eax
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x30]
add edx, 0x28c2
and edx, dword [ebp - 0x34]
movzx eax, byte [ebp - 0x20]
or edx, eax
movzx ecx, byte [ebp - 0xc]
add ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x38]
or edx, ecx
mov eax, dword [ebp - 8]
add eax, 0x2f88
or edx, eax
movzx ecx, byte [ebp - 0x18]
xor ecx, dword [ebp - 0x24]
or edx, ecx
mov dword [ebp - 4], edx
movzx edx, word [ebp - 0x10]
add edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x3c]
add edx, eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x258b
movzx eax, word [ebp - 0x20]
add eax, dword [ebp - 0x38]
and eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x30]
add esi, 0x430d
and eax, esi
and eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x28]
xor ecx, eax
or edx, ecx
mov byte [ebp - 0x14], dl
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x1c]
and ecx, 0x34c4
movzx edx, word [ebp - 0x34]
and ecx, edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
and eax, 0
or ecx, eax
movzx edx, byte [ebp - 4]
sub edx, dword [ebp - 0x10]
and edx, dword [ebp - 0xc]
or ecx, edx
movzx eax, byte [ebp - 0x18]
mov edx, dword [ebp - 0x30]
sub edx, eax
or ecx, edx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x14]
or eax, dword [ebp - 0x38]
mov ecx, 0x102a
sub ecx, dword [ebp - 0x34]
and ecx, dword [ebp - 0xc]
or eax, ecx
mov edx, dword [ebp - 0x2c]
and edx, dword [ebp - 0x20]
and edx, dword [ebp - 0x2c]
movzx ecx, word [ebp - 8]
imul ecx, ecx, 0x1347
sub ecx, dword [ebp - 0x3c]
and edx, ecx
or eax, edx
mov dword [ebp - 4], eax
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_CancelIo]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
lea edx, [ecx + eax + 0x258]
and edx, dword [ebp - 8]
mov eax, 0x4692
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x14]
and edx, eax
mov ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 0x30]
or edx, ecx
movzx eax, byte [ebp - 4]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
sub ecx, 0xec2
movzx eax, byte [ebp - 0x30]
sub ecx, eax
or edx, ecx
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x20]
lea eax, [ecx + edx + 0x400b]
add eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
shr edx, cl
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x38]
imul esi, dword [ebp - 0x38], 0x3eb0
sub ecx, esi
and edx, ecx
and edx, dword [ebp - 0x20]
or eax, edx
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x3c]
cmp edx, dword [ebp - 0x30]
jb 0x4181bd
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x24]
or eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 8]
or eax, ecx
or eax, 0x42f8
imul edx, dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x1c]
sub ecx, edx
movzx edx, word [ebp - 0x3c]
sub ecx, edx
add ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x2c]
and ecx, edx
or eax, ecx
mov dword [ebp - 4], eax
movzx eax, word [ebp - 0x10]
mov ecx, dword [ebp - 0x30]
sub ecx, eax
add ecx, dword [ebp - 0x1c]
and ecx, 0
mov edx, dword [ebp - 0x3c]
sub edx, 0x3375
and ecx, edx
movzx eax, word [ebp - 0x28]
movzx edx, byte [ebp - 0x34]
sub eax, edx
mov edx, dword [ebp - 0x28]
imul edx, dword [ebp - 0x1c]
movzx esi, byte [ebp - 0x14]
imul esi, esi, 0
sub edx, esi
and eax, edx
or ecx, eax
mov dword [ebp - 4], ecx
movzx eax, word [ebp - 0x38]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
movzx edx, byte [ebp - 0xc]
mov eax, 0x12ec
sub eax, edx
add eax, dword [ebp - 0x14]
and ecx, eax
and ecx, dword [ebp - 0x1c]
movzx edx, word [ebp - 4]
mov eax, dword [ebp - 0x20]
sub eax, edx
sub eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x10]
and ecx, eax
or ecx, 0xc65
mov word [ebp - 0x30], cx
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x8bc
and ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x30]
xor edx, dword [ebp - 0x20]
or ecx, edx
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x3c]
sub edx, eax
sub edx, dword [ebp - 8]
add edx, dword [ebp - 0x2c]
or ecx, edx
movzx eax, word [ebp - 0x10]
sub eax, dword [ebp - 0x3c]
and eax, dword [ebp - 0x38]
or ecx, eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x3e4], 0x114
lea ecx, [ebp - 0x3e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x50]
sub eax, 0x3a
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x67
ja case.0x418066.1
mov ecx, dword [ebp - 0x50]
movzx edx, byte [ecx + 0x41b2b8]
jmp dword [edx*4 + 0x41b2a4]
imul eax, dword [ebp - 0x38], 0
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x24]
movzx esi, word [ebp - 0x1c]
add edx, esi
and ecx, edx
or eax, ecx
movzx ecx, word [ebp - 0x18]
add ecx, dword [ebp - 0x20]
movzx edx, word [ebp - 0x1c]
sub ecx, edx
and ecx, dword [ebp - 0x3c]
or eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x41818f
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
lea edx, [ecx + eax + 0x6a6]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x38]
shl edx, cl
and edx, 0x779
movzx eax, byte [ebp - 8]
imul ecx, eax, 0
and ecx, dword [ebp - 0x28]
or edx, ecx
mov dword [ebp - 0x10], edx
jmp 0x41818f
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x20]
movzx eax, byte [ebp - 0xc]
and edx, eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x10]
or edx, ecx
or edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x20]
or edx, eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x3c]
and ecx, 0
or edx, ecx
or edx, 0x48f5
mov word [ebp - 0x28], dx
jmp 0x41818f
mov edx, dword [ebp - 0x1c]
add edx, 0x362c
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x10]
and edx, eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x38]
movzx eax, word [ebp - 0x2c]
add ecx, eax
movzx eax, byte [ebp - 4]
add ecx, eax
and edx, ecx
movzx ecx, word [ebp - 0x10]
add ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x30]
and edx, ecx
movzx eax, byte [ebp - 0x24]
sub eax, dword [ebp - 0x18]
sub eax, 0x8d6
and edx, eax
mov dword [ebp - 0xc], edx
jmp 0x41818f
mov ecx, dword [ebp - 0x2c]
add ecx, 0x7a
imul edx, dword [ebp - 8], 0
imul eax, edx, 0x42eb
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x3c]
and eax, 0
and eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 4]
add edx, 0x1435
and edx, dword [ebp - 0x1c]
xor eax, edx
or ecx, eax
mov byte [ebp - 0x20], cl
mov eax, dword [ebp - 0x1c]
or eax, 0x3900
movzx ecx, word [ebp - 0x2c]
or eax, ecx
movzx edx, word [ebp - 0x14]
sub edx, dword [ebp - 0x24]
and edx, dword [ebp - 8]
movzx ecx, word [ebp - 0x34]
imul ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x2c]
and edx, ecx
or eax, edx
or eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0xc]
sub edx, 0x3005
movzx eax, byte [ebp - 4]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x2c]
movzx esi, word [ebp - 0x34]
sub ecx, esi
sub ecx, 0x4ae5
sar eax, cl
xor edx, eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x30df
and ecx, dword [ebp - 0xc]
or edx, ecx
movzx eax, byte [ebp - 8]
mov ecx, dword [ebp - 8]
sub ecx, eax
shr ecx, 0x75
or edx, ecx
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x34], 0
sub eax, ecx
or edx, eax
mov eax, dword [ebp - 4]
sub eax, 0x3027
and eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x2c]
and eax, 0
movzx ecx, byte [ebp - 0x20]
add ecx, dword [ebp - 0x38]
and eax, ecx
or edx, eax
mov byte [ebp - 0x18], dl
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x38]
or edx, eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 4]
and ecx, dword [ebp - 0x34]
or edx, ecx
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
or edx, ecx
mov dword [ebp - 0x18], edx
imul edx, dword [ebp - 0x18], 0x39dd
add edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x30]
or edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sub eax, 0x4648
sub eax, dword [ebp - 0x34]
movzx ecx, byte [ebp - 0x3c]
sub eax, ecx
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x3c]
sub eax, ecx
sub eax, dword [ebp - 0x3c]
or edx, eax
or edx, 0x3d49
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 0x14]
jb 0x418dc4
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0xc]
movzx ecx, byte [ebp - 0x10]
add eax, ecx
and eax, dword [ebp - 0x14]
imul edx, dword [ebp - 0x30], 0
imul ecx, edx, 0x2d22
add ecx, dword [ebp - 0x24]
and eax, ecx
and eax, 0
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x30]
movzx ecx, byte [ebp - 4]
sub edx, ecx
add edx, dword [ebp - 0x30]
and eax, edx
mov dword [ebp - 0x18], eax
push str.rukttdpli
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x3c]
add edx, 0x4ac3
movzx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax + 0x3a01]
movzx ecx, byte [ebp - 0x28]
lea eax, [eax + ecx - 0x2135]
imul ecx, dword [ebp - 0x34], 0x729
sub eax, ecx
sub eax, 0x24ac
and edx, eax
movzx eax, byte [ebp - 0x28]
add eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x28]
and edx, eax
mov word [ebp - 8], dx
movzx ecx, word [ebp - 0x18]
mov edx, 0x3393
sub edx, ecx
add edx, dword [ebp - 0x30]
movzx eax, word [ebp - 0x10]
sub edx, eax
add edx, dword [ebp - 0x38]
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x20]
and edx, 0
mov ecx, dword [ebp - 0x30]
sub ecx, 0x57
or edx, ecx
movzx eax, byte [ebp - 0x2c]
add eax, 0x4def
or edx, eax
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x10]
jb 0x418507
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 4]
je 0x418507
movzx eax, byte [ebp - 0x14]
movzx ecx, byte [ebp - 0x14]
add ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x10]
and eax, ecx
or eax, dword [ebp - 0x34]
movzx edx, byte [ebp - 0x20]
add edx, dword [ebp - 4]
