Function at 0x40d740
Capabilities:
Authenticate hmac
Check os version
Connect pipe
Create pipe
Encrypt data using speck
Extract resource via kernel32 functions
Get disk information
Get disk size
Get thread local storage value
Identify system language via api
Query environment variable
Query or enumerate registry value
Set environment variable
Set registry value
Set thread local storage value

Disassembly:
mov eax, 0x4af6fd
call fcn.004af1c8
sub esp, 0xee4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x7c], dl
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x14], 0xd453606d
push 2
lea ecx, [ebp - 0x4e0]
call fcn.00409f19
or edi, 0xffffffff
mov dword [ebp - 0x60], edi
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40d7a1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x938], 0x73eb905d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40d788
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40d7c5
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4e0]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40d7aa
xor eax, eax
inc dword [ebp - 0x60]
mov dword [ebp - 0x60], eax
jmp 0x40d810
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40d7de
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, eax
mov dword [ebp - 0x44], 1
jmp 0x40d807
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffec
jle 0x40d804
mov ecx, dword [ebp - 0x4e0]
cmp dword [ecx + 4], eax
jne 0x40d804
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffec
jg 0x40d7f6
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xfffffff6
jl 0x40d7e7
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0x1b
je 0x40d7cd
lea ecx, [ebp - 0x4e0]
call fcn.00409fc5
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x44], 0xfffffff8
mov dword [ebp - 0x50], 0xf390f3bd
mov dword [ebp - 0x64], 8
mov dword [ebp - 0x3c], 0x27f5
cmp dword [ebp - 0x3c], 0x291c
jle 0x40d8a9
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor edi, edi
xor esi, esi
xor ebx, ebx
mov eax, esi
mov ecx, ebx
sar eax, cl
or eax, edi
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc ebx
cmp ebx, 0x6c56
jl 0x40d863
inc esi
cmp esi, 0x7c7
jl 0x40d861
inc edi
cmp edi, 0x5dd3
jl 0x40d85f
xor esi, esi
push esi
push 0x8b4
push 0x1d34
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
or edi, 0xffffffff
and dword [ebp - 4], 0
cmp dword [ebp - 0x3c], 0x24d9
jge 0x40d8e4
mov edx, str.thjrstg_ilrni_rle_bszqiwdsi_ffibfcpcj_kcee_zudn_heos_titxo_nmccgszzz_zuonwljgi_vygmthn
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x40d8e4
mov dword [ebp - 4], edi
xor eax, eax
xor ebx, ebx
inc ebx
mov dword [ebp - 0x14], eax
jmp 0x40d8fe
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x84], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x40d8f1
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x40dac4
mov dword [ebp - 0x34], 0x3fe6
push ebx
lea ecx, [ebp - 0x4f8]
call fcn.00409f19
mov dword [ebp - 0x60], 0xb470
mov dword [ebp - 0x3c], 0xfffffffe
push ebx
lea ecx, [ebp - 0x5a0]
call fcn.00409f19
mov dword [ebp - 0x1c], 0
jmp 0x40d95f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4f8]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x40d950
mov dword [ebp - 0x1c], 0
jmp 0x40d980
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x5a0]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x40d96d
mov eax, dword [ebp - 0x20]
xor esi, esi
cmp dword [ebp + eax*4 - 0x84], esi
je 0x40da2d
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x14], esi
jmp 0x40d9bb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x30c], 7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x40d9aa
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4f8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x60]
jle 0x40d9df
cmp dword [ebp - 0x20], esi
je 0x40d9df
mov edx, ebx
jmp 0x40d9e1
xor edx, edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x44], edi
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x50]
neg ecx
sbb ecx, ecx
inc ecx
shl ecx, 3
mov eax, dword [ebp - 0x5a0]
mov dword [eax], ecx
jmp 0x40daa2
mov dword [ebp - 0x30], 0xfffffff7
xor eax, eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], eax
jl 0x40da61
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40da5c
push 0xd3
push 0x11cd
push eax
push eax
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
xor eax, eax
dec dword [ebp - 0x60]
jns 0x40da3e
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x84]
cmp dword [ebp - 0x30], ebx
jle 0x40da82
cmp dword [ebp - 0x44], esi
je 0x40da82
mov ecx, ebx
jmp 0x40da84
xor ecx, ecx
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x64]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, ebx
setle al
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x5a0]
call fcn.00409fc5
lea ecx, [ebp - 0x4f8]
call fcn.00409fc5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x40d91a
mov dword [ebp - 0x14], 0xd453606d
push 2
lea ecx, [ebp - 0x7e4]
call fcn.00409f19
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x40dafe
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x7e4]
mov dword [eax + ecx*4], 0x862fd41e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x40dae3
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40db11
push eax
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40db20
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea ecx, [ebp - 0x7e4]
call fcn.00409fc5
push 2
lea ecx, [ebp - 0x600]
call fcn.00409f19
mov dword [ebp - 0x20], 0xb1658084
mov dword [ebp - 0x60], 5
mov dword [ebp - 0x3c], 0x4250
cmp dword [ebp - 0x3c], 0x4345
jle 0x40db90
xor edi, edi
xor esi, esi
xor ebx, ebx
mov eax, esi
cdq
idiv ebx
and edx, edi
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc ebx
cmp ebx, 0x424
jl 0x40db5c
inc esi
cmp esi, 0x32fa
jl 0x40db5a
inc edi
cmp edi, 0x6cf1
jl 0x40db58
xor ebx, ebx
inc ebx
push 2
lea ecx, [ebp - 0x430]
call fcn.00409f19
mov dword [ebp - 4], 2
cmp dword [ebp - 0x3c], 0x3ee4
jge 0x40dbbc
mov edx, str.mui_bigd_fjcfd
mov ecx, 0xae33d8
call fcn.0040c802
or edi, 0xffffffff
mov dword [ebp - 4], edi
xor eax, eax
jmp 0x40dbeb
mov dword [ebp - 0x14], eax
jmp 0x40dc03
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x430]
mov dword [eax + ecx*4], 0x3938dd44
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x40dbf0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
cmp eax, edi
sbb eax, eax
inc eax
add eax, 0x11f07b4b
mov dword [ebp - 0x60], eax
jne 0x40dcc2
mov dword [ebp - 0x3c], 0x4d5b
cmp dword [ebp - 0x3c], 0x4fea
jle 0x40dc5c
xor esi, esi
xor edi, edi
mov ebx, 0x357a
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
add edi, esi
dec ebx
jne 0x40dc3b
inc esi
cmp esi, 0x5cc4
jl 0x40dc34
inc ebx
or edi, 0xffffffff
mov byte [ebp - 0x21], 0
mov dword [ebp - 4], 4
cmp dword [ebp - 0x3c], 0x4c89
jge 0x40dc7f
mov edx, str.camuw_viiv_orncvwyrd_rstn_hsy_edelrlot_rqj_ekpt_bjmngftuz_hyaw_nagba_tkklwgb_hhirafvg_gisjhc
mov ecx, 0xae33d8
call fcn.0040c802
mov dword [ebp - 4], edi
xor eax, eax
jmp 0x40dcab
cmp byte [ebp - 0x21], 0
je 0x40dd8e
push eax
push eax
call dword [sym.imp.GDI32.dll_GetRgnBox]
jmp 0x40dd8e
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], 0x5a260df3
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0
jl 0x40dd8e
mov dword [ebp - 0x44], 0x8491f199
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x430]
imul eax, dword [ebp - 0x30], 5
xor ecx, ecx
cmp eax, dword [edx + esi*4]
setle cl
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, 2
setne cl
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x60]
neg edx
sbb edx, edx
inc edx
cmp edx, 5
jg 0x40dd3a
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x40dd3a
cmp dword [ebp - 0x30], eax
je 0x40dd3c
mov eax, ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, 0xd5de
setle cl
imul eax, ecx, 0x6293
cmp eax, 0xe3b6f9b6
je 0x40dd5c
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x430]
mov edx, 0xf82baef6
cmp edx, dword [eax + ecx*4]
sbb eax, eax
neg eax
add eax, 0x7f5d1cc0
mov dword [ebp - 0x60], eax
dec dword [ebp - 0x20]
jns 0x40dce7
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x430]
call fcn.00409fc5
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x40de40
mov dword [ebp - 0x40], 0x9646b8d9
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x40ddd8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8e4], 0x4e6d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x40ddbf
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40dde9
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x40de38
mov eax, dword [ebp - 0x8e4]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
mov eax, dword [ebp - 0x8e4]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x1c]
sub edx, eax
add edx, 0xffff
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, 0x7e4
setle cl
xor eax, eax
cmp ecx, edx
mov ecx, ebx
jle 0x40de3a
mov ecx, eax
mov dword [ebp - 0x40], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jg 0x40ddaf
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40de6b
push eax
push 0x8e9
push 0x2c0
push 0x1bf7
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40de8d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x970], 0x73eb905d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40de74
xor eax, eax
mov dword [ebp - 0x48], 0x1928
mov dword [ebp - 0x3c], 0x2e63
cmp dword [ebp - 0x3c], 0x3155
jle 0x40ded1
mov esi, eax
mov edi, eax
mov eax, edi
or eax, esi
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc edi
cmp edi, 0x3df5
jl 0x40dea8
inc esi
cmp esi, 0x42f0
push 0
pop eax
jl 0x40dea6
or edi, 0xffffffff
mov byte [ebp - 0x21], 0
mov dword [ebp - 4], 6
cmp dword [ebp - 0x3c], 0x2d2a
jge 0x40def4
mov edx, str.gqklssj_eobhfkzug_vjzcnwmfk_ledwms_elw_wxec_mmhvwta_czzbwah_evpkv_wfcpmvwk
mov ecx, 0xae33d8
call fcn.0040c802
mov dword [ebp - 4], edi
xor eax, eax
jmp 0x40df1e
cmp byte [ebp - 0x21], 0
je 0x40df2e
push eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40df42
push eax
push eax
call dword [sym.imp.USER32.dll_CopyRect]
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x40df5a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x600]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40df47
inc dword [ebp - 0x60]
mov dword [ebp - 0x3c], 5
push 4
lea ecx, [ebp - 0x328]
call fcn.00409f19
mov dword [ebp - 0x60], 0x85a7
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x30], 0xdfbc43c
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40dfaf
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x150], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40df9a
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x40dfc7
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x328]
mov dword [eax + ecx*4], 0xeefb6f65
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x40dfb4
mov eax, dword [ebp - 0x14c]
neg eax
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x2c], 0x4e5878ed
mov edi, dword [ebp - 0x328]
mov eax, dword [ebp - 0x14c]
xor ecx, ecx
cmp eax, dword [edi + 8]
setne cl
mov eax, dword [ebp - 0x14c]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x14c]
xor ebx, ebx
cmp edx, eax
setne bl
add ebx, dword [edi + 8]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, ebx
setle cl
xor edx, edx
mov eax, dword [ebp - 0x328]
cmp ecx, dword [eax + 0xc]
setne dl
mov esi, dword [ebp - 0x30]
sub esi, edx
neg esi
sbb esi, esi
inc esi
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, esi
setle cl
xor edx, edx
cmp ecx, 0x8694a219
setne dl
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [edi + 8], ecx
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x34]
test eax, eax
je 0x40e088
mov dword [ebp - 0x40], 0xcbde
mov dword [ebp - 0x50], 0x2ad21dd8
mov eax, dword [ebp - 0x40]
neg eax
mov dword [ebp - 0x50], eax
jmp 0x40e0a7
mov byte [ebp - 0x21], cl
cmp byte [ebp - 0x21], cl
je 0x40e0a7
push 0
push 0x14c9
push 0x1931
push 0x790
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov dword [ebp - 0x2c], 0
jmp 0x40e0d9
mov dword [ebp - 0x60], 0
cmp dword [ebp - 0x60], 3
jg 0x40e0d6
xor esi, esi
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x328]
cmp dword [eax + ecx*4], esi
jne 0x40e0d6
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 3
jle 0x40e0bf
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffff3
jle 0x40e0b0
lea ecx, [ebp - 0x328]
call fcn.00409fc5
mov dword [ebp - 0x60], 0
xor ebx, ebx
inc ebx
cmp dword [ebp - 0x60], 0x1b
jne 0x40eb65
mov dword [ebp - 0x44], 0xcefa9d19
mov dword [ebp - 0x3c], 0xc14173bf
or edi, 0xffffffff
mov dword [ebp - 0x14], edi
push ebx
lea ecx, [ebp - 0x274]
call fcn.00409f19
mov dword [ebp - 0x30], 0x7104272b
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], ebx
jge 0x40e147
xor esi, esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x274]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x40e133
mov dword [ebp - 0x3c], edi
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x44], eax
jge 0x40e161
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x44], eax
jg 0x40e161
mov esi, ebx
jmp 0x40e163
xor esi, esi
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x274]
imul ecx, dword [edx]
xor eax, eax
cmp esi, ecx
setle al
cmp eax, 0x89480189
sbb eax, eax
neg eax
mov dword [edx], eax
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x40e408
mov dword [ebp - 0x34c], 0xfffffffe
mov dword [ebp - 0x348], 0xfffffffe
mov dword [ebp - 0x344], 0xfffffffe
mov dword [ebp - 0x340], 0xfffffffe
mov eax, dword [ebp - 0x340]
mov eax, dword [ebp - 0x340]
mov eax, dword [ebp - 0x340]
mov eax, dword [ebp - 0x340]
mov eax, dword [ebp - 0x274]
cmp dword [eax], 0xd0127420
sbb eax, eax
neg eax
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x274]
mov dword [eax], ecx
mov dword [ebp - 0x44], 0x70d0
cmp dword [ebp - 0x44], 0x7460
jle 0x40e264
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
xor eax, eax
mov dword [ebp - 0x30], eax
xor edi, edi
mov dword [ebp - 0x34], edi
xor esi, esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x40], edi
and edi, eax
mov ebx, esi
mov esi, 0x6620
mov eax, edi
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
dec ebx
dec esi
jne 0x40e223
mov esi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x2c3a
jl 0x40e21c
mov edi, dword [ebp - 0x34]
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x1a17
mov eax, dword [ebp - 0x30]
jl 0x40e212
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0xe9f
jl 0x40e20d
xor eax, eax
mov byte [ebp - 0x21], al
mov dword [ebp - 0x58], 0x2fd9
cmp dword [ebp - 0x58], 0x303a
jle 0x40e2ef
mov ecx, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x3c], 0x73de
mov ebx, eax
mov edi, eax
xor esi, esi
lea eax, [edi + ebx]
xor eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0xe78]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
push esi
push 1
lea ecx, [ebp - 0xe78]
call fcn.0040a55c
inc edi
cmp edi, 0x5fef
mov ecx, dword [ebp - 0x14]
jl 0x40e28e
inc ebx
cmp ebx, 0x8041
push 0
pop eax
jl 0x40e28a
dec ecx
mov dword [ebp - 0x14], ecx
dec dword [ebp - 0x3c]
jne 0x40e288
mov ecx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x69a7
jl 0x40e27e
cmp byte [ebp - 0x21], 0
je 0x40e2fe
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [ebp - 4], 8
cmp dword [ebp - 0x58], 0x2cd9
jge 0x40e319
push str.yqjyfzygh_bqqj_zwyyqu
call fcn.00499a27
pop ecx
or edi, 0xffffffff
mov dword [ebp - 4], edi
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x44], 0x7022
jge 0x40e377
mov edx, str.mxtl_ikxw_lblwps_hqlufg_ljaamlwmv_emgsm
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x40e377
mov dword [ebp - 4], edi
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0x274]
call fcn.00409fc5
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40e901
mov dword [ebp - 0x20], 0x4914d2ed
mov dword [ebp - 0x4c], 0x592c
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x34], 0x678e045
mov dword [ebp - 0x5c], 0x27f44fb6
mov dword [ebp - 0x48], 0xb996340c
push 2
lea ecx, [ebp - 0x6d0]
call fcn.00409f19
mov dword [ebp - 0x48], 0x6a4a
xor eax, eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x3c], 0xd8d86f2f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40e400
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x6d0]
mov dword [eax + ecx*4], 0xfcf42757
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40e3e5
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x40e4f6
mov byte [ebp - 0x21], al
mov dword [ebp - 0x3c], 0x2e8e
cmp dword [ebp - 0x3c], 0x313e
jle 0x40e472
push eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
xor ebx, ebx
xor edi, edi
xor esi, esi
mov eax, edi
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xa7c]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
push esi
push 1
lea ecx, [ebp - 0xa7c]
call fcn.0040a55c
inc edi
cmp edi, 0x5086
jl 0x40e42d
inc ebx
cmp ebx, 0x3bb4
jl 0x40e429
or edi, 0xffffffff
cmp byte [ebp - 0x21], 0
je 0x40e4ab
push 0xf20
push 0x214b
push 0x340
push 0x1c8a
push 0xebb
push 0x1582
push 0x241c
push 0x1b9
push 0xaad
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x3c], 0x2bad
jge 0x40e377
push str.bph_syb_ssefrjmmy_csogbtsz_mvt_qjd_stuqug
call fcn.00499a27
pop ecx
jmp 0x40e377
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc80], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40e4e9
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x40e539
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp eax, 0xab06
setg cl
imul ecx, dword [ebp - 0x20]
add ecx, 5
je 0x40e53b
mov ecx, ebx
mov eax, dword [ebp - 0x4c]
imul eax, ecx
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x34], eax
je 0x40e8ae
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x1c], 0x88af16de
mov dword [ebp - 0x3c], 0x1a18
cmp dword [ebp - 0x3c], 0x1a56
jle 0x40e5b4
xor edi, edi
xor ebx, ebx
xor esi, esi
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0xcb0]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
push esi
push 1
lea ecx, [ebp - 0xcb0]
call fcn.0040a55c
inc ebx
cmp ebx, 0x4722
jl 0x40e56d
inc edi
cmp edi, 0x548c
jl 0x40e569
or edi, 0xffffffff
mov dword [ebp - 0x48], 0xfffffffd
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x3c], 0x178b
jge 0x40e5d6
push str.fjnf_lejja_zznzw_cmbditq_dtavwgjie_faxa_zdha_kwqqxwkc_for_hgzawaz
call fcn.00499a27
pop ecx
mov dword [ebp - 4], edi
jmp 0x40e5f9
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0x299b5f27
mov dword [ebp - 0x48], 8
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0xfffffff9
mov dword [ebp - 0x48], 0xfffffffd
mov dword [ebp - 0x48], 0x6c132d45
mov dword [ebp - 0x3c], 0x5db
cmp dword [ebp - 0x3c], 0x617
jle 0x40e689
mov ecx, eax
mov dword [ebp - 0x14], eax
mov ebx, eax
mov edi, eax
mov esi, eax
lea eax, [esi + edi]
add ecx, ebx
xor eax, ecx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x68c0
mov ecx, dword [ebp - 0x14]
jl 0x40e63f
inc edi
cmp edi, 0x63b4
push 0
pop eax
jl 0x40e63d
inc ebx
cmp ebx, 0x6f35
jl 0x40e63b
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x66e9
jl 0x40e639
xor esi, esi
push esi
call dword [sym.imp.USER32.dll_DestroyCursor]
push 4
lea ecx, [ebp - 0x6b8]
call fcn.00409f19
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x3c], 0x4b8
jge 0x40e6b5
mov edx, str.koafjt_mkbszjcii_yorcrmbal_timbx_tbm_wggaruor
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
xor eax, eax
mov dword [ebp - 0x48], 0x86cc6b0c
mov dword [ebp - 0x48], 2
mov dword [ebp - 0x3c], 0x2b4c
cmp dword [ebp - 0x3c], 0x2c25
jle 0x40e782
mov dword [ebp - 0x30], eax
mov ecx, eax
mov dword [ebp - 0x14], ecx
mov edi, eax
jmp 0x40e705
xor eax, eax
mov ebx, eax
xor esi, esi
mov eax, edi
cdq
idiv ebx
and edx, ecx
xor edx, dword [ebp - 0x30]
mov eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xaac]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
push esi
push 1
lea ecx, [ebp - 0xaac]
call fcn.0040a55c
inc ebx
cmp ebx, 0x4996
mov ecx, dword [ebp - 0x14]
jl 0x40e709
inc edi
cmp edi, 0xb7d
jl 0x40e703
inc ecx
mov dword [ebp - 0x14], ecx
xor eax, eax
cmp ecx, 0x4480
jl 0x40e6e5
mov edx, dword [ebp - 0x30]
inc edx
mov dword [ebp - 0x30], edx
cmp edx, 0x2911
jl 0x40e6e0
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov dword [ebp - 0x48], 0xd1334807
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x3c], 0x27bb
jge 0x40e7a4
push str.vsh_oawmoish_nfzcidfxi_kwtine_shqouqy
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
xor ebx, ebx
inc ebx
mov dword [ebp - 0x48], 2
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x40e7db
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x6b8]
mov dword [eax + ecx*4], 0x70c30f14
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x40e7c0
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x40e80b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xed0], 7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x40e7fa
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x5c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
neg ecx
jne 0x40e82b
cmp dword [ebp - 0x44], eax
mov ecx, eax
je 0x40e82d
mov ecx, ebx
cmp ecx, dword [ebp - 0x5c]
jne 0x40e839
cmp dword [ebp - 0x5c], eax
mov edx, eax
je 0x40e83b
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0x8b9abc19
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, 0x5f7f
jg 0x40e87b
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], 0x80bf
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44], eax
dec dword [ebp - 0x58]
lea ecx, [ebp - 0x6b8]
jmp 0x40e8e9
mov dword [ebp - 0x48], 0xfffffff7
push ebx
lea ecx, [ebp - 0x78c]
call fcn.00409f19
xor esi, esi
mov dword [ebp - 0x14], esi
jmp 0x40e8db
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x78c]
mov dword [eax + ecx*4], 0x9ad35785
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x40e8c8
inc dword [ebp - 0x3c]
lea ecx, [ebp - 0x78c]
call fcn.00409fc5
lea ecx, [ebp - 0x6d0]
call fcn.00409fc5
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, eax
mov dword [ebp - 0x14], 0x1b74
cmp dword [ebp - 0x14], 0x1e44
jle 0x40e9be
mov dword [ebp - 0x30], eax
mov ebx, eax
mov dword [ebp - 0x58], ebx
mov edi, eax
mov dword [ebp - 0x34], edi
jmp 0x40e926
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, ebx
cdq
idiv edi
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x3c], 0x6d5d
xor esi, esi
mov ebx, dword [ebp - 0x40]
mov edi, dword [ebp - 0x30]
mov eax, edi
or eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xdc4]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
push esi
push 1
lea ecx, [ebp - 0xdc4]
call fcn.0040a55c
add ebx, dword [ebp - 0x50]
dec dword [ebp - 0x3c]
jne 0x40e940
mov edi, dword [ebp - 0x34]
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x6819
mov ebx, dword [ebp - 0x58]
jl 0x40e924
inc ebx
mov dword [ebp - 0x58], ebx
xor eax, eax
cmp ebx, 0x6122
jl 0x40e91d
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x1ba5
jl 0x40e918
push eax
push eax
push 0x6bd
push 0x17db
push eax
call dword [sym.imp.USER32.dll_InsertMenuW]
push 2
lea ecx, [ebp - 0x82c]
call fcn.00409f19
mov dword [ebp - 0x34], 0x2def
cmp dword [ebp - 0x34], 0x2eb0
jle 0x40ea1d
xor ebx, ebx
mov dword [ebp - 0x3c], ebx
xor edi, edi
xor esi, esi
mov eax, ebx
cdq
idiv edi
mov ebx, edx
mov eax, esi
xor eax, ebx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x1ba3
jl 0x40e9eb
inc edi
cmp edi, 0x155
mov ebx, dword [ebp - 0x3c]
jl 0x40e9e2
inc ebx
mov dword [ebp - 0x3c], ebx
cmp ebx, 0x5c29
jl 0x40e9e0
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x34], 0x2b29
jge 0x40ea3c
mov edx, str.hqrhhcmhh_jxtgtgcoz_aeaqbxt_wtfgtqtgc_xvbqyg_vxeqfe_afgowa_gwnfxx_fcnsrvt
mov ecx, 0xae33d8
call fcn.0040c802
or esi, 0xffffffff
mov dword [ebp - 4], esi
xor eax, eax
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40ea6b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x82c]
mov dword [eax + ecx*4], 0xdf99ff60
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40ea50
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x40ea8d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4a0], 0x667a876e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x40ea74
xor eax, eax
mov dword [ebp - 0x49c], eax
jmp 0x40eada
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40ead4
push eax
push eax
push 0x20d6
push eax
push 0x18ff
push eax
push eax
push 0x1535
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor eax, eax
inc dword [ebp - 0x49c]
cmp dword [ebp - 0x49c], ebx
jle 0x40eaaf
lea ecx, [ebp - 0x82c]
call fcn.00409fc5
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x14], 0x19ef
jge 0x40eb08
push str.xnj_kuofputig_pjwr_mkpyyon_lrmmmk
call fcn.00499a27
pop ecx
mov dword [ebp - 4], esi
xor eax, eax
jmp 0x40eb32
mov dword [ebp - 0x44], ebx
jmp 0x40eb57
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffec
jle 0x40eb54
mov ecx, dword [ebp - 0x600]
cmp dword [ecx + 4], eax
jne 0x40eb54
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffec
jg 0x40eb46
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xfffffff6
jl 0x40eb37
inc dword [ebp - 0x60]
jmp 0x40e0f4
lea ecx, [ebp - 0x600]
call fcn.00409fc5
mov dword [ebp - 0x38], 0x743d837b
mov dword [ebp - 0x14], 0x2b9193c1
mov dword [ebp - 0x14], 0x8cb667f5
mov dword [ebp - 0x48], 0x7ab6ce1a
mov dword [ebp - 0x14], 0
jmp 0x40eba6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x950], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x40eb95
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x40ebbe
mov eax, ebx
cmp eax, dword [ebp - 0x38]
jne 0x40ebc6
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x38]
add eax, 0x69b4
imul eax, dword [ebp - 0x38]
mov dword [ebp - 0x94c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x34], 0x72f0
cmp dword [ebp - 0x34], 0x7627
jle 0x40ec77
xor edx, edx
mov dword [ebp - 0x30], edx
xor edi, edi
mov dword [ebp - 0x3c], edi
xor ebx, ebx
mov ecx, edi
mov edi, edx
shl edi, cl
xor esi, esi
mov eax, ebx
xor eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xadc]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
push esi
push 1
lea ecx, [ebp - 0xadc]
call fcn.0040a55c
inc ebx
cmp ebx, 0xc48
jl 0x40ec20
mov edi, dword [ebp - 0x3c]
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0x1ec1
mov edx, dword [ebp - 0x30]
jl 0x40ec16
inc edx
mov dword [ebp - 0x30], edx
cmp edx, 0xe94
jl 0x40ec11
mov dword [ebp - 0x14], 0xd453606d
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x34], 0x70bf
jge 0x40ec99
push str.owzzbqh_wduggwtg_autixtqkk_koxmgorrj_mqrdwl_xcidn_vtaujtdai_prmmk_ihaynhckg
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
mov dword [ebp - 0x34], 0x5dbe
cmp dword [ebp - 0x34], 0x5f51
jle 0x40ecf3
mov ecx, eax
mov dword [ebp - 0x30], eax
mov edi, eax
mov esi, eax
mov ebx, ecx
mov ecx, edi
sar ebx, cl
mov eax, esi
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x456e
jl 0x40ecbe
inc edi
cmp edi, 0x2923
push 0
pop eax
mov ecx, dword [ebp - 0x30]
jl 0x40ecb6
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x3bb6
jl 0x40ecb4
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], 0xffffffe3
je 0x40edb6
xor ebx, ebx
inc ebx
mov dword [ebp - 0x14], 0x58d32ffa
mov dword [ebp - 0x40], ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jne 0x40ed69
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setl dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
neg ecx
mov dword [ebp - 0x40], ecx
je 0x40ed69
mov eax, ebx
jmp 0x40ed6b
xor eax, eax
add eax, 0xc4b7c700
jne 0x40ed8e
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40eda9
push eax
push 0x12b9
push eax
push 0x11c5
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
jmp 0x40eda9
mov dword [ebp - 0x40], 0x4a90c6d2
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40eda6
push eax
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov eax, dword [ebp - 0x40]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe3
jne 0x40ed0e
mov dword [ebp - 0x3c], 0x1eee
cmp dword [ebp - 0x3c], 0x228c
jle 0x40edef
xor edi, edi
xor esi, esi
mov eax, edi
mov ecx, esi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x2201
jl 0x40edca
inc edi
cmp edi, 0x280a
jl 0x40edc8
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40ee05
push eax
push 0xcd5
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x3c], 0x1d8d
jge 0x40ee24
mov edx, str.anwckw_rnj_mmqlfaley_sevsyybhx_kxlca_ovyjoe_rndb_jxfoz_uxckbbb_ibzrukjjv
mov ecx, 0xae33d8
call fcn.0040c802
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor edi, edi
inc edi
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x34], 0x5d18
jge 0x40ee4c
mov edx, str.bsoe_psmb_ilpkwuea_hoow_wlekuoo_tvagtwt_cqkj_oqms_zksnpww_pstpzh_yho_twpudc
mov ecx, 0xae33d8
call fcn.0040c802
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x40ee92
mov dword [ebp - 0x14], 0xcff0ea75
mov dword [ebp - 0x40], 5
mov dword [ebp - 0x14], 0xffffffe3
cmp dword [ebp - 0x14], 0xffffffe8
je 0x40ef76
mov dword [ebp - 0x34], edi
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40ef5b
mov dword [ebp - 0x3c], 0x1281
cmp dword [ebp - 0x3c], 0x15fd
jle 0x40ef00
mov edi, eax
mov esi, eax
mov eax, edi
mov ecx, esi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x2d1d
jl 0x40eed5
inc edi
cmp edi, 0xb6f
push 0
pop eax
jl 0x40eed3
xor edi, edi
inc edi
push 0x22ea
push eax
push 0x9f
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x3c], 0x1132
jge 0x40ef33
mov edx, str.ajyug_aeg_yzdfpul_nlbgnwi_muq_qvzh_pgbjkvuob
mov ecx, 0xae33d8
call fcn.0040c802
mov dword [ebp - 4], ebx
jmp 0x40ef5b
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp eax, 4
setl cl
mov dword [ebp - 0x40], ecx
inc dword [ebp - 0x14]
xor eax, eax
jmp 0x40eea7
push 2
lea ecx, [ebp - 0x4bc]
call fcn.00409f19
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x44], 0xfffffff8
mov dword [ebp - 0x50], 0xf390f3bd
mov dword [ebp - 0x14], 0x46db
cmp dword [ebp - 0x14], 0x484e
jle 0x40f02e
xor eax, eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0x3fad
xor edi, edi
mov dword [ebp - 0x3c], edi
xor ebx, ebx
mov dword [ebp - 0x40], edi
and edi, eax
xor esi, esi
mov eax, ebx
or eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xce0]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
push esi
push 1
lea ecx, [ebp - 0xce0]
call fcn.0040a55c
inc ebx
cmp ebx, 0x6e11
jl 0x40efc9
mov edi, dword [ebp - 0x3c]
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0x6bc9
mov eax, dword [ebp - 0x30]
jl 0x40efc0
dec eax
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x34]
jne 0x40efbb
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp eax, 0xed0
jl 0x40efb1
xor edi, edi
inc edi
mov dword [ebp - 0x64], 8
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x14], 0x43b9
jge 0x40f050
push str.jltlc_rxpbroa_ytknliclz_rvs_njfkfjv_sccgxo_xicazdzar_vexfssfqq_wzi
call fcn.00499a27
pop ecx
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x40f07f
mov dword [ebp - 0x14], eax
jmp 0x40f091
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x88], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x40f084
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x58], 0x52ba
cmp dword [ebp - 0x58], 0x55fd
jle 0x40f0e9
push 0xb6e
push 0x15b8
call dword [sym.imp.GDI32.dll_SetTextAlign]
xor edi, edi
xor esi, esi
mov eax, esi
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x2464
jl 0x40f0c3
inc edi
cmp edi, 0x347
jl 0x40f0c1
xor edi, edi
inc edi
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x40f2a1
mov dword [ebp - 0x34], 0x3fe6
push edi
lea ecx, [ebp - 0x5b8]
call fcn.00409f19
mov dword [ebp - 0x60], 0xb470
mov dword [ebp - 0x3c], 0xfffffffe
push edi
lea ecx, [ebp - 0x510]
call fcn.00409f19
mov dword [ebp - 0x1c], 0
jmp 0x40f13c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x5b8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x40f12d
mov dword [ebp - 0x1c], 0
jmp 0x40f15d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x510]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x40f14a
mov eax, dword [ebp - 0x20]
xor esi, esi
cmp dword [ebp + eax*4 - 0x88], esi
je 0x40f20a
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x14], esi
jmp 0x40f198
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2f0], 7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x40f187
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x5b8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x60]
jle 0x40f1bc
cmp dword [ebp - 0x20], esi
je 0x40f1bc
mov edx, edi
jmp 0x40f1be
xor edx, edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x2f0], ecx
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x44], ebx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x50]
neg ecx
sbb ecx, ecx
inc ecx
shl ecx, 3
mov eax, dword [ebp - 0x510]
mov dword [eax], ecx
jmp 0x40f27f
mov dword [ebp - 0x30], 0xfffffff7
xor eax, eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], eax
jl 0x40f23e
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f239
push 0xd3
push 0x11cd
push eax
push eax
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
xor eax, eax
dec dword [ebp - 0x60]
jns 0x40f21b
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x88]
cmp dword [ebp - 0x30], edi
jle 0x40f25f
cmp dword [ebp - 0x44], esi
je 0x40f25f
mov ecx, edi
jmp 0x40f261
xor ecx, ecx
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x64]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, edi
setle al
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x510]
call fcn.00409fc5
lea ecx, [ebp - 0x5b8]
call fcn.00409fc5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x40f0f7
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x58], 0x51f6
jge 0x40f2c0
mov edx, str.kfrlqiyb_awnj_dginn_qym_mmpej_izeg
mov ecx, 0xae33d8
call fcn.0040c802
mov dword [ebp - 4], ebx
jmp 0x40f2e8
mov dword [ebp - 0x70], ebx
push 2
lea ecx, [ebp - 0x6e8]
call fcn.00409f19
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x40f31e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6e8]
mov dword [eax + ecx*4], 0x862fd41e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x40f303
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f331
push eax
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f340
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea ecx, [ebp - 0x6e8]
call fcn.00409fc5
mov dword [ebp - 0x20], 0xb1658084
mov dword [ebp - 0x60], 5
push 2
lea ecx, [ebp - 0x358]
call fcn.00409f19
mov dword [ebp - 0x14], 0
jmp 0x40f382
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x358]
mov dword [eax + ecx*4], 0x3938dd44
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x40f36f
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
cmp eax, ebx
sbb eax, eax
inc eax
add eax, 0x11f07b4b
mov dword [ebp - 0x60], eax
jne 0x40f3b8
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40f484
push eax
push eax
call dword [sym.imp.GDI32.dll_GetRgnBox]
jmp 0x40f484
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x14], 0x5a260df3
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], 0
jl 0x40f484
mov dword [ebp - 0x44], 0x8491f199
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x358]
imul eax, dword [ebp - 0x30], 5
xor ecx, ecx
cmp eax, dword [edx + esi*4]
setle cl
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, 2
setne cl
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x60]
neg edx
sbb edx, edx
inc edx
cmp edx, 5
jg 0x40f430
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x40f430
cmp dword [ebp - 0x30], eax
je 0x40f432
mov eax, edi
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, 0xd5de
setle cl
imul eax, ecx, 0x6293
cmp eax, 0xe3b6f9b6
je 0x40f452
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x358]
mov edx, 0xf82baef6
cmp edx, dword [eax + ecx*4]
sbb eax, eax
neg eax
add eax, 0x7f5d1cc0
mov dword [ebp - 0x60], eax
dec dword [ebp - 0x20]
jns 0x40f3dd
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x358]
call fcn.00409fc5
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40f4b9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x940], 0x73eb905d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40f4a0
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40f4dd
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4bc]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40f4c2
xor eax, eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], eax
jmp 0x40f579
mov dword [ebp - 0x40], 0x9646b8d9
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x40f511
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8c4], 0x4e6d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x40f4f8
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f522
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x40f571
mov eax, dword [ebp - 0x8c4]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
mov eax, dword [ebp - 0x8c4]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x1c]
sub edx, eax
add edx, 0xffff
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, 0x7e4
setle cl
xor eax, eax
cmp ecx, edx
mov ecx, edi
jle 0x40f573
mov ecx, eax
mov dword [ebp - 0x40], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jg 0x40f4e8
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f5a4
push eax
push 0x8e9
push 0x2c0
push 0x1bf7
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
xor eax, eax
inc dword [ebp - 0x70]
mov dword [ebp - 0x48], 0x1928
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f5c3
push eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x40f5d6
push eax
push eax
call dword [sym.imp.USER32.dll_CopyRect]
xor eax, eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x1b
jne 0x40ff82
mov dword [ebp - 0x3c], 5
push 4
lea ecx, [ebp - 0x2ec]
call fcn.00409f19
mov dword [ebp - 0x60], 0x85a7
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x30], 0xdfbc43c
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40f62f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x12c], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40f61a
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x40f647
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2ec]
mov dword [eax + ecx*4], 0xeefb6f65
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x40f634
mov eax, dword [ebp - 0x128]
neg eax
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x2c], 0x4e5878ed
mov edi, dword [ebp - 0x2ec]
mov eax, dword [ebp - 0x128]
xor ecx, ecx
cmp eax, dword [edi + 8]
setne cl
mov eax, dword [ebp - 0x128]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x128]
xor ebx, ebx
cmp edx, eax
setne bl
add ebx, dword [edi + 8]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, ebx
setle cl
xor edx, edx
mov eax, dword [ebp - 0x2ec]
cmp ecx, dword [eax + 0xc]
setne dl
mov esi, dword [ebp - 0x30]
sub esi, edx
neg esi
sbb esi, esi
inc esi
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, esi
setle cl
xor edx, edx
cmp ecx, 0x8694a219
setne dl
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [edi + 8], ecx
mov eax, dword [ebp - 0x128]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x34]
test eax, eax
je 0x40f708
mov dword [ebp - 0x40], 0xcbde
mov dword [ebp - 0x50], 0x2ad21dd8
mov eax, dword [ebp - 0x40]
neg eax
mov dword [ebp - 0x50], eax
jmp 0x40f727
mov byte [ebp - 0x21], cl
cmp byte [ebp - 0x21], cl
je 0x40f727
push 0
push 0x14c9
push 0x1931
push 0x790
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov dword [ebp - 0x2c], 0
jmp 0x40f759
mov dword [ebp - 0x60], 0
cmp dword [ebp - 0x60], 3
jg 0x40f756
xor esi, esi
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x2ec]
cmp dword [eax + ecx*4], esi
jne 0x40f756
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 3
jle 0x40f73f
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffff3
jle 0x40f730
lea ecx, [ebp - 0x2ec]
call fcn.00409fc5
mov dword [ebp - 0x44], 0xcefa9d19
mov dword [ebp - 0x3c], 0xc14173bf
or edi, 0xffffffff
mov dword [ebp - 0x14], edi
xor ebx, ebx
inc ebx
push ebx
lea ecx, [ebp - 0x208]
call fcn.00409f19
mov dword [ebp - 0x30], 0x7104272b
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], ebx
jge 0x40f7b6
xor esi, esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x208]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x40f7a2
mov dword [ebp - 0x3c], edi
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x44], eax
jge 0x40f7d0
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x44], eax
jg 0x40f7d0
mov esi, ebx
jmp 0x40f7d2
xor esi, esi
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x208]
imul ecx, dword [edx]
xor eax, eax
cmp esi, ecx
setle al
cmp eax, 0x89480189
sbb eax, eax
neg eax
mov dword [edx], eax
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x40f86d
mov dword [ebp - 0x33c], 0xfffffffe
mov dword [ebp - 0x338], 0xfffffffe
mov dword [ebp - 0x334], 0xfffffffe
mov dword [ebp - 0x330], 0xfffffffe
mov eax, dword [ebp - 0x330]
mov eax, dword [ebp - 0x330]
mov eax, dword [ebp - 0x330]
mov eax, dword [ebp - 0x330]
mov eax, dword [ebp - 0x208]
cmp dword [eax], 0xd0127420
sbb eax, eax
neg eax
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x208]
mov dword [eax], ecx
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40f8a8
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
jmp 0x40f8a8
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x40f8a8
push 0xf20
push 0x214b
push 0x340
push 0x1c8a
push 0xebb
push 0x1582
push 0x241c
push 0x1b9
push 0xaad
call dword [sym.imp.GDI32.dll_Arc]
lea ecx, [ebp - 0x208]
call fcn.00409fc5
xor eax, eax
mov byte [ebp - 0x21], al
mov dword [ebp - 0x20], 0x4914d2ed
mov dword [ebp - 0x4c], 0x592c
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x58], 0x678e045
mov dword [ebp - 0x5c], 0x27f44fb6
mov dword [ebp - 0x48], 0xb996340c
push 2
lea ecx, [ebp - 0x7f8]
call fcn.00409f19
mov dword [ebp - 0x48], 0x6a4a
xor eax, eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x3c], 0xd8d86f2f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40f922
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x7f8]
mov dword [eax + ecx*4], 0xfcf42757
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40f907
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x40f934
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa04], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40f927
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x40f977
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, 0xab06
setg cl
imul ecx, dword [ebp - 0x20]
add ecx, 5
je 0x40f979
mov ecx, ebx
mov eax, dword [ebp - 0x4c]
imul eax, ecx
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x58], eax
je 0x40fc41
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x34], 0x4ef3
cmp dword [ebp - 0x34], 0x5063
jle 0x40fa37
xor edx, edx
mov dword [ebp - 0x44], edx
xor eax, eax
mov dword [ebp - 0x30], eax
xor ebx, ebx
mov dword [ebp - 0x3c], ebx
and dword [ebp - 0x40], 0
mov edi, eax
mov ecx, ebx
sar edi, cl
and edi, edx
xor esi, esi
mov ebx, dword [ebp - 0x40]
mov eax, edi
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xb0c]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
push esi
push 1
lea ecx, [ebp - 0xb0c]
call fcn.0040a55c
inc ebx
cmp ebx, 0x7b55
jl 0x40f9c2
mov ebx, dword [ebp - 0x3c]
inc ebx
mov dword [ebp - 0x3c], ebx
cmp ebx, 0x7381
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x44]
jl 0x40f9b1
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x62c
jl 0x40f9ac
inc edx
mov dword [ebp - 0x44], edx
cmp edx, 0x5f53
jl 0x40f9a7
xor eax, eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
xor ebx, ebx
inc ebx
or edi, 0xffffffff
mov dword [ebp - 0x1c], 0x88af16de
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x34], 0x4d04
jge 0x40fa59
push str.btel_myr_log_gonxbop_abcuu_jvpftvi_ytdizdar_sbj_ofrzhi_buvaawj
call fcn.00499a27
pop ecx
mov dword [ebp - 4], edi
xor eax, eax
jmp 0x40fa85
mov dword [ebp - 0x48], 0xfffffffd
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0x299b5f27
mov dword [ebp - 0x48], 8
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0xfffffff9
mov dword [ebp - 0x48], 0xfffffffd
mov dword [ebp - 0x48], 0x6c132d45
push 4
lea ecx, [ebp - 0x7a4]
call fcn.00409f19
mov dword [ebp - 0x48], 0x86cc6b0c
mov dword [ebp - 0x48], 2
mov dword [ebp - 0x48], 0xd1334807
mov dword [ebp - 0x3c], 0x35ca
cmp dword [ebp - 0x3c], 0x3959
jle 0x40fb10
xor edi, edi
xor esi, esi
mov eax, edi
mov ecx, esi
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x46b
jl 0x40faeb
inc edi
cmp edi, 0x4f14
jl 0x40fae9
mov dword [ebp - 0x48], 2
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x3c], 0x3503
jge 0x40fb36
mov edx, str.lscyvftvq_ikb_irszeyn_bqiec_hugsnhe_ppkq_cvnzngi_acab_njggbh_ewyjyyeu_hqsbmkb_uhbyvmhcb
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x40fb61
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x40fb88
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x7a4]
mov dword [eax + ecx*4], 0x70c30f14
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x40fb6d
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x40fb9e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xee0], 7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x40fb8d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x5c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
neg ecx
jne 0x40fbbe
mov dword [ebp - 0x48], 0xfffffff7
push ebx
lea ecx, [ebp - 0x700]
call fcn.00409f19
mov dword [ebp - 0x14], 0
jmp 0x40fc70
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x700]
mov dword [eax + ecx*4], 0x9ad35785
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x40fc5d
inc dword [ebp - 0x3c]
lea ecx, [ebp - 0x700]
call fcn.00409fc5
lea ecx, [ebp - 0x7f8]
call fcn.00409fc5
cmp byte [ebp - 0x21], 0
je 0x40fc9a
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 2
lea ecx, [ebp - 0x718]
call fcn.00409f19
mov dword [ebp - 0x3c], 0x34cb
cmp dword [ebp - 0x3c], 0x3841
jle 0x40fd12
xor eax, eax
mov dword [ebp - 0x14], eax
xor ebx, ebx
xor edi, edi
xor esi, esi
add eax, ebx
or eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x9c8]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
push esi
push 1
lea ecx, [ebp - 0x9c8]
call fcn.0040a55c
inc edi
cmp edi, 0x6f3e
mov eax, dword [ebp - 0x14]
jl 0x40fcc2
inc ebx
cmp ebx, 0x63e7
jl 0x40fcbe
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x6ae5
jl 0x40fcbc
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x3c], 0x311e
jge 0x40fd2d
push str.cjwhtd_lheflk_zynqx_sbqozoxx_kihwpx_pfnehyrgn_fzdiozl_cubz
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
xor edi, edi
inc edi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40fd5a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x718]
mov dword [eax + ecx*4], 0xdf99ff60
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40fd3f
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x40fd7c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x478], 0x667a876e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x40fd63
xor eax, eax
mov dword [ebp - 0x474], eax
jmp 0x40fdc9
cmp dword [ebp - 0x474], edi
jle 0x40fd9e
lea ecx, [ebp - 0x4bc]
call fcn.00409fc5
mov dword [ebp - 0x40], 0x37ffeac8
mov dword [ebp - 0x40], 0x3e4f6f48
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x40ffbf
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x118], 0x825e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40ffa6
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x40ffe1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x238], 0x2305aba9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x40ffc8
xor eax, eax
cmp dword [ebp - 0x110], eax
je 0x410110
mov dword [ebp - 0x60], 0x3a0f
mov dword [ebp - 0x30], 0xe85fcb44
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x410022
xor esi, esi
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x448], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x41000d
xor eax, eax
cmp dword [ebp - 0x110], 0xaab21a84
jne 0x410038
cmp dword [ebp - 0x110], eax
mov edx, eax
je 0x41003a
mov edx, edi
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
setg cl
mov eax, dword [ebp - 0x60]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x110]
add ecx, eax
mov eax, dword [ebp - 0x114]
xor edx, edx
cmp ecx, eax
setl dl
cmp edx, dword [ebp - 0x60]
jle 0x410085
cmp dword [ebp - 0x234], 0
je 0x410085
mov ecx, edi
jmp 0x410087
xor ecx, ecx
mov eax, dword [ebp - 0x448]
add ecx, eax
mov eax, dword [ebp - 0x234]
xor edx, edx
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 0x444]
jg 0x4100b0
xor eax, eax
cmp dword [ebp - 0x234], eax
mov ecx, eax
je 0x4100b2
mov ecx, edi
mov eax, dword [ebp - 0x110]
sub eax, ecx
mov ecx, dword [ebp - 0x110]
imul ecx, eax
mov dword [ebp - 0x448], ecx
xor eax, eax
test ecx, ecx
setne al
cmp eax, dword [ebp - 0x60]
jl 0x4100dc
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x4100de
mov eax, edi
add eax, 0xc21896fd
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x3c]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, 0xc42fa43d
sbb eax, eax
inc eax
mov dword [ebp - 0x40], eax
jmp 0x410144
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x410146
push 0x159f
push eax
push 0xa1f
push 0x1dac
push 0x1241
push eax
push 0xfab
push 0x212f
push 0x1685
call dword [sym.imp.USER32.dll_DrawIconEx]
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x410158
push eax
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
xor eax, eax
mov dword [ebp - 0x70], 0x51853c
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x3c], 0x7184
cmp dword [ebp - 0x3c], 0x730b
jle 0x4101b2
mov ebx, eax
mov edi, eax
mov esi, eax
mov eax, edi
cdq
idiv esi
xor edx, ebx
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x4aa9
jl 0x410178
inc edi
cmp edi, 0x64f2
push 0
pop eax
jl 0x410176
inc ebx
cmp ebx, 0x71ce
jl 0x410174
xor edi, edi
inc edi
or ebx, 0xffffffff
push 2
lea ecx, [ebp - 0x460]
call fcn.00409f19
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x3c], 0x7077
jge 0x4101de
mov edx, str.frfci_zkvynmpfz_mfiydyx_cesgq_fmywqr_lrf_ltyvpb_obpfnl_luhosfj_ocstkrqq_rktjzpjx_kmztuh_pry_zzenvkl
mov ecx, 0xae33d8
call fcn.0040c802
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x410208
mov dword [ebp - 0x3c], 0xfffffffd
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x410233
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x460]
mov dword [eax + ecx*4], 0x6432a276
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x410218
xor eax, eax
mov dword [ebp - 0x60], 0xfffffff9
cmp dword [ebp - 0x60], 0xf
jl 0x410406
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x58], 0xfffd
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], eax
jl 0x4103fb
mov dword [ebp - 0x20], eax
push 3
lea ecx, [ebp - 0x318]
call fcn.00409f19
mov dword [ebp - 0x34], 0x6e8f
cmp dword [ebp - 0x34], 0x706f
jle 0x4102ce
xor ecx, ecx
mov dword [ebp - 0x14], ecx
xor ebx, ebx
xor esi, esi
xor edi, edi
mov dword [ebp - 0x3c], 0x79c
mov eax, ebx
xor eax, edi
or eax, ecx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
add edi, esi
dec dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x14]
jne 0x410290
inc esi
cmp esi, 0x783e
jl 0x410287
inc ebx
cmp ebx, 0x7e3a
jl 0x410285
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x1bc2
jl 0x410283
xor edi, edi
inc edi
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x34], 0x6b45
jge 0x4102ed
mov edx, str.hnmgsji_auzkxtdho_acmdv_jalb
mov ecx, 0xae33d8
call fcn.0040c802
or edx, 0xffffffff
mov dword [ebp - 4], edx
xor eax, eax
jmp 0x41031c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x41033c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x318]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x410325
xor eax, eax
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], eax
jl 0x4103de
mov edi, dword [ebp - 0x318]
xor ebx, ebx
inc ebx
mov dword [ebp - 0x3c], 0xac9d73df
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x460]
cmp dword [eax + ecx*4], 0xfffffff7
je 0x410374
cmp dword [ebp - 0x1c], 0
je 0x410374
mov esi, ebx
jmp 0x410376
xor esi, esi
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x60]
sub esi, eax
xor edx, edx
mov eax, dword [ebp - 0x460]
cmp esi, dword [eax + ecx*4]
setg dl
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, edx
setg cl
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setle dl
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 0
je 0x4103c0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], 0
jne 0x4103cf
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], ebx
dec dword [ebp - 0x20]
jns 0x410351
xor edi, edi
inc edi
mov eax, dword [ebp - 0x318]
xor esi, esi
lea ecx, [ebp - 0x318]
call fcn.00409fc5
dec dword [ebp - 0x1c]
xor eax, eax
jmp 0x410255
dec dword [ebp - 0x58]
inc dword [ebp - 0x60]
jmp 0x41023a
lea ecx, [ebp - 0x460]
call fcn.00409fc5
mov dword [ebp - 0x3c], 0x5c7a
cmp dword [ebp - 0x3c], 0x5dee
jle 0x410481
xor ecx, ecx
mov dword [ebp - 0x14], ecx
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [edi + ebx]
xor eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0xb3c]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
push esi
push 1
lea ecx, [ebp - 0xb3c]
call fcn.0040a55c
inc edi
cmp edi, 0x4092
mov ecx, dword [ebp - 0x14]
jl 0x41042c
inc ebx
cmp ebx, 0x681d
jl 0x410428
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x5733
jl 0x410426
xor edi, edi
inc edi
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x3c], 0x5c6c
jge 0x41049c
push str.vemoogtcu_brxwjlhur_jjtzyhc_wnftlkk_rkvwn_iswrzl_ecgv_cmyd_kleseb_lmjlh_nolwwnfn_kqnxnj_nrjia_swozvnsgw
call fcn.00499a27
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4104c7
mov dword [ebp - 0x40], 0x37ffeac8
mov dword [ebp - 0x40], 0x3e4f6f48
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x4104f7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x124], 0x825e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x4104de
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x410519
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x308], 0x2305aba9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x410500
xor eax, eax
cmp dword [ebp - 0x11c], eax
je 0x4106da
mov dword [ebp - 0x60], 0x3a0f
mov dword [ebp - 0x30], 0xe85fcb44
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x41055a
xor esi, esi
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3dc], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x410545
xor eax, eax
mov dword [ebp - 0x34], 0x3f27
cmp dword [ebp - 0x34], 0x4064
jle 0x4105a4
mov ebx, eax
mov edi, eax
mov esi, eax
mov eax, esi
xor eax, edi
xor eax, ebx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x14be
jl 0x410570
inc edi
cmp edi, 0x5620
push 0
pop eax
jl 0x41056e
inc ebx
cmp ebx, 0x4a4c
jl 0x41056c
xor edi, edi
inc edi
cmp dword [ebp - 0x11c], 0xaab21a84
jne 0x4105bc
xor eax, eax
cmp dword [ebp - 0x11c], eax
mov edx, eax
je 0x4105be
mov edx, edi
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
setg cl
mov eax, dword [ebp - 0x60]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x11c]
add ecx, eax
mov eax, dword [ebp - 0x120]
xor edx, edx
cmp ecx, eax
setl dl
cmp edx, dword [ebp - 0x60]
jle 0x410609
cmp dword [ebp - 0x304], 0
je 0x410609
mov ecx, edi
jmp 0x41060b
xor ecx, ecx
mov eax, dword [ebp - 0x3dc]
add ecx, eax
mov eax, dword [ebp - 0x304]
xor edx, edx
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 0x3d8]
jg 0x410634
xor eax, eax
cmp dword [ebp - 0x304], eax
mov ecx, eax
je 0x410636
mov ecx, edi
mov eax, dword [ebp - 0x11c]
sub eax, ecx
mov ecx, dword [ebp - 0x11c]
imul ecx, eax
mov dword [ebp - 0x3dc], ecx
xor eax, eax
test ecx, ecx
setne al
cmp eax, dword [ebp - 0x60]
jl 0x410660
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x410662
mov eax, edi
add eax, 0xc21896fd
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x3c]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, 0xc42fa43d
sbb eax, eax
inc eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x34], 0x3c66
jge 0x4106b1
mov edx, str.qjbtlbilr_wpuuywnz_utrlnbpcl_oron_etokxayn
mov ecx, 0xae33d8
call fcn.0040c802
or dword [ebp - 4], 0xffffffff
jmp 0x41070e
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x410710
push 0x159f
push eax
push 0xa1f
push 0x1dac
push 0x1241
push eax
push 0xfab
push 0x212f
push 0x1685
call dword [sym.imp.USER32.dll_DrawIconEx]
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x4107bf
mov dword [ebp - 0x3c], 0x7d3f
cmp dword [ebp - 0x3c], 0x7df6
jle 0x41076a
mov ebx, eax
mov edi, eax
mov esi, eax
mov eax, edi
cdq
idiv esi
mov eax, ebx
sub eax, edx
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x767e
jl 0x410733
inc edi
cmp edi, 0x1364
push 0
pop eax
jl 0x410731
inc ebx
cmp ebx, 0x8ab
jl 0x41072f
xor edi, edi
inc edi
push eax
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x3c], 0x7a5c
jge 0x410790
mov edx, str.oqbtbqahi_ccyyrhj_bymgguf_smieliq_sqaqfti_nfxvqssvd_jieufhnpt_nklwhiyz
mov ecx, 0xae33d8
call fcn.0040c802
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x4107c2
or ebx, 0xffffffff
mov dword [ebp - 0x60], 4
mov dword [ebp - 0x44], 0x7a98815c
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x30], 0xfc4b03e3
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x4107fa
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x138], 0x3dda37bb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x4107e2
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x410810
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x68c], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x4107ff
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x14], 0xffff17d4
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp eax, 0x4365
setle cl
mov dword [ebp - 0x68c], ecx
mov dword [ebp - 0x3c], 0x55a3
cmp dword [ebp - 0x3c], 0x57e3
jle 0x41089f
xor eax, eax
push eax
push eax
push 0x1613
call dword [sym.imp.USER32.dll_EnumChildWindows]
xor edi, edi
xor esi, esi
lea eax, [esi + edi]
cdq
push edx
push eax
mov ecx, 0xae33d8
call fcn.00409bc4
inc esi
cmp esi, 0x398a
jl 0x41087a
inc edi
cmp edi, 0x67a1
jl 0x410878
xor edi, edi
inc edi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x3c], 0x523e
jge 0x4108c1
mov edx, str.sabtubca_nkcpm_hzwd_dkdqwnkdn_yvhcnetx_zstc_lttjsbd_aswkmy_ajyode_mwtnhvdxm_rflmoxz_hwfib_zbziqtoi_zuaajvd
mov ecx, 0xae33d8
call fcn.0040c802
mov dword [ebp - 4], ebx
jmp 0x4108e7
push 2
lea ecx, [ebp - 0x40c]
call fcn.00409f19
mov dword [ebp - 0x3c], 0xfffffffd
mov dword [ebp - 0x14], 0
jmp 0x410917
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40c]
mov dword [eax + ecx*4], 0x6432a276
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x410904
mov dword [ebp - 0x2c], 0xfffffff9
cmp dword [ebp - 0x2c], 0xf
jl 0x410b1c
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x34], 0xfffd
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], 0
jl 0x410b11
lea ecx, [ebp - 0x40c]
call fcn.00409fc5
push 3
lea ecx, [ebp - 0x2fc]
call fcn.00409f19
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], 9
push 4
lea ecx, [ebp - 0x528]
call fcn.00409f19
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x410b76