Function at 0x40fd60
Capabilities:
Accept command line arguments
Allocate or change rwx memory
Create pipe
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x164
mov eax, dword [0x75a430]
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0x1875
mov dword [ebp - 0x4c], 0
mov ecx, dword [0x75a40c]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], 0
xor edx, edx
sub edx, dword [ebp - 0x14]
and edx, 0x203f
movzx eax, byte [ebp - 0xc]
or edx, eax
mov dword [ebp - 4], edx
mov dword [ebp - 4], 0x12a3
mov ecx, dword [ebp - 4]
or ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
and edx, 0
or ecx, edx
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 4]
jbe 0x40fe1a
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x10]
ja 0x40fdeb
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 8]
jne 0x40fdeb
movzx eax, word [ebp - 0x14]
movzx ecx, byte [ebp - 4]
add ecx, dword [ebp - 8]
movzx edx, word [ebp - 0x14]
add ecx, edx
and eax, ecx
mov byte [ebp - 0x10], al
jmp 0x40fe01
mov eax, dword [ebp - 0x14]
or eax, 0x3cbd
movzx ecx, word [ebp - 0x14]
mov edx, dword [ebp - 0xc]
sub edx, ecx
or eax, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 4]
jbe 0x40fe11
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x10]
ja 0x40fe1a
mov edx, dword [ebp - 8]
or edx, dword [ebp - 0x14]
mov dword [ebp - 4], edx
push 0x40
push 0x1000
push 0x10ed17
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x10]
jae 0x40fe58
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
or ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
imul edx, dword [ebp - 0xc], 0
movzx eax, word [ebp - 0xc]
add edx, dword [ebp - 8]
add eax, edx
mov dword [ebp - 0x10], eax
movzx ecx, word [ebp - 8]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x14]
ja 0x40fe93
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x14]
je 0x40fe7a
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 8]
jne 0x40fe83
mov edx, dword [ebp - 8]
and edx, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
movzx eax, word [ebp - 0x14]
add eax, dword [ebp - 0x14]
and eax, dword [ebp - 8]
or eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x14]
movzx edx, word [ebp - 8]
add ecx, edx
or ecx, 0x1c68
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x38]
add eax, 0xbb000
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x164], 0x114
lea ecx, [ebp - 0x164]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
and edx, 0
and edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0xc]
je 0x40fefe
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
or edx, eax
mov dword [ebp - 0xc], edx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x48], 0x6405a0
cmp dword [ebp - 0x10], 0
jae 0x40ff1a
cmp dword [ebp - 8], 0
ja 0x40ff4b
movzx ecx, word [ebp - 0x14]
add ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 4]
jb 0x40ff4b
cmp dword [ebp - 4], 0x1a21
jb 0x40ff4b
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
lea edx, [ecx + eax + 0x3852]
or edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x5d
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 0x9b
ja case.0x40ff6d.1
mov edx, dword [ebp - 0x3c]
movzx eax, byte [edx + 0x410808]
jmp dword [eax*4 + 0x4107f0]
mov ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 4]
and ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
jmp 0x40ffd1
movzx edx, word [ebp - 0x10]
add edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
and edx, dword [ebp - 8]
mov dword [ebp - 4], edx
jmp 0x40ffd1
mov eax, dword [ebp - 0xc]
and eax, 0x4170
mov dword [ebp - 4], eax
jmp 0x40ffd1
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
or ecx, edx
mov dword [ebp - 0x14], ecx
jmp 0x40ffd1
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
jmp 0x40ffd1
movzx ecx, byte [ebp - 0x10]
mov edx, dword [ebp - 8]
lea eax, [edx + ecx + 0x52d]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0
jmp 0x40ffe3
mov ecx, dword [ebp - 8]
add ecx, 4
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0xc
jae 0x410018
mov dword [ebp - 4], 0
jmp 0x40fffb
mov edx, dword [ebp - 4]
add edx, 0x10
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x30
jae 0x410009
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
jmp 0x40fff2
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 0xc]
mov word [ebp - 4], cx
jmp 0x40ffda
mov edx, dword [ebp - 8]
add edx, dword [ebp - 4]
and edx, dword [ebp - 0x14]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x18], 0
movzx eax, word [ebp - 0xc]
add eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
or eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, 0x304e
sub ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, 0x467c
sub edx, dword [ebp - 0x14]
or edx, dword [ebp - 8]
or edx, 0x4959
mov byte [ebp - 0xc], dl
movzx eax, word [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
sub ecx, 0x3618
and eax, ecx
or eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
movzx edx, word [ebp - 0x10]
add edx, dword [ebp - 0xc]
imul eax, dword [ebp - 8], 0x4a9b
sub edx, eax
mov word [ebp - 4], dx
mov ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x10]
or ecx, edx
mov word [ebp - 0xc], cx
mov dword [ebp - 0x24], 0xe8251d48
cmp dword [ebp - 0x14], 0
jae 0x4100b8
movzx eax, byte [ebp - 0x10]
or eax, dword [ebp - 0x10]
or eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
push str.lanhneeiaftneiy
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x14]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 4], eax
mov dword [ebp - 0x30], 0x28f0c236
movzx eax, byte [ebp - 4]
xor ecx, ecx
sub ecx, eax
movzx edx, word [ebp - 8]
sub ecx, edx
sub ecx, 0x4764
mov byte [ebp - 0xc], cl
movzx eax, word [ebp - 4]
sub eax, dword [ebp - 0x10]
sub eax, 0x2fe1
or eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x34], 0x34c2d6f6
movzx ecx, word [ebp - 8]
add ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x14]
movzx edx, word [ebp - 0xc]
add ecx, edx
mov word [ebp - 4], cx
mov dword [ebp - 0xc], 0xf6d
movzx eax, word [ebp - 8]
sub eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
mov byte [ebp - 0x14], al
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
lea eax, [edx + ecx + 0x316b]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x16
mov dword [ebp - 0xc], ecx
movzx edx, word [ebp - 8]
add edx, 0x834
and edx, 0
mov word [ebp - 4], dx
mov eax, dword [ebp - 8]
or eax, dword [ebp - 4]
mov byte [ebp - 0x10], al
cmp dword [ebp - 0xc], 0xf99
jb 0x41012f
mov dword [ebp - 0x2c], 0x1c8365ac
movzx ecx, byte [ebp - 0x14]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
cmp dword [ebp - 0x14], 0x2931
jae 0x4101a1
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x14]
jbe 0x4101a1
mov eax, dword [ebp - 0xc]
sub eax, 0x24ad
sub eax, dword [ebp - 0xc]
movzx ecx, byte [ebp - 0x10]
and eax, ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], 0x3174edda
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], 0x95
ja 0x4101ce
cmp dword [ebp - 0x1c], 0x95
je 0x4101f8
cmp dword [ebp - 0x1c], 0xe
je 0x41021c
cmp dword [ebp - 0x1c], 0x42
je 0x410230
jmp 0x41023e
cmp dword [ebp - 0x1c], 0xec
je 0x4101e2
cmp dword [ebp - 0x1c], 0x149
je 0x41020b
jmp 0x41023e
mov eax, dword [ebp - 4]
or eax, dword [ebp - 0x14]
or eax, 0x3ce1
movzx ecx, word [ebp - 4]
or eax, ecx
mov dword [ebp - 0x10], eax
jmp 0x41024d
movzx edx, byte [ebp - 4]
imul edx, dword [ebp - 4]
add edx, dword [ebp - 0x10]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
jmp 0x41024d
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
jmp 0x41024d
mov ecx, dword [ebp - 0x10]
and ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 8]
or ecx, 0x46a2
mov dword [ebp - 0x14], ecx
jmp 0x41024d
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x10]
or edx, dword [ebp - 0x14]
mov dword [ebp - 8], edx
jmp 0x41024d
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
movzx ecx, word [ebp - 4]
sub eax, ecx
mov byte [ebp - 0x10], al
mov edx, dword [ebp - 0x10]
add edx, 0x2220
imul eax, dword [ebp - 0xc], 0
sub edx, eax
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 8]
je 0x4102e6
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x44]
sub eax, 0x24
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x6d
ja case.0x410286.1
mov ecx, dword [ebp - 0x44]
movzx edx, byte [ecx + 0x4108b8]
jmp dword [edx*4 + 0x4108a4]
movzx eax, word [ebp - 4]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
add ecx, dword [ebp - 4]
or ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
jmp 0x4102e6
movzx edx, byte [ebp - 0x10]
or edx, dword [ebp - 0x14]
movzx eax, word [ebp - 0x14]
mov ecx, dword [ebp - 8]
sub ecx, eax
or edx, ecx
mov dword [ebp - 4], edx
jmp 0x4102e6
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
lea ecx, [edx + eax + 0x490a]
mov dword [ebp - 8], ecx
jmp 0x4102e6
mov edx, dword [ebp - 8]
and edx, 0x3c19
mov word [ebp - 0x10], dx
jmp 0x4102e6
mov eax, dword [ebp - 8]
or eax, dword [ebp - 0x10]
mov dword [ebp - 4], eax
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x18], 0xa000
jae 0x4107b1
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x40]
sub edx, 0x61
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0x73
ja case.0x410319.1
mov eax, dword [ebp - 0x40]
movzx ecx, byte [eax + 0x41093c]
jmp dword [ecx*4 + 0x410928]
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
and edx, 0x3b85
mov dword [ebp - 0xc], edx
jmp 0x41036f
movzx eax, word [ebp - 4]
xor ecx, ecx
sub ecx, eax
add ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
jmp 0x41036f
mov edx, dword [ebp - 8]
and edx, dword [ebp - 0x10]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
jmp 0x41036f
movzx eax, byte [ebp - 0x10]
add eax, 0x4c08
and eax, dword [ebp - 4]
mov dword [ebp - 0x14], eax
jmp 0x41036f
mov ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x14]
mov dword [ebp - 4], ecx
mov dword [ebp - 0xc], 0xd21
jmp 0x410381
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0xd24
jae 0x4103a1
cmp dword [ebp - 8], 0
jne 0x41039f
movzx eax, word [ebp - 4]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
or eax, ecx
mov dword [ebp - 8], eax
jmp 0x410378
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x24], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 4], eax
movzx eax, byte [ebp - 0xc]
add eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x10]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 4], 0
jne 0x4103e1
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x14]
add edx, eax
mov dword [ebp - 8], edx
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x14]
je 0x410413
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 8]
jbe 0x410413
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 4]
jne 0x410402
movzx ecx, word [ebp - 0x14]
cmp dword [ebp - 0x10], ecx
jbe 0x410413
xor edx, edx
sub edx, dword [ebp - 0x10]
add edx, 0x15c3
and edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0xc], 0
jb 0x410438
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 4]
je 0x410438
push str.reij
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 4]
add edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
xor edx, 0x5b
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
movzx ecx, byte [ebp - 0x14]
add ecx, 0x47c
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 4]
and ecx, edx
mov byte [ebp - 0x10], cl
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 8]
sub eax, 0x4399
or eax, 0x49bf
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x34]
xor ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], ecx
movzx edx, byte [ebp - 8]
add edx, dword [ebp - 0xc]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
or eax, dword [ebp - 8]
movzx ecx, word [ebp - 8]
or eax, ecx
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x34]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x14]
and eax, 0
mov ecx, dword [ebp - 0x10]
and ecx, dword [ebp - 0x10]
or eax, ecx
mov dword [ebp - 8], eax
push 0
push 0
push 0
push 0
push 0x12c
push 4
push 1
push str.utgnkn
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x30]
xor edx, dword [ebp - 0x34]
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0xc], 0
jne 0x41053b
mov dword [ebp - 4], 0x5b6
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
movzx ecx, word [ebp - 8]
and eax, ecx
mov dword [ebp - 0xc], eax
movzx edx, word [ebp - 0x10]
and edx, dword [ebp - 0x10]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 8
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
lea eax, [edx + ecx + 0x2242]
mov dword [ebp - 0x14], eax
movzx ecx, byte [ebp - 0xc]
movzx edx, byte [ebp - 0x14]
add ecx, edx
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 8], ecx
cmp dword [ebp - 4], 0x5be
jb 0x4104ff
movzx eax, word [ebp - 8]
mov ecx, dword [ebp - 4]
sub ecx, eax
mov edx, dword [ebp - 0x14]
and edx, 0
or ecx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x24]
xor eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
movzx edx, byte [ebp - 0xc]
or edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x14]
or edx, eax
mov word [ebp - 0x10], dx
mov ecx, dword [ebp - 0xc]
add ecx, 0x291e
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
or ecx, edx
mov dword [ebp - 0x10], ecx
movzx eax, byte [ebp - 4]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
add ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 8], 0
jb 0x4105ca
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 4]
add eax, dword [ebp - 4]
or eax, dword [ebp - 4]
mov word [ebp - 0x14], ax
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
movzx edx, byte [ebp - 4]
add edx, 0x1b12
mov eax, dword [ebp - 8]
add eax, dword [ebp - 4]
or edx, eax
mov byte [ebp - 0x10], dl
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 8]
movzx edx, word [ebp - 8]
sub ecx, edx
add ecx, 0x325e
mov byte [ebp - 0xc], cl
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x48]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x14]
jne 0x41062c
movzx eax, byte [ebp - 8]
movzx ecx, byte [ebp - 0x14]
and eax, ecx
mov dword [ebp - 0x10], eax
movzx edx, byte [ebp - 8]
sub edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0xc]
sub eax, dword [ebp - 8]
and edx, eax
mov dword [ebp - 0x10], edx
movzx ecx, word [ebp - 0x14]
cmp dword [ebp - 0xc], ecx
ja 0x410641
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 8]
jne 0x410709
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x10]
jae 0x41065a
mov ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
and edx, dword [ebp - 0x10]
or ecx, edx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xcb
ja 0x410683
cmp dword [ebp - 0x20], 0xcb
je 0x4106ea
cmp dword [ebp - 0x20], 0x30
je 0x4106bc
cmp dword [ebp - 0x20], 0x8b
je 0x4106d5
jmp 0x410700
cmp dword [ebp - 0x20], 0x125
je 0x4106a8
cmp dword [ebp - 0x20], 0x145
je 0x410697
jmp 0x410700
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
jmp 0x410709
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x14]
imul eax, dword [ebp - 0xc], 0x1626
add edx, eax
mov byte [ebp - 8], dl
jmp 0x410709
movzx ecx, word [ebp - 4]
movzx edx, word [ebp - 0x10]
mov eax, dword [ebp - 4]
lea edx, [edx + eax - 0x4e1f]
or ecx, edx
mov dword [ebp - 0x14], ecx
jmp 0x410709
imul eax, dword [ebp - 0xc], 0xa72
mov ecx, dword [ebp - 8]
sub ecx, eax
add ecx, dword [ebp - 8]
mov word [ebp - 0x14], cx
jmp 0x410709
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 4]
movzx eax, word [ebp - 0x10]
add eax, 0x201f
or edx, eax
mov dword [ebp - 0xc], edx
jmp 0x410709
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
mov byte [ebp - 4], cl
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 0xc]
imul eax, dword [ebp - 0x10], 0x228d
or edx, eax
mov dword [ebp - 4], edx
movzx ecx, word [ebp - 4]
add ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x50]
mov eax, dword [edx]
xor eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x10]
je 0x41075f
cmp dword [ebp - 4], 0x17ab
jb 0x41075f
push str.hrsaogislterinha
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
or eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0xd8e5
mov dword [ebp - 0x18], ecx
imul edx, dword [ebp - 0xc], 0xa63
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0xc], 0x2122
ja 0x410793
cmp dword [ebp - 0x10], 0x1d87
jae 0x4107a1
push str.hanbodnlrnupweraesa
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x18]
add eax, 0xd8e9
mov dword [ebp - 0x18], eax
jmp 0x4102ed
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 0x10]
jne 0x4107c1
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x14]
ja 0x4107cd
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 4]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x8390
mov dword [0x75a434], ecx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx - 0xc63]
mov dword [ebp - 0x10], ecx
mov esp, ebp
pop ebp
ret