or eax, edx
or eax, 0x850
movzx ecx, word [ebp - 0x1c]
mov edx, dword [ebp - 0x30]
sub edx, ecx
mov ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0xc]
sub edx, ecx
or eax, edx
mov dword [ebp - 8], eax
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x30]
movzx eax, byte [ebp - 0x10]
sub edx, eax
movzx ecx, byte [ebp - 0x28]
sub edx, ecx
movzx eax, word [ebp - 0x24]
imul ecx, eax, 0
mov eax, dword [ebp - 0x1c]
sub eax, ecx
mov ecx, dword [ebp - 0xc]
lea eax, [eax + ecx + 0xa02]
and edx, eax
and edx, dword [ebp - 0x34]
xor edx, dword [ebp - 0x28]
or edx, dword [ebp - 0x18]
mov dword [ebp - 0x3c], edx
mov ecx, dword [ebp - 0x20]
add ecx, 0x4c5e
sub ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x2c]
sub ecx, 0x4aae
sub ecx, dword [ebp - 0x2c]
or ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 4]
or ecx, edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 8]
or ecx, eax
mov dword [ebp - 0x30], ecx
movzx edx, byte [ebp - 0x10]
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x38]
and edx, eax
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 8]
add ecx, 0x41d2
shr eax, cl
and edx, eax
mov ecx, 0x4c19
sub ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
lea ecx, [ecx + eax + 0xcbc]
or edx, ecx
mov eax, dword [ebp - 0x14]
sub eax, 0x49d0
or edx, eax
mov dword [ebp - 0x30], edx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0x38]
movzx edx, word [ebp - 0x1c]
and ecx, edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
or ecx, eax
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x14]
and edx, 0
or ecx, edx
or ecx, dword [ebp - 0x24]
movzx eax, byte [ebp - 0x18]
mov edx, dword [ebp - 8]
sub edx, eax
or ecx, edx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0xc]
and eax, 0
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x1c]
lea ecx, [ecx + edx + 0x418c]
sub ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x34]
lea ecx, [ecx + edx + 0x35f8]
add ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x38]
and eax, ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x30]
or eax, edx
mov dword [ebp - 0x14], eax
movzx eax, byte [ebp - 8]
add eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 8]
lea edx, [eax + ecx - 0x2bb3]
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x20]
sub eax, dword [ebp - 4]
sub eax, 0xd84
or edx, eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x10]
or edx, ecx
movzx eax, word [ebp - 4]
xor ecx, ecx
sub ecx, eax
and ecx, 0
or edx, ecx
mov byte [ebp - 0x28], dl
movzx edx, word [ebp - 0x20]
add edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x3c]
or edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x24]
and eax, dword [ebp - 0x24]
or edx, eax
movzx ecx, byte [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 0x10]
and ecx, eax
or edx, ecx
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x14], 0x4caf
je 0x4187d4
imul ecx, dword [ebp - 0x3c], 0
movzx edx, word [ebp - 4]
and edx, dword [ebp - 0x34]
or ecx, edx
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 8]
mov edx, dword [ebp - 0x24]
sub edx, eax
add edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x28]
and edx, dword [ebp - 0xc]
or ecx, edx
mov eax, dword [ebp - 4]
or ecx, eax
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
xor edx, edx
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c], 0x71a
sub eax, 0x1c3b
and edx, eax
or ecx, edx
or ecx, 0x1008
mov dword [ebp - 0xc], ecx
movzx edx, byte [ebp - 0x2c]
imul eax, dword [ebp - 0x2c], 0x3789
and eax, 0x3422
or edx, eax
movzx ecx, word [ebp - 8]
mov eax, dword [ebp - 0xc]
lea eax, [ecx + eax + 0x2777]
sub eax, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0xc], 0
sub eax, ecx
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
shl eax, cl
or edx, eax
mov dword [ebp - 0x18], edx
movzx edx, byte [ebp - 0x34]
movzx eax, byte [ebp - 0x18]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x28]
lea ecx, [ecx + esi - 0x1e07]
sub ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x38]
imul esi, dword [ebp - 0x1c]
lea ecx, [ecx + esi + 0x32bc]
shl eax, cl
and edx, eax
or edx, dword [ebp - 0xc]
or edx, dword [ebp - 8]
mov dword [ebp - 0x10], edx
mov edx, 0x10a0
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x1c]
movzx eax, byte [ebp - 0x34]
sub edx, eax
sub edx, dword [ebp - 8]
movzx ecx, word [ebp - 0x14]
imul eax, ecx, 0x1479
add eax, dword [ebp - 0x14]
and eax, 0
or edx, eax
mov ecx, 0x30db
sub ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x18]
or edx, ecx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x28]
add edx, 0x4a93
sub edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x10]
sub edx, 0x20c0
or edx, 0x3bc5
movzx eax, byte [ebp - 4]
and eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0xc]
and eax, ecx
or edx, eax
or edx, dword [ebp - 8]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x58]
sub eax, 0x20
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x9d
ja case.0x418697.1
mov ecx, dword [ebp - 0x58]
movzx edx, byte [ecx + 0x41b334]
jmp dword [edx*4 + 0x41b320]
movzx eax, word [ebp - 0x1c]
imul eax, dword [ebp - 0x20]
sub eax, 0x298c
or eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
add ecx, 0x4b10
or eax, ecx
or eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 4]
add edx, 0x2c36
or eax, edx
mov word [ebp - 0x10], ax
jmp 0x4187d4
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax - 0x5a4]
movzx eax, word [ebp - 0x24]
imul eax, dword [ebp - 0x28]
add eax, 0x14f4
sub eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
or edx, eax
movzx ecx, word [ebp - 0xc]
mov eax, dword [ebp - 0x20]
sub eax, ecx
movzx ecx, byte [ebp - 0x38]
sub eax, ecx
add eax, dword [ebp - 0x24]
or edx, eax
or edx, dword [ebp - 0x28]
mov dword [ebp - 0x30], edx
jmp 0x4187d4
mov edx, 0x172e
sub edx, dword [ebp - 0x18]
movzx eax, word [ebp - 0x24]
and edx, eax
mov ecx, dword [ebp - 0x28]
imul ecx, dword [ebp - 0x34]
and edx, ecx
mov eax, dword [ebp - 0x2c]
sub eax, 0x2b4c
and edx, eax
or edx, dword [ebp - 0x28]
or edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x38]
or edx, ecx
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x20]
or edx, eax
mov dword [ebp - 4], edx
jmp 0x4187d4
movzx ecx, byte [ebp - 0x10]
movzx edx, byte [ebp - 0x14]
imul eax, dword [ebp - 0x24], 0
and edx, eax
movzx eax, word [ebp - 0x20]
imul esi, dword [ebp - 0x20], 0
sub eax, esi
and edx, eax
or ecx, edx
mov edx, 0x257a
sub edx, dword [ebp - 0x2c]
or ecx, edx
movzx eax, word [ebp - 0x30]
mov edx, dword [ebp - 0x3c]
lea eax, [edx + eax - 0x14ca]
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0x2c]
and eax, edx
or ecx, eax
mov dword [ebp - 0x34], ecx
jmp 0x4187d4
xor eax, eax
sub eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x38]
and ecx, 0xb48
or eax, ecx
or eax, 0x2ff5
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x1c]
or eax, edx
movzx ecx, byte [ebp - 0x3c]
imul edx, ecx, 0
movzx ecx, byte [ebp - 8]
sub edx, ecx
mov ecx, dword [ebp - 0x28]
lea edx, [edx + ecx + 0x2ee8]
or eax, edx
or eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
movzx eax, byte [ebp - 0x30]
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
sub edx, ecx
and eax, edx
mov ecx, dword [ebp - 0xc]
add ecx, 0x2cc5
movzx edx, word [ebp - 0xc]
imul edx, edx, 0
sub ecx, edx
add ecx, dword [ebp - 0x1c]
and eax, ecx
or eax, dword [ebp - 0x3c]
movzx ecx, byte [ebp - 8]
add ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x3c]
or eax, ecx
mov word [ebp - 0x2c], ax
mov edx, dword [ebp - 8]
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x60]
sub eax, 0x52
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x84
ja case.0x418836.1
mov ecx, dword [ebp - 0x60]
movzx edx, byte [ecx + 0x41b3ec]
jmp dword [edx*4 + 0x41b3d4]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
add ecx, dword [ebp - 0x3c]
or ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 8]
lea edx, [eax + edx - 0x31f9]
add edx, dword [ebp - 0x24]
sub edx, dword [ebp - 4]
or ecx, edx
movzx eax, byte [ebp - 4]
add eax, dword [ebp - 0x2c]
or ecx, eax
mov byte [ebp - 0x38], cl
jmp 0x418999
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x10]
or ecx, 0x4c9d
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x3c]
movzx eax, byte [ebp - 0x24]
sub eax, dword [ebp - 4]
and edx, eax
or ecx, edx
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
sub eax, edx
or ecx, eax
mov dword [ebp - 0x28], ecx
jmp 0x418999
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 0xc]
movzx edx, word [ebp - 0x38]
sub edx, dword [ebp - 0x34]
and edx, dword [ebp - 0x14]
or ecx, edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
movzx edx, byte [ebp - 0x14]
sub eax, edx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x38]
and eax, edx
or ecx, eax
mov dword [ebp - 0x24], ecx
jmp 0x418999
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x3c]
movzx ecx, byte [ebp - 0x2c]
imul edx, ecx, 0x355e
xor ecx, ecx
sub ecx, edx
sub ecx, 0x731
sub ecx, dword [ebp - 0x10]
or eax, ecx
mov edx, dword [ebp - 4]
sub edx, 0x12d8
and edx, dword [ebp - 0x30]
or eax, edx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
movzx edx, word [ebp - 0x2c]
and ecx, edx
or eax, ecx
mov word [ebp - 0xc], ax
jmp 0x418999
movzx eax, word [ebp - 4]
imul ecx, eax, 0xff
sub ecx, dword [ebp - 0x30]
and ecx, dword [ebp - 0x30]
movzx edx, byte [ebp - 0x10]
or ecx, edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x28]
movzx edx, word [ebp - 0x34]
sub eax, edx
sub eax, dword [ebp - 4]
add eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
imul edx, dword [ebp - 0x38]
add eax, edx
movzx edx, byte [ebp - 0x30]
sub eax, edx
or ecx, eax
mov dword [ebp - 0x1c], ecx
jmp 0x418999
mov eax, dword [ebp - 0x14]
add eax, 0x174e
movzx ecx, byte [ebp - 0x24]
sub eax, ecx
add eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
lea eax, [eax + edx - 0x1394]
add eax, dword [ebp - 0x3c]
or eax, dword [ebp - 0x30]
movzx ecx, word [ebp - 0x18]
mov edx, dword [ebp - 0x28]
sub edx, ecx
mov ecx, dword [ebp - 0x34]
lea edx, [edx + ecx + 0x1bc4]
or eax, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0x38]
movzx ecx, word [ebp - 0x24]
mov esi, dword [ebp - 0x2c]
sub esi, ecx
mov ecx, esi
shl edx, cl
or eax, edx
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
lea edx, [ecx + edx - 0x3a3a]
sub edx, dword [ebp - 0x18]
add edx, dword [ebp - 8]
sub edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x3c]
or eax, edx
mov dword [ebp - 0xc], eax
movzx eax, word [ebp - 0x24]
or eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x10]
or eax, ecx
movzx edx, word [ebp - 0x14]
or eax, edx
mov ecx, dword [ebp - 0x20]
and ecx, 0
or eax, ecx
mov edx, dword [ebp - 0x28]
and edx, 0x2df8
or eax, edx
mov ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x18]
and ecx, dword [ebp - 8]
or eax, ecx
mov dword [ebp - 0x1c], eax
movzx edx, word [ebp - 8]
add edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x34]
or edx, eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x24]
or edx, ecx
mov eax, dword [ebp - 4]
and eax, dword [ebp - 8]
or edx, eax
mov byte [ebp - 0x14], dl
movzx ecx, word [ebp - 4]
add ecx, dword [ebp - 0x20]
xor edx, edx
sub edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x34]
add edx, 0x49a5
or ecx, edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x38]
movzx edx, byte [ebp - 0x3c]
add eax, dword [ebp - 0x10]
add edx, eax
and edx, dword [ebp - 0x30]
or ecx, edx
mov word [ebp - 0x28], cx
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x18]
jbe 0x418dac
mov ecx, 0x27ed
sub ecx, dword [ebp - 0x38]
movzx edx, word [ebp - 8]
movzx eax, byte [ebp - 4]
sub edx, eax
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x30]
sub edx, eax
or ecx, edx
movzx edx, word [ebp - 0x14]
add edx, 0x4742
or ecx, edx
or ecx, dword [ebp - 0x14]
movzx eax, byte [ebp - 4]
sub eax, 0x65c
sub eax, dword [ebp - 0x38]
or ecx, eax
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x28]
sub ecx, 0x5aff
movzx edx, byte [ebp - 0x18]
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
lea edx, [eax + edx + 0x3420]
or ecx, edx
or ecx, 0x4680
mov eax, dword [ebp - 0x1c]
add eax, 0xdd9
sub eax, dword [ebp - 0x24]
or ecx, eax
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x14]
and ecx, 0x16fb
movzx edx, byte [ebp - 0xc]
and ecx, edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x3c]
and ecx, eax
movzx edx, byte [ebp - 0x10]
add edx, dword [ebp - 0x30]
imul eax, dword [ebp - 8], 0
sub edx, eax
add edx, dword [ebp - 0x18]
movzx eax, word [ebp - 0x18]
sub edx, eax
and ecx, edx
and ecx, dword [ebp - 0x10]
mov byte [ebp - 0x28], cl
mov dword [ebp - 0x3c], 0xa6d
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x24]
movzx edx, byte [ebp - 0x30]
mov eax, dword [ebp - 0x14]
sub eax, edx
or ecx, eax
mov edx, 0x3277
sub edx, dword [ebp - 0x28]
add edx, dword [ebp - 4]
add edx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
and edx, eax
or ecx, edx
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
sub ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x28]
sub edx, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
lea edx, [edx + eax - 0x16ff]
and ecx, edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x38]
and ecx, eax
and ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 0x14]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x3c]
add ecx, 0x14
mov dword [ebp - 0x3c], ecx
xor edx, edx
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x20]
and edx, eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
lea ecx, [eax + ecx - 0x33f5]
sub ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 4]
and ecx, 0
or edx, ecx
or edx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x90], edx
cmp dword [ebp - 0x90], 4
je 0x418c1b
cmp dword [ebp - 0x90], 0x42
je 0x418c4d
cmp dword [ebp - 0x90], 0x81
je 0x418be7
jmp 0x418c82
mov eax, dword [ebp - 0x20]
and eax, dword [ebp - 0x1c]
movzx ecx, word [ebp - 0x20]
imul ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 8]
movzx edx, byte [ebp - 0x30]
add ecx, edx
sub ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 0x24]
sub ecx, edx
or eax, ecx
mov word [ebp - 0x2c], ax
jmp 0x418caa
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x38]
xor ecx, ecx
sub ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x10]
movzx edx, word [ebp - 0x2c]
and ecx, edx
or eax, ecx
movzx ecx, word [ebp - 0x38]
or eax, ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x2c], 0xd64
add edx, ecx
or eax, edx
mov dword [ebp - 0x1c], eax
jmp 0x418caa
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
lea ecx, [eax + edx + 0x20b0]
and ecx, dword [ebp - 0x2c]
and ecx, dword [ebp - 0x34]
or ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x10]
sub edx, 0x5a8
movzx eax, byte [ebp - 0x1c]
sub edx, eax
sub edx, dword [ebp - 0x1c]
or ecx, edx
or ecx, 0x2b88
mov byte [ebp - 0x28], cl
jmp 0x418caa
mov ecx, dword [ebp - 0x10]
or ecx, 0x697c
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x38]
or ecx, edx
movzx eax, word [ebp - 0x18]
and eax, 0x2d72
and eax, dword [ebp - 0x34]
or ecx, eax
or ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
push str.nboehsbrwsguts
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
and ecx, dword [ebp - 0x30]
xor ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x2c]
add edx, 0x260f
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x30]
movzx esi, word [ebp - 0x20]
imul eax, esi
add edx, dword [ebp - 0x18]
add eax, edx
or ecx, eax
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x3c], 0xa81
jb 0x418b59
mov edx, dword [ebp - 0x34]
or edx, 0xffffeb5c
mov eax, dword [ebp - 0x14]
and eax, 0
or edx, eax
or edx, dword [ebp - 0x38]
mov ecx, 0x433b
sub ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x14]
xor eax, eax
sar eax, cl
and eax, 0
and eax, dword [ebp - 0x2c]
or edx, eax
or edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 4]
or ecx, 0xc4
or ecx, dword [ebp - 0xc]
movzx edx, byte [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
sub eax, edx
movzx edx, byte [ebp - 0x14]
sub eax, edx
add eax, dword [ebp - 0x30]
movzx edx, byte [ebp - 0x14]
movzx esi, word [ebp - 4]
add edx, esi
and eax, edx
movzx edx, word [ebp - 0x20]
mov esi, dword [ebp - 0x24]
sub esi, edx
sub esi, dword [ebp - 0x38]
add esi, 0x396d
and eax, esi
or ecx, eax
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x3c]
movzx ecx, byte [ebp - 0x10]
mov edx, 0x4a40
sub edx, ecx
mov ecx, dword [ebp - 0x34]
add ecx, 0x1209
sub ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x18]
and edx, ecx
or eax, edx
mov edx, dword [ebp - 0x28]
add edx, 0x26b5
movzx ecx, byte [ebp - 0x14]
xor esi, esi
sub esi, ecx
and edx, esi
or eax, edx
mov dword [ebp - 0x1c], eax
push str.tmedsdaeeiyopamleoi
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 8], eax
mov dword [ebp - 0x3c], 0x1f
mov ecx, dword [ebp - 0x24]
and ecx, 0
mov edx, dword [ebp - 0x18]
and edx, dword [ebp - 0x30]
movzx eax, byte [ebp - 4]
and edx, eax
movzx eax, word [ebp - 0xc]
mov esi, dword [ebp - 0xc]
sub esi, eax
sub esi, dword [ebp - 0x28]
movzx eax, word [ebp - 4]
add eax, 0x24d
and esi, eax
xor edx, esi
or ecx, edx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x24]
or ecx, edx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
sub ecx, 0xcce
sub ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
add edx, 0xa5c
and ecx, edx
mov edx, dword [ebp - 0x30]
add edx, 0xb70
and ecx, edx
and ecx, dword [ebp - 0x30]
or eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 8]
lea eax, [edx + ecx - 0x1525]
movzx ecx, byte [ebp - 0x1c]
shr eax, cl
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x1c]
and eax, ecx
movzx edx, byte [ebp - 0x18]
and eax, edx
mov ecx, dword [ebp - 0x30]
sub ecx, 0x2a1d
or eax, ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x38]
or eax, edx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 8]
and eax, ecx
and eax, 0x40b1
and eax, dword [ebp - 0x30]
imul edx, dword [ebp - 0x20], 0x4d6f
add edx, dword [ebp - 0x10]
movzx ecx, byte [ebp - 0x20]
add edx, ecx
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x30]
or eax, edx
mov dword [ebp - 0x18], eax
push str.etlvtrw
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x1c]
add edx, 0x89b
sub edx, dword [ebp - 0x2c]
movzx eax, byte [ebp - 0xc]
add edx, eax
movzx ecx, byte [ebp - 0x1c]
and edx, ecx
or edx, dword [ebp - 0x1c]
or edx, dword [ebp - 4]
movzx eax, word [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
movzx eax, word [ebp - 0xc]
add ecx, eax
or edx, ecx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x30], 0x413
movzx ecx, byte [ebp - 0x14]
sub ecx, 0x4da2
sub ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x28]
imul edx, dword [ebp - 0x24]
and edx, dword [ebp - 0x24]
and edx, dword [ebp - 0x14]
or ecx, edx
movzx eax, word [ebp - 0x24]
or ecx, eax
movzx edx, byte [ebp - 0x14]
or ecx, edx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
lea edx, [ecx + eax - 0x1641]
movzx eax, word [ebp - 0x2c]
and edx, eax
movzx ecx, byte [ebp - 0x38]
and edx, ecx
movzx eax, byte [ebp - 4]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x24]
and eax, dword [ebp - 0x1c]
or edx, eax
or edx, dword [ebp - 8]
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x30]
add ecx, 8
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
lea edx, [eax + edx + 0x25c9]
and edx, 0
movzx ecx, byte [ebp - 8]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
shr eax, cl
and eax, dword [ebp - 0x38]
and eax, 0
or edx, eax
or edx, dword [ebp - 0x1c]
mov byte [ebp - 0x2c], dl
mov ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x18]
and edx, 0
or ecx, edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x28]
and eax, 0
and eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x14]
or ecx, eax
mov dword [ebp - 4], ecx
movzx ecx, byte [ebp - 8]
or ecx, dword [ebp - 0x38]
or ecx, dword [ebp - 0x18]
movzx edx, word [ebp - 0x10]
or ecx, edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 4]
sub eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
lea eax, [eax + edx - 0x1d3e]
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x24]
or ecx, eax
mov dword [ebp - 0x34], ecx
movzx ecx, byte [ebp - 0x24]
cmp dword [ebp - 0x2c], ecx
jne 0x41907d
movzx edx, byte [ebp - 0x34]
and edx, dword [ebp - 0x18]
and edx, 0x3a7d
or edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x24]
movzx ecx, byte [ebp - 0x1c]
add eax, ecx
movzx ecx, word [ebp - 4]
add eax, ecx
sub eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x14]
or edx, eax
mov dword [ebp - 0x20], edx
cmp dword [ebp - 8], 0
jne 0x419050
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0x10]
jb 0x419050
movzx eax, word [ebp - 0x24]
sub eax, 0x2691
and eax, dword [ebp - 0x24]
mov ecx, 0x3294
sub ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x1c]
movzx edx, byte [ebp - 8]
sub ecx, edx
sub ecx, dword [ebp - 0x1c]
or eax, ecx
or eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
and ecx, dword [ebp - 0x1c]
or eax, ecx
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x18]
imul eax, dword [ebp - 0x1c], 0
sub edx, eax
imul ecx, dword [ebp - 0x38], 0
sub edx, ecx
imul eax, dword [ebp - 0x10], 0x4163
sub edx, eax
imul ecx, dword [ebp - 0x14], 0x1bec
sub edx, ecx
or edx, dword [ebp - 0x38]
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x1c], 0
ja 0x41912f
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x1c]
ja 0x41912f
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x1c]
lea edx, [eax + ecx - 0x482c]
and edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x18]
movzx ecx, byte [ebp - 0x28]
imul ecx, ecx, 0
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 4]
and eax, ecx
or edx, eax
or edx, dword [ebp - 8]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x38]
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
sub eax, 0x1874
mov ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 4]
sub eax, ecx
imul ecx, dword [ebp - 0x28], 0x2f3d
sub eax, ecx
and edx, eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0xc]
add eax, dword [ebp - 8]
or edx, eax
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 0x28]
jne 0x41912f
movzx edx, byte [ebp - 0x14]
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x1c]
and eax, ecx
movzx ecx, word [ebp - 4]
movzx esi, word [ebp - 0x38]
add ecx, dword [ebp - 0x1c]
add esi, ecx
and eax, esi
or edx, eax
mov dword [ebp - 0xc], edx
movzx edx, word [ebp - 0xc]
imul edx, dword [ebp - 0x20]
add edx, dword [ebp - 4]
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x34]
and edx, eax
imul ecx, dword [ebp - 0xc], 0x1c77
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
and ecx, eax
or edx, ecx
or edx, dword [ebp - 4]
mov byte [ebp - 0x18], dl
movzx ecx, word [ebp - 4]
or ecx, dword [ebp - 0x18]
or ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
and edx, dword [ebp - 0x18]
or ecx, edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
or ecx, eax
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x20]
add ecx, 0x3ebb
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x14]
and ecx, edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x20]
and ecx, eax
movzx edx, word [ebp - 0x28]
add edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x10]
and ecx, edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x10]
and eax, dword [ebp - 0x24]
xor ecx, eax
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x30], 0x423
jb 0x418f26
mov ecx, dword [ebp - 0x30]
or ecx, dword [ebp - 0x18]
or ecx, dword [ebp - 0x18]
movzx edx, word [ebp - 0x20]
movzx eax, word [ebp - 0x28]
add edx, eax
or ecx, edx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x18]
movzx eax, byte [ebp - 0x14]
sub edx, eax
imul eax, dword [ebp - 4], 0
add eax, dword [ebp - 0x38]
and edx, eax
or ecx, edx
or ecx, dword [ebp - 0x20]
mov dword [ebp - 8], ecx
push str.nylsaj
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], 0
ja 0x41921b
movzx ecx, word [ebp - 0x30]
cmp dword [ebp - 0x24], ecx
jne 0x4195c6
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x14]
je 0x41933c
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
add ecx, 0x24c8
movzx edx, word [ebp - 0x18]
sub ecx, edx
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x18]
movzx edx, byte [ebp - 8]
add ecx, edx
sub ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x18]
sub ecx, 0x228f
or eax, ecx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0xf2a
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x30]
movzx edx, byte [ebp - 4]
imul edx, dword [ebp - 0x38]
add ecx, edx
or eax, ecx
or eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x18]
or eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 8]
movzx edx, byte [ebp - 0x28]
add ecx, edx
or eax, ecx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10]
add eax, 2
mov dword [ebp - 0x10], eax
imul ecx, dword [ebp - 0x1c], 0x70
add ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x20]
imul edx, dword [ebp - 0x20]
add ecx, dword [ebp - 8]
add edx, ecx
sub edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x34]
and edx, eax
mov dword [ebp - 0x28], edx
movzx ecx, byte [ebp - 0x18]
mov edx, dword [ebp - 0xc]
sub edx, ecx
movzx eax, word [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
movzx eax, byte [ebp - 8]
imul eax, eax, 0
add ecx, eax
or edx, ecx
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x28]
movzx eax, byte [ebp - 0x30]
imul eax, dword [ebp - 0xc]
sub ecx, eax
or edx, ecx
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x10], 0xf2c
jb 0x419287
movzx ecx, word [ebp - 0x34]
add ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
and edx, 0
or ecx, edx
mov eax, dword [ebp - 0x10]
and eax, dword [ebp - 0x10]
or ecx, eax
or ecx, dword [ebp - 0x2c]
movzx edx, word [ebp - 0x20]
add edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x2c]
or ecx, edx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 4]
jne 0x4193d1
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x20]
lea ecx, [eax + ecx - 0x1cae]
xor eax, eax
shl eax, cl
or edx, eax
or edx, dword [ebp - 0x24]
or edx, 0x25be
mov dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x18]
or ecx, dword [ebp - 0x30]
or ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0xc]
and edx, 0x1ca6
mov eax, dword [ebp - 0x10]
shr eax, 0x63
and edx, eax
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x18]
xor edx, eax
or ecx, edx
mov dword [ebp - 0x1c], ecx
movzx ecx, word [ebp - 0x1c]
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x30]
and ecx, dword [ebp - 0x24]
or ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10]
movzx eax, byte [ebp - 0x30]
imul eax, dword [ebp - 0x28]
sub edx, eax
add edx, dword [ebp - 0x1c]
movzx eax, byte [ebp - 0x24]
add edx, eax
and edx, 0
or ecx, edx
mov dword [ebp - 0x34], ecx
push 0
push 0
push 0
push 0
push 0x12c
push 4
push 3
push str.lrenythndsesloer
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x34]
and ecx, 0x1dce
movzx edx, word [ebp - 0x2c]
xor eax, eax
sub eax, edx
sub eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x38]
and eax, edx
or ecx, eax
or ecx, dword [ebp - 0x28]
or ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x14]
or ecx, eax
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0xc]
jb 0x419437
movzx edx, byte [ebp - 0x34]
cmp dword [ebp - 8], edx
jb 0x4194ba
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x34], eax
movzx eax, byte [ebp - 0x2c]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x2c]
lea ecx, [edx + ecx + 0x2fc8]
and eax, ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x10]
and eax, edx
movzx ecx, byte [ebp - 0x2c]
sub ecx, dword [ebp - 0x2c]
and eax, ecx
or eax, 0x4e0a
mov edx, dword [ebp - 4]
sub edx, 0x1422
sub edx, dword [ebp - 0x20]
or eax, edx
or eax, 0x3ce1
mov dword [ebp - 0x14], eax
movzx eax, byte [ebp - 0x30]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov edx, dword [ebp - 0x2c]
add edx, 0x13fb
and ecx, edx
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x20]
add eax, dword [ebp - 8]
or ecx, eax
movzx edx, byte [ebp - 0x14]
add edx, 0x4bba
sub edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x20]
or ecx, edx
mov word [ebp - 0xc], cx
jmp 0x4194ee
movzx eax, byte [ebp - 0x28]
and eax, dword [ebp - 0x28]
or eax, dword [ebp - 0x20]
movzx ecx, word [ebp - 0x2c]
add ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x34]
and ecx, edx
movzx edx, byte [ebp - 0x14]
add edx, dword [ebp - 0x24]
movzx esi, word [ebp - 0x20]
sub edx, esi
and ecx, edx
or eax, ecx
mov word [ebp - 0x38], ax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x20]
jne 0x419591
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 4]
ja 0x419591
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x38]
movzx ecx, word [ebp - 0x38]
add ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 4]
movzx esi, word [ebp - 0x38]
imul esi, esi, 0x202f
sub ecx, esi
and eax, ecx
or edx, eax
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x38]
and edx, 0xffffb341
mov eax, dword [ebp - 0x38]
sub eax, 0x3760
and edx, eax
movzx ecx, word [ebp - 0x34]
imul ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 8]
sub ecx, eax
or edx, ecx
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x38]
or edx, ecx
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 8]
add eax, dword [ebp - 0x28]
and edx, eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x38]
and edx, ecx
mov dword [ebp - 0x30], edx
imul edx, dword [ebp - 4], 0
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x10]
shl eax, cl
and edx, eax
movzx ecx, byte [ebp - 8]
add ecx, dword [ebp - 0x14]
or edx, ecx
movzx eax, word [ebp - 0x2c]
imul eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 8]
sub ecx, eax
and ecx, 0
or edx, ecx
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x18], edx
movzx edx, word [ebp - 8]
movzx eax, byte [ebp - 0x28]
sub edx, eax
mov ecx, dword [ebp - 0x2c]
sar edx, cl
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x2c]
and ecx, 0xffffeaab
or edx, ecx
movzx eax, byte [ebp - 0x34]
or edx, eax
mov byte [ebp - 0x10], dl
movzx ecx, word [ebp - 0x24]
sub ecx, dword [ebp - 0xc]
add ecx, 0x34fa
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 8]
sub ecx, edx
movzx eax, word [ebp - 0x28]
imul eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x24]
and eax, 0
or ecx, eax
imul edx, dword [ebp - 0x1c], 0x3297
or ecx, edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
or ecx, eax
mov word [ebp - 0x30], cx
movzx ecx, word [ebp - 8]
or ecx, dword [ebp - 0x38]
or ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
movzx eax, byte [ebp - 0x1c]
add eax, dword [ebp - 0x10]
and edx, eax
or ecx, edx
or ecx, dword [ebp - 0xc]
movzx edx, byte [ebp - 0x28]
movzx eax, word [ebp - 0x24]
sub edx, eax
or ecx, edx
or ecx, dword [ebp - 4]
mov word [ebp - 0x20], cx
mov dword [ebp - 0x28], 0xf33
jmp 0x41967c
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0xf35
jae 0x41982e
mov edx, dword [ebp - 0x20]
imul edx, dword [ebp - 0x24]
sub edx, 0x230f
or edx, dword [ebp - 4]
mov eax, 0x254a
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 4]
add eax, 0x122a
sub eax, dword [ebp - 0x34]
sub eax, 0x3b9c
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x20]
or edx, eax
mov word [ebp - 0x18], dx
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 8]
add ecx, 0x4214
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
lea edx, [eax + edx + 0x2f9a]
and ecx, edx
and ecx, 0
movzx eax, word [ebp - 0x14]
mov edx, dword [ebp - 0x38]
lea eax, [edx + eax + 0x46a6]
or ecx, eax
mov word [ebp - 0x20], cx
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x20]
lea eax, [ecx + edx - 0x1b0d]
movzx ecx, word [ebp - 0x1c]
sub eax, ecx
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
and edx, 0x274c
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x24]
add eax, dword [ebp - 0x38]
lea eax, [ecx + eax - 0x43a2]
or edx, eax
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x33ab
and ecx, dword [ebp - 0x34]
movzx edx, word [ebp - 0x30]
add edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x2c]
and ecx, edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
and eax, edx
or ecx, eax
mov dword [ebp - 8], ecx
movzx eax, word [ebp - 0xc]
cmp dword [ebp - 0x24], eax
jb 0x419785
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x24]
jb 0x419803
movzx edx, byte [ebp - 0x2c]
imul eax, dword [ebp - 0xc], 0
mov ecx, dword [ebp - 0x20]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 4]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc]
and ecx, eax
or edx, ecx
movzx ecx, byte [ebp - 0x1c]
or edx, ecx
mov dword [ebp - 0x24], edx
push str.rfflhirb
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x2c]
jne 0x4197d4
movzx eax, word [ebp - 0x20]
cmp dword [ebp - 8], eax
jne 0x419803
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
lea eax, [edx + ecx + 0x11d988b9]
or eax, 0x1492
or eax, 0x4133
movzx ecx, byte [ebp - 0x38]
mov edx, 0x359a
sub edx, ecx
or eax, edx
mov ecx, dword [ebp - 0xc]
and ecx, 0
or eax, ecx
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x38]
and edx, 0
xor edx, dword [ebp - 0x14]
movzx eax, byte [ebp - 4]
add eax, dword [ebp - 8]
sub eax, dword [ebp - 0x30]
and eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x18]
or edx, eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x2c]
or edx, ecx
mov dword [ebp - 0x24], edx
jmp 0x419673
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
sub eax, 0x3330
and eax, dword [ebp - 0x2c]
or edx, eax
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xc]
and ecx, eax
or edx, ecx
mov dword [ebp - 0x18], edx
movzx ecx, byte [ebp - 0x28]
imul ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x34]
movzx eax, word [ebp - 0x10]
sub edx, eax
add edx, dword [ebp - 0x30]
and ecx, edx
xor edx, edx
sub edx, dword [ebp - 0x20]
movzx eax, byte [ebp - 0x38]
and edx, eax
or ecx, edx
or ecx, 0x3020
mov byte [ebp - 4], cl
imul ecx, dword [ebp - 0x30], 0x3559
and ecx, 0
and ecx, dword [ebp - 0x28]
movzx edx, byte [ebp - 0xc]
add edx, 0x34f3
and edx, dword [ebp - 0x1c]
movzx eax, byte [ebp - 0x38]
add eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x34]
and edx, eax
or ecx, edx
mov word [ebp - 0x20], cx
movzx edx, byte [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x14]
sar edx, cl
and edx, 0x3cde
or edx, dword [ebp - 0x14]
xor eax, eax
sub eax, dword [ebp - 0x30]
or edx, eax
movzx ecx, byte [ebp - 0x24]
add ecx, dword [ebp - 0x28]
and ecx, dword [ebp - 0x28]
or edx, ecx
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x3c], 0x21
jb 0x418e06
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x2c]
movzx eax, word [ebp - 0x34]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x24]
lea eax, [eax + ecx + 0x342e]
sub eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x38]
movzx ecx, byte [ebp - 0x20]
add eax, ecx
or edx, eax
movzx eax, byte [ebp - 8]
add eax, dword [ebp - 0x3c]
or edx, eax
or edx, 0xffffef0f
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0xc]
jae 0x41aaf9
mov edx, dword [ebp - 0x18]
and edx, dword [ebp - 0x1c]
movzx eax, byte [ebp - 0x14]
imul eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 8]
or edx, eax
or edx, dword [ebp - 0x20]
or edx, dword [ebp - 0x20]
movzx ecx, word [ebp - 0x24]
or edx, ecx
mov word [ebp - 0x10], dx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x28]
or edx, 0x21c6
or edx, dword [ebp - 0x34]
imul eax, dword [ebp - 0x2c], 0x2de4
mov ecx, dword [ebp - 0x34]
sub ecx, eax
or edx, ecx
or edx, dword [ebp - 0x34]
movzx eax, word [ebp - 0x18]
or edx, eax
imul ecx, dword [ebp - 0x20], 0x353a
sub ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x3c]
and ecx, 0x3daf
or edx, ecx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 0x48
je 0x4199bc
cmp dword [ebp - 0x80], 0x4e
je 0x419a27
cmp dword [ebp - 0x80], 0x87
je 0x4199f7
jmp 0x419a5f
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
lea edx, [ecx + eax + 0x27c3]
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x20]
and eax, ecx
or edx, eax
or edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x20]
shl eax, cl
or edx, eax
mov dword [ebp - 0x24], edx
jmp 0x419a96
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x2c]
or ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x3c]
movzx eax, word [ebp - 0x18]
and edx, eax
or ecx, edx
movzx edx, byte [ebp - 0x24]
or ecx, edx
imul eax, dword [ebp - 0x1c], 0x25fa
mov edx, dword [ebp - 0xc]
sub edx, eax
or ecx, edx
mov dword [ebp - 0x20], ecx
jmp 0x419a96
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 4]
movzx ecx, word [ebp - 0x24]
sub eax, ecx
mov edx, dword [ebp - 4]
and edx, dword [ebp - 0x38]
or eax, edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x1f46
or eax, ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x34]
movzx ecx, word [ebp - 8]
sub edx, ecx
or eax, edx
mov dword [ebp - 0x1c], eax
jmp 0x419a96
movzx edx, word [ebp - 0x24]
add edx, dword [ebp - 0x3c]
and edx, dword [ebp - 0x34]
or edx, dword [ebp - 0x2c]
or edx, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
sub eax, 0x13b4
or edx, eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x2c]
and ecx, dword [ebp - 0x18]
or edx, ecx
imul eax, dword [ebp - 8], 0
sub eax, dword [ebp - 0x30]
movzx ecx, byte [ebp - 0x10]
add eax, ecx
or edx, eax
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x18], 0x40e2
jne 0x419bf1
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x10]
jae 0x419bf1
push str.rrsp
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x14]
movzx ecx, byte [ebp - 0x14]
sub eax, ecx
add eax, dword [ebp - 0x28]
and eax, 0x1793
or eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x30]
and edx, dword [ebp - 4]
or eax, edx
imul ecx, dword [ebp - 0x10], 0x4ced
add ecx, dword [ebp - 8]
or eax, ecx
or eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 8]
and edx, 0
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x10]
and eax, 0
and eax, dword [ebp - 0x14]
or edx, eax
or edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x18]
sub ecx, eax
or edx, ecx
mov word [ebp - 0x24], dx
movzx ecx, word [ebp - 0x20]
mov edx, dword [ebp - 0x30]
sub edx, ecx
movzx eax, byte [ebp - 0x24]
movzx ecx, byte [ebp - 0x20]
imul eax, ecx
imul eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xc]
or edx, eax
mov dword [ebp - 8], edx
imul edx, dword [ebp - 0x20], 0
sub edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x14]
movzx eax, word [ebp - 0xc]
sub edx, eax
sub edx, dword [ebp - 0x3c]
movzx ecx, byte [ebp - 0x38]
add edx, ecx
sub edx, dword [ebp - 0x14]
or edx, dword [ebp - 8]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
or edx, ecx
mov word [ebp - 0x18], dx
mov edx, dword [ebp - 0x10]
and edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x10]
or edx, eax
movzx ecx, byte [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
sub eax, ecx
sub eax, dword [ebp - 0x18]
or edx, eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x14]
movzx eax, word [ebp - 0x20]
and ecx, eax
or edx, ecx
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 8]
sub edx, dword [ebp - 0x24]
and ecx, edx
mov eax, dword [ebp - 8]
add eax, 0x5cd2
sub eax, dword [ebp - 0xc]
and ecx, eax
movzx edx, byte [ebp - 0x14]
imul edx, dword [ebp - 0x28]
movzx eax, byte [ebp - 0xc]
sub edx, eax
sub edx, dword [ebp - 0x10]
and edx, dword [ebp - 4]
or ecx, edx
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x10], 0x3c3e
jne 0x419c06
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x34]
je 0x419f7f
mov edx, dword [ebp - 0x3c]
sub edx, 0xf29
sub edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x10]
movzx eax, word [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
and edx, ecx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
add eax, dword [ebp - 0x28]
and edx, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
lea ecx, [eax + ecx - 0x1ef9]
sub ecx, dword [ebp - 0x30]
and edx, ecx
movzx eax, byte [ebp - 0x18]
and edx, eax
mov byte [ebp - 0x34], dl
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 8]
and edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 0x16c2]
add eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
lea ecx, [eax + ecx + 0x3afb]
add ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x30]
shr eax, cl
or edx, eax
mov word [ebp - 0x20], dx
mov dword [ebp - 0x28], 0x1e6
mov ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 0x34]
movzx eax, byte [ebp - 0x18]
sub edx, eax
add edx, 0x979
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x18]
sub edx, eax
or ecx, edx
mov edx, dword [ebp - 0x38]
shl edx, 0x28
or ecx, edx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x18]
xor ecx, ecx
sub ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x3c]
imul edx, dword [ebp - 0x1c]
movzx esi, word [ebp - 0x38]
imul edx, esi
sub ecx, edx
movzx edx, byte [ebp - 0x2c]
add ecx, edx
and eax, ecx
or eax, dword [ebp - 0x14]
mov byte [ebp - 8], al
mov eax, dword [ebp - 0x28]
add eax, 0x10
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1357
sub ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
add eax, 0x1634
and eax, dword [ebp - 0x20]
xor edx, eax
or ecx, edx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x10]
or ecx, edx
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
or eax, dword [ebp - 0x14]
movzx ecx, word [ebp - 0xc]
or eax, ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x18]
or eax, edx
or eax, 0x2938
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 0x30]
shr edx, cl
and edx, dword [ebp - 0x38]
or eax, edx
mov byte [ebp - 0x34], al
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x30]
imul edx, dword [ebp - 0x18]
sub ecx, edx
sub ecx, 0xcd
and ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0x10]
or eax, ecx
movzx ecx, byte [ebp - 0x38]
add ecx, dword [ebp - 0x30]
or eax, ecx
or eax, 0x1bc5
or eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 4]
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 0x2e
je 0x419e2d
cmp dword [ebp - 0x84], 0x7a
je 0x419df2
cmp dword [ebp - 0x84], 0xb1
je 0x419db8
jmp 0x419e64
movzx eax, byte [ebp - 0x38]
movzx ecx, byte [ebp - 0x1c]
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x14]
movzx edx, byte [ebp - 0x10]
sub ecx, edx
add ecx, dword [ebp - 0x10]
and eax, ecx
movzx ecx, word [ebp - 0x18]
sub ecx, 0x411c
or eax, ecx
or eax, dword [ebp - 0x2c]
movzx edx, word [ebp - 0x18]
or eax, edx
mov word [ebp - 0xc], ax
jmp 0x419e9c
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x30]
lea edx, [eax + ecx - 0x1206]
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x30], 0x16f7
sub eax, ecx
movzx ecx, byte [ebp - 0x1c]
sub eax, ecx
movzx ecx, word [ebp - 0x2c]
add eax, dword [ebp - 0x18]
add ecx, eax
or edx, ecx
mov word [ebp - 0xc], dx
jmp 0x419e9c
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x30]
or edx, dword [ebp - 0x3c]
or edx, dword [ebp - 8]
xor eax, eax
sub eax, dword [ebp - 8]
or edx, eax
movzx ecx, byte [ebp - 0x34]
xor eax, eax
sub eax, ecx
mov ecx, 0x4865
sub ecx, dword [ebp - 0xc]
movzx esi, word [ebp - 0x10]
lea ecx, [ecx + esi - 0x28d4]
and eax, ecx
or edx, eax
mov dword [ebp - 0x24], edx
jmp 0x419e9c
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 4]
or edx, eax
movzx ecx, word [ebp - 0x24]
sar ecx, 0x31
and ecx, dword [ebp - 0x18]
or edx, ecx
movzx eax, byte [ebp - 8]
movzx ecx, word [ebp - 0x14]
movzx esi, word [ebp - 4]
sub ecx, esi
sub ecx, dword [ebp - 0x2c]
sub ecx, 0x2dc5
and eax, ecx
or edx, eax
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x28], 0x1f6
jb 0x419cb0
mov edx, dword [ebp - 4]
or edx, 0x133a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + eax - 0x7ac]
sub eax, dword [ebp - 0x24]
or edx, eax
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x28]
and ecx, dword [ebp - 0x38]
and ecx, 0
and ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 4]
and ecx, dword [ebp - 0x18]
or edx, ecx
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x14]
or edx, dword [ebp - 0x28]
or edx, 0x1f58
xor eax, eax
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc]
or edx, eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
lea ecx, [ecx + eax - 0x1233]
or edx, ecx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 4]
add eax, dword [ebp - 8]
and eax, 0x45ed
or edx, eax
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x20]
and edx, 0x14f7
movzx eax, byte [ebp - 0x3c]
add eax, dword [ebp - 0x3c]
and edx, eax
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x28]
shl eax, cl
and eax, dword [ebp - 0x10]
or edx, eax
mov dword [ebp - 0x34], edx
movzx ecx, word [ebp - 0x34]
mov edx, dword [ebp - 4]
sub edx, ecx
add edx, 0x60a7
sub edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x18]
imul eax, dword [ebp - 0x34], 0
sub eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x30]
movzx ecx, word [ebp - 0x24]
add eax, ecx
and edx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x28]
and edx, eax
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x38]
sub edx, 0x34cb
sub edx, dword [ebp - 0x20]
sub edx, dword [ebp - 8]
mov eax, dword [ebp - 0x38]
add eax, 0x31b4
and edx, eax
mov eax, dword [ebp - 0x3c]
add eax, 0x45c0
and edx, eax
or ecx, edx
movzx edx, word [ebp - 0x1c]
sub edx, 0x3cfe
sub edx, dword [ebp - 0x10]
add edx, dword [ebp - 8]
or ecx, edx
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 8], 0x2a8c
jne 0x41a14d
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x24]
je 0x41a14d
movzx ecx, word [ebp - 0x1c]
movzx edx, word [ebp - 0x18]
add ecx, edx
and ecx, 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
and eax, 0
mov edx, dword [ebp - 8]
imul edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x30]
and eax, edx
or ecx, eax
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x28], 0
sub eax, ecx
and eax, dword [ebp - 4]
and eax, dword [ebp - 0xc]
or eax, dword [ebp - 4]
movzx edx, word [ebp - 0x14]
or eax, edx
mov ecx, dword [ebp - 0x3c]
add ecx, 0x48bf
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x34]
and ecx, edx
or eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
lea ecx, [edx + ecx - 0x2ab0]
sub ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x2c]
and eax, ecx
movzx edx, word [ebp - 8]
and edx, 0x3e8a
or eax, edx
movzx ecx, word [ebp - 0x34]
mov edx, dword [ebp - 0x3c]
sub edx, ecx
or eax, edx
mov word [ebp - 0x10], ax
movzx eax, byte [ebp - 4]
mov ecx, 0x2c4f
sub ecx, eax
movzx edx, word [ebp - 0x1c]
add ecx, edx
movzx eax, byte [ebp - 0x1c]
add eax, 0x45e9
and ecx, eax
mov edx, dword [ebp - 0x24]
sub edx, 0x1f58
sub edx, dword [ebp - 8]
add edx, dword [ebp - 0x24]
add edx, dword [ebp - 4]
or ecx, edx
mov eax, 0x4c53
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 0xc]
or ecx, eax
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x24]
and ecx, dword [ebp - 0x24]
movzx edx, byte [ebp - 0x14]
add edx, dword [ebp - 0x20]
movzx eax, byte [ebp - 0x38]
add edx, eax
and ecx, edx
movzx edx, word [ebp - 0x20]
movzx eax, word [ebp - 0x38]
add edx, eax
movzx eax, word [ebp - 0x1c]
add edx, dword [ebp - 0xc]
add eax, edx
or ecx, eax
movzx edx, word [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
lea edx, [edx + eax + 0x1fe5]
or ecx, edx
mov dword [ebp - 0x2c], ecx
movzx eax, word [ebp - 8]
sub eax, dword [ebp - 8]
movzx ecx, word [ebp - 0x14]
sub eax, ecx
add eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x2c]
lea eax, [eax + edx + 0x8a8]
and eax, 0
or eax, dword [ebp - 8]
or eax, dword [ebp - 4]
or eax, 0x43ef
movzx ecx, byte [ebp - 8]
or eax, ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x28]
or eax, edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x60c], 0x114
lea eax, [ebp - 0x60c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x24], eax
push str.obbtiordf
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x18]
je 0x41a4cb
mov dword [ebp - 0x38], 0xc30
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + edx - 0x3e04]
and ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
add edx, 0x4708
movzx eax, byte [ebp - 8]
and edx, eax
and edx, 0
mov eax, dword [ebp - 0x20]
add eax, 0x1c6b
and edx, eax
movzx eax, word [ebp - 0x34]
add eax, dword [ebp - 0x10]
and edx, eax
or ecx, edx
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x1c]
sub ecx, 0x312
sub ecx, dword [ebp - 0xc]
movzx edx, word [ebp - 0x18]
sub ecx, edx
sub ecx, dword [ebp - 0xc]
or ecx, 0x3a0d
movzx eax, byte [ebp - 0x18]
mov edx, dword [ebp - 4]
sub edx, eax
movzx eax, word [ebp - 0x18]
add edx, dword [ebp - 0x10]
add eax, edx
or ecx, eax
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x38]
add ecx, 9
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x18]
and edx, 0
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x30]
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 0x30]
movzx ecx, word [ebp - 0x1c]
sub eax, ecx
add eax, dword [ebp - 0x34]
movzx ecx, word [ebp - 0xc]
and eax, ecx
xor edx, eax
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x68]
sub eax, 0x29
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x8e
ja case.0x41a23d.1
mov ecx, dword [ebp - 0x68]
movzx edx, byte [ecx + 0x41b488]
jmp dword [edx*4 + 0x41b474]
mov eax, dword [ebp - 0x24]
and eax, dword [ebp - 0x1c]
or eax, 0x8a1
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x20]
lea ecx, [edx + ecx + 0x3e83]
or eax, ecx
or eax, dword [ebp - 0x3c]
or eax, 0xffffee1a
or eax, dword [ebp - 4]
xor edx, edx
sub edx, dword [ebp - 0x28]
and edx, dword [ebp - 0xc]
or eax, edx
mov dword [ebp - 8], eax
jmp 0x41a34e
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
lea ecx, [ecx + edx - 0x426e]
or eax, ecx
mov edx, dword [ebp - 4]
and edx, 0x4283
or eax, edx
mov word [ebp - 0x20], ax
jmp 0x41a34e
movzx eax, word [ebp - 0x3c]
mov ecx, 0x23c7
sub ecx, eax
movzx edx, word [ebp - 0x34]
add ecx, edx
and ecx, dword [ebp - 8]
mov eax, 0x999
sub eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x3c]
and ecx, eax
and ecx, dword [ebp - 0x34]
xor ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x10]
or ecx, edx
or ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], ecx
jmp 0x41a34e
movzx eax, word [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x1c], 0xa6b
and ecx, dword [ebp - 0x30]
imul edx, dword [ebp - 0x34], 0x1c7d
movzx esi, word [ebp - 0x3c]
sub edx, esi
and ecx, edx
or eax, ecx
mov word [ebp - 0x28], ax
jmp 0x41a34e
movzx eax, word [ebp - 0x2c]
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x30]
add eax, ecx
movzx edx, byte [ebp - 0x1c]
imul edx, dword [ebp - 0x24]
xor ecx, ecx
sub ecx, edx
add ecx, dword [ebp - 0x20]
or eax, ecx
mov edx, 0x4259
sub edx, dword [ebp - 0x20]
or eax, edx
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x2c]
or eax, ecx
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x10], eax
push str.eaoeno
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x38], 0xc42
jb 0x41a1ac
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x18]
shl edx, cl
movzx eax, byte [ebp - 0x28]
mov ecx, dword [ebp - 8]
lea eax, [eax + ecx + 0x4085]
add eax, dword [ebp - 4]
or edx, eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x18]
or edx, ecx
mov dword [ebp - 0x34], edx
movzx edx, byte [ebp - 0x2c]
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
add edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x20]
add ecx, 0x1095
and eax, ecx
or edx, eax
mov eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x14]
or edx, eax
movzx ecx, word [ebp - 4]
or edx, ecx
mov dword [ebp - 0x18], edx
mov edx, 0x1ea4
sub edx, dword [ebp - 4]
movzx eax, word [ebp - 0x18]
add edx, eax
sub edx, dword [ebp - 0x1c]
or edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x10]
and ecx, 0x4b89
movzx eax, byte [ebp - 0x28]
add eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
and ecx, eax
or edx, ecx
mov ecx, dword [ebp - 0x34]
sub ecx, 0x2888
or edx, ecx
mov word [ebp - 0x30], dx
movzx edx, byte [ebp - 0x24]
and edx, dword [ebp - 0x10]
or edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 8]
or edx, eax
mov ecx, 0x4691
sub ecx, dword [ebp - 0x34]
movzx eax, byte [ebp - 0x30]
imul eax, dword [ebp - 0x20]
sub ecx, eax
add ecx, dword [ebp - 0x24]
or edx, ecx
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x2c]
and ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x28]
add edx, 0x1f2e
and ecx, edx
movzx eax, word [ebp - 0x30]
sub eax, 0x2bb0
or ecx, eax
movzx edx, byte [ebp - 8]
movzx eax, word [ebp - 0x3c]
and edx, eax
or ecx, edx
or ecx, dword [ebp - 0x34]
mov byte [ebp - 0xc], cl
movzx ecx, word [ebp - 0x1c]
add ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0xc]
movzx edx, word [ebp - 0x18]
sub ecx, edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 8]
or ecx, eax
movzx edx, byte [ebp - 0x10]
add edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 4]
or ecx, edx
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x38]
lea eax, [edx + eax - 0x19ea]
and eax, dword [ebp - 8]
or ecx, eax
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x18]
jne 0x41a4df
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x30]
je 0x41a74d
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x14]
movzx ecx, byte [ebp - 0x28]
imul ecx, dword [ebp - 0x24]
imul edx, ecx, 0
add eax, dword [ebp - 0x10]
lea eax, [edx + eax - 0x4581]
movzx ecx, word [ebp - 4]
and ecx, dword [ebp - 0x1c]
xor edx, edx
sub edx, dword [ebp - 0xc]
and ecx, edx
or eax, ecx
mov ecx, 0x1014
sub ecx, dword [ebp - 8]
and ecx, dword [ebp - 4]
or eax, ecx
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 4]
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x70]
sub eax, 2
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x9c
ja case.0x41a540.1
mov ecx, dword [ebp - 0x70]
movzx edx, byte [ecx + 0x41b52c]
jmp dword [edx*4 + 0x41b518]
mov eax, dword [ebp - 0x28]
sub eax, 0x4dd9
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x24]
and eax, ecx
and eax, 0xe4a
or eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x10]
and edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
and edx, ecx
or eax, edx
movzx edx, byte [ebp - 0x34]
mov ecx, 0x4811
sub ecx, edx
or eax, ecx
or eax, dword [ebp - 0x24]
mov dword [ebp - 8], eax
jmp 0x41a66c
imul edx, dword [ebp - 0x20], 0
mov eax, dword [ebp - 4]
add eax, 0x2f6e
and edx, eax
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x38]
and edx, ecx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x2c]
or edx, eax
movzx ecx, byte [ebp - 0x14]
or edx, ecx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
sub eax, 0x1235
or edx, eax
mov byte [ebp - 0x28], dl
jmp 0x41a66c
movzx ecx, byte [ebp - 0x30]
add ecx, dword [ebp - 0x30]
and ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 8]
and edx, dword [ebp - 0x34]
mov eax, 0xffffffed
sub eax, dword [ebp - 0x1c]
and edx, eax
or ecx, edx
imul edx, dword [ebp - 0x10], 0
and edx, dword [ebp - 0x38]
movzx eax, word [ebp - 0x10]
and edx, eax
movzx eax, word [ebp - 0x2c]
and edx, eax
or ecx, edx
mov dword [ebp - 0x28], ecx
jmp 0x41a66c
movzx ecx, word [ebp - 4]
sub ecx, dword [ebp - 0x24]
and ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x24]
movzx eax, word [ebp - 0x30]
add edx, eax
or ecx, edx
imul edx, dword [ebp - 0xc], 0
movzx eax, word [ebp - 0x18]
add edx, eax
sub edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x34]
or ecx, edx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x14]
or ecx, edx
mov dword [ebp - 0x3c], ecx
jmp 0x41a66c
mov eax, dword [ebp - 0x2c]
and eax, 0x1ded
movzx ecx, word [ebp - 8]
sub ecx, dword [ebp - 0x2c]
and eax, ecx
or eax, 0x2451
imul edx, dword [ebp - 0x28], 0x2f8b
imul ecx, dword [ebp - 0x3c], 0x33e4
and edx, ecx
xor ecx, ecx
sub ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x30]
xor edx, ecx
or eax, edx
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x3c]
add edx, 0x4cca
sub edx, dword [ebp - 0x1c]
and edx, dword [ebp - 0x10]
movzx eax, word [ebp - 0x1c]
imul ecx, dword [ebp - 0x1c], 0
sub eax, ecx
sub eax, 0x47b1
sub eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x1c]
sub eax, ecx
or edx, eax
mov dword [ebp - 0x38], edx
push 0
push 0
push 0
push 0
push 0x12c
push 0
push 1
push str.hwdttwsihpccmde
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x24]
movzx ecx, word [ebp - 0x24]
add eax, ecx
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x3c]
sub eax, ecx
movzx ecx, word [ebp - 0x34]
sub ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x30]
and eax, ecx
or edx, eax
mov dword [ebp - 0x1c], edx
push 0
lea edx, [ebp - 0x20]
push edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x30], eax
movzx eax, byte [ebp - 0x10]
movzx ecx, byte [ebp - 0xc]
imul eax, ecx
sub eax, 0x30d2
mov edx, dword [ebp - 4]
sub edx, 0x1cfa
and eax, edx
movzx ecx, byte [ebp - 4]
mov edx, 0x1391
sub edx, ecx
and eax, edx
mov ecx, dword [ebp - 0xc]
add ecx, 0x486a
or eax, ecx
mov edx, 0x11b0
sub edx, dword [ebp - 0x34]
or eax, edx
mov dword [ebp - 0x14], eax
movzx eax, word [ebp - 0x38]
imul eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 8]
lea edx, [eax + ecx + 0x1e46]
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
add eax, 0x1718
or edx, eax
or edx, dword [ebp - 0x28]
mov ecx, 0x2ce2
sub ecx, dword [ebp - 4]
or edx, ecx
mov eax, dword [ebp - 0xc]
sub eax, 0x3793
movzx ecx, byte [ebp - 0x20]
and eax, ecx
or edx, eax
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 4]
movzx ecx, byte [ebp - 0x3c]
add eax, ecx
sub eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x34]
and edx, eax
mov eax, dword [ebp - 0x2c]
add eax, 0x3d48
sub eax, dword [ebp - 0x38]
sub eax, 0x2af4
or edx, eax
movzx ecx, word [ebp - 0xc]
or edx, ecx
mov byte [ebp - 0x14], dl
mov edx, dword [ebp - 0x30]
cmp edx, dword [ebp - 0x3c]
jne 0x41aa51
movzx eax, word [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
and ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, 0x1058
movzx eax, word [ebp - 0x28]
sub edx, eax
and ecx, edx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x24]
and ecx, edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 0x18]
lea eax, [eax + edx - 0x3798]
or ecx, eax
mov word [ebp - 0x38], cx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp - 0x78]
sub edx, 0x3b
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0x7d
ja case.0x41a832.1
mov eax, dword [ebp - 0x78]
movzx ecx, byte [eax + 0x41b5e0]
jmp dword [ecx*4 + 0x41b5cc]
movzx edx, byte [ebp - 0x24]
add edx, 0x4ce0
and edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x2c]
movzx ecx, word [ebp - 0x20]
add eax, dword [ebp - 0x14]
add ecx, eax
movzx eax, byte [ebp - 0x1c]
sub ecx, eax
sub ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x3c]
and ecx, dword [ebp - 4]
or edx, ecx
mov dword [ebp - 0x38], edx
jmp 0x41a962
mov ecx, 0x1aca
sub ecx, dword [ebp - 8]
movzx edx, byte [ebp - 0x38]
movzx eax, word [ebp - 0x20]
sub edx, eax
add edx, dword [ebp - 0x28]
or ecx, edx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 4]
mov eax, dword [ebp - 0x24]
lea edx, [edx + eax - 0x1eaa]
movzx eax, byte [ebp - 0x24]
and edx, eax
and edx, dword [ebp - 0x20]
or ecx, edx
or ecx, 0x4467
mov word [ebp - 0x10], cx
jmp 0x41a962
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x2c]
and edx, 0
movzx eax, byte [ebp - 0x3c]
mov esi, dword [ebp - 0x20]
sub esi, eax
movzx eax, word [ebp - 0x30]
sub esi, eax
movzx eax, word [ebp - 0x10]
sub esi, eax
sub esi, dword [ebp - 0x38]
and edx, esi
or ecx, edx
or ecx, dword [ebp - 0x2c]
movzx edx, word [ebp - 8]
or ecx, edx
mov dword [ebp - 0x18], ecx
jmp 0x41a962
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x28]
movzx ecx, word [ebp - 0x2c]
sub eax, ecx
sub eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x2c]
sub eax, 0x26b5
and eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x2c]
or eax, edx
mov dword [ebp - 0x38], eax
jmp 0x41a962
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0xc]
add eax, 0x21a3
movzx ecx, word [ebp - 0x14]
sub eax, ecx
mov ecx, dword [ebp - 0x3c]
shl eax, cl
mov edx, dword [ebp - 0x34]
sub edx, 0x21d3
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0xc]
and eax, edx
movzx ecx, byte [ebp - 0x34]
imul ecx, dword [ebp - 0x30]
and eax, ecx
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
or edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x2c]
movzx ecx, byte [ebp - 0x3c]
add eax, dword [ebp - 0x14]
lea eax, [ecx + eax - 0x4529]
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x10]
add eax, dword [ebp - 4]
or edx, eax
mov ecx, dword [ebp - 0x28]
add ecx, 0x130b
or edx, ecx
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x18]
sub edx, 0x4d1b
movzx eax, word [ebp - 0x24]
and edx, eax
and edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x14]
imul ecx, dword [ebp - 4], 0
xor eax, eax
shl eax, cl
or edx, eax
movzx ecx, word [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
lea ecx, [ecx + eax - 0x23cd]
or edx, ecx
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + edx + 0x41cb]
sub ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x2c]
and ecx, edx
or ecx, dword [ebp - 0x34]
movzx eax, word [ebp - 0x28]
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x14]
add edx, eax
or ecx, edx
mov dword [ebp - 0x3c], ecx
push str.reeselbsttaiat
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [ebp - 0x28], eax
movzx ecx, byte [ebp - 0x24]
imul ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
lea eax, [ecx + edx + 0x1e9d]
sub eax, dword [ebp - 4]
add eax, dword [ebp - 0x20]
and eax, dword [ebp - 0xc]
mov ecx, 0xd39
sub ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x14]
and eax, ecx
and eax, dword [ebp - 0x28]
or eax, 0xf57
mov dword [ebp - 0x30], eax
jmp 0x41aa83
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 8]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0xc]
or edx, eax
or edx, dword [ebp - 8]
or edx, dword [ebp - 4]
movzx ecx, word [ebp - 0xc]
sub ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x3c]
movzx eax, byte [ebp - 0x20]
sub ecx, eax
shl ecx, 0x71
and ecx, dword [ebp - 0x18]
and ecx, dword [ebp - 0x28]
or edx, ecx
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x28]
movzx eax, word [ebp - 0xc]
sub edx, eax
movzx eax, byte [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
lea eax, [eax + esi - 0x148b]
and edx, eax
or ecx, edx
movzx edx, byte [ebp - 0x34]
or ecx, edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
lea eax, [eax + edx + 0x2436]
or ecx, eax
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x20]
and ecx, 0
movzx edx, word [ebp - 4]
movzx eax, word [ebp - 0x14]
add edx, dword [ebp - 0x2c]
lea edx, [eax + edx + 0x1c50]
sub edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x2c]
and edx, dword [ebp - 0x28]
or ecx, edx
or ecx, dword [ebp - 0x2c]
imul eax, dword [ebp - 4], 0
or ecx, eax
mov byte [ebp - 0xc], cl
jmp 0x41ab30
movzx ecx, word [ebp - 0x34]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x2c]
movzx eax, word [ebp - 0xc]
sub edx, eax
sub edx, dword [ebp - 0x30]
movzx eax, byte [ebp - 0x2c]
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 8]
xor edx, eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x1c]
lea eax, [eax + esi - 0x43c6]
xor edx, eax
or ecx, edx
mov dword [ebp - 4], ecx
call fcn.0040db70
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 8]
movzx eax, byte [ebp - 0xc]
sub edx, eax
movzx ecx, word [ebp - 0x10]
mov eax, dword [ebp - 8]
sub eax, ecx
add eax, dword [ebp - 4]
mov ecx, eax
shr edx, cl
movzx ecx, word [ebp - 4]
or edx, ecx
or edx, 0x169d
movzx eax, byte [ebp - 0x34]
sub eax, dword [ebp - 0x24]
or edx, eax
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 4]
and ecx, 0x1881
movzx eax, word [ebp - 0x18]
and ecx, eax
or edx, ecx
mov dword [ebp - 0x2c], edx
movzx ecx, word [ebp - 0x28]
movzx edx, byte [ebp - 8]
add ecx, edx
sub ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
or ecx, eax
xor edx, edx
sub edx, dword [ebp - 0x18]
and edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x3c]
xor esi, esi
sub esi, eax
sub esi, dword [ebp - 0x34]
and edx, esi
or ecx, edx
mov dword [ebp - 0x30], ecx
mov ecx, 0x75a438
call dword [0x75a434]
movzx ecx, byte [ebp - 0x1c]
imul ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, ecx
and edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x14]
or edx, eax
movzx ecx, word [ebp - 0x38]
or edx, ecx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x28]
sub eax, dword [ebp - 4]
or edx, eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x24]
or edx, ecx
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x30]
and edx, 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 8]
movzx ecx, word [ebp - 0x20]
sub eax, ecx
movzx ecx, word [ebp - 0x14]
sub eax, ecx
and edx, eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 4]
sub ecx, eax
and edx, ecx
xor edx, dword [ebp - 0x28]
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x30], 0x7ba
movzx edx, word [ebp - 0xc]
mov eax, dword [ebp - 0x20]
sub eax, edx
add eax, 0x143f
imul ecx, dword [ebp - 8], 0
sub eax, ecx
movzx edx, byte [ebp - 0x3c]
imul edx, dword [ebp - 0x24]
imul edx, dword [ebp - 0x34]
sub eax, edx
sub eax, 0x391f
movzx ecx, byte [ebp - 0x24]
add ecx, dword [ebp - 0x34]
movzx edx, byte [ebp - 8]
add ecx, edx
or eax, ecx
mov dword [ebp - 0x10], eax
movzx eax, byte [ebp - 0x34]
sub eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x18]
add eax, ecx
sub eax, dword [ebp - 0x10]
sub eax, 0x4818
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x38]
and eax, edx
movzx ecx, byte [ebp - 0x18]
mov edx, dword [ebp - 0x38]
lea ecx, [edx + ecx + 0x2e6c]
and ecx, dword [ebp - 4]
or eax, ecx
mov word [ebp - 8], ax
mov edx, dword [ebp - 0x30]
add edx, 0x15
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 4]
add eax, dword [ebp - 0x28]
movzx ecx, byte [ebp - 4]
add eax, ecx
and eax, dword [ebp - 8]
movzx edx, word [ebp - 0x2c]
mov ecx, dword [ebp - 0x18]
sub ecx, edx
movzx edx, byte [ebp - 0x34]
sub ecx, edx
sub ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x24]
lea ecx, [ecx + edx + 0x1752]
add ecx, dword [ebp - 0x3c]
or eax, ecx
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x2c]
movzx ecx, byte [ebp - 0xc]
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
shl eax, cl
or edx, eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x28]
and ecx, eax
or edx, ecx
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x30], 0x7f9
jb 0x41ac68
pop edi
pop esi
mov esp, ebp
pop ebp
ret