Function at 0x401aeb
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4af5bd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x9e0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x11c], 6
mov dword [ebp - 0x130], 0xd453606d
push 2
lea ecx, [ebp - 0x7bc]
call fcn.00409f19
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0x40], 0
jmp 0x401b4b
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x401b61
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x92c], 0x73eb905d
jmp 0x401b44
mov dword [ebp - 0x4d8], 0x120b
mov dword [ebp - 0x5e8], str.vjoamw_vijctd_gzq_evsqmy_vvaauzee_xblmmz
cmp dword [ebp - 0x4d8], 0x1332
jle 0x401c55
and dword [ebp - 0x128], 0
jmp 0x401b9b
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x3d5e
jge 0x401c4d
and dword [ebp - 0x1d8], 0
jmp 0x401bc1
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x39bc
jge 0x401c48
and dword [ebp - 0x1e0], 0
jmp 0x401be3
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x6bd1
jge 0x401c43
mov eax, dword [ebp - 0x1d8]
imul eax, dword [ebp - 0x1e0]
add eax, dword [ebp - 0x128]
cdq
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6b4], edx
push dword [ebp - 0x6b4]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x95c]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x95c]
call fcn.00409baf
jmp 0x401bd6
jmp 0x401bb4
jmp 0x401b8e
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [ebp - 0x40], 0
jmp 0x401c65
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x401c81
push dword [ebp - 0x40]
lea ecx, [ebp - 0x7bc]
call fcn.00409fe1
mov dword [eax], 5
jmp 0x401c5e
and dword [ebp - 4], 0
cmp dword [ebp - 0x4d8], 0xe7e
jge 0x401c9d
push dword [ebp - 0x5e8]
call fcn.00499a27
pop ecx
jmp 0x401cb9
or dword [ebp - 4], 0xffffffff
jmp 0x401cc3
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xbc], 0
jmp 0x401ce9
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x1b
jne 0x401d6b
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x401d0a
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x11c], 1
jmp 0x401d23
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xfffffff6
jge 0x401d66
mov dword [ebp - 0x130], 0
jmp 0x401d45
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xffffffec
jle 0x401d64
push 1
lea ecx, [ebp - 0x7bc]
call fcn.00409fe1
cmp dword [eax], 0
je 0x401d62
jmp 0x401d64
jmp 0x401d38
jmp 0x401d16
jmp 0x401cdc
lea ecx, [ebp - 0x7bc]
call fcn.00409fc5
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x1e8], 0xfffffff8
mov dword [ebp - 0x6a8], 0xf390f3bd
mov dword [ebp - 0x6b0], 8
mov dword [ebp - 0x220], 0
jmp 0x401db4
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x401dd0
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x88], 0xffffffff
jmp 0x401da7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0
jmp 0x401df0
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jg 0x402184
mov dword [ebp - 0x5b0], 0x3fe6
push 1
lea ecx, [ebp - 0x7d4]
call fcn.00409f19
mov dword [ebp - 0xc4], 0xb470
mov dword [ebp - 0x524], 0xfffffffe
push 1
lea ecx, [ebp - 0x7a4]
call fcn.00409f19
mov dword [ebp - 0x60], 0
jmp 0x401e42
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x401e5b
push dword [ebp - 0x60]
lea ecx, [ebp - 0x7d4]
call fcn.00409fe1
or dword [eax], 0xffffffff
jmp 0x401e3b
mov dword [ebp - 0x60], 0
jmp 0x401e6b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x401e87
push dword [ebp - 0x60]
lea ecx, [ebp - 0x7a4]
call fcn.00409fe1
mov dword [eax], 2
jmp 0x401e64
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x88], 0
je 0x402031
mov dword [ebp - 0x5a8], 9
mov dword [ebp - 0x690], 0xfffffff6
mov dword [ebp - 0x138], 0
jmp 0x401ec5
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jge 0x401ee1
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x740], 7
jmp 0x401eb8
mov esi, dword [ebp - 0x5a8]
push 0
lea ecx, [ebp - 0x7d4]
call fcn.00409fe1
mov dword [eax], esi
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], eax
jle 0x401f22
cmp dword [ebp - 0x48], 0
je 0x401f22
mov dword [ebp - 0x5a0], 1
jmp 0x401f29
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x5a0], eax
jg 0x401f40
mov dword [ebp - 0x238], 1
jmp 0x401f47
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x238]
mov dword [ebp + eax - 0x740], ecx
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x690], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0xf5e3
jge 0x401f85
mov dword [ebp - 0x698], 1
jmp 0x401f8c
and dword [ebp - 0x698], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0x3acb6d6
jle 0x401fab
mov dword [ebp - 0x6a0], 1
jmp 0x401fb2
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x8d0], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x828], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x8a8], eax
mov dword [ebp - 0x1e8], 0xffffffff
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x6a8]
cmp dword [ebp - 0x524], eax
jne 0x40200d
mov dword [ebp - 0x2c4], 1
jmp 0x402014
and dword [ebp - 0x2c4], 0
mov esi, dword [ebp - 0x2c4]
shl esi, 3
push 0
lea ecx, [ebp - 0x7a4]
call fcn.00409fe1
mov dword [eax], esi
jmp 0x402169
mov dword [ebp - 0x240], 0xfffffff7
mov dword [ebp - 0xc4], 0
jmp 0x402054
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x402087
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x402085
push 0xd3
push 0x11cd
push 0
push 0
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
jmp 0x402047
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x88]
mov dword [ebp - 0x838], eax
mov eax, 0xfffa
cmp eax, 0x364f
je 0x4020ce
mov dword [ebp - 0x52c], 1
jmp 0x4020d5
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0x52c], eax
jge 0x4020f8
cmp dword [ebp - 0x1e8], 0
je 0x4020f8
mov dword [ebp - 0x2cc], 1
jmp 0x4020ff
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0x2cc], eax
jl 0x402119
mov dword [ebp - 0x534], 1
jmp 0x402120
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0x534], eax
jl 0x40213a
mov dword [ebp - 0x2d4], 1
jmp 0x402141
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 1
jg 0x402156
mov dword [ebp - 0x53c], 1
jmp 0x40215d
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x240], eax
lea ecx, [ebp - 0x7a4]
call fcn.00409fc5
lea ecx, [ebp - 0x7d4]
call fcn.00409fc5
jmp 0x401de9
mov dword [ebp - 0x1a0], 6
mov dword [ebp - 0x1fc], 0xd453606d
push 2
lea ecx, [ebp - 0x8cc]
call fcn.00409f19
mov dword [ebp - 0x140], 0
jmp 0x4021be
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jge 0x4021e0
push dword [ebp - 0x140]
lea ecx, [ebp - 0x8cc]
call fcn.00409fe1
mov dword [eax], 0x862fd41e
jmp 0x4021b1
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x4021fc
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x402381
mov dword [ebp - 0x2dc], 0x4351
mov dword [ebp - 0x6bc], str.ghupn_yzrzbg_uuyopqj_gkxlxu_xjm_yrqdn_ogcvqwzba_qlist_iitsfahn_kbwadpfmv
cmp dword [ebp - 0x2dc], 0x45d0
jle 0x402336
and dword [ebp - 0x150], 0
jmp 0x40224c
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x1e46
jge 0x402336
and dword [ebp - 0x210], 0
jmp 0x402272
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x2835
jge 0x402331
and dword [ebp - 0x148], 0
jmp 0x402298
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x2a46
jge 0x40232c
and dword [ebp - 0x1f0], 0
jmp 0x4022be
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x53ec
jge 0x402327
mov eax, dword [ebp - 0x210]
cdq
idiv dword [ebp - 0x148]
imul edx, dword [ebp - 0x1f0]
add edx, dword [ebp - 0x150]
mov eax, edx
cdq
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], edx
push dword [ebp - 0x764]
push dword [ebp - 0x768]
lea ecx, [ebp - 0x9c8]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x9c8]
call fcn.00409baf
jmp 0x4022b1
jmp 0x40228b
jmp 0x402265
jmp 0x40223f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x2dc], 0x421a
jge 0x40235b
push dword [ebp - 0x6bc]
call fcn.00499a27
pop ecx
jmp 0x402377
or dword [ebp - 4], 0xffffffff
jmp 0x402381
lea ecx, [ebp - 0x8cc]
call fcn.00409fc5
mov dword [ebp - 0x70], 0xb1658084
mov dword [ebp - 0x90], 5
push 2
lea ecx, [ebp - 0x774]
call fcn.00409f19
mov dword [ebp - 0x230], 0
jmp 0x4023c3
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 2
jge 0x4023e5
