Function at 0x40c02f
Capabilities:
Encrypt data using speck
Parse pe header
Resolve function by parsing pe exports
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cc5bd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x510
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 0x10], 0
jbe 0x40c076
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x40c076
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.0040b0fc
pop ecx
pop ecx
jmp 0x40e454
mov dword [ebp - 0x250], 0x7a7e
mov dword [ebp - 0x2dc], str.iftxvvq_myiyane_msq_pnzdps_sotqqeme
cmp dword [ebp - 0x250], 0x7c64
jle 0x40c18b
and dword [ebp - 0x138], 0
jmp 0x40c0b0
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xc0
jge 0x40c18b
and dword [ebp - 0x134], 0
jmp 0x40c0d6
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x38d
jge 0x40c186
and dword [ebp - 0x4c], 0
jmp 0x40c0f3
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x7119
jge 0x40c181
and dword [ebp - 0xec], 0
jmp 0x40c116
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x114d
jge 0x40c17c
mov eax, dword [ebp - 0x138]
and eax, dword [ebp - 0x134]
mov edx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0xec]
shl edx, cl
and eax, edx
cdq
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x338], edx
push dword [ebp - 0x338]
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x508]
call fcn.00404de8
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a4f
push eax
call fcn.004b69fa
pop ecx
lea ecx, [ebp - 0x508]
call fcn.0040283c
jmp 0x40c109
jmp 0x40c0ec
jmp 0x40c0c9
jmp 0x40c0a3
and dword [ebp - 4], 0
cmp dword [ebp - 0x250], 0x79b7
jge 0x40c1a7
push dword [ebp - 0x2dc]
call fcn.004b69fa
pop ecx
jmp 0x40c1c3
or dword [ebp - 4], 0xffffffff
jmp 0x40c1cd
cmp dword [ebp + 0x10], 0
jne 0x40cf89
mov dword [ebp - 0x258], 0x14e2
mov dword [ebp - 0x374], str.heo_wjilxvmrx_ihlmzvwlg_xbvdz_dhnixymi_ltshly_als_yyimlpn_gtxfbir_decq
cmp dword [ebp - 0x258], 0x1543
jle 0x40c2b9
push 0x1057
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
and dword [ebp - 0x5c], 0
jmp 0x40c215
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x370d
jge 0x40c2b1
and dword [ebp - 0x54], 0
jmp 0x40c22f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x6420
jge 0x40c2ac
and dword [ebp - 0x158], 0
jmp 0x40c24e
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x6ba1
jge 0x40c2a7
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x158]
xor eax, dword [ebp - 0x5c]
cdq
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x300], edx
push dword [ebp - 0x300]
push dword [ebp - 0x304]
lea ecx, [ebp - 0x4c0]
call fcn.00404de8
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a4f
push eax
call fcn.004b69fa
pop ecx
lea ecx, [ebp - 0x4c0]
call fcn.0040283c
jmp 0x40c241
jmp 0x40c228
jmp 0x40c20e
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.0040528a
mov dword [ebp - 0x80], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x258], 0x133e
jge 0x40c2e6
push dword [ebp - 0x374]
call fcn.004b69fa
pop ecx
jmp 0x40c302
or dword [ebp - 4], 0xffffffff
jmp 0x40c30c
mov dword [ebp - 0x260], 0x285
mov dword [ebp - 0x360], str.zsmzqgb_mwmb_atristqz_lpk_orm
cmp dword [ebp - 0x260], 0x41d
jle 0x40c396
and dword [ebp - 0xf4], 0
jmp 0x40c342
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x3758
jge 0x40c396
and dword [ebp - 0x64], 0
jmp 0x40c35b
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x4222
jge 0x40c394
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x64]
sar eax, cl
cdq
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], edx
push dword [ebp - 0x364]
push dword [ebp - 0x368]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40c354
jmp 0x40c335
mov dword [ebp - 4], 4
cmp dword [ebp - 0x260], 0x13f
jge 0x40c3b9
mov edx, dword [ebp - 0x360]
mov ecx, 0xac8118
call fcn.0042b974
jmp 0x40c3d5
or dword [ebp - 4], 0xffffffff
jmp 0x40c3df
cmp dword [0xac92a0], 0
jne 0x40ce44
mov dword [ebp - 0x1f4], 0x835
mov dword [ebp - 0x270], str.tltx_urfhlfl_uhrsqgc_lxituywf_ilqkekeso_zsqt_vbie_uvhcs_xlkul_wvtdzzxyx_offuapqv_ozryhd_ons_siwsdxhaw
cmp dword [ebp - 0x1f4], 0xab4
jle 0x40c4c7
and dword [ebp - 0x74], 0
jmp 0x40c41d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x4947
jge 0x40c4c7
and dword [ebp - 0x140], 0
jmp 0x40c440
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x2771
jge 0x40c4c2
and dword [ebp - 0x6c], 0
jmp 0x40c459
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x3102
jge 0x40c4bd
and dword [ebp - 0xfc], 0
jmp 0x40c478
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x62d2
jge 0x40c4bb
mov eax, dword [ebp - 0x140]
sub eax, dword [ebp - 0x6c]
and eax, dword [ebp - 0xfc]
xor eax, dword [ebp - 0x74]
cdq
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], edx
push dword [ebp - 0x30c]
push dword [ebp - 0x310]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40c46b
jmp 0x40c452
jmp 0x40c433
jmp 0x40c416
mov dword [ebp - 0x2f8], 0x50f6
lea eax, [ebp - 0x2f8]
push eax
call fcn.0040ae79
pop ecx
mov dword [ebp - 0x20c], eax
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1f4], 0x7bc
jge 0x40c507
mov edx, dword [ebp - 0x270]
mov ecx, 0xac8118
call fcn.0042b974
jmp 0x40c523
or dword [ebp - 4], 0xffffffff
jmp 0x40c52d
mov byte [ebp - 0x1b4], 1
mov byte [ebp - 0x1b3], 0x66
mov byte [ebp - 0x1b2], 9
mov byte [ebp - 0x1b1], 0x71
mov byte [ebp - 0x1b0], 9
mov byte [ebp - 0x1af], 0x5c
mov byte [ebp - 0x1ae], 0xce
mov byte [ebp - 0x1ad], 0x5e
mov byte [ebp - 0x1ac], 0xaa
mov byte [ebp - 0x1ab], 0xc0
mov byte [ebp - 0x1aa], 0xc1
mov byte [ebp - 0x1a9], 0x66
mov byte [ebp - 0x1a8], 0x2e
mov byte [ebp - 0x1a7], 5
mov byte [ebp - 0x1a6], 0x77
mov byte [ebp - 0x1a5], 8
mov byte [ebp - 0x1a4], 0x76
mov byte [ebp - 0x1a3], 7
mov byte [ebp - 0x1a2], 0x72
mov byte [ebp - 0x1a1], 3
mov byte [ebp - 0x1a0], 0x61
mov byte [ebp - 0x19f], 0xc
mov byte [ebp - 0x19e], 0x64
mov byte [ebp - 0x19d], 4
mov byte [ebp - 0x19c], 0x74
mov byte [ebp - 0x19b], 0xb
mov byte [ebp - 0x19a], 0x89
mov byte [ebp - 0x199], 2
mov byte [ebp - 0x198], 0x87
mov byte [ebp - 0x197], 6
mov byte [ebp - 0x196], 0x88
mov byte [ebp - 0x195], 0
mov byte [ebp - 0x194], 0x5e
mov byte [ebp - 0x193], 0xa
mov byte [ebp - 0x192], 0x5e
and dword [ebp - 0x14], 0
and dword [ebp - 0x22c], 0
jmp 0x40c637
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x23
jae 0x40c8f3
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1b4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x40c747
mov dword [ebp - 0x22c], 9
mov eax, dword [ebp - 0x14]
add eax, 7
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1ec], 0x61c
mov dword [ebp - 0x330], str.tqoz_mhwi_tqiorhby_hxxchr_sjnkdu_aehsz_mbtrmzui_nllc_uhqqwz_anpkkj
cmp dword [ebp - 0x1ec], 0x655
jle 0x40c6f9
and dword [ebp - 0x168], 0
jmp 0x40c6a5
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x60e7
jge 0x40c6f9
and dword [ebp - 0x7c], 0
jmp 0x40c6be
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x4ac1
jge 0x40c6f7
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x7c]
shl eax, cl
cdq
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], edx
push dword [ebp - 0x344]
push dword [ebp - 0x348]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40c6b7
jmp 0x40c698
jmp 0x40c62f
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x1b3]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x22c]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jge 0x40c781
mov eax, dword [ebp - 0x10c]
add eax, 0x100
mov dword [ebp - 0x10c], eax
jmp 0x40c765
mov dword [ebp - 0x1fc], 0x3ab9
mov dword [ebp - 0x27c], str.azneoj_ufd_bexxdycg_wybdcist_tlwwrof_qpq_cajcibokf_vrs_sicwan_eytdpkvus
cmp dword [ebp - 0x1fc], 0x3c3e
jle 0x40c88d
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
and dword [ebp - 0x8c], 0
jmp 0x40c7c7
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x7950
jge 0x40c88d
and dword [ebp - 0x104], 0
jmp 0x40c7ed
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x5bbd
jge 0x40c888
and dword [ebp - 0x84], 0
jmp 0x40c813
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x6986
jge 0x40c883
and dword [ebp - 0x148], 0
jmp 0x40c835
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x5130
jge 0x40c881
mov eax, dword [ebp - 0x104]
cdq
idiv dword [ebp - 0x84]
add edx, dword [ebp - 0x148]
and edx, dword [ebp - 0x8c]
mov eax, edx
cdq
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x318], edx
push dword [ebp - 0x318]
push dword [ebp - 0x31c]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40c828
jmp 0x40c806
jmp 0x40c7e0
jmp 0x40c7ba
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x1b4]
mov cl, byte [ebp - 0x10c]
mov byte [ebp + eax - 0x384], cl
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x1fc], 0x392e
jge 0x40c8c8
mov edx, dword [ebp - 0x27c]
mov ecx, 0xac8118
call fcn.0042b974
jmp 0x40c8e4
or dword [ebp - 4], 0xffffffff
jmp 0x40c8ee
jmp 0x40c62f
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x384], 0
lea eax, [ebp - 0x384]
push eax
lea ecx, [ebp - 0x4f0]
call fcn.0042a279
mov edx, dword [ebp - 0x20c]
mov ecx, eax
call fcn.0040528a
mov dword [0xac92a0], eax
lea ecx, [ebp - 0x4f0]
call fcn.004029f3
and dword [ebp - 0x94], 0
jmp 0x40c946
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xe
jae 0x40c95f
mov eax, dword [ebp - 0x94]
mov byte [ebp + eax - 0x384], 0
jmp 0x40c939
mov dword [ebp - 0x254], 0x1a2a
mov dword [ebp - 0x35c], str.fxg_vqy_sgecc_dxvfnbi
cmp dword [ebp - 0x254], 0x1c3c
jle 0x40ca5d
and dword [ebp - 0xa4], 0
jmp 0x40c999
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x660b
jge 0x40ca5d
and dword [ebp - 0x160], 0
jmp 0x40c9bf
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x51b5
jge 0x40ca58
and dword [ebp - 0x9c], 0
jmp 0x40c9e5
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x689a
jge 0x40ca53
and dword [ebp - 0x114], 0
jmp 0x40ca07
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x30ae
jge 0x40ca51
mov eax, dword [ebp - 0x160]
imul eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x114]
or eax, dword [ebp - 0xa4]
cdq
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], edx
push dword [ebp - 0x36c]
push dword [ebp - 0x370]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40c9fa
jmp 0x40c9d8
jmp 0x40c9b2
jmp 0x40c98c
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x254], 0x1757
jge 0x40ca80
mov edx, dword [ebp - 0x35c]
mov ecx, 0xac8118
call fcn.0042b974
jmp 0x40ca9c
or dword [ebp - 4], 0xffffffff
jmp 0x40caa6
mov byte [ebp - 0x1e0], 0xc
mov byte [ebp - 0x1df], 0x74
mov byte [ebp - 0x1de], 5
mov byte [ebp - 0x1dd], 0x68
mov byte [ebp - 0x1dc], 1
mov byte [ebp - 0x1db], 0x77
mov byte [ebp - 0x1da], 0xb
mov byte [ebp - 0x1d9], 0x7a
mov byte [ebp - 0x1d8], 0xd
mov byte [ebp - 0x1d7], 0x60
mov byte [ebp - 0x1d6], 2
mov byte [ebp - 0x1d5], 0x70
mov byte [ebp - 0x1d4], 7
mov byte [ebp - 0x1d3], 0x7f
mov byte [ebp - 0x1d2], 0
mov byte [ebp - 0x1d1], 0x52
mov byte [ebp - 0x1d0], 3
mov byte [ebp - 0x1cf], 0x72
mov byte [ebp - 0x1ce], 9
mov byte [ebp - 0x1cd], 0x76
mov byte [ebp - 0x1cc], 4
mov byte [ebp - 0x1cb], 0x89
mov byte [ebp - 0x1ca], 8
mov byte [ebp - 0x1c9], 0x86
mov byte [ebp - 0x1c8], 0xa
mov byte [ebp - 0x1c7], 0x7e
mov byte [ebp - 0x1c6], 0xf
mov byte [ebp - 0x1c5], 0x6f
mov byte [ebp - 0x1c4], 0x4e
mov byte [ebp - 0x1c3], 0xc
mov byte [ebp - 0x1c2], 0xf0
mov byte [ebp - 0x1c1], 0x58
mov byte [ebp - 0x1c0], 0x95
mov byte [ebp - 0x1bf], 0x6d
mov byte [ebp - 0x1be], 0x68
mov byte [ebp - 0x1bd], 0x5d
mov byte [ebp - 0x1bc], 0x81
mov byte [ebp - 0x1bb], 3
mov byte [ebp - 0x1ba], 0xdf
mov byte [ebp - 0x1b9], 0x8e
mov byte [ebp - 0x1b8], 0x6a
mov byte [ebp - 0x1b7], 6
mov byte [ebp - 0x1b6], 0x6b
mov dword [ebp - 0x234], 0x6823
mov dword [ebp - 0x288], str.sary_xyoyav_kzrotgbpz_pdahim
cmp dword [ebp - 0x234], 0x6967
jle 0x40cced
and dword [ebp - 0x150], 0
jmp 0x40cc0d
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x6319
jge 0x40ccd2
and dword [ebp - 0xac], 0
jmp 0x40cc33
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x4d27
jge 0x40cccd
and dword [ebp - 0x11c], 0
jmp 0x40cc59
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x622b
jge 0x40ccc8
and dword [ebp - 0xb4], 0
jmp 0x40cc7b
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x350a
jge 0x40ccc6
mov eax, dword [ebp - 0x150]
and eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x11c]
sub ecx, dword [ebp - 0xb4]
xor eax, ecx
cdq
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], edx
push dword [ebp - 0x324]
push dword [ebp - 0x328]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40cc6e
jmp 0x40cc4c
jmp 0x40cc26
jmp 0x40cc00
push 0x112f
push 0
push 0x26a6
push 0x4cf
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
and dword [ebp - 0x18], 0
and dword [ebp - 0x204], 0
jmp 0x40cd02
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x2b
jae 0x40cd8f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1e0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x40cd38
mov dword [ebp - 0x204], 0xf
mov eax, dword [ebp - 0x18]
add eax, 0xd
mov dword [ebp - 0x18], eax
jmp 0x40ccfa
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x1df]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x204]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jge 0x40cd72
mov eax, dword [ebp - 0x170]
add eax, 0x100
mov dword [ebp - 0x170], eax
jmp 0x40cd56
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x1e0]
mov cl, byte [ebp - 0x170]
mov byte [ebp + eax - 0x394], cl
jmp 0x40ccfa
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x234], 0x6458
jge 0x40cdb2
mov edx, dword [ebp - 0x288]
mov ecx, 0xac8118
call fcn.0042b974
jmp 0x40cdce
or dword [ebp - 4], 0xffffffff
jmp 0x40cdd8
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x394], 0
lea eax, [ebp - 0x394]
push eax
lea ecx, [ebp - 0x520]
call fcn.0042a279
mov edx, dword [ebp - 0x20c]
mov ecx, eax
call fcn.0040528a
mov dword [0xac9378], eax
lea ecx, [ebp - 0x520]
call fcn.004029f3
and dword [ebp - 0xbc], 0
jmp 0x40ce2b
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xf
jae 0x40ce44
mov eax, dword [ebp - 0xbc]
mov byte [ebp + eax - 0x394], 0
jmp 0x40ce1e
mov eax, dword [0xac92a0]
cmp eax, dword [ebp - 0x80]
je 0x40ce5c
mov eax, dword [0xac9378]
cmp eax, dword [ebp - 0x80]
jne 0x40cf89
mov dword [ebp - 0x24c], 0x20d8
mov dword [ebp - 0x2f4], str.mkoednqd_ujqaymon_yfvdjgslq_qptdoctm
cmp dword [ebp - 0x24c], 0x24aa
jle 0x40cf28
and dword [ebp - 0x12c], 0
jmp 0x40ce96
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x45ba
jge 0x40cf28
and dword [ebp - 0x124], 0
jmp 0x40cebc
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x36b9
jge 0x40cf23
and dword [ebp - 0xc4], 0
jmp 0x40cede
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x5dbd
jge 0x40cf21
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0xc4]
xor eax, dword [ebp - 0x12c]
cdq
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], edx
push dword [ebp - 0x354]
push dword [ebp - 0x358]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40ced1
jmp 0x40ceaf
jmp 0x40ce89
mov ecx, dword [ebp + 0xc]
call fcn.00402a4f
push eax
push dword [ebp + 8]
call fcn.0040b0fc
pop ecx
pop ecx
jmp 0x40e454
mov eax, dword [ebp + 8]
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x40e452
mov eax, dword [ebp - 0xdc]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x40e452
mov dword [ebp - 0x214], 0x17f
mov dword [ebp - 0x294], str.bxnxp_qxjmvui_cmbro_zfjhtjsg_lgv
cmp dword [ebp - 0x214], 0x41b
jle 0x40d0c7
and dword [ebp - 0xcc], 0
jmp 0x40cfed
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x213f
jge 0x40d0c7
and dword [ebp - 0x40], 0
jmp 0x40d00a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xe01
jge 0x40d0c2
and dword [ebp - 0xd4], 0
jmp 0x40d02d
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x5da9
jge 0x40d0bd
and dword [ebp - 0x13c], 0
jmp 0x40d053
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x3894
jge 0x40d0b8
mov eax, dword [ebp - 0xcc]
cdq
idiv dword [ebp - 0x40]
sub edx, dword [ebp - 0xd4]
add edx, dword [ebp - 0x13c]
mov eax, edx
cdq
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], edx
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x448]
call fcn.00404de8
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a4f
push eax
call fcn.004b69fa
pop ecx
lea ecx, [ebp - 0x448]
call fcn.0040283c
jmp 0x40d046
jmp 0x40d020
jmp 0x40d003
jmp 0x40cfe0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xdc]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x214], 0xfffffe7c
jge 0x40d0f8
push dword [ebp - 0x294]
call fcn.004b69fa
pop ecx
jmp 0x40d114
or dword [ebp - 4], 0xffffffff
jmp 0x40d11e
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 0x4550
jne 0x40e452
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x74], 0
jbe 0x40e452
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ecx + eax + 0x78], 0
je 0x40e452
mov dword [ebp - 0x23c], 0x6cab
mov dword [ebp - 0x2fc], str.cxi_tdhykit_kiauge_zhmjclg_cwzuhdm_wilqausbf_izopa_rhu_oyvf_cxhksxodg_akn_qcqtdbbsg
cmp dword [ebp - 0x23c], 0x6d10
jle 0x40d256
and dword [ebp - 0x130], 0
jmp 0x40d188
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x6187
jge 0x40d24e
and dword [ebp - 0xe4], 0
jmp 0x40d1ae
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x6c0d
jge 0x40d249
and dword [ebp - 0x44], 0
jmp 0x40d1cb
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1b6a
jge 0x40d244
and dword [ebp - 0x48], 0
jmp 0x40d1e1
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x19f5
jge 0x40d242
mov ecx, dword [ebp - 0x130]
sub ecx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x44]
cdq
idiv dword [ebp - 0x48]
sub ecx, edx
mov eax, ecx
cdq
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], edx
push dword [ebp - 0x274]
push dword [ebp - 0x278]
lea ecx, [ebp - 0x418]
call fcn.00404de8
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a4f
push eax
call fcn.004b69fa
pop ecx
lea ecx, [ebp - 0x418]
call fcn.0040283c
jmp 0x40d1da
jmp 0x40d1c4
jmp 0x40d1a1
jmp 0x40d17b
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x23c], 0x6acd
jge 0x40d27b
push dword [ebp - 0x2fc]
call fcn.004b69fa
pop ecx
jmp 0x40d297
or dword [ebp - 4], 0xffffffff
jmp 0x40d2a1
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x34]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x28], edx
mov eax, 0xffff
mov word [ebp - 0x1c], ax
or dword [ebp - 0x38], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x40d2df
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x40d2da
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x1c], ax
jmp 0x40d644
mov eax, dword [0xac9370]
and eax, 1
jne 0x40d30b
mov eax, dword [0xac9370]
or eax, 1
mov dword [0xac9370], eax
mov ecx, 0xac93a0
call fcn.00402b5c
push 0x4cc907
call fcn.004b672f
pop ecx
movzx eax, byte [0xac92b4]
test eax, eax
je 0x40d371
mov ecx, 0xac93a0
call fcn.0042a2fc
movzx eax, al
test eax, eax
jne 0x40d371
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, 0xac93a0
call fcn.00402b34
lea eax, [ebp - 0x3a0]
push eax
mov ecx, 0xac93a0
call fcn.00402b26
push eax
lea ecx, [ebp - 0x21c]
call fcn.00402b49
movzx eax, al
test eax, eax
je 0x40d371
lea ecx, [ebp - 0x21c]
call fcn.0042a305
mov eax, dword [eax + 4]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
jne 0x40d644
mov dword [ebp - 0x25c], 0x635e
mov dword [ebp - 0x2a0], str.nxrj_bpswn_ufbr_zcy_ojga_kvhuotz
cmp dword [ebp - 0x25c], 0x6430
jle 0x40d43d
and dword [ebp - 0x50], 0
jmp 0x40d3ac
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x1ec6
jge 0x40d432
and dword [ebp - 0x58], 0
jmp 0x40d3c2
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x5ba6
jge 0x40d42d
and dword [ebp - 0x60], 0
jmp 0x40d3d8
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x295e
jge 0x40d42b
mov eax, dword [ebp - 0x50]
xor eax, dword [ebp - 0x58]
xor eax, dword [ebp - 0x60]
cdq
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x280], edx
push dword [ebp - 0x280]
push dword [ebp - 0x284]
lea ecx, [ebp - 0x478]
call fcn.00404de8
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a4f
push eax
call fcn.004b69fa
pop ecx
lea ecx, [ebp - 0x478]
call fcn.0040283c
jmp 0x40d3d1
jmp 0x40d3bb
jmp 0x40d3a5
push 0xc4c
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov ecx, 0xac93a0
call fcn.0042a349
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0xac93a0
call fcn.0042a34d
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x25c], 0x5fc3
jge 0x40d477
push dword [ebp - 0x2a0]
call fcn.004b69fa
pop ecx
jmp 0x40d493
or dword [ebp - 4], 0xffffffff
jmp 0x40d49d
and dword [ebp - 0x30], 0
jmp 0x40d4aa
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [eax + 0x18]
jae 0x40d644
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x30]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
je 0x40d63f
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x400]
call fcn.0042a279
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x400]
call fcn.0040528a
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x244], 0xdeb
mov dword [ebp - 0x308], str.vzw_clbujzcv_tdzgginqu_ytqe_filfybw_hjzss_rjyqr_qrmi_lozlnlfex_advq_sjhpsnox_cclkfowp_zskehqm_piywau
cmp dword [ebp - 0x244], 0xe59
jle 0x40d59b
and dword [ebp - 0x78], 0
jmp 0x40d533
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x64cb
jge 0x40d59b
and dword [ebp - 0x68], 0
jmp 0x40d549
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x5d82
jge 0x40d599
and dword [ebp - 0x70], 0
jmp 0x40d55f
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x52c7
jge 0x40d597
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x70]
or eax, dword [ebp - 0x78]
cdq
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], edx
push dword [ebp - 0x28c]
push dword [ebp - 0x290]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40d558
jmp 0x40d542
jmp 0x40d52c
movzx eax, byte [0xac92b4]
test eax, eax
je 0x40d5b7
mov ecx, 0xac93a0
call fcn.0042a2fc
movzx eax, al
test eax, eax
jne 0x40d5d4
lea eax, [ebp - 0x1f0]
push eax
mov ecx, 0xac93a0
call fcn.0042a30b
mov ecx, dword [ebp - 0x30]
mov dword [eax], ecx
mov byte [0xac92b4], 1
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x244], 0xd50
jge 0x40d5f7
mov edx, dword [ebp - 0x308]
mov ecx, 0xac8118
call fcn.0042b974
jmp 0x40d613
or dword [ebp - 4], 0xffffffff
jmp 0x40d61d
cmp dword [ebp - 0x38], 0xffffffff
jne 0x40d634
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x80]
jne 0x40d634
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x400]
call fcn.004029f3
jmp 0x40d4a3
cmp dword [ebp + 0x10], 0
jne 0x40d664
cmp dword [ebp - 0x38], 0xffffffff
je 0x40d664
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x38]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x1c], ax
movzx eax, word [ebp - 0x1c]
cmp eax, 0xffff
je 0x40e452
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x1c]
movzx eax, word [ebp - 0x1c]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x28]
jbe 0x40e44d
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x28]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x24], edx
jae 0x40e44d
mov eax, dword [0xac9370]
and eax, 2
jne 0x40d6e3
mov eax, dword [0xac9370]
or eax, 2
mov dword [0xac9370], eax
push 0x4304
call fcn.00401a2c
pop ecx
mov byte [0xac93c4], al
mov dword [ebp - 0x1f8], 0x710f
mov dword [ebp - 0x314], str.tlvlv_amvh_jona_zfzc_esbb
cmp dword [ebp - 0x1f8], 0x72ef
jle 0x40d7e2
and dword [ebp - 0x88], 0
jmp 0x40d71d
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x4ae1
jge 0x40d7e2
and dword [ebp - 0x90], 0
jmp 0x40d743
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x10a6
jge 0x40d7dd
and dword [ebp - 0x98], 0
jmp 0x40d769
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x717
jge 0x40d7d8
and dword [ebp - 0xa0], 0
jmp 0x40d78b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x1836
jge 0x40d7d6
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x98]
add ecx, dword [ebp - 0xa0]
or eax, ecx
cdq
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x298], edx
push dword [ebp - 0x298]
push dword [ebp - 0x29c]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40d77e
jmp 0x40d75c
jmp 0x40d736
jmp 0x40d710
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x1f8], 0x6f04
jge 0x40d805
mov edx, dword [ebp - 0x314]
mov ecx, 0xac8118
call fcn.0042b974
jmp 0x40d821
or dword [ebp - 4], 0xffffffff
jmp 0x40d82b
mov byte [ebp - 0x190], 1
mov byte [ebp - 0x18f], 0x6d
mov byte [ebp - 0x18e], 2
mov byte [ebp - 0x18d], 0x6f
mov byte [ebp - 0x18c], 0x14
mov byte [ebp - 0x18b], 0x3e
mov byte [ebp - 0x18a], 0xae
mov byte [ebp - 0x189], 0x38
mov byte [ebp - 0x188], 0x79
mov byte [ebp - 0x187], 0xc5
mov byte [ebp - 0x186], 0xaa
mov byte [ebp - 0x185], 0xd1
mov byte [ebp - 0x184], 0x47
mov byte [ebp - 0x183], 0xd4
mov byte [ebp - 0x182], 0x4e
mov byte [ebp - 0x181], 0xb1
mov byte [ebp - 0x180], 0x88
mov byte [ebp - 0x17f], 0xb1
mov byte [ebp - 0x17e], 0x1a
mov byte [ebp - 0x17d], 0x64
mov byte [ebp - 0x17c], 0x69
mov byte [ebp - 0x17b], 0x62
mov byte [ebp - 0x17a], 0x4a
mov byte [ebp - 0x179], 0x49
mov byte [ebp - 0x178], 0
mov byte [ebp - 0x177], 0x69
and dword [ebp - 0x20], 0
and dword [ebp - 0x210], 0
jmp 0x40d8f6
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1a
jae 0x40dce3
mov dword [ebp - 0x208], 0x2bdc
mov dword [ebp - 0x320], str.kbf_ojzefkluk_rpzjjrem_kyrj_dmqt_xvdihlcr_birtx_rie
cmp dword [ebp - 0x208], 0x2deb
jle 0x40d9ed
and dword [ebp - 0xb8], 0
jmp 0x40d93a
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x46b1
jge 0x40d9ed
and dword [ebp - 0xa8], 0
jmp 0x40d960
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x6548
jge 0x40d9e8
and dword [ebp - 0xb0], 0
jmp 0x40d982
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x1acf
jge 0x40d9e3
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xb0]
shl eax, cl
and eax, dword [ebp - 0xb8]
cdq
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], edx
push dword [ebp - 0x2a4]
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x4d8]
call fcn.00404de8
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a4f
push eax
call fcn.004b69fa
pop ecx
lea ecx, [ebp - 0x4d8]
call fcn.0040283c
jmp 0x40d975
jmp 0x40d953
jmp 0x40d92d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x190]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x40db52
mov dword [ebp - 0x210], 0x14
mov dword [ebp - 0x200], 0x411a
mov dword [ebp - 0x2b8], str.ypsfp_uqh_gjxzhfobw_crzib
cmp dword [ebp - 0x200], 0x413b
jle 0x40daff
and dword [ebp - 0xd0], 0
jmp 0x40da4c
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x6a86
jge 0x40daff
and dword [ebp - 0xc0], 0
jmp 0x40da72
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x56a6
jge 0x40dafa
and dword [ebp - 0xc8], 0
jmp 0x40da94
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x351d
jge 0x40daf5
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc8]
sar eax, cl
or eax, dword [ebp - 0xd0]
cdq
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], edx
push dword [ebp - 0x2b0]
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0x4a8]
call fcn.00404de8
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a4f
push eax
call fcn.004b69fa
pop ecx
lea ecx, [ebp - 0x4a8]
call fcn.0040283c
jmp 0x40da87
jmp 0x40da65
jmp 0x40da3f
mov eax, dword [ebp - 0x20]
add eax, 0x12
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x200], 0x4015
jge 0x40db27
push dword [ebp - 0x2b8]
call fcn.004b69fa
pop ecx
jmp 0x40db43
or dword [ebp - 4], 0xffffffff
jmp 0x40db4d
jmp 0x40d8ee
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x208], 0x2b4a
jge 0x40db71
push dword [ebp - 0x320]
call fcn.004b69fa
pop ecx
jmp 0x40db8d
or dword [ebp - 4], 0xffffffff
jmp 0x40db97
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x18f]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x210]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x218], 0x1fb
mov dword [ebp - 0x2c4], str.pvhv_gqxee_bbcdpxfmi
cmp dword [ebp - 0x218], 0x3b2
jle 0x40dc64
and dword [ebp - 0xd8], 0
jmp 0x40dbef
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x38c7
jge 0x40dc52
and dword [ebp - 0xe0], 0
jmp 0x40dc11
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x334f
jge 0x40dc50
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xe0]
sar eax, cl
cdq
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], edx
push dword [ebp - 0x2bc]
push dword [ebp - 0x2c0]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40dc04
jmp 0x40dbe2
push 0xb48
push 0x4c2
push 0
call dword [sym.imp.GDI32.dll_OffsetRgn]
cmp dword [ebp - 0xe8], 0
jge 0x40dc80
mov eax, dword [ebp - 0xe8]
add eax, 0x100
mov dword [ebp - 0xe8], eax
jmp 0x40dc64
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x218], 0xffffffc3
jge 0x40dca0
mov edx, dword [ebp - 0x2c4]
mov ecx, 0xac8118
call fcn.0042b974
jmp 0x40dcbc
or dword [ebp - 4], 0xffffffff
jmp 0x40dcc6
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x190]
mov cl, byte [ebp - 0xe8]
mov byte [ebp + eax - 0x1e8], cl
jmp 0x40d8ee
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x1e8], 0
mov eax, dword [0xac9370]
and eax, 4
jne 0x40dd24
mov eax, dword [0xac9370]
or eax, 4
mov dword [0xac9370], eax
lea eax, [ebp - 0x1e8]
push eax
mov ecx, 0xac93ec
call fcn.0042a279
push 0x4cc8f8
call fcn.004b672f
pop ecx
mov dword [ebp - 0x220], 0xcc1
mov dword [ebp - 0x32c], str.dbt_izlw_rxaobxat
cmp dword [ebp - 0x220], 0xde3
jle 0x40de53
and dword [ebp - 0xf0], 0
jmp 0x40dd5e
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x6ff9
jge 0x40de44
and dword [ebp - 0xf8], 0
jmp 0x40dd84
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x6386
jge 0x40de3f
and dword [ebp - 0x100], 0
jmp 0x40ddaa
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x735
jge 0x40de3a
and dword [ebp - 0x108], 0
jmp 0x40ddd0
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x3013
jge 0x40de35
mov eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0xf8]
and eax, dword [ebp - 0x100]
xor eax, dword [ebp - 0x108]
cdq
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], edx
push dword [ebp - 0x2c8]
push dword [ebp - 0x2cc]
lea ecx, [ebp - 0x430]
call fcn.00404de8
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a4f
push eax
call fcn.004b69fa
pop ecx
lea ecx, [ebp - 0x430]
call fcn.0040283c
jmp 0x40ddc3
jmp 0x40dd9d
jmp 0x40dd77
jmp 0x40dd51
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
and dword [ebp - 0x110], 0
jmp 0x40de69
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 4
jae 0x40de82
mov eax, dword [ebp - 0x110]
mov byte [ebp + eax - 0x1e8], 0
jmp 0x40de5c
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x220], 0x8ec
jge 0x40dea1
push dword [ebp - 0x32c]
call fcn.004b69fa
pop ecx
jmp 0x40debd
or dword [ebp - 4], 0xffffffff
jmp 0x40dec7
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x228], 0x1738
mov dword [ebp - 0x2d0], str.oag_wdc_nfcihzip_fpats_evqopuh_tyndjy_zlkygpiu_fajtnlh_oct
cmp dword [ebp - 0x228], 0x1978
jle 0x40df9a
and dword [ebp - 0x128], 0
jmp 0x40df07
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x66f1
jge 0x40df9a
and dword [ebp - 0x118], 0
jmp 0x40df2d
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x2565
jge 0x40df95
and dword [ebp - 0x120], 0
jmp 0x40df4f
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x38e6
jge 0x40df93
mov eax, dword [ebp - 0x118]
imul eax, dword [ebp - 0x120]
add eax, dword [ebp - 0x128]
cdq
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], edx
push dword [ebp - 0x2d4]
push dword [ebp - 0x2d8]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40df42
jmp 0x40df20
jmp 0x40defa
mov eax, dword [ebp - 0x2c]
movsx eax, byte [eax]
movsx ecx, byte [0xac93c4]
cmp eax, ecx
je 0x40dfb4
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
jmp 0x40df9a
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x228], 0x13f4
jge 0x40dfd7
mov edx, dword [ebp - 0x2d0]
mov ecx, 0xac8118
call fcn.0042b974
jmp 0x40dff3
or dword [ebp - 4], 0xffffffff
jmp 0x40dffd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x3b8]
call fcn.004347fe
push 0xac93ec
lea ecx, [ebp - 0x3b8]
call fcn.0042a2a8
mov dword [ebp - 0x230], 0x3ed3
mov dword [ebp - 0x334], str.fuvqrfn_qjpj_qzedzbhjc_uksflosc_ncf_ptqbs_nttzcp_eixzfiarg_cisgkz_btsygf_fcneizrjp_szhiianb_kkmfy
cmp dword [ebp - 0x230], 0x40af
jle 0x40e0e1
and dword [ebp - 0x144], 0
jmp 0x40e05f
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x29e
jge 0x40e0e1
and dword [ebp - 0x14c], 0
jmp 0x40e081
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x8046
jge 0x40e0dc
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x14c]
shl eax, cl
cdq
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], edx
push dword [ebp - 0x2e0]
push dword [ebp - 0x2e4]
lea ecx, [ebp - 0x460]
call fcn.00404de8
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a4f
push eax
call fcn.004b69fa
pop ecx
lea ecx, [ebp - 0x460]
call fcn.0040283c
jmp 0x40e074
jmp 0x40e052
lea eax, [ebp - 0x398]
push eax
lea ecx, [ebp - 0x3b8]
call fcn.00403078
push dword [eax]
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x3b8]
call fcn.00403064
push dword [eax]
lea ecx, [ebp - 0x3e8]
call fcn.00434827
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x230], 0x3d3b
jge 0x40e133
push dword [ebp - 0x334]
call fcn.004b69fa
pop ecx
jmp 0x40e14f
or dword [ebp - 4], 0xffffffff
jmp 0x40e159
lea eax, [ebp - 0x3e8]
push eax
call fcn.00405e41
pop ecx
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x248], 0x2dd8
mov dword [ebp - 0x2e8], str.sjpgkr_fpncfag_nckjpxcuq_notldd_gcxkgu_nvrl_ktegzey_xmty_uuxzg
cmp dword [ebp - 0x248], 0x2ff9
jle 0x40e257
and dword [ebp - 0x164], 0
jmp 0x40e1a6
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x7abe
jge 0x40e257
and dword [ebp - 0x154], 0
jmp 0x40e1cc
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x2750
jge 0x40e252
and dword [ebp - 0x15c], 0
jmp 0x40e1ee
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x6a6b
jge 0x40e24d
mov eax, dword [ebp - 0x154]
sub eax, dword [ebp - 0x15c]
xor eax, dword [ebp - 0x164]
cdq
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], edx
push dword [ebp - 0x2ec]
push dword [ebp - 0x2f0]
lea ecx, [ebp - 0x490]
call fcn.00404de8
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a4f
push eax
call fcn.004b69fa
pop ecx
lea ecx, [ebp - 0x490]
call fcn.0040283c
jmp 0x40e1e1
jmp 0x40e1bf
jmp 0x40e199
cmp dword [ebp - 0x1e4], 0
je 0x40e2cf
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x3d0]
call fcn.0042a279
lea edx, [ebp - 0x264]
lea ecx, [ebp - 0x3d0]
call fcn.004058de
movzx eax, al
test eax, eax
je 0x40e2a3
push 0
push dword [ebp - 0x264]
push 0
push dword [ebp - 0x1e4]
call fcn.0040c02f
add esp, 0x10
mov dword [ebp - 0x24], eax
jmp 0x40e2bf
push 1
push 0
lea eax, [ebp - 0x3d0]
push eax
push dword [ebp - 0x1e4]
call fcn.0040c02f
add esp, 0x10
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x3d0]
call fcn.004029f3
jmp 0x40e3f2
mov dword [ebp - 0x240], 0x6742
mov dword [ebp - 0x340], str.qdfc_uxmbp_bwm
cmp dword [ebp - 0x240], 0x699c
jle 0x40e376
and dword [ebp - 0x16c], 0
jmp 0x40e309
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xb1a
jge 0x40e36c
and dword [ebp - 0x174], 0
jmp 0x40e32b
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x2ed
jge 0x40e36a
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x174]
shl eax, cl
cdq
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], edx
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
mov ecx, 0xac8118
call fcn.0042a134
jmp 0x40e31e
jmp 0x40e2fc
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp dword [ebp + 0x10], 0
jne 0x40e38c
mov ecx, dword [ebp + 0xc]
call fcn.00402a4f
mov dword [ebp - 0x238], eax
jmp 0x40e396
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x238], eax
push dword [ebp - 0x238]
push dword [ebp + 8]
call fcn.0040b0fc
pop ecx
pop ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x240], 0x6640
jge 0x40e3cc
mov edx, dword [ebp - 0x340]
mov ecx, 0xac8118
call fcn.0042b974
jmp 0x40e3e8
or dword [ebp - 4], 0xffffffff
jmp 0x40e3f2
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x248], 0x2d71
jge 0x40e411
push dword [ebp - 0x2e8]
call fcn.004b69fa
pop ecx
jmp 0x40e42d
or dword [ebp - 4], 0xffffffff
jmp 0x40e437
lea ecx, [ebp - 0x3e8]
call fcn.004028cb
lea ecx, [ebp - 0x3b8]
call fcn.004029f3
mov eax, dword [ebp - 0x24]
jmp 0x40e454
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret