Function at 0x4019f3
Capabilities:
Create directory
Create pipe
Delete file
Encrypt data using speck
Get common file path
Query environment variable

Disassembly:
mov eax, 0x4b361d
call fcn.004b3228
sub esp, 0xd40
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x68], dl
mov dword [ebp - 0x100], ecx
mov dword [ebp - 0x34], 0x4c6b
cmp dword [ebp - 0x34], 0x4ddb
jle 0x401a76
xor eax, eax
mov esi, eax
mov dword [ebp - 0x2c], eax
mov edi, eax
mov dword [ebp - 0x38], eax
mov ebx, eax
mov eax, esi
cdq
idiv edi
mov dword [ebp - 0x28], edx
mov esi, 0x5a6b
mov edi, edx
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
add ebx, edi
dec esi
jne 0x401a3f
mov edi, dword [ebp - 0x38]
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x7313
push esi
pop eax
mov esi, dword [ebp - 0x2c]
jl 0x401a2e
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x4e6
push 0
pop eax
jl 0x401a29
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0x6cc]
call fcn.0040e140
and dword [ebp - 4], 0
cmp dword [ebp - 0x34], 0x4c54
jge 0x401aa1
mov edx, str.akjl_mhdhtnuz_zwcfsxrz_wnlwb_mmpmf_aqqkaaw_tuwbog_npynwyd_vnkhhultq_ajg_ppcar
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x401acc
mov dword [ebp - 0x20], eax
jmp 0x401ae4
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x6cc]
mov dword [eax + ecx*4], 0x97f6af11
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x401ad1
push 0xffffffffffffffe2
pop ebx
mov eax, dword [ebp - 0x6cc]
mov dword [eax], ebx
lea ecx, [ebp - 0x6cc]
call fcn.0040e212
push edi
lea ecx, [ebp - 0x450]
call fcn.0040e140
mov dword [ebp - 0x20], 0
jmp 0x401b27
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x450]
mov dword [eax + ecx*4], 0x97f6af11
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x401b14
mov eax, dword [ebp - 0x450]
mov dword [eax], ebx
lea ecx, [ebp - 0x450]
call fcn.0040e212
mov dword [ebp - 0x24], 0x62d5e48d
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x24], 0
jmp 0x401c12
mov dword [ebp - 0x18], 0xa9a97186
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x401b9a
mov dword [ebp - 0x38], 0xfd9ab8a8
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x401c0f
push 0x1dd2
call dword [sym.imp.USER32.dll_ShowCaret]
jmp 0x401c0f
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3f8], 0x87fd074d
mov dword [ebp - 0x3f4], 0x87fd074d
mov dword [ebp - 0x3f0], 0x87fd074d
mov dword [ebp - 0x3ec], 0x87fd074d
cmp dword [ebp - 0x24], eax
mov ecx, eax
je 0x401bce
mov ecx, edi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
xor eax, eax
cmp ecx, 0x26595ad3
sete al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3f4]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3f4], edi
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffec
jge 0x401b59
push edi
lea ecx, [ebp - 0x2ec]
call fcn.0040e140
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x20], 0
push 3
pop esi
jmp 0x401c52
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2c8], 0xae35
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x401c41
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], 0
jl 0x401c77
xor ebx, ebx
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x2c8], ebx
jne 0x401c77
dec dword [ebp - 0x18]
jns 0x401c66
mov eax, dword [ebp - 0x18]
add eax, esi
je 0x401c88
cmp dword [ebp - 0x18], 0
je 0x401c88
mov edx, edi
jmp 0x401c8a
xor edx, edx
mov eax, dword [ebp - 0x2c4]
xor ecx, ecx
cmp eax, edx
setle cl
mov eax, dword [ebp - 0x2c0]
xor ebx, ebx
cmp ecx, eax
setne bl
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c8]
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
cmp edx, ebx
setle cl
mov eax, 0x59d568d5
sub eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], 0
jmp 0x401ced
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2ec]
mov dword [eax + ecx*4], 0x97f6af11
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x401cda
mov dword [ebp - 0x72c], 0x2d5e48d3
mov dword [ebp - 0x728], 0x2d5e48d3
mov dword [ebp - 0x724], 0x2d5e48d3
mov dword [ebp - 0x720], 0x2d5e48d3
mov dword [ebp - 0x20], 0
jmp 0x401d34
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x280], 0x61f6656
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x401d23
mov byte [ebp - 0x41], 0
cmp byte [ebp - 0x41], 0
je 0x401d4c
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x274], 0
jmp 0x401d6f
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x72c], 0x58bac04e
inc dword [ebp - 0x274]
cmp dword [ebp - 0x274], 4
jl 0x401d58
mov eax, dword [ebp - 0x2ec]
mov dword [eax], 0xffffffe2
cmp dword [eax], 0x12
jle 0x402c3b
mov dword [ebp - 0x34], 0x734b
cmp dword [ebp - 0x34], 0x76fa
jle 0x401e17
and dword [ebp - 0x2c], 0
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x38], 0x5c3e
xor esi, esi
xor edi, edi
xor ebx, ebx
lea eax, [edi + esi]
xor eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0xbf0]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xbf0]
call fcn.0040e5e0
inc edi
cmp edi, 0x7655
mov ecx, dword [ebp - 0x1c]
jl 0x401db3
inc esi
cmp esi, 0x348b
jl 0x401daf
mov eax, dword [ebp - 0x2c]
add ecx, eax
mov dword [ebp - 0x1c], ecx
dec dword [ebp - 0x38]
jne 0x401dad
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x1e6d
jl 0x401da1
xor edi, edi
inc edi
push 3
pop esi
mov dword [ebp - 4], 2
cmp dword [ebp - 0x34], 0x7016
jge 0x401e32
push str.hjjqs_szwaixaf_bbntdlk_iypbkxcmb
call fcn.0049dd57
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x401e60
mov dword [ebp - 0x48], 0x75286e87
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x401e83
xor ebx, ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6b4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x401e71
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x6b4], eax
mov dword [ebp - 0x48], 0
jmp 0x401ea9
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x6b4], 0xfffffff9
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], esi
jl 0x401e98
push 4
lea ecx, [ebp - 0x190]
call fcn.0040e140
mov dword [ebp - 0x48], 0x6ce125d1
mov dword [ebp - 0x40], 0x4288a137
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x401eeb
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x984], 0x24a8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x401ed3
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x401f00
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
xor eax, eax
mov dword [ebp - 0x48], eax
jmp 0x401f16
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x984], 0xffffffff
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], esi
jl 0x401f05
movdqa xmm0, xmmword [0xa8cf70]
movdqu xmmword [ebp - 0x918], xmm0
lea ecx, [ebp - 0x918]
lea eax, [ebp - 0x908]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x748]
call fcn.0040e1ec
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], esi
jge 0x401f65
xor ebx, ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xbc0], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x401f53
mov eax, dword [ebp - 0x748]
mov dword [eax], 0xffffffea
mov dword [ebp - 0x1c], 0x504e
cmp dword [ebp - 0x1c], 0x533c
jle 0x401feb
xor esi, esi
mov dword [ebp - 0x34], esi
xor edi, edi
mov dword [ebp - 0x2c], 0x812
xor esi, esi
mov dword [ebp - 0x38], 0x2f44
xor ebx, ebx
mov eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0xb0c]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xb0c]
call fcn.0040e5e0
add esi, edi
dec dword [ebp - 0x38]
jne 0x401f9a
mov esi, dword [ebp - 0x34]
add edi, esi
dec dword [ebp - 0x2c]
jne 0x401f8f
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x79d8
jl 0x401f86
xor edi, edi
inc edi
push 3
pop esi
mov byte [ebp - 0x41], 0
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1c], 0x4fb8
jge 0x40200a
push str.tyuvgias_iyczhrbw_htrp_urjb_pwpmzlarb_wvga_lwktvptdv_tcohfouef_ezxhfimy_govp
call fcn.0049dd57
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x402038
push 2
pop ebx
cmp byte [ebp - 0x41], 0
je 0x402049
push eax
push eax
call dword [sym.imp.USER32.dll_UnregisterClassA]
lea ecx, [ebp - 0x748]
call fcn.0040e212
mov dword [ebp - 0x20], 0
jmp 0x402070
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x40205d
push esi
lea ecx, [ebp - 0x82c]
call fcn.0040e140
mov dword [ebp - 0x48], 0x8a1f9496
mov dword [ebp - 0x2c], 0x566a9272
mov dword [ebp - 0x20], 0
jmp 0x4020a8
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x82c]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x402099
mov dword [ebp - 0x48], ebx
cmp dword [ebp - 0x48], 0
jl 0x402146
mov dword [ebp - 0x18], 0xb1658084
push ebx
lea ecx, [ebp - 0x818]
call fcn.0040e140
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x4020f3
xor ebx, ebx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x818]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x4020d9
xor eax, eax
push 2
pop ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x402122
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x40211d
push eax
push eax
push 0x2593
push 0x18b3
push 0x15e3
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
xor eax, eax
dec dword [ebp - 0x18]
jns 0x4020fb
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x402132
inc dword [ebp - 0x2c]
dec dword [ebp - 0x18]
jns 0x40212a
lea ecx, [ebp - 0x818]
call fcn.0040e212
dec dword [ebp - 0x48]
jns 0x4020ba
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x82c]
call fcn.0040e212
mov ecx, dword [ebp - 0x190]
add ecx, 4
xor eax, eax
mov dword [ecx], eax
cmp dword [ecx], 0xfffffff6
jg 0x4025ed
mov dword [ebp - 0x40], 0x42eb90da
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x40218f
push 0x24b0
push 0x41e
call dword [sym.imp.GDI32.dll_SetTextAlign]
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x40219f
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
push edi
lea ecx, [ebp - 0x2d4]
call fcn.0040e140
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x28], 0x9e0d
mov dword [ebp - 0x24], 0
jmp 0x4021d0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x58], 0xf506e60b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x4021c2
mov dword [ebp - 0x24], 0
jmp 0x4021ef
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x134], 0xcfe0c2df
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x4021de
cmp dword [ebp - 0x58], 0
jne 0x402200
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x58]
je 0x40230c
xor eax, eax
cmp dword [ebp - 0x58], eax
je 0x40230e
mov dword [ebp - 0x48], 0xffffffff
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x402240
push eax
push 7
call dword [sym.imp.USER32.dll_MonitorFromWindow]
xor eax, eax
mov dword [ebp - 0x48], 0xffffffe9
cmp dword [ebp - 0x48], eax
jg 0x40238a
mov dword [ebp - 0x38], 0x13e458c4
push ebx
lea ecx, [ebp - 0x48c]
call fcn.0040e140
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x20], 0
jmp 0x402286
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48c]
mov dword [eax + ecx*4], 0x2b8319b8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x402273
mov eax, dword [ebp - 0x48]
add eax, ebx
jne 0x402299
cmp dword [ebp - 0x38], eax
mov esi, eax
je 0x40229b
mov esi, edi
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x58]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x58]
add eax, edx
xor ecx, ecx
cmp eax, esi
setg cl
neg ecx
xor edx, edx
mov eax, dword [ebp - 0x48c]
cmp ecx, dword [eax + 4]
setne dl
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
mov byte [ebp - 0x41], 0
cmp byte [ebp - 0x41], 0
je 0x4022eb
push 0x21ad
push 0x592
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
lea ecx, [ebp - 0x48c]
call fcn.0040e212
inc dword [ebp - 0x48]
xor ebx, ebx
cmp dword [ebp - 0x48], ebx
push 2
pop ebx
jle 0x402250
push 3
pop esi
jmp 0x402388
xor eax, eax
mov dword [ebp - 0x18], 0x58390a34
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x402335
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x130], 0xfff9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x40231d
xor eax, eax
cmp dword [ebp - 0x18], eax
mov ecx, edi
jne 0x40233e
mov ecx, eax
mov eax, dword [ebp - 0x58]
imul eax, ecx
cmp dword [ebp - 0x18], eax
jle 0x40234c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x58]
inc dword [ebp - 0x130]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
inc eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x134], eax
xor eax, eax
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x28], 0x983c17a3
mov dword [ebp - 0x40], 0x996f
mov dword [ebp - 0x20], eax
jmp 0x4023bb
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9c], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x4023ae
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], 0
je 0x4023d8
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x402456
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2d4]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x40243c
xor eax, eax
mov dword [ebp - 0x144], 0xfffffff8
mov dword [ebp - 0x140], 0xfffffff8
mov dword [ebp - 0x13c], 0xfffffff8
mov dword [ebp - 0x138], 0xfffffff8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x40249e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x630], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x402486
xor eax, eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], ebx
jg 0x4024e3
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp + eax*4 - 0x630]
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x630], ecx
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp + eax*4 - 0x630]
inc dword [ebp - 0x144]
cmp dword [ebp - 0x144], ebx
jle 0x4024ac
xor eax, eax
mov byte [ebp - 0x41], al
mov dword [ebp - 0x34], 0x3ee3
cmp dword [ebp - 0x34], 0x3fa7
jle 0x40257f
mov ecx, eax
mov dword [ebp - 0x20], ecx
jmp 0x402503
xor eax, eax
mov edi, eax
jmp 0x402509
xor eax, eax
mov esi, eax
xor ebx, ebx
lea edx, [esi + edi]
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x2c], 0x1453
mov eax, ecx
xor eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xc80]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xc80]
call fcn.0040e5e0
mov edx, dword [ebp - 0x38]
dec edx
mov dword [ebp - 0x38], edx
dec dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x20]
jne 0x40251a
inc esi
cmp esi, 0x3def
jl 0x40250d
inc edi
cmp edi, 0x918
jl 0x402507
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x4c26
jl 0x402501
xor edi, edi
inc edi
push 3
pop esi
jmp 0x402581
xor ebx, ebx
cmp byte [ebp - 0x41], 0
je 0x40258d
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x34], 0x3cff
jge 0x4025a8
push str.uvugr_irw_ebt_zjg_gmeofz_nayl_fudo_qnafze_jwzwbomgz_akf_llp_usvcozlr_ffmw_fzl
call fcn.0049dd57
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x4025d4
mov eax, dword [ebp - 0x2d4]
cmp dword [eax], ebx
je 0x4026af
lea ecx, [ebp - 0x2d4]
call fcn.0040e212
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x38], 0xf888c554
mov dword [ebp - 0x1c], 0xb2bc8f96
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x38], 0x563ade45
movdqa xmm0, xmmword [0xa8cf10]
movdqu xmmword [ebp - 0x8f8], xmm0
lea ecx, [ebp - 0x8f8]
lea eax, [ebp - 0x8e8]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x868]
call fcn.0040e1ec
xor eax, eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], edi
jge 0x402658
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x114], 0xdc87a9b6
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], edi
jl 0x402640
xor eax, eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x40267a
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xa3c], 0x1111919b
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 4
jl 0x402661
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x402b54
mov edx, edi
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setl cl
mov eax, 0xe96f
sub eax, ecx
jne 0x40269d
cmp eax, dword [ebp - 0x24]
je 0x4026a8
mov eax, edi
cmp eax, dword [ebp - 0x24]
jg 0x402b52
mov edx, edi
jmp 0x402b56
push esi
lea ecx, [ebp - 0x468]
call fcn.0040e140
mov dword [ebp - 0x40], 0xcdf98a59
mov dword [ebp - 0x40], 0xefc07e17
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x24], 0
jmp 0x4026e5
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x468]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x4026d5
mov dword [ebp - 0x24], 0
jmp 0x402704
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7dc], 0xc3fbb4eb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x4026f3
mov eax, dword [ebp - 0x468]
dec dword [eax + 8]
dec dword [ebp - 0x38]
lea ecx, [ebp - 0x468]
call fcn.0040e212
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x848]
call fcn.0040e140
mov dword [ebp - 0x1c], 0xeaa32b1c
mov dword [ebp - 0x28], 0xfd1e814b
mov dword [ebp - 0x20], 0
jmp 0x402759
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x848]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x402746
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], 0
jl 0x402788
mov byte [ebp - 0x41], 0
cmp byte [ebp - 0x41], 0
je 0x40277c
push 0xc2d
call dword [sym.imp.USER32.dll_IsIconic]
mov dword [ebp - 0x28], 0xfffffffa
dec dword [ebp - 0x1c]
jns 0x402767
lea ecx, [ebp - 0x848]
call fcn.0040e212
xor ebx, ebx
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x20], 0xd4e06482
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x38], 0x66e9f086
mov dword [ebp - 0x28], edi
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x858]
call fcn.0040e140
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x24], 0
jmp 0x4027e7
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x978], 0x925b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x4027d6
mov dword [ebp - 0x24], 0
jmp 0x402808
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x858]
mov dword [eax + ecx*4], 0x40e13f5e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x4027f5
mov dword [ebp - 0x24], 0
jmp 0x402827
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xab8], 0xccca
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x402816
mov dword [ebp - 0x20], 0
jmp 0x4028d2
mov dword [ebp - 0x18], 0x45db34e6
mov dword [ebp - 0x38], 8
mov byte [ebp - 0x41], 0
cmp byte [ebp - 0x41], 0
je 0x40285b
push 0x142b
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0
jl 0x4028cf
mov dword [ebp - 0x2c], 0x5ccb9725
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, 0xe662
setle cl
cmp ecx, dword [ebp - 0x2c]
jle 0x40288f
xor eax, eax
cmp dword [ebp - 0x18], eax
mov edx, eax
je 0x402891
mov edx, edi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x978]
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
xor eax, eax
cmp ecx, 0xa116
setle al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x18]
jns 0x402864
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x402838
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x858]
call fcn.0040e212
cmp byte [ebp - 0x11], 0
je 0x402964
mov dword [ebp - 0x24], 0x90c4
mov dword [ebp - 0x20], 6
push esi
lea ecx, [ebp - 0x5a0]
call fcn.0040e140
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x40292d
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x5a0]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x402913
xor eax, eax
cmp dword [ebp - 0x24], 0xfffb
jne 0x402981
mov dword [ebp - 0x24], eax
jmp 0x402947
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe7
jg 0x40293b
lea ecx, [ebp - 0x5a0]
call fcn.0040e212
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
push 2
pop ebx
lea ecx, [ebp - 0x2d4]
call fcn.0040e212
mov ecx, dword [ebp - 0x190]
add ecx, 4
dec dword [ecx]
xor eax, eax
jmp 0x402164
mov dword [ebp - 0x48], 0x97bc8b4
mov dword [ebp - 0x18], 0x7731
mov dword [ebp - 0x24], 4
cmp dword [ebp - 0x24], 0xffffffff
jl 0x402a15
jmp 0x4029a0
xor eax, eax
mov dword [ebp - 0x30], 0xacff
cmp dword [ebp - 0x30], eax
je 0x4029c8
mov ecx, edi
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x30]
lea eax, [ecx - 0xb2fc]
cmp dword [ebp - 0x30], eax
jle 0x4029c6
mov eax, edi
jmp 0x4029c8
xor eax, eax
lea ecx, [eax - 0x2299bf79]
sub ecx, dword [ebp - 0x48]
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
test ecx, ecx
setg al
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x402a06
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x402a03
push 0xfdc
push 0x1a97
push eax
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x21
jl 0x4029e7
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffff
jge 0x40299e
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jg 0x40294d
mov dword [ebp - 0x28], 0xf321ee01
mov dword [ebp - 0x28], 0x5d7c1543
mov dword [ebp - 0x34], 0x220e
cmp dword [ebp - 0x34], 0x22ac
jle 0x402aad
mov edi, eax
mov esi, eax
xor ebx, ebx
mov ecx, esi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x2c], 0x154b
mov eax, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0xb3c]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xb3c]
call fcn.0040e5e0
mov ecx, dword [ebp - 0x38]
dec ecx
mov dword [ebp - 0x38], ecx
dec dword [ebp - 0x2c]
jne 0x402a53
inc esi
cmp esi, 0x26fc
jl 0x402a47
inc edi
cmp edi, 0x6652
push 0
pop eax
jl 0x402a43
xor edi, edi
inc edi
push 3
pop esi
push 2
pop ebx
mov dword [ebp - 0x24], eax
jmp 0x402ae7
mov dword [ebp - 0x48], eax
jmp 0x402adf
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x402ad5
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x5a0]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x20]
jns 0x402abf
xor eax, eax
mov dword [ebp - 0x28], 0xffffffff
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], ebx
jle 0x402ab7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x402ab2
mov dword [ebp - 4], 8
cmp dword [ebp - 0x34], 0x2108
jge 0x402b07
push str.pxmvcfhmi_vynwrdhq_ovb
call fcn.0049dd57
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x402b38
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x402b48
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
inc dword [ebp - 0x18]
xor eax, eax
jmp 0x402a1a
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
imul edx, dword [ebp - 0x24]
add edx, 0x6982b357
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x114], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x24], 0xa40f
push 5
pop edx
sub edx, eax
add edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
cmp ecx, 0xbc71
setg dl
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x402bd1
cmp dword [ebp - 0x24], eax
mov edx, edi
jne 0x402bd3
mov edx, eax
mov eax, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0x868]
mov dword [eax + 8], edx
mov ecx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0xa3c], edx
lea ecx, [ebp - 0x868]
call fcn.0040e212
mov eax, dword [ebp - 0x190]
xor ebx, ebx
lea ecx, [ebp - 0x190]
call fcn.0040e212
mov eax, dword [ebp - 0x2ec]
inc dword [eax]
jmp 0x401d84
lea ecx, [ebp - 0x2ec]
call fcn.0040e212
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x38], 0xffffffff
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x402c72
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9c0], 0x204e2db5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x402c5a
xor eax, eax
mov dword [ebp - 0x18], eax
push 2
pop ebx
jmp 0x402c93
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x402c90
push 0x241b
call dword [sym.imp.USER32.dll_SetCapture]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x402c7a
cmp dword [ebp - 0x9b8], eax
je 0x402ca7
cmp dword [ebp - 0x18], eax
mov edx, edi
jne 0x402ca9
mov edx, eax
cmp dword [ebp - 0x18], 0x84515fdc
sbb eax, eax
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x18]
jle 0x402cc8
cmp dword [ebp - 0x38], 0
jne 0x402cc8
mov edx, edi
jmp 0x402cca
xor edx, edx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x402cff
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x990], 0x204e2db5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x402ce7
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x402d1d
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x402d1a
push 0x241b
call dword [sym.imp.USER32.dll_SetCapture]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x402d04
cmp dword [ebp - 0x988], eax
je 0x402d31
cmp dword [ebp - 0x18], eax
mov edx, edi
jne 0x402d33
mov edx, eax
cmp dword [ebp - 0x18], 0x84515fdc
sbb eax, eax
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x18]
jle 0x402d52
cmp dword [ebp - 0x38], 0
jne 0x402d52
mov edx, edi
jmp 0x402d54
xor edx, edx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], 5
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x402d98
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x402d81
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x402d95
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_UnionRect]
xor eax, eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffd
jge 0x402d6f
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x20], eax
jmp 0x402dd3
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x402dbc
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x402dd0
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_UnionRect]
xor eax, eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffd
jge 0x402daa
mov dword [ebp - 0x24], 0xe0648261
mov dword [ebp - 0x30], 0x2285faaf
push ebx
lea ecx, [ebp - 0x6a8]
call fcn.0040e140
mov dword [ebp - 0x20], 0
jmp 0x402e0f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x6a8]
mov dword [eax + ecx*4], 0xd4e2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x402dfc
mov dword [ebp - 0x24], 0xffffffff
jmp 0x402e86
push esi
lea ecx, [ebp - 0x480]
call fcn.0040e140
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], 0
jmp 0x402e4c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x480]
mov dword [eax + ecx*4], 0xb0e4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x402e39
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0
jl 0x402e72
xor ebx, ebx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x480]
cmp dword [eax + ecx*4], ebx
jne 0x402e6f
dec dword [ebp - 0x20]
jns 0x402e5c
push 2
pop ebx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x480]
call fcn.0040e212
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xa
je 0x402e1d
mov dword [ebp - 0x24], 0
jmp 0x402ee6
mov dword [ebp - 0x48], 7
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
add ecx, 0x9a02
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x48]
imul eax, edx, 0xfffffff7
test eax, eax
jne 0x402ec3
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], edi
mov eax, dword [ebp - 0x6a8]
mov edx, dword [eax]
neg edx
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x13
jl 0x402e95
lea ecx, [ebp - 0x6a8]
call fcn.0040e212
mov dword [ebp - 0x48], 0x9f9b3198
mov dword [ebp - 0x28], 0xbca9d692
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x38], 0xe637c5b1
mov dword [ebp - 0x50], 0xbd13d8c5
mov dword [ebp - 0x40], 0xed99ea7
mov dword [ebp - 0x40], 0x36dc9922
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x20], eax
jmp 0x402f45
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd3c], 0x5dea311c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x402f34
mov dword [ebp - 0x48], 0xfffffffe
jmp 0x40311a
push ebx
lea ecx, [ebp - 0x304]
call fcn.0040e140
mov dword [ebp - 0x40], 0xffffffff
xor ebx, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], 0x4aa41a80
push 4
lea ecx, [ebp - 0x4b0]
call fcn.0040e140
push edi
lea ecx, [ebp - 0x5b8]
call fcn.0040e140
mov dword [ebp - 0x40], 8
mov dword [ebp - 0x2c], 0x3e2e1665
mov eax, 0xffff
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], eax
push edi
lea ecx, [ebp - 0x498]
call fcn.0040e140
mov dword [ebp - 0x38], 0x75da
mov dword [ebp - 0x54], ebx
push 2
pop ebx
jmp 0x402fe4
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x304]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], ebx
jl 0x402fd5
mov dword [ebp - 0x54], 0
jmp 0x403005
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4b0]
mov dword [eax + ecx*4], 0x5fd0a320
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 4
jl 0x402ff2
mov dword [ebp - 0x54], 0
jmp 0x403027
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x5b8]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], edi
jl 0x403014
mov dword [ebp - 0x54], 0
jmp 0x403044
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x498]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], edi
jl 0x403035
mov esi, dword [ebp - 0x304]
and dword [esi + 4], 0
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x298]
mov eax, dword [ebp - 0x298]
jne 0x4030a4
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x498]
cmp dword [eax], ecx
jle 0x403084
mov eax, dword [ebp - 0x4b0]
xor ebx, ebx
push 2
cmp dword [eax + 8], ebx
pop ebx
jne 0x403084
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x5b8]
cmp dword [eax], edi
setle cl
xor eax, eax
cmp ecx, 7
setl al
cmp eax, 0x2576953c
jl 0x4030a4
xor eax, eax
jmp 0x4030a6
mov eax, edi
add eax, 0x757b2dc9
je 0x4030b7
cmp dword [ebp - 0x2c], 0
je 0x4030b7
mov ecx, edi
jmp 0x4030b9
xor ecx, ecx
mov eax, dword [ebp - 0x304]
mov edx, dword [eax]
sub edx, ecx
mov dword [esi + 4], edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x19d6b80f
setne al
sub eax, 0xfffffff8
add eax, dword [ebp - 0x48]
neg eax
sbb eax, eax
inc eax
neg eax
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x498]
call fcn.0040e212
lea ecx, [ebp - 0x5b8]
call fcn.0040e212
lea ecx, [ebp - 0x4b0]
call fcn.0040e212
lea ecx, [ebp - 0x304]
call fcn.0040e212
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xfffffff5
jle 0x402f57
mov dword [ebp - 0x40], edi
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x40313f
push eax
push 0x1649
call dword [sym.imp.USER32.dll_FlashWindow]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x403155
push eax
push 0x6e1
push eax
call dword [sym.imp.GDI32.dll_GetBitmapBits]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x20], 0xffff
mov dword [ebp - 0x38], 0x5ee4c20f
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x28], 0xd35da2a0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setne dl
xor ebx, ebx
cmp edx, 6
setne bl
add ebx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp ebx, eax
setl cl
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setge dl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0xfffffff6
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x18]
xor eax, eax
cmp ecx, 0x4872
setl al
push 8
pop ecx
sub eax, 0x2a43
add eax, ecx
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, 5
setne cl
mov dword [ebp - 0x28], ecx
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x403224
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
xor eax, eax
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x34], 0x9d6
cmp dword [ebp - 0x34], 0xa9a
jle 0x4032a2
mov ecx, eax
mov dword [ebp - 0x2c], eax
mov ebx, eax
mov dword [ebp - 0x38], eax
mov esi, eax
mov edx, ecx
mov ecx, ebx
sar edx, cl
mov dword [ebp - 0x28], edx
mov edi, eax
mov ebx, edx
mov ecx, esi
sar ebx, cl
mov eax, edi
xor eax, ebx
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
inc edi
cmp edi, 0x16ee
jl 0x403258
inc esi
cmp esi, 0x4d93
push 0
pop eax
mov edx, dword [ebp - 0x28]
jl 0x403250
mov ebx, dword [ebp - 0x38]
inc ebx
mov dword [ebp - 0x38], ebx
cmp ebx, 0x4ecd
mov ecx, dword [ebp - 0x2c]
jl 0x403245
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x1ff2
jl 0x403240
xor edi, edi
inc edi
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x34], 0x9ba
jge 0x4032c1
mov edx, str.ndjuolnt_tntdyu_ktxpqffl_ixvlzed_exkj_mcsuzeavs_ayhe_vjkvyfzt_kecotmn_gbut_fas_tzmrx_nyccev
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
jmp 0x4032e8
push edi
lea ecx, [ebp - 0x648]
call fcn.0040e140
mov dword [ebp - 0x30], 0x7831e42a
mov dword [ebp - 0x38], 0x22d4
cmp dword [ebp - 0x38], 0x25ec
jle 0x403334
xor esi, esi
xor edi, edi
mov ebx, 0x52c1
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
add edi, esi
dec ebx
jne 0x403314
inc esi
cmp esi, 0x5f0d
jl 0x40330d
xor edi, edi
inc edi
mov dword [ebp - 0x40], 0xfffffffe
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x38], 0x20b8
jge 0x40335a
mov edx, str.yfnu_ntjmg_bxosox_tio_qrbytkl_ubfto_xaaihgn_thx_iiyech
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x403385
mov dword [ebp - 0x38], 0x87223b16
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x4033ae
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x648]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x403394
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x4033c4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x84c], 0x71865425
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x4033b3
mov eax, dword [ebp - 0x648]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x30], eax
jmp 0x403441
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x403400
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xcd4], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x4033e7
xor eax, eax
dec dword [ebp - 0x48]
dec dword [ebp - 0x38]
mov dword [ebp - 0x48], eax
jmp 0x403439
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x40341e
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x403436
push eax
push 0x6e1
push eax
call dword [sym.imp.GDI32.dll_GetBitmapBits]
xor eax, eax
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], eax
jle 0x40340b
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jle 0x4033db
lea ecx, [ebp - 0x648]
call fcn.0040e212
mov dword [ebp - 0x18], 0x825e
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x2c], 0x39d
mov dword [ebp - 0x28], 0x8ccedb77
inc dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x30
jle 0x4034f9
mov dword [ebp - 0x20], 0x17059141
mov dword [ebp - 0x28], 6
cmp dword [ebp - 0x2c], eax
je 0x40349e
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jg 0x40349c
mov ecx, edi
xor eax, eax
jmp 0x4034a0
xor eax, eax
mov ecx, eax
cmp ecx, dword [ebp - 0x20]
jg 0x4034ac
cmp dword [ebp - 0x38], eax
mov esi, eax
je 0x4034ae
mov esi, edi
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x20]
add eax, esi
imul edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setl dl
sub edx, dword [ebp - 0x28]
neg edx
sbb edx, edx
inc edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x28], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x30
push 0
pop eax
jg 0x40347b
mov dword [ebp - 0x20], eax
jmp 0x40350f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9a8], 0x204e2db5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x4034fe
mov dword [ebp - 0x40], 0x7dfa860b
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 0x40], 0x2cb51dba
mov dword [ebp - 0x40], 0x43250e6d
movdqa xmm0, xmmword [0xa8cf80]
movdqu xmmword [ebp - 0x938], xmm0
lea ecx, [ebp - 0x938]
lea eax, [ebp - 0x928]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x9f0]
call fcn.0040e1ec
mov dword [ebp - 0x40], 0xfffffffb
mov dword [ebp - 0x40], 0xb3bfa32a
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 0x38], 0xdae4
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x40358a
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
inc dword [ebp - 0x38]
lea ecx, [ebp - 0x9f0]
call fcn.0040e212
mov dword [ebp - 0x34], 0x4220
cmp dword [ebp - 0x34], 0x4251
jle 0x403622
xor eax, eax
push eax
push eax
call dword [sym.imp.USER32.dll_CharUpperBuffW]
xor eax, eax
mov dword [ebp - 0x2c], eax
xor esi, esi
mov dword [ebp - 0x38], esi
xor edi, edi
mov dword [ebp - 0x28], eax
mov ecx, esi
mov esi, eax
shl esi, cl
xor ebx, ebx
mov eax, esi
and eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xc20]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xc20]
call fcn.0040e5e0
inc edi
cmp edi, 0x78e1
jl 0x4035c9
mov esi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x1399
mov eax, dword [ebp - 0x2c]
jl 0x4035bc
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x2a2d
jl 0x4035b7
xor edi, edi
inc edi
mov dword [ebp - 0x18], 0
push 2
pop ebx
cmp dword [ebp - 0x18], ebx
jg 0x403829
lea eax, [ebp - 0x70c]
lea ecx, [ebp - 0x6fc]
movdqa xmm0, xmmword [0xa8cf20]
movdqu xmmword [ebp - 0x70c], xmm0
push ecx
push ecx
push eax
lea ecx, [ebp - 0x87c]
call fcn.0040e1ec
mov dword [ebp - 0x28], 0x5286e871
mov dword [ebp - 0x40], 6
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x403689
push eax
push 0x8b2
push eax
push 0x258b
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov eax, dword [ebp - 0x87c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x87c]
call fcn.0040e212
xor eax, eax
mov byte [ebp - 0x41], al
mov dword [ebp - 0x40], edi
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x4036bd
push 0x1220
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x4036cd
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
cmp byte [ebp - 0x41], 0
je 0x403811
push 3
lea ecx, [ebp - 0x230]
call fcn.0040e140
mov dword [ebp - 0x24], 0x6915a136
mov dword [ebp - 0x2c], 0x28217c71
mov dword [ebp - 0x20], 0
jmp 0x40370a
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x230]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x4036fb
mov dword [ebp - 0x24], 0
jmp 0x4037c6
push 3
lea ecx, [ebp - 0x1f0]
call fcn.0040e140
mov dword [ebp - 0x20], 0
jmp 0x403745
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1f0]
mov dword [eax + ecx*4], 0xafa01777
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x403732
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x230]
xor ebx, ebx
cmp dword [eax + ecx*4], ebx
jne 0x4037d1
cmp dword [ebp - 0x24], ebx
jle 0x40371c
jmp 0x4037df
mov eax, dword [ebp - 0x230]
mov eax, dword [eax + 8]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp eax, ecx
setg dl
mov dword [ebp - 0x2c], edx
lea ecx, [ebp - 0x230]
call fcn.0040e212
push 0x241b
call dword [sym.imp.USER32.dll_SetCapture]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
lea eax, [ebp - 0x70c]
lea ecx, [ebp - 0x6fc]
jle 0x403641
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x34], 0x3e46
jge 0x403844
push str.pmhad_ldh_fmwbcgto_qko_yjnzes_chl_rbnvxb_sxtbzjt
call fcn.0049dd57
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x40386f
mov dword [ebp - 0x34], 0x7221
cmp dword [ebp - 0x34], 0x7560
jle 0x4038e6
mov edi, eax
mov dword [ebp - 0x2c], edi
jmp 0x403888
xor eax, eax
mov esi, eax
xor ebx, ebx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x38], 0x3128
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xb6c]
call fcn.004019bd
pop ecx
pop ecx
mov ecx, eax
call fcn.0040e020
push eax
call fcn.0049dd57
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xb6c]
call fcn.0040e5e0
add edi, esi
dec dword [ebp - 0x38]
jne 0x403896
dec esi
cmp esi, 0xffff91c1
mov edi, dword [ebp - 0x2c]
jg 0x40388c
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x71ac
jl 0x403886
xor edi, edi
inc edi
xor eax, eax
cmp dword [ebp - 0x9a0], eax
je 0x4038f7
cmp dword [ebp - 0x18], eax
mov edx, edi
jne 0x4038f9
mov edx, eax
cmp dword [ebp - 0x18], 0x84515fdc
sbb eax, eax
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x18]
jle 0x403918
cmp dword [ebp - 0x1c], 0
jne 0x403918
mov edx, edi
jmp 0x40391a
xor edx, edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x34], 0x6ebe
jge 0x403942
push str.mymo_odqqmeo_wjf_ewy_klwqvzq_hqzj_olkju
call fcn.0049dd57
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x40396d
push 2
pop esi
mov dword [ebp - 0x1c], 0xe5477a75
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x40399b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5c], 0xfffffffe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x403986
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x4039ae
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor eax, eax
mov dword [ebp - 0x5c], eax
jmp 0x403b28
mov dword [ebp - 0x28], 0x63070b7b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x4039da
cmp dword [ebp - 0x5c], 0xffffffe3
jne 0x4039b6
mov dword [ebp - 0x24], 0xe0648261
mov dword [ebp - 0x30], 0x2285faaf
push esi
lea ecx, [ebp - 0x4e0]
call fcn.0040e140
mov dword [ebp - 0x20], 0
jmp 0x403b68