push dword [ebp - 0x230]
lea ecx, [ebp - 0x774]
call fcn.00409fe1
mov dword [eax], 0x3938dd44
jmp 0x4023b6
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x70]
cmp eax, 0xffffffff
jb 0x4023fc
mov dword [ebp - 0x544], 1
jmp 0x402403
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x544]
add eax, 0x11f07b4b
mov dword [ebp - 0x90], eax
jne 0x402437
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x402432
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
jmp 0x40262e
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x248], 0x5a260df3
mov dword [ebp - 0x54c], 3
mov dword [ebp - 0x2fc], 7
mov dword [ebp - 0x70], 1
jmp 0x40246f
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x40262e
mov dword [ebp - 0x288], 0x8491f199
push dword [ebp - 0x70]
lea ecx, [ebp - 0x774]
call fcn.00409fe1
cmp dword [eax], 0xf82baef6
jbe 0x4024a5
mov dword [ebp - 0x56c], 1
jmp 0x4024ac
and dword [ebp - 0x56c], 0
imul esi, dword [ebp - 0x270], 5
push dword [ebp - 0x70]
lea ecx, [ebp - 0x774]
call fcn.00409fe1
cmp esi, dword [eax]
jg 0x4024d1
mov dword [ebp - 0x2e4], 1
jmp 0x4024d8
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 2
je 0x402505
mov dword [ebp - 0x2ec], 1
jmp 0x40250c
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x270]
cmp dword [ebp - 0x2ec], eax
jle 0x402526
mov dword [ebp - 0x554], 1
jmp 0x40252d
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x554], eax
jne 0x402547
mov dword [ebp - 0x2f4], 1
jmp 0x40254e
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 5
jg 0x40256f
cmp dword [ebp - 0x70], 0
jne 0x40256f
cmp dword [ebp - 0x270], 0
jne 0x40256f
and dword [ebp - 0x55c], 0
jmp 0x402579
mov dword [ebp - 0x55c], 1
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0xd5de
jg 0x40259d
mov dword [ebp - 0x564], 1
jmp 0x4025a4
and dword [ebp - 0x564], 0
imul eax, dword [ebp - 0x564], 0x6293
cmp eax, 0xe3b6f9b6
je 0x4025ca
cmp dword [ebp - 0x248], 0
je 0x4025ca
mov dword [ebp - 0x304], 1
jmp 0x4025d1
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
neg eax
cmp eax, dword [ebp - 0x90]
jl 0x4025ed
mov dword [ebp - 0x6d4], 1
jmp 0x4025f4
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x840], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x8e0], eax
mov eax, dword [ebp - 0x56c]
add eax, 0x7f5d1cc0
mov dword [ebp - 0x90], eax
jmp 0x402468
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x90], eax
lea ecx, [ebp - 0x774]
call fcn.00409fc5
push 2
lea ecx, [ebp - 0x7b0]
call fcn.00409f19
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x28], 0
jmp 0x402669
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jle 0x40288d
mov dword [ebp - 0x6ac], 0x9646b8d9
mov dword [ebp - 0x158], 0
jmp 0x402696
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 4
jge 0x4026b2
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x924], 0x4e6d
jmp 0x402689
mov byte [ebp - 0x99], 0
mov dword [ebp - 0x30c], 0x7f96
mov dword [ebp - 0x6dc], str.zht_anc_sczfdpv_eimzbwe
cmp dword [ebp - 0x30c], 0x8375
jle 0x40275f
push 0
call dword [sym.imp.USER32.dll_RegisterClassW]
and dword [ebp - 0x1f8], 0
jmp 0x4026fb
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x574c
jge 0x40275f
and dword [ebp - 0x160], 0
jmp 0x40271d
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x3f4b
jge 0x40275d
mov eax, dword [ebp - 0x1f8]
cdq
idiv dword [ebp - 0x160]
mov eax, edx
cdq
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], edx
push dword [ebp - 0x5ec]
push dword [ebp - 0x5f0]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x402710
jmp 0x4026ee
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x402770
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x30c], 0x7d56
jge 0x402793
mov edx, dword [ebp - 0x6dc]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x4027af
or dword [ebp - 4], 0xffffffff
jmp 0x4027b9
cmp dword [ebp - 0x28], 0
je 0x402875
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x924]
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x28], 0x7e4
jg 0x4027eb
mov dword [ebp - 0x31c], 1
jmp 0x4027f2
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jg 0x402806
mov dword [ebp - 0x574], 1
jmp 0x40280d
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x574], eax
jl 0x402824
mov dword [ebp - 0x314], 1
jmp 0x40282b
and dword [ebp - 0x314], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x924]
cmp dword [ebp - 0x314], eax
jl 0x40284c
mov dword [ebp - 0x57c], 1
jmp 0x402853
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
add eax, 0xffff
sub eax, dword [ebp - 0x28]
cmp dword [ebp - 0x31c], eax
jg 0x402875
mov dword [ebp - 0x584], 1
jmp 0x40287c
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x6ac], eax
jmp 0x402662
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x4028b6
push 0
push 0x8e9
push 0x2c0
push 0x1bf7
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0x874], 0x1928
mov byte [ebp - 0xb7], 0
mov dword [ebp - 0x58c], 0x3963
mov dword [ebp - 0x5fc], str.iocrrqse_wthz_fsttxsdrq_ftx_vusew_gkywebvs_ifknlqz_jjgslv_aidcyfhtd
cmp dword [ebp - 0x58c], 0x397c
jle 0x4029d0
and dword [ebp - 0x218], 0
jmp 0x40290b
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x226e
jge 0x4029d0
and dword [ebp - 0x168], 0
jmp 0x402931
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x6139
jge 0x4029cb
and dword [ebp - 0x200], 0
jmp 0x402957
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x3b92
jge 0x4029c6
and dword [ebp - 0x170], 0
jmp 0x402979
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x48c
jge 0x4029c4
mov eax, dword [ebp - 0x218]
or eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x200]
add ecx, dword [ebp - 0x170]
or eax, ecx
cdq
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], edx
push dword [ebp - 0x5f4]
push dword [ebp - 0x5f8]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x40296c
jmp 0x40294a
jmp 0x402924
jmp 0x4028fe
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x4029e9
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x58c], 0x393d
jge 0x402a0c
mov edx, dword [ebp - 0x5fc]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x402a28
or dword [ebp - 4], 0xffffffff
jmp 0x402a32
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x402a48
push 0
push 0
call dword [sym.imp.USER32.dll_CopyRect]
mov dword [ebp - 0x2c], 0
jmp 0x402a58
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x402a6e
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x944], 0x73eb905d
jmp 0x402a51
mov dword [ebp - 0x2c], 0
jmp 0x402a7e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x402a9a
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x7b0]
call fcn.00409fe1
mov dword [eax], 5
jmp 0x402a77
mov dword [ebp - 0x518], 5
push 4
lea ecx, [ebp - 0x5d8]
call fcn.00409f19
mov dword [ebp - 0xcc], 0x85a7
mov dword [ebp - 0xfc], 0xfffffffa
mov dword [ebp - 0x250], 0xdfbc43c
mov dword [ebp - 0x568], 0
mov dword [ebp - 0x50], 0
jmp 0x402ae9
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x402aff
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x598], 1
jmp 0x402ae2
mov dword [ebp - 0x50], 0
jmp 0x402b0f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x402b2b
push dword [ebp - 0x50]
lea ecx, [ebp - 0x5d8]
call fcn.00409fe1
mov dword [eax], 0xeefb6f65
jmp 0x402b08
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x598]
push 2
lea ecx, [ebp - 0x5d8]
call fcn.00409fe1
cmp esi, dword [eax]
je 0x402b55
mov dword [ebp - 0x334], 1
jmp 0x402b5c
and dword [ebp - 0x334], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x598]
cmp dword [ebp - 0x334], eax
je 0x402b7d
mov dword [ebp - 0x5a4], 1
jmp 0x402b84
and dword [ebp - 0x5a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x598]
cmp dword [ebp - 0x5a4], eax
je 0x402ba5
mov dword [ebp - 0x338], 1
jmp 0x402bac
and dword [ebp - 0x338], 0
mov dword [ebp - 0xfc], 0x4e5878ed
mov esi, dword [ebp - 0xfc]
push 2
lea ecx, [ebp - 0x5d8]
call fcn.00409fe1
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax]
cmp esi, ecx
jg 0x402be1
mov dword [ebp - 0x478], 1
jmp 0x402be8
and dword [ebp - 0x478], 0
push 3
lea ecx, [ebp - 0x5d8]
call fcn.00409fe1
mov ecx, dword [ebp - 0x478]
cmp ecx, dword [eax]
je 0x402c0b
mov dword [ebp - 0x340], 1
jmp 0x402c12
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x250]
dec eax
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
cmp eax, dword [ebp - 0x340]
jne 0x402c39
mov dword [ebp - 0x348], 1
jmp 0x402c40
and dword [ebp - 0x348], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x598]
neg eax
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x518]
cmp eax, dword [ebp - 0x348]
jg 0x402c6f
mov dword [ebp - 0x480], 1
jmp 0x402c76
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0x8694a219
je 0x402c8e
mov dword [ebp - 0x350], 1
jmp 0x402c95
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x350], eax
jge 0x402caf
mov dword [ebp - 0x278], 1
jmp 0x402cb6
and dword [ebp - 0x278], 0
push 2
lea ecx, [ebp - 0x5d8]
call fcn.00409fe1
mov ecx, dword [ebp - 0x278]
mov dword [eax], ecx
cmp dword [ebp - 0x278], 1
je 0x402ce0
mov dword [ebp - 0x6c0], 1
jmp 0x402ce7
and dword [ebp - 0x6c0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x598]
mov dword [ebp - 0x850], eax
cmp dword [ebp - 0x568], 0
jbe 0x402d0f
mov dword [ebp - 0x358], 1
jmp 0x402d16
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x568]
imul eax, dword [ebp - 0x358]
test eax, eax
je 0x402d4b
mov dword [ebp - 0x608], 0xcbde
mov dword [ebp - 0x748], 0x2ad21dd8
mov eax, dword [ebp - 0x608]
neg eax
mov dword [ebp - 0x748], eax
jmp 0x402d74
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x402d74
push 0
push 0x14c9
push 0x1931
push 0x790
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov dword [ebp - 0xfc], 0
jmp 0x402d8d
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xfffffff3
jg 0x402dd4
mov dword [ebp - 0xcc], 0
jmp 0x402daf
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jg 0x402dd2
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x5d8]
call fcn.00409fe1
cmp dword [eax], 0
je 0x402dd0
jmp 0x402dd2
jmp 0x402da2
jmp 0x402d80
lea ecx, [ebp - 0x5d8]
call fcn.00409fc5
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf4], 0
jmp 0x402e05
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x1b
jne 0x403b8c
push 2
lea ecx, [ebp - 0x8dc]
call fcn.00409f19
mov dword [ebp - 0x68], 0
jmp 0x402e2f
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x402e4b
push dword [ebp - 0x68]
lea ecx, [ebp - 0x8dc]
call fcn.00409fe1
mov dword [eax], 0xdf99ff60
jmp 0x402e28
mov dword [ebp - 0x68], 0
jmp 0x402e5b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x402e71
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x7f0], 0x667a876e
jmp 0x402e54
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x7f0], 0
jmp 0x402e9f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7f0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7f0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7f0], 1
jg 0x402ee2
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x402ee0
push 0
push 0
push 0x20d6
push 0
push 0x18ff
push 0
push 0
push 0x1535
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x402e84
lea ecx, [ebp - 0x8dc]
call fcn.00409fc5
mov byte [ebp - 0xb8], 0
mov dword [ebp - 0x24], 0x4914d2ed
mov dword [ebp - 0x1dc], 0x592c
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x290], 0x678e045
mov dword [ebp - 0x258], 0x27f44fb6
mov dword [ebp - 0x880], 0xb996340c
push 2
lea ecx, [ebp - 0x90c]
call fcn.00409f19
mov dword [ebp - 0x858], 0x6a4a
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x3b8], 0xd8d86f2f
mov dword [ebp - 0x488], 0x48a6
mov dword [ebp - 0x614], str.tjjdj_kfijsg_rmvsh
cmp dword [ebp - 0x488], 0x4b53
jle 0x40307d
and dword [ebp - 0x228], 0
jmp 0x402f92
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x472e
jge 0x40307d
and dword [ebp - 0x178], 0
jmp 0x402fb8
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x5bf0
jge 0x403078
and dword [ebp - 0x1d4], 0
jmp 0x402fde
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x343e
jge 0x403073
and dword [ebp - 0x180], 0
jmp 0x403004
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x3505
jge 0x40306e
mov eax, dword [ebp - 0x228]
cdq
idiv dword [ebp - 0x178]
mov ecx, dword [ebp - 0x1d4]
sar edx, cl
and edx, dword [ebp - 0x180]
mov eax, edx
cdq
mov dword [ebp - 0x604], eax
mov dword [ebp - 0x600], edx
push dword [ebp - 0x600]
push dword [ebp - 0x604]
lea ecx, [ebp - 0x974]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x974]
call fcn.00409baf
jmp 0x402ff7
jmp 0x402fd1
jmp 0x402fab
jmp 0x402f85
mov dword [ebp - 0x30], 0
jmp 0x40308d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x4030a9
push dword [ebp - 0x30]
lea ecx, [ebp - 0x90c]
call fcn.00409fe1
mov dword [eax], 0xfcf42757
jmp 0x403086
mov dword [ebp - 4], 8
cmp dword [ebp - 0x488], 0x45eb
jge 0x4030c8
push dword [ebp - 0x614]
call fcn.00499a27
pop ecx
jmp 0x4030e4
or dword [ebp - 4], 0xffffffff
jmp 0x4030ee
mov dword [ebp - 0x30], 0
jmp 0x4030fe
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x403114
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x980], 0xffffffff
jmp 0x4030f7
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x4031be
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jg 0x403141
mov dword [ebp - 0x360], 1
jmp 0x403148
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x360]
sub eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1dc]
lea eax, [eax + ecx - 0xed1e]
test eax, eax
jb 0x403174
cmp dword [ebp - 0x24], 0
je 0x403174
mov dword [ebp - 0x520], 1
jmp 0x40317b
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xab06
jle 0x40319f
mov dword [ebp - 0x368], 1
jmp 0x4031a6
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x368]
add eax, 5
jne 0x4031be
and dword [ebp - 0x490], 0
jmp 0x4031c8
mov dword [ebp - 0x490], 1
mov eax, dword [ebp - 0x1dc]
imul eax, dword [ebp - 0x490]
add eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x290], eax
je 0x40354c
mov dword [ebp - 0x4a8], 0xffffffff
mov dword [ebp - 0x18], 0x88af16de
mov dword [ebp - 0x860], 0xfffffffd
mov dword [ebp - 0x890], 0
mov dword [ebp - 0x878], 0x299b5f27
mov dword [ebp - 0x8b8], 8
mov dword [ebp - 0x884], 0
mov dword [ebp - 0x900], 0xfffffff9
mov dword [ebp - 0x7f8], 0xfffffffd
mov dword [ebp - 0x7fc], 0x6c132d45
push 4
lea ecx, [ebp - 0x8ec]
call fcn.00409f19
mov dword [ebp - 0x804], 0x86cc6b0c
mov dword [ebp - 0x80c], 2
mov dword [ebp - 0x814], 0xd1334807
mov dword [ebp - 0x81c], 2
mov dword [ebp - 0x824], 0
mov dword [ebp - 0x34], 0
jmp 0x403297
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x4032b3
push dword [ebp - 0x34]
lea ecx, [ebp - 0x8ec]
call fcn.00409fe1
mov dword [eax], 0x70c30f14
jmp 0x403290
mov dword [ebp - 0x34], 0
jmp 0x4032c3
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x4032d9
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x9f0], 7
jmp 0x4032bc
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x403411
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x258], eax
jne 0x4032fb
mov dword [ebp - 0x370], 1
jmp 0x403302
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x370]
neg eax
jne 0x40331e
cmp dword [ebp - 0x108], 0
jne 0x40331e
and dword [ebp - 0x590], 0
jmp 0x403328
mov dword [ebp - 0x590], 1
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x590], eax
jne 0x403348
cmp dword [ebp - 0x258], 0
jne 0x403348
and dword [ebp - 0x378], 0
jmp 0x403352
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x378], eax
je 0x403369
mov dword [ebp - 0x498], 1
jmp 0x403370
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x290]
imul eax, dword [ebp - 0x498]
cmp eax, dword [ebp - 0x18]
jle 0x40338e
mov dword [ebp - 0x380], 1
jmp 0x403395
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x380], eax
jle 0x4033ac
mov dword [ebp - 0x528], 1
jmp 0x4033b3
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 0x8b9abc19
jb 0x4033cb
mov dword [ebp - 0x388], 1
jmp 0x4033d2
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x388], eax
jge 0x4033ec
mov dword [ebp - 0x4a0], 1
jmp 0x4033f3
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 0x5f7f
jg 0x403411
cmp dword [ebp - 0x18], 0
je 0x403411
mov dword [ebp - 0x390], 1
jmp 0x403418
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x390], eax
jg 0x40342f
mov dword [ebp - 0x570], 1
jmp 0x403436
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x570]
dec eax
dec eax
cmp eax, dword [ebp - 0x108]
jl 0x403452
mov dword [ebp - 0x398], 1
jmp 0x403459
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x398], eax
jg 0x403470
mov dword [ebp - 0x3a0], 1
jmp 0x403477
and dword [ebp - 0x3a0], 0
mov dword [ebp - 0x4a8], 0x80bf
mov eax, dword [ebp - 0x4a8]
add eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x3a0]
sub ecx, 5
cmp eax, ecx
jg 0x4034a3
mov dword [ebp - 0x530], 1
jmp 0x4034aa
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x530], eax
jge 0x4034c1
mov dword [ebp - 0x3a8], 1
jmp 0x4034c8
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 1
ja 0x4034dd
mov dword [ebp - 0x4b0], 1
jmp 0x4034e4
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x4b0], eax
jg 0x4034fb
mov dword [ebp - 0x3b0], 1
jmp 0x403502
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x3b0], eax
je 0x403519
mov dword [ebp - 0x6d8], 1
jmp 0x403520
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x5b4]
dec eax
mov dword [ebp - 0x5b4], eax
lea ecx, [ebp - 0x8ec]
call fcn.00409fc5
jmp 0x4035b6
mov dword [ebp - 0x834], 0xfffffff7
push 1
lea ecx, [ebp - 0x8fc]
call fcn.00409f19
mov dword [ebp - 0x188], 0
jmp 0x40357c
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x40359e
push dword [ebp - 0x188]
lea ecx, [ebp - 0x8fc]
call fcn.00409fe1
mov dword [eax], 0x9ad35785
jmp 0x40356f
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
lea ecx, [ebp - 0x8fc]
call fcn.00409fc5
lea ecx, [ebp - 0x90c]
call fcn.00409fc5
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x4035d2
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4b8], 0x1989
mov dword [ebp - 0x620], str.kxclasjb_vykursjv_hkwasowfm_tbx_xooi_wvgvet_mlu_nyjsdw_omcbbjvja
cmp dword [ebp - 0x4b8], 0x1af6
jle 0x4036c0
and dword [ebp - 0x1ec], 0
jmp 0x40360c
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xe7e
jge 0x4036c0
and dword [ebp - 0x1e4], 0
jmp 0x403632
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x54f0
jge 0x4036bb
and dword [ebp - 0x190], 0
jmp 0x403654
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x439e
jge 0x4036b6
mov eax, dword [ebp - 0x1e4]
cdq
idiv dword [ebp - 0x190]
add edx, dword [ebp - 0x1ec]
mov eax, edx
cdq
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], edx
push dword [ebp - 0x60c]
push dword [ebp - 0x610]
lea ecx, [ebp - 0x9b0]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x9b0]
call fcn.00409baf
jmp 0x403647
jmp 0x403625
jmp 0x4035ff
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x4b8], 0x1766
jge 0x4036df
push dword [ebp - 0x620]
call fcn.00499a27
pop ecx
jmp 0x4036fb
or dword [ebp - 4], 0xffffffff
jmp 0x403705
mov dword [ebp - 0x280], 0xcefa9d19
mov dword [ebp - 0x3c0], 0xc14173bf
mov dword [ebp - 0x1f4], 0xffffffff
push 1
lea ecx, [ebp - 0x2a8]
call fcn.00409f19
mov dword [ebp - 0x260], 0x7104272b
mov dword [ebp - 0x198], 0
jmp 0x403753
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jge 0x403772
push dword [ebp - 0x198]
lea ecx, [ebp - 0x2a8]
call fcn.00409fe1
and dword [eax], 0
jmp 0x403746
mov dword [ebp - 0x3c0], 0xffffffff
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x280], eax
jge 0x4037b1
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x280], eax
jg 0x4037b1
mov dword [ebp - 0x538], 1
jmp 0x4037b8
and dword [ebp - 0x538], 0
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00409fe1
mov esi, eax
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00409fe1
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x4037e6
mov dword [ebp - 0x758], 1
jmp 0x4037ed
and dword [ebp - 0x758], 0
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00409fe1
mov esi, dword [ebp - 0x280]
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00409fe1
imul esi, dword [eax]
cmp dword [ebp - 0x538], esi
jg 0x403824
mov dword [ebp - 0x3c8], 1
jmp 0x40382b
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 0x89480189
jae 0x403843
mov dword [ebp - 0x268], 1
jmp 0x40384a
and dword [ebp - 0x268], 0
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00409fe1
mov ecx, dword [ebp - 0x268]
mov dword [eax], ecx
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
je 0x40397b
mov dword [ebp - 0x6d0], 0xfffffffe
mov dword [ebp - 0x6cc], 0xfffffffe
mov dword [ebp - 0x6c8], 0xfffffffe
mov dword [ebp - 0x6c4], 0xfffffffe
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x6d0], 0x2b94
jge 0x4038bf
mov dword [ebp - 0x4c0], 1
jmp 0x4038c6
and dword [ebp - 0x4c0], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x6d0], 0xc3ae
jl 0x4038e5
mov dword [ebp - 0x3d0], 1
jmp 0x4038ec
and dword [ebp - 0x3d0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6d0]
mov dword [ebp - 0x83c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6d0]
mov dword [ebp - 0x844], eax
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00409fe1
cmp dword [eax], 0xd0127420
jae 0x403933
mov dword [ebp - 0x578], 1
jmp 0x40393a
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x1f4], eax
mov esi, dword [ebp - 0x1f4]
push 0
lea ecx, [ebp - 0x2a8]
call fcn.00409fe1
mov dword [eax], esi
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x403979
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
jmp 0x4039c0
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x4039c0
push 0xf20
push 0x214b
push 0x340
push 0x1c8a
push 0xebb
push 0x1582
push 0x241c
push 0x1b9
push 0xaad
call dword [sym.imp.GDI32.dll_Arc]
lea ecx, [ebp - 0x2a8]
call fcn.00409fc5
mov dword [ebp - 0x1a0], 1
jmp 0x4039e4
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xfffffff6
jge 0x403b87
mov dword [ebp - 0x1fc], 0
jmp 0x403a0a
mov eax, dword [ebp - 0x1fc]
dec eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xffffffec
jle 0x403b82
mov dword [ebp - 0x7c], 0x743d837b
mov dword [ebp - 0x114], 0x2b9193c1
mov dword [ebp - 0x204], 0x8cb667f5
mov dword [ebp - 0x84c], 0x7ab6ce1a
mov dword [ebp - 0x1a8], 0
jmp 0x403a55
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 4
jge 0x403a71
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x93c], 0xfffffff7
jmp 0x403a48
mov eax, 0x1e6e2bfb
test eax, eax
je 0x403ac3
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jne 0x403aa7
cmp dword [ebp - 0x114], 0
jne 0x403aa7
and dword [ebp - 0x3d8], 0
jmp 0x403ab1
mov dword [ebp - 0x3d8], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x3d8], eax
jne 0x403ac3
cmp dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0xa147b80b
ja 0x403af0
mov dword [ebp - 0x4c8], 1
jmp 0x403af7
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 0xe0cd9796
je 0x403b13
xor eax, eax
je 0x403b13
mov dword [ebp - 0x3e0], 1
jmp 0x403b1a
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x3e0]
jne 0x403b31
mov dword [ebp - 0x540], 1
jmp 0x403b38
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x540]
sub ecx, dword [ebp - 0x7c]
sub ecx, dword [ebp - 0x7c]
add ecx, 0x69b4
imul eax, ecx
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x93c], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x204], eax
push 1
lea ecx, [ebp - 0x7b0]
call fcn.00409fe1
cmp dword [eax], 0
je 0x403b7d
jmp 0x403b82
jmp 0x4039fd
jmp 0x4039d7
jmp 0x402df8
lea ecx, [ebp - 0x7b0]
call fcn.00409fc5
mov dword [ebp - 0x6e0], 0x37ffeac8
mov dword [ebp - 0x638], 0x3e4f6f48
mov dword [ebp - 0x58], 0
jmp 0x403bbb
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x403bd1
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x5c0], 0x825e
jmp 0x403bb4
mov dword [ebp - 0x58], 0
jmp 0x403be1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x403bf7
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x628], 0x2305aba9
jmp 0x403bda
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x5c0], 0
je 0x404050
mov dword [ebp - 0xd4], 0x3a0f
mov dword [ebp - 0x28c], 0xe85fcb44
mov dword [ebp - 0x3e8], 0x4fe9
mov dword [ebp - 0x62c], str.lmn_urwlyxjlp_uxkvsmxj_nvt_meghgb_yay_krh
cmp dword [ebp - 0x3e8], 0x50c8
jle 0x403d1d
and dword [ebp - 0x1b0], 0
jmp 0x403c58
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x3121
jge 0x403d1d
and dword [ebp - 0x20c], 0
jmp 0x403c7e
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x276f
jge 0x403d18
and dword [ebp - 0x1b8], 0
jmp 0x403ca4
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x8b5
jge 0x403d13
and dword [ebp - 0x214], 0
jmp 0x403cc6
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x19c0
jge 0x403d11
mov eax, dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x1b8]
and ecx, dword [ebp - 0x214]
or eax, ecx
cdq
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x618], edx
push dword [ebp - 0x618]
push dword [ebp - 0x61c]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x403cb9
jmp 0x403c97
jmp 0x403c71
jmp 0x403c4b
mov dword [ebp - 0x418], 8
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x3e8], 0x4fd9
jge 0x403d4a
mov edx, dword [ebp - 0x62c]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x403d66
or dword [ebp - 4], 0xffffffff
jmp 0x403d70
mov dword [ebp - 0x1c0], 0
jmp 0x403d89
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x403da5
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x78c], 0
jmp 0x403d7c
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x403ff6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x5c0], 0xaab21a84
jne 0x403de9
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x5c0], 0
jne 0x403de9
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x5c0], 0
jne 0x403de9
and dword [ebp - 0x4d0], 0
jmp 0x403df3
mov dword [ebp - 0x4d0], 1
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x4d0], eax
jle 0x403e0d
mov dword [ebp - 0x3f0], 1
jmp 0x403e14
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x3f0], eax
je 0x403e2e
mov dword [ebp - 0x59c], 1
jmp 0x403e35
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x59c]
jge 0x403e4f
mov dword [ebp - 0x3f8], 1
jmp 0x403e56
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x5c0]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x5c0]
jge 0x403e8f
mov dword [ebp - 0x2b8], 1
jmp 0x403e96
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x2b8], eax
jle 0x403ec0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x628], 0
je 0x403ec0
mov dword [ebp - 0x400], 1
jmp 0x403ec7
and dword [ebp - 0x400], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78c]
add eax, dword [ebp - 0x400]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x628]
je 0x403ef5
mov dword [ebp - 0x548], 1
jmp 0x403efc
and dword [ebp - 0x548], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x78c]
cmp dword [ebp - 0x548], eax
jg 0x403f2a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x628], 0
jne 0x403f2a
and dword [ebp - 0x408], 0
jmp 0x403f34
mov dword [ebp - 0x408], 1
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x5c0]
sub ecx, dword [ebp - 0x408]
mov eax, dword [ebp + eax - 0x5c0]
imul eax, ecx
mov dword [ebp - 0x4e0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4e0]
mov dword [ebp + eax - 0x78c], ecx
cmp dword [ebp - 0x4e0], 0
je 0x403f8c
mov eax, 0xffff
test eax, eax
je 0x403f8c
mov dword [ebp - 0x410], 1
jmp 0x403f93
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x410], eax
jl 0x403fb3
cmp dword [ebp - 0x28c], 0
jne 0x403fb3
and dword [ebp - 0x580], 0
jmp 0x403fbd
mov dword [ebp - 0x580], 1
mov eax, dword [ebp - 0x580]
sub eax, 0x3de76903
mov dword [ebp - 0x6e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x78c]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0
je 0x403ff6
mov dword [ebp - 0x4e8], 1
jmp 0x403ffd
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x4e8], eax
jl 0x40401c
or eax, 0xffffffff
je 0x40401c
mov dword [ebp - 0x420], 1
jmp 0x404023
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x420], 0xc42fa43d
jb 0x40403b
mov dword [ebp - 0x550], 1
jmp 0x404042
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x638], eax
jmp 0x40408f
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x40408f
push 0x159f
push 0
push 0xa1f
push 0x1dac
push 0x1241
push 0
push 0xfab
push 0x212f
push 0x1685
call dword [sym.imp.USER32.dll_DrawIconEx]
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x4040a9
push 0
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
mov dword [ebp - 0x104], 0xffffffff
push 2
lea ecx, [ebp - 0x2b4]
call fcn.00409f19
mov dword [ebp - 0x440], 0xfffffffd
mov dword [ebp - 0x21c], 0
jmp 0x4040e3
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x404105
push dword [ebp - 0x21c]
lea ecx, [ebp - 0x2b4]
call fcn.00409fe1
mov dword [eax], 0x6432a276
jmp 0x4040d6
mov dword [ebp - 0x104], 0xfffffff9
jmp 0x40411e
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xf
jl 0x4044e6
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x588], 0xfffd
mov dword [ebp - 0x450], 0x3766
mov dword [ebp - 0x644], str.sozohbfdv_jsyye_bubznw_gwd_npkbuoi_bta
cmp dword [ebp - 0x450], 0x3a74
jle 0x404208
and dword [ebp - 0x1c8], 0
jmp 0x404176
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x2789
jge 0x404208
and dword [ebp - 0x224], 0
jmp 0x40419c
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x6c0a
jge 0x404203
and dword [ebp - 0x1d0], 0
jmp 0x4041be
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x740a
jge 0x404201
mov eax, dword [ebp - 0x1c8]
sub eax, dword [ebp - 0x224]
and eax, dword [ebp - 0x1d0]
cdq
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x630], edx
push dword [ebp - 0x630]
push dword [ebp - 0x634]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x4041b1
jmp 0x40418f
jmp 0x404169
mov dword [ebp - 0x1c], 1
jmp 0x404218
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x40448b
mov dword [ebp - 0x38], 0
push 3
lea ecx, [ebp - 0x6ec]
call fcn.00409f19
mov dword [ebp - 0x22c], 0
jmp 0x40424f
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 3
jge 0x40426e
push dword [ebp - 0x22c]
lea ecx, [ebp - 0x6ec]
call fcn.00409fe1
or dword [eax], 0xffffffff
jmp 0x404242
mov dword [ebp - 0x38], 1
jmp 0x40427e
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x404459
mov dword [ebp - 0x4f0], 0xac9d73df
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.00409fe1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.00409fe1
cmp dword [eax], 0xfffffff7
je 0x4042c5
cmp dword [ebp - 0x1c], 0
je 0x4042c5
mov dword [ebp - 0x428], 1
jmp 0x4042cc
and dword [ebp - 0x428], 0
mov esi, dword [ebp - 0x428]
sub esi, dword [ebp - 0x104]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.00409fe1
cmp esi, dword [eax]
jle 0x4042f6
mov dword [ebp - 0x430], 1
jmp 0x4042fd
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x4f0]
cmp eax, dword [ebp - 0x430]
jle 0x404320
mov dword [ebp - 0x5ac], 1
jmp 0x404327
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x5ac]
jg 0x40433e
mov dword [ebp - 0x438], 1
jmp 0x404345
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x438]
cmp eax, dword [ebp - 0x104]
je 0x404363
mov dword [ebp - 0x4f8], 1
jmp 0x40436a
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0
je 0x40439e
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.00409fe1
cmp dword [eax], 0
je 0x40439e
mov dword [ebp - 0x558], 1
jmp 0x4043a5
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 1
je 0x4043ba
mov dword [ebp - 0x448], 1
jmp 0x4043c1
and dword [ebp - 0x448], 0
push 1
lea ecx, [ebp - 0x2b4]
call fcn.00409fe1
mov ecx, dword [ebp - 0x448]
cmp ecx, dword [eax]
jg 0x4043e4
mov dword [ebp - 0x750], 1
jmp 0x4043eb
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x870], eax
push 1
lea ecx, [ebp - 0x2b4]
call fcn.00409fe1
push 1
lea ecx, [ebp - 0x2b4]
call fcn.00409fe1
cmp dword [ebp - 0x38], 0
jne 0x404435
cmp dword [ebp - 0x38], 0
jne 0x404435
mov eax, 0xffff
test eax, eax
jne 0x404435
and dword [ebp - 0x500], 0
jmp 0x40443f
mov dword [ebp - 0x500], 1
push 1
lea ecx, [ebp - 0x6ec]
call fcn.00409fe1
mov ecx, dword [ebp - 0x500]
mov dword [eax], ecx
jmp 0x404277
push 1
lea ecx, [ebp - 0x6ec]
call fcn.00409fe1
cmp dword [eax], 0
je 0x40447b
lea ecx, [ebp - 0x6ec]
call fcn.00409fc5
jmp 0x404211
lea ecx, [ebp - 0x6ec]
call fcn.00409fc5
jmp 0x404211
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x450], 0x36f0
jge 0x4044ae
mov edx, dword [ebp - 0x644]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x4044ca
or dword [ebp - 4], 0xffffffff
jmp 0x4044d4
mov eax, dword [ebp - 0x588]
dec eax
mov dword [ebp - 0x588], eax
jmp 0x404111
lea ecx, [ebp - 0x2b4]
call fcn.00409fc5
mov dword [ebp - 0x6f0], 0x37ffeac8
mov dword [ebp - 0x650], 0x3e4f6f48
mov dword [ebp - 0x3c], 0
jmp 0x404515
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x40452b
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x330], 0x825e
jmp 0x40450e
mov dword [ebp - 0x3c], 0
jmp 0x40453b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x404551
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x640], 0x2305aba9
jmp 0x404534
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x330], 0
je 0x404862
mov dword [ebp - 0xdc], 0x3a0f
mov dword [ebp - 0x23c], 0xe85fcb44
mov dword [ebp - 0x34c], 8
mov dword [ebp - 0x234], 0
jmp 0x40459b
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jge 0x4045b7
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x780], 0
jmp 0x40458e
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x404808
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x330], 0xaab21a84
jne 0x4045fb
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x330], 0
jne 0x4045fb
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x330], 0
jne 0x4045fb
and dword [ebp - 0x458], 0
jmp 0x404605
mov dword [ebp - 0x458], 1
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x458], eax
jle 0x40461f
mov dword [ebp - 0x508], 1
jmp 0x404626
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x508], eax
je 0x404640
mov dword [ebp - 0x460], 1
jmp 0x404647
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x460]
jge 0x404661
mov dword [ebp - 0x560], 1
jmp 0x404668
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x330]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x330]
jge 0x4046a1
mov dword [ebp - 0x468], 1
jmp 0x4046a8
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x468], eax
jle 0x4046d2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x640], 0
je 0x4046d2
mov dword [ebp - 0x510], 1
jmp 0x4046d9
and dword [ebp - 0x510], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x780]
add eax, dword [ebp - 0x510]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x640]
je 0x404707
mov dword [ebp - 0x470], 1
jmp 0x40470e
and dword [ebp - 0x470], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x780]
cmp dword [ebp - 0x470], eax
jg 0x40473c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x640], 0
jne 0x40473c
and dword [ebp - 0x324], 0
jmp 0x404746
mov dword [ebp - 0x324], 1
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x330]
sub ecx, dword [ebp - 0x324]
mov eax, dword [ebp + eax - 0x330]
imul eax, ecx
mov dword [ebp - 0x320], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x320]
mov dword [ebp + eax - 0x780], ecx
cmp dword [ebp - 0x320], 0
je 0x40479e
mov eax, 0xffff
test eax, eax
je 0x40479e
mov dword [ebp - 0x33c], 1
jmp 0x4047a5
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x33c], eax
jl 0x4047c5
cmp dword [ebp - 0x23c], 0
jne 0x4047c5
and dword [ebp - 0x344], 0
jmp 0x4047cf
mov dword [ebp - 0x344], 1
mov eax, dword [ebp - 0x344]
sub eax, 0x3de76903
mov dword [ebp - 0x6f0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x780]
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0
je 0x404808
mov dword [ebp - 0x354], 1
jmp 0x40480f
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x354], eax
jl 0x40482e
or eax, 0xffffffff
je 0x40482e
mov dword [ebp - 0x35c], 1
jmp 0x404835
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 0xc42fa43d
jb 0x40484d
mov dword [ebp - 0x364], 1
jmp 0x404854
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x650], eax
jmp 0x4048a1
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x4048a1
push 0x159f
push 0
push 0xa1f
push 0x1dac
push 0x1241
push 0
push 0xfab
push 0x212f
push 0x1685
call dword [sym.imp.USER32.dll_DrawIconEx]
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x4048bb
push 0
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
mov dword [ebp - 0x120], 0x7a98815c
mov dword [ebp - 0x208], 1
mov dword [ebp - 0x244], 0xfc4b03e3
mov dword [ebp - 0x44], 0
jmp 0x4048e9
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x4048ff
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x36c], 0x3dda37bb
jmp 0x4048e2
mov dword [ebp - 0x44], 0
jmp 0x40490f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x404925
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x86c], 0xfffffffd
jmp 0x404908
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x244], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x244]
mov dword [ebp + eax - 0x36c], ecx
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x8a4], eax
xor eax, eax
sub eax, 0xe82c
mov dword [ebp - 0x208], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x36c]
cmp dword [ebp - 0x208], eax
jg 0x40498a
mov dword [ebp - 0x760], 1
jmp 0x404991
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x120], 0x4365
jg 0x4049bb
mov dword [ebp - 0x374], 1
jmp 0x4049c2
and dword [ebp - 0x374], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x374]
mov dword [ebp + eax - 0x86c], ecx
mov dword [ebp - 0x100], 0xffffffff
push 2
lea ecx, [ebp - 0x29c]
call fcn.00409f19
mov dword [ebp - 0x3bc], 0xfffffffd
mov dword [ebp - 0x124], 0
jmp 0x404a0f
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x404a31
push dword [ebp - 0x124]
lea ecx, [ebp - 0x29c]
call fcn.00409fe1
mov dword [eax], 0x6432a276
jmp 0x404a02
mov dword [ebp - 0x100], 0xfffffff9
jmp 0x404a4a
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xf
jl 0x404f49
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x3dc], 0xfffd
mov dword [ebp - 0x20], 1
jmp 0x404a78
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x404f37
mov dword [ebp - 0x4c], 0
push 3
lea ecx, [ebp - 0x6fc]
call fcn.00409f19
mov dword [ebp - 0x37c], 0x52d9
mov dword [ebp - 0x65c], str.bhkg_bts_sdaia_fax_tgphq_por
cmp dword [ebp - 0x37c], 0x53f2
jle 0x404b86
and dword [ebp - 0x12c], 0
jmp 0x404ad0
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x2711
jge 0x404b86
and dword [ebp - 0x134], 0
jmp 0x404af6
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x3932
jge 0x404b81
and dword [ebp - 0x13c], 0
jmp 0x404b18
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x4364
jge 0x404b7c
mov eax, dword [ebp - 0x12c]
cdq
idiv dword [ebp - 0x134]
mov ecx, dword [ebp - 0x13c]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x648], edx
push dword [ebp - 0x648]
push dword [ebp - 0x64c]
lea ecx, [ebp - 0x9e0]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x9e0]
call fcn.00409baf
jmp 0x404b0b
jmp 0x404ae9
jmp 0x404ac3
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x37c], 0x5171
jge 0x404ba5
push dword [ebp - 0x65c]
call fcn.00499a27
pop ecx
jmp 0x404bc1
or dword [ebp - 4], 0xffffffff
jmp 0x404bcb
mov dword [ebp - 0x384], 0x4ac0
mov dword [ebp - 0x700], str.hkcfycbl_pbo_ldj_mxtp_mzzzwjowg_xsos_zafizwa_vzjb_udvyuj
cmp dword [ebp - 0x384], 0x4d38
jle 0x404c99
and dword [ebp - 0x154], 0
jmp 0x404c05
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x785d
jge 0x404c99
and dword [ebp - 0x144], 0
jmp 0x404c2b
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xf1b
jge 0x404c94
and dword [ebp - 0x14c], 0
jmp 0x404c4d
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0xf3d
jge 0x404c92
mov ecx, dword [ebp - 0x144]
sub ecx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x154]
shl eax, cl
cdq
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], edx
push dword [ebp - 0x654]
push dword [ebp - 0x658]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x404c40
jmp 0x404c1e
jmp 0x404bf8
mov dword [ebp - 0x15c], 0
jmp 0x404cb2
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jge 0x404cd1
push dword [ebp - 0x15c]
lea ecx, [ebp - 0x6fc]
call fcn.00409fe1
or dword [eax], 0xffffffff
jmp 0x404ca5
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x384], 0x474e
jge 0x404cf4
mov edx, dword [ebp - 0x700]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x404d10
or dword [ebp - 4], 0xffffffff
jmp 0x404d1a
mov dword [ebp - 0x4c], 1
jmp 0x404d2a
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x404f05
mov dword [ebp - 0x394], 0xac9d73df
push dword [ebp - 0x20]
lea ecx, [ebp - 0x29c]
call fcn.00409fe1
push dword [ebp - 0x20]
lea ecx, [ebp - 0x29c]
call fcn.00409fe1
cmp dword [eax], 0xfffffff7
je 0x404d71
cmp dword [ebp - 0x20], 0
je 0x404d71
mov dword [ebp - 0x38c], 1
jmp 0x404d78
and dword [ebp - 0x38c], 0
mov esi, dword [ebp - 0x38c]
sub esi, dword [ebp - 0x100]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x29c]
call fcn.00409fe1
cmp esi, dword [eax]
jle 0x404da2
mov dword [ebp - 0x39c], 1
jmp 0x404da9
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
cmp eax, dword [ebp - 0x39c]
jle 0x404dcc
mov dword [ebp - 0x3a4], 1
jmp 0x404dd3
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x3a4]
jg 0x404dea
mov dword [ebp - 0x3ac], 1
jmp 0x404df1
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x3ac]
cmp eax, dword [ebp - 0x100]
je 0x404e0f
mov dword [ebp - 0x3b4], 1
jmp 0x404e16
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0
je 0x404e4a
push dword [ebp - 0x20]
lea ecx, [ebp - 0x29c]
call fcn.00409fe1
cmp dword [eax], 0
je 0x404e4a
mov dword [ebp - 0x3c4], 1
jmp 0x404e51
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 1
je 0x404e66
mov dword [ebp - 0x3cc], 1
jmp 0x404e6d
and dword [ebp - 0x3cc], 0
push 1
lea ecx, [ebp - 0x29c]
call fcn.00409fe1
mov ecx, dword [ebp - 0x3cc]
cmp ecx, dword [eax]
jg 0x404e90
mov dword [ebp - 0x668], 1
jmp 0x404e97
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x8b4], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x7f4], eax
push 1
lea ecx, [ebp - 0x29c]
call fcn.00409fe1
push 1
lea ecx, [ebp - 0x29c]
call fcn.00409fe1
cmp dword [ebp - 0x4c], 0
jne 0x404ee1
cmp dword [ebp - 0x4c], 0
jne 0x404ee1
mov eax, 0xffff
test eax, eax
jne 0x404ee1
and dword [ebp - 0x3d4], 0
jmp 0x404eeb
mov dword [ebp - 0x3d4], 1
push 1
lea ecx, [ebp - 0x6fc]
call fcn.00409fe1
mov ecx, dword [ebp - 0x3d4]
mov dword [eax], ecx
jmp 0x404d23
push 1
lea ecx, [ebp - 0x6fc]
call fcn.00409fe1
cmp dword [eax], 0
je 0x404f27
lea ecx, [ebp - 0x6fc]
call fcn.00409fc5
jmp 0x404a71
lea ecx, [ebp - 0x6fc]
call fcn.00409fc5
jmp 0x404a71
mov eax, dword [ebp - 0x3dc]
dec eax
mov dword [ebp - 0x3dc], eax
jmp 0x404a3d
lea ecx, [ebp - 0x29c]
call fcn.00409fc5
push 3
lea ecx, [ebp - 0x70c]
call fcn.00409f19
mov dword [ebp - 0x98], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x3fc], 9
push 4
lea ecx, [ebp - 0x7c8]
call fcn.00409f19
mov dword [ebp - 0x54], 0
jmp 0x404f9c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x404fb8
push dword [ebp - 0x54]
lea ecx, [ebp - 0x70c]
call fcn.00409fe1
mov dword [eax], 0x4778
jmp 0x404f95
mov dword [ebp - 0x54], 0
jmp 0x404fc8
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x404fe4
push dword [ebp - 0x54]
lea ecx, [ebp - 0x7c8]
call fcn.00409fe1
mov dword [eax], 0x7ddbf4df
jmp 0x404fc1
mov dword [ebp - 0x98], 0
jmp 0x404ffd
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jg 0x405305
mov dword [ebp - 0xe4], 0x70ade216
mov dword [ebp - 0x414], 0x5291
mov dword [ebp - 0x674], str.nvywgqb_kpjeqr_jybhhz_rhv_ddwsbplr_lwuemjla
cmp dword [ebp - 0x414], 0x5359
jle 0x405113
and dword [ebp - 0x164], 0
jmp 0x40504e
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x1d41
jge 0x405113
and dword [ebp - 0x16c], 0
jmp 0x405074
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x3b80
jge 0x40510e
and dword [ebp - 0x174], 0
jmp 0x40509a
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x6682
jge 0x405109
and dword [ebp - 0x17c], 0
jmp 0x4050bc
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x86d
jge 0x405107
mov eax, dword [ebp - 0x164]
sub eax, dword [ebp - 0x16c]
add eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x17c]
sar eax, cl
cdq
mov dword [ebp - 0x664], eax
mov dword [ebp - 0x660], edx
push dword [ebp - 0x660]
push dword [ebp - 0x664]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x4050af
jmp 0x40508d
jmp 0x405067
jmp 0x405041
mov dword [ebp - 0xe4], 0
jmp 0x40512c
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jg 0x4052b7
mov dword [ebp - 0x744], 0x2dd78f4f
push dword [ebp - 0x98]
lea ecx, [ebp - 0x70c]
call fcn.00409fe1
mov eax, dword [eax]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf8], 0
jmp 0x405175
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xfffffff7
jg 0x4052b2
mov dword [ebp - 0x404], 0xfffffffd
mov dword [ebp - 0x24c], 0xac3d
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0xe4], 3
jne 0x4051c3
mov dword [ebp - 0x3e4], 1
jmp 0x4051ca
and dword [ebp - 0x3e4], 0
push dword [ebp - 0x98]
lea ecx, [ebp - 0x70c]
call fcn.00409fe1
mov ecx, dword [ebp - 0x3e4]
cmp ecx, dword [eax]
jg 0x4051f1
mov dword [ebp - 0x3ec], 1
jmp 0x4051f8
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0xe4]
add eax, 0x336d
imul eax, dword [ebp - 0x24c]
add eax, dword [ebp - 0x3ec]
cmp eax, dword [ebp - 0xf8]
jl 0x405231
mov dword [ebp - 0x3f4], 1
jmp 0x405238
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x3fc], eax
mov esi, dword [ebp - 0x3fc]
neg esi
push dword [ebp - 0x98]
lea ecx, [ebp - 0x70c]
call fcn.00409fe1
cmp esi, dword [eax]
jl 0x40526d
mov dword [ebp - 0x40c], 1
jmp 0x405274
and dword [ebp - 0x40c], 0
mov esi, dword [ebp - 0x404]
add esi, dword [ebp - 0x40c]
push 2
lea ecx, [ebp - 0x7c8]
call fcn.00409fe1
mov dword [eax], esi
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x4052ad
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x405168
jmp 0x40511f
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x414], 0x50ac
jge 0x4052da
mov edx, dword [ebp - 0x674]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x4052f6
or dword [ebp - 4], 0xffffffff
jmp 0x405300
jmp 0x404ff0
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x405323
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
lea ecx, [ebp - 0x7c8]
call fcn.00409fc5
lea ecx, [ebp - 0x70c]
call fcn.00409fc5
movzx eax, byte [0xae4554]
test eax, eax
je 0x405357
mov esi, 0x518510
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x4065fe
mov dword [ebp - 0x88c], 0x518510
mov dword [ebp - 0x18c], 0x7a98815c
mov dword [ebp - 0x184], 1
mov dword [ebp - 0x254], 0xfc4b03e3
mov dword [ebp - 0x5c], 0
jmp 0x40538f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x4053a5
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x41c], 0x3dda37bb
jmp 0x405388
mov dword [ebp - 0x5c], 0
jmp 0x4053b5
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x4053cb
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x89c], 0xfffffffd
jmp 0x4053ae
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x254], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x254]
mov dword [ebp + eax - 0x41c], ecx
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x800], eax
xor eax, eax
sub eax, 0xe82c
mov dword [ebp - 0x184], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x41c]
cmp dword [ebp - 0x184], eax
jg 0x405430
mov dword [ebp - 0x710], 1
jmp 0x405437
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x18c], 0x4365
jg 0x405461
mov dword [ebp - 0x424], 1
jmp 0x405468
and dword [ebp - 0x424], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x424]
mov dword [ebp + eax - 0x89c], ecx
mov dword [ebp - 0x808], 0x518514
push 1
lea ecx, [ebp - 0x71c]
call fcn.00409f19
mov dword [ebp - 0xec], 0xd4f2887c
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0x42c], 0x2df3d37a
mov dword [ebp - 0x25c], 2
push 1
lea ecx, [ebp - 0x5e4]
call fcn.00409f19
mov dword [ebp - 0x45c], 0x99da9727
mov dword [ebp - 0x64], 0
jmp 0x4054e1
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x4054fd
push dword [ebp - 0x64]
lea ecx, [ebp - 0x71c]
call fcn.00409fe1
mov dword [eax], 0xdf37
jmp 0x4054da
mov dword [ebp - 0x64], 0
jmp 0x40550d
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x405526
push dword [ebp - 0x64]
lea ecx, [ebp - 0x5e4]
call fcn.00409fe1
or dword [eax], 0xffffffff
jmp 0x405506
cmp dword [ebp - 0xc0], 0x46c2
jl 0x40553e
mov dword [ebp - 0x434], 1
jmp 0x405545
and dword [ebp - 0x434], 0
imul eax, dword [ebp - 0xc0], 0xafe3
mov dword [ebp - 0x42c], eax
mov esi, dword [ebp - 0x42c]
push 0
lea ecx, [ebp - 0x71c]
call fcn.00409fe1
mov ecx, dword [ebp - 0x434]
imul ecx, dword [eax]
cmp esi, ecx
jne 0x405581
mov dword [ebp - 0x43c], 1
jmp 0x405588
and dword [ebp - 0x43c], 0
push 0
lea ecx, [ebp - 0x71c]
call fcn.00409fe1
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x43c]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x444], eax
push 0
lea ecx, [ebp - 0x5e4]
call fcn.00409fe1
mov ecx, dword [ebp - 0x444]
mov dword [eax], ecx
cmp dword [ebp - 0x444], 0
je 0x405673
mov dword [ebp - 0xec], 0
jmp 0x4055f7
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xffffffe2
jne 0x40565e
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x40561a
push 0
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [ebp - 0xc0], 0
jmp 0x405633
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xe
jle 0x40565c
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x40565a
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x405626
jmp 0x4055ea
push 0
lea ecx, [ebp - 0x5e4]
call fcn.00409fe1
mov dword [eax], 1
jmp 0x40568d
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x40568d
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov eax, 0xb5d1cb6a
test eax, eax
je 0x40577a
push 0
lea ecx, [ebp - 0x5e4]
call fcn.00409fe1
mov esi, eax
push 0
lea ecx, [ebp - 0x5e4]
call fcn.00409fe1
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x4056c8
mov dword [ebp - 0x44c], 1
jmp 0x4056cf
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xffffffff
jbe 0x4056e4
mov dword [ebp - 0x454], 1
jmp 0x4056eb
and dword [ebp - 0x454], 0
mov esi, dword [ebp - 0x45c]
sub esi, dword [ebp - 0x454]
push 0
lea ecx, [ebp - 0x71c]
call fcn.00409fe1
sub esi, dword [eax]
cmp esi, dword [ebp - 0x25c]
jge 0x40571a
mov dword [ebp - 0x464], 1
jmp 0x405721
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x45c]
imul eax, dword [ebp - 0x464]
cmp eax, 1
jne 0x40573f
mov dword [ebp - 0x46c], 1
jmp 0x405746
and dword [ebp - 0x46c], 0
cmp dword [ebp - 0x46c], 8
jne 0x40575b
mov dword [ebp - 0x474], 1
jmp 0x405762
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0xfffe
jb 0x40577a
mov dword [ebp - 0x47c], 1
jmp 0x405781
and dword [ebp - 0x47c], 0
imul eax, dword [ebp - 0x47c], 5
test eax, eax
jae 0x40579a
xor eax, eax
inc eax
jne 0x40579a
and dword [ebp - 0x484], 0
jmp 0x4057a4
mov dword [ebp - 0x484], 1
push 0
lea ecx, [ebp - 0x5e4]
call fcn.00409fe1
mov ecx, dword [ebp - 0x484]
mov dword [eax], ecx
lea ecx, [ebp - 0x5e4]
call fcn.00409fc5
lea ecx, [ebp - 0x71c]
call fcn.00409fc5
push 3
lea ecx, [ebp - 0x72c]
call fcn.00409f19
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x4a4], 9
push 4
lea ecx, [ebp - 0x7e0]
call fcn.00409f19
mov dword [ebp - 0x6c], 0
jmp 0x405817
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x405833
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x72c]
call fcn.00409fe1
mov dword [eax], 0x4778
jmp 0x405810
mov dword [ebp - 0x6c], 0
jmp 0x405843
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x40585f
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x7e0]
call fcn.00409fe1
mov dword [eax], 0x7ddbf4df
jmp 0x40583c
mov dword [ebp - 0xa0], 0
jmp 0x405878
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jg 0x405a38
mov dword [ebp - 0xc8], 0x70ade216
mov dword [ebp - 0xc8], 0
jmp 0x4058a8
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jg 0x405a33
mov dword [ebp - 0x680], 0x2dd78f4f
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x72c]
call fcn.00409fe1
mov eax, dword [eax]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd0], 0
jmp 0x4058f1
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xfffffff7
jg 0x405a2e
mov dword [ebp - 0x4ac], 0xfffffffd
mov dword [ebp - 0x264], 0xac3d
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x894], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0xc8], 3
jne 0x40593f
mov dword [ebp - 0x48c], 1
jmp 0x405946
and dword [ebp - 0x48c], 0
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x72c]
call fcn.00409fe1
mov ecx, dword [ebp - 0x48c]
cmp ecx, dword [eax]
jg 0x40596d
mov dword [ebp - 0x494], 1
jmp 0x405974
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0xc8]
add eax, 0x336d
imul eax, dword [ebp - 0x264]
add eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0xd0]
jl 0x4059ad
mov dword [ebp - 0x49c], 1
jmp 0x4059b4
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x4a4], eax
mov esi, dword [ebp - 0x4a4]
neg esi
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x72c]
call fcn.00409fe1
cmp esi, dword [eax]
jl 0x4059e9
mov dword [ebp - 0x4b4], 1
jmp 0x4059f0
and dword [ebp - 0x4b4], 0
mov esi, dword [ebp - 0x4ac]
add esi, dword [ebp - 0x4b4]
push 2
lea ecx, [ebp - 0x7e0]
call fcn.00409fe1
mov dword [eax], esi
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x405a29
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x4058e4
jmp 0x40589b
jmp 0x40586b
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x405a56
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
lea ecx, [ebp - 0x7e0]
call fcn.00409fc5
lea ecx, [ebp - 0x72c]
call fcn.00409fc5
mov dword [ebp - 0x10c], 0xffffffff
mov dword [ebp - 0x10c], 0xfffffffd
jmp 0x405a8f
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x1b
jg 0x405ae9
mov dword [ebp - 0xd8], 0xe713a473
mov dword [ebp - 0xd8], 0x15
jmp 0x405abb
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xffffffff
jge 0x405adc
cmp dword [ebp - 0x10c], 0
je 0x405acf
jmp 0x405adc
cmp dword [ebp - 0xd8], 0
je 0x405ada
jmp 0x405adc
jmp 0x405aae
cmp dword [ebp - 0xd8], 0
je 0x405ae7
jmp 0x405ae9
jmp 0x405a82
mov byte [0xae4554], 1
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x4b46c0
mov dword [ebp - 0x308], eax
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x4b46c0
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x308]
mov dword [0x518510], eax
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x26c], 0xc8dd
mov dword [ebp - 0x720], 7
mov dword [ebp - 0x14], 0xfffffffc
jmp 0x405b4b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x16
jne 0x405b6d
mov byte [ebp - 0x7e], 0
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x405b6b
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x405b44
mov dword [ebp - 0x14], 0
jmp 0x405b7d
cmp dword [ebp - 0x14], 0xffffffe6
jg 0x405e1d
mov dword [ebp - 0x274], 0x3bfa32a1
push 4
lea ecx, [ebp - 0x798]
call fcn.00409f19
mov dword [ebp - 0x194], 0
jmp 0x405bb7
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 4
jge 0x405bd9
push dword [ebp - 0x194]
lea ecx, [ebp - 0x798]
call fcn.00409fe1
mov dword [eax], 0x1448112d
jmp 0x405baa
cmp dword [ebp - 0x274], 0
jne 0x405c37
cmp dword [ebp - 0x14], 0
je 0x405bf4
mov dword [ebp - 0x4bc], 1
jmp 0x405bfb
and dword [ebp - 0x4bc], 0
mov esi, dword [ebp - 0x274]
imul eax, dword [ebp - 0x4bc], 0x7051
sub esi, eax
push 2
lea ecx, [ebp - 0x798]
call fcn.00409fe1
mov dword [eax], esi
cmp dword [ebp - 0x26c], 0
jne 0x405c37
mov eax, 0x2240
test eax, eax
jne 0x405c37
mov dword [ebp - 0x4c4], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x4c4]
jge 0x405c58
mov dword [ebp - 0x4cc], 1
jmp 0x405c5f
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x4cc]
cmp eax, 0x80f885bd
jne 0x405c7c
mov dword [ebp - 0x74c], 1
jmp 0x405c83
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x26c], 0x6095610a
jg 0x405caa
push 1
lea ecx, [ebp - 0x73c]
call fcn.00409f19
mov dword [ebp - 0xe0], 0xd4f2887c
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0x4e4], 0x2df3d37a
mov dword [ebp - 0x27c], 2
push 1
lea ecx, [ebp - 0x5cc]
call fcn.00409f19
mov dword [ebp - 0x51c], 0x99da9727
mov dword [ebp - 0x74], 0
jmp 0x405e79
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x405e95
push dword [ebp - 0x74]
lea ecx, [ebp - 0x73c]
call fcn.00409fe1
mov dword [eax], 0xdf37
jmp 0x405e72
mov dword [ebp - 0x74], 0
jmp 0x405ea5
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x405ebe
push dword [ebp - 0x74]
lea ecx, [ebp - 0x5cc]
call fcn.00409fe1
or dword [eax], 0xffffffff
jmp 0x405e9e
cmp dword [ebp - 0xe8], 0x46c2
jl 0x405ed6
mov dword [ebp - 0x4ec], 1
jmp 0x405edd
and dword [ebp - 0x4ec], 0
imul eax, dword [ebp - 0xe8], 0xafe3
mov dword [ebp - 0x4e4], eax
mov esi, dword [ebp - 0x4e4]
push 0
lea ecx, [ebp - 0x73c]
call fcn.00409fe1
mov ecx, dword [ebp - 0x4ec]
imul ecx, dword [eax]
cmp esi, ecx
jne 0x405f19
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret