Function at 0x40d624
Capabilities:
Accept command line arguments
Encrypt data using speck
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b6f35
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2688
call fcn.004b3330
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x41f8ff
lea eax, [ebp + 0xc]
mov dword [ebp - 0x1568], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1538], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1530], eax
mov eax, dword [ebp - 0x1568]
movzx eax, byte [eax]
test eax, eax
je 0x41f756
mov dword [ebp - 0xcc], 0xf3617394
mov dword [ebp - 0x131c], 0x3c576436
mov dword [ebp - 0x3e0], 0
jmp 0x40d6b2
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 3
jge 0x40d6ce
mov eax, dword [ebp - 0x3e0]
mov dword [ebp + eax*4 - 0x1468], 0xffffffff
jmp 0x40d6a5
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1468], 0xfffffffb
jmp 0x40d6fc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1468]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1468], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1468], 0xfffffff9
je 0x40d739
mov byte [ebp - 0x110], 0
push 0
push 0x6358
push 0x36ab
push 0
push 0x71ba
lea eax, [ebp - 0x110]
push eax
push 1
call fcn.0040380d
add esp, 0x1c
jmp 0x40d6e1
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], eax
jl 0x40d753
mov dword [ebp - 0xaf0], 1
jmp 0x40d75a
and dword [ebp - 0xaf0], 0
cmp dword [ebp - 0xaf0], 0x53e1e01b
jle 0x40d772
mov dword [ebp - 0x1270], 1
jmp 0x40d779
and dword [ebp - 0x1270], 0
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0x1270]
cmp eax, 0xffff
jb 0x40d799
mov dword [ebp - 0x1278], 1
jmp 0x40d7a0
and dword [ebp - 0x1278], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x1278]
jle 0x40d7ba
mov dword [ebp - 0x1280], 1
jmp 0x40d7c1
and dword [ebp - 0x1280], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x1280], eax
jle 0x40d7db
mov dword [ebp - 0x1288], 1
jmp 0x40d7e2
and dword [ebp - 0x1288], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1468]
mov dword [ebp - 0x1290], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1290]
mov dword [ebp + eax - 0x1468], ecx
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x1288]
cmp dword [ebp - 0x1290], eax
je 0x40d828
mov dword [ebp - 0x1298], 1
jmp 0x40d82f
and dword [ebp - 0x1298], 0
mov eax, dword [ebp - 0x1298]
add eax, 0x44214078
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xa5bc
jne 0x40d858
mov dword [ebp - 0x130c], 1
jmp 0x40d85f
and dword [ebp - 0x130c], 0
mov eax, dword [ebp - 0x131c]
cmp dword [ebp - 0x130c], eax
jne 0x40d879
mov dword [ebp - 0x1314], 1
jmp 0x40d880
and dword [ebp - 0x1314], 0
mov eax, dword [ebp - 0x1314]
mov dword [ebp - 0x131c], eax
push 1
lea ecx, [ebp - 0x139c]
call fcn.00420237
mov dword [ebp - 0x1324], 0x3b35
mov dword [ebp - 0x1570], str.upyv_lxsv_end_tegg_mjeoxbbs_ypur_wzxuifkd_kdeam_ovdpitmnv_piwjqoq_opytbqvdq_jjkdlitb_orojb_iez
cmp dword [ebp - 0x1324], 0x3f1c
jle 0x40d967
and dword [ebp - 0x2cc], 0
jmp 0x40d8d3
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x13e
jge 0x40d967
and dword [ebp - 0x50c], 0
jmp 0x40d8f9
mov eax, dword [ebp - 0x50c]
inc eax
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0x7020
jge 0x40d962
and dword [ebp - 0x2d4], 0
jmp 0x40d91b
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x57e7
jge 0x40d960
mov eax, dword [ebp - 0x2cc]
mov ecx, dword [ebp - 0x50c]
shl eax, cl
xor eax, dword [ebp - 0x2d4]
cdq
mov dword [ebp - 0x15bc], eax
mov dword [ebp - 0x15b8], edx
push dword [ebp - 0x15b8]
push dword [ebp - 0x15bc]
mov ecx, 0xac67d8
call fcn.004200f3
jmp 0x40d90e
jmp 0x40d8ec
jmp 0x40d8c6
and dword [ebp - 4], 0
cmp dword [ebp - 0x1324], 0x39da
jge 0x40d987
mov edx, dword [ebp - 0x1570]
mov ecx, 0xac67d8
call fcn.00421ea9
jmp 0x40d9a3
or dword [ebp - 4], 0xffffffff
jmp 0x40d9ad
mov dword [ebp - 0x92c], 2
mov dword [ebp - 0x1580], 0xd8131dda
mov dword [ebp - 0x864], 1
mov dword [ebp - 0x2dc], 0xffffffff
mov dword [ebp - 0x520], 0x8d08f492
push 1
lea ecx, [ebp - 0x13e4]
call fcn.00420237
mov dword [ebp - 0x638], 0xfffffffd
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x30], 0
jmp 0x40da10
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x40da2c
push dword [ebp - 0x30]
lea ecx, [ebp - 0x139c]
call fcn.00420325
mov dword [eax], 9
jmp 0x40da09
mov dword [ebp - 0x30], 0
jmp 0x40da3c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x40da52
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x2220], 0x509978f3
jmp 0x40da35
mov dword [ebp - 0x30], 0
jmp 0x40da62
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x40da78
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1a70], 0xfffffffa
jmp 0x40da5b
push 1
lea eax, [ebp - 0x13e4]
push eax
push 0
lea eax, [ebp - 0x30]
push eax
push 0x932
push 0x175f
push 0x6125
push 0
call fcn.0040852a
add esp, 0x20
push 0
push 0x32ac
push 0
push 0x3c41
lea eax, [ebp - 0x139c]
push eax
push 0x58ea
push 0x3cc4
push 0x2990
push 0x6ddf
push 1
push 0x566f
call fcn.00403c61
add esp, 0x2c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2220], 0xfffffff6
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x40de69
mov eax, dword [ebp - 0x638]
inc eax
mov dword [ebp - 0x638], eax
je 0x40db8a
mov esi, dword [ebp - 0x520]
push 0
lea ecx, [ebp - 0x13e4]
call fcn.00420325
add esi, dword [eax]
cmp esi, 0x13aabdc9
jg 0x40db2f
mov dword [ebp - 0x132c], 1
jmp 0x40db36
and dword [ebp - 0x132c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a70]
cmp dword [ebp - 0x132c], eax
jle 0x40db56
mov dword [ebp - 0x1578], 1
jmp 0x40db5d
and dword [ebp - 0x1578], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x1e48], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x21d4], eax
cmp dword [ebp - 0x92c], 1
jb 0x40db8a
mov dword [ebp - 0x1334], 1
jmp 0x40db91
and dword [ebp - 0x1334], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a70]
cmp eax, dword [ebp - 0x1334]
jle 0x40dbb2
mov dword [ebp - 0x133c], 1
jmp 0x40dbb9
and dword [ebp - 0x133c], 0
cmp dword [ebp - 0x133c], 0x47eb
je 0x40dbd1
mov dword [ebp - 0x1344], 1
jmp 0x40dbd8
and dword [ebp - 0x1344], 0
mov eax, dword [ebp - 0x520]
add eax, dword [ebp - 0x1344]
cmp eax, 0xfffffffa
jg 0x40dbf5
mov dword [ebp - 0x134c], 1
jmp 0x40dbfc
and dword [ebp - 0x134c], 0
mov eax, dword [ebp - 0x134c]
neg eax
cmp eax, dword [ebp - 0x2e4]
jne 0x40dc27
push 0
lea ecx, [ebp - 0x139c]
call fcn.00420325
cmp dword [eax], 0
jne 0x40dc27
and dword [ebp - 0x91c], 0
jmp 0x40dc31
mov dword [ebp - 0x91c], 1
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x91c], eax
jge 0x40dc4b
mov dword [ebp - 0x1268], 1
jmp 0x40dc52
and dword [ebp - 0x1268], 0
mov eax, dword [ebp - 0x864]
cmp dword [ebp - 0x1268], eax
je 0x40dc6c
mov dword [ebp - 0x110c], 1
jmp 0x40dc73
and dword [ebp - 0x110c], 0
mov eax, dword [ebp - 0x110c]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x1e74], eax
cmp dword [ebp - 0x638], 0
je 0x40dcb2
push 0
lea ecx, [ebp - 0x13e4]
call fcn.00420325
cmp dword [eax], 0
je 0x40dcb2
mov dword [ebp - 0x924], 1
jmp 0x40dcb9
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x1580]
cmp dword [ebp - 0x924], eax
jg 0x40dcd3
mov dword [ebp - 0xe6c], 1
jmp 0x40dcda
and dword [ebp - 0xe6c], 0
push 0
lea ecx, [ebp - 0x139c]
call fcn.00420325
mov ecx, dword [ebp - 0xe6c]
imul ecx, dword [eax]
sub ecx, dword [ebp - 0x2dc]
je 0x40dd06
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1a70], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a70]
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 9
jle 0x40dd2e
mov dword [ebp - 0x12bc], 1
jmp 0x40dd35
and dword [ebp - 0x12bc], 0
mov eax, dword [ebp - 0x92c]
cmp dword [ebp - 0x12bc], eax
jle 0x40dd4f
mov dword [ebp - 0x934], 1
jmp 0x40dd56
and dword [ebp - 0x934], 0
push 0
lea ecx, [ebp - 0x13e4]
call fcn.00420325
mov eax, 0x54f4
add eax, 0x86
jne 0x40dd81
mov eax, 0xc581
test eax, eax
jne 0x40dd81
and dword [ebp - 0x1588], 0
jmp 0x40dd8b
mov dword [ebp - 0x1588], 1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a70], 0
jne 0x40dda6
mov dword [ebp - 0xe74], 1
jmp 0x40ddad
and dword [ebp - 0xe74], 0
push 0
lea ecx, [ebp - 0x139c]
call fcn.00420325
mov eax, dword [eax]
cmp eax, dword [ebp - 0xe74]
jne 0x40ddd0
mov dword [ebp - 0x1590], 1
jmp 0x40ddd7
and dword [ebp - 0x1590], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2220]
mov dword [ebp - 0x1598], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1598]
mov dword [ebp + eax - 0x2220], ecx
cmp dword [ebp - 0x520], 0
jne 0x40de11
xor eax, eax
jne 0x40de11
and dword [ebp - 0x93c], 0
jmp 0x40de1b
mov dword [ebp - 0x93c], 1
cmp dword [ebp - 0x93c], 1
jae 0x40de30
mov dword [ebp - 0x1114], 1
jmp 0x40de37
and dword [ebp - 0x1114], 0
push 0
lea ecx, [ebp - 0x13e4]
call fcn.00420325
mov ecx, dword [ebp - 0x1114]
sub ecx, dword [eax]
jne 0x40de69
push 0
lea ecx, [ebp - 0x139c]
call fcn.00420325
cmp dword [eax], 0
jne 0x40de69
and dword [ebp - 0x944], 0
jmp 0x40de73
mov dword [ebp - 0x944], 1
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
jne 0x40de94
mov dword [ebp - 0xe7c], 1
jmp 0x40de9b
and dword [ebp - 0xe7c], 0
push 0
lea ecx, [ebp - 0x13e4]
call fcn.00420325
mov ecx, dword [ebp - 0xe7c]
mov dword [eax], ecx
lea ecx, [ebp - 0x13e4]
call fcn.00420309
lea ecx, [ebp - 0x139c]
call fcn.00420309
mov dword [ebp - 0x2234], 0xe91a049f
mov dword [ebp - 0x2230], 0xe91a049f
mov dword [ebp - 0x222c], 0xe91a049f
mov dword [ebp - 0x2228], 0xe91a049f
mov dword [ebp - 0x708], 0
mov dword [ebp - 0x708], 3
jmp 0x40df11
mov eax, dword [ebp - 0x708]
dec eax
mov dword [ebp - 0x708], eax
cmp dword [ebp - 0x708], 0
jl 0x40df60
mov byte [ebp - 0x172], 0
push 0x601c
push 0x6d01
push 0x2573
lea eax, [ebp - 0x172]
push eax
push 0x397c
push 1
push 0
push 0x4ea0
push 1
push 0x10ec
push 0x773d
push 0x4e19
call fcn.00408090
add esp, 0x30
jmp 0x40df04
mov dword [ebp - 0x94c], 0x77ab
mov dword [ebp - 0x15a0], str.qxib_yrjpvxric_aryagsht_kmnaxr_lkikch_gdq_vnln_knz_dlqzof_xsf_qiwpxg_owxaqawdc
cmp dword [ebp - 0x94c], 0x7a2f
jle 0x40e04d
and dword [ebp - 0x2ec], 0
jmp 0x40df9a
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x48ad
jge 0x40e04d
and dword [ebp - 0x528], 0
jmp 0x40dfc0
mov eax, dword [ebp - 0x528]
inc eax
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0x2b33
jge 0x40e048
and dword [ebp - 0x2f4], 0
jmp 0x40dfe2
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x5aff
jge 0x40e043
mov eax, dword [ebp - 0x2ec]
add eax, dword [ebp - 0x528]
mov ecx, dword [ebp - 0x2f4]
shl eax, cl
cdq
mov dword [ebp - 0x15c8], eax
mov dword [ebp - 0x15c4], edx
push dword [ebp - 0x15c4]
push dword [ebp - 0x15c8]
lea ecx, [ebp - 0x25e0]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.004200e8
push eax
call fcn.004a11e7
pop ecx
lea ecx, [ebp - 0x25e0]
call fcn.004200de
jmp 0x40dfd5
jmp 0x40dfb3
jmp 0x40df8d
push 0
push 0
push 0x67f3
push 0x704e
call fcn.00406546
add esp, 0x10
mov dword [ebp - 4], 2
cmp dword [ebp - 0x94c], 0x7607
jge 0x40e082
push dword [ebp - 0x15a0]
call fcn.004a11e7
pop ecx
jmp 0x40e09e
or dword [ebp - 4], 0xffffffff
jmp 0x40e0a8
push 3
lea ecx, [ebp - 0x1bbc]
call fcn.00420237
mov dword [ebp - 0x2078], 0x47f1a969
mov dword [ebp - 0xe4], 0xffffffff
mov dword [ebp - 0x15a8], 0x3e19f23e
mov dword [ebp - 0x640], 0
jmp 0x40e0ec
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 3
jge 0x40e10e
push dword [ebp - 0x640]
lea ecx, [ebp - 0x1bbc]
call fcn.00420325
mov dword [eax], 9
jmp 0x40e0df
xor eax, eax
inc eax
je 0x40e131
push 2
lea ecx, [ebp - 0x1bbc]
call fcn.00420325
cmp dword [eax], 0
je 0x40e131
mov dword [ebp - 0x1264], 1
jmp 0x40e138
and dword [ebp - 0x1264], 0
cmp dword [ebp - 0x1264], 0x9ed080c1
jbe 0x40e150
mov dword [ebp - 0x954], 1
jmp 0x40e157
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x954], eax
jl 0x40e171
mov dword [ebp - 0xe84], 1
jmp 0x40e178
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0x15a8]
imul eax, dword [ebp - 0xe84]
test eax, eax
jne 0x40e192
mov eax, 0x9e71b35
test eax, eax
je 0x40e1a7
cmp dword [ebp - 0xe4], 0
je 0x40e1a7
mov dword [ebp - 0x95c], 1
jmp 0x40e1ae
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe4], 0
jmp 0x40e1d3
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x40e1f5
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x1bbc]
call fcn.00420325
mov dword [eax], 1
jmp 0x40e1c6
lea ecx, [ebp - 0x1bbc]
call fcn.00420309
mov dword [ebp - 0xdc], 0xf3617394
push 4
lea ecx, [ebp - 0x1d3c]
call fcn.00420237
mov dword [ebp - 0x111c], 0x3b35
mov dword [ebp - 0x15b0], str.iqtp_ymtxty_fehd_uhenwz_otda_vkfoydr
cmp dword [ebp - 0x111c], 0x3d55
jle 0x40e33a
and dword [ebp - 0x2fc], 0
jmp 0x40e251
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x6923
jge 0x40e33a
and dword [ebp - 0x530], 0
jmp 0x40e277
mov eax, dword [ebp - 0x530]
inc eax
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 0x18ca
jge 0x40e335
and dword [ebp - 0x304], 0
jmp 0x40e29d
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0xa83
jge 0x40e330
and dword [ebp - 0x6c8], 0
jmp 0x40e2c3
mov eax, dword [ebp - 0x6c8]
inc eax
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x6c8], 0x2cbb
jge 0x40e32b
mov eax, dword [ebp - 0x2fc]
sub eax, dword [ebp - 0x530]
mov ecx, dword [ebp - 0x304]
imul ecx, dword [ebp - 0x6c8]
add eax, ecx
cdq
mov dword [ebp - 0x15d4], eax
mov dword [ebp - 0x15d0], edx
push dword [ebp - 0x15d0]
push dword [ebp - 0x15d4]
lea ecx, [ebp - 0x23f4]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.004200e8
push eax
call fcn.004a11e7
pop ecx
lea ecx, [ebp - 0x23f4]
call fcn.004200de
jmp 0x40e2b6
jmp 0x40e290
jmp 0x40e26a
jmp 0x40e244
mov dword [ebp - 0x1980], 1
mov dword [ebp - 4], 4
cmp dword [ebp - 0x111c], 0x39d8
jge 0x40e363
push dword [ebp - 0x15b0]
call fcn.004a11e7
pop ecx
jmp 0x40e37f
or dword [ebp - 4], 0xffffffff
jmp 0x40e389
mov dword [ebp - 0x1978], 0xffffffff
mov dword [ebp - 0x1968], 0xdade661f
mov dword [ebp - 0x1970], 0x8cae2fe8
mov dword [ebp - 0x1988], 5
mov dword [ebp - 0x30c], 0
jmp 0x40e3ca
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 4
jge 0x40e3ec
push dword [ebp - 0x30c]
lea ecx, [ebp - 0x1d3c]
call fcn.00420325
mov dword [eax], 1
jmp 0x40e3bd
push 0x6b14
lea eax, [ebp - 0x1968]
push eax
push 0x534a
lea eax, [ebp - 0x1970]
push eax
lea eax, [ebp - 0x1978]
push eax
push 0
push 0x4c63
push 0x516b
push 1
lea eax, [ebp - 0x1d3c]
push eax
push 0x704f
push 1
lea eax, [ebp - 0x1980]
push eax
call fcn.0040abdb
add esp, 0x34
push 0
push 1
push 0x3284
push 0x6bfd
push 0x746b
lea eax, [ebp - 0x1988]
push eax
push 0xf07
push 0x2836
push 0x665a
push 0
push 0x7932
call fcn.00402301
add esp, 0x2c
lea ecx, [ebp - 0x1d3c]
call fcn.00420309
mov dword [ebp - 0x12a0], 0x3c576436
mov dword [ebp - 0x1e7c], 0x937a
mov dword [ebp - 0x538], 0
jmp 0x40e4a6
mov eax, dword [ebp - 0x538]
inc eax
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x538], 3
jge 0x40e4c2
mov eax, dword [ebp - 0x538]
mov dword [ebp + eax*4 - 0x1c28], 0xfd3df75d
jmp 0x40e499
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1c28], 0
jmp 0x40e4ed
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1c28]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1c28], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1c28], 0xffffffef
jge 0x40e52f
mov dword [ebp - 0x1990], 0x4f40
push 0
push 0x1bf7
lea eax, [ebp - 0x1990]
push eax
push 0x27f7
push 0
push 0x4456
push 0x6276
call fcn.004091f0
add esp, 0x1c
jmp 0x40e4d4
mov dword [ebp - 0x24], 0xe57b
mov dword [ebp - 0x18], 0x47c4d145
push 1
lea ecx, [ebp - 0x1d48]
call fcn.00420237
push 3
lea ecx, [ebp - 0x1c1c]
call fcn.00420237
push 0
push 1
lea eax, [ebp - 0x294]
push eax
push 0x50df
push 0x4a02
push 0x1e88
push 0x5ee0
lea eax, [ebp - 0x1d48]
push eax
push 0x2153
push 1
push 0x4900
call fcn.00402301
add esp, 0x2c
mov dword [ebp - 0x964], 0x3036
mov dword [ebp - 0x1998], str.uaxjddtl_qjd_tcqfrugic_atrjt_qizc_uyl_cla_tus_micbxbczo_anxrq
cmp dword [ebp - 0x964], 0x312c
jle 0x40e688
and dword [ebp - 0x314], 0
jmp 0x40e5cb
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x3e51
jge 0x40e67e
and dword [ebp - 0x648], 0
jmp 0x40e5f1
mov eax, dword [ebp - 0x648]
inc eax
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 0x185d
jge 0x40e679
and dword [ebp - 0x31c], 0
jmp 0x40e613
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0x3804
jge 0x40e674
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x31c]
shl eax, cl
cdq
mov dword [ebp - 0x15e0], eax
mov dword [ebp - 0x15dc], edx
push dword [ebp - 0x15dc]
push dword [ebp - 0x15e0]
lea ecx, [ebp - 0x2550]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.004200e8
push eax
call fcn.004a11e7
pop ecx
lea ecx, [ebp - 0x2550]
call fcn.004200de
jmp 0x40e606
jmp 0x40e5e4
jmp 0x40e5be
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
mov dword [ebp - 0x294], 0
jmp 0x40e6a1
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 3
jge 0x40e6c3
push dword [ebp - 0x294]
lea ecx, [ebp - 0x1c1c]
call fcn.00420325
mov dword [eax], 0x4e46196c
jmp 0x40e694
mov dword [ebp - 4], 6
cmp dword [ebp - 0x964], 0x2fcb
jge 0x40e6e2
push dword [ebp - 0x1998]
call fcn.004a11e7
pop ecx
jmp 0x40e6fe
or dword [ebp - 4], 0xffffffff
jmp 0x40e708
push 0
push 0x55e3
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x1ea2
push 0x3484
push 0x3a9b
push 1
push 0
push 0x6fcf
call fcn.00408a53
add esp, 0x28
cmp dword [ebp - 0x24], 9
ja 0x40e749
mov dword [ebp - 0xe8c], 1
jmp 0x40e750
and dword [ebp - 0xe8c], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0xe8c]
jne 0x40e767
mov dword [ebp - 0x96c], 1
jmp 0x40e76e
and dword [ebp - 0x96c], 0
cmp dword [ebp - 0x96c], 3
jne 0x40e783
mov dword [ebp - 0x12c4], 1
jmp 0x40e78a
and dword [ebp - 0x12c4], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x12c4]
sub ecx, dword [ebp - 0x24]
add eax, ecx
cmp dword [ebp - 0x18], eax
jne 0x40e7a9
mov dword [ebp - 0x974], 1
jmp 0x40e7b0
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x21dc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1e84], eax
cmp dword [ebp - 0x18], 0
je 0x40eb59
push 1
lea ecx, [ebp - 0x1b5c]
call fcn.00420237
mov dword [ebp - 0xe94], 0x37fd
mov dword [ebp - 0x19a0], str.chljtyjh_vaqja_pzcwooxf_dcbf_kblfc_sstvh_qaor_ctbi_ovnnre_fhagzpy_xftrxz_qqq_pnhff
cmp dword [ebp - 0xe94], 0x399b
jle 0x40e920
push 0
push 0x517
push 0xe89
push 0x270a
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
and dword [ebp - 0x32c], 0
jmp 0x40e839
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x5235
jge 0x40e920
and dword [ebp - 0x540], 0
jmp 0x40e85f
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 0x15cc
jge 0x40e91b
and dword [ebp - 0x324], 0
jmp 0x40e885
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x52a8
jge 0x40e916
and dword [ebp - 0x748], 0
jmp 0x40e8ab
mov eax, dword [ebp - 0x748]
inc eax
mov dword [ebp - 0x748], eax
cmp dword [ebp - 0x748], 0x1f62
jge 0x40e911
mov eax, dword [ebp - 0x540]
imul eax, dword [ebp - 0x324]
sub eax, dword [ebp - 0x748]
and eax, dword [ebp - 0x32c]
cdq
mov dword [ebp - 0x15ec], eax
mov dword [ebp - 0x15e8], edx
push dword [ebp - 0x15e8]
push dword [ebp - 0x15ec]
lea ecx, [ebp - 0x2424]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.004200e8
push eax
call fcn.004a11e7
pop ecx
lea ecx, [ebp - 0x2424]
call fcn.004200de
jmp 0x40e89e
jmp 0x40e878
jmp 0x40e852
jmp 0x40e82c
mov dword [ebp - 0x19d0], 0x15b75d39
mov dword [ebp - 4], 8
cmp dword [ebp - 0xe94], 0x3619
jge 0x40e949
push dword [ebp - 0x19a0]
call fcn.004a11e7
pop ecx
jmp 0x40e965
or dword [ebp - 4], 0xffffffff
jmp 0x40e96f
lea eax, [ebp - 0x2080]
push eax
push 0x1574
lea eax, [ebp - 0x1b5c]
push eax
push 0
push 0x2089
push 0x182e
push 0x360d
push 1
push 0
call fcn.0040b4f1
add esp, 0x24
mov dword [ebp - 0x24], 8
jmp 0x40e9af
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x13
jle 0x40eb4c
mov dword [ebp - 0x19c8], 2
mov dword [ebp - 0x97c], 0
mov dword [ebp - 0x18], 0
jmp 0x40e9dd
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x40eb0d
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x19a8], 0x1494d85d
mov dword [ebp - 0x19c0], 0xa98a1bd0
push 1
lea ecx, [ebp - 0x1d30]
call fcn.00420237
lea eax, [ebp - 0x1d30]
push eax
push 1
push 0
push 0x1f18
push 0x3276
push 0x65bd
push 0x772
push 0x1847
push 0x45ad
push 0x63a3
push 0x6dad
push 0x4dea
push 0x3fab
lea eax, [ebp - 0x1e8c]
push eax
push 0x291a
push 0x3e45
call fcn.00404eb1
add esp, 0x40
mov dword [ebp - 0x2b0], 0
jmp 0x40ea81
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0
jg 0x40eafd
mov dword [ebp - 0x19b0], 1
mov dword [ebp - 0x19b8], 1
lea eax, [ebp - 0x1b5c]
push eax
lea eax, [ebp - 0x19a8]
push eax
lea eax, [ebp - 0x1d48]
push eax
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x19b0]
push eax
lea eax, [ebp - 0x19b8]
push eax
lea eax, [ebp - 0x1d30]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x19c0]
push eax
push 0
lea eax, [ebp - 0x19c8]
push eax
push 1
lea eax, [ebp - 0x97c]
push eax
call fcn.004065ff
add esp, 0x38
jmp 0x40ea74
lea ecx, [ebp - 0x1d30]
call fcn.00420309
jmp 0x40e9d6
lea eax, [ebp - 0x19d0]
push eax
push 0
push 0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c1c]
push eax
lea eax, [ebp - 0x1b5c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x97c]
push eax
push 0x61c4
push 0x5306
call fcn.00403eca
add esp, 0x28
jmp 0x40e9a8
lea ecx, [ebp - 0x1b5c]
call fcn.00420309
jmp 0x40ebd7
mov dword [ebp - 0x24], 0
jmp 0x40eb69
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x40ebd7
mov dword [ebp - 0x18], 0
jmp 0x40eb7f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x40ebd5
push 0x5e39
push 1
push 0x62a6
push 0x7ff6
push 0
push 0x39bc
lea eax, [ebp - 0x1c1c]
push eax
push 0x20c0
push 0xbd1
push 0x7139
lea eax, [ebp - 0x18]
push eax
push 0x11e7
push 0x602c
push 0x2946
push 0xa54
call fcn.0040d210
add esp, 0x3c
jmp 0x40eb78
jmp 0x40eb62
lea ecx, [ebp - 0x1c1c]
call fcn.00420309
lea ecx, [ebp - 0x1d48]
call fcn.00420309
mov dword [ebp - 0x548], 0
jmp 0x40ec06
mov eax, dword [ebp - 0x548]
inc eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 3
jge 0x40ec22
mov eax, dword [ebp - 0x548]
mov dword [ebp + eax*4 - 0x1450], 0xffffffff
jmp 0x40ebf9
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1450], 0xfffffffb
jmp 0x40ec50
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1450]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1450], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1450], 0xfffffff9
je 0x40f3a6
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x19d8], 0x1c3a23fe
mov dword [ebp - 0x19e0], 0x3f3ac9d7
mov dword [ebp - 0x334], 0
jmp 0x40ec9b
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 3
jge 0x40ecb7
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0x208c], 0x58bd4dfb
jmp 0x40ec8e
mov dword [ebp - 0x98c], 0x73fe
mov dword [ebp - 0x19f8], str.qivg_lxqg_napjpzqy_mpfnhkezv_vedkux_pta_urt_lkg_yfbpruzve_wlnrl_ehyw
cmp dword [ebp - 0x98c], 0x7560
jle 0x40ed9c
and dword [ebp - 0x650], 0
jmp 0x40ecf1
mov eax, dword [ebp - 0x650]
inc eax
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 0x722d
jge 0x40ed85
and dword [ebp - 0x33c], 0
jmp 0x40ed17
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x76c3
jge 0x40ed80
and dword [ebp - 0x550], 0
jmp 0x40ed39
mov eax, dword [ebp - 0x550]
inc eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0x240d
jge 0x40ed7e
mov eax, dword [ebp - 0x650]
add eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x550]
shl eax, cl
cdq
mov dword [ebp - 0x15f8], eax
mov dword [ebp - 0x15f4], edx
push dword [ebp - 0x15f4]
push dword [ebp - 0x15f8]
mov ecx, 0xac67d8
call fcn.004200f3
jmp 0x40ed2c
jmp 0x40ed0a
jmp 0x40ece4
push 0x5b1
push 0
push 0x13e0
push 0x1f85
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x118], 0xffffffe7
jmp 0x40edb5
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x17
jg 0x40eeec
mov dword [ebp - 0x19e8], 0xc266d8ff
mov dword [ebp - 0x19f0], 0
mov dword [ebp - 0x344], 0
jmp 0x40edef
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 3
jge 0x40ee0b
mov eax, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0x1d60], 1
jmp 0x40ede2
cmp dword [ebp - 0x118], 0
je 0x40ee19
jmp 0x40eeec
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x208c], 0x7a73d2d6
xor eax, eax
cmp eax, 0x7a73d2d6
je 0x40ee3e
mov dword [ebp - 0x1124], 1
jmp 0x40ee45
and dword [ebp - 0x1124], 0
mov eax, dword [ebp - 0x1124]
mov dword [ebp - 0x19d8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1d60], 0
je 0x40ee69
mov eax, 0x94e8fe75
test eax, eax
jne 0x40ee72
cmp dword [ebp - 0x118], 0
je 0x40ee79
cmp dword [ebp - 0x118], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1d60]
cmp dword [ebp - 0x19e0], eax
je 0x40ee99
mov dword [ebp - 0x984], 1
jmp 0x40eea0
and dword [ebp - 0x984], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x984]
sub edx, dword [ebp + ecx - 0x1d60]
add edx, dword [ebp - 0x19e8]
cmp dword [ebp + eax - 0x208c], edx
jg 0x40eed4
mov dword [ebp - 0xe9c], 1
jmp 0x40eedb
and dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0xe9c]
mov dword [ebp - 0x19f0], eax
jmp 0x40eda8
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x98c], 0x70ba
jge 0x40ef0f
mov edx, dword [ebp - 0x19f8]
mov ecx, 0xac67d8
call fcn.00421ea9
jmp 0x40ef2b
or dword [ebp - 4], 0xffffffff
jmp 0x40ef35
mov byte [ebp - 0xef], 0
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x28c], 0x989b1ab4
mov dword [ebp - 0x99c], 1
push 1
lea ecx, [ebp - 0x1b74]
call fcn.00420237
mov dword [ebp - 0x9ac], 6
mov dword [ebp - 0x1df4], 0
mov dword [ebp - 0x1df0], 0
mov dword [ebp - 0x1dec], 0
mov dword [ebp - 0x1de8], 0
push 4
lea ecx, [ebp - 0x1db4]
call fcn.00420237
push 1
push 0x107f
push 0
lea eax, [ebp - 0x2b8]
push eax
push 0
push 0x1e96
push 0x7c29
push 0x549d
push 0x4349
lea eax, [ebp - 0x1b74]
push eax
push 0x9ec
push 0x5185
push 0x24d
push 0x3666
push 0x3bd5
push 0x63c5
push 0x3990
push 0x34f3
call fcn.0040930a
add esp, 0x48
mov dword [ebp - 0x2b8], 0
jmp 0x40f01c
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 4
jge 0x40f03e
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x1db4]
call fcn.00420325
mov dword [eax], 1
jmp 0x40f00f
cmp dword [ebp - 0x204], 0
je 0x40f135
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x2274], eax
cmp dword [ebp - 0x204], 0x86
jne 0x40f06f
mov dword [ebp - 0x126c], 1
jmp 0x40f076
and dword [ebp - 0x126c], 0
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0x126c], eax
jl 0x40f090
mov dword [ebp - 0x994], 1
jmp 0x40f097
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0x994]
je 0x40f0b1
mov dword [ebp - 0xea4], 1
jmp 0x40f0b8
and dword [ebp - 0xea4], 0
mov eax, dword [ebp - 0xea4]
mov dword [ebp - 0x99c], eax
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0x99c], eax
jge 0x40f0de
mov dword [ebp - 0x8c0], 1
jmp 0x40f0e5
and dword [ebp - 0x8c0], 0
push 0
lea ecx, [ebp - 0x1b74]
call fcn.00420325
mov ecx, dword [ebp - 0x8c0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0x8c0], eax
jle 0x40f114
mov dword [ebp - 0x112c], 1
jmp 0x40f11b
and dword [ebp - 0x112c], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x112c], eax
jg 0x40f135
mov dword [ebp - 0x9a4], 1
jmp 0x40f13c
and dword [ebp - 0x9a4], 0
cmp dword [ebp - 0x9a4], 3
je 0x40f151
mov dword [ebp - 0xeac], 1
jmp 0x40f158
and dword [ebp - 0xeac], 0
mov eax, dword [ebp - 0xeac]
sub eax, dword [ebp - 0x28c]
imul eax, dword [ebp - 0x28c]
mov dword [ebp - 0x9ac], eax
cmp dword [ebp - 0x9ac], 0x470e
je 0x40f189
mov dword [ebp - 0x8c8], 1
jmp 0x40f190
and dword [ebp - 0x8c8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x8c8]
mov dword [ebp + eax - 0x1df4], ecx
push 0
lea ecx, [ebp - 0x1db4]
call fcn.00420325
mov ecx, dword [ebp - 0x8c8]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x1b74]
call fcn.00420325
mov dword [eax], 0x2a42bbd4
lea ecx, [ebp - 0x1db4]
call fcn.00420309
lea ecx, [ebp - 0x1b74]
call fcn.00420309
movzx eax, byte [ebp - 0xef]
test eax, eax
je 0x40f3a1
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x9bc], 1
mov dword [ebp - 0x1a00], 0x336de018
mov dword [ebp - 0x6d0], 0
jmp 0x40f226
mov eax, dword [ebp - 0x6d0]
inc eax
mov dword [ebp - 0x6d0], eax
cmp dword [ebp - 0x6d0], 1
jge 0x40f242
mov eax, dword [ebp - 0x6d0]
mov dword [ebp + eax*4 - 0x18c], 0xffffffff
jmp 0x40f219
mov dword [ebp - 0x1c8], 0
jmp 0x40f25b
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jl 0x40f29d
mov byte [ebp - 0x10f], 0
movzx eax, byte [ebp - 0x10f]
test eax, eax
je 0x40f29b
push 0x29e
push 0x43fa
push 0x5ded
push 0x78c7
push 1
push 0x7898
push 0
call fcn.004019e2
add esp, 0x1c
jmp 0x40f24e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18c]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x95a
jg 0x40f2c8
mov dword [ebp - 0x12cc], 1
jmp 0x40f2cf
and dword [ebp - 0x12cc], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x18c]
cmp dword [ebp + eax - 0x18c], ecx
jne 0x40f2f7
mov dword [ebp - 0x9b4], 1
jmp 0x40f2fe
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0x12cc]
cmp eax, dword [ebp - 0x9b4]
jge 0x40f318
mov dword [ebp - 0xeb4], 1
jmp 0x40f31f
and dword [ebp - 0xeb4], 0
mov eax, dword [ebp - 0xeb4]
mov dword [ebp - 0x9bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18c]
add eax, dword [ebp - 0x9bc]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x18c], eax
je 0x40f359
mov dword [ebp - 0x1134], 1
jmp 0x40f360
and dword [ebp - 0x1134], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18c]
cmp dword [ebp - 0x1134], eax
jge 0x40f381
mov dword [ebp - 0x9c4], 1
jmp 0x40f388
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x9c4]
mov dword [ebp - 0x1a00], eax
push 0
push 0x26e0
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x40ec35
mov dword [ebp - 0x1a28], 0
mov dword [ebp - 0x1a08], 0x3e7ed6f1
mov dword [ebp - 0x1a10], 6
mov dword [ebp - 0x1a18], 0xffff
push 1
lea ecx, [ebp - 0x1dcc]
call fcn.00420237
mov dword [ebp - 0x1a20], 0x3f4b1415
mov dword [ebp - 0x1a38], 0xffffffff
mov dword [ebp - 0x34c], 0
jmp 0x40f408
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 1
jge 0x40f42a
push dword [ebp - 0x34c]
lea ecx, [ebp - 0x1dcc]
call fcn.00420325
mov dword [eax], 0xe404
jmp 0x40f3fb
mov dword [ebp - 0xebc], 0x7f7c
mov dword [ebp - 0x1a30], str.heuzcjo_mjia_wehsmvhht_vauufiw_tgvxpi_wdre_irih_pql_ceszfua_oavrwrxbn_xjjstmgh_ktzbwww
cmp dword [ebp - 0xebc], 0x802a
jle 0x40f54c
and dword [ebp - 0x558], 0
jmp 0x40f464
mov eax, dword [ebp - 0x558]
inc eax
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0xd5b
jge 0x40f54c
and dword [ebp - 0x354], 0
jmp 0x40f48a
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0x2b5c
jge 0x40f547
and dword [ebp - 0x658], 0
jmp 0x40f4b0
mov eax, dword [ebp - 0x658]
inc eax
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x658], 0x4cf8
jge 0x40f542
and dword [ebp - 0x35c], 0
jmp 0x40f4d6
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0xf3a
jge 0x40f53d
mov eax, dword [ebp - 0x558]
imul eax, dword [ebp - 0x354]
imul eax, dword [ebp - 0x658]
sub eax, dword [ebp - 0x35c]
cdq
mov dword [ebp - 0x1604], eax
mov dword [ebp - 0x1600], edx
push dword [ebp - 0x1600]
push dword [ebp - 0x1604]
lea ecx, [ebp - 0x2640]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.004200e8
push eax
call fcn.004a11e7
pop ecx
lea ecx, [ebp - 0x2640]
call fcn.004200de
jmp 0x40f4c9
jmp 0x40f4a3
jmp 0x40f47d
jmp 0x40f457
lea eax, [ebp - 0x1a08]
push eax
lea eax, [ebp - 0x1a10]
push eax
push 0x4f61
lea eax, [ebp - 0x1a18]
push eax
lea eax, [ebp - 0x1dcc]
push eax
lea eax, [ebp - 0x1a20]
push eax
push 0x7405
push 0
lea eax, [ebp - 0x1a28]
push eax
push 1
call fcn.00409df1
add esp, 0x28
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xebc], 0x7c20
jge 0x40f5ab
push dword [ebp - 0x1a30]
call fcn.004a11e7
pop ecx
jmp 0x40f5c7
or dword [ebp - 4], 0xffffffff
jmp 0x40f5d1
push 0
lea eax, [ebp - 0x1a38]
push eax
push 1
push 0x3eed
push 0x7c4a
push 0x6f57
push 0x49db
push 0xfde
push 0x3783
push 0x254a
push 0x7f0e
push 0
push 0x8f0
call fcn.00405b44
add esp, 0x34
lea ecx, [ebp - 0x1dcc]
call fcn.00420309
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xdc], eax
jl 0x40f638
mov dword [ebp - 0x9cc], 1
jmp 0x40f63f
and dword [ebp - 0x9cc], 0
cmp dword [ebp - 0x9cc], 0x53e1e01b
jle 0x40f657
mov dword [ebp - 0x1274], 1
jmp 0x40f65e
and dword [ebp - 0x1274], 0
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x1274]
cmp eax, 0xffff
jb 0x40f67e
mov dword [ebp - 0x9d4], 1
jmp 0x40f685
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x9d4]
jle 0x40f69f
mov dword [ebp - 0xec4], 1
jmp 0x40f6a6
and dword [ebp - 0xec4], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xec4], eax
jle 0x40f6c0
mov dword [ebp - 0x9dc], 1
jmp 0x40f6c7
and dword [ebp - 0x9dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1450]
mov dword [ebp - 0x113c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x113c]
mov dword [ebp + eax - 0x1450], ecx
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x9dc]
cmp dword [ebp - 0x113c], eax
je 0x40f70d
mov dword [ebp - 0x9e4], 1
jmp 0x40f714
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x9e4]
add eax, 0x44214078
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xa5bc
jne 0x40f73d
mov dword [ebp - 0xecc], 1
jmp 0x40f744
and dword [ebp - 0xecc], 0
mov eax, dword [ebp - 0x12a0]
cmp dword [ebp - 0xecc], eax
jne 0x40f75e
mov dword [ebp - 0x9ec], 1
jmp 0x40f765
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0x12a0], eax
mov byte [ebp - 0x29], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x364], 0x4fd9e2a8
mov dword [ebp - 0x8b4], 0
mov dword [ebp - 0x115c], 0xcd7820ea
mov dword [ebp - 0x560], 0
jmp 0x40f7bd
mov eax, dword [ebp - 0x560]
inc eax
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x560], 2
jge 0x40f7d9
mov eax, dword [ebp - 0x560]
mov dword [ebp + eax*4 - 0x870], 0x418a5273
jmp 0x40f7b0
imul eax, dword [ebp - 0x20c], 0xffff
cmp eax, 0xffffffff
jg 0x40f7f4
mov dword [ebp - 0x9f4], 1
jmp 0x40f7fb
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x20c], 0
jmp 0x40f81d
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0xffffffe5
jne 0x40fd86
mov dword [ebp - 0x1e94], 0x4b58e17c
mov dword [ebp - 0x7c0], 0xffffffff
mov dword [ebp - 0x7c8], 0xbc383c67
push 1
lea ecx, [ebp - 0x1438]
call fcn.00420237
mov dword [ebp - 0x264], 0
jmp 0x40f86e
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x40f88a
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x8f4], 0xfffffffb
jmp 0x40f861
push 0
push 0x12e1
push 0x4768
push 0x36e8
lea eax, [ebp - 0x1438]
push eax
push 0x299e
push 0xf90
push 0x5fc4
push 1
lea eax, [ebp - 0x264]
push eax
push 0x7aa5
push 1
push 0x1234
push 0x1c83
call fcn.00407b1b
add esp, 0x38
mov dword [ebp - 0x78], 1
jmp 0x40f8e3
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x40fc38
mov dword [ebp - 0xa2c], 0
mov dword [ebp - 0xedc], 0xf2301355
mov dword [ebp - 0x1a40], 0xdd0bb265
mov dword [ebp - 0xa44], 0x42fa
mov eax, dword [ebp - 0x8b4]
inc eax
mov dword [ebp - 0x8b4], eax
mov eax, dword [ebp - 0x78]
mov ecx, 0x8de9
sub ecx, dword [ebp + eax*4 - 0x8f4]
mov eax, dword [ebp - 0x78]
cmp ecx, dword [ebp + eax*4 - 0x8f4]
jl 0x40f949
mov dword [ebp - 0xed4], 1
jmp 0x40f950
and dword [ebp - 0xed4], 0
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x8f4]
cmp dword [ebp - 0xed4], eax
jl 0x40f96e
mov dword [ebp - 0x9fc], 1
jmp 0x40f975
and dword [ebp - 0x9fc], 0
cmp dword [ebp - 0x9fc], 0x6892
jl 0x40f98d
mov dword [ebp - 0x1144], 1
jmp 0x40f994
and dword [ebp - 0x1144], 0
mov eax, dword [ebp - 0x1144]
mov dword [ebp - 0x7c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7c8]
sub ecx, dword [ebp + eax - 0x8f4]
mov dword [ebp - 0xa04], ecx
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xa04]
mov dword [ebp + eax*4 - 0x8f4], ecx
mov eax, dword [ebp - 0xa04]
mov dword [ebp - 0xedc], eax
cmp dword [ebp - 0xedc], 0
je 0x40f9eb
mov eax, dword [ebp - 0x78]
cmp dword [ebp + eax*4 - 0x8f4], 0
jne 0x40f9fd
mov eax, 0xc8f94914
test eax, eax
jne 0x40f9fd
and dword [ebp - 0xa0c], 0
jmp 0x40fa07
mov dword [ebp - 0xa0c], 1
cmp dword [ebp - 0xa0c], 0x526954eb
jne 0x40fa1f
mov dword [ebp - 0x127c], 1
jmp 0x40fa26
and dword [ebp - 0x127c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x870]
cmp dword [ebp - 0x127c], eax
jne 0x40fa47
mov dword [ebp - 0xa14], 1
jmp 0x40fa4e
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0xa2c]
cmp dword [ebp - 0xa14], eax
jne 0x40fa68
mov dword [ebp - 0xee4], 1
jmp 0x40fa6f
and dword [ebp - 0xee4], 0
push 0
lea ecx, [ebp - 0x1438]
call fcn.00420325
mov ecx, dword [ebp - 0xee4]
cmp ecx, dword [eax]
je 0x40fa92
mov dword [ebp - 0xa1c], 1
jmp 0x40fa99
and dword [ebp - 0xa1c], 0
cmp dword [ebp - 0xa1c], 0
jne 0x40faae
mov dword [ebp - 0x114c], 1
jmp 0x40fab5
and dword [ebp - 0x114c], 0
cmp dword [ebp - 0x114c], 0xb7dc
jg 0x40facd
mov dword [ebp - 0xa24], 1
jmp 0x40fad4
and dword [ebp - 0xa24], 0
cmp dword [ebp - 0xa24], 0xc5f6b4ab
jae 0x40faec
mov dword [ebp - 0xeec], 1
jmp 0x40faf3
and dword [ebp - 0xeec], 0
mov eax, dword [ebp - 0xeec]
mov dword [ebp - 0x1a40], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa2c]
cmp dword [ebp + eax - 0x870], ecx
jg 0x40fb20
mov dword [ebp - 0x1a48], 1
jmp 0x40fb27
and dword [ebp - 0x1a48], 0
cmp dword [ebp - 0xa44], 0
jne 0x40fb4b
push 0
lea ecx, [ebp - 0x1438]
call fcn.00420325
cmp dword [eax], 0
jne 0x40fb4b
and dword [ebp - 0x12dc], 0
jmp 0x40fb55
mov dword [ebp - 0x12dc], 1
mov eax, dword [ebp - 0x12dc]
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0
je 0x40fb86
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x870], 0
je 0x40fb86
mov dword [ebp - 0xa34], 1
jmp 0x40fb8d
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xa34]
mov dword [ebp - 0x7c0], eax
cmp dword [ebp - 0x7c0], 1
jne 0x40fbae
mov dword [ebp - 0xef4], 1
jmp 0x40fbb5
and dword [ebp - 0xef4], 0
cmp dword [ebp - 0xef4], 0
jg 0x40fbca
mov dword [ebp - 0xa3c], 1
jmp 0x40fbd1
and dword [ebp - 0xa3c], 0
cmp dword [ebp - 0xa3c], 0xc684
je 0x40fbe9
mov dword [ebp - 0x1154], 1
jmp 0x40fbf0
and dword [ebp - 0x1154], 0
mov eax, dword [ebp - 0x115c]
cmp dword [ebp - 0x1154], eax
jge 0x40fc0a
mov dword [ebp - 0xefc], 1
jmp 0x40fc11
and dword [ebp - 0xefc], 0
mov eax, dword [ebp - 0xa44]
imul eax, dword [ebp - 0xefc]
imul esi, eax, 0xdfdd
push 0
lea ecx, [ebp - 0x1438]
call fcn.00420325
mov dword [eax], esi
jmp 0x40f8dc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x870]
mov dword [ebp - 0xa4c], eax
push 0
lea ecx, [ebp - 0x1438]
call fcn.00420325
mov ecx, dword [ebp - 0xa4c]
mov dword [eax], ecx
cmp dword [ebp - 0xa4c], 0
jne 0x40fd32
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x870]
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 1
jle 0x40fc95
mov dword [ebp - 0xf04], 1
jmp 0x40fc9c
and dword [ebp - 0xf04], 0
cmp dword [ebp - 0x7c0], 0
jne 0x40fcc6
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x2090], eax
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x40fcc6
or eax, 0xffffffff
jne 0x40fcc6
and dword [ebp - 0x1284], 0
jmp 0x40fcd0
mov dword [ebp - 0x1284], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x870]
mov ecx, dword [ebp - 0x1284]
lea eax, [ecx + eax - 0xa]
cmp eax, 2
jle 0x40fcf8
mov dword [ebp - 0xa54], 1
jmp 0x40fcff
and dword [ebp - 0xa54], 0
cmp dword [ebp - 0xa54], 0
jbe 0x40fd14
mov dword [ebp - 0xa5c], 1
jmp 0x40fd1b
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0xf04]
cmp eax, dword [ebp - 0xa5c]
jl 0x40fd32
and dword [ebp - 0xa64], 0
jmp 0x40fd3c
mov dword [ebp - 0xa64], 1
mov eax, dword [ebp - 0x115c]
cmp dword [ebp - 0xa64], eax
jge 0x40fd56
mov dword [ebp - 0xf0c], 1
jmp 0x40fd5d
and dword [ebp - 0xf0c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x870]
add eax, dword [ebp - 0xf0c]
mov dword [ebp - 0x7c8], eax
lea ecx, [ebp - 0x1438]
call fcn.00420309
jmp 0x40f810
mov dword [ebp - 0x710], 2
push 3
lea ecx, [ebp - 0x135c]
call fcn.00420237
mov dword [ebp - 0x1a60], 0x1cfd1f2e
mov dword [ebp - 0x1a50], 0x2624
mov dword [ebp - 0x3c], 0
jmp 0x40fdc1
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x40fddd
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x135c]
call fcn.00420325
mov dword [eax], 0xfffffffb
jmp 0x40fdba
mov dword [ebp - 0x3c], 0
jmp 0x40fded
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x40fe03
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xf14], 0
jmp 0x40fde6
mov dword [ebp - 0x3c], 0
jmp 0x40fe13
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x40fe29
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x2018], 0x5d9c72
jmp 0x40fe0c
mov dword [ebp - 0x710], 0x10
jmp 0x40fe42
mov eax, dword [ebp - 0x710]
dec eax
mov dword [ebp - 0x710], eax
cmp dword [ebp - 0x710], 2
jne 0x4101b9
mov dword [ebp - 0xa8c], 1
mov dword [ebp - 0x1164], 6
mov dword [ebp - 0x36c], 0
jmp 0x40fe7c
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 1
jge 0x40fe95
mov eax, dword [ebp - 0x36c]
mov dword [ebp + eax*4 - 0x58], 0
jmp 0x40fe6f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x58], 0
jmp 0x40feba
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x58], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 2
jg 0x4101b4
mov dword [ebp - 0x7d0], 0xffff
push 1
lea ecx, [ebp - 0x1de4]
call fcn.00420237
mov dword [ebp - 0x568], 0
jmp 0x40fefb
mov eax, dword [ebp - 0x568]
inc eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 1
jge 0x40ff1d
push dword [ebp - 0x568]
lea ecx, [ebp - 0x1de4]
call fcn.00420325
mov dword [eax], 0xfffffff6
jmp 0x40feee
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
mov dword [ebp - 0x1e9c], eax
push 1
lea ecx, [ebp - 0x135c]
call fcn.00420325
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2018]
mov dword [ebp - 0x21d0], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x58]
lea ecx, [ebp - 0x135c]
call fcn.00420325
cmp dword [eax], 0xc47a
je 0x40ff76
mov dword [ebp - 0xa6c], 1
jmp 0x40ff7d
and dword [ebp - 0xa6c], 0
cmp dword [ebp - 0xa6c], 0
je 0x40ff92
mov dword [ebp - 0x12e4], 1
jmp 0x40ff99
and dword [ebp - 0x12e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf14]
cmp dword [ebp - 0x12e4], eax
jne 0x40ffba
mov dword [ebp - 0xa74], 1
jmp 0x40ffc1
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0xa74]
sub eax, 0x4418
je 0x40ffe7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0
je 0x40ffe7
mov dword [ebp - 0x850], 1
jmp 0x40ffee
and dword [ebp - 0x850], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x850]
mov dword [ebp + eax - 0xf14], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0x850], eax
jle 0x41001f
mov dword [ebp - 0xa7c], 1
jmp 0x410026
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0x1ea4], eax
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0x1164], eax
mov eax, dword [ebp - 0x1164]
mov dword [ebp - 0x20a0], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x58]
lea ecx, [ebp - 0x135c]
call fcn.00420325
mov ecx, dword [ebp - 0x1a50]
cmp dword [eax], ecx
jne 0x410075
mov dword [ebp - 0xa84], 1
jmp 0x41007c
and dword [ebp - 0xa84], 0
cmp dword [ebp - 0xa84], 0x8fa7ad11
jae 0x410094
mov dword [ebp - 0xf1c], 1
jmp 0x41009b
and dword [ebp - 0xf1c], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x58]
lea ecx, [ebp - 0x135c]
call fcn.00420325
mov esi, dword [ebp - 0xf1c]
sub esi, dword [eax]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x58]
lea ecx, [ebp - 0x135c]
call fcn.00420325
cmp esi, dword [eax]
jle 0x4100dd
mov dword [ebp - 0x1a58], 1
jmp 0x4100e4
and dword [ebp - 0x1a58], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x58]
lea ecx, [ebp - 0x135c]
call fcn.00420325
mov eax, 0xe37d660f
cmp eax, 0x356e3f0e
jne 0x41011a
cmp dword [ebp - 0xa8c], 0
je 0x41011a
mov dword [ebp - 0x128c], 1
jmp 0x410121
and dword [ebp - 0x128c], 0
mov eax, dword [ebp - 0x7d0]
inc eax
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x7d0]
cmp eax, dword [ebp - 0x128c]
je 0x410148
mov dword [ebp - 0xa94], 1
jmp 0x41014f
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x1a60]
cmp dword [ebp - 0xa94], eax
jle 0x410169
mov dword [ebp - 0xf24], 1
jmp 0x410170
and dword [ebp - 0xf24], 0
cmp dword [ebp - 0xf24], 0xd93c
je 0x410188
mov dword [ebp - 0xa9c], 1
jmp 0x41018f
and dword [ebp - 0xa9c], 0
push 0
lea ecx, [ebp - 0x1de4]
call fcn.00420325
mov ecx, dword [ebp - 0xa9c]
mov dword [eax], ecx
lea ecx, [ebp - 0x1de4]
call fcn.00420309
jmp 0x40fea5
jmp 0x40fe35
lea ecx, [ebp - 0x135c]
call fcn.00420309
mov dword [ebp - 0x116c], 0x1cf5
mov dword [ebp - 0x1a2c], str.ucqmdr_srzjns_lnd_naigeqkl_ppvhcl_cjnn_liepstkv_ilqgqw_pepkwtg_fqptg_eqkjlq_ixtaq
cmp dword [ebp - 0x116c], 0x1eb9
jle 0x41028b
push 0x181f
call dword [sym.imp.USER32.dll_GetMenu]
and dword [ebp - 0x374], 0
jmp 0x410209
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0xc09
jge 0x41028b
and dword [ebp - 0x660], 0
jmp 0x41022b
mov eax, dword [ebp - 0x660]
inc eax
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0x15aa
jge 0x410286
mov eax, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x660]
sar eax, cl
cdq
mov dword [ebp - 0x1610], eax
mov dword [ebp - 0x160c], edx
push dword [ebp - 0x160c]
push dword [ebp - 0x1610]
lea ecx, [ebp - 0x2454]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.004200e8
push eax
call fcn.004a11e7
pop ecx
lea ecx, [ebp - 0x2454]
call fcn.004200de
jmp 0x41021e
jmp 0x4101fc
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x116c], 0x1a90
jge 0x4102aa
push dword [ebp - 0x1a2c]
call fcn.004a11e7
pop ecx
jmp 0x4102c6
or dword [ebp - 4], 0xffffffff
jmp 0x4102d0
mov dword [ebp - 0x60], 0xffffffff
push 4
lea ecx, [ebp - 0x13cc]
call fcn.00420237
mov dword [ebp - 0x188c], 0x9e68
push 1
lea ecx, [ebp - 0x1bd4]
call fcn.00420237
mov dword [ebp - 0x8a4], 0xfca44bab
mov dword [ebp - 0x1eac], 0x8a1b
mov dword [ebp - 0x38], 0
jmp 0x41031f
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x41033b
push dword [ebp - 0x38]
lea ecx, [ebp - 0x13cc]
call fcn.00420325
mov dword [eax], 0x42afa017
jmp 0x410318
mov dword [ebp - 0x38], 0
jmp 0x41034b
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x410361
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x19a4], 0xb4f5fdfd
jmp 0x410344
mov dword [ebp - 0x38], 0
jmp 0x410371
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x41038a
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1bd4]
call fcn.00420325
and dword [eax], 0
jmp 0x41036a
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
jne 0x41039e
mov dword [ebp - 0x1478], 1
jmp 0x4103a5
and dword [ebp - 0x1478], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xaa4], eax
push 3
lea ecx, [ebp - 0x13cc]
call fcn.00420325
mov ecx, dword [ebp - 0xaa4]
mov dword [eax], ecx
imul eax, dword [ebp - 0xaa4], 0xfffffff8
test eax, eax
je 0x4103e0
cmp dword [ebp - 0x60], 0
je 0x4103e0
mov dword [ebp - 0xf2c], 1
jmp 0x4103e7
and dword [ebp - 0xf2c], 0
cmp dword [ebp - 0xf2c], 0x1320f2d6
jg 0x4103ff
mov dword [ebp - 0xaac], 1
jmp 0x410406
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0xaac], eax
jne 0x41041d
mov dword [ebp - 0x12ec], 1
jmp 0x410424
and dword [ebp - 0x12ec], 0
cmp dword [ebp - 0x12ec], 0xc629
jne 0x41043c
mov dword [ebp - 0x1484], 1
jmp 0x410443
and dword [ebp - 0x1484], 0
cmp dword [ebp - 0x60], 0xffffffff
je 0x410455
mov dword [ebp - 0xab4], 1
jmp 0x41045c
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0xab4]
sub eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x60]
test eax, eax
jne 0x41047f
mov eax, 0x17c7
test eax, eax
jne 0x41047f
and dword [ebp - 0xf34], 0
jmp 0x410489
mov dword [ebp - 0xf34], 1
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0xf34]
je 0x4104a0
mov dword [ebp - 0xabc], 1
jmp 0x4104a7
and dword [ebp - 0xabc], 0
cmp dword [ebp - 0xabc], 0xc7a00f47
jbe 0x4104bf
mov dword [ebp - 0x1174], 1
jmp 0x4104c6
and dword [ebp - 0x1174], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x1174]
test eax, eax
jne 0x410501
push 3
lea ecx, [ebp - 0x13cc]
call fcn.00420325
cmp dword [eax], 0
jne 0x410501
push 1
lea ecx, [ebp - 0x13cc]
call fcn.00420325
cmp dword [eax], 0
jne 0x410501
and dword [ebp - 0xac4], 0
jmp 0x41050b
mov dword [ebp - 0xac4], 1
mov eax, dword [ebp - 0xac4]
neg eax
add eax, dword [ebp - 0x60]
je 0x41075c
mov dword [ebp - 0x7d8], 1
mov dword [ebp - 0x1294], 0x4e2b7835
mov dword [ebp - 0x2224], 0
push 3
lea ecx, [ebp - 0x1a80]
call fcn.00420237
lea eax, [ebp - 0x1a80]
push eax
push 0x70d0
push 0x3035
lea eax, [ebp - 0x1eb4]
push eax
push 1
push 0x2f81
push 0
call fcn.004056a1
add esp, 0x1c
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x41058a
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
push 3
lea ecx, [ebp - 0x13cc]
call fcn.00420325
cmp dword [eax], 0
je 0x410733
cmp dword [ebp - 0x188c], 0xa81d
jl 0x4105b8
mov dword [ebp - 0x8c4], 1
jmp 0x4105bf
and dword [ebp - 0x8c4], 0
cmp dword [ebp - 0x7d8], 0
jne 0x410643
push 0
lea ecx, [ebp - 0x1a80]
call fcn.00420325
mov ecx, dword [ebp - 0x1294]
cmp dword [eax], ecx
jle 0x4105eb
mov dword [ebp - 0x148c], 1
jmp 0x4105f2
and dword [ebp - 0x148c], 0
mov eax, dword [ebp - 0x8a4]
inc eax
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x20b0], eax
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x1ebc], eax
mov eax, dword [ebp - 0x7d8]
sub eax, 0x18cc
je 0x410631
push 0
lea ecx, [ebp - 0x1a80]
call fcn.00420325
mov eax, 0xfb6c
test eax, eax
jne 0x410643
and dword [ebp - 0xf3c], 0
jmp 0x41064d
mov dword [ebp - 0xf3c], 1
cmp dword [ebp - 0xf3c], 0x146
jg 0x410665
mov dword [ebp - 0xacc], 1
jmp 0x41066c
and dword [ebp - 0xacc], 0
push 0
lea ecx, [ebp - 0x1bd4]
call fcn.00420325
mov ecx, dword [ebp - 0xacc]
add ecx, dword [eax]
cmp ecx, 8
je 0x410692
mov dword [ebp - 0x858], 1
jmp 0x410699
and dword [ebp - 0x858], 0
push 0
lea ecx, [ebp - 0x1a80]
call fcn.00420325
mov ecx, dword [ebp - 0x858]
mov dword [eax], ecx
cmp dword [ebp - 0x858], 0
jne 0x4106c9
cmp dword [ebp - 0x1294], 0
jne 0x4106c9
and dword [ebp - 0x7e0], 0
jmp 0x4106d3
mov dword [ebp - 0x7e0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7e0]
mov dword [ebp + eax - 0x19a4], ecx
cmp dword [ebp - 0x7e0], 6
jge 0x4106fb
mov dword [ebp - 0xad4], 1
jmp 0x410702
and dword [ebp - 0xad4], 0
push 0
lea ecx, [ebp - 0x13cc]
call fcn.00420325
mov ecx, dword [ebp - 0x8c4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c4]
neg eax
cmp eax, dword [ebp - 0xad4]
jne 0x410733
mov dword [ebp - 0xf44], 1
jmp 0x41073a
and dword [ebp - 0xf44], 0
push 0
lea ecx, [ebp - 0x1bd4]
call fcn.00420325
mov ecx, dword [ebp - 0xf44]
mov dword [eax], ecx
lea ecx, [ebp - 0x1a80]
call fcn.00420309
jmp 0x4107b3
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x4107b3
push 0
push 0x51f
push 0x3a69
push 0x18aa
push 1
push 0x6bb9
push 0x5c7e
push 0x611a
push 1
push 0x444f
push 0x31d0
push 0x2067
push 0x3145
push 0x56ad
call fcn.00406d5e
add esp, 0x38
push 1
push 0xc6c
push 0x78e8
push 1
push 0x5e4f
push 0x4bf6
push 0
call fcn.0040380d
add esp, 0x1c
lea ecx, [ebp - 0x1bd4]
call fcn.00420309
lea ecx, [ebp - 0x13cc]
call fcn.00420309
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x1ec], 1
mov dword [ebp - 0xf4c], 1
mov dword [ebp - 0x1494], 0x336de018
mov dword [ebp - 0x37c], 0
jmp 0x41082c
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 1
jge 0x410848
mov eax, dword [ebp - 0x37c]
mov dword [ebp + eax*4 - 0x1d8], 0xffffffff
jmp 0x41081f
mov dword [ebp - 0x1ec], 0
jmp 0x410861
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jl 0x4108a1
mov byte [ebp - 0xf3], 0
lea eax, [ebp - 0xf3]
push eax
push 0x4b08
push 0x17f
push 0x6739
push 0x5e1e
push 1
push 0
push 0
push 0x4893
call fcn.0040b812
add esp, 0x24
jmp 0x410854
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d8]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x95a
jg 0x4108cc
mov dword [ebp - 0xadc], 1
jmp 0x4108d3
and dword [ebp - 0xadc], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1d8]
cmp dword [ebp + eax - 0x1d8], ecx
jne 0x4108fb
mov dword [ebp - 0x117c], 1
jmp 0x410902
and dword [ebp - 0x117c], 0
mov eax, dword [ebp - 0xadc]
cmp eax, dword [ebp - 0x117c]
jge 0x41091c
mov dword [ebp - 0xae4], 1
jmp 0x410923
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0xae4]
mov dword [ebp - 0xf4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d8]
add eax, dword [ebp - 0xf4c]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x1d8], eax
je 0x41095d
mov dword [ebp - 0xaec], 1
jmp 0x410964
and dword [ebp - 0xaec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d8]
cmp dword [ebp - 0xaec], eax
jge 0x410985
mov dword [ebp - 0x12f4], 1
jmp 0x41098c
and dword [ebp - 0x12f4], 0
mov eax, dword [ebp - 0x12f4]
mov dword [ebp - 0x1494], eax
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x214], 4
mov dword [ebp - 0x21d8], 0x6e3245f1
mov dword [ebp - 0x570], 0
jmp 0x4109cc
cmp dword [ebp - 0x570], 1
jge 0x4109e8
mov eax, dword [ebp - 0x570]
mov dword [ebp + eax*4 - 0x1894], 0x17571177
jmp 0x4109bf
mov dword [ebp - 0x214], 0
jmp 0x410a01
mov eax, dword [ebp - 0x1530]
mov dword [ebp - 0x1540], eax
mov eax, dword [ebp - 0x1538]
mov dword [ebp - 0x1548], eax
mov dword [ebp - 0x1260], 0x2ee9
mov dword [ebp - 0x1558], str.wmwdcsvw_pbofknfi_jkkdi_guncaiea_dymxev_qgpumwvk_htoqvuqg_zgi_xbhwlh_gdtzclq_vzqhwfpe_fptg
cmp dword [ebp - 0x1260], 0x31ea
jle 0x41f85b
and dword [ebp - 0x744], 0
jmp 0x41f7a8
mov eax, dword [ebp - 0x744]
inc eax
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0x744], 0x3714
jge 0x41f85b
and dword [ebp - 0x74c], 0
jmp 0x41f7ce
mov eax, dword [ebp - 0x74c]
inc eax
mov dword [ebp - 0x74c], eax
cmp dword [ebp - 0x74c], 0x1231
jge 0x41f856
and dword [ebp - 0x5c0], 0
jmp 0x41f7f0
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 0x131
jge 0x41f851
mov eax, dword [ebp - 0x744]
mov ecx, dword [ebp - 0x74c]
sar eax, cl
xor eax, dword [ebp - 0x5c0]
cdq
mov dword [ebp - 0x1868], eax
mov dword [ebp - 0x1864], edx
push dword [ebp - 0x1864]
push dword [ebp - 0x1868]
lea ecx, [ebp - 0x2688]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.004200e8
push eax
call fcn.004a11e7
pop ecx
lea ecx, [ebp - 0x2688]
call fcn.004200de
jmp 0x41f7e3
jmp 0x41f7c1
jmp 0x41f79b
mov eax, dword [ebp - 0x1540]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x1548]
mov dword [ebp - 0x1550], eax
mov eax, dword [ebp - 0x2a8]
mov dword [eax], 0
jmp 0x41f892
mov eax, dword [ebp - 0x2a8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2a8]
cmp dword [eax], 1
jge 0x41f8b8
mov eax, dword [ebp - 0x2a8]
push dword [eax]
mov ecx, dword [ebp - 0x1550]
call fcn.00420325
mov dword [eax], 0xd013d0bb
jmp 0x41f881
mov dword [ebp - 4], 0x72
cmp dword [ebp - 0x1260], 0x2dc6
jge 0x41f8d7
push dword [ebp - 0x1558]
call fcn.004a11e7
pop ecx
jmp 0x41f8f3
or dword [ebp - 4], 0xffffffff
jmp 0x41f8fd
jmp 0x41f917
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1560], eax
push 1
push dword [ebp - 0x1560]
call fcn.0040a7c3
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret