Function at 0x4039f0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1fc
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x40], 0x49
mov dword [ebp - 8], 0x5c
mov dword [ebp - 0x18], 0x20
mov dword [ebp - 0x48], 0x1a
mov dword [ebp - 0x14], 0x4f
mov dword [ebp - 0x34], 0xe
mov dword [ebp - 0x58], 0x40
mov dword [ebp - 0x38], 0x1a
mov dword [ebp - 0x20], 0xa
mov dword [ebp - 0x2c], 0x63
mov dword [ebp - 0xc], 0x5c
mov dword [ebp - 0x50], 8
mov dword [ebp - 0x28], 0x3c
mov dword [ebp - 0x10], 0x48
mov dword [ebp - 0x4c], 0x61
mov dword [ebp - 0x24], 0xa
mov dword [ebp - 0x30], 0x21
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x1c], 0x39
mov dword [ebp - 0x44], 0x2c
mov dword [ebp - 0x54], 0x37
mov dword [ebp - 0x5c], 0x5e
mov eax, dword [0x83b9bc]
add eax, 1
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xd
push ecx
call fcn.0040d120
add esp, 8
mov dword [ebp - 0x60], 0
jmp 0x403ac4
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
mov eax, dword [0x83b9c4]
sub eax, 0x186e2
cmp dword [ebp - 0x60], eax
jge 0x403b05
push 0x20e4
push 0x82e6
push 0xa946
push 0x134a7
push 0x16814
push 0x148a4
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
add esp, 0x18
mov ecx, dword [ebp - 0x30]
sub ecx, 1
mov dword [ebp - 0x30], ecx
jmp 0x403abb
call fcn.0040b660
mov edx, dword [ebp - 0x10]
cmp edx, dword [0x83b994]
jge 0x403b21
mov dword [ebp - 0xb0], 1
jmp 0x403b2b
mov dword [ebp - 0xb0], 0
mov eax, dword [0x83b93c]
cmp eax, dword [ebp - 4]
jge 0x403b41
mov dword [ebp - 0xb4], 1
jmp 0x403b4b
mov dword [ebp - 0xb4], 0
mov ecx, dword [ebp - 0xb0]
or ecx, dword [ebp - 0xb4]
je 0x403c2f
mov edx, dword [ebp - 8]
mov dword [ebp - 0x190], edx
mov eax, dword [0x83b9bc]
mov dword [ebp - 0x194], eax
mov ecx, dword [0x83b9bc]
add ecx, 1
mov dword [0x83b9bc], ecx
mov edx, dword [ebp - 0x190]
cmp edx, dword [ebp - 0x194]
jge 0x403b9a
mov dword [ebp - 0xb8], 1
jmp 0x403ba4
mov dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x19c]
jge 0x403bd9
mov dword [ebp - 0xbc], 1
jmp 0x403be3
mov dword [ebp - 0xbc], 0
mov ecx, dword [0x83b994]
imul ecx, dword [0x83b940]
or ecx, dword [ebp - 0xb8]
or ecx, dword [ebp - 0xbc]
je 0x403c2f
mov edx, dword [0x83b994]
or edx, dword [0x83b990]
mov dword [ebp - 0x1a0], edx
mov eax, dword [0x83b990]
sub eax, 1
mov dword [0x83b990], eax
cmp dword [ebp - 0x1a0], 0
je 0x403c2f
mov ecx, dword [ebp - 0x20]
sub ecx, 1
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x64], 0
jmp 0x403c41
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
mov eax, dword [0x83b93c]
sub eax, 0x186d8
cmp dword [ebp - 0x64], eax
jge 0x403c6e
push 0x5997
push 0x92d9
call dword [sym.imp.USER32.dll_SetWindowLongA]
add esp, 8
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
jmp 0x403c38
mov edx, dword [0x83b940]
sub edx, 1
mov dword [0x83b940], edx
mov eax, dword [0x83b9d8]
cmp eax, dword [0x83b940]
jge 0x403c96
mov dword [ebp - 0xc0], 1
jmp 0x403ca0
mov dword [ebp - 0xc0], 0
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0x34]
jge 0x403cb4
mov dword [ebp - 0xc4], 1
jmp 0x403cbe
mov dword [ebp - 0xc4], 0
mov edx, dword [ebp - 4]
mov dword [ebp - 0x1a4], edx
mov eax, dword [0x83b990]
mov dword [ebp - 0x1a8], eax
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x1a4]
cmp edx, dword [ebp - 0x1a8]
jge 0x403cf5
mov dword [ebp - 0xc8], 1
jmp 0x403cff
mov dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc0]
and eax, dword [ebp - 0xc4]
or eax, dword [ebp - 0xc8]
je 0x403d53
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [0x83b994]
jge 0x403d53
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x20]
jge 0x403d32
mov dword [ebp - 0xcc], 1
jmp 0x403d3c
mov dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x38]
xor eax, dword [ebp - 0x28]
or eax, dword [ebp - 0xcc]
je 0x403d53
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
mov dword [ebp - 0x68], 0
jmp 0x403d65
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x48]
sub eax, 0x186ba
cmp dword [ebp - 0x68], eax
jge 0x403e7f
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x34]
jge 0x403d8a
mov dword [ebp - 0xd0], 1
jmp 0x403d94
mov dword [ebp - 0xd0], 0
mov edx, dword [ebp - 0x54]
cmp edx, dword [ebp - 0x40]
jge 0x403da8
mov dword [ebp - 0xd4], 1
jmp 0x403db2
mov dword [ebp - 0xd4], 0
mov eax, dword [0x83b9c4]
sub eax, 1
mov dword [0x83b9c4], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 1
mov dword [ebp - 0x28], ecx
mov edx, dword [0x83b9c4]
cmp edx, dword [ebp - 0x28]
jge 0x403ddf
mov dword [ebp - 0xd8], 1
jmp 0x403de9
mov dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd0]
and eax, dword [ebp - 0xd4]
and eax, dword [ebp - 0xd8]
je 0x403e7a
push 0x17700
push 0xaae0
push 0x165c
push 0x139bc
push 0x6fa4
push 0x4878
call dword [sym.imp.KERNEL32.dll_WriteFile]
add esp, 0x18
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 4]
jge 0x403e7a
mov edx, dword [0x83b9d8]
xor edx, dword [0x83b994]
mov dword [ebp - 0x1ac], edx
mov eax, dword [0x83b9bc]
mov dword [ebp - 0x1b0], eax
mov ecx, dword [0x83b994]
add ecx, 1
mov dword [0x83b994], ecx
mov edx, dword [ebp - 0x1ac]
cmp edx, dword [ebp - 0x1b0]
jge 0x403e7a
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x34]
test eax, eax
je 0x403e7a
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
jmp 0x403d5c
mov edx, dword [ebp - 0x4c]
sub edx, 0x46
push edx
mov eax, dword [ebp - 0x3c]
add eax, 0x43
push eax
mov ecx, dword [0x83b9c0]
add ecx, 0x56
push ecx
mov edx, dword [ebp - 0x18]
add edx, 0x33
push edx
mov eax, dword [0x83b9d8]
sub eax, 0x2d
push eax
mov ecx, dword [ebp - 0x40]
sub ecx, 0x3d
push ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0x34
push edx
call fcn.00422d30
add esp, 0x1c
mov eax, 0x7fbe
sub eax, dword [ebp + 0x20]
add eax, 0xac1
xor eax, 0x1fe6
mov ecx, dword [ebp + 0x10]
and ecx, 0xccd8
xor ecx, 0x8c54
mov byte [ecx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], al
mov dword [ebp - 0x6c], 0
jmp 0x403ef6
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
mov eax, dword [ebp - 0x3c]
sub eax, 7
cmp dword [ebp - 0x6c], eax
jge 0x403f9b
mov ecx, dword [0x83b9f0]
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1b4], ecx
mov edx, dword [0x83b9f4]
mov dword [ebp - 0x1b8], edx
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1b4]
cmp ecx, dword [ebp - 0x1b8]
jge 0x403f43
mov dword [ebp - 0xdc], 1
jmp 0x403f4d
mov dword [ebp - 0xdc], 0
mov edx, dword [ebp - 0x14]
cmp edx, dword [0x83b940]
jge 0x403f64
mov dword [ebp - 0xe0], 1
jmp 0x403f6e
mov dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xdc]
or eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x44]
xor ecx, dword [0x83b9fc]
or eax, ecx
je 0x403f96
mov edx, dword [0x83b9f4]
add edx, 1
mov dword [0x83b9f4], edx
jmp 0x403eed
mov eax, dword [ebp + 0x20]
add eax, 0x12c4e
xor eax, 0x6c68d1c9
mov ecx, dword [ebp + 8]
add ecx, 0x1de0
xor ecx, 0x3e77
mov dword [ecx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], eax
mov edx, dword [ebp - 0x10]
cmp edx, dword [0x83b9f4]
jge 0x403fd4
mov dword [ebp - 0xe4], 1
jmp 0x403fde
mov dword [ebp - 0xe4], 0
mov eax, dword [0x83b9f4]
cmp eax, dword [0x83b9f8]
jge 0x403ff7
mov dword [ebp - 0xe8], 1
jmp 0x404001
mov dword [ebp - 0xe8], 0
mov ecx, dword [0x83b990]
imul ecx, dword [0x83b9dc]
cmp ecx, dword [ebp - 0x54]
jge 0x40401f
mov dword [ebp - 0xec], 1
jmp 0x404029
mov dword [ebp - 0xec], 0
mov edx, dword [ebp - 8]
sub edx, 1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
and eax, dword [ebp - 0xe4]
and eax, dword [ebp - 0xe8]
or eax, dword [ebp - 0xec]
je 0x404052
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x70], 0
jmp 0x404064
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x62
cmp dword [ebp - 0x70], eax
jge 0x4040c8
mov ecx, dword [ebp - 4]
imul ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0xc]
jge 0x404087
mov dword [ebp - 0xf0], 1
jmp 0x404091
mov dword [ebp - 0xf0], 0
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0x4c]
jge 0x4040a5
mov dword [ebp - 0xf4], 1
jmp 0x4040af
mov dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf0]
and eax, dword [ebp - 0xf4]
je 0x4040c6
mov ecx, dword [ebp - 0xc]
sub ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x40405b
mov dword [ebp - 0x74], 0
jmp 0x4040da
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x28]
sub eax, 0x186db
cmp dword [ebp - 0x74], eax
jge 0x404155
push 0x3fd3
push 0x1cad
push 0x9df8
push 0xc067
push 0x61e7
push 0x60e
push 0x17dac
push 0x8e96
call dword [sym.imp.USER32.dll_LoadIconA]
add esp, 0x20
mov ecx, dword [0x83b9c0]
cmp ecx, dword [0x83b9dc]
jge 0x404132
mov dword [ebp - 0xf8], 1
jmp 0x40413c
mov dword [ebp - 0xf8], 0
mov edx, dword [ebp - 8]
xor edx, dword [ebp - 0xf8]
je 0x404150
mov eax, dword [ebp - 0xc]
sub eax, 1
mov dword [ebp - 0xc], eax
jmp 0x4040d1
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [0x83b9c4]
add edx, 0x21
push edx
mov eax, dword [ebp - 0x30]
add eax, 0x38
push eax
mov ecx, dword [0x83b990]
sub ecx, 0x1a
push ecx
mov edx, dword [0x83b9f4]
sub edx, 0xa
push edx
call fcn.004213b0
add esp, 0x10
mov eax, 0xbda2
sub eax, dword [ebp + 8]
xor eax, 0x9d03
mov ecx, dword [ebp + 0x10]
xor ecx, 0x611c
and ecx, 0x5d8b
xor ecx, 0x5d1a
mov byte [ecx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], al
mov dword [ebp - 0x78], 0
jmp 0x4041c5
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x54]
sub eax, 0x186d7
cmp dword [ebp - 0x78], eax
jge 0x4041f6
push 0x63c3
push 0x15e8
call dword [sym.imp.USER32.dll_GetDlgItem]
add esp, 8
mov ecx, dword [0x83b9c4]
add ecx, 1
mov dword [0x83b9c4], ecx
jmp 0x4041bc
mov edx, dword [0x83b990]
cmp edx, dword [ebp - 0x4c]
jge 0x40420d
mov dword [ebp - 0xfc], 1
jmp 0x404217
mov dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [0x83ba40]
jge 0x40422e
mov dword [ebp - 0x100], 1
jmp 0x404238
mov dword [ebp - 0x100], 0
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0x50]
jge 0x40424c
mov dword [ebp - 0x104], 1
jmp 0x404256
mov dword [ebp - 0x104], 0
mov edx, dword [ebp - 0xfc]
and edx, dword [ebp - 0x100]
or edx, dword [ebp - 0x104]
je 0x404273
mov eax, dword [ebp - 0x14]
sub eax, 1
mov dword [ebp - 0x14], eax
mov ecx, 0xe4a5
sub ecx, dword [ebp + 0x14]
xor ecx, 0x2dec
mov edx, dword [ebp + 0xc]
and edx, 0x6af9
xor edx, 0x157f
xor edx, 0x575d
mov byte [edx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], cl
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1bc], eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1c0], ecx
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x1c0]
jge 0x4042d1
mov dword [ebp - 0x108], 1
jmp 0x4042db
mov dword [ebp - 0x108], 0
mov ecx, dword [0x83b9f0]
cmp ecx, dword [ebp - 4]
jge 0x4042f2
mov dword [ebp - 0x10c], 1
jmp 0x4042fc
mov dword [ebp - 0x10c], 0
mov edx, dword [ebp - 0x108]
or edx, dword [ebp - 0x10c]
mov eax, dword [0x83b9f4]
and eax, dword [ebp - 0x24]
or edx, eax
je 0x404363
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp - 0x3c]
jge 0x404328
mov dword [ebp - 0x110], 1
jmp 0x404332
mov dword [ebp - 0x110], 0
mov edx, dword [0x83b990]
and edx, dword [ebp - 0x110]
mov dword [ebp - 0x1c4], edx
mov eax, dword [0x83b990]
add eax, 1
mov dword [0x83b990], eax
cmp dword [ebp - 0x1c4], 0
je 0x404363
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x7c], 0
jmp 0x404375
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x49
cmp dword [ebp - 0x7c], eax
jge 0x40438b
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
jmp 0x40436c
mov dword [ebp - 0x80], 0
jmp 0x40439d
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x20]
sub eax, 8
cmp dword [ebp - 0x80], eax
jge 0x4044fd
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x44]
jge 0x4044f8
mov edx, dword [ebp - 0x50]
sub edx, 1
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x58]
jge 0x4043d5
mov dword [ebp - 0x114], 1
jmp 0x4043df
mov dword [ebp - 0x114], 0
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x1c]
jge 0x4043f3
mov dword [ebp - 0x118], 1
jmp 0x4043fd
mov dword [ebp - 0x118], 0
mov edx, dword [ebp - 0x114]
or edx, dword [ebp - 0x118]
mov eax, dword [0x83b9c4]
imul eax, dword [ebp - 0x38]
or edx, eax
je 0x4044f8
mov ecx, dword [0x83b9d8]
cmp ecx, dword [ebp - 0x50]
jge 0x404431
mov dword [ebp - 0x11c], 1
jmp 0x40443b
mov dword [ebp - 0x11c], 0
mov edx, dword [0x83b93c]
cmp edx, dword [ebp - 0x40]
jge 0x404452
mov dword [ebp - 0x120], 1
jmp 0x40445c
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x1c]
or eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x11c]
or eax, dword [ebp - 0x120]
je 0x4044f8
mov ecx, dword [0x83b9c0]
mov dword [ebp - 0x1c8], ecx
mov edx, dword [0x83b9fc]
mov dword [ebp - 0x1cc], edx
mov eax, dword [0x83b9c0]
add eax, 1
mov dword [0x83b9c0], eax
mov ecx, dword [ebp - 0x1c8]
cmp ecx, dword [ebp - 0x1cc]
jge 0x4044b3
mov dword [ebp - 0x124], 1
jmp 0x4044bd
mov dword [ebp - 0x124], 0
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x40]
jge 0x4044d1
mov dword [ebp - 0x128], 1
jmp 0x4044db
mov dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x124]
or eax, dword [ebp - 0x128]
je 0x4044f8
mov ecx, dword [0x83b93c]
sub ecx, 1
mov dword [0x83b93c], ecx
jmp 0x404394
mov dword [ebp - 0x84], 0
jmp 0x404518
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
mov eax, dword [0x83b9c4]
sub eax, 0x41
cmp dword [ebp - 0x84], eax
jge 0x404539
mov ecx, dword [0x83b9f0]
sub ecx, 1
mov dword [0x83b9f0], ecx
jmp 0x404509
mov dword [ebp - 0x88], 0
jmp 0x404554
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
mov eax, dword [0x83b9f0]
sub eax, 0xf
cmp dword [ebp - 0x88], eax
jge 0x4045c9
mov ecx, dword [ebp - 0x18]
imul ecx, dword [0x83b93c]
cmp ecx, dword [ebp - 0x38]
jge 0x40457f
mov dword [ebp - 0x12c], 1
jmp 0x404589
mov dword [ebp - 0x12c], 0
mov edx, dword [0x83b9fc]
cmp edx, dword [0x83b9f8]
jge 0x4045a3
mov dword [ebp - 0x130], 1
jmp 0x4045ad
mov dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x12c]
or eax, dword [ebp - 0x130]
je 0x4045c4
mov ecx, dword [ebp - 0xc]
sub ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x404545
mov edx, dword [ebp + 0x18]
or edx, 0x845
and edx, 0x4501
xor edx, 0x6c75656e
mov eax, dword [ebp + 8]
add eax, 0x4010
or eax, 0x4f1b
xor eax, 0x6fbb
mov dword [eax + str.vzHsZRLrAaaIcOORVgqXIuQxNP], edx
mov ecx, dword [ebp - 0x5c]
sub ecx, 0x54
push ecx
mov edx, dword [ebp - 0x40]
sub edx, 0x3e
push edx
call fcn.00428710
add esp, 8
mov eax, dword [ebp + 0x20]
xor eax, 0x856c
xor eax, 0xeeea
mov ecx, dword [ebp + 0x20]
xor ecx, 0xc9c9
and ecx, 0x76be
xor ecx, 0x228f
mov byte [ecx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], al
mov dword [ebp - 0x8c], 0
jmp 0x40464f
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
mov eax, dword [0x83b9bc]
sub eax, 0x3d
cmp dword [ebp - 0x8c], eax
jge 0x40466a
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
jmp 0x404640
call fcn.0040b660
mov edx, dword [ebp + 0x1c]
add edx, 0xe76
xor edx, 0xbe88
mov eax, 0x2e4b
sub eax, dword [ebp + 0x14]
sub eax, 0x4eaf
xor eax, 0xffff28c6
mov byte [eax + str.vzHsZRLrAaaIcOORVgqXIuQxNP], dl
mov dword [ebp - 0x90], 0
jmp 0x4046b1
mov ecx, dword [ebp - 0x90]
add ecx, 1
mov dword [ebp - 0x90], ecx
mov edx, dword [ebp - 0x38]
sub edx, 0x19
cmp dword [ebp - 0x90], edx
jge 0x4046ce
mov eax, dword [0x83b9c4]
add eax, 1
mov dword [0x83b9c4], eax
jmp 0x4046a2
mov ecx, dword [ebp + 0x10]
or ecx, 0x192a
xor ecx, 0x4d74da2d
mov edx, dword [ebp + 0xc]
add edx, 0x15c9
xor edx, 0x6bfc
mov dword [edx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], ecx
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
mov ecx, dword [0x83b9f4]
sub ecx, 0x4f
push ecx
mov edx, dword [ebp - 0x20]
add edx, 0xd
push edx
call fcn.00428580
add esp, 8
mov eax, dword [ebp + 0x14]
add eax, 0x7749
or eax, 0x6115
xor eax, 0x16f54
mov ecx, dword [ebp + 0x18]
or ecx, 0xfa5a
sub ecx, 0xb81f
xor ecx, 0x434d
mov byte [ecx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], al
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1d0], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1d0]
cmp edx, dword [ebp - 0x1d4]
jge 0x404776
mov dword [ebp - 0x134], 1
jmp 0x404780
mov dword [ebp - 0x134], 0
mov eax, dword [0x83b994]
cmp eax, dword [0x83b9bc]
jge 0x404799
mov dword [ebp - 0x138], 1
jmp 0x4047a3
mov dword [ebp - 0x138], 0
mov ecx, dword [ebp - 0x134]
and ecx, dword [ebp - 0x138]
or ecx, dword [0x83b990]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x40]
or ecx, edx
je 0x404896
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x1c]
jge 0x4047d7
mov dword [ebp - 0x13c], 1
jmp 0x4047e1
mov dword [ebp - 0x13c], 0
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x24]
jge 0x404801
mov dword [ebp - 0x140], 1
jmp 0x40480b
mov dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x13c]
or eax, dword [ebp - 0x140]
je 0x404896
mov ecx, dword [0x83b9c0]
cmp ecx, dword [ebp - 0x58]
jge 0x404830
mov dword [ebp - 0x144], 1
jmp 0x40483a
mov dword [ebp - 0x144], 0
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x30]
cmp edx, dword [ebp - 0x14]
jge 0x404851
mov dword [ebp - 0x148], 1
jmp 0x40485b
mov dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0xc]
jge 0x40486f
mov dword [ebp - 0x14c], 1
jmp 0x404879
mov dword [ebp - 0x14c], 0
mov ecx, dword [ebp - 0x144]
and ecx, dword [ebp - 0x148]
or ecx, dword [ebp - 0x14c]
je 0x404896
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 3
push eax
mov ecx, dword [0x83b9f8]
sub ecx, 0x35
push ecx
mov edx, dword [0x83ba40]
sub edx, 0x4c
push edx
mov eax, dword [ebp - 0x10]
sub eax, 0x14
push eax
call fcn.00428190
add esp, 0x10
mov dword [ebp - 0x94], 0
jmp 0x4048db
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x94], ecx
mov edx, dword [0x83b9c0]
sub edx, 8
cmp dword [ebp - 0x94], edx
jge 0x40496b
mov eax, dword [ebp - 0x30]
cmp eax, dword [0x83b9c4]
jge 0x404903
mov dword [ebp - 0x150], 1
jmp 0x40490d
mov dword [ebp - 0x150], 0
mov ecx, dword [0x83b9f0]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x1dc], edx
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1d8]
cmp ecx, dword [ebp - 0x1dc]
jge 0x404945
mov dword [ebp - 0x154], 1
jmp 0x40494f
mov dword [ebp - 0x154], 0
mov edx, dword [ebp - 0x150]
and edx, dword [ebp - 0x154]
je 0x404966
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
jmp 0x4048cc
mov dword [ebp - 0x98], 0
jmp 0x404986
mov ecx, dword [ebp - 0x98]
add ecx, 1
mov dword [ebp - 0x98], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x3a
cmp dword [ebp - 0x98], edx
jge 0x4049a3
mov eax, dword [0x83b940]
add eax, 1
mov dword [0x83b940], eax
jmp 0x404977
mov dword [ebp - 0x9c], 0
jmp 0x4049be
mov ecx, dword [ebp - 0x9c]
add ecx, 1
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x58
cmp dword [ebp - 0x9c], edx
jge 0x404aad
mov eax, dword [0x83b9f0]
cmp eax, dword [ebp - 4]
jge 0x4049e6
mov dword [ebp - 0x158], 1
jmp 0x4049f0
mov dword [ebp - 0x158], 0
mov ecx, dword [0x83b9c4]
cmp ecx, dword [ebp - 0x58]
jge 0x404a07
mov dword [ebp - 0x15c], 1
jmp 0x404a11
mov dword [ebp - 0x15c], 0
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0x2c]
jge 0x404a25
mov dword [ebp - 0x160], 1
jmp 0x404a2f
mov dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x158]
and eax, dword [ebp - 0x15c]
or eax, dword [ebp - 0x160]
je 0x404aa8
mov ecx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x30]
cmp edx, dword [ebp - 8]
jge 0x404a60
mov dword [ebp - 0x164], 1
jmp 0x404a6a
mov dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x44]
jge 0x404a81
mov dword [ebp - 0x168], 1
jmp 0x404a8b
mov dword [ebp - 0x168], 0
mov ecx, dword [ebp - 0x164]
or ecx, dword [ebp - 0x168]
je 0x404aa8
mov edx, dword [0x83ba40]
sub edx, 1
mov dword [0x83ba40], edx
jmp 0x4049af
mov eax, dword [ebp + 0x1c]
or eax, 0xffff6915
xor eax, 0xfffff946
mov ecx, dword [ebp + 0x18]
xor ecx, 0x118bb
xor ecx, 0x12192
mov byte [ecx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], al
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [0x83b9f4]
sub eax, 0x3b
push eax
mov ecx, dword [0x83b9bc]
sub ecx, 0x33
push ecx
mov edx, dword [ebp - 0x14]
sub edx, 7
push edx
mov eax, dword [0x83b9f0]
add eax, 3
push eax
mov ecx, dword [ebp - 8]
sub ecx, 0x51
push ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x32
push edx
call fcn.00428380
add esp, 0x1c
mov eax, dword [ebp + 0xc]
or eax, 0x2cfb
xor eax, 0x6d61309e
mov ecx, dword [ebp + 0xc]
and ecx, 0x76f5
xor ecx, 0x563d
mov dword [ecx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], eax
mov dword [ebp - 0xa0], 0
jmp 0x404b49
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
mov eax, dword [0x83b9c4]
sub eax, 0x186e3
cmp dword [ebp - 0xa0], eax
jge 0x404b7e
push 0x85af
push 0x11147
push 0x156ee
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
add esp, 0xc
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
jmp 0x404b3a
mov edx, dword [ebp + 0x14]
add edx, 0xb62f
xor edx, 0x16c2b
mov eax, dword [ebp + 0x18]
and eax, 0xb983
xor eax, 0x3916
mov byte [eax + str.vzHsZRLrAaaIcOORVgqXIuQxNP], dl
mov dword [ebp - 0xa4], 0
jmp 0x404bbb
mov ecx, dword [ebp - 0xa4]
add ecx, 1
mov dword [ebp - 0xa4], ecx
mov edx, dword [0x83b9c4]
sub edx, 0x42
cmp dword [ebp - 0xa4], edx
jge 0x404cb5
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x2c]
jge 0x404be4
mov dword [ebp - 0x16c], 1
jmp 0x404bee
mov dword [ebp - 0x16c], 0
mov ecx, dword [ebp - 0x54]
sub ecx, dword [0x83b9c0]
and ecx, dword [0x83b9d8]
xor ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x1e0], ecx
mov edx, dword [0x83b9c0]
sub edx, 1
mov dword [0x83b9c0], edx
cmp dword [ebp - 0x1e0], 0
je 0x404cb0
mov eax, dword [ebp - 8]
sub eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 0x30]
jge 0x404cb0
mov edx, dword [ebp - 0x2c]
cmp edx, dword [0x83b9dc]
jge 0x404c4d
mov dword [ebp - 0x170], 1
jmp 0x404c57
mov dword [ebp - 0x170], 0
mov eax, dword [ebp - 8]
xor eax, dword [ebp - 0xc]
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1e8], ecx
mov edx, dword [ebp - 0xc]
sub edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x1e4]
cmp eax, dword [ebp - 0x1e8]
jge 0x404c8f
mov dword [ebp - 0x174], 1
jmp 0x404c99
mov dword [ebp - 0x174], 0
mov ecx, dword [ebp - 0x170]
or ecx, dword [ebp - 0x174]
je 0x404cb0
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x404bac
mov eax, dword [ebp - 0x44]
imul eax, dword [0x83b994]
cmp eax, dword [ebp - 0x24]
jge 0x404cd0
mov dword [ebp - 0x178], 1
jmp 0x404cda
mov dword [ebp - 0x178], 0
mov ecx, dword [ebp - 0x178]
and ecx, dword [ebp - 4]
xor ecx, dword [0x83b990]
mov dword [ebp - 0x1ec], ecx
mov edx, dword [0x83b990]
sub edx, 1
mov dword [0x83b990], edx
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 0x1ec], 0
je 0x404d64
mov ecx, dword [0x83b9fc]
or ecx, dword [ebp - 0x30]
je 0x404d64
mov edx, dword [ebp - 0x40]
cmp edx, dword [ebp - 0x54]
jge 0x404d2f
mov dword [ebp - 0x17c], 1
jmp 0x404d39
mov dword [ebp - 0x17c], 0
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
and ecx, dword [ebp - 8]
and ecx, dword [ebp - 0x17c]
mov edx, dword [0x83b9bc]
sub edx, dword [ebp - 0x18]
and ecx, edx
je 0x404d64
mov eax, dword [ebp - 0x28]
sub eax, 1
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp + 0x10]
or ecx, 0xbf7d
xor ecx, 0xbf24
mov edx, 0xe6b5
sub edx, dword [ebp + 8]
and edx, 0x653f
xor edx, 0x2e1b
xor edx, 0x6a18
mov byte [edx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], cl
mov dword [ebp - 0xa8], 0
jmp 0x404dae
mov eax, dword [ebp - 0xa8]
add eax, 1
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0x1a
cmp dword [ebp - 0xa8], ecx
jge 0x404de1
mov edx, dword [ebp - 0x48]
sub edx, 1
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x48]
test eax, eax
je 0x404ddf
mov ecx, dword [0x83ba40]
sub ecx, 1
mov dword [0x83ba40], ecx
jmp 0x404d9f
mov dword [ebp - 0xac], 0
jmp 0x404dfc
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
mov eax, dword [0x83b9f0]
sub eax, 0x186b0
cmp dword [ebp - 0xac], eax
jge 0x404e2e
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [0x83b9f8]
cmp ecx, dword [ebp - 0x58]
jge 0x404e2c
mov edx, dword [ebp - 0x44]
sub edx, 1
mov dword [ebp - 0x44], edx
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x404ded
mov eax, dword [ebp + 8]
or eax, 0xbedb
xor eax, 0xbeba
mov ecx, dword [ebp + 0x1c]
add ecx, 0x320b
and ecx, 0x56f2
xor ecx, 0x4222
mov byte [ecx + str.vzHsZRLrAaaIcOORVgqXIuQxNP], al
mov edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x2c]
cmp edx, dword [0x83b994]
jge 0x404e70
mov dword [ebp - 0x180], 1
jmp 0x404e7a
mov dword [ebp - 0x180], 0
mov eax, dword [0x83b994]
mov dword [ebp - 0x1f0], eax
mov ecx, dword [0x83b940]
mov dword [ebp - 0x1f4], ecx
mov edx, dword [0x83b994]
sub edx, 1
mov dword [0x83b994], edx
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x1f4]
jge 0x404eba
mov dword [ebp - 0x184], 1
jmp 0x404ec4
mov dword [ebp - 0x184], 0
mov ecx, dword [ebp - 0x180]
or ecx, dword [ebp - 0x184]
je 0x404f72
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x1f8], edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x1f8]
cmp edx, dword [ebp - 0x1fc]
jge 0x404f0b
mov dword [ebp - 0x188], 1
jmp 0x404f15
mov dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x48]
and eax, dword [ebp - 0x188]
je 0x404f72
mov ecx, dword [0x83ba40]
add ecx, dword [ebp - 0x14]
cmp ecx, dword [0x83b9f0]
jge 0x404f3d
mov dword [ebp - 0x18c], 1
jmp 0x404f47
mov dword [ebp - 0x18c], 0
mov edx, dword [ebp - 0x18c]
and edx, dword [0x83b9f8]
mov eax, dword [0x83b940]
imul eax, dword [0x83b9f4]
and eax, dword [0x83b9f0]
xor edx, eax
je 0x404f72
mov ecx, dword [ebp - 0x18]
sub ecx, 1
mov dword [ebp - 0x18], ecx
mov eax, str.vzHsZRLrAaaIcOORVgqXIuQxNP
jmp 0x405007
mov esp, ebp
pop ebp
ret