Function at 0x42e9f5
Capabilities:
Allocate thread local storage
Authenticate hmac
Check http status code
Identify system language via api

Disassembly:
mov eax, 0x4cc6cb
call fcn.004cc0e0
sub esp, 0x330
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x1c], 0x5d6c
cmp dword [ebp - 0x1c], 0x60ee
jle 0x42ea6b
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x2c4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42ea43
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2c4]
call fcn.00402d9f
inc edi
cmp edi, 0x23ce
jl 0x42ea25
inc esi
cmp esi, 0x7c27
jl 0x42ea23
mov dword [ebp - 0x14], 0x6b63
cmp dword [ebp - 0x14], 0x6ded
jle 0x42eaef
xor edi, edi
xor esi, esi
mov dword [ebp - 0x20], esi
mov ebx, esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], 0x485f
mov esi, ebx
mov ebx, 0x5d98
mov eax, esi
xor eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x84]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42eab1
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x84]
call fcn.00402d9f
dec esi
dec ebx
jne 0x42ea95
mov ebx, dword [ebp - 0x28]
dec ebx
mov dword [ebp - 0x28], ebx
dec dword [ebp - 0x24]
jne 0x42ea8e
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x5661
jl 0x42ea82
inc edi
cmp edi, 0x5e99
jl 0x42ea7d
mov dword [ebp - 0x18], 0x9c8
and dword [ebp - 4], 0
cmp dword [ebp - 0x1c], 0x5a04
jge 0x42eb0e
push str.usvdvfzx_dwnvi_hhi_laus_qbisabpis_omdqbdtl_xulqh_jwxgwii_ndkwpqg
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x1744
cmp dword [ebp - 0x20], 0x1a1b
jle 0x42eb6c
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x294]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42eb44
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x294]
call fcn.00402d9f
inc edi
cmp edi, 0x5cb6
jl 0x42eb26
inc esi
cmp esi, 0x190
jl 0x42eb24
mov dword [ebp - 4], 2
cmp dword [ebp - 0x14], 0x6a1a
jge 0x42eb87
push str.rdn_kixd_crtacex_kdbarbs_dzftfjcu_utjjtyso
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x18], 0x25fc
jle 0x42ec6c
mov dword [ebp - 0x1c], 0x4103
cmp dword [ebp - 0x1c], 0x44bc
add eax, dword [ecx]
add byte [ecx + 0x44bce47d], al
add byte [eax], al
jle 0x42ebe5
xor edi, edi
xor esi, esi
mov dword [ebp - 0x14], esi
mov ebx, esi
mov esi, 0x805a
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec ebx
dec esi
jne 0x42ebb6
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x2114
jl 0x42ebaf
inc edi
cmp edi, 0x4f26
jl 0x42ebaa
je 0x42eb9b
shr eax, 1
and dl, byte [edi]
add al, 0xe8
das
aam 0x85
invalid
mov dword [ebp - 0x24], 0x66dd
cmp dword [ebp - 0x24], 0x670c
jle 0x42eca5
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x6fc8
jl 0x42ec80
inc esi
cmp esi, 0x77c6
jl 0x42ec7e
mov dword [ebp - 4], 6
cmp dword [ebp - 0x20], 0x16d2
jge 0x42ecc0
push str.uiyzbr_zskcbjxu_xivhxowc_gkn_vmfef_wadybpqa_vam_sbf_kkah
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x5c27
cmp dword [ebp - 0x20], 0x5ef0
jle 0x42ed3a
push 0
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x1c], esi
xor edi, edi
mov dword [ebp - 0x14], edi
and dword [ebp - 0x18], 0
mov eax, esi
cdq
idiv edi
mov dword [ebp - 0x28], edx
mov edi, 0x36d0
mov esi, dword [ebp - 0x18]
mov eax, esi
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add esi, dword [ebp - 0x28]
dec edi
jne 0x42ecfc
mov edi, dword [ebp - 0x14]
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x5589
mov esi, dword [ebp - 0x1c]
jl 0x42ece8
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0xb69
jl 0x42ece3
inc ebx
cmp ebx, 0xa2c
jl 0x42ecde
mov dword [ebp - 0x28], 0x5487
cmp dword [ebp - 0x28], 0x55e2
jle 0x42edd8
xor esi, esi
mov dword [ebp - 0x1c], esi
xor edi, edi
lea eax, [edi + esi]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0x336e
mov esi, eax
xor ebx, ebx
mov eax, esi
and eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xb4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42ed82
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb4]
call fcn.00402d9f
inc ebx
cmp ebx, 0x638a
jl 0x42ed66
dec esi
dec dword [ebp - 0x14]
jne 0x42ed64
inc edi
cmp edi, 0x147e
mov esi, dword [ebp - 0x1c]
jl 0x42ed55
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x673f
jl 0x42ed53
push 0x47c
push 0x15a9
push 0
push 0x1ab1
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x3c]
movzx eax, ax
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 8
cmp dword [ebp - 0x24], 0x641e
jge 0x42ee03
mov edx, str.lvtvx_ahplfx_ynjejaff_lkqril_lvvok_cczdwhtes_rkryr_cwcre_rlocgenwi_mjgcgna_tdcoltpth
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x20], 0x5a6b
jge 0x42ee26
mov edx, str.pfswi_hbhyiiie_oybfzu_hyne_ycdfrdnv_twduy_eka_nhuhyv_bgqh_joyujy_wxnli_gvfw
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x1635
cmp dword [ebp - 0x1c], 0x19ba
jle 0x42ee70
xor esi, esi
mov edi, esi
mov ebx, 0xf85
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec edi
dec ebx
jne 0x42ee43
inc esi
cmp esi, 0x4eb3
jl 0x42ee3c
push 0x236b
push 0x127d
push ebx
call dword [sym.imp.USER32.dll_InflateRect]
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x28], 0x5270
jge 0x42ee8b
push str.gpplytjjf_zfzn_cvutgpk_jzq
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x4ca0
cmp dword [ebp - 0x20], 0x4db1
jle 0x42eed9
xor esi, esi
mov dword [ebp - 0x14], esi
xor edi, edi
mov ebx, esi
mov esi, 0x2d5a
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add ebx, edi
dec esi
jne 0x42eead
inc edi
cmp edi, 0x468f
mov esi, dword [ebp - 0x14]
jl 0x42eea6
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x31d6
jl 0x42eea4
mov dword [ebp - 0x18], 0x79f
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1c], 0x1279
jge 0x42eeff
mov edx, str.ppuh_sicmjt_hiys_ugdlsxw_xzofd_bzmq_ajtjyb_vvxb_ccbahrw_vlrqqhu_bfssp
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x20], 0x4b0a
jge 0x42ef22
mov edx, str.fqaccgmx_vrk_meaoxn_jpskzrdl
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x18], 0x23a9
jle 0x42f0b9
mov dword [ebp - 0x14], 0x4d76
cmp dword [ebp - 0x14], 0x4ebe
jle 0x42efa1
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
lea ecx, [ebp - 0x204]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42ef62
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x204]
call fcn.00402d9f
inc edi
cmp edi, 0x5ca6
jl 0x42ef47
inc esi
cmp esi, 0x39a6
jl 0x42ef45
push 0xd67
push 0
push 0xf81
push 0x965
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
or dword [edi], 0x65680000
or dword [eax], eax
add bh, bh
adc eax, sym.imp.USER32.dll_SystemParametersInfoW
mov dword [ebp - 0x1c], 0x48ca
cmp dword [ebp - 0x1c], 0x4966
jle 0x42efd7
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x2f6c
jl 0x42efb5
inc esi
cmp esi, 0x64b9
jl 0x42efb3
scasd eax, dword es:[edi]
mov esi, 0x4555054c
or byte [ebx], al
mov eax, dword [0xf3e97da2]
xchg edx, eax
rcr byte [esi + 0x40], cl
push cs
loope 0x42ef92
or dh, byte [ebp + 0x4152137]
adc dl, byte [eax + 0x68]
inc esi
xor eax, 0x35580000
inc ebx
adc dword [edi], ecx
add cl, al
loopne 0x42efb8
mov dword [ebp - 0x20], 0x2cb
cmp dword [ebp - 0x20], 0x3fd
jle 0x42f12f
xor esi, esi
mov dword [ebp - 0x14], esi
xor edi, edi
xor ebx, ebx
mov eax, esi
cdq
idiv edi
mov esi, edx
mov eax, esi
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xe4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42f0f8
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xe4]
call fcn.00402d9f
inc ebx
cmp ebx, 0x2e2b
jl 0x42f0d9
inc edi
cmp edi, 0x363f
mov esi, dword [ebp - 0x14]
jl 0x42f0d0
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x48c4
jl 0x42f0ce
mov dword [ebp - 0x28], 0xcc9
mov dword [ebp - 0x24], 0x3d4f
cmp dword [ebp - 0x24], 0x3e8b
jle 0x42f1d5
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov dword [ebp - 0x14], esi
and dword [ebp - 0x18], 0
mov eax, edi
cdq
idiv esi
mov esi, edx
mov edi, dword [ebp - 0x18]
mov eax, esi
mov ecx, edi
shl eax, cl
and eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0x2f4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42f184
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2f4]
call fcn.00402d9f
inc edi
cmp edi, 0x126c
jl 0x42f164
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x7e2d
mov edi, dword [ebp - 0x1c]
jl 0x42f156
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x82a
jl 0x42f151
inc ebx
cmp ebx, 0x77bc
jl 0x42f14c
push 0x26b9
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x20], 0x20f
jge 0x42f1f0
push str.kca_kvporwy_rhiup_cjwy_krsgazp_kbsvcuz_neszxw
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x28], 0x1930
jle 0x42f300
sbb ebx, dword [ecx]
out dx, eax
or dword [edx], eax
inc ebx
loope 0x42f246
push ds
xor ecx, dword ss:[edx - 0x649bbf1f]
dec esi
ret
or ch, byte [ebp + 0x51422336]
invalid
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x24], 0x3d1e
jge 0x42f31b
push str.pips_tjyvdqd_sdmwdvhv_cuxoxhvjp_eoef_mirresp_oafusdvsw_mmilcsdo_dbxooi_kplfyn_lcngbifbe_gpfgr
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x3b47
cmp dword [ebp - 0x24], 0x3eb2
jle 0x42f358
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x50e
jl 0x42f333
inc esi
cmp esi, 0x7848
jl 0x42f331
mov dword [ebp - 0x28], 0x22c6
cmp dword [ebp - 0x28], 0x23ac
jle 0x42f406
push 0xc3c
push 0xef3
push 0xfe0
push 0x28b
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
xor edi, edi
mov dword [ebp - 0x20], edi
xor esi, esi
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x18], edi
mov ecx, esi
mov esi, edi
shl esi, cl
xor edi, edi
mov dword [ebp - 0x14], 0x66
mov eax, edi
xor eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x114]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42f3c2
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x114]
call fcn.00402d9f
add edi, ebx
dec dword [ebp - 0x14]
jne 0x42f3a6
inc ebx
cmp ebx, 0x796f
jl 0x42f39d
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x1ef1
mov edi, dword [ebp - 0x20]
jl 0x42f392
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x503f
jl 0x42f38d
mov dword [ebp - 0x2c], 0x3ce
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x24], 0x3823
jge 0x42f42c
mov edx, str.osjrhz_sxvxjbxe_qtm_zrui_mcmheeq
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x6e63
cmp dword [ebp - 0x20], 0x71bc
jle 0x42f482
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
xor ebx, ebx
mov eax, edi
cdq
idiv esi
mov edi, edx
mov eax, ebx
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0x73eb
jl 0x42f450
inc esi
cmp esi, 0x1140
mov edi, dword [ebp - 0x14]
jl 0x42f447
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x1a3d
jl 0x42f445
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x28], 0x227a
jge 0x42f49d
push str.mjlquxnk_cwhtmyeyd_tywhtm_brvmtpl_zuocncwt_moguexk_ipkqmi_whh_ammkacsia_rrdqijiem_edo_stdqpwfk_gywo
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x3eea
cmp dword [ebp - 0x24], 0x3f65
jle 0x42f510
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov dword [ebp - 0x14], esi
and dword [ebp - 0x28], 0
mov dword [ebp - 0x18], edi
mov ecx, esi
sar edi, cl
mov esi, dword [ebp - 0x28]
mov eax, edi
mov ecx, esi
shl eax, cl
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x77c0
jl 0x42f4cb
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x93f
mov edi, dword [ebp - 0x1c]
jl 0x42f4bd
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x7322
jl 0x42f4b8
inc ebx
cmp ebx, 0x28e2
jl 0x42f4b3
cmp dword [ebp - 0x2c], 0x22c0
jle 0x42f62a
mov dword [ebp - 0x14], 0x634f
cmp dword [ebp - 0x14], 0x64a2
jle entry0
xor esi, esi
xor edi, edi
mov eax, edi
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x234]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42f54d
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x234]
call fcn.00402d9f
inc edi
cmp edi, 0x46ed
jl 0x42f531
inc esi
cmp esi, 0x7fd3
jl 0x42f52f
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x20], 0x6a8a
jge 0x42f649
mov edx, str.ppomzi_krql_rlpyb_pcyptm_xvanefa_tbtrsltb_bobnlp_vmmjqr_wwovhoqwj_gatfozq_qqisnrpru_klbbrdswe_zbbks
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x4684
cmp dword [ebp - 0x20], 0x4746
jle 0x42f6ea
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov eax, edi
cdq
idiv esi
mov edi, edx
mov dword [ebp - 0x14], 0x596e
xor ebx, ebx
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x144]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42f696
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x144]
call fcn.00402d9f
inc ebx
cmp ebx, 0x29ed
jl 0x42f678
dec edi
dec dword [ebp - 0x14]
jne 0x42f676
inc esi
cmp esi, 0x4918
mov edi, dword [ebp - 0x1c]
jl 0x42f668
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x7b13
jl 0x42f666
push 0
push 0x87
push 0xdb9
push 0x1a5e
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x24], 0x3e94
jge 0x42f709
mov edx, str.eag_bhozjqozi_htknryd
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0xa3a
mov dword [ebp - 0x24], 0x761
cmp dword [ebp - 0x24], 0x82a
jle 0x42f796
push 0
push 0
push 0xb44
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor esi, esi
mov dword [ebp - 0x14], esi
xor edi, edi
xor ebx, ebx
mov dword [ebp - 0x2c], esi
mov ecx, edi
sar esi, cl
mov eax, esi
mov ecx, ebx
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x54]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42f762
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x54]
call fcn.00402d9f
inc ebx
cmp ebx, 0x580b
jl 0x42f747
inc edi
cmp edi, 0x145e
mov esi, dword [ebp - 0x14]
jl 0x42f73e
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x123e
jl 0x42f73c
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x20], 0x4578
jge 0x42f7b1
push str.tdua_vtzn_hcrv_xoouaxl_ksxkd_ndfu_xocb_jzqzoaocv_rngf_rcwr_zhxrr_alxkdqsk_nvmprq_vpxue
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x112d
cmp dword [ebp - 0x18], 0x12f2
jle 0x42f824
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov dword [ebp - 0x14], esi
and dword [ebp - 0x20], 0
mov dword [ebp - 0x2c], edi
mov ecx, esi
sar edi, cl
mov esi, dword [ebp - 0x20]
mov eax, edi
mov ecx, esi
sar eax, cl
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0xcbf
jl 0x42f7df
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0xa84
mov edi, dword [ebp - 0x1c]
jl 0x42f7d1
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x78f6
jl 0x42f7cc
inc ebx
cmp ebx, 0x2439
jl 0x42f7c7
cmp dword [ebp - 0x28], 0x1d9e
jle 0x42f9d2
mov dword [ebp - 0x20], 0x328f
cmp dword [ebp - 0x20], 0x352c
jle 0x42f8be
xor esi, esi
mov dword [ebp - 0x1c], esi
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], 0x34a9
xor edi, edi
mov esi, dword [ebp - 0x28]
xor ebx, ebx
mov dword [ebp - 0x2c], esi
mov ecx, edi
sar esi, cl
mov eax, ebx
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x174]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42f87c
ret
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x174]
call fcn.00402d9f
inc ebx
cmp ebx, 0x292
jl 0x42f860
inc edi
cmp edi, 0x5995
mov esi, dword [ebp - 0x28]
jl 0x42f857
mov esi, dword [ebp - 0x1c]
add dword [ebp - 0x28], esi
dec dword [ebp - 0x14]
jne 0x42f852
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x3df3
jl 0x42f846
xchg ebx, eax
adc dword [ebp + 0xf], ecx
push ebx
das
sub byte [edx - 0x65], dl
jno 0x42f861
push ebp
out 0x7e, al
push ebx
push ebp
or byte [eax - 0x71], 0x3d
add dword [edi - 0x3a], esi
sbb dword [edx - 0xd], ebp
sub byte [esi - 0x53e82ca0], dl
jne 0x42f911
ret
js 0x42f8c2
sbb ebp, dword [ebx]
pop ebx
sbb byte [ebx - 0x78a1e724], ch
xor byte [esi + 0x5c], ah
invalid
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x24], 0x383
jge 0x42f9ed
push str.ptvtnghs_zrpdfqck_fhiylgn_hduudcqe
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x56fe
cmp dword [ebp - 0x14], 0x5942
jle 0x42fa49
xor esi, esi
xor edi, edi
mov eax, edi
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x264]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42fa21
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x264]
call fcn.00402d9f
inc edi
cmp edi, 0x47c0
jl 0x42fa05
inc esi
cmp esi, 0x2473
jl 0x42fa03
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x18], 0xf10
jge 0x42fa68
mov edx, str.hrwoaywn_jeptpsr_osn_cvwuqiqg_vsdsm_bdtkw_oeeayxql_uiepcaksz_cyaqw_htydrfc_thlzf_xhticpk
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x3c]
and eax, dword [ebp - 0x38]
movzx eax, ax
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x14], 0x55c4
jge 0x42fa93
push str.lurqabuf_uzufr_tkoivqvr_lyrfjqyp_fymt_xpfqoffbp_ajuusxy_wqfjin_lytkc_jceyv_ramwcuuq_npysnnw
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x4b89
cmp dword [ebp - 0x18], 0x4dcb
jle 0x42faee
xor esi, esi
xor edi, edi
mov ebx, 0x75c3
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42faca
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1a4]
call fcn.00402d9f
add edi, esi
dec ebx
jne 0x42fab0
inc esi
cmp esi, 0xbcc
jl 0x42faa9
mov dword [ebp - 0x24], 0x2fb
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x18], 0x4970
jge 0x42fb10
push str.ygn_phmfk_qtry_tmbkju_vzymcwna_ochzunyh_sxkq_oqga
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x7dce
cmp dword [ebp - 0x20], 0x7e34
jle 0x42fb89
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
mov eax, edi
cdq
idiv esi
mov eax, edx
neg eax
mov dword [ebp - 0x2c], eax
mov edi, ebx
mov esi, 0x457b
mov ebx, eax
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add edi, ebx
dec esi
jne 0x42fb48
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x310
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x1c]
jl 0x42fb33
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x21e
jl 0x42fb2e
inc ebx
mov dword [ebp - 0x1c], ebx
cmp ebx, 0x43bf
jl 0x42fb29
cmp dword [ebp - 0x24], 0x1fb3
jle 0x42fd20
mov dword [ebp - 0x1c], 0x7fa1
cmp dword [ebp - 0x1c], 0x8127
jle 0x42fc34
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov dword [ebp - 0x2c], edi
mov ecx, esi
mov esi, edi
shl esi, cl
xor edi, edi
mov eax, edi
xor eax, ebx
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x324]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42fbdf
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x324]
call fcn.00402d9f
inc edi
cmp edi, 0x7916
jl 0x42fbc1
inc ebx
cmp ebx, 0x33f
jl 0x42fbbf
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x2a7c
mov edi, dword [ebp - 0x14]
jl 0x42fbb4
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0xfed
jl 0x42fbaf
mov ch, byte [eax + 0x5a]
sbb dword [eax], eax
add byte [edx], ch
push 0x195a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
dec edi
cli
push 0x713a4ddd
sbb byte [ebx], bl
mov al, byte [0xc6446542]
pop ecx
pop ds
neg byte [esi + ecx*2 + 0x7d]
lodsd eax, dword [esi]
add al, byte [ebx + 0x64]
lodsd eax, dword [esi]
sbb dh, byte [0x524ef6c]
jns 0x42fc24
clc
invalid
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x20], 0x7c81
jge 0x42fd3f
mov edx, str.sgzja_srrnoufeh_nmxclnq_rjvq_mst_buhyishhs_irqgh_qqehgyf_bcsrxpzf_byrbkirke_vniw_tzssafs_iltig
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x4ae
cmp dword [ebp - 0x14], 0x4f9
jle 0x42fd95
xor edi, edi
mov dword [ebp - 0x18], edi
xor esi, esi
xor ebx, ebx
mov eax, edi
cdq
idiv esi
mov edi, edx
mov eax, ebx
or eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0xa1d
jl 0x42fd63
inc esi
cmp esi, 0x987
mov edi, dword [ebp - 0x18]
jl 0x42fd5a
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x41f7
jl 0x42fd58
mov dword [ebp - 0x18], 0x9c5
cmp dword [ebp - 0x18], 0xbe6
jle 0x42fdcf
xor esi, esi
xor edi, edi
mov eax, esi
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x31e8
jl 0x42fda9
inc esi
cmp esi, 0x72b3
jl 0x42fda7
mov dword [ebp - 0x2c], 0x8b6
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x14], 0xd5
jge 0x42fdf5
mov edx, str.jrxzttlkw_xcu_frsrj_fqensgka_dnakcgwv_lberz_jcv_eun
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x18], 0x65a
jge 0x42fe18
mov edx, str.gewkbhcug_qbqhcw_aepjphc_nodqmruv_bzi_agvvkq_hhbclnd_wiymx
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0xa01
cmp dword [ebp - 0x20], 0xd07
jle 0x42fe88
xor edi, edi
xor esi, esi
mov dword [ebp - 0x18], esi
mov ebx, esi
mov esi, 0x292f
mov eax, ebx
xor eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x1d4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42fe56
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1d4]
call fcn.00402d9f
dec ebx
dec esi
jne 0x42fe3a
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x6eaa
jl 0x42fe33
inc edi
cmp edi, 0xe99
jl 0x42fe2e
mov dword [ebp - 0x24], 0x2ec9
cmp dword [ebp - 0x24], 0x2f1b
jle 0x42fedc
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x6c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42feb7
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.00402d9f
inc edi
cmp edi, 0x41ee
jl 0x42fe9c
inc esi
cmp esi, 0x5882
jl 0x42fe9a
cmp dword [ebp - 0x2c], 0x1fc2
jle 0x43008e
mov dword [ebp - 0x1c], 0x360f
cmp dword [ebp - 0x1c], 0x3826
jle 0x42ff82
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov eax, edi
cdq
idiv esi
mov eax, edx
mov dword [ebp - 0x2c], eax
xor edi, edi
mov esi, eax
mov ecx, ebx
sar esi, cl
mov eax, esi
mov ecx, edi
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x9c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42ff39
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00402d9f
inc edi
cmp edi, 0x1eae
jl 0x42ff1b
inc ebx
cmp ebx, 0x5365
mov eax, dword [ebp - 0x2c]
jl 0x42ff13
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x3408
mov edi, dword [ebp - 0x14]
jl 0x42ff07
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x3d3b
jl 0x42ff02
mov dword [ebp - 0x18], 0xcfb
cmp dword [ebp - 0x18], 0xdbd
jle 0x42ffbb
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x4063
jl 0x42ff96
inc esi
cmp esi, 0x3b16
jl 0x42ff94
aam 0x17
invalid
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x20], 0x87d
jge 0x4300a9
push str.pubqblahc_rnvffef_shmpjsrgq
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x5ac6
cmp dword [ebp - 0x14], 0x5ce7
jle 0x4300e6
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x50e7
jl 0x4300c1
inc esi
cmp esi, 0xb40
jl 0x4300bf
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x24], 0x2e9f
jge 0x430101
push str.btfeucmg_joxixzn_yqb_dji_evcol_thsczbqi_jwqcqwhg_iuh_kduwutrkc_ens_jhegnpcln
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x2510
cmp dword [ebp - 0x1c], 0x2714
jle 0x43017d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
xor edi, edi
xor esi, esi
xor ebx, ebx
lea eax, [esi + edi]
and eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xcc]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x43014c
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xcc]
call fcn.00402d9f
inc ebx
cmp ebx, 0x5141
jl 0x43012f
inc esi
cmp esi, 0x7ea5
jl 0x43012d
inc edi
cmp edi, 0x1298
jl 0x43012b
mov eax, dword [ebp - 0x3c]
and eax, dword [ebp - 0x38]
movzx eax, ax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0x4890
cmp dword [ebp - 0x20], 0x4b7c
jle 0x4301f3
xor esi, esi
xor ebx, ebx
mov dword [ebp - 0x18], 0x21e
xor edi, edi
mov eax, ebx
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0xfc]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4301c4
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xfc]
call fcn.00402d9f
inc edi
cmp edi, 0x18bc
jl 0x4301a6
add ebx, esi
dec dword [ebp - 0x18]
jne 0x4301a4
inc esi
cmp esi, 0x33ff
jl 0x43019b
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x14], 0x5721
jge 0x430212
mov edx, str.tgygt_ahac_aiurypk_vscqntqxb_uhsvorz_mdooujnsy_fwebtbd_cnsvqqtf_azk_jvwm_ljl_dvwmj_uycx_ewpufjp
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x1c], 0x230c
jge 0x430231
push str.jnmuvd_trgsdg_wsgm
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x53eb
cmp dword [ebp - 0x24], 0x5477
jle 0x4302cb
xor edi, edi
xor esi, esi
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x14], 0x2bbd
xor esi, esi
mov dword [ebp - 0x18], 0x1ca0
mov eax, edi
mov ecx, esi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x12c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x430280
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x12c]
call fcn.00402d9f
add esi, ebx
dec dword [ebp - 0x18]
jne 0x430262
mov esi, dword [ebp - 0x1c]
add ebx, esi
dec dword [ebp - 0x14]
jne 0x430259
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x6126
jl 0x430250
inc edi
cmp edi, 0x2942
jl 0x43024b
push 0
push 0
push 0xc4f
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov dword [ebp - 0x2c], 0x81
mov dword [ebp - 4], 0x44
cmp dword [ebp - 0x20], 0x4828
jge 0x4302ed
push str.agjkwgjy_fogrhcxna_dpfjzwm
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x2bbc
cmp dword [ebp - 0x14], 0x2d6a
jle 0x430367
push 0x86a
push 0xb9c
push 0
call dword [sym.imp.GDI32.dll_PtInRegion]
xor esi, esi
xor edi, edi
xor ebx, ebx
lea eax, [ebx + edi]
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x15c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x430336
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x15c]
call fcn.00402d9f
inc ebx
cmp ebx, 0x23e5
jl 0x430319
inc edi
cmp edi, 0x771c
jl 0x430317
inc esi
cmp esi, 0x731
jl 0x430315
mov dword [ebp - 4], 0x46
cmp dword [ebp - 0x24], 0x504e
jge 0x430382
push str.hbunoo_mdklf_wicsd_khepe_fkdlfhxw_axlwte_zmwzeh_juurdzc_xrtmuiha_fsjl_dsatienwp_wnpxvnbk_apgveuzgh_wdhttdgi
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x23ae
jle 0x4304c3
mov dword [ebp - 0x18], 0x1b00
cmp dword [ebp - 0x18], 0x1cd5
jle 0x4303e2
xor esi, esi
xor edi, edi
xor ebx, ebx
mov eax, edi
cdq
idiv ebx
mov eax, esi
mov ecx, edx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0x55a8
jl 0x4303a9
inc edi
cmp edi, 0x5daf
jl 0x4303a7
inc esi
cmp esi, 0xb54
jl 0x4303a5
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
inc ebp
push es
mov dword [ebp - 0x20], 0x53f4
cmp dword [ebp - 0x20], 0x5541
jle 0x430527
xor esi, esi
xor edi, edi
xor ebx, ebx
lea eax, [edi + esi]
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0x18c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4304f6
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x18c]
call fcn.00402d9f
inc ebx
cmp ebx, 0x18a8
jl 0x4304d9
inc edi
cmp edi, 0x4bb8
jl 0x4304d7
inc esi
cmp esi, 0x3c15
jl 0x4304d5
mov dword [ebp - 0x24], 0x38eb
cmp dword [ebp - 0x24], 0x3b44
jle 0x43057f
xor esi, esi
xor edi, edi
mov eax, edi
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x1bc]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x430557
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1bc]
call fcn.00402d9f
inc edi
cmp edi, 0x3eff
jl 0x43053b
inc esi
cmp esi, 0x1629
jl 0x430539
mov dword [ebp - 4], 0x4a
cmp dword [ebp - 0x14], 0x2afd
jge 0x43059a
push str.bdyhvk_nxnphawc_fgso_wrxi_bpchx_mrdrr_sohe
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], 0x2698
cmp dword [ebp - 0x38], 0x2a31
jle 0x4305fe
xor esi, esi
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x14], 0x4f39
xor edi, edi
xor esi, esi
mov dword [ebp - 0x18], 0x4193
mov eax, ebx
or eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add esi, edi
dec dword [ebp - 0x18]
jne 0x4305c7
inc edi
cmp edi, 0x1cc6
jl 0x4305be
mov esi, dword [ebp - 0x1c]
add ebx, esi
dec dword [ebp - 0x14]
jne 0x4305bc
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x1ffe
jl 0x4305b3
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x28]
movzx eax, ax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], 0x4c
cmp dword [ebp - 0x20], 0x5335
jge 0x430625
push str.ajhnqb_miek_opjxmgf_dcsafi_veq_tarqxg_qakaj_xkhelfmw
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x4c56
cmp dword [ebp - 0x1c], 0x4ec5
jle 0x43065e
xor esi, esi
mov edi, esi
mov ebx, 0x642a
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec edi
dec ebx
jne 0x430642
inc esi
cmp esi, 0x7eaa
jl 0x43063b
mov dword [ebp - 4], 0x4e
cmp dword [ebp - 0x24], 0x35c2
jge 0x430679
push str.whlpodo_bpuaqqajr_iln_xutsqxed_gxeilb_fgbljfwzm_ibcoeznt_nectpxxfo
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x3852
cmp dword [ebp - 0x20], 0x3b5e
jle 0x4306dc
xor edi, edi
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x18], 0x3eaf
mov eax, ebx
mov ecx, esi
shl eax, cl
and eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec esi
dec dword [ebp - 0x18]
jne 0x4306a0
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x2706
jl 0x430696
inc ebx
cmp ebx, 0x48f8
jl 0x430691
inc edi
cmp edi, 0x8dd
jl 0x43068f
mov dword [ebp - 4], 0x50
cmp dword [ebp - 0x38], 0x2400
jge 0x4306fb
mov edx, str.aqfpjuzr_enw_oldjqdnfv_zsbja_viak_oukn_avtsghv_gbpqxxzh_lryal_lim_bma_pnlzci_beu
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], 0x7e9
mov dword [ebp - 4], 0x52
cmp dword [ebp - 0x1c], 0x4893
jge 0x430725
mov edx, str.rzakkkqyt_ftnctmi_yeeivxp_lse
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0xf51
cmp dword [ebp - 0x24], 0xf97
jle 0x430760
xor esi, esi
xor edi, edi
mov eax, edi
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x860
jl 0x43073d
inc esi
cmp esi, 0x7bd0
jl 0x43073b
mov dword [ebp - 4], 0x54
cmp dword [ebp - 0x20], 0x3602
jge 0x43077f
mov edx, str.pmmrhvok_gysywoctj_fipfv_hfosffs_gkz_cru_lxaxbbumg_gdkbildy_uhj_rzco
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x2fa6
cmp dword [ebp - 0x20], 0x32a9
jle 0x4307f2
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
and dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], edi
mov ecx, esi
sar edi, cl
mov esi, dword [ebp - 0x2c]
mov eax, edi
mov ecx, esi
shl eax, cl
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x144d
jl 0x4307ad
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x5a32
mov edi, dword [ebp - 0x14]
jl 0x43079f
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x397e
jl 0x43079a
inc ebx
cmp ebx, 0x7f5e
jl 0x430795
cmp dword [ebp - 0x38], 0x18a2
jle 0x430a0d
mov dword [ebp - 0x14], 0x67c1
cmp dword [ebp - 0x14], 0x6835
jle 0x430857
xor esi, esi
xor ebx, ebx
xor edi, edi
xor eax, eax
mov dword [ebp - 0x18], eax
xor eax, edi
lea ecx, [ebx + esi]
or eax, ecx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x40c8
jl 0x43081a
inc edi
cmp edi, 0x21e7
jl 0x430815
inc ebx
cmp ebx, 0x1ea4
jl 0x430813
inc esi
cmp esi, 0x798f
jl 0x430811
mov dword [ebp - 0x1c], 0x1c4d
cmp dword [ebp - 0x1c], 0x1ef8
jle 0x4308b0
xor esi, esi
xor ebx, ebx
xor edi, edi
xor ecx, ecx
mov dword [ebp - 0x18], ecx
lea eax, [edi + ebx]
shl eax, cl
and eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
mov ecx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x5282
jl 0x430872
inc edi
cmp edi, 0x28d9
jl 0x43086d
inc ebx
cmp ebx, 0x7f20
jl 0x43086b
inc esi
cmp esi, 0x328c
jl 0x430869
mov dword [ebp - 0x18], 0x5191
cmp dword [ebp - 0x18], 0x556d
jle 0x4308e6
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x5082
jl 0x4308c4
inc esi
cmp esi, 0x7d08
jl 0x4308c2
les edi, [0x706983cb]
mov eax, dword [0x75f2661d]
xchg ecx, eax
jbe 0x430939
sbb eax, 0x76d51cf1
cmp byte [edx + 0x2a], bh
xchg ecx, eax
fiadd dword [ebx - 0x2eb0f88d]
xor ecx, dword [ebx - 0x48e47387]
test al, 0x1b
jnp 0x430959
and ah, byte [edi + 0x63]
invalid
add al, 0x17
mov esp, 0xbffffbd
xchg ebx, eax
in eax, dx
inc ebx
cmp eax, 0x85355e75
sal ch, 0xb7
lahf
inc esi
scasb al, byte es:[edi]
shr dword [ebp - 0x39], cl
pop ds
imul edx, dword [edi + 0x6988e352], 0x819714f6
sbb al, 0x1a
sbb byte [esi - 0x7d2cde82], 0x10
add al, 0xd
or esp, dword [ebp - 0x58]
aam 0xb6
push ebx
invalid
mov dword [ebp - 4], 0x5c
cmp dword [ebp - 0x24], 0xe8c
jge 0x430a2c
mov edx, str.nkeng_maeflm_luzjvm_qpqbkquit_mcqr_yxxcxn_nzs_flbpmn_xnr_ykqi_pqzr
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x5e
cmp dword [ebp - 0x20], 0x2c96
jge 0x430a4f
mov edx, str.ekdvihxh_tjvxcymf_ybukml_chj_uoabnpuj_lnctcrh_ibhskh
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x34], 0x7c0
mov dword [ebp - 0x1c], 0x3e32
cmp dword [ebp - 0x1c], 0x3ee9
jle 0x430ad0
push 0
push 0x1207
push 0x7b8
push 0
push 0x466
push 0x1d8a
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
xor esi, esi
mov edi, esi
mov ebx, 0x42b1
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x430aad
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1ec]
call fcn.00402d9f
dec edi
dec ebx
jne 0x430a93
inc esi
cmp esi, 0x5c8f
jl 0x430a8c
mov dword [ebp - 0x20], 0x650e
cmp dword [ebp - 0x20], 0x66f8
jle 0x430b2c
xor edi, edi
xor esi, esi
mov dword [ebp - 0x14], esi
mov ebx, esi
mov dword [ebp - 0x18], 0x7d0f
xor esi, esi
mov eax, esi
and eax, ebx
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x1572
jl 0x430af2
dec ebx
dec dword [ebp - 0x18]
jne 0x430af0
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x60a3
jl 0x430ae7
inc edi
cmp edi, 0x514d
jl 0x430ae2
cmp dword [ebp - 0x34], 0x2081
add byte [eax], al
jle 0x430bfc
sal al, 1
out dx, eax
add eax, 0x8e99446d
adc eax, 0x7aba779c
adc dword [ebp - 0x49f9865f], eax
shl dword [eax + 0x46], cl
xchg ebx, eax
cmp eax, 0x3fc8f9ca
scasb al, byte es:[edi]
js 0x430b31
and edi, edi
imul ebx, dword [edx + 0x52ceb245], 0xffffffc5
arpl word [edx + 8], bp
out 0x84, al
inc edx
adc al, 0x51
not byte [ebx]
add bl, byte [eax]
invalid
mov dword [ebp - 4], 0x60
cmp dword [ebp - 0x1c], 0x3d0d
jge 0x430c17
push str.lwnbl_scjvzxy_gwn_mxrlieimq
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x62
cmp dword [ebp - 0x20], 0x6213
jge 0x430c3a
mov edx, str.puqmx_cfwztb_map
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x30]
movzx eax, ax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], 0x6cde
cmp dword [ebp - 0x18], 0x6f61
jle 0x430ca1
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
lea ecx, [ebp - 0x21c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x430c79
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x21c]
call fcn.00402d9f
inc edi
cmp edi, 0x5e89
jl 0x430c5e
inc esi
cmp esi, 0x6b48
jl 0x430c5c
mov dword [ebp - 0x1c], 0x1b48
cmp dword [ebp - 0x1c], 0x1c34
jle 0x430d05
xor esi, esi
xor edi, edi
xor ebx, ebx
lea eax, [ebx + edi]
add eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x24c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x430cd4
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x24c]
call fcn.00402d9f
inc ebx
cmp ebx, 0x7f8
jl 0x430cb7
inc edi
cmp edi, 0x694a
jl 0x430cb5
inc esi
cmp esi, 0x163b
jl 0x430cb3
mov dword [ebp - 0x30], 0x1245
mov dword [ebp - 4], 0x64
cmp dword [ebp - 0x18], 0x69cf
jge 0x430d27
push str.arwyjh_wvyu_syylstca_mtpg_qvezwnyi_qfjccdq_giysqmwdr_kbzhlgv
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x1e87
cmp dword [ebp - 0x20], 0x2017
jle 0x430d90
xor edi, edi
xor esi, esi
mov dword [ebp - 0x14], esi
xor ebx, ebx
mov dword [ebp - 0x18], 0x1f7b
xor esi, esi
mov eax, ebx
mov ecx, esi
shl eax, cl
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x29b2
jl 0x430d4d
mov esi, dword [ebp - 0x14]
add ebx, esi
dec dword [ebp - 0x18]
jne 0x430d4b
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x154c
jl 0x430d42
inc edi
cmp edi, 0x6102
jl 0x430d3d
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 4], 0x66
cmp dword [ebp - 0x1c], 0x1b1b
jge 0x430dab
push str.gbvl_qggyhvzix_qkjmprtt_ikjaawfzs_gnipvrux_rse_rqccolenu_wjqupijr
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x30], 0x240f
jle 0x430f31
mov dword [ebp - 0x18], 0x31d0
cmp dword [ebp - 0x18], 0x3550
jle 0x430dfb
xor esi, esi
xor edi, edi
mov eax, edi
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x4858
jl 0x430dd0
inc esi
cmp esi, 0x1743
jl 0x430dce
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [ebp - 0x14], 0x700d
cmp dword [ebp - 0x14], 0x71e2
jle 0x430e59
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
xor esi, esi
xor edi, edi
mov eax, edi
xor eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x27c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x430e31
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x27c]
call fcn.00402d9f
inc edi
cmp edi, 0x111a
jl 0x430e15
inc esi
cmp esi, 0x4499
jl 0x430e13
xchg ebx, eax
insd dword es:[edi], dx
pop ds
jle 0x430eb6
sbb al, 0x4f
jl 0x430ec3
dec eax
movsb byte es:[edi], byte [esi]
jns 0x430e17
cmp dword [edx], ecx
insb byte es:[edi], dx
shl dword [edx - 0x61ba1a3b], cl
jne 0x430e8c
fisttp word [eax - 0x4eb0d12d]
insd dword es:[edi], dx
out dx, eax
fidiv word [edx + 0x219e641c]
aas
test eax, 0x7be69dd
hlt
mov esi, 0xc66ff407
inc ebx
sti
push ebx
insd dword es:[edi], dx
ja 0x430eb0
cdq
jno 0x430e84
arpl word [esi], si
push ds
push edi
or ebp, esp
stc
rcr dword [edx + 0x70], cl
xchg ebx, eax
invalid
push esi
push ss
movsb byte es:[edi], byte [esi]
cwde
leave
in al, dx
cmp eax, 0x5588be3b
test al, 0xe9
cmpsb byte [esi], byte es:[edi]
jecxz 0x430ebf
invalid
invalid
xchg bh, bh
dec dword [esp + esi]
shl dword [eax + eax*2 - 0x34], 1
mov ecx, 0x6edf1fbb
mov edi, 0xf3058b9f
jo 0x430f41
std
adc dword [ebp + 0x24], 0xffffffc6
in eax, 0x99
add ebx, dword [edi]
sub dword [edi + edi*8 - 0x4c352a6e], ecx
and dl, byte [eax - 0x21ce1fe0]
stosd dword es:[edi], eax
mov dword [ebp - 4], 0x68
cmp dword [ebp - 0x18], 0x2e67
jge 0x430f0e
mov edx, str.mbqmgmd_idsi_rsrrgd_nztensevh_hrjfkcv_nrhqiq_cup_zflqisew
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x6a
cmp dword [ebp - 0x14], 0x6d5e
jge 0x430f2d
push str.nhsrykjg_arqzb_aoh_xhymkhc_knpyxwh_rcpnbiek_xnpxebwzj
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x6c
cmp dword [ebp - 0x20], 0x1b3b
jge 0x430f50
mov edx, str.sygvxt_jhjuiwbw_qmdakgv_rcisp_mnubsb_qtsmdnko_sktoco_kxrbgi_csx_baveelmkf_mzcynuc_gxxmtjvx
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x86
mov dword [ebp - 0x1c], 0x2351
cmp dword [ebp - 0x1c], 0x2550
jle 0x430fb5
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x2ac]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x430f8d
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2ac]
call fcn.00402d9f
inc edi
cmp edi, 0x2e98
jl 0x430f6f
inc esi
cmp esi, 0x6341
jl 0x430f6d
mov dword [ebp - 0x20], 0x614
cmp dword [ebp - 0x20], 0x9d0
jle 0x43100c
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
lea ecx, [ebp - 0x2dc]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x430fe4
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2dc]
call fcn.00402d9f
inc edi
cmp edi, 0x111d
jl 0x430fc9
inc esi
cmp esi, 0x48cb
jl 0x430fc7
cmp dword [ebp - 0x30], 0x1981
jle 0x431187
mov dword [ebp - 0x18], 0x4ba1
cmp dword [ebp - 0x18], 0x4dcc
jle 0x431050
xor esi, esi
xor edi, edi
mov eax, edi
and eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x1411
jl 0x43102d
inc esi
cmp esi, 0x6af
jl 0x43102b
mov dword [ebp - 0x14], 0x57b4
cmp dword [ebp - 0x14], 0x5862
jle 0x4310d2
bound ebx, qword [eax]
add byte [esi + 0x72], bh
push 0x6ef
push 0x60d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x30c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4310a2
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x30c]
call fcn.00402d9f
inc edi
cmp edi, 0x548d
jl 0x431084
inc esi
cmp esi, 0xba5
jl 0x431082
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
jns 0x43105a
div byte [eax]
mov bh, 0x54
invalid
mov dword [ebp - 4], 0x72
cmp dword [ebp - 0x1c], 0x20e5
jge 0x4311a2
push str.umoynq_nhyqee_cfsjxs_dzf_zujlzfs_vap_dgot_cgfr_pjtunopf_ggomjjpp_qurbyfwe
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x3208
cmp dword [ebp - 0x30], 0x3557
jle 0x431205
push 0x30f
call dword [sym.imp.KERNEL32.dll_TlsFree]
xor esi, esi
mov dword [ebp - 0x18], esi
xor edi, edi
xor ebx, ebx
mov eax, esi
cdq
idiv edi
mov esi, edx
mov eax, esi
mov ecx, ebx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0x139f
jl 0x4311d1
inc edi
cmp edi, 0x5084
mov esi, dword [ebp - 0x18]
jl 0x4311c8
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x5f64
jl 0x4311c6
mov dword [ebp - 4], 0x74
cmp dword [ebp - 0x20], 0x3fc
jge 0x431220
push str.klnjrudg_urodcmmem_xoghgkhki_odqhfa
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x2c00
cmp dword [ebp - 0x30], 0x2f73
jle 0x43128b
xor esi, esi
mov edi, esi
mov ebx, 0x7229
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x33c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x431257
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x33c]
call fcn.00402d9f
dec edi
dec ebx
jne 0x43123d
inc esi
cmp esi, 0x2cb1
jl 0x431236
push 0x257
push 0x212f
push ebx
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
mov ax, word [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret