Function at 0x402150
Capabilities:
Encode data using xor
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x258
push esi
mov byte [ebp - 0xd1], 0x67
mov dword [ebp - 0x170], 0x10ed
cmp dword [ebp - 0x170], 0x6e99
jg 0x405a51
mov eax, 0x292
mov word [ebp - 0x210], ax
mov dword [ebp - 0x78], 0xf1a0
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0xe8], ecx
mov dl, byte [ebp - 0xd1]
mov byte [ebp - 0x151], dl
mov byte [ebp - 0x205], 0x82
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0x170]
mov dword [section..data], eax
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x2c], 0xaa73
mov dword [ebp - 0xac], 0xe7de
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0xe4], edx
lea eax, [ebp - 0x205]
mov dword [ebp - 0x16c], eax
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0xd0], ecx
mov edx, dword [ebp - 0xd0]
add edx, dword [ebp - 0x78]
cmp edx, dword [ebp - 0xe4]
jne 0x402258
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
and ecx, 0xbf0
mov word [ebp - 0x210], cx
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x205]
shl eax, cl
mov ecx, dword [ebp - 0x16c]
mov byte [ecx], al
mov edx, dword [ebp - 0xe4]
xor edx, dword [ebp - 0xd0]
mov dword [ebp - 0x78], edx
movsx eax, byte [ebp - 0x151]
sar eax, 3
mov byte [ebp - 0xd1], al
call fcn.00405ea0
mov dword [ebp - 0x144], 0xfd36
mov ecx, dword [ebp - 0xe4]
mov dword [0x416c88], ecx
mov edx, dword [ebp - 0xe8]
mov dword [ebp - 0x50], edx
mov dword [ebp - 0xb8], 0x416c88
mov eax, dword [ebp - 0x16c]
mov cl, byte [eax]
mov byte [ebp - 0xf9], cl
mov dword [ebp - 0x1f8], 0x7b9f
mov edx, dword [ebp - 0x68]
mov ax, word [edx]
mov word [ebp - 0x220], ax
mov ecx, dword [ebp - 0x170]
or ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x1f8]
add edx, 0x7f
mov dword [ebp - 0x1f8], edx
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xe4], ecx
movzx edx, byte [ebp - 0xf9]
movzx eax, byte [ebp - 0x205]
add edx, eax
mov ecx, dword [ebp - 0x16c]
mov byte [ecx], dl
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x210]
and eax, ecx
mov word [ebp - 0x220], ax
mov edx, dword [ebp - 0xb8]
mov eax, dword [edx]
add eax, dword [ebp - 0xd0]
mov dword [0x416c88], eax
mov ecx, dword [ebp - 0xd0]
sub ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x205]
add eax, ecx
mov edx, dword [ebp - 0x16c]
mov byte [edx], al
mov eax, dword [ebp - 0x170]
sub eax, dword [section..data]
mov dword [ebp - 0xe8], eax
movsx ecx, byte [ebp - 0xd1]
xor ecx, 0x6a
mov byte [ebp - 0x151], cl
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x205]
shl eax, cl
mov ecx, dword [ebp - 0x16c]
mov byte [ecx], al
movzx edx, word [ebp - 0x220]
movzx ecx, word [ebp - 0x210]
sar edx, cl
mov eax, dword [ebp - 0x68]
mov word [eax], dx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x1f8], 0x8bfe
jb 0x4022b5
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0xe8]
or edx, dword [section..data]
mov dword [ebp - 0x170], edx
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0xd0]
and ecx, dword [ebp - 0x78]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x220]
sub eax, ecx
movzx edx, word [ebp - 0x210]
cmp eax, edx
je 0x402442
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0x1e4]
mov dword [ebp - 0xe8], eax
movzx ecx, word [ebp - 0x210]
movzx edx, word [ebp - 0x220]
add ecx, edx
mov eax, dword [ebp - 0x68]
mov word [eax], cx
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xf9]
sub edx, eax
mov byte [ebp - 0x205], dl
call fcn.00405ea0
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x3c], 0x416c88
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 0x170]
mov dword [ebp - 0xe8], edx
cmp dword [ebp - 0x144], 0x101e6
ja 0x4026ad
mov eax, dword [ebp - 0x170]
and eax, dword [ebp - 4]
mov dword [section..data], eax
movzx ecx, byte [ebp - 0x205]
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xf9], cl
movzx ecx, word [ebp - 0x220]
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x210], cx
movzx ecx, word [ebp - 0x210]
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x220], cx
movzx ecx, byte [ebp - 0x205]
movzx edx, byte [ebp - 0xf9]
sub ecx, edx
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
mov ecx, dword [ebp - 0xd0]
or ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0x3c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x170]
sar eax, cl
mov dword [ebp - 0xe8], eax
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x205]
xor edx, eax
mov byte [ebp - 0xf9], dl
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x210]
shl edx, cl
mov eax, dword [ebp - 0x68]
mov word [eax], dx
mov ecx, dword [ebp - 0x78]
and ecx, dword [ebp - 0xd0]
mov dword [0x416c88], ecx
mov edx, dword [section..data]
add edx, dword [ebp - 4]
mov dword [ebp - 0x170], edx
mov eax, dword [ebp - 0x170]
sub eax, dword [ebp - 0xe8]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x144]
add ecx, 0xf
mov dword [ebp - 0x144], ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xb8]
add eax, dword [ecx]
mov dword [ebp - 0x34], eax
movzx edx, word [ebp - 0x220]
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x210], dx
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xf9]
add eax, ecx
mov byte [ebp - 0x205], al
mov edx, dword [ebp - 0xe8]
and edx, dword [ebp - 0x50]
mov dword [ebp - 0x170], edx
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x170], eax
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x3c]
add edx, dword [eax]
mov dword [ebp - 0x78], edx
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x210]
sub ecx, edx
mov eax, dword [ebp - 0x68]
mov word [eax], cx
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x170]
shl edx, cl
mov dword [ebp - 0xe8], edx
movsx eax, byte [ebp - 0xd1]
or eax, 0x49
mov byte [ebp - 0x151], al
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0xe4]
xor edx, dword [ecx]
mov eax, dword [ebp - 0x3c]
mov dword [eax], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x210]
sar edx, cl
mov eax, dword [ebp - 0x68]
mov word [eax], dx
movzx ecx, byte [ebp - 0xf9]
movzx edx, byte [ebp - 0x205]
and ecx, edx
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0xb8]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x50]
mov dword [ebp - 0x1e4], ecx
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xf9]
sub eax, ecx
mov byte [ebp - 0x205], al
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x220]
add eax, ecx
mov edx, dword [ebp - 0x68]
mov word [edx], ax
jmp 0x402462
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0xd0]
sub ecx, dword [eax]
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0x50]
add edx, dword [ebp - 4]
mov dword [ebp - 0x1e4], edx
mov eax, dword [ebp - 0x170]
and eax, dword [ebp - 4]
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x220]
or edx, eax
mov ecx, dword [ebp - 0x68]
mov word [ecx], dx
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x205]
sar eax, cl
mov ecx, dword [ebp - 0x16c]
mov byte [ecx], al
mov edx, dword [ebp - 0x34]
mov ecx, dword [0x416c88]
shl edx, cl
mov eax, dword [ebp - 0xb8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x170]
xor ecx, dword [ebp - 4]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x170]
mov dword [section..data], edx
movsx eax, byte [ebp - 0x151]
and eax, 0x26
mov byte [ebp - 0xd1], al
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x220]
sub edx, eax
mov word [ebp - 0x210], dx
movzx ecx, byte [ebp - 0x205]
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xf9], cl
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xb8]
add edx, dword [eax]
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x170], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x50]
mov dword [ebp - 0x1e4], ecx
mov edx, dword [ebp - 0xe8]
add edx, dword [ebp - 0x1e4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x50]
and eax, dword [ebp - 0x1e4]
mov dword [section..data], eax
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x220]
sar edx, cl
mov word [ebp - 0x210], dx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xd0]
shl eax, cl
mov dword [ebp - 0x78], eax
movzx ecx, word [ebp - 0x210]
movzx edx, word [ebp - 0x220]
or ecx, edx
mov eax, dword [ebp - 0x68]
mov word [eax], cx
mov ecx, dword [ebp - 0xac]
add ecx, 0xf0
mov dword [ebp - 0xac], ecx
mov edx, dword [section..data]
xor edx, dword [ebp - 0x1e4]
mov dword [ebp - 0x170], edx
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xe4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x3c]
mov dword [edx], ecx
cmp dword [ebp - 0xac], 0x113ee
jb 0x4026ad
lea eax, [ebp - 0x220]
mov dword [ebp - 0xb0], eax
mov cl, byte [ebp - 0x205]
mov byte [ebp - 0x17d], cl
mov dl, byte [ebp - 0x151]
mov byte [ebp - 0x81], dl
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0xcc], eax
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x148], ecx
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x205]
and eax, ecx
mov byte [ebp - 0xf9], al
mov edx, dword [ebp - 0xcc]
mov dword [ebp - 0x1ac], edx
lea eax, [ebp - 0xe4]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xdc], ecx
mov edx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x78]
add eax, dword [edx]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x34]
cmp eax, edx
je 0x402912
push 0x1e
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
push ecx
call fcn.00401320
add esp, 8
jmp 0x4059e9
mov edx, dword [ebp - 0xdc]
mov eax, dword [edx]
cdq
idiv dword [ebp - 0x1ac]
mov dword [ebp - 0x170], eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov dword [ebp - 0x14c], 0xb452
mov eax, dword [ebp - 0x148]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x210]
sar edx, cl
movzx eax, word [ebp - 0x220]
mov ecx, dword [ebp - 0x68]
movzx ecx, word [ecx]
xor eax, ecx
cmp edx, eax
jle 0x402986
mov edx, dword [ebp - 0xb8]
mov eax, dword [edx]
add eax, dword [ebp - 0x78]
mov dword [0x416c88], eax
push 0xa0
mov ecx, dword [ebp - 0x50]
push ecx
call fcn.00401320
add esp, 8
jmp 0x405987
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x220]
sub edx, eax
mov ecx, dword [ebp - 0x68]
movzx eax, word [ecx]
mov ecx, dword [ebp - 0xb0]
movzx ecx, word [ecx]
sub eax, ecx
cmp edx, eax
jne 0x4058fd
mov edx, dword [ebp - 0x148]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x210]
add eax, ecx
mov edx, dword [ebp - 0xb0]
mov word [edx], ax
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0xe4]
sub edx, dword [ebp - 0x78]
mov eax, dword [ebp - 8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
mov dword [ebp - 0x22c], edx
cmp dword [ebp - 0x22c], 0
je 0x402a10
cmp dword [ebp - 0x22c], 0xfcf
je 0x405814
jmp 0x405842
mov eax, 0x1ec
mov word [ebp - 0x11c], ax
lea ecx, [ebp - 0xd1]
mov dword [ebp - 0x190], ecx
mov dx, word [ebp - 0x220]
mov word [ebp - 0x94], dx
mov dword [ebp - 0x1e0], 0x35f8
movzx eax, byte [ebp - 0x17d]
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
or eax, edx
movzx edx, byte [ebp - 0x205]
movzx ecx, byte [ebp - 0xf9]
sar edx, cl
cmp eax, edx
jle 0x402afa
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x170]
cdq
idiv dword [ecx]
mov edx, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 4]
shl edx, cl
cmp eax, edx
jge 0x402ac3
mov eax, dword [ebp - 0x16c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xf9]
add ecx, edx
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
mov ecx, dword [ebp - 8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x78]
mov dword [0x416c88], edx
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x50]
sub ecx, dword [eax]
mov dword [ebp - 0x170], ecx
jmp 0x402afa
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x205]
and eax, ecx
movzx edx, byte [ebp - 0xf9]
movzx ecx, byte [ebp - 0x17d]
sub edx, ecx
cmp eax, edx
jg 0x402afa
mov edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xe8]
sub eax, dword [edx]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xbc], ecx
lea edx, [ebp - 0x50]
mov dword [ebp - 0x118], edx
mov eax, dword [ebp - 0x16c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x17d]
and ecx, edx
mov byte [ebp - 0x205], cl
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x148]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0xb0]
mov word [edx], cx
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx]
mov dword [ebp - 0x5c], edx
movsx eax, byte [ebp - 0x81]
mov ecx, dword [ebp - 0x190]
movsx edx, byte [ecx]
add eax, edx
mov byte [0x412004], al
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
mov dword [ebp - 0x230], ecx
cmp dword [ebp - 0x230], 0
je 0x402b92
cmp dword [ebp - 0x230], 0x5cc0
je 0x402c50
jmp 0x402d0a
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
sub eax, dword [section..data]
mov dword [ebp - 0x170], eax
movsx ecx, word [ebp - 0x11c]
cmp ecx, 0x731
jge 0x402c07
lea edx, [ebp - 0x1ac]
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x48], 0xa0
lea eax, [ebp - 0x205]
mov dword [ebp - 0x98], eax
mov ecx, dword [ebp - 0x148]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
xor edx, ecx
mov eax, dword [ebp - 0x68]
mov word [eax], dx
mov cx, word [ebp - 0x11c]
mov word [ebp - 0xf8], cx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x20c], eax
jmp 0x402c4b
movzx edx, word [ebp - 0x94]
movzx ecx, word [ebp - 0x210]
sar edx, cl
movzx eax, word [ebp - 0x220]
mov ecx, dword [ebp - 0xb0]
movzx ecx, word [ecx]
or eax, ecx
cmp edx, eax
jle 0x402c4b
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
push eax
movzx ecx, word [ebp - 0x220]
push ecx
movzx edx, byte [ebp - 0x17d]
push edx
call fcn.00405a80
add esp, 0xc
jmp 0x402d0a
movsx eax, byte [ebp - 0x151]
movsx ecx, byte [ebp - 0x81]
shl eax, cl
mov ecx, dword [ebp - 0x190]
mov byte [ecx], al
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x416c88]
and eax, dword [edx]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x190]
movsx edx, byte [ecx]
movsx eax, byte [0x412004]
add edx, eax
movsx ecx, byte [ebp - 0x81]
movsx eax, byte [ebp - 0x151]
sub ecx, eax
cmp edx, ecx
jg 0x402cfb
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x170]
sub edx, dword [ecx]
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x50]
mov dword [section..data], ecx
movzx edx, word [ebp - 0x210]
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x220], dx
push 0x87
lea edx, [ebp - 0xf9]
push edx
push 0x2b
push 0xf9
mov eax, dword [ebp - 0x74]
push eax
call sub.WINSPOOL.DRV_SetJobW
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x3c]
add edx, dword [eax]
mov ecx, dword [ebp - 8]
mov dword [ecx], edx
mov edx, dword [ebp - 0xb8]
mov eax, dword [ebp - 8]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
add eax, dword [ebp - 0xe4]
cmp ecx, eax
jb 0x4057e5
mov ecx, dword [ebp - 0x80]
mov edx, dword [ecx]
mov dword [ebp - 0x234], edx
cmp dword [ebp - 0x234], 0xffcde000
je 0x402d56
cmp dword [ebp - 0x234], 0x5a4d
je 0x405755
jmp 0x405782
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x4c], 0xc42b
mov edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x170]
add eax, dword [edx]
mov dword [ebp - 0xb4], eax
mov cx, word [ebp - 0x11c]
mov word [ebp - 0x13c], cx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x1f4], 0xbde4
lea edx, [ebp - 0x151]
mov dword [ebp - 0x90], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x158], eax
movzx eax, byte [ebp - 0x205]
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xf9], al
mov eax, dword [ebp - 0xb0]
mov cx, word [eax]
mov word [ebp - 0xa4], cx
mov edx, dword [ebp - 0xb8]
mov eax, dword [edx]
sub eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xb8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x190]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x90]
movsx edx, byte [ecx]
sub eax, edx
mov byte [0x412005], al
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xa8], eax
movzx ecx, word [ebp - 0x210]
movzx edx, word [ebp - 0x220]
sub ecx, edx
mov word [ebp - 0xa4], cx
movzx eax, byte [ebp - 0xf9]
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x205], al
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
mov dword [ebp - 0x200], ecx
mov edx, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x118]
mov eax, dword [edx]
cdq
idiv dword [ecx]
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x118]
mov eax, dword [edx]
mov dword [ebp - 0x1d4], eax
movzx ecx, word [ebp - 0x220]
mov dword [ebp - 0x238], ecx
cmp dword [ebp - 0x238], 0x9d
je 0x402e95
jmp 0x402ef7
mov edx, dword [ebp - 0xdc]
mov eax, dword [section..data]
and eax, dword [edx]
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0x90]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x151]
add edx, eax
mov byte [ebp - 0x81], dl
mov ecx, dword [ebp - 0xb0]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0xdc]
mov eax, dword [edx]
push eax
movzx ecx, word [ebp - 0x220]
push ecx
movzx edx, word [ebp - 0x210]
push edx
call fcn.00402060
jmp 0x405670
movsx eax, word [ebp - 0x11c]
movsx ecx, word [ebp - 0x13c]
add eax, ecx
mov word [ebp - 0xf8], ax
mov edx, dword [ebp - 0x148]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x210], ax
mov eax, dword [ebp - 0x98]
mov cl, byte [eax]
mov byte [ebp - 0x51], cl
mov dword [ebp - 0x128], 0xe418
push str.JyhRc4yME4
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x194], ax
mov edx, dword [ebp - 0xb8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x5c]
mov dword [ebp - 0xe4], eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x184], ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov dl, byte [ebp - 0xf9]
mov byte [0x412c82], dl
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x130]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 4], edx
movzx eax, word [ebp - 0xa4]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x402fab
jmp 0x403065
mov ecx, dword [ebp - 0x118]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xa8]
mov dword [ebp - 0xb4], edx
lea eax, [ebp - 0x1e4]
mov dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0x190]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x90]
movsx ecx, byte [eax]
add edx, ecx
movsx eax, byte [ebp - 0xd1]
movsx ecx, byte [ebp - 0x81]
sub eax, ecx
