Function at 0x43189e
Capabilities:
Allocate thread local storage
Authenticate hmac
Check http status code
Identify system language via api

Disassembly:
mov eax, 0x4cc6d5
call fcn.004cc0e0
sub esp, 0x32c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov eax, dword [0x4ce8c4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], 0x5d6c
cmp dword [ebp - 0x1c], 0x60ee
jle 0x431916
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x2c0]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4318ee
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2c0]
call fcn.00402d9f
inc edi
cmp edi, 0x23ce
jl 0x4318d0
inc esi
cmp esi, 0x7c27
jl 0x4318ce
mov dword [ebp - 0x14], 0x6b63
cmp dword [ebp - 0x14], 0x6ded
jle 0x431994
xor edi, edi
xor esi, esi
mov dword [ebp - 0x20], esi
mov ebx, esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], 0x485f
mov esi, ebx
mov ebx, 0x5d98
mov eax, esi
xor eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x80]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x431959
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00402d9f
dec esi
dec ebx
jne 0x431940
mov ebx, dword [ebp - 0x28]
dec ebx
mov dword [ebp - 0x28], ebx
dec dword [ebp - 0x24]
jne 0x431939
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x5661
jl 0x43192d
inc edi
cmp edi, 0x5e99
jl 0x431928
mov dword [ebp - 0x18], 0x9c8
and dword [ebp - 4], 0
cmp dword [ebp - 0x1c], 0x5a04
jge 0x4319b3
push str.usvdvfzx_dwnvi_hhi_laus_qbisabpis_omdqbdtl_xulqh_jwxgwii_ndkwpqg
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x1744
cmp dword [ebp - 0x20], 0x1a1b
jle 0x431a11
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x290]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4319e9
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x290]
call fcn.00402d9f
inc edi
cmp edi, 0x5cb6
jl 0x4319cb
inc esi
cmp esi, 0x190
jl 0x4319c9
mov dword [ebp - 4], 2
cmp dword [ebp - 0x14], 0x6a1a
jge 0x431a2c
push str.rdn_kixd_crtacex_kdbarbs_dzftfjcu_utjjtyso
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x18], 0x25fc
jle 0x431b11
mov dword [ebp - 0x1c], 0x4103
cmp dword [ebp - 0x1c], 0x44bc
jle 0x431a8a
xor edi, edi
xor esi, esi
mov dword [ebp - 0x14], esi
mov ebx, esi
mov esi, 0x805a
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec ebx
dec esi
jne 0x431a5b
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x2114
jl 0x431a54
inc edi
cmp edi, 0x4f26
jl 0x431a4f
jmp [edi]
mov dword [ebp - 0x24], 0x66dd
cmp dword [ebp - 0x24], 0x670c
jle 0x431b4a
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x6fc8
jl 0x431b25
inc esi
cmp esi, 0x77c6
jl 0x431b23
mov dword [ebp - 4], 6
cmp dword [ebp - 0x20], 0x16d2
jge 0x431b65
push str.uiyzbr_zskcbjxu_xivhxowc_gkn_vmfef_wadybpqa_vam_sbf_kkah
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x5c27
cmp dword [ebp - 0x20], 0x5ef0
jle 0x431bdf
push 0
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x1c], esi
xor edi, edi
mov dword [ebp - 0x14], edi
and dword [ebp - 0x18], 0
mov eax, esi
cdq
idiv edi
mov dword [ebp - 0x28], edx
mov edi, 0x36d0
mov esi, dword [ebp - 0x18]
mov eax, esi
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add esi, dword [ebp - 0x28]
dec edi
jne 0x431ba1
mov edi, dword [ebp - 0x14]
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x5589
mov esi, dword [ebp - 0x1c]
jl 0x431b8d
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0xb69
jl 0x431b88
inc ebx
cmp ebx, 0xa2c
jl 0x431b83
mov dword [ebp - 0x28], 0x5487
cmp dword [ebp - 0x28], 0x55e2
jle 0x431c7d
xor esi, esi
mov dword [ebp - 0x1c], esi
xor edi, edi
lea eax, [edi + esi]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0x336e
mov esi, eax
xor ebx, ebx
mov eax, esi
and eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xb0]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x431c27
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.00402d9f
inc ebx
cmp ebx, 0x638a
jl 0x431c0b
dec esi
dec dword [ebp - 0x14]
jne 0x431c09
inc edi
cmp edi, 0x147e
mov esi, dword [ebp - 0x1c]
jl 0x431bfa
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x673f
jl 0x431bf8
push 0x47c
push 0x15a9
push 0
push 0x1ab1
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [ebp - 0x38]
add eax, 0x9b7ed4d6
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 8
cmp dword [ebp - 0x24], 0x641e
jge 0x431ca7
mov edx, str.lvtvx_ahplfx_ynjejaff_lkqril_lvvok_cczdwhtes_rkryr_cwcre_rlocgenwi_mjgcgna_tdcoltpth
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x20], 0x5a6b
jge 0x431cca
mov edx, str.pfswi_hbhyiiie_oybfzu_hyne_ycdfrdnv_twduy_eka_nhuhyv_bgqh_joyujy_wxnli_gvfw
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x1635
cmp dword [ebp - 0x1c], 0x19ba
jle 0x431d14
xor esi, esi
mov edi, esi
mov ebx, 0xf85
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec edi
dec ebx
jne 0x431ce7
inc esi
cmp esi, 0x4eb3
jl 0x431ce0
push 0x236b
push 0x127d
push ebx
call dword [sym.imp.USER32.dll_InflateRect]
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x28], 0x5270
jge 0x431d2f
push str.gpplytjjf_zfzn_cvutgpk_jzq
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x4ca0
cmp dword [ebp - 0x20], 0x4db1
jle 0x431d7d
xor esi, esi
mov dword [ebp - 0x14], esi
xor edi, edi
mov ebx, esi
mov esi, 0x2d5a
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add ebx, edi
dec esi
jne 0x431d51
inc edi
cmp edi, 0x468f
mov esi, dword [ebp - 0x14]
jl 0x431d4a
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x31d6
jl 0x431d48
mov dword [ebp - 0x18], 0x79f
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1c], 0x1279
jge 0x431da3
mov edx, str.ppuh_sicmjt_hiys_ugdlsxw_xzofd_bzmq_ajtjyb_vvxb_ccbahrw_vlrqqhu_bfssp
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x20], 0x4b0a
jge 0x431dc6
mov edx, str.fqaccgmx_vrk_meaoxn_jpskzrdl
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x18], 0x23a9
jle 0x431f5d
mov dword [ebp - 0x14], 0x4d76
cmp dword [ebp - 0x14], 0x4ebe
jle 0x431e45
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
lea ecx, [ebp - 0x200]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x431e06
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x200]
call fcn.00402d9f
inc edi
cmp edi, 0x5ca6
jl 0x431deb
inc esi
cmp esi, 0x39a6
jl 0x431de9
push 0xd67
push 0
push 0xf81
push 0x965
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov dword [ebp - 0x1c], 0x48ca
cmp dword [ebp - 0x1c], 0x4966
jle 0x431e7b
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x2f6c
jl 0x431e59
inc esi
cmp esi, 0x64b9
jl 0x431e57
add dword [ebx], 0x2def56a5
invalid
mov dword [ebp - 0x20], 0x2cb
cmp dword [ebp - 0x20], 0x3fd
jle 0x431fd3
xor esi, esi
mov dword [ebp - 0x14], esi
xor edi, edi
xor ebx, ebx
mov eax, esi
cdq
idiv edi
mov esi, edx
mov eax, esi
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xe0]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x431f9c
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xe0]
call fcn.00402d9f
inc ebx
cmp ebx, 0x2e2b
jl 0x431f7d
inc edi
cmp edi, 0x363f
mov esi, dword [ebp - 0x14]
jl 0x431f74
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x48c4
jl 0x431f72
mov dword [ebp - 0x28], 0xcc9
mov dword [ebp - 0x24], 0x3d4f
cmp dword [ebp - 0x24], 0x3e8b
jle 0x432079
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov dword [ebp - 0x14], esi
and dword [ebp - 0x18], 0
mov eax, edi
cdq
idiv esi
mov esi, edx
mov edi, dword [ebp - 0x18]
mov eax, esi
mov ecx, edi
shl eax, cl
and eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0x2f0]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x432028
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2f0]
call fcn.00402d9f
inc edi
cmp edi, 0x126c
jl 0x432008
ror dword [ebx - 0x76b9138b], 0x75
in al, dx
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x7e2d
mov edi, dword [ebp - 0x1c]
jl 0x431ffa
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x82a
jl 0x431ff5
inc ebx
cmp ebx, 0x77bc
jl 0x431ff0
push 0x26b9
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x20], 0x20f
jge 0x432094
push str.kca_kvporwy_rhiup_cjwy_krsgazp_kbsvcuz_neszxw
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x28], 0x1930
jle 0x4321a4
push edi
neg byte [esi + 0x2a67bb21]
and dword [ecx - 0x36f4c79d], esi
cli
push edi
scasb al, byte es:[edi]
dec esp
pop ebp
mov bh, 0x6d
jge 0x432046
lodsb al, byte [esi]
invalid
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x24], 0x3d1e
jge 0x4321bf
push str.pips_tjyvdqd_sdmwdvhv_cuxoxhvjp_eoef_mirresp_oafusdvsw_mmilcsdo_dbxooi_kplfyn_lcngbifbe_gpfgr
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x3b47
cmp dword [ebp - 0x24], 0x3eb2
jle 0x4321fc
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x50e
jl 0x4321d7
inc esi
cmp esi, 0x7848
jl 0x4321d5
mov dword [ebp - 0x28], 0x22c6
cmp dword [ebp - 0x28], 0x23ac
jle 0x4322aa
push 0xc3c
push 0xef3
push 0xfe0
push 0x28b
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
xor edi, edi
mov dword [ebp - 0x20], edi
xor esi, esi
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x18], edi
mov ecx, esi
mov esi, edi
shl esi, cl
xor edi, edi
mov dword [ebp - 0x14], 0x66
mov eax, edi
xor eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x110]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x432266
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x110]
call fcn.00402d9f
add edi, ebx
dec dword [ebp - 0x14]
jne 0x43224a
inc ebx
cmp ebx, 0x796f
jl 0x432241
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x1ef1
mov edi, dword [ebp - 0x20]
jl 0x432236
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x503f
jl 0x432231
mov dword [ebp - 0x2c], 0x3ce
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x24], 0x3823
jge 0x4322d0
mov edx, str.osjrhz_sxvxjbxe_qtm_zrui_mcmheeq
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x6e63
cmp dword [ebp - 0x20], 0x71bc
jle 0x432326
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
xor ebx, ebx
mov eax, edi
cdq
idiv esi
mov edi, edx
mov eax, ebx
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0x73eb
jl 0x4322f4
inc esi
cmp esi, 0x1140
mov edi, dword [ebp - 0x14]
jl 0x4322eb
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x1a3d
jl 0x4322e9
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x28], 0x227a
jge 0x432341
push str.mjlquxnk_cwhtmyeyd_tywhtm_brvmtpl_zuocncwt_moguexk_ipkqmi_whh_ammkacsia_rrdqijiem_edo_stdqpwfk_gywo
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x3eea
cmp dword [ebp - 0x24], 0x3f65
jle 0x4323b4
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov dword [ebp - 0x14], esi
and dword [ebp - 0x28], 0
mov dword [ebp - 0x18], edi
mov ecx, esi
sar edi, cl
mov esi, dword [ebp - 0x28]
mov eax, edi
mov ecx, esi
shl eax, cl
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x77c0
jl 0x43236f
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x93f
mov edi, dword [ebp - 0x1c]
jl 0x432361
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x7322
jl 0x43235c
inc ebx
cmp ebx, 0x28e2
jl 0x432357
cmp dword [ebp - 0x2c], 0x22c0
jle 0x4324ce
mov dword [ebp - 0x14], 0x634f
cmp dword [ebp - 0x14], 0x64a2
jle 0x432419
xor esi, esi
xor edi, edi
mov eax, edi
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x230]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4323f1
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x230]
call fcn.00402d9f
inc edi
cmp edi, 0x46ed
jl 0x4323d5
inc esi
cmp esi, 0x7fd3
jl 0x4323d3
fcomp dword [edi + 0x4d]
pop es
invalid
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x20], 0x6a8a
jge 0x4324ed
mov edx, str.ppomzi_krql_rlpyb_pcyptm_xvanefa_tbtrsltb_bobnlp_vmmjqr_wwovhoqwj_gatfozq_qqisnrpru_klbbrdswe_zbbks
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x4684
cmp dword [ebp - 0x20], 0x4746
jle 0x43258e
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov eax, edi
cdq
idiv esi
mov edi, edx
mov dword [ebp - 0x14], 0x596e
xor ebx, ebx
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x140]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x43253a
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x140]
call fcn.00402d9f
inc ebx
cmp ebx, 0x29ed
jl 0x43251c
dec edi
dec dword [ebp - 0x14]
jne 0x43251a
inc esi
cmp esi, 0x4918
mov edi, dword [ebp - 0x1c]
jl 0x43250c
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x7b13
jl 0x43250a
push 0
push 0x87
push 0xdb9
push 0x1a5e
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x24], 0x3e94
jge 0x4325ad
mov edx, str.eag_bhozjqozi_htknryd
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0xa3a
mov dword [ebp - 0x24], 0x761
cmp dword [ebp - 0x24], 0x82a
jle 0x43263a
push 0
push 0
push 0xb44
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor esi, esi
mov dword [ebp - 0x14], esi
xor edi, edi
xor ebx, ebx
mov dword [ebp - 0x2c], esi
mov ecx, edi
sar esi, cl
mov eax, esi
mov ecx, ebx
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x50]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x432606
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x50]
call fcn.00402d9f
inc ebx
cmp ebx, 0x580b
jl 0x4325eb
inc edi
cmp edi, 0x145e
mov esi, dword [ebp - 0x14]
jl 0x4325e2
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x123e
jl 0x4325e0
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x20], 0x4578
jge 0x432655
push str.tdua_vtzn_hcrv_xoouaxl_ksxkd_ndfu_xocb_jzqzoaocv_rngf_rcwr_zhxrr_alxkdqsk_nvmprq_vpxue
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x112d
cmp dword [ebp - 0x18], 0x12f2
jle 0x4326c8
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov dword [ebp - 0x14], esi
and dword [ebp - 0x20], 0
mov dword [ebp - 0x2c], edi
mov ecx, esi
sar edi, cl
mov esi, dword [ebp - 0x20]
mov eax, edi
mov ecx, esi
sar eax, cl
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0xcbf
jl 0x432683
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0xa84
mov edi, dword [ebp - 0x1c]
jl 0x432675
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x78f6
jl 0x432670
inc ebx
cmp ebx, 0x2439
jl 0x43266b
cmp dword [ebp - 0x28], 0x1d9e
jle 0x432876
mov dword [ebp - 0x20], 0x328f
cmp dword [ebp - 0x20], 0x352c
jle 0x432762
xor esi, esi
mov dword [ebp - 0x1c], esi
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], 0x34a9
xor edi, edi
mov esi, dword [ebp - 0x28]
xor ebx, ebx
mov dword [ebp - 0x2c], esi
mov ecx, edi
sar esi, cl
mov eax, ebx
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x170]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x432720
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x170]
call fcn.00402d9f
inc ebx
cmp ebx, 0x292
jl 0x432704
inc edi
cmp edi, 0x5995
mov esi, dword [ebp - 0x28]
jl 0x4326fb
mov esi, dword [ebp - 0x1c]
add dword [ebp - 0x28], esi
dec dword [ebp - 0x14]
jne 0x4326f6
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x3df3
jl 0x4326ea
fisttp dword [ebx]
cmpsb byte [esi], byte es:[edi]
cli
test byte [ecx - 0x40], bl
sahf
lds edx, [ecx]
dec ebp
mov edx, 0x809ccab8
jb 0x432795
loopne 0x43276c
cld
mov cl, byte [esi + 0xe9eb283]
ljmp 0x41a2
inc esp
pop ebx
mov esp, 0x66d0b575
xchg edi, eax
cmp eax, 0xe041383a
mov eax, dword [0x1112a3c1]
retf 0x93ed
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x24], 0x383
jge 0x432891
push str.ptvtnghs_zrpdfqck_fhiylgn_hduudcqe
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x56fe
cmp dword [ebp - 0x14], 0x5942
jle 0x4328ed
xor esi, esi
xor edi, edi
mov eax, edi
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x260]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4328c5
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x260]
call fcn.00402d9f
inc edi
cmp edi, 0x47c0
jl 0x4328a9
inc esi
cmp esi, 0x2473
jl 0x4328a7
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x18], 0xf10
jge 0x43290c
mov edx, str.hrwoaywn_jeptpsr_osn_cvwuqiqg_vsdsm_bdtkw_oeeayxql_uiepcaksz_cyaqw_htydrfc_thlzf_xhticpk
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
and eax, 0x9b7ed4d6
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x14], 0x55c4
jge 0x432936
push str.lurqabuf_uzufr_tkoivqvr_lyrfjqyp_fymt_xpfqoffbp_ajuusxy_wqfjin_lytkc_jceyv_ramwcuuq_npysnnw
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x4b89
cmp dword [ebp - 0x18], 0x4dcb
jle 0x432991
xor esi, esi
xor edi, edi
mov ebx, 0x75c3
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x43296d
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1a0]
call fcn.00402d9f
add edi, esi
dec ebx
jne 0x432953
inc esi
cmp esi, 0xbcc
jl 0x43294c
mov dword [ebp - 0x24], 0x2fb
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x18], 0x4970
jge 0x4329b3
push str.ygn_phmfk_qtry_tmbkju_vzymcwna_ochzunyh_sxkq_oqga
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x7dce
cmp dword [ebp - 0x20], 0x7e34
jle 0x432a2c
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
mov eax, edi
cdq
idiv esi
mov eax, edx
neg eax
mov dword [ebp - 0x2c], eax
mov edi, ebx
mov esi, 0x457b
mov ebx, eax
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add edi, ebx
dec esi
jne 0x4329eb
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x310
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x1c]
jl 0x4329d6
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x21e
jl 0x4329d1
inc ebx
mov dword [ebp - 0x1c], ebx
cmp ebx, 0x43bf
jl 0x4329cc
cmp dword [ebp - 0x24], 0x1fb3
jle 0x432bc3
mov dword [ebp - 0x1c], 0x7fa1
cmp dword [ebp - 0x1c], 0x8127
jle 0x432ad7
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov dword [ebp - 0x2c], edi
mov ecx, esi
mov esi, edi
shl esi, cl
xor edi, edi
mov eax, edi
xor eax, ebx
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x320]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x432a82
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x320]
call fcn.00402d9f
inc edi
cmp edi, 0x7916
jl 0x432a64
inc ebx
cmp ebx, 0x33f
jl 0x432a62
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x2a7c
mov edi, dword [ebp - 0x14]
jl 0x432a57
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0xfed
jl 0x432a52
push 0x195a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
inc ecx
int1
sub dword [edi + 0x4c], eax
push 0x3e739d8a
inc ecx
ret
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x20], 0x7c81
jge 0x432be2
mov edx, str.sgzja_srrnoufeh_nmxclnq_rjvq_mst_buhyishhs_irqgh_qqehgyf_bcsrxpzf_byrbkirke_vniw_tzssafs_iltig
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x4ae
cmp dword [ebp - 0x14], 0x4f9
jle 0x432c38
xor edi, edi
mov dword [ebp - 0x18], edi
xor esi, esi
xor ebx, ebx
mov eax, edi
cdq
idiv esi
mov edi, edx
mov eax, ebx
or eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0xa1d
jl 0x432c06
inc esi
cmp esi, 0x987
mov edi, dword [ebp - 0x18]
jl 0x432bfd
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x41f7
jl 0x432bfb
mov dword [ebp - 0x18], 0x9c5
cmp dword [ebp - 0x18], 0xbe6
jle 0x432c72
xor esi, esi
xor edi, edi
mov eax, esi
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x31e8
jl 0x432c4c
inc esi
cmp esi, 0x72b3
jl 0x432c4a
mov dword [ebp - 0x2c], 0x8b6
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x14], 0xd5
jge 0x432c98
mov edx, str.jrxzttlkw_xcu_frsrj_fqensgka_dnakcgwv_lberz_jcv_eun
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x18], 0x65a
jge 0x432cbb
mov edx, str.gewkbhcug_qbqhcw_aepjphc_nodqmruv_bzi_agvvkq_hhbclnd_wiymx
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0xa01
cmp dword [ebp - 0x20], 0xd07
jle 0x432d2b
xor edi, edi
xor esi, esi
mov dword [ebp - 0x18], esi
mov ebx, esi
mov esi, 0x292f
mov eax, edi
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0x1d0]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x432cf9
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1d0]
call fcn.00402d9f
dec ebx
dec esi
jne 0x432cdd
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x6eaa
jl 0x432cd6
inc edi
cmp edi, 0xe99
jl 0x432cd1
mov dword [ebp - 0x24], 0x2ec9
cmp dword [ebp - 0x24], 0x2f1b
jle 0x432d7f
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x68]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x432d5a
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x68]
call fcn.00402d9f
inc edi
cmp edi, 0x41ee
jl 0x432d3f
inc esi
cmp esi, 0x5882
jl 0x432d3d
cmp dword [ebp - 0x2c], 0x1fc2
jle 0x432f31
mov dword [ebp - 0x1c], 0x360f
cmp dword [ebp - 0x1c], 0x3826
jle 0x432e25
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov eax, edi
cdq
idiv esi
mov eax, edx
mov dword [ebp - 0x2c], eax
xor edi, edi
mov esi, eax
mov ecx, ebx
sar esi, cl
mov eax, esi
mov ecx, edi
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x98]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x432ddc
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x98]
call fcn.00402d9f
inc edi
cmp edi, 0x1eae
jl 0x432dbe
inc ebx
cmp ebx, 0x5365
mov eax, dword [ebp - 0x2c]
jl 0x432db6
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x3408
mov edi, dword [ebp - 0x14]
jl 0x432daa
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x3d3b
jl 0x432da5
mov dword [ebp - 0x18], 0xcfb
cmp dword [ebp - 0x18], 0xdbd
jle 0x432e5e
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x4063
jl 0x432e39
inc esi
cmp esi, 0x3b16
jl 0x432e37
sub dword [edx + 0xa22f0eb], esi
cld
and byte [edi + 0x235cbe39], dl
or ebp, dword [edi]
scasd eax, dword es:[edi]
pop es
imul ecx, dword [ebx - 0x1c], 0xf16ffb77
ret
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x20], 0x87d
jge 0x432f4c
push str.pubqblahc_rnvffef_shmpjsrgq
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x5ac6
cmp dword [ebp - 0x14], 0x5ce7
jle 0x432f89
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x50e7
jl 0x432f64
inc esi
cmp esi, 0xb40
jl 0x432f62
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x24], 0x2e9f
jge 0x432fa4
push str.btfeucmg_joxixzn_yqb_dji_evcol_thsczbqi_jwqcqwhg_iuh_kduwutrkc_ens_jhegnpcln
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x2510
cmp dword [ebp - 0x1c], 0x2714
jle 0x433020
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
xor edi, edi
xor esi, esi
xor ebx, ebx
lea eax, [esi + edi]
and eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xc8]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x432fef
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xc8]
call fcn.00402d9f
inc ebx
cmp ebx, 0x5141
jl 0x432fd2
inc esi
cmp esi, 0x7ea5
jl 0x432fd0
inc edi
cmp edi, 0x1298
jl 0x432fce
mov eax, dword [ebp - 0x38]
and eax, 0x9b7ed4d6
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x4890
cmp dword [ebp - 0x20], 0x4b7c
jle 0x433095
xor esi, esi
xor ebx, ebx
mov dword [ebp - 0x18], 0x21e
xor edi, edi
mov eax, ebx
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0xf8]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x433066
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.00402d9f
inc edi
cmp edi, 0x18bc
jl 0x433048
add ebx, esi
dec dword [ebp - 0x18]
jne 0x433046
inc esi
cmp esi, 0x33ff
jl 0x43303d
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x14], 0x5721
jge 0x4330b4
mov edx, str.tgygt_ahac_aiurypk_vscqntqxb_uhsvorz_mdooujnsy_fwebtbd_cnsvqqtf_azk_jvwm_ljl_dvwmj_uycx_ewpufjp
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x1c], 0x230c
jge 0x4330d3
push str.jnmuvd_trgsdg_wsgm
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x53eb
cmp dword [ebp - 0x24], 0x5477
jle 0x43316d
xor edi, edi
xor esi, esi
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x14], 0x2bbd
xor esi, esi
mov dword [ebp - 0x18], 0x1ca0
mov eax, edi
mov ecx, esi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x128]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x433122
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x128]
call fcn.00402d9f
add esi, ebx
dec dword [ebp - 0x18]
jne 0x433104
mov esi, dword [ebp - 0x1c]
add ebx, esi
dec dword [ebp - 0x14]
jne 0x4330fb
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x6126
jl 0x4330f2
inc edi
cmp edi, 0x2942
jl 0x4330ed
push 0
push 0
push 0xc4f
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov dword [ebp - 0x2c], 0x81
mov dword [ebp - 4], 0x44
cmp dword [ebp - 0x20], 0x4828
jge 0x43318f
push str.agjkwgjy_fogrhcxna_dpfjzwm
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x2bbc
cmp dword [ebp - 0x14], 0x2d6a
jle 0x433209
push 0x86a
push 0xb9c
push 0
call dword [sym.imp.GDI32.dll_PtInRegion]
xor esi, esi
xor edi, edi
xor ebx, ebx
lea eax, [ebx + edi]
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x158]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4331d8
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x158]
call fcn.00402d9f
inc ebx
cmp ebx, 0x23e5
jl 0x4331bb
inc edi
cmp edi, 0x771c
jl 0x4331b9
inc esi
cmp esi, 0x731
jl 0x4331b7
mov dword [ebp - 4], 0x46
cmp dword [ebp - 0x24], 0x504e
jge 0x433224
push str.hbunoo_mdklf_wicsd_khepe_fkdlfhxw_axlwte_zmwzeh_juurdzc_xrtmuiha_fsjl_dsatienwp_wnpxvnbk_apgveuzgh_wdhttdgi
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x23ae
jle 0x433365
mov dword [ebp - 0x18], 0x1b00
cmp dword [ebp - 0x18], 0x1cd5
jle 0x433284
xor esi, esi
xor edi, edi
xor ebx, ebx
mov eax, edi
cdq
idiv ebx
mov eax, esi
mov ecx, edx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0x55a8
jl 0x43324b
inc edi
cmp edi, 0x5daf
jl 0x433249
inc esi
cmp esi, 0xb54
jl 0x433247
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov esi, 0x47ad25aa
and ch, ch
popal
add dword [edx - 0xc], 0xffffffad
jge 0x4332ee
retf
pop ss
cld
pop eax
xchg edx, eax
xor esp, ebx
or eax, 0x2b8ed90a
sbb dword [edx], 0xffffffef
mov esp, 0xcea5d73b
loope 0x433312
dec esi
push esp
mov dl, 0x3a
aaa
imul edx, dword [esi + 0x75], 0x7849bab0
xor eax, dword [ecx - 0x4b]
stc
outsd dx, dword [esi]
sbb byte [ebp - 0x28fe029e], al
push edx
mov al, byte [0x34c90e6f]
fist dword [esi]
xchg esp, eax
add al, 0x89
push ebx
wait
test dword [ebx - 0x20], 0x3a006c8a
mov esp, 0xcf5a9c7d
xchg esp, eax
jmp 0x7da172b5
mov dword [ebp - 0x20], 0x53f4
cmp dword [ebp - 0x20], 0x5541
jle 0x4333c9
xor esi, esi
xor edi, edi
xor ebx, ebx
lea eax, [edi + esi]
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0x188]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x433398
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x188]
call fcn.00402d9f
inc ebx
cmp ebx, 0x18a8
jl 0x43337b
inc edi
cmp edi, 0x4bb8
jl 0x433379
inc esi
cmp esi, 0x3c15
jl 0x433377
mov dword [ebp - 0x24], 0x38eb
cmp dword [ebp - 0x24], 0x3b44
jle 0x433421
xor esi, esi
xor edi, edi
mov eax, edi
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x1b8]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4333f9
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1b8]
call fcn.00402d9f
inc edi
cmp edi, 0x3eff
jl 0x4333dd
inc esi
cmp esi, 0x1629
jl 0x4333db
mov dword [ebp - 4], 0x4a
cmp dword [ebp - 0x14], 0x2afd
jge 0x43343c
push str.bdyhvk_nxnphawc_fgso_wrxi_bpchx_mrdrr_sohe
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], 0x2698
cmp dword [ebp - 0x38], 0x2a31
jle 0x4334a0
xor esi, esi
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x14], 0x4f39
xor edi, edi
xor esi, esi
mov dword [ebp - 0x18], 0x4193
mov eax, ebx
or eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add esi, edi
dec dword [ebp - 0x18]
jne 0x433469
inc edi
cmp edi, 0x1cc6
jl 0x433460
mov esi, dword [ebp - 0x1c]
add ebx, esi
dec dword [ebp - 0x14]
jne 0x43345e
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x1ffe
jl 0x433455
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x4c
cmp dword [ebp - 0x20], 0x5335
jge 0x4334c4
push str.ajhnqb_miek_opjxmgf_dcsafi_veq_tarqxg_qakaj_xkhelfmw
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x4c56
cmp dword [ebp - 0x1c], 0x4ec5
jle 0x4334fd
xor esi, esi
mov edi, esi
mov ebx, 0x642a
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec edi
dec ebx
jne 0x4334e1
inc esi
cmp esi, 0x7eaa
jl 0x4334da
mov dword [ebp - 4], 0x4e
cmp dword [ebp - 0x24], 0x35c2
jge 0x433518
push str.whlpodo_bpuaqqajr_iln_xutsqxed_gxeilb_fgbljfwzm_ibcoeznt_nectpxxfo
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x3852
cmp dword [ebp - 0x20], 0x3b5e
jle 0x43357b
xor edi, edi
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x18], 0x3eaf
mov eax, ebx
mov ecx, esi
shl eax, cl
and eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec esi
dec dword [ebp - 0x18]
jne 0x43353f
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x2706
jl 0x433535
inc ebx
cmp ebx, 0x48f8
jl 0x433530
inc edi
cmp edi, 0x8dd
jl 0x43352e
mov dword [ebp - 4], 0x50
cmp dword [ebp - 0x38], 0x2400
jge 0x43359a
mov edx, str.aqfpjuzr_enw_oldjqdnfv_zsbja_viak_oukn_avtsghv_gbpqxxzh_lryal_lim_bma_pnlzci_beu
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], 0x7e9
mov dword [ebp - 4], 0x52
cmp dword [ebp - 0x1c], 0x4893
jge 0x4335c4
mov edx, str.rzakkkqyt_ftnctmi_yeeivxp_lse
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0xf51
cmp dword [ebp - 0x24], 0xf97
jle 0x4335ff
xor esi, esi
xor edi, edi
mov eax, edi
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x860
jl 0x4335dc
inc esi
cmp esi, 0x7bd0
jl 0x4335da
mov dword [ebp - 4], 0x54
cmp dword [ebp - 0x20], 0x3602
jge 0x43361e
mov edx, str.pmmrhvok_gysywoctj_fipfv_hfosffs_gkz_cru_lxaxbbumg_gdkbildy_uhj_rzco
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x2fa6
cmp dword [ebp - 0x20], 0x32a9
jle 0x433691
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
and dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], edi
mov ecx, esi
sar edi, cl
mov esi, dword [ebp - 0x2c]
mov eax, edi
mov ecx, esi
shl eax, cl
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x144d
jl 0x43364c
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x5a32
mov edi, dword [ebp - 0x14]
jl 0x43363e
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x397e
jl 0x433639
inc ebx
cmp ebx, 0x7f5e
jl 0x433634
cmp dword [ebp - 0x38], 0x18a2
jle 0x4338ac
mov dword [ebp - 0x14], 0x67c1
cmp dword [ebp - 0x14], 0x6835
jle 0x4336f6
xor esi, esi
xor ebx, ebx
xor edi, edi
xor eax, eax
mov dword [ebp - 0x18], eax
xor eax, edi
lea ecx, [ebx + esi]
or eax, ecx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x40c8
jl 0x4336b9
inc edi
cmp edi, 0x21e7
jl 0x4336b4
inc ebx
cmp ebx, 0x1ea4
jl 0x4336b2
inc esi
cmp esi, 0x798f
jl 0x4336b0
mov dword [ebp - 0x1c], 0x1c4d
cmp dword [ebp - 0x1c], 0x1ef8
jle 0x43374f
xor esi, esi
xor ebx, ebx
xor edi, edi
xor ecx, ecx
mov dword [ebp - 0x18], ecx
lea eax, [edi + ebx]
shl eax, cl
and eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
mov ecx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x5282
jl 0x433711
inc edi
cmp edi, 0x28d9
jl 0x43370c
inc ebx
cmp ebx, 0x7f20
jl 0x43370a
inc esi
cmp esi, 0x328c
jl 0x433708
mov dword [ebp - 0x18], 0x5191
cmp dword [ebp - 0x18], 0x556d
jle 0x433785
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x5082
jl 0x433763
inc esi
cmp esi, 0x7d08
jl 0x433761
les ebp, [edi - 0x2d]
bnd js 0x43379f
out 0xf9, eax
stosb byte es:[edi], al
adc eax, 0x47705640
invalid
aad 0xb7
pop edi
xchg esi, eax
mov dword [ebp - 4], 0x5c
cmp dword [ebp - 0x24], 0xe8c
jge 0x4338cb
mov edx, str.nkeng_maeflm_luzjvm_qpqbkquit_mcqr_yxxcxn_nzs_flbpmn_xnr_ykqi_pqzr
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x5e
cmp dword [ebp - 0x20], 0x2c96
jge 0x4338ee
mov edx, str.ekdvihxh_tjvxcymf_ybukml_chj_uoabnpuj_lnctcrh_ibhskh
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x34], 0x7c0
mov dword [ebp - 0x1c], 0x3e32
cmp dword [ebp - 0x1c], 0x3ee9
jle 0x43396f
push 0
push 0x1207
push 0x7b8
push 0
push 0x466
push 0x1d8a
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
xor esi, esi
mov edi, esi
mov ebx, 0x42b1
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x1e8]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x43394c
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1e8]
call fcn.00402d9f
dec edi
dec ebx
jne 0x433932
inc esi
cmp esi, 0x5c8f
jl 0x43392b
mov dword [ebp - 0x20], 0x650e
cmp dword [ebp - 0x20], 0x66f8
jle 0x4339cb
xor edi, edi
xor esi, esi
mov dword [ebp - 0x14], esi
mov ebx, esi
mov dword [ebp - 0x18], 0x7d0f
xor esi, esi
mov eax, esi
and eax, ebx
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x1572
jl 0x433991
dec ebx
dec dword [ebp - 0x18]
jne 0x43398f
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x60a3
jl 0x433986
inc edi
cmp edi, 0x514d
jl 0x433981
cmp dword [ebp - 0x34], 0x2081
jle 0x433a9b
cmp byte [edx - 0x12c4e68], cl
lahf
lodsb al, byte [esi]
jns 0x4339fb
ret
pop ecx
invalid
mov dword [ebp - 4], 0x60
cmp dword [ebp - 0x1c], 0x3d0d
jge 0x433ab6
push str.lwnbl_scjvzxy_gwn_mxrlieimq
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x62
cmp dword [ebp - 0x20], 0x6213
jge 0x433ad9
mov edx, str.puqmx_cfwztb_map
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], 0x6cde
cmp dword [ebp - 0x18], 0x6f61
jle 0x433b3d
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
lea ecx, [ebp - 0x218]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x433b15
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x218]
call fcn.00402d9f
inc edi
cmp edi, 0x5e89
jl 0x433afa
inc esi
cmp esi, 0x6b48
jl 0x433af8
mov dword [ebp - 0x1c], 0x1b48
cmp dword [ebp - 0x1c], 0x1c34
jle 0x433ba1
xor esi, esi
xor edi, edi
xor ebx, ebx
lea eax, [ebx + edi]
add eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x248]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x433b70
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x248]
call fcn.00402d9f
inc ebx
cmp ebx, 0x7f8
jl 0x433b53
inc edi
cmp edi, 0x694a
jl 0x433b51
inc esi
cmp esi, 0x163b
jl 0x433b4f
mov dword [ebp - 0x30], 0x1245
mov dword [ebp - 4], 0x64
cmp dword [ebp - 0x18], 0x69cf
jge 0x433bc3
push str.arwyjh_wvyu_syylstca_mtpg_qvezwnyi_qfjccdq_giysqmwdr_kbzhlgv
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x1e87
cmp dword [ebp - 0x20], 0x2017
jle 0x433c2c
xor edi, edi
xor esi, esi
mov dword [ebp - 0x14], esi
xor ebx, ebx
mov dword [ebp - 0x18], 0x1f7b
xor esi, esi
mov eax, ebx
mov ecx, esi
shl eax, cl
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x29b2
jl 0x433be9
mov esi, dword [ebp - 0x14]
add ebx, esi
dec dword [ebp - 0x18]
jne 0x433be7
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x154c
jl 0x433bde
inc edi
cmp edi, 0x6102
jl 0x433bd9
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 4], 0x66
cmp dword [ebp - 0x1c], 0x1b1b
jge 0x433c47
push str.gbvl_qggyhvzix_qkjmprtt_ikjaawfzs_gnipvrux_rse_rqccolenu_wjqupijr
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x30], 0x240f
jle 0x433dcd
mov dword [ebp - 0x18], 0x31d0
cmp dword [ebp - 0x18], 0x3550
jle 0x433c97
xor esi, esi
xor edi, edi
mov eax, edi
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x4858
jl 0x433c6c
inc esi
cmp esi, 0x1743
jl 0x433c6a
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [ebp - 0x14], 0x700d
cmp dword [ebp - 0x14], 0x71e2
jle 0x433cf5
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
xor esi, esi
xor edi, edi
mov eax, edi
xor eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x278]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x433ccd
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x278]
call fcn.00402d9f
inc edi
cmp edi, 0x111a
jl 0x433cb1
inc esi
cmp esi, 0x4499
jl 0x433caf
sahf
add esp, dword [ebp - 0x769bb232]
hlt
mov dword [ebp - 4], 0x6c
cmp dword [ebp - 0x20], 0x1b3b
jge 0x433dec
mov edx, str.sygvxt_jhjuiwbw_qmdakgv_rcisp_mnubsb_qtsmdnko_sktoco_kxrbgi_csx_baveelmkf_mzcynuc_gxxmtjvx
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x86
mov dword [ebp - 0x1c], 0x2351
cmp dword [ebp - 0x1c], 0x2550
jle 0x433e51
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x433e29
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2a8]
call fcn.00402d9f
inc edi
cmp edi, 0x2e98
jl 0x433e0b
inc esi
cmp esi, 0x6341
jl 0x433e09
mov dword [ebp - 0x20], 0x614
cmp dword [ebp - 0x20], 0x9d0
jle 0x433ea8
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
lea ecx, [ebp - 0x2d8]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x433e80
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2d8]
call fcn.00402d9f
inc edi
cmp edi, 0x111d
jl 0x433e65
inc esi
cmp esi, 0x48cb
jl 0x433e63
cmp dword [ebp - 0x30], 0x1981
jle 0x434023
mov dword [ebp - 0x18], 0x4ba1
cmp dword [ebp - 0x18], 0x4dcc
jle 0x433eec
xor esi, esi
xor edi, edi
mov eax, edi
and eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x1411
jl 0x433ec9
inc esi
cmp esi, 0x6af
jl 0x433ec7
mov dword [ebp - 0x14], 0x57b4
cmp dword [ebp - 0x14], 0x5862
jle 0x433f6e
push 0x6ef
push 0x60d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x308]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x433f3e
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x308]
call fcn.00402d9f
inc edi
cmp edi, 0x548d
jl 0x433f20
inc esi
cmp esi, 0xba5
jl 0x433f1e
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
xchg dword [edi - 0x658a219f], ecx
xchg esp, eax
lds ebp, [esi + 0x3dc37f28]
movsd dword es:[edi], dword [esi]
pop esi
sbb dword [edi], ecx
mov bl, 6
cmp bh, cl
sahf
cmp al, byte [ecx + 0x4f06297a]
and eax, 0xa2d7f615
and ah, byte [edx]
jns 0x433f3a
pop ds
mov al, byte [0x2236850]
add byte [eax], al
mov dword [ebp - 4], 0x72
cmp dword [ebp - 0x1c], 0x20e5
jge 0x43403e
push str.umoynq_nhyqee_cfsjxs_dzf_zujlzfs_vap_dgot_cgfr_pjtunopf_ggomjjpp_qurbyfwe
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x3208
cmp dword [ebp - 0x30], 0x3557
jle 0x4340a1
push 0x30f
call dword [sym.imp.KERNEL32.dll_TlsFree]
xor esi, esi
mov dword [ebp - 0x18], esi
xor edi, edi
xor ebx, ebx
mov eax, esi
cdq
idiv edi
mov esi, edx
mov eax, esi
mov ecx, ebx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0x139f
jl 0x43406d
inc edi
cmp edi, 0x5084
mov esi, dword [ebp - 0x18]
jl 0x434064
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x5f64
jl 0x434062
mov dword [ebp - 4], 0x74
cmp dword [ebp - 0x20], 0x3fc
jge 0x4340bc
push str.klnjrudg_urodcmmem_xoghgkhki_odqhfa
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x2c00
cmp dword [ebp - 0x30], 0x2f73
jle 0x434127
xor esi, esi
mov edi, esi
mov ebx, 0x7229
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x338]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4340f3
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x338]
call fcn.00402d9f
dec edi
dec ebx
jne 0x4340d9
inc esi
cmp esi, 0x2cb1
jl 0x4340d2
push 0x257
push 0x212f
push ebx
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret