Function at 0x401040
Capabilities:
Create pipe
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf8
push esi
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 8]
jne 0x401067
push 0
push 0
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
add eax, dword [ebp - 4]
sub eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 4]
and ecx, 0
or eax, ecx
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x10]
and edx, dword [ebp - 4]
mov byte [ebp - 0x1c], dl
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 4]
jbe 0x40109c
push str.phuwo
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 4], eax
jmp 0x4010b5
xor ecx, ecx
sub ecx, dword [ebp - 0x18]
or ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 8]
sub edx, dword [ebp - 0x18]
and edx, 0
or ecx, edx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x5c], 0
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0xe
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0xc9
ja case.0x4010f7.1
mov eax, dword [ebp - 0x2c]
movzx ecx, byte [eax + 0x40366c]
jmp dword [ecx*4 + 0x403654]
mov dl, byte [ebp - 8]
mov byte [ebp - 4], dl
jmp 0x401181
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x14]
xor eax, ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 8]
or eax, edx
mov dword [ebp - 0x18], eax
jmp 0x401181
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0xc], eax
jmp 0x401181
movzx ecx, byte [ebp - 8]
imul ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
or ecx, edx
or ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
jmp 0x401181
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x18]
movzx ecx, word [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
and eax, ecx
or eax, dword [ebp - 0x14]
mov word [ebp - 0x10], ax
jmp 0x401181
movzx edx, word [ebp - 8]
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x10]
sub edx, eax
add edx, dword [ebp - 0x20]
movzx ecx, word [ebp - 0x18]
add edx, ecx
and edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
push str.fttuktexntnctw
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x54], 0
movzx edx, word [ebp - 8]
sub edx, 0x980
and edx, dword [ebp - 4]
and edx, dword [ebp - 0xc]
or edx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0x7665c0
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 8], eax
push str.nngifnlkstdeims
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 4], eax
imul eax, dword [ebp - 8], 0
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + 8]
mov dword [eax + edx + 0x60], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x1c]
sub edx, 0x959
sub edx, dword [ebp - 0x1c]
or edx, dword [ebp - 0x14]
mov dword [ebp - 0x20], edx
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp + 0xc]
mov dword [ecx + eax + 0x60], edx
mov dword [ebp - 0x20], 0xe8d
mov eax, 4
shl eax, 1
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp + 0x10]
mov dword [ecx + eax + 0x60], edx
movzx eax, word [ebp - 8]
mov ecx, dword [ebp - 0x18]
lea edx, [ecx + eax - 0x8cd]
movzx eax, word [ebp - 8]
or edx, eax
mov dword [ebp - 0x14], edx
mov ecx, 4
imul edx, ecx, 3
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + 0x14]
mov dword [eax + edx + 0x60], ecx
push 0
push 0
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x18], eax
movzx ecx, byte [ebp - 0xc]
cmp dword [ebp - 0x10], ecx
jbe 0x4012b0
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 8]
jne 0x4012bc
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc]
or eax, dword [ebp - 0xc]
mov byte [ebp - 0x10], al
call fcn.004044b0
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
add edx, dword [ebp - 0x14]
or ecx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x10]
and eax, dword [ebp - 0x20]
and eax, dword [ebp - 0x18]
or eax, 0x58d
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xc]
or eax, ecx
mov dword [ebp - 4], eax
push str.egnooon
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0xc]
sub edx, dword [ebp - 4]
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
or edx, dword [ebp - 0x18]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
and eax, dword [ebp - 0x10]
or eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
movzx edx, word [ebp - 0x18]
add ecx, edx
movzx edx, word [ebp - 4]
add ecx, edx
or eax, ecx
mov dword [ebp - 0xc], eax
push str.wtmphitaeeompatonge
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x10]
or eax, 0x62
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x1c], eax
push str.tfeirr
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x10], eax
movzx edx, word [ebp - 8]
mov ecx, dword [ebp - 0x14]
shl edx, cl
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x20]
and edx, eax
movzx ecx, byte [ebp - 8]
sub ecx, dword [ebp - 0x14]
and ecx, 0x12e
or edx, ecx
mov dword [ebp - 0x18], edx
movzx edx, byte [ebp - 0x18]
mov eax, dword [ebp - 0x18]
sub eax, edx
movzx ecx, word [ebp - 0x18]
add ecx, dword [ebp - 0x18]
xor eax, ecx
or eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 8]
add eax, 0x1521
or edx, eax
mov byte [ebp - 4], dl
movzx ecx, byte [ebp - 0x14]
xor edx, edx
sub edx, ecx
add edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x14]
add edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 8], eax
xor edx, edx
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
shr eax, cl
and eax, 0x725e36
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0xc]
jne 0x401430
cmp dword [ebp - 4], 0
jbe 0x401430
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x1c]
ja 0x40188b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 8]
add eax, ecx
movzx edx, word [ebp - 0x1c]
movzx ecx, word [ebp - 0x10]
sub edx, ecx
or eax, edx
mov dword [ebp - 4], eax
push str.eoetdcteeaeobe
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0xc], eax
push 0
push 0
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
and ecx, 0x9ff
or ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1c]
or ecx, edx
mov byte [ebp - 0x10], cl
mov eax, dword [ebp - 0x14]
add eax, 0x38b
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x1c]
and eax, ecx
and eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x10]
or edx, dword [ebp - 0xc]
xor eax, eax
sub eax, dword [ebp - 8]
add eax, dword [ebp - 0x10]
or edx, eax
mov dword [ebp - 4], edx
cmp dword [ebp - 0x18], 0
jae 0x4014c1
cmp dword [ebp - 0xc], 0
jae 0x4014ce
cmp dword [ebp - 0x14], 0x6fe
je 0x401674
movzx ecx, word [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
sub edx, ecx
sub edx, dword [ebp - 0x18]
and edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 0x20]
or edx, eax
mov byte [ebp - 0x14], dl
mov dword [ebp - 0x20], 0x253
movzx ecx, byte [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
movzx edx, byte [ebp - 0xc]
imul eax, dword [ebp - 0x14], 0x141
or edx, eax
mov dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x20]
add ecx, 0x14
mov dword [ebp - 0x20], ecx
movzx edx, word [ebp - 0x10]
and edx, 0
and edx, dword [ebp - 0x18]
and edx, dword [ebp - 8]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 8]
imul eax, dword [ebp - 4]
sub eax, dword [ebp - 8]
and eax, dword [ebp - 8]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
sub edx, 0x11
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0xfb
ja case.0x40155b.1
mov eax, dword [ebp - 0x38]
movzx ecx, byte [eax + 0x403750]
jmp dword [ecx*4 + 0x403738]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 4]
mov dword [ebp - 8], edx
jmp 0x4015d9
mov eax, dword [ebp - 0xc]
and eax, 0x57f
movzx ecx, word [ebp - 4]
sub ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
and eax, ecx
mov dword [ebp - 0x14], eax
jmp 0x4015d9
mov edx, dword [ebp - 4]
and edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x14]
or edx, eax
mov dword [ebp - 0x10], edx
jmp 0x4015d9
movzx ecx, word [ebp - 0xc]
add ecx, dword [ebp - 0x10]
movzx edx, word [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x10]
sub edx, eax
xor edx, dword [ebp - 0x1c]
or ecx, edx
mov dword [ebp - 8], ecx
jmp 0x4015d9
mov ecx, dword [ebp - 0x18]
and ecx, 0
mov byte [ebp - 8], cl
jmp 0x4015d9
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x1c]
add edx, dword [ebp - 8]
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
and edx, eax
and edx, 0
mov dword [ebp - 0x18], edx
movzx edx, word [ebp - 0x1c]
add edx, 0x8ea
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
shl edx, cl
or edx, 0xfffffd6e
mov dword [ebp - 8], edx
cmp dword [ebp - 0x20], 0x27b
jb 0x4014f9
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x10]
mov byte [ebp - 4], al
movzx ecx, byte [ebp - 4]
add ecx, dword [ebp - 0x18]
movzx edx, byte [ebp - 0x20]
and ecx, edx
or ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
and eax, dword [ebp - 0x10]
or ecx, eax
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 8]
and ecx, dword [ebp - 8]
or ecx, dword [ebp - 0x18]
or ecx, 0x534
or ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x20]
sub edx, eax
sub edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x10]
sub edx, dword [ebp - 4]
mov byte [ebp - 0x18], dl
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
or ecx, edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
add eax, dword [ebp - 0xc]
or ecx, eax
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
movzx edx, word [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
sub eax, edx
or ecx, eax
movzx edx, byte [ebp - 0x1c]
add edx, dword [ebp - 0x1c]
or ecx, edx
mov word [ebp - 0x10], cx
mov eax, 0x96e
sub eax, dword [ebp - 4]
movzx ecx, word [ebp - 0x10]
imul ecx, dword [ebp - 0x1c]
sub eax, ecx
add eax, 0x423
or eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
movzx edx, word [ebp - 0x18]
mov eax, dword [ebp - 0xc]
sub eax, 0x27d
sub eax, dword [ebp - 0xc]
and edx, eax
or edx, dword [ebp - 0x1c]
or edx, dword [ebp - 8]
mov dword [ebp - 4], edx
cmp dword [ebp - 8], 0x165
jbe 0x40181a
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
sub edx, ecx
add edx, dword [ebp - 8]
sub edx, dword [ebp - 0x18]
or edx, dword [ebp - 0x14]
mov word [ebp - 4], dx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x18]
or eax, dword [ebp - 4]
movzx ecx, byte [ebp - 0x20]
or eax, ecx
or eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
push str.lfavteohgnttihephdo
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x10]
and edx, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x10]
and eax, dword [ebp - 4]
or edx, eax
mov byte [ebp - 0x20], dl
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10]
movzx eax, byte [ebp - 0x18]
sub edx, eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x20]
shr edx, cl
movzx ecx, word [ebp - 4]
or edx, ecx
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
sub ecx, 0x49
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 0x8a
ja case.0x401785.1
mov edx, dword [ebp - 0x34]
movzx eax, byte [edx + 0x403860]
jmp dword [eax*4 + 0x40384c]
mov ecx, 0x715
sub ecx, dword [ebp - 0x20]
movzx edx, word [ebp - 0x10]
add edx, dword [ebp - 0xc]
and ecx, edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x18]
and ecx, eax
mov word [ebp - 0x1c], cx
jmp 0x40181a
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 8]
and ecx, 0
or ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x20]
mov dword [ebp - 4], ecx
jmp 0x40181a
movzx edx, byte [ebp - 4]
xor eax, eax
sub eax, edx
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
and ecx, 0x7fc
or eax, ecx
movzx edx, word [ebp - 4]
or eax, edx
mov dword [ebp - 0x1c], eax
jmp 0x40181a
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x20]
movzx ecx, word [ebp - 8]
sub eax, ecx
movzx edx, word [ebp - 0x10]
sub eax, edx
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 8]
add eax, ecx
or eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
jmp 0x40181a
mov edx, dword [ebp - 0x14]
and edx, 0
or edx, dword [ebp - 0xc]
or edx, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x20]
or edx, eax
mov dword [ebp - 0x18], edx
movzx ecx, word [ebp - 0x10]
mov edx, dword [ebp - 0x14]
sub edx, ecx
add edx, dword [ebp - 0x14]
and edx, 0x198
or edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
and eax, 0
or edx, eax
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 8]
lea eax, [edx + ecx - 0x38f]
mov dword [ebp - 4], eax
movzx ecx, word [ebp - 8]
mov edx, dword [ebp - 0x10]
sub edx, 0x22d
sub edx, dword [ebp - 0x10]
movzx eax, word [ebp - 0x1c]
sub edx, eax
and edx, dword [ebp - 8]
or ecx, edx
mov dword [ebp - 0xc], ecx
movzx ecx, word [ebp - 4]
movzx edx, word [ebp - 8]
sub edx, dword [ebp - 0x18]
imul eax, dword [ebp - 0xc], 0
add edx, eax
or ecx, edx
mov edx, dword [ebp - 8]
and edx, 0xafd
or ecx, edx
mov dword [ebp - 0x20], ecx
jmp 0x4018a4
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 8]
or eax, 0x11b
or eax, 0x26c
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x14]
and edx, dword [ebp - 0x14]
movzx eax, byte [ebp - 8]
add eax, dword [ebp - 0x20]
and edx, eax
movzx eax, word [ebp - 8]
mov ecx, dword [ebp - 0xc]
shl eax, cl
or edx, eax
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x20]
xor edx, edx
sub edx, ecx
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
je 0x401922
cmp dword [ebp - 0x44], 0x22
je 0x401909
cmp dword [ebp - 0x44], 0x75
je 0x4018e9
jmp 0x40193c
movzx ecx, byte [ebp - 0x10]
and ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
sub eax, edx
and eax, dword [ebp - 0x10]
or ecx, eax
mov dword [ebp - 0xc], ecx
jmp 0x401959
mov ecx, dword [ebp - 0x18]
or ecx, 0xfffff614
or ecx, dword [ebp - 4]
mov edx, 0xa9b
or ecx, edx
mov word [ebp - 0x1c], cx
jmp 0x401959
movzx eax, byte [ebp - 0x10]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x20]
or ecx, 0x250
mov dword [ebp - 8], ecx
jmp 0x401959
imul edx, dword [ebp - 0x18], 0
sub edx, dword [ebp - 8]
and edx, 0x7a2
mov eax, 0x3e0
sub eax, dword [ebp - 0x1c]
and edx, eax
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x80]
push ecx
push 0x4a
call dword [sym.imp.KERNEL32.dll_ClearCommError]
mov dword [ebp - 4], eax
push 0
push 0
push 3
push 0
push 1
push 0x40000000
push str.apeirbyrylreeysyyab
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x14], eax
movzx edx, byte [ebp - 8]
cmp dword [ebp - 0x18], edx
jb 0x401e87
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x18]
jne 0x401e87
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x10], eax
push 0
push 0
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x10], eax
mov ecx, 0x408
sub ecx, dword [ebp - 0x18]
movzx edx, word [ebp - 0x10]
add ecx, edx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
lea eax, [edx + eax + 0x133]
and ecx, eax
and ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x20], 0xbb6
mov ecx, dword [ebp - 0x1c]
add ecx, 0x441
sub ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0xc]
movzx edx, byte [ebp - 0x1c]
and ecx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 8]
or eax, 0x214
or eax, 0x801
mov byte [ebp - 0xc], al
mov ecx, dword [ebp - 0x20]
add ecx, 0x1c
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x2e0
and edx, dword [ebp - 0xc]
and edx, dword [ebp - 0xc]
or edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], edx
push str.hvafwlynawoalo
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 0xc], eax
movzx eax, byte [ebp - 0x18]
cmp dword [ebp - 4], eax
jne 0x401a8a
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 4]
jae 0x401a8a
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x18]
jae 0x401ac4
movzx eax, byte [ebp - 0xc]
and eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 8]
or eax, ecx
movzx edx, byte [ebp - 0x14]
sub edx, dword [ebp - 0xc]
or eax, edx
mov dword [ebp - 0x18], eax
xor eax, eax
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 0x18]
or ecx, 0x142
or ecx, dword [ebp - 4]
mov dword [ebp - 0x14], ecx
jmp 0x401adb
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x14]
add edx, eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x14]
or edx, ecx
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 8]
or edx, 0x4fb
mov dword [ebp - 4], edx
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x14], eax
movzx edx, word [ebp - 0x18]
movzx eax, word [ebp - 0xc]
imul eax, dword [ebp - 0x18]
add edx, eax
sub edx, dword [ebp - 4]
and edx, dword [ebp - 0x18]
mov dword [ebp - 8], edx
movzx ecx, byte [ebp - 8]
sub ecx, dword [ebp - 0x18]
add ecx, 0x647
sub ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
lea ecx, [eax + edx + 0xf6]
movzx edx, byte [ebp - 8]
sub edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
or ecx, edx
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x20], 0xbee
jb 0x401a29
xor eax, eax
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
push str.tnordtdmae
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 4], eax
movzx ecx, word [ebp - 0x1c]
movzx edx, word [ebp - 4]
sub ecx, edx
add ecx, 0x99
or ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
movzx eax, word [ebp - 0xc]
add eax, dword [ebp - 0x14]
or eax, 0x461
or eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
movzx ecx, byte [ebp - 8]
imul ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
or ecx, edx
movzx eax, byte [ebp - 0x10]
or ecx, eax
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
movzx edx, word [ebp - 0x14]
add ecx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 4]
je 0x401c83
movzx ecx, word [ebp - 4]
mov edx, dword [ebp - 4]
add edx, dword [ebp - 8]
sub edx, dword [ebp - 0x18]
or ecx, edx
or ecx, dword [ebp - 4]
or ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0x20]
or eax, 0x864
mov ecx, dword [ebp - 8]
add ecx, 0x7d0
and ecx, 0
or eax, ecx
mov dword [ebp - 0x18], eax
push 0
push 0
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x10], eax
mov ecx, 0x2e8
sub ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x14]
or ecx, 0xf90
or ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x20]
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax - 0x49a]
movzx ecx, byte [ebp - 0x18]
and eax, ecx
or edx, eax
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
add ecx, 0x194
sub ecx, dword [ebp - 0x14]
shl edx, cl
mov eax, 0xab0
sub eax, dword [ebp - 0xc]
or edx, eax
mov dword [ebp - 0x18], edx
lea ecx, [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x18], eax
jmp 0x401c9a
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
and eax, ecx
or eax, dword [ebp - 0x20]
mov byte [ebp - 0x10], al
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0x938
xor eax, eax
sub eax, dword [ebp - 4]
movzx ecx, word [ebp - 0x10]
add eax, ecx
or eax, dword [ebp - 0x10]
mov byte [ebp - 0xc], al
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
lea ecx, [eax + edx - 0x6ac]
or ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x12
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x14]
or eax, dword [ebp - 0x20]
movzx ecx, byte [ebp - 8]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
and ecx, edx
or eax, ecx
mov word [ebp - 0x10], ax
cmp dword [ebp - 0x14], 0x7ee
ja 0x401d41
movzx eax, word [ebp - 0xc]
or eax, dword [ebp - 0x14]
movzx ecx, byte [ebp - 0x20]
mov edx, dword [ebp - 0x10]
sub edx, ecx
add edx, dword [ebp - 0x1c]
or eax, edx
mov dword [ebp - 8], eax
push 0
push 0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
movzx eax, byte [ebp - 4]
imul ecx, dword [ebp - 0x20], 0
add eax, dword [ebp - 0x20]
lea edx, [ecx + eax - 0x436]
movzx eax, byte [ebp - 4]
sub edx, eax
mov dword [ebp - 0x1c], edx
movzx ecx, byte [ebp - 4]
cmp dword [ebp - 0x10], ecx
je 0x401da1
cmp dword [ebp - 0xc], 0
jb 0x401da1
push str.igyncii
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x10], eax
push str.twttutcoghydeeochshk
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 8], eax
movzx edx, word [ebp - 0x10]
add edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x14]
imul eax, dword [ebp - 0x10]
add edx, eax
movzx ecx, byte [ebp - 0x10]
and edx, ecx
mov dword [ebp - 8], edx
imul edx, dword [ebp - 4], 0
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x1c]
and eax, dword [ebp - 0x10]
or edx, eax
mov dword [ebp - 8], edx
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
mov byte [ebp - 4], cl
cmp dword [ebp - 0x1c], 0x558
jbe 0x401dd8
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x20]
ja 0x401dd8
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x10]
jbe 0x401e1a
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x1c], eax
imul edx, dword [ebp - 0x14], 0
add edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x10]
movzx eax, word [ebp - 0xc]
and edx, eax
and edx, dword [ebp - 4]
mov dword [ebp - 0x20], edx
lea ecx, [ebp - 4]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0xc], eax
jmp 0x401e3a
mov eax, dword [ebp - 0x1c]
sub eax, 0x91b
movzx ecx, byte [ebp - 4]
movzx edx, byte [ebp - 4]
lea ecx, [ecx + edx + 0xa63]
or eax, ecx
or eax, dword [ebp - 0x10]
mov word [ebp - 0x14], ax
push str.nadsoif
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x18], 0x95c
jb 0x401ccb
mov edx, dword [ebp - 0x10]
add edx, 0x851
movzx eax, word [ebp - 4]
sub edx, eax
or edx, dword [ebp - 0x14]
mov dword [ebp - 0x20], edx
movzx ecx, word [ebp - 0x1c]
or ecx, dword [ebp - 0xc]
movzx edx, byte [ebp - 0x18]
add edx, dword [ebp - 4]
or ecx, edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x1c]
or ecx, eax
mov dword [ebp - 8], ecx
jmp 0x401e9b
mov ecx, 0x423
sub ecx, dword [ebp - 0xc]
movzx edx, word [ebp - 0x14]
add edx, dword [ebp - 0x18]
or ecx, edx
mov dword [ebp - 0x1c], ecx
movzx eax, word [ebp - 4]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0xc]
jne 0x401eba
movzx edx, word [ebp - 0x10]
cmp dword [ebp - 8], edx
jae 0x4027d5
cmp dword [ebp - 0x18], 0
jb 0x4020bc
push str.rokreadnhglrhslltiyn
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
movzx ecx, byte [ebp - 0xc]
add ecx, dword [ebp - 0x1c]
or eax, ecx
or eax, 2
or eax, dword [ebp - 0x20]
mov dword [ebp - 4], eax
lea edx, [ebp - 4]
push edx
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xa8f
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ecx
xor edx, edx
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
and eax, 0
or edx, eax
or edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0x10]
add ecx, 0x13
mov dword [ebp - 0x10], ecx
movzx edx, word [ebp - 0x14]
sub edx, dword [ebp - 0x18]
sub edx, 0x955
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 8]
sub edx, eax
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], edx
movzx ecx, byte [ebp - 0x18]
movzx edx, word [ebp - 0x20]
add ecx, dword [ebp - 0x20]
lea eax, [edx + ecx - 0xd40]
mov word [ebp - 0xc], ax
push str.fueiasaouaossk
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x10], 0xac8
jb 0x401f14
movzx edx, byte [ebp - 0x18]
mov eax, 0xb60
sub eax, edx
movzx ecx, word [ebp - 0x1c]
imul ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
sub edx, ecx
add edx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x20]
mov ecx, edx
shr esi, cl
and eax, esi
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x14]
or eax, 0x230
xor ecx, ecx
sub ecx, dword [ebp - 0x1c]
sub ecx, 0x963
and ecx, dword [ebp - 0x10]
or eax, ecx
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0xb48
movzx edx, word [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
sub eax, edx
movzx ecx, byte [ebp - 0x10]
add ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x1c]
or eax, ecx
mov byte [ebp - 0x18], al
mov edx, dword [ebp - 0x18]
or edx, dword [ebp - 0x18]
mov byte [ebp - 4], dl
mov eax, dword [ebp - 0xc]
add eax, 3
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 8]
lea eax, [edx + ecx - 0x267]
sub eax, dword [ebp - 0x18]
and eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 0x27
je 0x402056
cmp dword [ebp - 0x4c], 0x87
je 0x40203b
cmp dword [ebp - 0x4c], 0xb4
je 0x40206c
jmp 0x402079
movzx edx, word [ebp - 0x14]
add edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x20]
movzx eax, word [ebp - 0x1c]
add edx, eax
and edx, dword [ebp - 8]
or edx, dword [ebp - 0x14]
mov dword [ebp - 4], edx
jmp 0x40208c
xor ecx, ecx
sub ecx, dword [ebp - 0x10]
and ecx, 0xc7
or ecx, dword [ebp - 0x18]
or ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
jmp 0x40208c
xor edx, edx
sub edx, dword [ebp - 8]
and edx, dword [ebp - 8]
mov dword [ebp - 0x1c], edx
jmp 0x40208c
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x18]
sub eax, 0xac0
or eax, 0x7d4
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x18]
movzx edx, byte [ebp - 0x10]
imul edx, dword [ebp - 0x10]
or ecx, edx
mov dword [ebp - 4], ecx
push str.crsiefo
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 4], eax
cmp dword [ebp - 0xc], 0xb51
jb 0x401ff3
jmp 0x4020cb
movzx eax, word [ebp - 8]
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
and eax, ecx
mov dword [ebp - 0x18], eax
movzx edx, byte [ebp - 8]
sub edx, 0x37b
sub edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
push str.uoerehork
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x20]
and eax, ecx
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x18]
jae 0x402244
movzx eax, word [ebp - 0x10]
add eax, dword [ebp - 0xc]
and eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x20]
or eax, dword [ebp - 0x20]
mov byte [ebp - 0x18], al
movzx ecx, byte [ebp - 0x1c]
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 4]
movzx eax, byte [ebp - 0x20]
sub edx, eax
or ecx, edx
movzx edx, word [ebp - 0x10]
imul edx, dword [ebp - 4]
or ecx, edx
mov dword [ebp - 0x18], ecx
push str.dnrtyufwsunsidi
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 0x10], eax
push str.jsooeoso
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0x9ab
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
add eax, dword [ebp - 0x18]
and eax, 0
or eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
movzx ecx, word [ebp - 8]
or ecx, dword [ebp - 0x18]
or ecx, 0x22a
or ecx, 0xaa9
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
movzx eax, word [ebp - 0xc]
sub eax, dword [ebp - 0x18]
and eax, 0
mov ecx, dword [ebp - 4]
add ecx, 0x753
sub ecx, dword [ebp - 4]
or eax, ecx
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 8]
and edx, 0
mov eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x20]
or edx, eax
movzx ecx, word [ebp - 8]
or edx, ecx
mov dword [ebp - 0x14], edx
movzx edx, byte [ebp - 8]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx + 0x95f]
and ecx, dword [ebp - 8]
movzx edx, byte [ebp - 4]
movzx eax, byte [ebp - 0x20]
add edx, eax
or ecx, edx
mov dword [ebp - 0x14], ecx
movzx ecx, word [ebp - 0x18]
sub ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
lea eax, [ecx + edx + 0xafe]
and eax, dword [ebp - 8]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x10], 0x9ac
jb 0x402179
movzx ecx, byte [ebp - 0x20]
movzx edx, byte [ebp - 8]
movzx eax, word [ebp - 0x20]
add eax, dword [ebp - 8]
and edx, eax
or ecx, edx
movzx edx, byte [ebp - 0x1c]
and edx, dword [ebp - 0x14]
or ecx, edx
mov dword [ebp - 0x18], ecx
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x10], eax
push str.oaywhkiahwlnu
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x1c], eax
movzx edx, byte [ebp - 0x20]
cmp dword [ebp - 0x10], edx
jne 0x402265
cmp dword [ebp - 0x10], 0
je 0x40230e
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x18]
movzx ecx, byte [ebp - 4]
shl edx, cl
movzx eax, byte [ebp - 0xc]
imul eax, dword [ebp - 0x1c]
and eax, 0
or edx, eax
mov dword [ebp - 0x10], edx
movzx ecx, byte [ebp - 0x10]
add ecx, 0x12ee
or ecx, 0x50f
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc]
movzx eax, word [ebp - 4]
add edx, eax
and edx, dword [ebp - 8]
or edx, dword [ebp - 8]
mov dword [ebp - 0x20], edx
movzx ecx, word [ebp - 4]
add ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
lea eax, [ecx + edx + 0x921]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 4]
lea eax, [ecx + eax + 0x663]
movzx ecx, byte [ebp - 0xc]
add eax, ecx
and edx, eax
mov dword [ebp - 8], edx
movzx edx, word [ebp - 0x20]
cmp dword [ebp - 8], edx
jne 0x402408
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 8]
jb 0x402408
movzx ecx, word [ebp - 0x20]
cmp dword [ebp - 8], ecx
je 0x402408
push str.badsetelbeeiseinneeb
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 8]
add edx, 0x27a
and edx, 0x591
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 4]
and edx, eax
mov dword [ebp - 0x20], edx
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0x64]
push edx
push 0x4a
call dword [sym.imp.KERNEL32.dll_ClearCommError]
mov dword [ebp - 0x1c], eax
push 0
push 0
push 3
push 0
push 1
push 0x100000
push str.chftbsolnn
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x84d
sub eax, dword [ebp - 0xc]
movzx ecx, byte [ebp - 0x14]
lea edx, [eax + ecx - 0xab9]
or edx, dword [ebp - 8]
mov word [ebp - 0x20], dx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 4]
add ecx, 0xa13
sub ecx, dword [ebp - 4]
or eax, ecx
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x14], eax
push 0
push 0
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x14], eax
jmp 0x402424
movzx edx, word [ebp - 0x14]
mov eax, dword [ebp - 8]
sub eax, 0x47a
or edx, eax
mov ecx, dword [ebp - 8]
and ecx, 0x34b
or edx, ecx
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x20], 0x23d
jae 0x4025d8
mov edx, dword [ebp - 8]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov dword [ebp - 8], 0xb9f
movzx eax, word [ebp - 0xc]
imul ecx, eax, 0xb60
movzx edx, word [ebp - 0x18]
sub ecx, edx
imul eax, dword [ebp - 0x1c], 0x361
add ecx, eax
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x20]
shr edx, cl
movzx eax, byte [ebp - 0x18]
imul ecx, eax, 0
movzx eax, byte [ebp - 0x18]
imul eax, dword [ebp - 0x14]
add ecx, eax
or edx, ecx
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 8]
add ecx, 0x15
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 0x14]
movzx ecx, byte [ebp - 0xc]
mov eax, dword [ebp - 0xc]
shl eax, cl
or edx, eax
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x40]
sub edx, 0x39
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xbf
ja case.0x4024bb.1
mov eax, dword [ebp - 0x40]
movzx ecx, byte [eax + 0x403900]
jmp dword [ecx*4 + 0x4038ec]
mov edx, dword [ebp - 0x20]
or edx, dword [ebp - 0x1c]
movzx eax, word [ebp - 0x1c]
imul eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x14]
or edx, eax
mov dword [ebp - 0x18], edx
jmp 0x40252f
xor ecx, ecx
sub ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], ecx
jmp 0x40252f
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
lea ecx, [eax + edx - 0xae5]
mov edx, dword [ebp - 0x20]
and edx, 0x82d
and edx, 0x554
or ecx, edx
mov dword [ebp - 0x18], ecx
jmp 0x40252f
movzx eax, word [ebp - 0x1c]
mov dword [ebp - 0xc], eax
jmp 0x40252f
imul ecx, dword [ebp - 0x14], 0x63b
add ecx, dword [ebp - 0x18]
or ecx, 0x140
movzx edx, byte [ebp - 4]
or ecx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x10]
or eax, 0xfffffd6e
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 8], 0xbc9
jb 0x40245d
mov edx, dword [ebp - 4]
or edx, dword [ebp - 0x18]
movzx eax, word [ebp - 0x18]
add eax, dword [ebp - 0x20]
or edx, eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 8]
or edx, ecx
mov byte [ebp - 0x1c], dl
xor edx, edx
sub edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0xc]
or edx, dword [ebp - 0x1c]
mov byte [ebp - 8], dl
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
add ecx, dword [ebp - 0x20]
and ecx, 0x53f
imul edx, dword [ebp - 4], 0
or ecx, edx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x20]
and eax, dword [ebp - 0x18]
or eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0xd4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x30
call dword [sym.imp.KERNEL32.dll_ClearCommError]
mov dword [ebp - 0xc], eax
push 0
push 0
push 3
push 0
push 3
push 0x40000000
push str.mashdy
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x20], eax
movzx eax, word [ebp - 4]
movzx ecx, byte [ebp - 0x10]
add ecx, dword [ebp - 0x1c]
and eax, ecx
and eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x14]
movzx ecx, word [ebp - 0xc]
sub edx, ecx
or eax, edx
mov dword [ebp - 0x20], eax
movzx edx, byte [ebp - 0x18]
sub edx, dword [ebp - 0x14]
and edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc]
or edx, eax
mov byte [ebp - 0x20], dl
movzx ecx, word [ebp - 0x20]
mov edx, dword [ebp - 0x14]
sub edx, ecx
add edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
mov ecx, edx
shr eax, cl
movzx ecx, byte [ebp - 0x14]
and eax, ecx
or eax, dword [ebp - 0x14]
mov dword [ebp - 8], eax
cmp dword [ebp - 4], 0
ja 0x4026f8
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 4]
movzx eax, byte [ebp - 0x20]
add eax, dword [ebp - 0xc]
and edx, eax
movzx eax, word [ebp - 8]
add eax, dword [ebp - 0x20]
movzx ecx, byte [ebp - 0x1c]
shr eax, cl
or edx, eax
mov dword [ebp - 0x10], edx
movzx ecx, byte [ebp - 0x20]
imul edx, dword [ebp - 8], 0x300
add ecx, edx
movzx eax, byte [ebp - 0x18]
movzx edx, word [ebp - 8]
add eax, edx
and eax, dword [ebp - 0x20]
or ecx, eax
mov dword [ebp - 0x14], ecx
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
movzx eax, word [ebp - 4]
add edx, eax
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0xc]
or edx, ecx
movzx eax, word [ebp - 0xc]
mov ecx, 0xb2e
sub ecx, eax
or edx, ecx
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x20]
or edx, 0x87e
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, 0x3b9
movzx ecx, word [ebp - 0xc]
movzx edx, word [ebp - 0x14]
add ecx, dword [ebp - 0x1c]
add edx, ecx
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 4]
add edx, ecx
or eax, edx
mov dword [ebp - 8], eax
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x46
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 0x9b
ja case.0x40271e.1
mov edx, dword [ebp - 0x3c]
movzx eax, byte [edx + 0x4039d8]
jmp dword [eax*4 + 0x4039c0]
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
and ecx, 0
and ecx, dword [ebp - 4]
movzx edx, word [ebp - 0xc]
imul edx, dword [ebp - 0x14]
or ecx, edx
or ecx, 0x1a8
mov dword [ebp - 0x1c], ecx
jmp 0x4027c1
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
shr eax, cl
movzx ecx, byte [ebp - 4]
or eax, ecx
movzx edx, word [ebp - 0x10]
or eax, edx
mov dword [ebp - 0x14], eax
jmp 0x4027c1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
lea ecx, [edx + ecx + 0x446]
add ecx, dword [ebp - 4]
and eax, ecx
mov dword [ebp - 0x10], eax
jmp 0x4027c1
movzx edx, word [ebp - 8]
sub edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0x18]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x1c]
and eax, 0
or edx, eax
mov dword [ebp - 0x20], edx
jmp 0x4027c1
mov ecx, dword [ebp - 4]
add ecx, 0x13d
shl ecx, 0xd5
mov dword [ebp - 0xc], ecx
jmp 0x4027c1
movzx edx, byte [ebp - 0x14]
xor eax, eax
sub eax, edx
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x1c]
or eax, ecx
or eax, dword [ebp - 4]
mov dword [ebp - 8], eax
movzx edx, byte [ebp - 0x18]
mov eax, dword [ebp - 0x20]
sub eax, edx
sub eax, dword [ebp - 0x18]
or eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
jmp 0x4027dc
mov dword [ebp - 8], 0x69d
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x1c], 0x69d
jne 0x402ad6
push str.nehruguratueioersc
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0x16
call dword [sym.imp.KERNEL32.dll_ClearCommError]
mov dword [ebp - 8], eax
push 0
push 0
push 3
push 0
push 1
push 0x40000000
push str.owreirtoece
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x18]
add edx, 0xb8c
sub edx, dword [ebp - 0x20]
add edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
and edx, eax
mov byte [ebp - 0x1c], dl
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 4]
shr edx, cl
and edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x1e
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x10]
and ecx, dword [ebp - 0x18]
or eax, ecx
mov dword [ebp - 4], eax
push 0
push 0
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0x7c]
push edx
push 0x13
call dword [sym.imp.KERNEL32.dll_ClearCommError]
mov dword [ebp - 0x1c], eax
push 0
push 0
push 3
push 0
push 1
push 0x100000
push str.mrrkmiiovltri
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x14], eax
push str.cbwswscheflaasay
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 4
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0x84
ja case.0x402901.1
mov edx, dword [ebp - 0x28]
movzx eax, byte [edx + 0x403a88]
jmp dword [eax*4 + 0x403a74]
movzx ecx, word [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x18]
and ecx, 0x4d2
xor ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
jmp 0x402980
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 4], edx
jmp 0x402980
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 4]
lea edx, [eax + ecx + 0x3ed]
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x14]
or edx, eax
mov dword [ebp - 0xc], edx
jmp 0x402980
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x14]
movzx edx, byte [ebp - 8]
add ecx, edx
or ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
jmp 0x402980
movzx eax, byte [ebp - 8]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
add ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 8]
sub edx, 0x415
and ecx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x1c]
jbe 0x402994
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 4]
jae 0x402a51
movzx edx, word [ebp - 4]
add edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
mov word [ebp - 0x18], dx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x60]
push edx
push 4
call dword [sym.imp.KERNEL32.dll_ClearCommError]
mov dword [ebp - 0x10], eax
push 0
push 0
push 3
push 0
push 1
push 1
push str.secmhbieiosdoengyhya
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x10], eax
movzx eax, byte [ebp - 8]
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + eax - 0xcd]
and edx, dword [ebp - 0x1c]
and edx, 0x700
or edx, dword [ebp - 0x10]
or edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x18]
or eax, 0x417
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
or eax, ecx
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 8]
and edx, 0
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 4]
add eax, 0x17f
or eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x45f
mov edx, dword [ebp - 0x10]
shr edx, cl
or eax, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
add eax, 0xc35
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
and ecx, 0x7da
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x1c]
add edx, dword [ebp - 8]
and ecx, edx
or ecx, dword [ebp - 0xc]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0xc]
or eax, 0xa87
movzx ecx, word [ebp - 0x10]
imul ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
sub edx, ecx
or eax, edx
or eax, dword [ebp - 4]
movzx ecx, byte [ebp - 0x20]
or eax, ecx
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x18]
add edx, 0x85c
sub edx, dword [ebp - 4]
and edx, dword [ebp - 0x18]
movzx eax, byte [ebp - 8]
and eax, dword [ebp - 8]
or edx, eax
or edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x18]
movzx edx, word [ebp - 0x14]
sub ecx, edx
or ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 4]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
cmp dword [ebp - 0x20], 0
jne 0x403048
movzx ecx, byte [ebp - 4]
movzx edx, word [ebp - 4]
movzx eax, word [ebp - 0x18]
imul edx, eax
add ecx, edx
movzx edx, word [ebp - 0x1c]
imul edx, dword [ebp - 8]
movzx eax, byte [ebp - 0x10]
sub edx, eax
and ecx, edx
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x18]
imul ecx, dword [ebp - 4], 0x288
movzx edx, byte [ebp - 0x18]
add ecx, edx
or eax, ecx
mov word [ebp - 0x20], ax
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 4]
ja 0x402b54
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x20]
jne 0x402c18
movzx edx, byte [ebp - 0x18]
mov eax, dword [ebp - 0x14]
sub eax, edx
imul ecx, dword [ebp - 0x20], 0
lea edx, [eax + ecx + 0x349]
movzx eax, word [ebp - 8]
sub edx, eax
or edx, 0x876
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
sub eax, edx
or ecx, eax
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2d5
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x1c]
and ecx, edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
xor ecx, eax
mov byte [ebp - 0x18], cl
movzx ecx, word [ebp - 0xc]
sub ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
imul ecx, dword [ebp - 8], 0
add ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x18]
shl edx, cl
movzx eax, word [ebp - 0x20]
or edx, eax
movzx ecx, byte [ebp - 8]
or edx, ecx
or edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
movzx edx, byte [ebp - 0x10]
movzx eax, word [ebp - 0x14]
imul eax, dword [ebp - 0x10]
and eax, 0x7dd
or edx, eax
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 4]
movzx edx, byte [ebp - 0x14]
sub ecx, edx
movzx eax, word [ebp - 0x1c]
add ecx, eax
mov edx, dword [ebp - 0x18]
shr edx, cl
xor eax, eax
mov ecx, dword [ebp - 0xc]
shl eax, cl
and edx, eax
mov dword [ebp - 8], edx
jmp 0x402c3a
movzx ecx, byte [ebp - 0x18]
xor edx, edx
sub edx, ecx
or edx, dword [ebp - 0x14]
movzx eax, byte [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
sub ecx, 0xb47
sub ecx, dword [ebp - 0x10]
or edx, ecx
mov dword [ebp - 0xc], edx
push str.etokfyogwdnth
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0xc], eax
imul edx, dword [ebp - 8], 0
imul edx, dword [ebp - 0x10]
add edx, dword [ebp - 0xc]
or edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x18]
jae 0x402eb2
xor ecx, ecx
sub ecx, dword [ebp - 4]
or ecx, 0x5ad
or ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
lea edx, [ebp - 8]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 8], eax
mov dword [ebp - 0x20], 0xa4a
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x10]
and ecx, dword [ebp - 0x1c]
or ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0xc]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x1c]
and edx, eax
and edx, 0x7c8
mov dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x20]
add ecx, 0x17
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
sub eax, edx
or eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 8]
xor edx, edx
sub edx, ecx
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0x14]
add edx, eax
movzx ecx, byte [ebp - 0x1c]
and edx, ecx
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 0x66b]
or edx, eax
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x18]
movzx edx, byte [ebp - 0x1c]
sub ecx, edx
or ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x20], 0xa78
jb 0x402ca3
mov dword [ebp - 8], 0x169
mov eax, dword [ebp - 0x18]
sub eax, 0xac8
mov dword [ebp - 0x10], eax
movzx ecx, byte [ebp - 0xc]
imul edx, ecx, 0x684
add edx, 0x2d6
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
add eax, 0x17
mov dword [ebp - 8], eax
imul ecx, dword [ebp - 0x18], 0
imul ecx, dword [ebp - 0x14]
and ecx, 0
or ecx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xc], 0x28e
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x20]
or edx, eax
mov dword [ebp - 0x14], edx
movzx ecx, byte [ebp - 0x20]
add ecx, dword [ebp - 4]
movzx edx, word [ebp - 4]
and edx, 0
or ecx, edx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0xc]
add eax, 0x15
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x42f
and ecx, dword [ebp - 0x10]
imul edx, dword [ebp - 4], 0x98b
or ecx, edx
mov dword [ebp - 0x14], ecx
movzx eax, byte [ebp - 4]
movzx ecx, word [ebp - 0x14]
add eax, ecx
sub eax, dword [ebp - 0x14]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0xc], 0x2cd
jb 0x402d8e
movzx edx, byte [ebp - 4]
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
sub ecx, 0xa00
and eax, ecx
or edx, eax
mov byte [ebp - 0x1c], dl
mov edx, dword [ebp - 4]
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0x1d
je 0x402e2e
cmp dword [ebp - 0x48], 0x5b
je 0x402e3c
cmp dword [ebp - 0x48], 0x79
je 0x402e15
jmp 0x402e47
movzx eax, byte [ebp - 0x1c]
imul ecx, eax, 0
or ecx, dword [ebp - 0x1c]
movzx edx, word [ebp - 0x14]
imul edx, dword [ebp - 0x10]
or ecx, edx
mov dword [ebp - 0x18], ecx
jmp 0x402e5f
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x20]
or eax, dword [ebp - 4]
mov dword [ebp - 0x1c], eax
jmp 0x402e5f
xor ecx, ecx
sub ecx, dword [ebp - 0x18]
mov word [ebp - 0x1c], cx
jmp 0x402e5f
movzx edx, byte [ebp - 0x14]
xor eax, eax
sub eax, edx
movzx ecx, word [ebp - 0x1c]
mov edx, 0x95c
sub edx, ecx
and eax, edx
mov dword [ebp - 4], eax
cmp dword [ebp - 8], 0x180
jb 0x402d44
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 8]
lea ecx, [ecx + edx - 0x47c]
or eax, ecx
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x1c]
movzx ecx, byte [ebp - 8]
add eax, ecx
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
lea edx, [eax + edx + 0xee8]
sub edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
shr edx, cl
mov dword [ebp - 8], edx
push str.aatadear
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x1c], eax
movzx eax, byte [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
lea edx, [eax + ecx - 0x111]
sub edx, dword [ebp - 0x14]
and edx, 0x39b
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
movzx ecx, word [ebp - 0xc]
imul ecx, dword [ebp - 0x1c]
add eax, ecx
and eax, dword [ebp - 0x20]
or eax, dword [ebp - 0x1c]
or eax, dword [ebp - 0x10]
mov byte [ebp - 0x18], al
cmp dword [ebp - 0x10], 0x853
je 0x402fe4
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x18]
imul eax, dword [ebp - 4], 0
sub edx, eax
add edx, dword [ebp - 0x1c]
movzx ecx, byte [ebp - 8]
add edx, ecx
and edx, 0x5d1
mov dword [ebp - 0xc], edx
movzx edx, word [ebp - 4]
sub edx, dword [ebp - 0x10]
movzx eax, word [ebp - 0x18]
and edx, eax
movzx ecx, byte [ebp - 4]
add ecx, dword [ebp - 4]
and edx, ecx
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x10]
and edx, 0x409
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x14]
movzx ecx, byte [ebp - 0x20]
movzx esi, word [ebp - 0x18]
add ecx, esi
shr eax, cl
and eax, dword [ebp - 0xc]
or edx, eax
mov dword [ebp - 8], edx
lea ecx, [ebp - 0xb0]
push ecx
lea edx, [ebp - 0x68]
push edx
push 0x5c
call dword [sym.imp.KERNEL32.dll_ClearCommError]
mov dword [ebp - 0x18], eax
push 0
push 0
push 3
push 0
push 2
push 1
push str.uslrly
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xc], eax
movzx eax, word [ebp - 0xc]
xor ecx, ecx
sub ecx, eax
or ecx, 0x2a4
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x14]
xor eax, eax
sub eax, dword [ebp - 0xc]
and edx, eax
or ecx, edx
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
or eax, 0x782
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0x70]
push edx
push 0x49
call dword [sym.imp.KERNEL32.dll_ClearCommError]
mov dword [ebp - 8], eax
push 0
push 0
push 3
push 0
push 1
push 0x100000
push str.oauhnrtgopdhms
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 4], eax
push str.ddgnwtwefsioscroe
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax - 0xb55]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
cmp dword [ebp - 4], 0xafb
jb 0x40305d
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x18]
jae 0x4035b1
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x26
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x78
ja case.0x403080.1
mov eax, dword [ebp - 0x30]
movzx ecx, byte [eax + 0x403b28]
jmp dword [ecx*4 + 0x403b10]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
jmp 0x40311a
mov eax, dword [ebp - 0x18]
xor eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x20]
and ecx, dword [ebp - 0x18]
or eax, ecx
mov dword [ebp - 0xc], eax
jmp 0x40311a
mov edx, dword [ebp - 4]
add edx, 0x8d4
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 8]
or edx, eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x14]
or edx, ecx
mov dword [ebp - 0x1c], edx
jmp 0x40311a
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x1c]
add edx, dword [ebp - 4]
imul eax, dword [ebp - 4], 0x564
add edx, eax
movzx ecx, byte [ebp - 0x20]
and edx, ecx
mov dword [ebp - 0xc], edx
jmp 0x40311a
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 8]
movzx eax, byte [ebp - 8]
add edx, eax
mov dword [ebp - 0x1c], edx
jmp 0x40311a
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x10]
imul edx, dword [ebp - 4], 0
or ecx, edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x10]
or ecx, eax
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x18]
mov edx, 0x300
sub edx, ecx
add edx, dword [ebp - 0xc]
and edx, dword [ebp - 0x14]
movzx eax, byte [ebp - 0x20]
mov ecx, dword [ebp - 8]
shl eax, cl
or edx, eax
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x18]
je 0x403294
movzx edx, byte [ebp - 0x14]
cmp dword [ebp - 0x18], edx
ja 0x403294
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x17
je 0x40318e
cmp dword [ebp - 0x50], 0x77
je 0x4031b3
cmp dword [ebp - 0x50], 0xb1
je 0x403172
jmp 0x4031d1
mov ecx, dword [ebp - 0xc]
add ecx, 0xf3
or ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x10]
or ecx, edx
mov dword [ebp - 0x18], ecx
jmp 0x4031ee
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc]
movzx ecx, word [ebp - 4]
add ecx, dword [ebp - 0x10]
mov edx, 0x950
sar edx, cl
or eax, edx
mov ecx, 0x34a
sub ecx, dword [ebp - 0x10]
or eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x4031ee
movzx edx, word [ebp - 0xc]
sub edx, dword [ebp - 0x10]
add edx, 0xa2c
and edx, 0xfffff751
and edx, dword [ebp - 0x18]
or edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
jmp 0x4031ee
movzx eax, byte [ebp - 4]
mov ecx, dword [ebp - 4]
sub ecx, eax
add ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 8]
or ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x18]
or ecx, edx
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 8]
or eax, ecx
mov edx, dword [ebp - 0x14]
and edx, dword [ebp - 0x18]
or eax, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 8]
or eax, ecx
mov dword [ebp - 0x10], eax
push 0
push 0
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x78]
push ecx
push 0x14
call dword [sym.imp.KERNEL32.dll_ClearCommError]
mov dword [ebp - 4], eax
push 0
push 0
push 3
push 0
push 1
push 0x100000
push str.racndunhao
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x18], eax
movzx edx, byte [ebp - 0x10]
imul edx, dword [ebp - 0x10]
movzx eax, word [ebp - 8]
mov ecx, dword [ebp - 8]
sub ecx, eax
and edx, ecx
movzx eax, byte [ebp - 4]
and eax, dword [ebp - 0x18]
or edx, eax
mov dword [ebp - 0x14], edx
push 0
push 0
lea ecx, [ebp - 0xc]
push ecx
lea edx, [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 0x74f
xor eax, eax
sub eax, dword [ebp - 0xc]
movzx ecx, byte [ebp - 8]
or eax, ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0xc]
or eax, edx
mov word [ebp - 0x14], ax
mov eax, dword [ebp - 0x10]
or eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
movzx edx, word [ebp - 8]
sub edx, 0xd76
and edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0xc], 0x42b
je 0x4032fa
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x10]
jb 0x403334
lea ecx, [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 8]
lea edx, [ecx + eax - 0x76a]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
sub eax, dword [ebp - 8]
mov ecx, 0xb8c
sub ecx, dword [ebp - 4]
and eax, ecx
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 4]
movzx eax, byte [ebp - 0x14]
add edx, dword [ebp - 0x14]
lea ecx, [eax + edx + 0x20f]
mov dword [ebp - 8], ecx
movzx edx, byte [ebp - 0x20]
add edx, dword [ebp - 0xc]
movzx eax, byte [ebp - 0xc]
or edx, eax
mov dword [ebp - 0x14], edx
movzx ecx, byte [ebp - 8]
add ecx, dword [ebp - 0x10]
movzx edx, word [ebp - 0x14]
sub ecx, edx
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], 0x551
jne 0x4033c6
xor eax, eax
add eax, dword [ebp - 0x20]
mov byte [ebp - 0x18], al
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 4]
and ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 4]
or ecx, dword [ebp - 0x20]
mov dword [ebp - 8], ecx
lea edx, [ebp - 0xf8]
push edx
lea eax, [ebp - 0x58]
push eax
push 0x1b
call dword [sym.imp.KERNEL32.dll_ClearCommError]
mov dword [ebp - 0x18], eax
push 0
push 0
push 3
push 0
push 1
push 0x80000000
push str.ougffsrraahgeoeursoa
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xc], eax
jmp 0x4033e1
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x18]
and ecx, edx
mov eax, dword [ebp - 8]
sub eax, 0x9c2
and ecx, eax
mov dword [ebp - 0x14], ecx
movzx ecx, byte [ebp - 8]
movzx edx, byte [ebp - 8]
sub ecx, edx
mov eax, dword [ebp - 4]
lea ecx, [ecx + eax - 0xa4b]
and ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
movzx edx, word [ebp - 0x14]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 0x159]
or edx, eax
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x1c], 0x767
jb 0x4032c7
mov ecx, 0x989
sub ecx, dword [ebp - 8]
or ecx, dword [ebp - 0x20]
movzx edx, word [ebp - 0x20]
and edx, dword [ebp - 0xc]
or ecx, edx
mov dword [ebp - 4], ecx
push 0
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.USER32.dll_DrawIcon]
mov dword [ebp - 0x10], eax
movzx eax, word [ebp - 4]
sub eax, dword [ebp - 0xc]
movzx ecx, word [ebp - 0xc]
mov edx, dword [ebp - 0x14]
sub edx, ecx
movzx ecx, word [ebp - 0xc]
add edx, ecx
and edx, dword [ebp - 0xc]
or eax, edx
mov dword [ebp - 0x18], eax
movzx edx, word [ebp - 0x14]
add edx, 0x974
movzx eax, word [ebp - 0x18]
sub edx, eax
sub edx, dword [ebp - 0x14]
sub edx, 0x3ca
sub edx, dword [ebp - 0x18]
and edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 0xc]
and ecx, 0xabd
or ecx, 0x8c0
mov dword [ebp - 0x1c], ecx
movzx edx, word [ebp - 0x10]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x1c], edx
push str.hdhpebatnohierthl
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 4], eax
mov eax, 0x320
sub eax, dword [ebp - 8]
or eax, dword [ebp - 0x14]
movzx ecx, word [ebp - 0x14]
sub ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x20]
or eax, ecx
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x18]
jb 0x40350e
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0xc]
jb 0x4035a4
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 8]
jae 0x4035a4
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 4]
add edx, dword [ebp - 0x14]
movzx eax, byte [ebp - 0x14]
sub edx, eax
mov ecx, dword [ebp - 0x14]
lea edx, [edx + ecx - 0x5ebf0]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x18]
sub eax, 0xe0
and eax, dword [ebp - 0x1c]
movzx ecx, word [ebp - 0x20]
and ecx, dword [ebp - 0x1c]
or eax, ecx
mov dword [ebp - 0x10], eax
movzx edx, word [ebp - 0x10]
movzx eax, byte [ebp - 0x14]
and eax, dword [ebp - 0x10]
or edx, eax
mov dword [ebp - 0xc], edx
movzx ecx, word [ebp - 0xc]
mov edx, dword [ebp - 0xc]
sub edx, ecx
add edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x10]
add edx, dword [ebp - 8]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x18]
xor edx, eax
mov dword [ebp - 0x1c], edx
push str.elaolneiseeedt
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_AppendMenuW]
mov dword [ebp - 0xc], eax
push str.ldtsea
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
or ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
jmp 0x4035b1
movzx edx, word [ebp - 0x10]
or edx, 0x84d
mov dword [ebp - 8], edx
call fcn.00404250
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x14]
or eax, dword [ebp - 8]
mov ecx, 0xb49
sub ecx, dword [ebp - 4]
movzx edx, byte [ebp - 0xc]
sub ecx, edx
add ecx, dword [ebp - 0x10]
or eax, ecx
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0xc], eax
mov ecx, 0x7665c0
call dword [0x7665bc]
mov edx, dword [ebp - 4]
sub edx, 0x52d
and edx, dword [ebp - 0x18]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
imul eax, dword [ebp - 0x1c], 0x173
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
and eax, ecx
movzx edx, word [ebp - 8]
sub edx, dword [ebp - 0x1c]
or eax, edx
mov dword [ebp - 4], eax
cmp dword [ebp - 0x14], 0
je 0x40364a
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x18]
ja 0x40364a
movzx ecx, byte [ebp - 0xc]
mov edx, dword [ebp - 8]
sub edx, ecx
mov eax, dword [ebp - 4]
lea ecx, [edx + eax - 0x971]
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
or ecx, edx
mov dword [ebp - 0x14], ecx
pop esi
mov esp, ebp
pop ebp
ret 0x10