cmp edx, eax
jl 0x403063
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
or eax, edx
mov byte [ebp - 0x205], al
mov eax, dword [ebp - 0xb0]
mov cx, word [eax]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xd0]
mov ecx, dword [0x416c88]
shl edx, cl
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x118]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf0]
sar edx, cl
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x184]
mov edx, dword [eax]
xor edx, dword [ecx]
mov dword [ebp - 0x78], edx
jmp 0x4030a1
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0xb8]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0xd0]
cmp edx, eax
jne 0x4030a1
mov ecx, dword [ebp - 0xb0]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x148]
mov word [eax], dx
call fcn.00405ea0
mov ecx, dword [ebp - 0x16c]
mov dl, byte [ecx]
mov byte [ebp - 0x131], dl
mov dword [ebp - 0xc0], 0xbce3
cmp dword [ebp - 0x48], 0x6d3
je 0x40339f
movsx eax, byte [ebp - 0xd1]
mov ecx, dword [ebp - 0x90]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x151], al
movzx eax, word [ebp - 0x194]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1b0], ax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x118]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x1cc]
mov dword [ecx], eax
mov edx, dword [ebp - 0xbc]
add edx, dword [ebp - 0xd0]
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x1ac], ecx
movzx edx, byte [ebp - 0x17d]
movzx eax, byte [ebp - 0x205]
sub edx, eax
mov byte [ebp - 0xf9], dl
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x94]
sub ecx, edx
mov eax, dword [ebp - 0x68]
mov word [eax], cx
mov ecx, dword [ebp - 0x1e4]
xor ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x3c]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [0x416c88], edx
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x80]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x170]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x17d], al
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0xb0]
mov word [edx], cx
mov eax, dword [ebp - 0x5c]
add eax, dword [0x416c88]
mov dword [ebp - 0xe4], eax
mov ecx, dword [ebp - 0x48]
add ecx, 0x45
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x1cc]
mov eax, dword [ebp - 0xf0]
add eax, dword [edx]
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0xf0]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x80]
mov dword [eax], edx
mov ecx, dword [section..data]
and ecx, dword [ebp - 0xe8]
mov edx, dword [ebp - 0x1cc]
mov dword [edx], ecx
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x1cc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x90]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x190]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0xd1], al
movzx eax, word [ebp - 0x220]
mov ecx, dword [ebp - 0x148]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xb0]
mov word [ecx], ax
movzx edx, word [ebp - 0x210]
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x94], dx
movzx edx, byte [ebp - 0x51]
movzx eax, byte [ebp - 0x17d]
or edx, eax
mov ecx, dword [ebp - 0x16c]
mov byte [ecx], dl
mov edx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0xbc], eax
push str.3A_CytCvdieYNZ_B21
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x1b0], ax
mov ecx, dword [ebp - 0x184]
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x98]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x17d]
xor ecx, edx
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
mov ecx, dword [ebp - 0xb0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x94]
and edx, eax
mov word [ebp - 0x210], dx
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x9c]
add edx, dword [ecx]
mov dword [section..data], edx
mov eax, dword [ebp - 0xe4]
add eax, dword [0x416c88]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x170], ecx
mov edx, dword [ebp - 0x1cc]
mov eax, dword [ebp - 0x118]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x1d4], ecx
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0xa4]
add edx, eax
mov word [ebp - 0x94], dx
movzx ecx, byte [ebp - 0x17d]
mov edx, dword [ebp - 0x98]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0x205], cl
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ecx]
mov eax, dword [ebp - 8]
add edx, dword [eax]
mov dword [ebp - 0xd0], edx
jmp 0x4030b9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x1e0], 0x318d
jb 0x403708
mov ecx, dword [ebp - 0x80]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xa8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x9c]
sub eax, dword [section..data]
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
movsx edx, byte [ebp - 0x151]
movsx ecx, byte [ebp - 0x81]
sar edx, cl
mov eax, dword [ebp - 0x90]
mov byte [eax], dl
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
xor edx, ecx
mov word [ebp - 0x210], dx
mov edx, dword [ebp - 0x1e0]
sub edx, 0x57
mov dword [ebp - 0x1e0], edx
movzx eax, byte [ebp - 0x51]
movzx ecx, byte [ebp - 0xf9]
or eax, ecx
mov byte [ebp - 0x205], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x20c], eax
mov edx, dword [ebp - 0x200]
mov ecx, dword [ebp - 0xbc]
shl edx, cl
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
and ecx, dword [section..data]
mov dword [ebp - 0xa8], ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x130]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0xb8]
mov eax, dword [edx]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0x170]
sub ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0xdc]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x131]
movzx ecx, byte [ebp - 0x17d]
sub eax, ecx
mov byte [ebp - 0x51], al
mov edx, dword [ebp - 0x190]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xd1]
add eax, ecx
mov byte [0x412005], al
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x1d4]
add eax, dword [edx]
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0x184]
mov edx, dword [ecx]
and edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 4]
add edx, dword [ecx]
mov eax, dword [ebp - 0xdc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x9c]
xor ecx, dword [ebp - 0xb4]
mov dword [ebp - 0xcc], ecx
movzx edx, word [ebp - 0x218]
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
sar edx, cl
mov word [ebp - 0x94], dx
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xf9]
shl edx, cl
mov byte [ebp - 0x131], dl
movzx eax, word [ebp - 0x194]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x188], ax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
movsx ecx, word [ebp - 0x13c]
movsx edx, word [ebp - 0x11c]
or ecx, edx
mov word [ebp - 0xf8], cx
mov eax, dword [ebp - 0x90]
movsx ecx, byte [eax]
movsx edx, byte [0x412004]
sub ecx, edx
mov eax, dword [ebp - 0x190]
mov byte [eax], cl
mov ecx, dword [ebp - 0x5c]
and ecx, dword [ebp - 0x34]
mov dword [0x416c88], ecx
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0xe8]
add eax, dword [edx]
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x218], dx
movzx edx, byte [ebp - 0x205]
mov eax, dword [ebp - 0x98]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xf9], dl
mov edx, dword [ebp - 0xe4]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x118]
add ecx, dword [edx]
mov dword [ebp - 0xcc], ecx
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xdc]
add ecx, dword [edx]
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x200]
sub eax, dword [ebp - 0xe4]
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x205]
and edx, eax
mov byte [ebp - 0x131], dl
mov ecx, dword [ebp - 0xe8]
xor ecx, dword [ebp - 0xb4]
mov dword [section..data], ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0xdc]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0xcc], ecx
mov edx, dword [ebp - 0xdc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x9c]
shl eax, cl
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0xb8]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x130]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x9c], edx
mov eax, dword [ebp - 0xdc]
mov ecx, dword [section..data]
add ecx, dword [eax]
mov edx, dword [ebp - 0x1cc]
mov dword [edx], ecx
movsx eax, word [ebp - 0x13c]
movsx ecx, word [ebp - 0x11c]
and eax, ecx
mov word [ebp - 0xf8], ax
mov edx, dword [ebp - 0x90]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x190]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0xd1], al
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x94]
add ecx, edx
mov word [ebp - 0x218], cx
movzx eax, byte [ebp - 0x51]
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
sub eax, edx
mov byte [0x412c82], al
jmp 0x4033a8
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x184]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x200], edx
lea eax, [ebp - 0xcc]
mov dword [ebp - 0x6c], eax
movzx ecx, byte [ebp - 0x205]
movzx edx, byte [0x412c82]
sub ecx, edx
mov byte [ebp - 0x51], cl
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x148]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x210], cx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x1e4]
add edx, dword [ebp - 0x50]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x184]
mov edx, dword [ebp - 0xb8]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0xbc], eax
movzx ecx, word [ebp - 0x210]
movzx edx, word [ebp - 0x218]
or ecx, edx
mov eax, dword [ebp - 0x148]
mov word [eax], cx
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xf9]
xor edx, eax
mov byte [ebp - 0x131], dl
mov edx, dword [section..data]
mov ecx, dword [ebp - 0x50]
shl edx, cl
mov eax, dword [ebp - 0x80]
mov dword [eax], edx
mov ecx, dword [ebp - 4]
and ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0xf0], ecx
mov edx, dword [ebp - 0x14c]
sub edx, 0xba
mov dword [ebp - 0x14c], edx
mov eax, dword [ebp - 0x190]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x90]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x190]
mov byte [edx], cl
movsx eax, word [ebp - 0x13c]
movsx ecx, word [ebp - 0x11c]
sub eax, ecx
mov word [ebp - 0xf8], ax
movzx edx, byte [0x412c82]
mov eax, dword [ebp - 0x98]
movzx ecx, byte [eax]
and edx, ecx
mov byte [ebp - 0x17d], dl
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xb0]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x220], ax
mov eax, dword [ebp - 0x184]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0xb8]
mov dword [edx], ecx
mov eax, dword [ebp - 0x184]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x78]
mov dword [0x416c88], ecx
cmp dword [ebp - 0x14c], 0xaae0
ja 0x403767
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0xe0], edx
mov eax, dword [section..data]
add eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x1cc]
mov ecx, dword [ecx]
sub ecx, dword [edx]
cmp eax, ecx
jge 0x40390f
mov edx, dword [ebp - 0x50]
xor edx, dword [section..data]
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x130]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x6c]
mov dword [eax], edx
movzx ecx, word [ebp - 0x218]
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x220], cx
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xf9]
sar edx, cl
mov byte [ebp - 0x205], dl
mov eax, dword [ebp - 0x78]
and eax, dword [ebp - 0x200]
mov dword [ebp - 0xbc], eax
push 0
push 0x20
push 1
push 0
push 2
push 0xc0000000
push str.C:Purposingphylactery
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x170]
add edx, dword [ecx]
mov eax, dword [ebp - 0x80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x170]
sub edx, dword [ecx]
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
mov dword [ebp - 0x240], ecx
cmp dword [ebp - 0x240], 0
je 0x403983
cmp dword [ebp - 0x240], 0x950
je 0x4055c0
jmp 0x405603
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
add eax, dword [ebp - 0xe0]
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0xb0]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x220]
or edx, eax
mov word [ebp - 0x210], dx
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x16c]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0x51], dl
mov edx, dword [ebp - 0x170]
mov ecx, dword [ebp - 0xe0]
shl edx, cl
mov eax, dword [ebp - 0x130]
mov dword [eax], edx
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0xe4]
mov ecx, dword [ecx]
shr edx, cl
mov dword [0x416c88], edx
mov eax, dword [ebp - 0xc0]
sub eax, 0x39
mov dword [ebp - 0xc0], eax
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x80]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x1cc]
mov dword [ecx], eax
mov edx, dword [ebp - 0xdc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6c]
add eax, dword [ecx]
mov dword [ebp - 0x1e4], eax
movzx edx, byte [ebp - 0xf9]
movzx eax, byte [ebp - 0x17d]
sub edx, eax
mov byte [ebp - 0x131], dl
movzx ecx, word [ebp - 0xa4]
movzx edx, word [ebp - 0x210]
sub ecx, edx
mov eax, dword [ebp - 0x68]
mov word [eax], cx
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ebp - 0x34]
add edx, dword [ecx]
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x118]
mov dword [eax], edx
mov ecx, dword [section..data]
and ecx, dword [ebp - 0xb4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x1cc]
mov eax, dword [edx]
add eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
mov edx, dword [ebp - 0x130]
mov eax, dword [edx]
sub eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xdc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x190]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x90]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x81], al
movsx eax, word [ebp - 0x11c]
movsx ecx, word [ebp - 0x13c]
xor eax, ecx
mov word [ebp - 0xf8], ax
movzx edx, byte [ebp - 0x131]
movzx eax, byte [ebp - 0x17d]
or edx, eax
mov byte [ebp - 0x51], dl
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x120], eax
movzx edx, word [ebp - 0xa4]
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x218], dx
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0x184]
mov edx, dword [ecx]
and edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x3c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x148]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x94]
add edx, eax
mov word [ebp - 0x210], dx
movzx ecx, byte [ebp - 0x51]
movzx edx, byte [ebp - 0x17d]
sub ecx, edx
mov byte [ebp - 0xf9], cl
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x1cc]
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x44], eax
mov eax, dword [0x416c88]
sub eax, dword [ebp - 0xe4]
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ecx]
add edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x6c]
mov edx, dword [section..data]
add edx, dword [ecx]
mov dword [ebp - 0xb4], edx
movzx eax, byte [ebp - 0x131]
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x51], al
cmp dword [ebp - 0xc0], 0xb752
ja 0x403983
movzx eax, word [ebp - 0x194]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x188], ax
mov cx, word [ebp - 0x220]
mov word [ebp - 0x28], cx
push 0
push 8
push 5
push 0
push 1
push 0xc0000000
push str.C:HardheadedTriumphalismgumshoe
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x1fc], eax
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1a8]
mov dword [edx], ecx
cmp dword [ebp - 0x4c], 0xbb0b
jbe 0x403ee5
mov eax, dword [ebp - 0xdc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x1d4]
sar edx, cl
mov eax, dword [ebp - 0x6c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x190]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x90]
movsx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0x151], dl
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
xor eax, dword [ebp - 0x78]
mov dword [0x416c88], eax
push str.MOYj8_SLKW
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x188], ax
movzx edx, word [ebp - 0x210]
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0xb0]
mov word [ecx], dx
movzx edx, byte [ebp - 0xf9]
movzx eax, byte [ebp - 0x51]
add edx, eax
mov ecx, dword [ebp - 0x98]
mov byte [ecx], dl
mov edx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x200]
and eax, dword [edx]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ecx]
add edx, dword [ebp - 0xb4]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xb0]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x28]
sub eax, ecx
mov word [ebp - 0xa4], ax
movzx edx, byte [ebp - 0x51]
mov eax, dword [ebp - 0x16c]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [0x412c82], dl
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0xa0], eax
mov edx, dword [ebp - 0xf0]
add edx, dword [ebp - 0x1d4]
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0x4c]
sub eax, 0x92
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x184]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0xd0], eax
mov edx, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x50]
shl edx, cl
mov eax, dword [ebp - 0x80]
mov dword [eax], edx
mov ecx, dword [ebp - 0x170]
or ecx, dword [ebp - 4]
mov edx, dword [ebp - 0xdc]
mov dword [edx], ecx
movzx eax, word [ebp - 0x210]
mov ecx, dword [ebp - 0xb0]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x220], ax
mov eax, dword [ebp - 0x98]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x205]
sar edx, cl
mov byte [ebp - 0x17d], dl
mov eax, dword [ebp - 0x90]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xd1]
sub ecx, edx
mov byte [ebp - 0x81], cl
movsx eax, word [ebp - 0x13c]
movsx ecx, word [ebp - 0x11c]
add eax, ecx
mov word [ebp - 0xf8], ax
mov edx, dword [ebp - 0x200]
and edx, dword [ebp - 0xd0]
mov dword [0x416c88], edx
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 0x118]
mov dword [edx], ecx
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x28]
sub ecx, edx
mov word [ebp - 0xa4], cx
movzx eax, byte [0x412c82]
movzx ecx, byte [ebp - 0x205]
add eax, ecx
mov byte [ebp - 0xf9], al
mov edx, dword [ebp - 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x184]
add eax, dword [ecx]
mov dword [ebp - 0x5c], eax
movzx edx, word [ebp - 0x194]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x1b0], ax
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0x6c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xdc]
add eax, dword [ecx]
mov edx, dword [ebp - 0x130]
mov dword [edx], eax
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0xb8]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0xe4], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x16c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x205]
add ecx, edx
mov eax, dword [ebp - 0x98]
mov byte [eax], cl
jmp 0x403c3c
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x28]
shl edx, cl
mov word [0x412008], dx
mov eax, dword [ebp - 0x148]
mov cx, word [eax]
mov word [ebp - 0x174], cx
mov edx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x1cc]
mov dword [edx], ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0xf0]
sar eax, cl
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 8]
mov edx, dword [ecx]
or edx, dword [ebp - 0x34]
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x80]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0x1cc]
mov dword [eax], edx
movzx ecx, word [ebp - 0x194]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x194], ax
mov edx, dword [ebp - 0x1f4]
sub edx, 0x73
mov dword [ebp - 0x1f4], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0xcc]
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0x90]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x81]
add edx, eax
mov byte [ebp - 0x151], dl
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x50]
and edx, dword [ecx]
mov eax, dword [ebp - 0x6c]
mov dword [eax], edx
movzx ecx, word [ebp - 0x210]
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
add ecx, eax
mov word [0x412008], cx
movzx ecx, byte [ebp - 0x17d]
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x98]
mov byte [edx], cl
movzx eax, word [ebp - 0x188]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x198], ax
mov ecx, dword [ebp - 8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1a8]
add edx, dword [eax]
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x1ac]
sub ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x148]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x220], ax
movzx eax, byte [ebp - 0x205]
movzx ecx, byte [ebp - 0x17d]
sar eax, cl
mov ecx, dword [ebp - 0x16c]
mov byte [ecx], al
mov edx, dword [ebp - 0x200]
mov ecx, dword [0x416c88]
shl edx, cl
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x9c]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x118]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x118]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0xb4], edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 8]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [0x416c88], edx
movzx eax, byte [ebp - 0x205]
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x51], al
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xb0]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x148]
mov word [edx], cx
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x118]
add ecx, dword [edx]
mov eax, dword [ebp - 0xdc]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x170]
add ecx, dword [section..data]
mov edx, dword [ebp - 0x80]
mov dword [edx], ecx
movsx eax, byte [ebp - 0xd1]
movsx ecx, byte [ebp - 0x151]
and eax, ecx
mov edx, dword [ebp - 0x190]
mov byte [edx], al
mov eax, dword [ebp - 0x16c]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x51]
sub ecx, edx
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
movzx ecx, byte [ebp - 0x131]
movzx edx, byte [ebp - 0x51]
sub ecx, edx
mov byte [ebp - 0x205], cl
movzx eax, word [ebp - 0x220]
movzx ecx, word [ebp - 0x28]
add eax, ecx
mov edx, dword [ebp - 0xb0]
mov word [edx], ax
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0xe4]
add ecx, dword [eax]
mov dword [0x416c88], ecx
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0xbc]
or eax, dword [edx]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0xdc]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x1e4], edx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xe8]
shl edx, cl
mov dword [ebp - 0x1e4], edx
movzx eax, word [0x412008]
movzx ecx, word [ebp - 0x218]
and eax, ecx
mov word [ebp - 0x174], ax
movzx edx, byte [ebp - 0xf9]
movzx eax, byte [ebp - 0x131]
sub edx, eax
mov ecx, dword [ebp - 0x16c]
mov byte [ecx], dl
mov edx, dword [ebp - 8]
mov eax, dword [edx]
sub eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x184]
mov dword [ecx], eax
cmp dword [ebp - 0x1f4], 0xa197
ja 0x403f08
movsx edx, word [ebp - 0x11c]
mov dword [ebp - 0x244], edx
cmp dword [ebp - 0x244], 0x160
je 0x40422c
jmp 0x40424a
mov eax, dword [ebp - 0xe0]
push eax
movzx ecx, word [ebp - 0x28]
push ecx
movzx edx, byte [ebp - 0x205]
push edx
call fcn.00405a80
add esp, 0xc
jmp 0x40429a
mov eax, dword [ebp - 0x6c]
mov ecx, dword [section..data]
sub ecx, dword [eax]
mov dword [ebp - 0xa8], ecx
mov edx, dword [ebp - 0xe8]
mov dword [ebp - 0x8c], edx
movsx eax, word [ebp - 0x13c]
movsx ecx, word [ebp - 0xf8]
add eax, ecx
mov word [0x41200c], ax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x88], eax
mov edx, dword [ebp - 0x184]
mov eax, dword [edx]
add eax, dword [ebp - 0x200]
mov dword [ebp - 0x5c], eax
movzx ecx, word [ebp - 0x218]
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x210], cx
movzx ecx, word [ebp - 0x1b0]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x188], ax
mov dl, byte [ebp - 0x17d]
mov byte [ebp - 0x1ed], dl
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [eax]
imul edx, dword [ecx]
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x80]
mov eax, dword [eax]
sub eax, dword [ecx]
cmp edx, eax
je 0x404329
movsx ecx, byte [0x412005]
movsx edx, byte [ebp - 0x151]
xor ecx, edx
mov byte [ebp - 0xd1], cl
mov ax, word [ebp - 0x13c]
mov word [ebp - 0x150], ax
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xe4]
or edx, dword [ecx]
mov eax, dword [ebp - 0x1a8]
mov dword [eax], edx
jmp 0x404391
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x118]
add edx, dword [eax]
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xa8]
add eax, dword [ecx]
cmp edx, eax
jle 0x404391
mov ecx, dword [ebp - 0x130]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x170]
sar edx, cl
mov eax, dword [ebp - 0x80]
mov dword [eax], edx
movzx edx, word [ebp - 0x94]
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x220], dx
movzx ecx, byte [ebp - 0x1ed]
mov edx, dword [ebp - 0x98]
movzx eax, byte [edx]
and ecx, eax
mov byte [0x412c82], cl
mov ecx, dword [ebp - 0x8c]
imul ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0x130]
mov dword [edx], ecx
push str.HKCwtOWGyR9u.F04FxB_3e
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x198], ax
push str.3ng_FNT_vgq
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
mov dword [ebp - 0x1d0], ecx
mov edx, dword [ebp - 0x1cc]
mov eax, dword [ebp - 0x170]
add eax, dword [edx]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0xb0]
movzx edx, word [ecx]
mov dword [ebp - 0x248], edx
cmp dword [ebp - 0x248], 0
je 0x404410
cmp dword [ebp - 0x248], 0x4c5
je 0x4054dc
jmp 0x405590
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
mov dword [ebp - 0x224], ecx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x88], eax
movsx edx, word [ebp - 0x13c]
movsx ecx, word [0x41200c]
sar edx, cl
mov word [ebp - 0x11c], dx
movsx eax, word [ebp - 0x150]
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x17b
je 0x40446b
cmp dword [ebp - 0x24c], 0x1ec
je 0x4044e1
jmp 0x404585
movsx ecx, byte [ebp - 0x151]
movsx edx, byte [ebp - 0xd1]
or ecx, edx
mov byte [ebp - 0x81], cl
lea eax, [ebp - 0x24]
push eax
push 0x1f
lea ecx, [ebp - 0x148]
push ecx
lea edx, [ebp - 0x104]
push edx
mov eax, dword [ebp - 0x140]
push eax
mov ecx, dword [ebp - 0xf4]
push ecx
call sub.WINSPOOL.DRV_GetPrinterDataW
mov dword [ebp - 0xd0], eax
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [0x412c82]
shl eax, cl
mov ecx, dword [ebp - 0x98]
mov byte [ecx], al
movzx edx, word [ebp - 0x94]
movzx eax, word [ebp - 0x28]
xor edx, eax
mov word [ebp - 0x174], dx
jmp 0x404585
mov ecx, dword [ebp - 0x90]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x190]
movsx ecx, byte [eax]
sub edx, ecx
movsx eax, byte [ebp - 0x151]
movsx ecx, byte [ebp - 0x81]
and eax, ecx
cmp edx, eax
jg 0x40455e
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx]
add eax, dword [0x416c88]
mov dword [ebp - 0x1d0], eax
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp - 0xb0]
mov ax, word [edx]
mov word [0x412c80], ax
movzx ecx, byte [ebp - 0x205]
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xf9], cl
mov cx, word [ebp - 0x174]
mov word [ebp - 0x1a0], cx
mov edx, dword [ebp - 0x1d4]
add edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x130]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx]
sub edx, dword [0x416c88]
mov eax, dword [ebp - 0x184]
mov dword [eax], edx
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ecx]
mov dword [ebp - 0xec], edx
movzx eax, byte [ebp - 0x131]
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
add eax, edx
movzx ecx, byte [ebp - 0x205]
movzx edx, byte [0x412c82]
sub ecx, edx
cmp eax, ecx
jge 0x404675
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x118]
add ecx, dword [edx]
mov dword [ebp - 0x1ac], ecx
movzx eax, word [ebp - 0x28]
mov ecx, dword [ebp - 0x148]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0xb0]
mov word [ecx], ax
mov edx, dword [ebp - 0x98]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x1ed]
or eax, ecx
mov byte [ebp - 0x51], al
mov edx, dword [ebp - 0x98]
mov al, byte [edx]
mov byte [ebp - 0x250], al
cmp byte [ebp - 0x250], 0x89
je 0x404619
jmp 0x40465e
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0xb8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1cc]
mov eax, dword [ebp - 0x1ac]
xor eax, dword [edx]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x90]
movsx edx, byte [ecx]
movsx ecx, byte [ebp - 0x151]
sar edx, cl
mov byte [ebp - 0x81], dl
jmp 0x404675
movsx eax, word [ebp - 0x150]
movsx ecx, word [ebp - 0xf8]
add eax, ecx
mov word [ebp - 0x13c], ax
lea edx, [ebp - 0x51]
mov dword [ebp - 0xc4], edx
movzx eax, word [ebp - 0xa4]
movzx ecx, word [ebp - 0x1a0]
sub eax, ecx
mov word [ebp - 0x174], ax
mov edx, dword [ebp - 0x1e4]
and edx, dword [section..data]
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0xec]
imul ecx, dword [eax]
cmp edx, ecx
jl 0x40474b
mov edx, dword [ebp - 0x224]
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 0x72c2
je 0x404720
cmp dword [ebp - 0x254], 0x3baac1a0
je 0x4046db
jmp 0x40474b
lea eax, [ebp - 0x78]
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0xe0]
add ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0x8c], ecx
lea edx, [ebp - 0x1e4]
mov dword [ebp - 0x108], edx
lea eax, [ebp - 0xd0]
mov dword [0x416c8c], eax
mov ecx, dword [0x416c8c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 0x200], edx
jmp 0x40474b
movzx eax, word [ebp - 0x218]
push eax
movzx ecx, word [ebp - 0x11c]
push ecx
movzx edx, word [ebp - 0x220]
push edx
mov edx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x190]
mov cl, byte [eax]
call fcn.00401890
movzx ecx, byte [ebp - 0x17d]
movzx edx, byte [ebp - 0x1ed]
sub ecx, edx
mov eax, dword [ebp - 0x16c]
movzx edx, byte [eax]
movzx eax, byte [ebp - 0x51]
add edx, eax
cmp ecx, edx
jle 0x4047da
mov ecx, dword [ebp - 0x130]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x108]
mov dword [eax], edx
movzx ecx, word [ebp - 0x94]
movzx edx, word [ebp - 0x1a0]
sub ecx, edx
mov word [ebp - 0x218], cx
movzx eax, byte [ebp - 0x51]
mov ecx, dword [ebp - 0x98]
movzx ecx, byte [ecx]
shl eax, cl
mov byte [ebp - 0xf9], al
movzx edx, word [ebp - 0xf8]
push edx
mov eax, dword [0x416c8c]
mov ecx, dword [eax]
push ecx
movzx edx, word [ebp - 0x150]
push edx
movzx eax, word [ebp - 0x13c]
push eax
call fcn.00401f80
add esp, 0x10
jmp 0x404842
mov ecx, dword [ebp - 0x108]
mov edx, dword [ebp - 0x1e4]
xor edx, dword [ecx]
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0x80]
mov esi, dword [eax]
mov ecx, dword [ebp - 0x170]
sar esi, cl
mov eax, dword [ebp - 0x224]
cdq
idiv dword [ebp - 0xec]
cmp esi, eax
jge 0x404842
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x178], ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x1e4]
or eax, dword [edx]
mov ecx, dword [ebp - 0x108]
mov dword [ecx], eax
lea edx, [ebp - 0x1e4]
mov dword [ebp - 0x7c], edx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [section..data]
and ecx, dword [eax]
mov dword [0x412010], ecx
movzx edx, byte [ebp - 0x205]
movzx eax, byte [ebp - 0x1ed]
sub edx, eax
mov byte [ebp - 0x131], dl
mov ecx, dword [ebp - 0x178]
mov edx, dword [ecx]
mov eax, dword [0x416c8c]
add edx, dword [eax]
mov ecx, dword [ebp - 0xb8]
mov eax, dword [ecx]
and eax, dword [ebp - 0xd0]
cmp edx, eax
je 0x404892
movzx ecx, word [ebp - 0x28]
movzx edx, word [ebp - 0x174]
add ecx, edx
mov word [ebp - 0x218], cx
jmp 0x404967
movsx eax, word [ebp - 0x150]
movsx ecx, word [ebp - 0x11c]
add eax, ecx
mov word [ebp - 0x13c], ax
mov edx, dword [ebp - 0x190]
mov al, byte [edx]
mov byte [ebp - 0x189], al
mov ecx, dword [ebp - 0x78]
add ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0xd0], ecx
mov edx, dword [ebp - 0x90]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x190]
movsx edx, byte [ecx]
xor eax, edx
movsx edx, byte [ebp - 0x81]
movsx ecx, byte [ebp - 0x151]
sar edx, cl
cmp eax, edx
jg 0x404967
mov eax, dword [ebp - 0xe0]
or eax, dword [ebp - 0x1e4]
mov dword [ebp - 0xec], eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x1c8]
push edx
push 0xc
lea eax, [ebp - 0x1dc]
push eax
call dword [sym.imp.ole32.dll_BindMoniker]
mov dword [ebp - 0x21c], eax
movzx edx, word [ebp - 0x1a0]
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0xb0]
mov word [ecx], dx
mov edx, dword [ebp - 0xb0]
movzx eax, word [edx]
push eax
movzx ecx, word [ebp - 0x150]
push ecx
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
push eax
mov edx, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x90]
mov cl, byte [ecx]
call fcn.00401890
mov edx, dword [0x416c88]
and edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xe4]
add ecx, dword [eax]
cmp edx, ecx
jae 0x40499c
mov edx, dword [ebp - 0xc4]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x205]
add eax, ecx
mov edx, dword [ebp - 0x98]
mov byte [edx], al
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0x1d0]
mov dword [0x412014], eax
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ecx]
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xc8]
mov dword [ebp - 0xcc], ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov edx, dword [ebp - 0x200]
and edx, dword [ebp - 0x5c]
mov dword [ebp - 0x34], edx
mov al, byte [ebp - 0x205]
mov byte [ebp - 0x3d], al
movzx ecx, word [0x412c80]
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
add ecx, eax
mov word [ebp - 0x210], cx
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0x124], ecx
mov edx, dword [ebp - 0xb0]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
sub eax, edx
movzx ecx, word [0x412008]
mov edx, dword [ebp - 0x148]
movzx edx, word [edx]
sub ecx, edx
cmp eax, ecx
jne 0x404ab0
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x224], ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x412014]
xor eax, dword [edx]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ecx]
mov dword [0x416c90], edx
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x19c], eax
movsx edx, word [0x41200c]
movsx ecx, word [ebp - 0x13c]
shl edx, cl
mov word [ebp - 0xf8], dx
lea eax, [ebp - 0x81]
mov dword [ebp - 0xd8], eax
lea ecx, [ebp - 0x17d]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x174]
and eax, ecx
mov word [ebp - 0x94], ax
jmp 0x404b05
mov edx, dword [ebp - 0x190]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x90]
movsx edx, byte [ecx]
sub eax, edx
movsx edx, byte [ebp - 0xd1]
movsx ecx, byte [ebp - 0x151]
sar edx, cl
cmp eax, edx
jge 0x404b05
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
push ecx
movzx edx, word [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x13c]
mov cl, byte [ebp - 0xd1]
call fcn.00401890
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x14], edx
movsx eax, byte [ebp - 0x151]
movsx ecx, byte [ebp - 0x81]
sub eax, ecx
movsx edx, byte [ebp - 0xd1]
mov ecx, dword [ebp - 0xd8]
movsx ecx, byte [ecx]
add edx, ecx
cmp eax, edx
jl 0x404b64
mov edx, dword [ebp - 0x148]
movzx eax, word [edx]
push eax
movzx ecx, word [ebp - 0xf8]
push ecx
mov edx, dword [ebp - 0x148]
movzx eax, word [edx]
push eax
mov dx, word [0x41200c]
mov cl, byte [ebp - 0x81]
call fcn.00401890
jmp 0x405498
movzx ecx, word [ebp - 0x174]
mov edx, dword [ebp - 0xb0]
movzx eax, word [edx]
sub ecx, eax
movzx edx, word [ebp - 0x28]
movzx eax, word [ebp - 0xa4]
add edx, eax
cmp ecx, edx
jl 0x405498
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx]
sub edx, dword [0x412014]
mov dword [ebp - 0x200], edx
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x1cc]
mov ecx, dword [ecx]
or ecx, dword [edx]
cmp eax, ecx
jge 0x404c26
mov edx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov edx, dword [ebp - 0x7c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x5c]
shr edx, cl
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x1d0]
shl eax, cl
cmp edx, eax
jae 0x404c26
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x118]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ecx]
add edx, dword [0x416c88]
mov dword [ebp - 0xe4], edx
movzx eax, byte [ebp - 0x17d]
movzx ecx, byte [ebp - 0xf9]
sub eax, ecx
mov edx, dword [ebp - 0x98]
mov byte [edx], al
movzx eax, word [ebp - 0x174]
mov ecx, dword [ebp - 0x148]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xb0]
mov word [ecx], ax
lea edx, [ebp - 0xcc]
mov dword [ebp - 0x1d8], edx
mov dword [ebp - 0x64], 0xf0fd
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x108]
add ecx, dword [edx]
mov dword [ebp - 0x124], ecx
movsx eax, word [ebp - 0x150]
movsx ecx, word [ebp - 0x11c]
sub eax, ecx
mov word [0x412018], ax
cmp dword [ebp - 0x128], 0xf078
jae 0x404e25
movsx edx, byte [ebp - 0xd1]
movsx eax, byte [ebp - 0x151]
add edx, eax
mov byte [ebp - 0x189], dl
movzx ecx, word [ebp - 0x94]
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x148]
mov word [edx], cx
movzx eax, byte [ebp - 0x51]
movzx ecx, byte [ebp - 0xf9]
sub eax, ecx
mov byte [ebp - 0x131], al
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
xor eax, dword [ebp - 0xd0]
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x200]
mov ecx, dword [0x416c88]
shl edx, cl
mov eax, dword [ebp - 0x184]
mov dword [eax], edx
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0xdc]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x170]
or ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0xa8], ecx
mov edx, dword [ebp - 0x8c]
add edx, dword [ebp - 4]
mov eax, dword [ebp - 0x1cc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xf9]
and edx, eax
mov ecx, dword [ebp - 0x16c]
mov byte [ecx], dl
movzx edx, word [ebp - 0x198]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x194], ax
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xb0]
movzx eax, word [edx]
add ecx, eax
mov word [0x412c80], cx
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x5c]
sub edx, dword [ecx]
mov dword [ebp - 0x1d0], edx
mov eax, dword [ebp - 0x128]
add eax, 0x24
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x1d8]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xec]
mov eax, dword [ebp - 0x7c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1cc]
add edx, dword [eax]
mov dword [ebp - 0x50], edx
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x1d0]
mov eax, dword [ebp - 8]
mov dword [eax], edx
movzx ecx, word [0x412c80]
movzx edx, word [ebp - 0x174]
add ecx, edx
mov word [ebp - 0x210], cx
movzx eax, byte [ebp - 0x1ed]
mov ecx, dword [ebp - 0xc4]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x51], al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x17c], eax
movzx eax, word [0x412008]
mov ecx, dword [ebp - 0x148]
movzx edx, word [ecx]
and eax, edx
mov ecx, dword [ebp - 0xb0]
mov word [ecx], ax
jmp 0x404c80
mov edx, dword [ebp - 0x90]
mov al, byte [edx]
mov byte [ebp - 0x1e5], al
cmp dword [ebp - 0x64], 0x11696
ja 0x4051e9
mov ecx, dword [ebp - 0xe4]
xor ecx, dword [ebp - 0x5c]
mov dword [0x416c88], ecx
movzx edx, word [ebp - 0x188]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
mov word [ebp - 0x198], ax
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xa8]
shl eax, cl
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xc4]
movzx ecx, byte [eax]
sar edx, cl
mov byte [ebp - 0x205], dl
mov ecx, dword [ebp - 0x148]
movzx edx, word [ecx]
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
or edx, ecx
mov word [ebp - 0x94], dx
mov edx, dword [ebp - 0x108]
mov eax, dword [ebp - 0xc8]
add eax, dword [edx]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0x200]
add edx, dword [ecx]
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x1d4]
mov edx, dword [ebp - 0x118]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0xc8]
mov dword [ebp - 0x170], eax
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x16c]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0x30]
mov byte [eax], dl
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 8]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [0x416c8c]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x114]
mov eax, dword [edx]
add eax, dword [0x416c88]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x1ac]
add ecx, dword [ebp - 0xf0]
mov dword [ebp - 4], ecx
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x130]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x1d4]
mov eax, dword [ebp - 0x1d8]
mov dword [eax], edx
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x1cc]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x50]
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0xc8]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0xdc]
mov dword [eax], edx
movsx edx, byte [ebp - 0x1e5]
movsx ecx, byte [ebp - 0x151]
shl edx, cl
mov byte [ebp - 0x189], dl
movzx eax, byte [ebp - 0x3d]
movzx ecx, byte [ebp - 0x17d]
or eax, ecx
mov byte [ebp - 0x205], al
movzx edx, word [ebp - 0x218]
movzx eax, word [ebp - 0x28]
xor edx, eax
mov word [0x412008], dx
mov ecx, dword [ebp - 0x78]
and ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 8]
mov dword [edx], ecx
mov eax, dword [0x416c8c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0xd0], ecx
movzx edx, byte [ebp - 0x1ed]
mov eax, dword [ebp - 0xc4]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x17d], dl
movzx edx, word [ebp - 0x94]
movzx eax, word [0x412c80]
and edx, eax
mov word [ebp - 0x174], dx
mov ecx, dword [ebp - 0x1d8]
mov edx, dword [ebp - 0x124]
sub edx, dword [ecx]
mov dword [ebp - 0x1d4], edx
mov eax, dword [ebp - 0x1d0]
add eax, dword [ebp - 0xe4]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x118]
add edx, dword [eax]
mov dword [ebp - 0x1e4], edx
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x1d8]
mov dword [eax], edx
mov ecx, dword [0x416c8c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x114]
add edx, dword [eax]
mov ecx, dword [0x416c8c]
mov dword [ecx], edx
movzx edx, byte [ebp - 0x1ed]
movzx ecx, byte [ebp - 0x17d]
shl edx, cl
mov eax, dword [ebp - 0x16c]
mov byte [eax], dl
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0xe4]
xor edx, dword [ecx]
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xdc]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 4], edx
movsx eax, word [ebp - 0x13c]
movsx ecx, word [ebp - 0xf8]
or eax, ecx
mov word [ebp - 0x150], ax
mov edx, dword [ebp - 0x90]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0xd1]
and eax, ecx
mov byte [ebp - 0x81], al
mov edx, dword [ebp - 0x68]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x220]
sub eax, ecx
mov edx, dword [ebp - 0x68]
mov word [edx], ax
mov eax, dword [ebp - 0x16c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xc4]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0xf9], cl
mov ecx, dword [ebp - 0x5c]
sub ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x9c]
sub edx, dword [ebp - 0x1ac]
mov dword [0x412010], edx
mov eax, dword [0x416c90]
and eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x1d8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x78]
add eax, dword [edx]
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0xdc]
mov edx, dword [0x412010]
add edx, dword [ecx]
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
mov edx, dword [ebp - 0x148]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0xb0]
mov word [edx], cx
mov eax, dword [ebp - 0x64]
add eax, 0x7d
mov dword [ebp - 0x64], eax
movzx ecx, byte [ebp - 0x51]
movzx edx, byte [ebp - 0x1ed]
sub ecx, edx
mov byte [ebp - 0x205], cl
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x1d4]
shl eax, cl
mov dword [ebp - 0x170], eax
jmp 0x404e33
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0x78]
mov ecx, dword [ecx]
shr edx, cl
mov eax, dword [ebp - 0x114]
mov dword [eax], edx
mov ecx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x9c]
cdq
idiv dword [ecx]
mov dword [ebp - 0xa8], eax
movzx edx, word [ebp - 0x1a0]
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
or edx, ecx
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
movzx eax, word [0x412c80]
xor ecx, eax
cmp edx, ecx
jl 0x405443
mov cx, word [ebp - 0x28]
mov word [ebp - 0x1a4], cx
mov edx, dword [ebp - 0xc4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x51], al
lea eax, [ebp - 0x1e5]
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x2c], 0xd140
jae 0x405336
movsx ecx, word [0x41200c]
movsx edx, word [ebp - 0xf8]
add ecx, edx
mov word [ebp - 0x150], cx
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ebp - 0x8c]
and edx, dword [ecx]
mov dword [ebp - 0x9c], edx
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x16c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x30]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x205], cl
movzx ecx, word [ebp - 0x210]
mov edx, dword [ebp - 0xb0]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x1a0], cx
mov ecx, dword [ebp - 0xd0]
sub ecx, dword [ebp - 0x1d0]
mov dword [0x412014], ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x81
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x19c]
sar eax, cl
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0x1ac]
xor ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x224], ecx
jmp 0x40526d
mov dword [ebp - 0x110], 0x412c88
mov edx, dword [ebp - 0x12c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
shl eax, cl
mov dword [ebp - 0x5c], eax
movzx ecx, byte [ebp - 0x131]
mov edx, dword [ebp - 0x98]
movzx eax, byte [edx]
or ecx, eax
mov byte [ebp - 0x205], cl
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx]
and edx, dword [ebp - 0x5c]
mov eax, dword [0x416c8c]
mov ecx, dword [ebp - 0x1d0]
add ecx, dword [eax]
cmp edx, ecx
ja 0x4053b7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
lea edx, [ebp - 0xa4]
mov dword [ebp - 0x1b4], edx
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0xc8]
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0xc], ecx
jmp 0x4053db
movzx edx, word [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0x34]
push eax
movzx ecx, word [ebp - 0xf8]
push ecx
movzx edx, word [ebp - 0x11c]
push edx
call fcn.00401f80
add esp, 0x10
mov dword [ebp - 0x204], 0x40d190
mov eax, dword [ebp - 0x190]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x151]
add ecx, edx
movsx eax, byte [ebp - 0xd1]
movsx edx, byte [0x412004]
add eax, edx
cmp ecx, eax
jne 0x40541c
mov eax, dword [ebp - 0xf0]
xor eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe4]
and edx, dword [ebp - 0x200]
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x1d0]
mov edx, dword [0x416c8c]
mov dword [edx], ecx
jmp 0x405481
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xcc]
mov dword [section..data], ecx
movzx edx, word [ebp - 0x94]
push edx
movzx eax, word [ebp - 0x11c]
push eax
movzx ecx, word [ebp - 0x210]
push ecx
mov dx, word [0x41200c]
mov cl, byte [ebp - 0x81]
call fcn.00401890
movzx edx, word [ebp - 0x13c]
push edx
mov eax, dword [ebp - 0xa8]
push eax
call fcn.00401320
add esp, 8
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0xe0]
add edx, dword [ecx]
mov dword [ebp - 0x9c], edx
movzx eax, byte [ebp - 0x17d]
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0x1ed], al
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x220]
add eax, ecx
mov word [0x412008], ax
jmp 0x405590
mov edx, dword [ebp - 0x170]
sub edx, dword [ebp - 4]
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x218]
add ecx, edx
mov eax, dword [ebp - 0x68]
mov word [eax], cx
movzx ecx, byte [ebp - 0x51]
movzx edx, byte [ebp - 0xf9]
sub ecx, edx
mov byte [ebp - 0x17d], cl
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x184]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x78], edx
movsx eax, word [ebp - 0x11c]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xe3
je 0x40558b
cmp dword [ebp - 0x258], 0x272
je 0x405550
jmp 0x405590
mov ecx, dword [ebp - 0xe0]
add ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x130]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe0]
and eax, dword [ebp - 0x170]
mov dword [section..data], eax
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0xa8]
sub edx, dword [ecx]
mov dword [ebp - 0xcc], edx
jmp 0x405590
call fcn.00405ea0
movzx eax, word [ebp - 0x94]
push eax
movzx ecx, word [ebp - 0xa4]
push ecx
mov edx, dword [ebp - 0x1cc]
mov eax, dword [edx]
push eax
movzx ecx, word [ebp - 0x174]
push ecx
movzx edx, word [ebp - 0x94]
push edx
call fcn.00402060
jmp 0x405603
lea eax, [ebp - 0xe4]
push eax
push 0xb2
lea ecx, [ebp - 0x50]
push ecx
push 0xeb
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x1b8]
push eax
call sub.WINSPOOL.DRV_GetFormW
mov dword [ebp - 0x138], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [0x416c88]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1a8]
mov dword [eax], edx
call fcn.00405ea0
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x200]
mov eax, dword [ebp - 8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x98]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x17d]
sub edx, eax
mov byte [0x412c82], dl
movzx ecx, byte [ebp - 0x51]
movzx edx, byte [0x412c82]
and ecx, edx
mov byte [ebp - 0x205], cl
mov eax, dword [ebp - 0x190]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0xd1]
add ecx, edx
mov byte [ebp - 0x151], cl
movsx eax, word [ebp - 0x11c]
movsx ecx, word [ebp - 0xf8]
sub eax, ecx
mov word [ebp - 0x13c], ax
mov edx, dword [ebp - 0xb8]
mov eax, dword [ebp - 8]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov dword [ebp - 0xbc], edx
movsx eax, byte [ebp - 0xd1]
mov ecx, dword [ebp - 0x90]
movsx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x190]
movsx ecx, byte [edx]
movsx edx, byte [ebp - 0x81]
or ecx, edx
cmp eax, ecx
jle 0x405753
movzx eax, word [ebp - 0x220]
movzx ecx, word [ebp - 0x210]
xor eax, ecx
mov word [ebp - 0x94], ax
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
add eax, dword [ebp - 0xbc]
mov dword [0x416c88], eax
push 0xd7
mov ecx, dword [ebp - 0x1ec]
push ecx
push 0x9c
push 0xd5
lea edx, [ebp - 0x16c]
push edx
push 0xd2
push 0xaf
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
mov dword [ebp - 0x21c], eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0xdc]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x118]
mov dword [ecx], eax
mov edx, dword [ebp - 0xb0]
movzx eax, word [edx]
push eax
movzx ecx, word [ebp - 0x210]
push ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x68]
movzx edx, word [ecx]
push edx
movzx eax, word [ebp - 0x210]
push eax
call fcn.00402060
jmp 0x405782
mov ecx, dword [ebp - 0xb0]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp - 0x68]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x1e4]
push edx
movzx eax, word [ebp - 0x210]
push eax
movzx ecx, word [ebp - 0x220]
push ecx
call fcn.00402060
movzx edx, byte [ebp - 0x17d]
mov eax, dword [ebp - 0x98]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0xf9], dl
movzx ecx, word [ebp - 0x94]
movzx edx, word [ebp - 0x220]
sub ecx, edx
mov eax, dword [ebp - 0x68]
mov word [eax], cx
mov ecx, dword [ebp - 0x130]
mov edx, dword [ecx]
and edx, dword [ebp - 0xe8]
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0x1ac]
add eax, dword [ebp - 0xcc]
mov dword [section..data], eax
mov ecx, dword [ebp - 8]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 8]
mov dword [eax], edx
mov ecx, dword [ebp - 4]
or ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 0x80]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x1ac]
sar eax, cl
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx]
xor edx, dword [ebp - 0xe4]
mov dword [ebp - 0x34], edx
jmp 0x405842
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x78]
add ecx, dword [eax]
mov edx, dword [ebp - 0xb8]
mov dword [edx], ecx
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
xor ecx, dword [ebp - 4]
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xdc]
mov ecx, dword [edx]
call section..text
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
add ecx, dword [section..data]
mov dword [ebp - 0x50], ecx
lea edx, [ebp - 0x168]
push edx
push str.CMb6Kq_MN_R4
call dword [sym.imp.ole32.dll_CLSIDFromProgID]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 0xdc]
mov dword [ecx], eax
mov edx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x78]
and eax, dword [edx]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ecx]
sub ecx, dword [edx]
cmp eax, ecx
ja 0x4058c5
mov edx, dword [ebp - 0x148]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xb0]
movzx edx, word [ecx]
add eax, edx
mov word [ebp - 0x220], ax
movzx eax, byte [ebp - 0x17d]
mov ecx, dword [ebp - 0x16c]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0xf9], al
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0xb0]
movzx eax, word [edx]
push eax
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0x148]
movzx eax, word [edx]
push eax
call fcn.00402060
jmp 0x40594e
movzx edx, word [ebp - 0x220]
mov eax, dword [ebp - 0xb0]
movzx ecx, word [eax]
add edx, ecx
movzx eax, word [ebp - 0x210]
mov ecx, dword [ebp - 0x68]
movzx ecx, word [ecx]
shl eax, cl
cmp edx, eax
jle 0x40594e
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xf9]
and eax, ecx
mov byte [ebp - 0x17d], al
push 0x8e
mov edx, dword [section..data]
push edx
call fcn.00401320
add esp, 8
mov eax, dword [ebp - 0x16c]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x17d]
sar edx, cl
mov byte [ebp - 0xf9], dl
mov eax, dword [ebp - 0xd0]
or eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xb8]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x1e4]
and edx, dword [section..data]
mov eax, dword [ebp - 0xdc]
mov dword [eax], edx
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 4]
sub edx, dword [ecx]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x170]
add ecx, dword [eax]
mov dword [ebp - 0x1e4], ecx
movsx edx, byte [ebp - 0xd1]
movsx eax, byte [ebp - 0x151]
and edx, eax
mov byte [ebp - 0x81], dl
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xdc]
mov dword [eax], edx
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0xe8]
sub edx, dword [ecx]
mov dword [ebp - 0x1e4], edx
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xcc]
mov dword [section..data], ecx
mov edx, dword [ebp - 0x16c]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x17d]
sub eax, ecx
mov byte [ebp - 0x205], al
lea edx, [ebp - 0xb8]
push edx
push 0x2e
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.ole32.dll_OleRegGetUserType]
mov dword [ebp - 0x104], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx]
mov eax, dword [ebp - 8]
add edx, dword [eax]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], edx
push 0x97
mov edx, dword [ebp - 0x170]
push edx
call fcn.00401320
add esp, 8
mov eax, dword [ebp - 0x19c]
pop esi
mov esp, ebp
pop ebp
ret 0x10