Function at 0x411424
Capabilities:
Allocate thread local storage
Get file size
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1e8
push esi
mov dword [ebp - 0xc], 0xc6
mov dword [ebp - 0x30], 0x51
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x108], 0x68
mov dword [ebp - 0x18], 0xcc
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x34], 0x53
jmp 0x411482
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x68
jae 0x4114ec
mov dword [ebp - 0x168], 0x49
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x120], 0x85
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x124], 0x5e
mov dword [ebp - 0x11c], 0
mov ecx, dword [ebp - 0x11c]
xor ecx, dword [ebp - 0x120]
mov dword [ebp - 0x124], ecx
jmp 0x411479
mov edx, dword [ebp - 0xc]
xor edx, dword [0x4217e0]
mov eax, dword [0x421804]
and eax, dword [ebp - 0x1c]
cmp edx, eax
jae 0x41150a
mov dword [ebp - 0x50], 1
jmp 0x411511
mov dword [ebp - 0x50], 0
cmp dword [ebp - 0x50], 0
jne 0x41154d
mov ecx, dword [ebp + 0xc]
add ecx, dword [ebp - 0xc]
mov edx, dword [0x4217e8]
imul edx, dword [0x4217ec]
cmp ecx, edx
jne 0x411537
mov dword [ebp - 0x54], 1
jmp 0x41153e
mov dword [ebp - 0x54], 0
cmp dword [ebp - 0x54], 0
jne 0x41154d
mov dword [ebp - 0x58], 0
jmp 0x411554
mov dword [ebp - 0x58], 1
cmp dword [ebp - 0x58], 0
jne 0x411591
mov eax, dword [0x42181c]
add eax, dword [0x421820]
mov ecx, dword [str.AJ]
add ecx, dword [ebp - 4]
cmp eax, ecx
jbe 0x41157b
mov dword [ebp - 0x5c], 1
jmp 0x411582
mov dword [ebp - 0x5c], 0
cmp dword [ebp - 0x5c], 0
jne 0x411591
mov dword [ebp - 0x60], 0
jmp 0x411598
mov dword [ebp - 0x60], 1
cmp dword [ebp - 0x60], 0
jne 0x4115d1
mov edx, dword [ebp - 0x18]
or edx, dword [ebp - 4]
mov eax, dword [ebp - 0x24]
imul eax, dword [0x421814]
cmp edx, eax
jne 0x4115bb
mov dword [ebp - 0x64], 1
jmp 0x4115c2
mov dword [ebp - 0x64], 0
cmp dword [ebp - 0x64], 0
jne 0x4115d1
mov dword [ebp - 0x68], 0
jmp 0x4115d8
mov dword [ebp - 0x68], 1
cmp dword [ebp - 0x68], 0
jne 0x411608
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x18]
jne 0x4115f7
mov edx, dword [ebp - 0x4c]
xor edx, dword [ebp - 8]
jne 0x4115f7
mov dword [ebp - 0x6c], 0
jmp 0x4115fe
mov dword [ebp - 0x6c], 1
cmp dword [ebp - 0x6c], 0
je 0x411baf
mov dword [ebp - 0x128], 0xd8
mov dword [ebp - 0x44], 0xe0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x28], 0
mov eax, dword [ebp + 8]
sub eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x128]
cmp eax, ecx
je 0x41164a
mov dword [ebp - 0x70], 1
jmp 0x411651
mov dword [ebp - 0x70], 0
cmp dword [ebp - 0x70], 0
je 0x411691
mov edx, dword [0x421808]
imul edx, dword [0x421818]
test edx, edx
jne 0x41167b
mov eax, dword [0x421814]
add eax, dword [ebp + 8]
jne 0x41167b
mov dword [ebp - 0x74], 0
jmp 0x411682
mov dword [ebp - 0x74], 1
cmp dword [ebp - 0x74], 0
je 0x411691
mov dword [ebp - 0x78], 1
jmp 0x411698
mov dword [ebp - 0x78], 0
cmp dword [ebp - 0x78], 0
je 0x4116dd
mov ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x20]
jne 0x4116b7
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x28]
jne 0x4116b7
mov dword [ebp - 0x7c], 0
jmp 0x4116be
mov dword [ebp - 0x7c], 1
cmp dword [ebp - 0x7c], 0
je 0x4116dd
mov dword [ebp - 0x17c], 8
mov eax, dword [0x4217f8]
and eax, dword [ebp - 0x44]
mov dword [0x4217e4], eax
jmp 0x411758
mov dword [ebp - 0x180], 0x73
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x38], 0
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x130], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x134]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [0x421824]
push ecx
call fcn.0040d864
add esp, 8
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x28]
mov eax, dword [0x4217fc]
or eax, dword [ebp + 0xc]
cmp edx, eax
jae 0x411774
mov dword [ebp - 0x80], 1
jmp 0x41177b
mov dword [ebp - 0x80], 0
cmp dword [ebp - 0x80], 0
jne 0x4117c5
mov ecx, dword [0x4217f8]
add ecx, dword [0x42181c]
mov edx, dword [ebp - 8]
xor edx, dword [0x421808]
cmp ecx, edx
je 0x4117a6
mov dword [ebp - 0x84], 1
jmp 0x4117b0
mov dword [ebp - 0x84], 0
cmp dword [ebp - 0x84], 0
jne 0x4117c5
mov dword [ebp - 0x88], 0
jmp 0x4117cf
mov dword [ebp - 0x88], 1
cmp dword [ebp - 0x88], 0
jne 0x41181c
mov eax, dword [0x421814]
imul eax, dword [0x421824]
mov ecx, dword [0x421820]
add ecx, dword [ebp - 0x44]
cmp eax, ecx
jbe 0x4117fd
mov dword [ebp - 0x8c], 1
jmp 0x411807
mov dword [ebp - 0x8c], 0
cmp dword [ebp - 0x8c], 0
jne 0x41181c
mov dword [ebp - 0x90], 0
jmp 0x411826
mov dword [ebp - 0x90], 1
cmp dword [ebp - 0x90], 0
jne 0x41186d
mov edx, dword [ebp - 0x28]
and edx, dword [0x4217ec]
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x30]
cmp edx, eax
jae 0x41184e
mov dword [ebp - 0x94], 1
jmp 0x411858
mov dword [ebp - 0x94], 0
cmp dword [ebp - 0x94], 0
jne 0x41186d
mov dword [ebp - 0x98], 0
jmp 0x411877
mov dword [ebp - 0x98], 1
cmp dword [ebp - 0x98], 0
jne 0x4118af
mov ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x14]
cmp ecx, edx
jne 0x41189c
mov dword [ebp - 0x9c], 1
jmp 0x4118a6
mov dword [ebp - 0x9c], 0
cmp dword [ebp - 0x9c], 0
je 0x411915
mov dword [ebp - 0x190], 3
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x13c], 0x22
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
xor eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x13c]
or ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x140]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x40], edx
jmp 0x41194a
mov eax, dword [ebp - 0x10]
and eax, dword [ebp - 0x198]
mov dword [0x421818], eax
mov ecx, dword [0x4217f0]
mov dword [0x421814], ecx
mov edx, dword [0x421814]
mov dword [0x4217f8], edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov dword [0x4217f4], eax
mov ecx, dword [ebp - 8]
xor ecx, dword [ebp + 8]
mov edx, dword [0x4217fc]
add edx, dword [0x421824]
cmp ecx, edx
jae 0x41196c
mov dword [ebp - 0xa0], 1
jmp 0x411976
mov dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0
je 0x4119be
mov eax, dword [ebp - 4]
imul eax, dword [0x421818]
mov ecx, dword [ebp - 0xc]
xor ecx, dword [ebp - 0xc]
cmp eax, ecx
jae 0x41199f
mov dword [ebp - 0xa4], 1
jmp 0x4119a9
mov dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 0
je 0x4119be
mov dword [ebp - 0xa8], 1
jmp 0x4119c8
mov dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 0
je 0x411a12
mov edx, dword [ebp - 8]
add edx, dword [ebp - 4]
mov eax, dword [0x421808]
imul eax, dword [0x4217f4]
cmp edx, eax
jne 0x4119f3
mov dword [ebp - 0xac], 1
jmp 0x4119fd
mov dword [ebp - 0xac], 0
cmp dword [ebp - 0xac], 0
je 0x411a12
mov dword [ebp - 0xb0], 1
jmp 0x411a1c
mov dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 0
je 0x411a69
mov ecx, dword [0x421800]
sub ecx, dword [ebp - 0x44]
mov edx, dword [0x4217e8]
add edx, dword [0x421808]
cmp ecx, edx
jbe 0x411a4a
mov dword [ebp - 0xb4], 1
jmp 0x411a54
mov dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0
je 0x411a69
mov dword [ebp - 0xb8], 1
jmp 0x411a73
mov dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0
je 0x411ad0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x14]
je 0x411a98
mov ecx, dword [ebp - 0x28]
and ecx, dword [ebp - 0x20]
je 0x411a98
mov dword [ebp - 0xbc], 1
jmp 0x411aa2
mov dword [ebp - 0xbc], 0
cmp dword [ebp - 0xbc], 0
je 0x411ad0
mov dword [ebp - 0x19c], 0x37
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [str.AJ]
push eax
call dword [sym.imp.USER32.dll_GetMenuItemID]
mov dword [ebp - 0x10c], eax
jmp 0x411baa
mov dword [ebp - 0x1a0], 0xc8
mov dword [ebp - 0x144], 0x37
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x1a4], 0xe6
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc0], 0x86
mov ecx, dword [ebp - 0xc0]
xor ecx, dword [ebp - 0xc8]
mov dword [ebp - 0xc4], ecx
push 0
push 0xffffffffffffffff
push str.kqtd
push 0xffffffffffffffff
push str.dmyvvo
push 0
push 0x800
call dword [sym.imp.KERNEL32.dll_CompareStringA]
mov dword [ebp - 0x144], eax
push str.RMmFeSR.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x10], eax
push str.iaSybpH
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xc0], eax
push 0
push 0xffffffffffffffff
push str.rnepmp
push 0xffffffffffffffff
push str.bafzcbkfns
push 0
push 0x800
call dword [sym.imp.KERNEL32.dll_CompareStringA]
mov dword [ebp - 0xc4], eax
push str.sUHWkGw.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 4], eax
push str.aoKfiWUBZ
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xc8], eax
jmp 0x411cda
mov dword [ebp - 0x14c], 0x7d
mov ecx, dword [0x4217e8]
push ecx
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov dword [ebp - 0xc], eax
mov eax, dword [0x42181c]
add eax, dword [ebp - 0xf4]
mov dword [0x421808], eax
mov eax, dword [0x421818]
xor edx, edx
div dword [ebp + 8]
cmp dword [0x421808], eax
jbe 0x411c13
mov dword [ebp - 0x1a8], 0x9c
mov ecx, dword [0x4217ec]
and ecx, dword [ebp - 8]
mov dword [0x421820], ecx
jmp 0x411c64
mov dword [ebp - 0x1ac], 0xb9
mov dword [ebp - 0x148], 0xac
mov dword [ebp - 0x1b0], 0x89
mov edx, dword [0x421800]
add edx, dword [0x421804]
mov dword [0x42181c], edx
mov eax, dword [str.AJ]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
mov dword [0x421800], edx
mov eax, dword [ebp - 0x30]
or eax, dword [0x421814]
mov dword [0x42181c], eax
mov esi, dword [0x421820]
or esi, dword [ebp + 8]
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.GDI32.dll_SetArcDirection]
cmp esi, eax
je 0x411c9d
mov eax, dword [0x42181c]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
jmp 0x411cda
mov dword [ebp - 0x1b4], 0xe5
mov edx, dword [ebp - 0x14c]
push edx
mov eax, dword [0x4217ec]
push eax
mov ecx, dword [0x4217f8]
push ecx
call dword [sym.imp.GDI32.dll_PolylineTo]
mov dword [0x421800], eax
mov edx, dword [0x4217e4]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.GDI32.dll_SetArcDirection]
mov dword [ebp - 0xc], eax
mov ecx, dword [0x4217e4]
imul ecx, dword [ebp - 0x18]
mov edx, dword [0x4217e8]
xor edx, dword [0x4217ec]
cmp ecx, edx
jne 0x411d00
mov dword [ebp - 0xcc], 1
jmp 0x411d0a
mov dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0
je 0x411d51
mov eax, dword [ebp - 0x2c]
add eax, dword [0x421800]
je 0x411d32
mov ecx, dword [ebp - 0x24]
xor ecx, dword [ebp - 0x1c]
je 0x411d32
mov dword [ebp - 0xd0], 1
jmp 0x411d3c
mov dword [ebp - 0xd0], 0
cmp dword [ebp - 0xd0], 0
je 0x411d51
mov dword [ebp - 0xd4], 1
jmp 0x411d5b
mov dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 0
je 0x411da5
mov edx, dword [ebp - 0x4c]
imul edx, dword [ebp - 0x1c]
mov eax, dword [0x4217e8]
sub eax, dword [0x421818]
cmp edx, eax
je 0x411d86
mov dword [ebp - 0xd8], 1
jmp 0x411d90
mov dword [ebp - 0xd8], 0
cmp dword [ebp - 0xd8], 0
je 0x411da5
mov dword [ebp - 0xdc], 1
jmp 0x411daf
mov dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0
je 0x411def
mov ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x108]
and edx, dword [ebp - 0x18]
cmp ecx, edx
jne 0x411dd8
mov dword [ebp - 0xe0], 1
jmp 0x411de2
mov dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 0
jne 0x411fd8
mov dword [ebp - 0xf8], 0x70
mov dword [ebp - 0x150], 0x67
mov dword [ebp - 0x48], 0
mov eax, dword [0x421814]
imul eax, dword [0x421824]
mov ecx, dword [0x421814]
and ecx, dword [str.AJ]
cmp eax, ecx
jne 0x411e32
mov dword [ebp - 0xe4], 1
jmp 0x411e3c
mov dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0
jne 0x411e83
mov edx, dword [0x42180c]
or edx, dword [ebp - 4]
jne 0x411e64
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x10]
jne 0x411e64
mov dword [ebp - 0xe8], 0
jmp 0x411e6e
mov dword [ebp - 0xe8], 1
cmp dword [ebp - 0xe8], 0
jne 0x411e83
mov dword [ebp - 0xec], 0
jmp 0x411e8d
mov dword [ebp - 0xec], 1
cmp dword [ebp - 0xec], 0
jne 0x411ecd
mov ecx, dword [ebp - 0x150]
add ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x48]
imul edx, dword [ebp - 0x48]
cmp ecx, edx
jbe 0x411eb6
mov dword [ebp - 0xf0], 1
jmp 0x411ec0
mov dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0
je 0x411f9f
mov dword [ebp - 0xfc], 0x13
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x1b8], 0x7b
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x160], 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xf4], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xfc], eax
push 0
mov eax, dword [ebp - 0xf4]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
je 0x411f61
mov dword [ebp - 0x154], 0x9d5
push 0
mov ecx, dword [ebp - 0xfc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
je 0x411f89
mov dword [ebp - 0x15c], 0x112
mov edx, dword [ebp - 0x100]
xor edx, dword [ebp - 0x100]
mov dword [ebp - 0x160], edx
jmp 0x411fd8
mov dword [ebp - 0x1c4], 0xa0
mov dword [ebp - 0x1c8], 0x48
mov eax, dword [0x421814]
imul eax, dword [ebp - 0xc]
mov dword [0x4217e4], eax
mov ecx, dword [0x42180c]
or ecx, dword [0x421808]
mov dword [0x421800], ecx
jmp 0x411cda
mov edx, dword [ebp - 8]
mov dword [ebp - 0x104], edx
cmp dword [ebp - 0x104], 0x74
ja case.0x411ffb.1
mov eax, dword [ebp - 0x104]
movzx ecx, byte [eax + 0x4121bc]
jmp dword [ecx*4 + 0x4121a4]
mov dword [ebp - 0x1cc], 0xf4
mov dword [ebp - 0x1d0], 0xa6
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov dword [0x42181c], eax
jmp 0x412199
mov dword [ebp - 0x1d4], 0x3e
mov dword [ebp - 0x1d8], 0x1d
mov edx, dword [ebp - 0x1c]
mov dword [0x421804], edx
mov eax, dword [0x421804]
mov dword [ebp + 0xc], eax
mov ecx, dword [0x4217e0]
push ecx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov dword [0x421814], eax
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x10c]
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayAllocDescriptor]
mov dword [ebp - 0x4c], eax
jmp 0x412199
mov ecx, dword [ebp - 0x108]
or ecx, dword [ebp - 0x10c]
mov dword [0x4217f4], ecx
mov edx, dword [0x421800]
push edx
mov eax, dword [0x42180c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegOverridePredefKey]
mov dword [0x421800], eax
jmp 0x412199
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [0x4217e4]
push edx
call dword [sym.imp.GDI32.dll_SetArcDirection]
mov dword [0x421808], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [0x42181c]
push edx
call dword [sym.imp.GDI32.dll_PolylineTo]
mov dword [ebp - 0x10], eax
jmp 0x412199
mov dword [ebp - 0x114], 0xeb
mov dword [ebp - 0x1dc], 0xa0
mov dword [ebp - 0x1e0], 0x4d
mov dword [ebp - 0x164], 0x77
mov dword [ebp - 0x110], 0xdd
mov dword [ebp - 0x118], 0x5c
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x110]
or eax, dword [ebp - 0x110]
mov dword [ebp - 0x118], eax
push str.OwREDmlqU.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x114], eax
push str.hHwhnuX.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x30], eax
push str.ULGIBrXZnsk
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x164], eax
push str.QaDNzTPgOqw
mov edx, dword [ebp - 0x114]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x118], eax
jmp 0x412199
mov eax, dword [ebp + 8]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
mov dword [0x421800], ecx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1c]
pop esi
mov esp, ebp
pop ebp
ret