Function at 0x440a02
Capabilities:
Get common file path
Read .ini file
Set environment variable

Disassembly:
mov eax, 0x4ae45b
call fcn.004adbe8
sub esp, 0x268
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x60], ecx
xor edi, edi
inc edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x80], edi
xor ebx, ebx
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x440a4d
push ebx
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
inc dword [ebp - 0x28]
mov eax, dword [0xabd040]
test al, 1
jne 0x440a70
or eax, edi
mov dword [0xabd040], eax
call fcn.004421ed
push 0x4aebce
call fcn.0049841d
pop ecx
imul eax, dword [ebp - 0x60], 0x2710
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x6c], eax
mov esi, 0xe91a049f
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x14], 0xfffffff5
jmp 0x440ad6
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x20], 0x3f365653
mov dword [ebp - 0x1c], 0x1c
jmp 0x440acd
mov dword [ebp - 0x30], ebx
jmp 0x440abb
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1ac], 0x509978f3
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 4
jl 0x440aaa
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffea
jne 0x440aa5
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe6
jge 0x440a8e
lea eax, [ebp - 0x6c]
push eax
call fcn.00442236
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
test eax, eax
je 0x440ca9
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x14], 0x77dd6887
mov dword [ebp - 0x44], 0xf14c90d2
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x40], 0x71dfd947
mov dword [ebp - 0x1c], 0xeefb6f65
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x28], 0x6a3735b2
mov dword [ebp - 0x24], 0xac31
mov dword [ebp - 0x44], 0x14fa
mov dword [ebp - 0x30], 0x37f7
cmp dword [ebp - 0x30], 0x39b9
jle 0x440bca
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov edx, ebx
mov dword [ebp - 0x28], ebx
add ecx, edx
sar eax, cl
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x200]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x440b76
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x200]
call fcn.0042ff1b
mov edx, dword [ebp - 0x28]
inc edx
mov dword [ebp - 0x28], edx
cmp edx, 0x7aeb
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
jl 0x440b58
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x4ecd
jl 0x440b53
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x69e
jl 0x440b4e
inc esi
cmp esi, 0x28c2
jl 0x440b49
push 0xcca
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x30], 0x36b1
jge 0x440be1
push str.vkqjoh_nkxd_uowusa_eouh_vaowofv_ixvecapou_bkltlc
call fcn.00498447
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x440c0a
mov dword [ebp - 0x30], ebx
jmp 0x440c20
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x17c], 0xffffffff
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x440c0f
cmp dword [ebp - 0x14], ebx
mov esi, ebx
je 0x440c2f
mov esi, edi
mov dword [ebp - 0x28], 0xfffffffe
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x1c]
sub edx, eax
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setg cl
cmp dword [ebp - 0x28], ecx
je 0x440c59
cmp dword [ebp - 0x20], ebx
mov ecx, edi
jne 0x440c5b
mov ecx, ebx
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x24]
cmp eax, ecx
cmovne edi, ebx
mov eax, dword [ebp - 0x178]
xor edx, edx
cmp edi, eax
setle dl
mov eax, dword [ebp - 0x14]
add eax, esi
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x1c], 0xffffffef
jmp 0x440c9e
mov dword [ebp - 0x44], 0x6928694a
cmp dword [ebp - 0x44], ebx
jne 0x44209e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff4
jle 0x440c8b
jmp 0x44209e
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], 0xfffffff5
push 2
pop esi
cmp dword [ebp - 0x34], 0xffffffe6
jl 0x440ddd
mov dword [ebp - 0x2c], 8
mov dword [ebp - 0x20], 0x3f365653
mov dword [ebp - 0x2c], 0x1c
cmp dword [ebp - 0x2c], 0xffffffea
je 0x440dd5
mov dword [ebp - 0x1c], 0x5129
cmp dword [ebp - 0x1c], 0x52ca
jle 0x440d65
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
mov dword [ebp - 0x30], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
cdq
idiv ecx
or edx, dword [ebp - 0x30]
mov eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0x224]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x440d25
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x224]
call fcn.0042ff1b
mov ecx, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x30d3
mov eax, dword [ebp - 0x24]
jl 0x440d05
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x5df
jl 0x440d00
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x2f5e
jl 0x440cfb
mov dword [ebp - 4], esi
cmp dword [ebp - 0x1c], 0x5092
jge 0x440d7c
push str.chrgqbz_mhbhtka_zmvbaicvj_dtn_ieegggei_gqoseditp_iyoonjbos_bsi_zjrqpuugf_nzqgzbrsb
call fcn.00498447
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x440da8
mov dword [ebp - 0x30], ebx
jmp 0x440dbe
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1bc], 0x509978f3
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 4
jl 0x440dad
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x2c]
jmp 0x440cd5
dec dword [ebp - 0x34]
jmp 0x440cb6
mov eax, dword [0xabd040]
test al, 2
jne 0x440e61
or eax, esi
mov dword [0xabd040], eax
mov dword [0xabd020], ebx
mov dword [0xabd024], ebx
push ebx
push ebx
call fcn.00442c07
mov dword [0xabd020], eax
mov dword [0xabd028], ebx
mov dword [0xabd030], ebx
mov dword [0xabd03c], 0x3f800000
mov dword [ebp - 0xc0], eax
mov dword [0xabd02c], ebx
lea eax, [ebp - 0xc0]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x174]
push eax
mov ecx, 0xabd028
call fcn.004429ac
mov dword [0xabd034], 7
mov dword [0xabd038], 8
push 0x4aebc9
call fcn.0049841d
pop ecx
push 4
lea ecx, [ebp - 0x98]
call fcn.0042fb3f
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x14], ebx
jmp 0x440e8a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x98]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x440e7a
mov dword [ebp - 0x14], ebx
jmp 0x440ea6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xc4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x440e95
mov dword [ebp - 0x14], ebx
jmp 0x440f59
mov dword [ebp - 0x28], edi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x98]
cmp dword [eax + ecx*4], ebx
je 0x440ed8
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x98]
cmp dword [eax + ecx*4], ebx
jne 0x440f63
jmp 0x440f56
push 3
lea ecx, [ebp - 0x134]
call fcn.0042fb3f
mov dword [ebp - 0x30], ebx
jmp 0x440ef9
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jl 0x440eea
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x98]
mov dword [eax + edx*4], ecx
test ecx, ecx
je 0x440f43
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x98]
cmp dword [eax + ecx*4], ebx
je 0x440f2e
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
or ecx, 0xffffffff
sub ecx, eax
mov eax, edi
jne 0x440f45
mov eax, ebx
mov dword [ebp - 0xc4], eax
lea ecx, [ebp - 0x134]
call fcn.0042fc11
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x440eb3
lea ecx, [ebp - 0x98]
call fcn.0042fc11
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x7c], xmm0
lea eax, [ebp - 0x60]
push eax
call fcn.00442298
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, 0x61928c17
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x14], 0xca8fecf7
mov dword [ebp - 0x1c], ebx
jmp 0x440fb7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x68], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x440fad
mov dword [ebp - 0x64], 3
cmp dword [ebp - 0x64], ebx
jl 0x441024
mov dword [ebp - 0x38], edi
movdqa xmm0, xmmword [0xaaf870]
movdqu xmmword [ebp - 0x18c], xmm0
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x18c]
push eax
push ebx
lea ecx, [ebp - 0xd0]
call fcn.004318a1
mov dword [ebp - 0x28], 0x5154
inc dword [ebp - 0x28]
lea ecx, [ebp - 0xd0]
call fcn.0042fc11
dec dword [ebp - 0x64]
jns 0x440fc8
mov dword [ebp - 0x14], 0xffffffe7
jmp 0x441145
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x2c], 0xd90538e0
mov dword [ebp - 0x20], 0x732bab2
mov dword [ebp - 0x1c], ebx
jmp 0x441058
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5c], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x44104a
mov dword [ebp - 0x58], edi
jmp 0x4410db
mov dword [ebp - 0x110], 0x5d76270
mov dword [ebp - 0x10c], 0x5d76270
mov dword [ebp - 0x108], 0x5d76270
mov dword [ebp - 0x104], 0x5d76270
dec dword [ebp - 0x104]
mov dword [ebp - 0x1c], 0xfffffff1
jmp 0x4410d2
mov dword [ebp - 0x28], 0xabf7c2f5
cmp dword [ebp - 0xf0], ebx
je 0x4410b6
mov eax, dword [ebp - 0x64]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
jmp 0x4410cc
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x4410cc
push 0xa6d
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x18
jle 0x441099
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0x1b
jne 0x441062
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xf8], ebx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5c]
dec eax
neg eax
sbb eax, eax
neg eax
imul eax, eax, 0x2f33
test eax, eax
je 0x441116
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x58], 0x2708cdb
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, 0x2708cdb
setg cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jne 0x441135
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], 0x28c51f7e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffed
je 0x441030
mov al, byte [ebp + 0xc]
test al, al
jne 0x441160
cmp dword [ebp - 0x30], 0
jne 0x4416ce
lea ecx, [ebp - 0x274]
push ecx
mov dl, al
mov ecx, dword [ebp - 0x60]
call fcn.00431b32
pop ecx
mov esi, eax
lea edi, [ebp - 0x7c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0xe8]
call fcn.0042fb3f
mov dword [ebp - 0x34], 0x6783
cmp dword [ebp - 0x34], 0x6ac4
jle 0x44120f
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], ebx
mov eax, edi
mov ecx, esi
shl eax, cl
mov dword [ebp - 0x3c], eax
mov edi, ebx
mov esi, ebx
mov ebx, dword [ebp - 0x3c]
mov eax, edi
cdq
idiv esi
or edx, ebx
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xabbe58
call fcn.0042fa2a
inc esi
cmp esi, 0x45e7
jl 0x4411b7
inc edi
cmp edi, 0x3d10
push 0
pop ebx
jl 0x4411b2
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x530a
mov edi, dword [ebp - 0x2c]
jl 0x4411a4
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x47c4
jl 0x44119f
push 0x253b
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
xor edi, edi
inc edi
mov dword [ebp - 0x14], ebx
jmp 0x441225
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1e8], 0x624039b6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x441214
mov dword [ebp - 4], 4
cmp dword [ebp - 0x34], 0x6487
jge 0x44124a
mov edx, str.heiig_vqbpnuvmr_xwz
mov ecx, 0xabbe58
call fcn.004313d0
or dword [ebp - 4], 0xffffffff
jmp 0x441273
push 2
pop esi
mov dword [ebp - 0x14], ebx
jmp 0x44128e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xe8]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x44127b
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x4412a7
push 0xe6b
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov eax, dword [ebp - 0xe8]
mov dword [eax], ebx
cmp dword [eax], esi
jg 0x441389
mov dword [ebp - 0x2c], 0xfe1ca2
mov dword [ebp - 0x2c], esi
cmp dword [ebp - 0x2c], ebx
mov byte [ebp - 0x15], bl
jl 0x441369
mov dword [ebp - 0x28], 0x217b
cmp dword [ebp - 0x28], 0x22ee
jle 0x44130a
mov edi, ebx
mov dword [ebp - 0x20], ebx
lea eax, [ebx + edi]
cdq
push edx
push eax
mov ecx, 0xabbe58
call fcn.0042fa2a
inc ebx
cmp ebx, 0x4df
jl 0x4412e2
inc edi
cmp edi, 0x6586
push 0
pop ebx
jl 0x4412df
xor edi, edi
inc edi
cmp byte [ebp - 0x15], 0
je 0x441316
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x28], 0x1d95
jge 0x441335
mov edx, str.munoobyhn_zdvlp_nlzaob_clujk_donizdb_ufau_pejp
mov ecx, 0xabbe58
call fcn.004313d0
or dword [ebp - 4], 0xffffffff
jmp 0x441361
dec dword [ebp - 0x2c]
jmp 0x4412c1
cmp byte [ebp - 0x15], 0
je 0x44137c
push ebx
push 0x24a1
push ebx
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
mov eax, dword [ebp - 0xe8]
inc dword [eax]
jmp 0x4412af
lea ecx, [ebp - 0xe8]
call fcn.0042fc11
cmp byte [ebp + 0xc], 0
je 0x4416ce
cmp dword [ebp - 0x74], 0
je 0x4416ce
push esi
lea ecx, [ebp - 0x170]
call fcn.0042fb3f
mov dword [ebp - 0x1c], 0xc184c506
mov dword [ebp - 0x1c], ebx
jmp 0x4413d3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x170]
mov dword [eax + ecx*4], 0x5b57
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x4413c0
mov dword [ebp - 0x1c], ebx
jmp 0x4414af
mov dword [ebp - 0x14], 0x7c8a6b95
push 3
lea ecx, [ebp - 0x128]
call fcn.0042fb3f
mov dword [ebp - 0x14], ebx
jmp 0x44140c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0x24f20479
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4413f9
mov dword [ebp - 0x14], ebx
jmp 0x441428
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x14c], 0xfffffffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x441417
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x14], ebx
jl 0x4414a1
push 0xfffffffffffffff7
pop edi
mov dword [ebp - 0x20], 0xffffffff
cmp dword [ebp - 0x14], ebx
jne 0x44149e
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x128]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x1c]
cmp edi, eax
sbb ecx, ecx
inc ecx
lea eax, [edx - 5]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
setl cl
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setl dl
sub edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, 0xffff
sbb eax, eax
add eax, 9
mov dword [ebp - 0x14c], eax
dec dword [ebp - 0x14]
jns 0x441438
xor edi, edi
inc edi
lea ecx, [ebp - 0x128]
call fcn.0042fc11
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x4413e0
lea ecx, [ebp - 0x170]
call fcn.0042fc11
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x84], eax
push edi
lea ecx, [ebp - 0xbc]
call fcn.0042fb3f
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x38], 0xb844a754
mov dword [ebp - 0x2c], 0x2cf415d7
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x4c], 0xb963ab1
mov dword [ebp - 0x24], 0xfe23a266
mov dword [ebp - 0x1c], 0x3203bd65
mov dword [ebp - 0x14], 0x8531d14
push 3
lea ecx, [ebp - 0xdc]
call fcn.0042fb3f
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x48], 0xd12f8ba7
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x38], 0x1d49
mov dword [ebp - 0x14], ebx
jmp 0x441543
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1dc], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x441536
mov dword [ebp - 0x14], ebx
jmp 0x441561
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xbc]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x44154e
mov dword [ebp - 0x14], ebx
jmp 0x44157e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xdc]
mov dword [eax + ecx*4], 0x98aaf0a9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x44156b
mov dword [ebp - 0x14], ebx
jmp 0x44159a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1cc], 0x963e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x441589
inc dword [ebp - 0x28]
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x14]
inc eax
xor ecx, ecx
cmp eax, 0x20f620a3
setg cl
add ecx, dword [ebp - 0x24]
xor edx, edx
cmp ecx, dword [esi + 4]
setge dl
sub edx, 0xa7b5
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [esi + 4], ecx
mov eax, dword [ebp - 0x48]
mov ecx, 0xb10079d6
sub ecx, eax
cmp ecx, 0xfffffffe
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x38], ebx
jne 0x44162a
mov eax, dword [ebp - 0xbc]
cmp dword [eax], ebx
mov eax, ebx
je 0x44162c
mov eax, edi
cmp dword [ebp - 0x20], eax
jne 0x441645
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x4416af
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
jmp 0x4416af
mov dword [ebp - 0x1c], 0x6fac5adf
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0xbc]
cmp ecx, dword [eax]
setg dl
xor ecx, ecx
mov eax, dword [ebp - 0xdc]
cmp edx, dword [eax]
setl cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
dec eax
neg eax
sbb eax, eax
neg eax
sub eax, 9
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1cc]
imul ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
je 0x4416a1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, 0xfffffffe
setg cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0xdc]
call fcn.0042fc11
lea ecx, [ebp - 0xbc]
call fcn.0042fc11
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x80], eax
push 2
pop esi
mov dword [ebp - 0x38], 0xade19d29
movdqa xmm0, xmmword [0xaaf830]
movdqu xmmword [ebp - 0x19c], xmm0
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x19c]
push eax
push ebx
lea ecx, [ebp - 0xa4]
call fcn.004318a1
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xa4]
mov dword [eax + 4], ecx
test ecx, ecx
jne 0x441837
mov dword [ebp - 0x144], 9
mov dword [ebp - 0x140], 9
mov dword [ebp - 0x13c], 9
mov dword [ebp - 0x138], 9
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0x7d8cf4c5
mov dword [ebp - 0x20], 0x5145ccb9
mov dword [ebp - 0x1c], ebx
jmp 0x441777
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x264], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x441766
dec dword [ebp - 0x20]
mov dword [ebp - 0x3c], 0x657d
cmp dword [ebp - 0x3c], 0x6675
jle 0x4417e5
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x20], ebx
add eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x254]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4417b4
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x254]
call fcn.0042ff1b
mov ecx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0xc45
mov eax, dword [ebp - 0x28]
jl 0x44179a
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x192a
jl 0x441795
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 8
cmp dword [ebp - 0x3c], 0x61ac
jge 0x441809
push str.lqozzz_kozank_agobt_vlxajcd_psyeyl_vwohndkj_qpmglp_gtmusnri_kffuaub
call fcn.00498447
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x441866
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x441850
push ebx
push 0x1fb9
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x441866
push ebx
push ebx
push 0x204
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
lea ecx, [ebp - 0xa4]
call fcn.0042fc11
cmp dword [ebp - 0x30], 0
jne 0x441dff
cmp dword [ebp - 0x7c], 0
jle 0x441dff
mov dword [ebp - 0x14], 0x8ade19d2
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x4c], 0x7a5a
cmp dword [ebp - 0x4c], 0x7b94
jle 0x441945
push 0x133e
push 0x11d2
call dword [sym.imp.KERNEL32.dll_Beep]
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x48], ebx
cdq
idiv ecx
mov dword [ebp - 0x38], edx
mov ecx, ebx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x3c], 0x1781
mov eax, dword [ebp - 0x2c]
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x23c]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4418f3
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x23c]
call fcn.0042ff1b
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x3c]
jne 0x4418d6
mov ecx, dword [ebp - 0x48]
inc ecx
mov dword [ebp - 0x48], ecx
cmp ecx, 0x4c8d
mov eax, dword [ebp - 0x28]
jl 0x4418c4
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x773c
jl 0x4418bf
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0xd2b
jl 0x4418ba
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x4c], 0x7a30
jge 0x441960
push str.auxfronyh_tceisohau_ayirpiii_pmo_kizvggrq_bcuvpgc_tucuj_isrm_gwyn_jxywlo_mafaqu
call fcn.00498447
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x44198c
mov dword [ebp - 0x1c], ebx
jmp 0x44199e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb0], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x441991
mov dword [ebp - 0x14], ebx
jmp 0x441a22
mov dword [ebp - 0x24], 0xfffffffb
push 3
lea ecx, [ebp - 0x158]
call fcn.0042fb3f
mov dword [ebp - 0x1c], ebx
jmp 0x4419d5
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 0x412df3d3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x4419c2
mov dword [ebp - 0x24], ebx
jmp 0x441a0f
mov dword [ebp - 0x1c], 0x5664dc9e
mov dword [ebp - 0x38], 0xf5872d9
mov dword [ebp - 0x38], 0x7ccc8959
mov dword [ebp - 0x1c], ebx
jmp 0x441a07
mov dword [ebp - 0x20], 0x145c
inc dword [ebp - 0x20]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x4419fa
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x4419e0
lea ecx, [ebp - 0x158]
call fcn.0042fc11
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jle 0x4419a9
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xb0]
sub eax, 0xf5e3d1aa
neg eax
sbb eax, eax
inc eax
mov edx, dword [ebp - 0xa8]
sub edx, eax
mov eax, dword [ebp - 0xac]
sub edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
setge cl
add ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setge dl
add edx, 0xffffefa3
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0xa8]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x1c], 0x62fd41e5
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x34], 0x1460deea
mov dword [ebp - 0x24], ebx
jmp 0x441ab5
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x20c], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x441aa4
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x441ad0
push ebx
push 0x23d9
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x4c], 0x7dd1
cmp dword [ebp - 0x4c], 0x7e98
jle 0x441b6a
mov edi, ebx
mov dword [ebp - 0x48], ebx
mov eax, ebx
mov dword [ebp - 0x3c], ebx
mov edx, ebx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x28], edi
mov ecx, eax
sar edi, cl
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x38], edi
mov ecx, edx
shl edi, cl
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xabbe58
call fcn.0042fa2a
inc ebx
cmp ebx, 0x738c
jl 0x441b07
mov edx, dword [ebp - 0x20]
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x2daa
push 0
pop ebx
mov edi, dword [ebp - 0x28]
jl 0x441afd
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp eax, 0x6335
mov edi, dword [ebp - 0x48]
jl 0x441aee
inc edi
mov dword [ebp - 0x48], edi
cmp edi, 0x3fc9
jl 0x441ae9
push 0x121c
push ebx
push ebx
push 0x149e
call dword [sym.imp.USER32.dll_RedrawWindow]
xor edi, edi
inc edi
mov dword [ebp - 0x1c], 0xfffffff3
jmp 0x441c2a
mov dword [ebp - 0x14], 0xde2167fa
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x14], 0x12
jmp 0x441c1d
mov dword [ebp - 0x20], 0xffff
mov dword [ebp - 0x24], 0x85f402be
mov dword [ebp - 0x38], 0xc245e320
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0xffffffff
cmp dword [ebp - 0x2c], ebx
je 0x441bda
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp eax, 0xeb66
setg dl
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], ebx
je 0x441c11
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], ebx
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x441b93
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
jne 0x441b76
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x4c], 0x7c1a
jge 0x441c53
mov edx, str.wkhugtc_ijglf_akn_iic_oipkecx_yxqxnpbgf_hdhfgrrke_ccbl_jbhprgsph_zqwg_xwhykwz_sqotwjx_pdqp
mov ecx, 0xabbe58
call fcn.004313d0
or dword [ebp - 4], 0xffffffff
jmp 0x441c7f
mov dword [ebp - 0x14], 0x60477862
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x38], 0x936be856
mov dword [ebp - 0x3c], 0x86335c0d
mov dword [ebp - 0x14], 0x1b
jmp 0x441ce6
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x24], 0x19
jmp 0x441cc8
cmp byte [ebp - 0x15], 0
je 0x441cc5
push 0x49c
call dword [sym.imp.USER32.dll_SetCapture]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe6
mov byte [ebp - 0x15], bl
je 0x441cb4
cmp byte [ebp - 0x15], 0
je 0x441ce3
push ebx
push 0xc18
call dword [sym.imp.USER32.dll_RemovePropA]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff2
jne 0x441ca4
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, edi
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 9
setne cl
sub ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x78], 0
je 0x441dff
push 0x2a8b
push 0x11a4
push 0x3213
push edi
push dword [ebp - 0x78]
push 0x1092
push edi
push 0x24a4
push 0x7c0d
push 0x42e4
call fcn.0043f52b
push dword [ebp - 0x78]
call fcn.0042737d
add esp, 0x2c
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0xb72fd491
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x20], 0xf38c0887
mov dword [ebp - 0x20], 0x744d0289
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x20], 0xb9a733e3
mov dword [ebp - 0x20], ebx
push edi
lea ecx, [ebp - 0x164]
call fcn.0042fb3f
mov dword [ebp - 0x28], 0x104272ba
mov dword [ebp - 0x24], ebx
jmp 0x441dbe
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], 0xae505b0b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x441dab
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x28]
cmp eax, 0xcefa
mov ecx, edi
cmovg ecx, ebx
mov eax, dword [ebp - 0x38]
imul eax, ecx
xor ecx, ecx
cmp eax, 0x92c6
setl cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x164]
call fcn.0042fc11
lea eax, [ebp - 0x60]
push eax
call fcn.00442298
mov ecx, dword [ebp - 0x30]
mov dword [eax], ecx
mov dword [ebp - 0x14], 0x24a8c6a5
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x2c], 0xadeb9459
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], 0xe8ca4045
mov dword [ebp - 0x24], ebx
jmp 0x441e30
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x100], 0xb1b9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x441e1f
mov dword [ebp - 0x14], 0xffffffeb
jmp 0x441f4f
mov dword [ebp - 0x1c], 0x661c4438
mov dword [ebp - 0x24], ebx
jmp 0x441e57
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x54], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x441e4d
cmp dword [ebp - 0x14], ebx
jne 0x441ead
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, edi
setge cl
sub ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0x54]
sub ecx, 0x290b
mov eax, ebx
je 0x441eaf
mov eax, edi
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
mov ecx, 0xffff6d7c
sub ecx, eax
mov eax, dword [ebp - 0x54]
add eax, ecx
mov ecx, dword [ebp - 0x2c]
add ecx, eax
sub ecx, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x50]
xor edx, edx
cmp ecx, eax
setl dl
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0x54]
xor edx, edx
cmp ecx, 0x1f0b
setne dl
mov eax, dword [ebp - 0x100]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x34], ebx
jne 0x441f27
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x54], edi
mov ecx, ebx
jb 0x441f29
mov ecx, edi
mov eax, dword [ebp - 0x54]
add ecx, eax
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
setl dl
cmp edx, 0xffff
jne 0x441f47
cmp dword [ebp - 0x2c], ebx
mov eax, edi
jne 0x441f49
mov eax, ebx
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x16
jl 0x441e41
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x441f6a
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
lea ecx, [ebp - 0x7c]
call fcn.0043bc50
cmp dword [ebp - 0x40], 0
jne 0x44209e
cmp dword [ebp - 0x30], 0
je 0x44209e
mov dword [ebp - 0x14], 0xe0a8eac8
mov dword [ebp - 0x14], ebx
jmp 0x441fa9
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x441fa6
push 0xb36
call dword [sym.imp.USER32.dll_GetQueueStatus]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 7
jge 0x441f92
mov dword [ebp - 0x20], 0x51fa
cmp dword [ebp - 0x20], 0x5421
jle 0x442000
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x40], ebx
lea ecx, [ebx + edi]
mov eax, esi
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xabbe58
call fcn.0042fa2a
inc ebx
cmp ebx, 0x471d
jl 0x441fc6
inc edi
cmp edi, 0x3de
push 0
pop ebx
jl 0x441fc3
inc esi
cmp esi, 0x1f04
jl 0x441fc1
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
mov dword [ebp - 0x14], 0xfffffff3
jmp 0x442055
push 3
lea ecx, [ebp - 0x11c]
call fcn.0042fb3f
mov dword [ebp - 0x40], 0x9729cf30
mov dword [ebp - 0x2c], ebx
jmp 0x442032
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x11c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x442022
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x11c]
mov dword [eax + 4], ecx
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x11c]
call fcn.0042fc11
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffb
jle 0x442009
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x20], 0x4e43
jge 0x44207a
mov edx, str.zde_zbbwekepy_gqzlk_qwpgmbxo_xwqp_hauvuww_twcbwfkup_ian_gof_wtylc_maxily
mov ecx, 0xabbe58
call fcn.004313d0
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x44]
push dword [ebp - 0x30]
call fcn.0042e8b6
pop ecx
pop ecx
mov esi, eax
mov dword [ebp - 0x88], esi
lea eax, [ebp - 0x6c]
push eax
call fcn.00442236
mov dword [eax], esi
mov eax, dword [ebp + 8]
mov edi, eax
lea esi, [ebp - 0x88]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret