Function at 0x420893
Capabilities:
Encrypt data using speck
Identify system language via api

Disassembly:
mov eax, 0x4af789
call fcn.004af1c8
sub esp, 0x2dc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x28], 0x1928
xor ebx, ebx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x4208ca
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x4208da
push ebx
push ebx
call dword [sym.imp.USER32.dll_CopyRect]
mov dword [ebp - 0x40], 0x43e3
cmp dword [ebp - 0x40], 0x4519
jle 0x420911
mov esi, ebx
mov edi, ebx
mov eax, edi
and eax, esi
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc edi
cmp edi, 0x2b4a
jl 0x4208ee
inc esi
cmp esi, 0x49e8
jl 0x4208ec
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x40], 0x40dc
jge 0x42092c
mov edx, str.jpxdmhuwv_npfiulmxy_nsxqfxd
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x420952
mov dword [ebp - 0x40], 5
push 4
lea ecx, [ebp - 0xe8]
call fcn.00409f19
mov dword [ebp - 0x14], 0x85a7
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x30], 0xdfbc43c
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x420991
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x80], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x420983
mov dword [ebp - 0x18], ebx
jmp 0x4209af
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe8]
mov dword [eax + ecx*4], 0xeefb6f65
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x42099c
mov eax, dword [ebp - 0x7c]
neg eax
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x20], 0x4e5878ed
mov edi, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
cmp eax, dword [edi + 8]
setne cl
mov eax, dword [ebp - 0x7c]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, dword [edi + 8]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, dword [ebp - 0x28]
setle cl
xor edx, edx
mov eax, dword [ebp - 0xe8]
cmp ecx, dword [eax + 0xc]
setne dl
mov esi, dword [ebp - 0x30]
sub esi, edx
neg esi
sbb esi, esi
inc esi
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp eax, esi
setle cl
xor edx, edx
cmp ecx, 0x8694a219
setne dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [edi + 8], ecx
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x2c]
xor edi, edi
test eax, eax
je 0x420a6b
mov dword [ebp - 0x28], 0xcbde
mov dword [ebp - 0x34], 0x2ad21dd8
mov eax, dword [ebp - 0x28]
neg eax
mov dword [ebp - 0x34], eax
inc edi
jmp 0x420b5a
mov dword [ebp - 0x3c], 0x2c4b
inc edi
cmp dword [ebp - 0x3c], 0x2ef0
jle 0x420af7
mov eax, ebx
mov dword [ebp - 0x24], eax
mov esi, ebx
mov dword [ebp - 0x2c], ebx
cdq
idiv esi
mov eax, edx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x40], 0xf45
mov esi, ebx
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x208]
call fcn.00401a71
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x420ab1
mov eax, dword [eax]
push eax
call fcn.00499a27
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x208]
call fcn.0040a55c
inc esi
cmp esi, 0x2e4
mov eax, dword [ebp - 0x30]
jl 0x420a97
dec eax
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x40]
jne 0x420a95
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x59ed
mov eax, dword [ebp - 0x24]
jl 0x420a86
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x4209
jl 0x420a81
mov byte [ebp - 0x19], bl
mov dword [ebp - 4], 2
cmp dword [ebp - 0x3c], 0x2b83
jge 0x420b15
push str.buuks_cegysakl_pjjrvjdiz_oaa_jbutg_cic_szlh_zwlpypf_wsagnyb_zopet_mubzc_kpnsxigb_pfqlfpqc
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x420b3e
cmp byte [ebp - 0x19], 0
je 0x420b5a
push ebx
push 0x14c9
push 0x1931
push 0x790
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov dword [ebp - 0x20], ebx
jmp 0x420b7e
mov dword [ebp - 0x14], ebx
jmp 0x420b75
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xe8]
cmp dword [eax + ecx*4], ebx
jne 0x420b7b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x420b64
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff3
jle 0x420b5f
lea ecx, [ebp - 0xe8]
call fcn.00409fc5
mov eax, dword [0xae4608]
test al, 1
jne 0x420c13
or eax, edi
mov dword [0xae4608], eax
mov dword [0xae4610], ebx
mov dword [0xae4614], ebx
push ebx
push ebx
call fcn.0040c701
mov dword [0xae4610], eax
mov dword [0xae4618], ebx
mov dword [0xae4620], ebx
mov dword [0xae462c], 0x3f800000
mov dword [ebp - 0xc8], eax
mov dword [0xae461c], ebx
lea eax, [ebp - 0xc8]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x190]
push eax
mov ecx, 0xae4618
call fcn.0040c437
mov dword [0xae4624], 7
mov dword [0xae4628], 8
push 0x4b0541
call fcn.004999fd
pop ecx
push 2
lea ecx, [ebp - 0x144]
call fcn.00409f19
mov dword [ebp - 0x2c], 0x1868
cmp dword [ebp - 0x2c], 0x18de
jle 0x420c67
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov ebx, esi
mov esi, 0x7b3e
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
dec ebx
dec esi
jne 0x420c3c
mov esi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x3f19
jl 0x420c35
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x18], ebx
jmp 0x420c7f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], 0xdf99ff60
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x420c6c
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2c], 0x159e
jge 0x420ca4
mov edx, str.iwzqdcl_kcsj_harmycnii_wlwjrfmlr_edr_orou
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x420ccd
mov dword [ebp - 0x18], ebx
jmp 0x420ce3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x114], 0x667a876e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x420cd2
mov dword [ebp - 0x110], ebx
jmp 0x420d1a
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x420d14
push ebx
push ebx
push 0x20d6
push ebx
push 0x18ff
push ebx
push ebx
push 0x1535
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
inc dword [ebp - 0x110]
cmp dword [ebp - 0x110], edi
jle 0x420cf1
lea ecx, [ebp - 0x144]
call fcn.00409fc5
imul eax, dword [ebp - 0x6c], 0x2710
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x14], 0xcefa9d19
mov dword [ebp - 0x2c], 0x228f
cmp dword [ebp - 0x2c], 0x23cd
jle 0x420dc0
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x28], ebx
cdq
idiv esi
mov eax, edx
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
mov ecx, esi
shl eax, cl
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x6899
mov eax, dword [ebp - 0x34]
jl 0x420d72
mov esi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x3974
push 0
pop ebx
mov eax, dword [ebp - 0x30]
jl 0x420d61
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x7866
jl 0x420d5c
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x6e2e
jl 0x420d57
mov dword [ebp - 0x40], 0xc14173bf
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2c], 0x2178
jge 0x420de6
mov edx, str.cdmjor_pfhrjaxk_qawa_cjympkw_cxf_gprjlxr_ytmqmb_bbhuqj
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x420e0f
mov dword [ebp - 0x24], 0xffffffff
push edi
lea ecx, [ebp - 0xa8]
call fcn.00409f19
mov dword [ebp - 0x30], 0x7104272b
mov dword [ebp - 0x24], ebx
jmp 0x420e3d
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x420e2e
mov dword [ebp - 0x40], 0xffffffff
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x14], eax
jge 0x420e5e
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x14], eax
mov esi, edi
jle 0x420e60
mov esi, ebx
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xa8]
imul ecx, dword [edx]
xor eax, eax
cmp esi, ecx
setle al
cmp eax, 0x89480189
sbb eax, eax
neg eax
mov dword [edx], eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
je 0x420ef8
mov dword [ebp - 0xf8], 0xfffffffe
mov dword [ebp - 0xf4], 0xfffffffe
mov dword [ebp - 0xf0], 0xfffffffe
mov dword [ebp - 0xec], 0xfffffffe
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0xa8]
cmp dword [eax], 0xd0127420
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa8]
mov dword [eax], ecx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x420f34
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
jmp 0x420f34
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x420f34
push 0xf20
push 0x214b
push 0x340
push 0x1c8a
push 0xebb
push 0x1582
push 0x241c
push 0x1b9
push 0xaad
call dword [sym.imp.GDI32.dll_Arc]
lea ecx, [ebp - 0xa8]
call fcn.00409fc5
lea eax, [ebp - 0x88]
push eax
call fcn.00422af5
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], 0x16c1
cmp dword [ebp - 0x28], 0x1922
jle 0x420fc9
push ebx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
and eax, esi
or eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x280]
call fcn.00401a71
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x420f8f
mov eax, dword [eax]
push eax
call fcn.00499a27
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x280]
call fcn.0040a55c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x38d9
mov ecx, dword [ebp - 0x24]
jl 0x420f73
inc esi
cmp esi, 0x65dd
jl 0x420f6e
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x6335
jl 0x420f6c
mov dword [ebp - 0x14], 0x4914d2ed
mov dword [ebp - 0x30], 0x592c
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x44], 0x678e045
mov dword [ebp - 0x3c], 0x27f44fb6
mov dword [ebp - 0x34], 0xb996340c
push 2
lea ecx, [ebp - 0x1ac]
call fcn.00409f19
mov dword [ebp - 0x34], 0x6a4a
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], 0xd8d86f2f
mov dword [ebp - 0x2c], 0x2fbd
cmp dword [ebp - 0x2c], 0x305d
jle 0x421048
mov esi, ebx
mov dword [ebp - 0x44], ebx
mov eax, ebx
and eax, esi
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc ebx
cmp ebx, 0x284f
jl 0x421022
inc esi
cmp esi, 0x6009
push 0
pop ebx
jl 0x42101f
mov dword [ebp - 0x18], ebx
jmp 0x421060
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1ac]
mov dword [eax + ecx*4], 0xfcf42757
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x42104d
mov dword [ebp - 4], 8
cmp dword [ebp - 0x2c], 0x2f52
jge 0x421085
mov edx, str.tiwvp_skvfm_vvqmu_fzjglhbi
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x4210ae
mov dword [ebp - 0x18], ebx
jmp 0x4210c4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x250], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x4210b3
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jne 0x421108
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0xab06
setg cl
imul ecx, dword [ebp - 0x14]
add ecx, 5
mov ecx, ebx
je 0x42110a
mov ecx, edi
mov eax, dword [ebp - 0x30]
imul eax, ecx
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], eax
je 0x4213d8
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x18], 0x88af16de
mov dword [ebp - 0x38], 0xfffffffd
mov dword [ebp - 0x4c], 0x6c7d
cmp dword [ebp - 0x4c], 0x6e04
jle 0x42119a
mov esi, ebx
mov dword [ebp - 0x5c], ebx
mov ecx, esi
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x2c], 0x5bc8
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov eax, ebx
xor eax, esi
or eax, ecx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc ebx
cmp ebx, 0x7e9c
mov ecx, dword [ebp - 0x20]
jl 0x421157
inc esi
cmp esi, 0x5920
push 0
pop ebx
jl 0x421154
dec ecx
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x2c]
jne 0x421152
mov esi, dword [ebp - 0x5c]
inc esi
mov dword [ebp - 0x5c], esi
cmp esi, 0x3392
jl 0x421146
mov dword [ebp - 0x38], ebx
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x4c], 0x691d
jge 0x4211bc
mov edx, str.gtknley_prcpd_umzcvab_pfhfpcvl
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x4211e5
mov dword [ebp - 0x38], 0x6e00
cmp dword [ebp - 0x38], 0x7113
jle 0x421269
push 0x13e1
push 0xf8c
push ebx
push 0xc3
push ebx
call dword [sym.imp.USER32.dll_GetMenuStringW]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x20]
mov eax, ebx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x5c], 0x1574
mov ebx, eax
mov esi, 0x19e
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc ebx
dec esi
jne 0x421228
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
add eax, esi
mov dword [ebp - 0x4c], eax
dec dword [ebp - 0x5c]
jne 0x421221
dec esi
mov dword [ebp - 0x2c], esi
cmp esi, 0xffffa5eb
mov ebx, dword [ebp - 0x20]
jg 0x421215
inc ebx
mov dword [ebp - 0x20], ebx
cmp ebx, 0xbb7
push 0
pop ebx
jl 0x42120f
mov dword [ebp - 0x4c], 0x299b5f27
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x38], 0x6c3b
jge 0x42128f
mov edx, str.zrmsn_ell_ltvanbibx_yhstmgbx_lniaxa_eckqfvz_eror
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x4212b8
mov dword [ebp - 0x38], 8
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x38], 0xfffffffd
mov dword [ebp - 0x38], 0x6c132d45
push 4
lea ecx, [ebp - 0x19c]
call fcn.00409f19
mov dword [ebp - 0x38], 0x86cc6b0c
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x38], 0xd1334807
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], ebx
jmp 0x42131b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x19c]
mov dword [eax + ecx*4], 0x70c30f14
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x421308
mov dword [ebp - 0x20], ebx
jmp 0x421337
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2e8], 7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x421326
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
neg ecx
jne 0x421355
cmp dword [ebp - 0x24], ebx
mov eax, ebx
je 0x421357
mov eax, edi
cmp eax, dword [ebp - 0x3c]
jne 0x421363
cmp dword [ebp - 0x3c], ebx
mov edx, ebx
je 0x421365
mov edx, edi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0x8b9abc19
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, 0x5f7f
jg 0x4213a5
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], 0x80bf
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x34]
lea ecx, [ebp - 0x19c]
jmp 0x421411
mov dword [ebp - 0x34], 0xfffffff7
push edi
lea ecx, [ebp - 0x18c]
call fcn.00409f19
mov dword [ebp - 0x24], ebx
jmp 0x421403
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18c]
mov dword [eax + ecx*4], 0x9ad35785
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x4213f0
inc dword [ebp - 0x38]
lea ecx, [ebp - 0x18c]
call fcn.00409fc5
lea ecx, [ebp - 0x1ac]
call fcn.00409fc5
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x28], 0x15cc
jge 0x42143c
push str.ywjn_dbl_ewwhlb_ijqoaevt_llhomcjg_cfzxr_dxltjsj_cmxccuy_devj
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x421465
cmp dword [ebp - 0x40], 0
je 0x4214f9
mov dword [ebp - 0x18], ebx
jmp 0x421485
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b4], 0xa6318529
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x421474
mov dword [ebp - 0x18], ebx
jmp 0x4214a1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x421490
mov dword [ebp - 0x18], ebx
jmp 0x4214bd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdc], 4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x4214ac
mov dword [ebp - 0x9c], ebx
jmp 0x4214e3
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0x1b4]
mov dword [ebp - 0xdc], ebx
inc dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], edi
jle 0x4214ca
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xc0], eax
jmp 0x4229ed
mov eax, dword [0xae4608]
test al, 2
jne 0x42157e
or eax, 2
mov dword [0xae4608], eax
mov dword [0xae4630], ebx
mov dword [0xae4634], ebx
push ebx
push ebx
call fcn.0040c701
mov dword [0xae4630], eax
mov dword [0xae4638], ebx
mov dword [0xae4640], ebx
mov dword [0xae464c], 0x3f800000
mov dword [ebp - 0xc4], eax
mov dword [0xae463c], ebx
lea eax, [ebp - 0xc4]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x1a0]
push eax
mov ecx, 0xae4638
call fcn.0040c437
mov dword [0xae4644], 7
mov dword [0xae4648], 8
push 0x4b053c
call fcn.004999fd
pop ecx
mov dword [ebp - 0x14], 0x743d837b
mov dword [ebp - 0x24], 0x2b9193c1
mov dword [ebp - 0x30], 0x8cb667f5
mov dword [ebp - 0x28], 0x7ab6ce1a
mov dword [ebp - 0x24], ebx
jmp 0x4215b0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1e0], 0xfffffff7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x42159f
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
mov eax, ebx
je 0x4215c8
mov eax, edi
cmp eax, dword [ebp - 0x14]
jne 0x4215d0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
add eax, 0x69b4
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
xorps xmm0, xmm0
movdqu xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xffffffed
je 0x42170e
mov byte [ebp - 0x19], bl
mov dword [ebp - 0x44], 0x8b9
cmp dword [ebp - 0x44], 0xaab
jle 0x4216b0
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov ecx, esi
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x28], 0x5f58
mov eax, ebx
mov dword [ebp - 0x3c], ebx
mov esi, ebx
cdq
idiv esi
mov eax, ecx
mov ecx, edx
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x220]
call fcn.00401a71
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42166a
mov eax, dword [eax]
push eax
call fcn.00499a27
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x220]
call fcn.0040a55c
inc esi
cmp esi, 0x7ab0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x30]
jl 0x421649
inc eax
mov dword [ebp - 0x3c], eax
cmp eax, 0x343
jl 0x421647
dec ecx
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x28]
jne 0x421642
mov esi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x247b
jl 0x421636
cmp byte [ebp - 0x19], 0
je 0x4216bd
push ebx
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x44], 0x600
jge 0x4216d8
push str.jsihkchei_ysn_fbbfdy_ejdwsqa_ufjfatrg_xmvlaq_qsctwxy_jqcrjhqjb_ymgbsuqv_tnyaew_oplfpj
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x421701
cmp dword [ebp - 0x24], ebx
jne 0x42170e
dec dword [ebp - 0x24]
jmp 0x421614
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x42171e
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
lea eax, [ebp - 0x6c]
push eax
call fcn.00422b57
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x34], 0x3900
cmp dword [ebp - 0x34], 0x3bd9
jle 0x42179d
mov eax, ebx
mov dword [ebp - 0x3c], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x44], ebx
cdq
idiv esi
mov ebx, edx
mov esi, dword [ebp - 0x44]
mov eax, ebx
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x7526
jl 0x421751
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x2796
push 0
pop ebx
mov eax, dword [ebp - 0x3c]
jl 0x421746
inc eax
mov dword [ebp - 0x3c], eax
cmp eax, 0xe92
jl 0x421741
push ebx
push 0xd0d
push 0x10eb
push ebx
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x34], 0x3820
jge 0x4217bc
mov edx, str.ivskrfz_omwk_acvpa_tzhwh_ahq_adiq_xmlwv_cpmfq_ebcr_ycvwevmz
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x4217e5
mov dword [ebp - 0x14], 0x49f6d4a0
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x34], 0x5e32
mov dword [ebp - 0x28], 0x4d441147
mov dword [ebp - 0x28], 0x3d8e66c
mov dword [ebp - 0x14], ebx
jmp 0x421817
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], 0x8070
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x421809
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
jne 0x421832
cmp dword [ebp - 0x54], ebx
mov eax, ebx
je 0x421834
mov eax, edi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0x14
cmp dword [ebp - 0x14], 0xffffffef
jne 0x421a04
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x44], 9
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x28], 0x4e
cmp dword [ebp - 0x28], 0x107
jle 0x4218c3
mov eax, ebx
mov dword [ebp - 0x3c], ebx
mov esi, ebx
add eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x244]
call fcn.00401a71
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x421898
mov eax, dword [eax]
push eax
call fcn.00499a27
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.0040a55c
inc esi
cmp esi, 0x2b37
mov eax, dword [ebp - 0x3c]
jl 0x42187e
inc eax
mov dword [ebp - 0x3c], eax
cmp eax, 0x3902
jl 0x42187c
mov dword [ebp - 0x20], ebx
jmp 0x4218d9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x178], 0xc0de450b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x4218c8
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x28], 0xfffffe39
jge 0x4218fa
push str.ozdijjza_iwdtfr_tkraay
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x421923
mov dword [ebp - 0x20], ebx
jmp 0x421939
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x154], 0xffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x421928
dec dword [ebp - 0x34]
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x14]
sub eax, edx
je 0x42195f
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x148]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
cmp ecx, edi
setge dl
sub edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x30]
neg edx
sbb edx, edx
add edx, 0xfffffffd
mov eax, dword [ebp - 0x148]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x2c]
jle 0x4219a5
cmp dword [ebp - 0x3c], ebx
mov edx, edi
jne 0x4219a7
mov edx, ebx
mov eax, dword [ebp - 0x18]
add eax, 2
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 6
setge al
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x54]
xor ecx, ecx
cmp eax, 0xffffffff
setg cl
mov dword [ebp - 0x28], ecx
dec dword [ebp - 0x14]
jmp 0x42183e
mov al, byte [ebp + 0xc]
test al, al
jne 0x421a15
cmp dword [ebp - 0x24], 0
jne 0x422407
lea ecx, [ebp - 0x2d8]
push ecx
mov dl, al
mov ecx, dword [ebp - 0x6c]
call fcn.0040d740
pop ecx
mov esi, eax
lea edi, [ebp - 0xd8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x20], 0xe83c773
mov dword [ebp - 0x14], ebx
xor edi, edi
inc edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x34], 0x17ad
cmp dword [ebp - 0x34], 0x189d
jle 0x421aa4
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x28], ecx
mov ebx, dword [ebp - 0x2c]
mov eax, esi
sar eax, cl
xor eax, ebx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
mov ecx, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x506f
jl 0x421a68
inc esi
cmp esi, 0x53e9
push 0
pop ebx
jl 0x421a60
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x4bed
jl 0x421a5e
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x34], 0x1772
jge 0x421ac3
mov edx, str.bjs_fodmofi_qgb_xpha_tzlxoipkb_amycjhqvh
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x421aec
mov dword [ebp - 0x20], ebx
jmp 0x421afb
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x68], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x421af1
mov dword [ebp - 0x20], ebx
jmp 0x421b17
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1c4], 0xad24015e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x421b06
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], ebx
jl 0x421cab
mov dword [ebp - 0x18], 0xbb11accb
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x421c98
push 2
lea ecx, [ebp - 0x120]
call fcn.00409f19
mov dword [ebp - 0x14], ebx
jmp 0x421b60
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x421b51
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
xor ecx, ecx
cmp ecx, eax
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
xor edx, edx
cmp eax, ecx
setge dl
mov eax, dword [ebp - 0x18]
imul edx, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], ebx
jl 0x421c8a
mov esi, dword [ebp - 0x120]
mov dword [ebp - 0x28], 0xffffffff
cmp dword [ebp - 0x18], ebx
je 0x421bc7
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x68], ebx
mov edx, edi
jne 0x421bc9
mov edx, ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov ecx, dword [ebp - 0x18]
imul ecx, edx
sub ecx, eax
cmp ecx, 0xfff6
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
xor edx, edx
cmp eax, ecx
setle dl
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
xor ecx, ecx
cmp edx, eax
setge cl
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setle dl
mov dword [esi + 4], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, 0x77df
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setl dl
mov eax, dword [ebp - 0x18]
imul edx, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x18]
imul edx, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x18]
jge 0x421c4a
mov eax, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x18]
sub ecx, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x68]
add eax, ecx
mov ecx, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0x2684
setne cl
mov dword [ebp - 0x1c4], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x14]
jns 0x421bb0
lea ecx, [ebp - 0x120]
call fcn.00409fc5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x421b3f
dec dword [ebp - 0x20]
jns 0x421b2d
dec dword [ebp - 0x44]
cmp byte [ebp + 0xc], 0
je 0x42201b
cmp dword [ebp - 0xd0], 0
je 0x42201b
mov dword [ebp - 0x14], 0xfffffff6
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0xffffffe3
je 0x421ed4
mov dword [ebp - 0x38], 0x357c
cmp dword [ebp - 0x38], 0x3614
jle 0x421d50
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x44], ebx
mov ecx, ebx
mov dword [ebp - 0x28], ecx
cdq
idiv esi
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x34], 0x2a9f
mov esi, ecx
mov ebx, 0x6e35
mov eax, esi
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
dec esi
dec ebx
jne 0x421d12
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x28], ecx
dec dword [ebp - 0x34]
jne 0x421d0b
mov esi, dword [ebp - 0x44]
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x55bf
mov eax, dword [ebp - 0x2c]
jl 0x421cf9
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x23ca
jl 0x421cf4
mov dword [ebp - 0x20], 0x58d32ffa
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x38], 0x3337
jge 0x421d76
mov edx, str.qgxhstbh_kkfm_ktl_sufy_zgfhfu_uyxydrpd_luuoxuqn
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x421d9f
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jne 0x421dd7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setl dl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x14]
neg ecx
mov dword [ebp - 0x28], ecx
mov eax, edi
jne 0x421dd9
mov eax, ebx
add eax, 0xc4b7c700
jne 0x421e03
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], al
je 0x421ecc
push ebx
push 0x12b9
push ebx
push 0x11c5
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
jmp 0x421ecc
mov dword [ebp - 0x28], 0x3d6d
cmp dword [ebp - 0x28], 0x40ca
jle 0x421e6e
push ebx
push 0x1ba1
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov eax, esi
or eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x268]
call fcn.00401a71
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x421e42
mov eax, dword [eax]
push eax
call fcn.00499a27
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x268]
call fcn.0040a55c
inc esi
cmp esi, 0x934
mov ecx, dword [ebp - 0x2c]
jl 0x421e26
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x1c50
jl 0x421e24
mov dword [ebp - 0x34], 0x4a90c6d2
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x28], 0x3b34
jge 0x421e90
push str.nyz_pofzppfv_ytzk_umbigxr_upvr
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x421eb9
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x421ec9
push ebx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov eax, dword [ebp - 0x34]
dec dword [ebp - 0x14]
jmp 0x421ccf
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x421ee9
push ebx
push 0xcd5
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x14], ebx
jmp 0x421f0e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x84], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x421f01
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jg 0x422000
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x84], ecx
mov dword [ebp - 0x28], 0x6530
cmp dword [ebp - 0x28], 0x65a8
jle 0x421fad
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
cdq
idiv esi
mov eax, ecx
mov ecx, edx
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x298]
call fcn.00401a71
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x421f73
mov eax, dword [eax]
push eax
call fcn.00499a27
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x298]
call fcn.0040a55c
inc esi
cmp esi, 0x3f29
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
jl 0x421f52
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x796e
jl 0x421f50
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x4013
jl 0x421f4b
mov dword [ebp - 0x34], 0xffffcb1a
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x28], 0x63e8
jge 0x421fcf
push str.akcmf_hcqu_kmdceoq_lawdytxbp_aruvzpb_cchma_uqgkmt_ozufmgq_hsz_enasdsg_spd
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x421ff8
inc dword [ebp - 0x14]
jmp 0x421f16
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x42200f
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0x24], 0
jne 0x422407
cmp dword [ebp - 0xd8], 0
jle 0x422407
mov dword [ebp - 0x38], 0x2285
mov dword [ebp - 0x44], 0xee1c
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x28], 0x96378555
mov dword [ebp - 0x2c], 0x725245f5
mov dword [ebp - 0x34], 0x3b7f
cmp dword [ebp - 0x34], 0x3d74
jle 0x4220a8
push 0x363
call dword [sym.imp.USER32.dll_ShowCaret]
mov esi, ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x28], 0x2962
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
add ebx, esi
dec dword [ebp - 0x28]
jne 0x422086
inc esi
cmp esi, 0x5c53
push 0
pop ebx
jl 0x42207c
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x34], 0x39f9
jge 0x4220ce
mov edx, str.nxmv_dchtkzo_ldhxvh_tely_mujbevm_salc_rzlib_qdutsw_nzetfhovk_thjvtbwg_tovlr_baipchiq_ufjcebhu_iws
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x4220f7
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x14], ebx
jmp 0x42210c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x90], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4220ff
mov eax, dword [ebp - 0x44]
inc dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
inc edx
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4bda
sub ecx, eax
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp ecx, eax
setle dl
add edx, 0xc78e
xor eax, eax
cmp edx, edi
setle al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], 4
jmp 0x42218f
mov dword [ebp - 0x28], 0x95e0
inc dword [ebp - 0x28]
cmp dword [ebp - 0x2c], ebx
jne 0x422195
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1a
jg 0x42217d
mov dword [ebp - 0x30], 0x16b471df
mov dword [ebp - 0x28], 0x65e790e8
mov dword [ebp - 0x3c], ebx
push edi
lea ecx, [ebp - 0x138]
call fcn.00409f19
mov dword [ebp - 0x28], 0x196e6c8c
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], ebx
jmp 0x4221d4
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x4221c1
mov dword [ebp - 0x28], 0x491e
cmp dword [ebp - 0x28], 0x4c66
jle 0x422235
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
add eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x2c8]
call fcn.00401a71
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42220a
mov eax, dword [eax]
push eax
call fcn.00499a27
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2c8]
call fcn.0040a55c
inc esi
cmp esi, 0x41d3
mov eax, dword [ebp - 0x2c]
jl 0x4221f0
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x91a
jl 0x4221ee
mov dword [ebp - 0x18], ebx
jmp 0x42224b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x170], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x42223a
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x28], 0x46eb
jge 0x42226c
push str.fqpiflj_hmzqzpi_xebg_tryqsvw_sqvy_abqzbw_spxbtgq_rxmwnwknc_kjy_xzf_kjvw_tsmsf_lsbcte_mlofkuhcp
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x422295
mov dword [ebp - 0x18], ebx
jmp 0x4222ab
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d0], 0x7736d0c1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x42229a
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x16c], eax
xor ecx, ecx
cmp eax, 0x31
setge cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp eax, 0x47597a61
setle cl
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x138]
mov dword [eax], edx
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x34]
sub esi, eax
xor ecx, ecx
cmp edx, esi
setge cl
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, ecx
setle dl
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x1cc], ecx
mov eax, dword [ebp - 0x3c]
xor edx, edx
cmp eax, edi
setg dl
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x138]
call fcn.00409fc5
mov dword [ebp - 0x14], 0xfffffff8
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x422348
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov dword [ebp - 0x14], ebx
jmp 0x42235c
mov dword [ebp - 0x28], 0xffff
cmp dword [ebp - 0x28], ebx
jne 0x422362
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff8
jg 0x42234d
mov esi, dword [ebp - 0xd4]
test esi, esi
je 0x422407
push edi
push edi
push 0xe84
push 0x2c52
push esi
push 0x6595
push 0x854
push 0x46c4
call fcn.0041f2d9
push esi
call fcn.00459d5c
add esp, 0x24
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 0x915a1369
mov dword [ebp - 0x20], 5
cmp dword [ebp - 0x14], ebx
jne 0x4223b7
mov eax, dword [ebp - 0x14]
mov edx, ebx
jmp 0x4223b9
mov edx, edi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x20], 0xffffffe7
jmp 0x4223f3
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x4223f0
push ebx
push 0x646
call dword [sym.imp.GDI32.dll_SetTextColor]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x29
je 0x4223db
lea eax, [ebp - 0x6c]
push eax
call fcn.00422b57
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
mov dword [ebp - 0x18], 0xffffffff
push 2
lea ecx, [ebp - 0x104]
call fcn.00409f19
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x14], ebx
jmp 0x42243a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], 0x6432a276
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x422427
mov dword [ebp - 0x18], 0xfffffff9
cmp dword [ebp - 0x18], 0xf
jl 0x422680
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x44], 0xfffd
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], ebx
jl 0x422675
mov dword [ebp - 0x28], 0x46ef
cmp dword [ebp - 0x28], 0x4999
jle 0x4224ca
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov eax, esi
or eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x2b0]
call fcn.00401a71
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42249e
mov eax, dword [eax]
push eax
call fcn.00499a27
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2b0]
call fcn.0040a55c
inc esi
cmp esi, 0x2509
mov ecx, dword [ebp - 0x2c]
jl 0x422482
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x710c
jl 0x422480
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x28], 0x4559
jge 0x4224e8
push str.jdiqy_fzod_yzpbm_neeeslfr_ssga_ahxylwuv
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x422511
push 3
lea ecx, [ebp - 0xb4]
call fcn.00409f19
mov dword [ebp - 0x14], ebx
jmp 0x422533
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x422523
mov dword [ebp - 0x34], 0xd0c
cmp dword [ebp - 0x34], 0xf85
jle 0x422577
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov eax, esi
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc ebx
cmp ebx, 0x6903
jl 0x42254e
inc esi
cmp esi, 0x5ee5
push 0
pop ebx
jl 0x42254b
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x14], ebx
jl 0x422614
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x28], 0xac9d73df
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x104]
cmp dword [eax + ecx*4], 0xfffffff7
je 0x4225ac
cmp dword [ebp - 0x20], ebx
mov esi, edi
jne 0x4225ae
mov esi, ebx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
sub esi, eax
xor edx, edx
mov eax, dword [ebp - 0x104]
cmp esi, dword [eax + ecx*4]
setg dl
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, edx
setg cl
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setle dl
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
je 0x4225f7
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14], ebx
jne 0x422605
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov dword [eax + 4], edi
dec dword [ebp - 0x14]
jns 0x42258c
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x34], 0x9d3
jge 0x422633
mov edx, str.fdxx_ecclau_rghka_thwnezdd_slztvvof_qlw_njxnaeysj_oabuxqm_zcfvkuhqc_morzfqkp_uezna_zhanif
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x42265c
mov eax, dword [ebp - 0xb4]
lea ecx, [ebp - 0xb4]
call fcn.00409fc5
dec dword [ebp - 0x20]
jmp 0x422462
dec dword [ebp - 0x44]
inc dword [ebp - 0x18]
jmp 0x422447
lea ecx, [ebp - 0x104]
call fcn.00409fc5
lea ecx, [ebp - 0xd8]
call fcn.0041a541
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], ebx
jmp 0x4226af
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1f0], 0x9841
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x42269e
mov dword [ebp - 0x18], ebx
jmp 0x42271b
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x20], ebx
jmp 0x4226fd
mov dword [ebp - 0x14], ebx
jmp 0x4226d9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x50], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4226cb
mov dword [ebp - 0x50], ebx
jmp 0x4226f4
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x1f0], 0xffff
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 4
jl 0x4226e3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x4226c6
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x422718
push 0x1eac
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x4226ba
cmp dword [ebp - 0x40], 0
jne 0x4229ed
cmp dword [ebp - 0x24], 0
je 0x4229ed
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x40], 0x906c902d
mov dword [ebp - 0x28], 0x4bc9c3d0
push edi
lea ecx, [ebp - 0x12c]
call fcn.00409f19
mov dword [ebp - 0x28], 0xb722ba7b
mov dword [ebp - 0x34], 0xd777
mov dword [ebp - 0x14], ebx
jmp 0x42277c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x12c]
mov dword [eax + ecx*4], 0x6c218e99
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x422769
cmp dword [ebp - 0x30], ebx
mov eax, ebx
je 0x42278a
mov eax, edi
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
je 0x4227a7
cmp dword [ebp - 0x40], ebx
mov edx, edi
jne 0x4227a9
mov edx, ebx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp eax, 0xfff6
setne cl
add ecx, edx
mov eax, dword [ebp - 0x12c]
mov dword [eax], ecx
xor eax, eax
cmp ecx, 5
setl al
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x34]
lea ecx, [ebp - 0x12c]
call fcn.00409fc5
push dword [ebp - 0x48]
push dword [ebp - 0x24]
call fcn.00461f1c
pop ecx
pop ecx
mov esi, eax
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0x48], 0x19195c58
mov dword [ebp - 0x164], 6
mov dword [ebp - 0x160], 6
mov dword [ebp - 0x15c], 6
mov dword [ebp - 0x158], 6
mov dword [ebp - 0x24], ebx
jmp 0x422830
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x78], 0x25b9b55b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x422822
mov dword [ebp - 0x70], 0xffffffe3
jmp 0x4229d5
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x20], 0xef51
mov dword [ebp - 0x48], 0x3d2afddf
mov dword [ebp - 0x48], 2
mov dword [ebp - 0x24], ebx
jmp 0x422870
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x168], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x42285f
mov dword [ebp - 0x14], 0xffffffeb
jmp 0x4229c8
cmp dword [ebp - 0x14], 0x15
je 0x422881
cmp dword [ebp - 0x70], 0xffffffe9
jg 0x422842
lea eax, [ebp - 0x88]
push eax
call fcn.00422af5
mov dword [eax], esi
mov eax, dword [ebp + 8]
mov edi, eax
lea esi, [ebp - 0xc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret