Function at 0x4023f7
Capabilities:
Contain obfuscated stackstrings
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x300
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
push ebx
push esi
push edi
xor edi, edi
cmp dword [0x96b474], 0xc1a
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x2bc], ecx
jne 0x40242c
push edi
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [ebp - 0xc]
cmp dword [0x96b474], 0xb54
mov ecx, dword [0x419ef0]
mov dword [ebp - 0x2c8], ecx
mov ecx, dword [0x419ef4]
mov esi, 0xc6ef3720
mov dword [ebp - 0x2c0], esi
mov dword [ebp - 0x2cc], ecx
jne 0x40247a
push edi
push edi
call dword [sym.imp.ADVAPI32.dll_BackupEventLogA]
push edi
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
mov eax, dword [ebp - 0xc]
mov ecx, dword [str.__eA]
mov dword [ebp - 0x2d4], ecx
mov ecx, dword [0x419efc]
mov dword [ebp - 0x2d8], ecx
mov dword [ebp - 0x2c4], 0x20
jmp 0x4024a7
mov eax, dword [ebp - 0xc]
mov esi, dword [ebp - 0x2c0]
mov ecx, eax
shl ecx, 4
cmp dword [0x96b474], 0x4c3
mov dword [ebp - 8], ecx
jne 0x4024d5
lea eax, [ebp - 0x2fc]
push eax
call dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
push edi
call dword [sym.imp.KERNEL32.dll_RequestDeviceWakeup]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x2d4]
cmp dword [0x96b474], 0xfa9
jne 0x4024f1
mov dword [0x8fd31c], 0xedeb2e40
lea edx, [esi + eax]
shr eax, 5
add eax, dword [ebp - 0x2d8]
xor ecx, edx
xor eax, ecx
mov dword [ebp - 8], ecx
mov dword [0x8fd318], 0x9150ce2e
mov ecx, eax
mov dword [ebp - 0xe8], 0x6d66c3c6
mov dword [ebp - 0x2a4], 0x62f548ba
mov dword [ebp - 0x28c], 0x29929e02
mov dword [ebp - 0xe0], 0x6e16c156
mov dword [ebp - 0x290], 0x78c351a7
mov dword [ebp - 0x21c], 0x1a9e5f20
mov dword [ebp - 0x80], 0x357ddeb1
mov dword [ebp - 0x154], 0x639e0c06
mov dword [ebp - 0x78], 0x4cb5b7b3
mov dword [ebp - 0x27c], 0xaa04461
mov dword [ebp - 0x1c4], 0x53f9007
mov dword [ebp - 0x1c0], 0x42bb9ffe
mov dword [ebp - 0x6c], 0x2737cb39
mov dword [ebp - 0x70], 0x285c4e1f
mov dword [ebp - 0xdc], 0x4799538c
mov dword [ebp - 0x1b8], 0x5600a40
mov dword [ebp - 0xfc], 0x76a6e831
mov dword [ebp - 0x1ec], 0x6dee46e1
mov dword [ebp - 0x1dc], 0x55d21e11
mov dword [ebp - 0x3c], 0x70e22d19
mov dword [ebp - 0x250], 0x34594316
mov dword [ebp - 0x18], 0x37ac26eb
mov dword [ebp - 0x18c], 0x76d6d8e
mov dword [ebp - 0x1b4], 0x5e7a2461
mov dword [ebp - 0xa4], 0x3c026441
mov dword [ebp - 0x178], 0x8b6786d
mov dword [ebp - 0xd4], 0x526e2610
mov dword [ebp - 0x138], 0x2924f79
mov dword [ebp - 0x2b8], 0x54a23f61
mov dword [ebp - 0x248], 0x14bc0b5b
mov dword [ebp - 0x25c], 0x22567efc
mov dword [ebp - 0x34], 0x1d5804f3
mov dword [ebp - 0x68], 0x64abbace
mov dword [ebp - 0x17c], 0x34cc4056
mov dword [ebp - 0x130], 0x1ea9365c
mov dword [ebp - 0x128], 0x3e18586
mov dword [ebp - 0x1a4], 0x3a9d3a0c
mov dword [ebp - 0xd8], 0x319f130c
mov dword [ebp - 0x64], 0x6a23731d
mov dword [ebp - 0xf4], 0x227caf5e
mov dword [ebp - 0x204], 0x5689f1b7
mov dword [ebp - 0x288], 0x14046786
mov dword [ebp - 0x240], 0x2553e535
mov dword [ebp - 0x1b0], 0x7cd83bff
mov dword [ebp - 0x234], 0x22f580a6
mov dword [ebp - 0x9c], 0x381a2f5e
mov dword [ebp - 0x14c], 0x592d556c
mov dword [ebp - 0x60], 0x25447114
mov dword [ebp - 0x214], 0x2d8c6d1d
mov dword [ebp - 0xd0], 0x6b7952ed
mov dword [ebp - 0xcc], 0x1ee676f1
mov dword [ebp - 0x144], 0x739e8592
mov dword [ebp - 0x1d4], 0x5ebb689
mov dword [ebp - 0x264], 0x3eedcff2
mov dword [ebp - 0x124], 0x4a78a793
mov dword [ebp - 0x280], 0x17e95786
mov dword [ebp - 0xc4], 0x6413811e
mov dword [ebp - 0x14], 0x5dc571cb
mov dword [ebp - 0xc8], 0x74291584
mov dword [ebp - 0x1a8], 0x41d4f768
mov dword [ebp - 0x1bc], 0x3184c33f
mov dword [ebp - 0x84], 0x5cc65555
mov dword [ebp - 0xc0], 0x72ea03c6
mov dword [ebp - 0x2b0], 0x1e75368b
mov dword [ebp - 0x2b4], 0x5686cb88
mov dword [ebp - 0x298], 0x1b6ea30c
mov dword [ebp - 0x2c], 0x3f347584
mov dword [ebp - 0x278], 0x19bef8c2
mov dword [ebp - 0x170], 0x611f09d5
mov dword [ebp - 0x294], 0xfdcbc5b
mov dword [ebp - 0x168], 0x3067fff5
mov dword [ebp - 0x174], 0x3fd48d36
mov dword [ebp - 0x184], 0x74090f20
mov dword [ebp - 0x29c], 0x504cd37d
mov dword [ebp - 0x284], 0x14d2de0f
mov dword [ebp - 0x5c], 0x5dca2a71
mov dword [ebp - 0xec], 0x2730b12e
mov dword [ebp - 0x160], 0x728afc5
mov dword [ebp - 0x24], 0xb6a79b0
mov dword [ebp - 0xb8], 0x4444a8a6
mov dword [ebp - 0x16c], 0x48c7ad2a
mov dword [ebp - 0x19c], 0x74429fce
mov dword [ebp - 0x238], 0x5f45db33
mov dword [ebp - 0x230], 0x49d649c8
mov dword [ebp - 0x120], 0x437140a8
mov dword [ebp - 0x58], 0x63678d5c
mov dword [ebp - 0x50], 0x4c8eedeb
mov dword [ebp - 0x158], 0x4aa078a8
mov dword [ebp - 0x1a0], 0x35fd7194
mov dword [ebp - 0xb0], 0x7c5aa7ec
mov dword [ebp - 0x228], 0x5770f0ad
mov dword [ebp - 0x220], 0x45ce884c
mov dword [ebp - 0x48], 0x72322fa7
mov dword [ebp - 0x270], 0xc1609e9
mov dword [ebp - 0x54], 0x4c017ae0
mov dword [ebp - 0x218], 0x18be061f
mov dword [ebp - 0x7c], 0x72aa9b91
mov dword [ebp - 0x198], 0x3664db65
mov dword [ebp - 0x210], 0x64eacf99
mov dword [ebp - 0x150], 0x545b06f0
mov dword [ebp - 0x208], 0x613dd6f1
mov dword [ebp - 0xa8], 0x549ceed3
mov dword [ebp - 0x13c], 0x4827889b
mov dword [ebp - 0x1ac], 0x5df846e2
mov dword [ebp - 0x190], 0xdd3ed7b
mov dword [ebp - 0x118], 0x1d4f44cf
mov dword [ebp - 0x1e4], 0x1ab97ad8
mov dword [ebp - 0x40], 0x7535dc23
mov dword [ebp - 0x268], 0x7b72eca8
mov dword [ebp - 0x260], 0x482a73f5
mov dword [ebp - 0x110], 0x3f6a1c43
mov dword [ebp - 0x23c], 0x380f6153
mov dword [ebp - 0xa0], 0x3c3418e7
mov dword [ebp - 0x200], 0x6b736bc7
mov dword [ebp - 0x94], 0xda3b422
mov dword [ebp - 0x11c], 0x524c63db
mov dword [ebp - 0xbc], 0x3a049d25
mov dword [ebp - 0x1f8], 0x4a01b99b
mov dword [ebp - 0x1f0], 0x6d8b95a6
mov dword [ebp - 0x108], 0x4220eb5b
mov dword [ebp - 0x1fc], 0x589d7e6f
mov dword [ebp - 0x20c], 0x4bf42e3a
mov dword [ebp - 0x134], 0x5e596e06
mov dword [ebp - 0x224], 0x200c1cbc
mov dword [ebp - 0x274], 0x7d6124de
mov dword [ebp - 0x98], 0x20fded6f
mov dword [ebp - 0x2a8], 0x3e32848a
mov dword [ebp - 0x38], 0x7ec19547
mov dword [ebp - 0x4c], 0x66cc3d7d
mov dword [ebp - 0x24c], 0x7cb195ec
mov dword [ebp - 0x30], 0x34f6c63f
mov dword [ebp - 0x1e8], 0x324d3634
mov dword [ebp - 0x100], 0x42e6376d
mov dword [ebp - 0x1c], 0x1a28f80e
mov dword [ebp - 0x28], 0x1fcdddb5
mov dword [ebp - 0x164], 0x29832c6c
mov dword [ebp - 0x114], 0x7d7b87fc
mov dword [ebp - 0x20], 0x60304a94
mov dword [ebp - 0xe4], 0x539638aa
mov dword [ebp - 0x148], 0x56d2d8c8
mov dword [ebp - 0x194], 0x16b107a8
mov dword [ebp - 0x26c], 0x75bd04a8
mov dword [ebp - 0x1cc], 0x6b1549cc
mov dword [ebp - 0x44], 0x4a248ba9
mov dword [ebp - 0x74], 0x1b2824b3
mov dword [ebp - 0x1e0], 0x44a2fa10
mov dword [ebp - 0x1d8], 0x3bf447e3
mov dword [ebp - 0x244], 0x598ed85b
mov dword [ebp - 0xf8], 0x6555fa74
mov dword [ebp - 0xb4], 0x50b8f497
mov dword [ebp - 0x2a0], 0x5ce538c9
mov dword [ebp - 0x10c], 0x7a7d178a
mov dword [ebp - 0x90], 0x3563d95a
mov dword [ebp - 0x2ac], 0x54e7a11c
mov dword [ebp - 0x258], 0x6b3b84e
mov dword [ebp - 0x140], 0x2ef5a276
mov dword [ebp - 0x1d0], 0x5e59f25d
mov dword [ebp - 0x88], 0x77e4fb08
mov dword [ebp - 0x254], 0x3effd658
mov dword [ebp - 0x188], 0x4fcda59
mov dword [ebp - 0x1f4], 0x6c7b0f7c
mov dword [ebp - 0x15c], 0x6ebbae93
mov dword [ebp - 0xf0], 0x23ec46d8
mov dword [ebp - 0x104], 0x3e1aeab6
mov dword [ebp - 0x12c], 0x4345028c
mov dword [ebp - 0x8c], 0x3ab3f565
mov dword [ebp - 0xac], 0x2e02ddc2
mov dword [ebp - 0x1c8], 0x3f637ea6
mov dword [ebp - 0x22c], 0x540c10a5
mov dword [ebp - 0x180], 0x5f63456b
mov eax, 0x4d710034
mul dword [ebp - 0xe8]
mov eax, dword [ebp - 0xe8]
sub dword [ebp - 0xe8], 0x57e10a6d
mov eax, 0x6cbd2f7
mul dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x2a4]
add dword [ebp - 0x2a4], 0x1e6f30bc
sub dword [ebp - 0xe8], 0x339cbb62
mov eax, 0x79f961cd
mul dword [ebp - 0x28c]
mov eax, dword [ebp - 0x28c]
mov eax, 0x422c7999
mul dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x2a4]
mov eax, 0x500e6e45
mul dword [ebp - 0x28c]
mov eax, dword [ebp - 0x28c]
add dword [ebp - 0xe0], 0x3ef16316
sub dword [ebp - 0xe8], 0x8f2c813
sub dword [ebp - 0x28c], 0x6ba373f1
mov eax, 0x1729deb9
mul dword [ebp - 0x21c]
mov eax, dword [ebp - 0x21c]
add dword [ebp - 0x28c], 0x4630aa30
mov eax, 0x5c5c6c7
mul dword [ebp - 0xe8]
mov eax, dword [ebp - 0xe8]
add dword [ebp - 0x78], 0x8eead3f
sub dword [ebp - 0x290], 0x7b267861
add dword [ebp - 0x2a4], 0x9c74e9f
add dword [ebp - 0xe0], 0x7994df1a
mov eax, 0x780b3dd
mul dword [ebp - 0x154]
mov eax, dword [ebp - 0x154]
add dword [ebp - 0x78], 0x7250181b
mov eax, 0x5df4612a
mul dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x1c4]
add dword [ebp - 0x2a4], 0x2b789d2
add dword [ebp - 0x28c], 0x61dfa3df
sub dword [ebp - 0x80], 0x3b06640
mov eax, 0x6d8655b1
mul dword [ebp - 0x21c]
mov eax, dword [ebp - 0x21c]
mov eax, 0x357dfa1a
mul dword [ebp - 0x27c]
mov eax, dword [ebp - 0x27c]
sub dword [ebp - 0x28c], 0x2741ff51
mov eax, 0x3f14f0f
mul dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
sub dword [ebp - 0x78], 0x4a6b2225
sub dword [ebp - 0x290], 0x536c6876
sub dword [ebp - 0x21c], 0x31b0e09e
sub dword [ebp - 0xe0], 0x7444ba7f
mov eax, 0x37f05496
mul dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c0]
add dword [ebp - 0x6c], 0x6f885e7a
mov eax, 0xd9eb7f8
mul dword [ebp - 0x27c]
mov eax, dword [ebp - 0x27c]
add dword [ebp - 0xdc], 0x20d910c7
sub dword [ebp - 0x1c4], 0x77069468
mov eax, 0x7a95013e
mul dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
sub dword [ebp - 0x2a4], 0x99f331a
mov eax, 0x64b81be8
mul dword [ebp - 0x154]
mov eax, dword [ebp - 0x154]
mov eax, 0x548eb7a1
mul dword [ebp - 0xdc]
mov eax, dword [ebp - 0xdc]
mov eax, 0x7a4d1f1f
mul dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x2a4]
add dword [ebp - 0x290], 0x22b32e80
add dword [ebp - 0xe0], 0x77c54a21
add dword [ebp - 0x28c], 0x56f439ee
mov eax, 0x419eb0ee
mul dword [ebp - 0xfc]
mov eax, dword [ebp - 0xfc]
sub dword [ebp - 0x3c], 0x8c033ed
mov eax, 0x7383df21
mul dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c0]
sub dword [ebp - 0x290], 0x512f4c68
mov eax, 0x6d96e328
mul dword [ebp - 0x21c]
mov eax, dword [ebp - 0x21c]
sub dword [ebp - 0xe8], 0x4ebde34c
sub dword [ebp - 0x21c], 0x5d86f342
sub dword [ebp - 0xdc], 0x6d73f4a0
mov eax, 0x758f3dc3
mul dword [ebp - 0xfc]
mov eax, dword [ebp - 0xfc]
mov eax, 0x24f5eb76
mul dword [ebp - 0x18c]
mov eax, dword [ebp - 0x18c]
mov eax, 0x49d4b126
mul dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
sub dword [ebp - 0x1ec], 0x2f253c3f
add dword [ebp - 0x250], 0x179d519d
mov eax, 0x5745b0e4
mul dword [ebp - 0x18c]
mov eax, dword [ebp - 0x18c]
add dword [ebp - 0x1c4], 0x6e748993
add dword [ebp - 0x2a4], 0x4f351384
mov eax, 0x4301731f
mul dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
sub dword [ebp - 0x78], 0x2ef3e7cc
sub dword [ebp - 0x1c0], 0x2d743908
add dword [ebp - 0x178], 0x7ddb9bba
sub dword [ebp - 0x70], 0x6cecb61f
sub dword [ebp - 0x21c], 0x39cb2de9
add dword [ebp - 0x3c], 0x5763c47d
add dword [ebp - 0x1c0], 0x40e344fa
add dword [ebp - 0x2a4], 0x24ab101f
mov eax, 0x5e209a57
mul dword [ebp - 0xfc]
mov eax, dword [ebp - 0xfc]
mov eax, 0x72d5c8fb
mul dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x1c0]
mov eax, 0x45a75c5e
mul dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1b4]
add dword [ebp - 0x25c], 0x56fe210f
add dword [ebp - 0x25c], 0x252f6817
sub dword [ebp - 0x21c], 0xf86ff05
add dword [ebp - 0x2a4], 0x79dfd52c
mov eax, 0x12ad0640
mul dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, 0x71d2271
mul dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1b8]
add dword [ebp - 0xdc], 0x13727efb
mov eax, 0x11c8f908
mul dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add dword [ebp - 0x34], 0x2dfc7d7
mov eax, 0x7735c973
mul dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, 0x6336ab4e
mul dword [ebp - 0x250]
mov eax, dword [ebp - 0x250]
mov eax, 0x661dbe23
mul dword [ebp - 0xfc]
mov eax, dword [ebp - 0xfc]
mov eax, 0x5c4e4c03
mul dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, 0x7b4dbc6d
mul dword [ebp - 0x21c]
mov eax, dword [ebp - 0x21c]
sub dword [ebp - 0x28c], 0x4b1686d4
add dword [ebp - 0x248], 0xad3df86
mov eax, 0xd4b1b04
mul dword [ebp - 0x25c]
mov eax, dword [ebp - 0x25c]
add dword [ebp - 0xe8], 0x3d7f03a9
sub dword [ebp - 0x248], 0x3ca01b52
mov eax, 0x4e4609ef
mul dword [ebp - 0x250]
mov eax, dword [ebp - 0x250]
sub dword [ebp - 0x28c], 0xaa31a40
mov eax, 0x40588daa
mul dword [ebp - 0x17c]
mov eax, dword [ebp - 0x17c]
sub dword [ebp - 0xf4], 0x54c1d3a5
add dword [ebp - 0xdc], 0x4612a7a9
add dword [ebp - 0xf4], 0x4e8cb997
mov eax, 0x227fe7a9
mul dword [ebp - 0xe8]
mov eax, dword [ebp - 0xe8]
sub dword [ebp - 0x1dc], 0x548aef0f
sub dword [ebp - 0x1c4], 0x6af1bbe1
mov eax, 0x35b7ec59
mul dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
sub dword [ebp - 0x1b8], 0x39193894
sub dword [ebp - 0x21c], 0x13b61bdc
add dword [ebp - 0x2b8], 0x4e9a1d41
mov eax, 0x3173ba0e
mul dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x1c4]
sub dword [ebp - 0xdc], 0x736434d4
mov eax, 0x2ea0bc
mul dword [ebp - 0x240]
mov eax, dword [ebp - 0x240]
sub dword [ebp - 0x1c4], 0x48de2900
sub dword [ebp - 0x204], 0x25b88ebf
mov eax, 0x761ac3c2
mul dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
sub dword [ebp - 0x250], 0x76d0a1d7
sub dword [ebp - 0x1c4], 0x18a3ac77
sub dword [ebp - 0xe8], 0x77f5fcb5
mov eax, 0x592918e3
mul dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1b8]
add dword [ebp - 0x204], 0xf088727
mov eax, 0x7f58807a
mul dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x1ec]
add dword [ebp - 0x1c4], 0x956838
mov eax, 0xcf0b7f5
mul dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
add dword [ebp - 0x1a4], 0x1594bb7f
add dword [ebp - 0x28c], 0x11cfd2d3
mov eax, 0x6854553e
mul dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x1c4]
add dword [ebp - 0xfc], 0x157f9b18
mov eax, 0x6848d01f
mul dword [ebp - 0x240]
mov eax, dword [ebp - 0x240]
sub dword [ebp - 0x250], 0x75c58fbd
mov eax, 0xe8cea0d
mul dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
sub dword [ebp - 0xdc], 0x29eb8c69
mov eax, 0x132a9abb
mul dword [ebp - 0x154]
mov eax, dword [ebp - 0x154]
add dword [ebp - 0x1d4], 0x6b438690
add dword [ebp - 0xdc], 0x52892928
sub dword [ebp - 0xe0], 0x2988ccfa
mov eax, 0x57fbe246
mul dword [ebp - 0xd0]
mov eax, dword [ebp - 0xd0]
add dword [ebp - 0x1a4], 0x194bbca5
mov eax, 0x5ad1a2ae
mul dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1b4]
add dword [ebp - 0x18c], 0x43aacade
add dword [ebp - 0x70], 0x6dcd42e6
add dword [ebp - 0x1b0], 0x466ea87
add dword [ebp - 0x14c], 0x4470c634
sub dword [ebp - 0xe8], 0x55361d1a
add dword [ebp - 0xe8], 0xae52591
mov eax, 0x1f8bf793
mul dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
sub dword [ebp - 0x1b4], 0x497d5c6a
mov eax, 0x18e4ed42
mul dword [ebp - 0x234]
mov eax, dword [ebp - 0x234]
sub dword [ebp - 0x288], 0x28c535bf
mov eax, 0x4116fa69
mul dword [ebp - 0x18c]
mov eax, dword [ebp - 0x18c]
add dword [ebp - 0x78], 0x510ca472
add dword [ebp - 0xd4], 0x12963705
mov eax, 0x3cebc612
mul dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, 0x1e48cef4
mul dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
add dword [ebp - 0x21c], 0x4000402a
add dword [ebp - 0x34], 0x37e11551
sub dword [ebp - 0xa4], 0xd4f4a04
sub dword [ebp - 0x18c], 0x785f3854
add dword [ebp - 0xdc], 0x61636616
sub dword [ebp - 0x70], 0x61459c89
sub dword [ebp - 0xd0], 0x47b2399f
add dword [ebp - 0x234], 0x398c6082
mov eax, 0x2345b650
mul dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
sub dword [ebp - 0x84], 0x12d15c77
mov eax, 0x1380b31b
mul dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
sub dword [ebp - 0x288], 0x1b5bce42
sub dword [ebp - 0x70], 0x7eef0cb
mov eax, 0x1c88eb8f
mul dword [ebp - 0x128]
mov eax, dword [ebp - 0x128]
add dword [ebp - 0x25c], 0x262fe9e2
add dword [ebp - 0x14c], 0x3f65f81b
mov eax, 0x2833d858
mul dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov eax, 0x7c0c3e44
mul dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
sub dword [ebp - 0x68], 0x18bec7b8
sub dword [ebp - 0x1bc], 0x1977852c
mov eax, 0x789b3d9b
mul dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b0]
add dword [ebp - 0x78], 0x3be525c3
add dword [ebp - 0x2c], 0x45edffd7
add dword [ebp - 0x28c], 0x4ccfdc76
add dword [ebp - 0x78], 0x63c37832
sub dword [ebp - 0x1dc], 0x120a3c3c
mov eax, 0x7e766fd4
mul dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b0]
mov eax, 0x78ea4332
mul dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b0]
mov eax, 0x4de03b33
mul dword [ebp - 0x28c]
mov eax, dword [ebp - 0x28c]
add dword [ebp - 0x298], 0x248de9ab
sub dword [ebp - 0x184], 0x534a92b9
sub dword [ebp - 0xa4], 0x175bf147
add dword [ebp - 0x2c], 0x2010f1a2
sub dword [ebp - 0x144], 0x17de8e40
add dword [ebp - 0xc0], 0x2b54f3ac
add dword [ebp - 0x284], 0x778b2081
sub dword [ebp - 0x21c], 0x20e3a871
sub dword [ebp - 0x1c4], 0x2a0f47a1
sub dword [ebp - 0x18], 0x4eb79205
mov eax, 0x7f1d6963
mul dword [ebp - 0x21c]
mov eax, dword [ebp - 0x21c]
mov eax, 0x1b4c7a25
mul dword [ebp - 0x128]
mov eax, dword [ebp - 0x128]
sub dword [ebp - 0x84], 0x2ed2300c
mov eax, 0x130cb074
mul dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x2b4]
mov eax, 0x362421ab
mul dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
sub dword [ebp - 0x204], 0x28013b75
add dword [ebp - 0x1a0], 0x489daf0e
add dword [ebp - 0x128], 0x724ad334
mov eax, 0x551e8428
mul dword [ebp - 0x250]
mov eax, dword [ebp - 0x250]
mov eax, 0x35373ff1
mul dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
add dword [ebp - 0x50], 0x6d30212d
add dword [ebp - 0xb8], 0x5340d934
add dword [ebp - 0x220], 0x68485744
sub dword [ebp - 0x278], 0x35da00f9
sub dword [ebp - 0x78], 0x2e880ab5
add dword [ebp - 0xcc], 0x1d5fe9c
mov eax, 0x1d16f814
mul dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
sub dword [ebp - 0xe0], 0x7d0718da
mov eax, 0x76f59f88
mul dword [ebp - 0x238]
mov eax, dword [ebp - 0x238]
sub dword [ebp - 0xe8], 0xb780781
sub dword [ebp - 0x120], 0x4841a763
add dword [ebp - 0x264], 0x61f5dc1f
add dword [ebp - 0x50], 0x786d9c35
add dword [ebp - 0x1a4], 0x5e05954c
sub dword [ebp - 0x54], 0x2ff9bf1e
sub dword [ebp - 0x128], 0x21bd8bd6
sub dword [ebp - 0x130], 0x273db1f1
add dword [ebp - 0xd4], 0x5eb02723
mov eax, 0x4c57903b
mul dword [ebp - 0x208]
mov eax, dword [ebp - 0x208]
mov eax, 0x16434fe7
mul dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x1a8]
add dword [ebp - 0x29c], 0x11601a71
add dword [ebp - 0x60], 0x7d5f15b3
sub dword [ebp - 0x29c], 0x73359a63
mov eax, 0x381d2fc2
mul dword [ebp - 0x230]
mov eax, dword [ebp - 0x230]
sub dword [ebp - 0x19c], 0x1e532f53
sub dword [ebp - 0xe8], 0x638eb8ac
sub dword [ebp - 0x1a8], 0x3e393d80
mov eax, 0x7d93f76b
mul dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b0]
mov eax, 0x14139f4e
mul dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
mov eax, 0x1285d9d3
mul dword [ebp - 0x178]
mov eax, dword [ebp - 0x178]
sub dword [ebp - 0x1b8], 0x2fe85052
sub dword [ebp - 0x248], 0x235c3c57
mov eax, 0x369bcdb
mul dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x2b0]
sub dword [ebp - 0x78], 0x1e54bd2b
sub dword [ebp - 0x278], 0x6cbaa264
mov eax, 0x37ca3dcb
mul dword [ebp - 0x170]
mov eax, dword [ebp - 0x170]
add dword [ebp - 0xb0], 0x403d254f
add dword [ebp - 0x1d4], 0x6a82ef6f
sub dword [ebp - 0x1d4], 0x427e55cd
sub dword [ebp - 0x64], 0x3e5f8a59
sub dword [ebp - 0x1c0], 0x75b7e4
sub dword [ebp - 0xfc], 0x798ee30b
sub dword [ebp - 0x48], 0x7794dd71
mov eax, 0x34e208d7
mul dword [ebp - 0x238]
mov eax, dword [ebp - 0x238]
sub dword [ebp - 0xa8], 0x4733918b
mov eax, 0x46c7eb19
mul dword [ebp - 0x220]
mov eax, dword [ebp - 0x220]
sub dword [ebp - 0xd4], 0x3c989ddf
add dword [ebp - 0x260], 0x62005d51
sub dword [ebp - 0x5c], 0x2bac872c
add dword [ebp - 0x268], 0x1acf8c67
mov eax, 0x62ab40ce
mul dword [ebp - 0x220]
mov eax, dword [ebp - 0x220]
sub dword [ebp - 0x16c], 0x1d4a5c50
sub dword [ebp - 0x1c4], 0x48072e9b
mov eax, 0x7cbea6fc
mul dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, 0x76b01794
mul dword [ebp - 0x280]
mov eax, dword [ebp - 0x280]
mov eax, 0x3394c70e
mul dword [ebp - 0x220]
mov eax, dword [ebp - 0x220]
mov eax, 0x65ef0efd
mul dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
add dword [ebp - 0x220], 0x3b5d24cc
sub dword [ebp - 0x1b4], 0x1262036c
sub dword [ebp - 0x27c], 0x1341e856
sub dword [ebp - 0xfc], 0x792f7467
mov eax, 0x54d4b4dd
mul dword [ebp - 0xe8]
mov eax, dword [ebp - 0xe8]
sub dword [ebp - 0xc0], 0x2f0d0384
sub dword [ebp - 0x98], 0x1c6060f5
add dword [ebp - 0x250], 0xe7675da
add dword [ebp - 0x238], 0x57586d4a
add dword [ebp - 0x1a4], 0x7dcb711b
mov eax, 0x4f86c2b8
mul dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
mov eax, 0x7a9c2303
mul dword [ebp - 0x240]
mov eax, dword [ebp - 0x240]
mov eax, 0x79071ff8
mul dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
sub dword [ebp - 0x78], 0x2c306b2c
add dword [ebp - 0x30], 0x2068ae22
mov eax, 0x66e643bd
mul dword [ebp - 0x230]
mov eax, dword [ebp - 0x230]
add dword [ebp - 0x6c], 0x4a394b94
sub dword [ebp - 0x3c], 0x4a349346
add dword [ebp - 0x24], 0x4d941461
add dword [ebp - 0x94], 0x6d528358
mov eax, 0x487e59bb
mul dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
sub dword [ebp - 0xa4], 0x2305cdcc
mov eax, 0x174839e6
mul dword [ebp - 0x298]
mov eax, dword [ebp - 0x298]
mov eax, 0x493a91e5
mul dword [ebp - 0x250]
mov eax, dword [ebp - 0x250]
sub dword [ebp - 0x68], 0x417bf177
sub dword [ebp - 0x110], 0x3b49df78
add dword [ebp - 0x224], 0x361aee0b
add dword [ebp - 0x154], 0x5426e2da
mov eax, 0x41805fac
mul dword [ebp - 0x238]
mov eax, dword [ebp - 0x238]
sub dword [ebp - 0x234], 0x11342763
add dword [ebp - 0x1a4], 0x515bae74
mov eax, 0x507ec253
mul dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x2a4]
sub dword [ebp - 0x20], 0x442c2629
mov eax, 0x4fa42715
mul dword [ebp - 0x134]
mov eax, dword [ebp - 0x134]
mov eax, 0x53fc6bed
mul dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b0]
sub dword [ebp - 0x184], 0x159eb797
add dword [ebp - 0x1e4], 0x3cebcd30
add dword [ebp - 0x2b8], 0x4cdcd60f
add dword [ebp - 0x164], 0x67d96a00
sub dword [ebp - 0x234], 0x2d17f79e
mov eax, 0x4af81a11
mul dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x1ac]
add dword [ebp - 0x6c], 0x1634c57c
mov eax, 0x31e47603
mul dword [ebp - 0x25c]
mov eax, dword [ebp - 0x25c]
mov eax, 0x10868a7a
mul dword [ebp - 0x14c]
mov eax, dword [ebp - 0x14c]
add dword [ebp - 0x2b8], 0x22c6e56b
mov eax, 0x6e7392e3
mul dword [ebp - 0x13c]
mov eax, dword [ebp - 0x13c]
sub dword [ebp - 0x210], 0x3e8c60f3
sub dword [ebp - 0x2b8], 0x6d7c93f
mov eax, 0x2da2d3b0
mul dword [ebp - 0xec]
mov eax, dword [ebp - 0xec]
add dword [ebp - 0x270], 0x4c19adc4
add dword [ebp - 0x21c], 0x202aa888
mov eax, 0x21ad934
mul dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
mov eax, 0x51832b41
mul dword [ebp - 0xcc]
mov eax, dword [ebp - 0xcc]
add dword [ebp - 0x130], 0x316634cc
mov eax, 0x901ad6
mul dword [ebp - 0x23c]
mov eax, dword [ebp - 0x23c]
mov eax, 0x45a612be
mul dword [ebp - 0x160]
mov eax, dword [ebp - 0x160]
add dword [ebp - 0x140], 0x446d33e3
add dword [ebp - 0x1d8], 0x45b3fb0e
mov eax, 0x4036ca04
mul dword [ebp - 0x128]
mov eax, dword [ebp - 0x128]
mov eax, 0x66b510f8
mul dword [ebp - 0x16c]
mov eax, dword [ebp - 0x16c]
sub dword [ebp - 0x294], 0x70813f5d
mov eax, 0x566ba8b
mul dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
sub dword [ebp - 0x178], 0x71a6ad6f
sub dword [ebp - 0x58], 0x4c385a3a
add dword [ebp - 0xd8], 0x3e48163e
add dword [ebp - 0xd0], 0x65516541
sub dword [ebp - 0x170], 0x65c6b48b
add dword [ebp - 0x1c], 0x394fbd85
mov eax, 0x364f8b32
mul dword [ebp - 0x158]
mov eax, dword [ebp - 0x158]
sub dword [ebp - 0x218], 0x551b6e4f
mov eax, 0x281a8653
mul dword [ebp - 0x108]
mov eax, dword [ebp - 0x108]
sub dword [ebp - 0x104], 0x67114a67
mov eax, 0x117a5271
mul dword [ebp - 0x210]
mov eax, dword [ebp - 0x210]
sub dword [ebp - 0x8c], 0x47fdeb50
sub dword [ebp - 0x148], 0x35de97cf
sub dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x10], edi
and eax, 0x4dd0071b
sub dword [ebp - 0x10], 0x2273eb88
mov ebx, 0x3a7cd587
add dword [ebp - 0x10], 0x2273eb8c
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [ebp - 0x10]
mov edx, eax
add esi, eax
shl edx, cl
mov dword [ebp - 0x2d0], esi
mov esi, eax
shr esi, 5
add edx, dword [ebp - 0x2c8]
add esi, dword [ebp - 0x2cc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x2d0]
xor dword [ebp - 8], eax
cmp dword [0x96b474], 0xb3f
jne 0x403b18
lea eax, [ebp - 0x2e4]
push eax
mov dword [ebp - 0x2e4], edi
mov dword [ebp - 0x2e0], edi
call dword [sym.imp.KERNEL32.dll_QueryDepthSList]
xor dword [ebp - 8], esi
mov dword [0x43ab30], edi
mov eax, dword [ebp - 8]
sub dword [ebp - 0xc], eax
cmp dword [0x96b474], 0x1d5
jne 0x403b40
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
push edi
call dword [sym.imp.KERNEL32.dll_ReleaseActCtx]
lea eax, [ebp - 0x2c0]
call fcn.004023f0
dec dword [ebp - 0x2c4]
jne 0x40249e
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop edi
mov dword [eax], ecx
mov ecx, dword [ebp - 0x2bc]
pop esi
mov dword [eax + 4], ecx
pop ebx
leave
ret 4