Function at 0x40c16d
Capabilities:
Encode data using xor
Get common file path
Query environment variable

Disassembly:
mov eax, 0x4b3645
call fcn.004b3228
sub esp, 0x2cc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x50], ecx
push 3
lea ecx, [ebp - 0x1d8]
call fcn.0040e140
mov dword [ebp - 0x24], 0x8a1f9496
mov dword [ebp - 0x20], 0x566a9272
xor ebx, ebx
mov dword [ebp - 0x28], ebx
xor edi, edi
inc edi
cmp dword [ebp - 0x28], 3
jge 0x40c1c3
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1d8]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x28]
jmp 0x40c1ac
push 2
pop esi
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], ebx
jl 0x40c246
mov dword [ebp - 0x1c], 0xb1658084
push esi
lea ecx, [ebp - 0x1b4]
call fcn.0040e140
mov dword [ebp - 0x28], ebx
jmp 0x40c1f5
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1b4]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x40c1e6
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x40c226
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x40c221
push ebx
push ebx
push 0x2593
push 0x18b3
push 0x15e3
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
dec dword [ebp - 0x1c]
jns 0x40c202
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x40c236
inc dword [ebp - 0x20]
dec dword [ebp - 0x1c]
jns 0x40c22e
lea ecx, [ebp - 0x1b4]
call fcn.0040e212
dec dword [ebp - 0x24]
jns 0x40c1ce
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x1d8]
call fcn.0040e212
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x2c], 0xf888c554
mov dword [ebp - 0x20], 0xb2bc8f96
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x2c], 0x563ade45
movdqa xmm0, xmmword [0xa8cf10]
movdqu xmmword [ebp - 0x21c], xmm0
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x21c]
push eax
push ebx
lea ecx, [ebp - 0xf8]
call fcn.004105b3
mov dword [ebp - 0x1c], ebx
jmp 0x40c2c8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], 0xdc87a9b6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x40c2ba
mov dword [ebp - 0x2c], 0x429a
cmp dword [ebp - 0x2c], 0x4475
jle 0x40c355
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edx, ebx
mov dword [ebp - 0x3c], edx
mov edi, esi
mov ecx, eax
shl edi, cl
mov dword [ebp - 0x30], ebx
mov esi, edi
mov ecx, edx
sar esi, cl
mov eax, esi
xor eax, ebx
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
inc ebx
cmp ebx, 0x7e86
jl 0x40c2fb
mov edx, dword [ebp - 0x3c]
inc edx
mov dword [ebp - 0x3c], edx
cmp edx, 0x573b
push 0
pop ebx
jl 0x40c2f2
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x6cb4
mov esi, dword [ebp - 0x24]
jl 0x40c2e7
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x634a
jl 0x40c2e2
push 0x1edb
call dword [sym.imp.USER32.dll_GetDC]
xor edi, edi
inc edi
push 2
pop esi
mov dword [ebp - 0x1c], ebx
jmp 0x40c36b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x258], 0x1111919b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x40c35a
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x2c], 0x419f
jge 0x40c38c
mov edx, str.qgg_hvwmngqrb_ldh
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
jmp 0x40c3b8
cmp dword [ebp - 0x18], ebx
je 0x40c3e2
mov edx, edi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setl cl
mov eax, 0xe96f
sub eax, ecx
jne 0x40c3d9
cmp dword [ebp - 0x18], ebx
mov eax, ebx
je 0x40c3db
mov eax, edi
cmp eax, dword [ebp - 0x18]
mov edx, edi
jle 0x40c3e4
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x18]
add edx, 0x6982b357
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x64], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18], 0xa40f
push 5
pop edx
sub edx, eax
add edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
cmp ecx, 0xbc71
setg dl
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
je 0x40c45a
cmp dword [ebp - 0x18], ebx
mov edx, edi
jne 0x40c45c
mov edx, ebx
mov eax, dword [ebp - 0x18]
sub edx, eax
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setge cl
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x18]
sub edx, eax
mov eax, dword [ebp - 0xf8]
mov dword [eax + 8], edx
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0x258], edx
lea ecx, [ebp - 0xf8]
call fcn.0040e212
mov eax, dword [0xa991e0]
test al, 1
jne 0x40c525
or eax, edi
mov dword [0xa991e0], eax
mov dword [0xa99180], ebx
mov dword [0xa99184], ebx
push ebx
push ebx
call fcn.0040ff0d
mov dword [0xa99180], eax
mov dword [0xa99188], ebx
mov dword [0xa99190], ebx
mov dword [0xa9919c], 0x3f800000
mov dword [ebp - 0xc8], eax
mov dword [0xa9918c], ebx
lea eax, [ebp - 0xc8]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x1dc]
push eax
mov ecx, 0xa99188
call fcn.0040fcb2
mov dword [0xa99194], 7
mov dword [0xa99198], 8
push 0x4b441d
call fcn.0049dd2d
pop ecx
mov dword [ebp - 0x34], 0x42eb90da
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40c545
push 0x24b0
push 0x41e
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40c555
push ebx
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
imul eax, dword [ebp - 0x50], 0x2710
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x30], 0x9e0d
mov dword [ebp - 0x1c], ebx
jmp 0x40c583
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x38], 0xf506e60b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x40c575
mov dword [ebp - 0x1c], ebx
jmp 0x40c59b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7c], 0xcfe0c2df
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x40c58d
cmp dword [ebp - 0x38], ebx
jne 0x40c5ab
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x38]
je 0x40c6a6
cmp dword [ebp - 0x38], ebx
je 0x40c6a6
mov dword [ebp - 0x24], 0xffffffff
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40c5e8
push ebx
push 7
call dword [sym.imp.USER32.dll_MonitorFromWindow]
mov dword [ebp - 0x24], 0xffffffe9
jmp 0x40c69b
mov dword [ebp - 0x2c], 0x13e458c4
push esi
lea ecx, [ebp - 0x158]
call fcn.0040e140
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x28], ebx
jmp 0x40c626
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 0x2b8319b8
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x40c613
mov eax, dword [ebp - 0x24]
add eax, esi
jne 0x40c63a
cmp dword [ebp - 0x2c], ebx
mov dword [ebp - 0x3c], ebx
je 0x40c63d
mov dword [ebp - 0x3c], edi
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x38]
add eax, edx
xor ecx, ecx
cmp eax, dword [ebp - 0x3c]
setg cl
neg ecx
xor edx, edx
mov eax, dword [ebp - 0x158]
cmp ecx, dword [eax + 4]
setne dl
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x30], ecx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40c68d
push 0x21ad
push 0x592
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
lea ecx, [ebp - 0x158]
call fcn.0040e212
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x40c5f4
jmp 0x40c70f
mov dword [ebp - 0x1c], 0x58390a34
mov dword [ebp - 0x28], ebx
jmp 0x40c6c0
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x78], 0xfff9
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x40c6b2
cmp dword [ebp - 0x1c], ebx
mov ecx, edi
jne 0x40c6ce
mov ecx, ebx
mov eax, dword [ebp - 0x38]
imul eax, ecx
cmp dword [ebp - 0x1c], eax
jle 0x40c6dc
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x78]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
inc eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x68]
push eax
call fcn.0040e254
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], 0xfffffff6
push 3
pop ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x30], 0x983c17a3
mov dword [ebp - 0x34], 0x996f
mov dword [ebp - 0x28], ebx
jmp 0x40c74e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x4c], edi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x40c744
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x28], ebx
je 0x40c764
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x3c], 0
je 0x40ca11
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x28], 0xffff
mov dword [ebp - 0x2c], 0x5ee4c20f
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x44], 0xd35da2a0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, 6
setne al
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp dword [ebp - 0x44], eax
setl cl
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp eax, ecx
setge dl
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0xfffffff6
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x28]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x1c]
xor eax, eax
cmp ecx, 0x4872
setl al
push 8
pop ecx
sub eax, 0x2a43
add eax, ecx
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 5
setne cl
mov dword [ebp - 0x44], ecx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40c877
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xec], eax
push edi
lea ecx, [ebp - 0x188]
call fcn.0040e140
mov dword [ebp - 0x24], 0x7831e42a
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x18], 0x87223b16
mov dword [ebp - 0x1c], ebx
jmp 0x40c8b9
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x188]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x40c8a6
mov dword [ebp - 0x1c], ebx
jmp 0x40c8d4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1b8], 0x71865425
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x40c8c3
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jg 0x40ca01
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], ebx
jmp 0x40c909
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x264], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x40c8f8
dec dword [ebp - 0x1c]
mov dword [ebp - 0x28], 0x222
cmp dword [ebp - 0x28], 0x533
jle 0x40c97b
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x3c], ebx
mov edi, ebx
mov dword [ebp - 0x2c], 0x3274
mov ebx, esi
mov esi, 0x916
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
add ebx, edi
dec esi
jne 0x40c93a
mov eax, dword [ebp - 0x3c]
add edi, eax
dec dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
jne 0x40c933
dec eax
mov dword [ebp - 0x3c], eax
cmp eax, 0xffffa3a8
push 0
pop ebx
jg 0x40c92a
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x6570
jl 0x40c927
xor edi, edi
inc edi
push 2
pop esi
dec dword [ebp - 0x18]
mov dword [ebp - 4], esi
cmp dword [ebp - 0x28], 0x114
jge 0x40c999
mov edx, str.suqtp_zuegbb_edmwluwva
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
jmp 0x40c9c5
mov dword [ebp - 0x1c], ebx
jmp 0x40c9f4
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40c9db
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40c9f1
push ebx
push 0x6e1
push ebx
call dword [sym.imp.GDI32.dll_GetBitmapBits]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x40c9ca
inc dword [ebp - 0x24]
jmp 0x40c8e7
lea ecx, [ebp - 0x188]
call fcn.0040e212
jmp 0x40dfa2
mov dword [ebp - 0x8c], 0xfffffff8
mov dword [ebp - 0x88], 0xfffffff8
mov dword [ebp - 0x84], 0xfffffff8
mov dword [ebp - 0x80], 0xfffffff8
mov dword [ebp - 0x28], ebx
jmp 0x40ca4c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x140], 4
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x40ca3b
mov dword [ebp - 0x8c], ebx
jmp 0x40ca86
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp + eax*4 - 0x140]
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x140], ecx
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0x140]
inc dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], esi
jle 0x40ca59
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40ca9d
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, dword [0xa991e0]
test al, 2
jne 0x40cb20
or eax, esi
mov dword [0xa991e0], eax
mov dword [0xa991b0], ebx
mov dword [0xa991b4], ebx
push ebx
push ebx
call fcn.0040ff0d
mov dword [0xa991b0], eax
mov dword [0xa991b8], ebx
mov dword [0xa991c0], ebx
mov dword [0xa991cc], 0x3f800000
mov dword [ebp - 0xc4], eax
mov dword [0xa991bc], ebx
lea eax, [ebp - 0xc4]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x1a4]
push eax
mov ecx, 0xa991b8
call fcn.0040fcb2
mov dword [0xa991c4], 7
push 8
pop ecx
mov dword [0xa991c8], ecx
push 0x4b4418
call fcn.0049dd2d
pop ecx
push 3
lea ecx, [ebp - 0x14c]
call fcn.0040e140
mov dword [ebp - 0x34], 0xcdf98a59
mov dword [ebp - 0x34], 0xefc07e17
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x1c], ebx
jmp 0x40cb53
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x40cb43
mov dword [ebp - 0x1c], ebx
jmp 0x40cb6f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a8], 0xc3fbb4eb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x40cb5e
mov eax, dword [ebp - 0x14c]
dec dword [eax + 8]
dec dword [ebp - 0x2c]
lea ecx, [ebp - 0x14c]
call fcn.0040e212
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x9c], xmm0
push esi
lea ecx, [ebp - 0x1a0]
call fcn.0040e140
mov dword [ebp - 0x20], 0xeaa32b1c
mov dword [ebp - 0x30], 0xfd1e814b
mov dword [ebp - 0x28], ebx
jmp 0x40cbc8
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1a0]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x40cbb5
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], ebx
jl 0x40cbf5
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40cbe9
push 0xc2d
call dword [sym.imp.USER32.dll_IsIconic]
mov dword [ebp - 0x30], 0xfffffffa
dec dword [ebp - 0x20]
jns 0x40cbd5
lea ecx, [ebp - 0x1a0]
call fcn.0040e212
lea eax, [ebp - 0x50]
push eax
call fcn.0040e2b6
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], 0xd4e06482
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x2c], 0x66e9f086
mov dword [ebp - 0x34], edi
push esi
lea ecx, [ebp - 0x1c4]
call fcn.0040e140
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x18], ebx
jmp 0x40cc56
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x248], 0x925b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x40cc45
mov dword [ebp - 0x18], ebx
jmp 0x40cc74
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c4]
mov dword [eax + ecx*4], 0x40e13f5e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x40cc61
mov dword [ebp - 0x18], ebx
jmp 0x40cc8f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x270], 0xccca
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x40cc7e
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 3
jg 0x40cf36
mov dword [ebp - 0x1c], 0x45db34e6
mov dword [ebp - 0x2c], 0x233d
cmp dword [ebp - 0x2c], 0x24fe
jle 0x40cce6
mov esi, ebx
mov edi, ebx
mov eax, edi
or eax, esi
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
inc edi
cmp edi, 0x3c9a
jl 0x40ccbd
inc esi
cmp esi, 0x5934
jl 0x40ccbb
xor edi, edi
inc edi
push 2
pop esi
mov dword [ebp - 0x24], 8
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2c], 0x219a
jge 0x40cd0c
mov edx, str.qpcabzwv_lzuqcgveh_znsdiu_xefzji_szkw_oferdkhnq_rzvmdy_mckrz_eqy_idxpdnuao
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
jmp 0x40cd38
mov dword [ebp - 0x18], 0x6128
cmp dword [ebp - 0x18], 0x62ec
jle 0x40cd9f
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x24], 0x294d
mov edi, ecx
mov ebx, 0x628d
mov eax, esi
and eax, edi
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
inc edi
dec ebx
jne 0x40cd60
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2c]
add ecx, eax
mov dword [ebp - 0x2c], ecx
dec dword [ebp - 0x24]
jne 0x40cd59
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x7f27
jl 0x40cd4d
inc esi
cmp esi, 0x1097
jl 0x40cd4a
xor edi, edi
inc edi
push 2
pop esi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40ce73
mov dword [ebp - 0x1c], 0x1cad
cmp dword [ebp - 0x1c], 0x1efa
jle 0x40ce1d
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x40], esi
mov ecx, eax
shl esi, cl
mov eax, ebx
xor eax, edi
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
inc ebx
cmp ebx, 0x3f6a
jl 0x40cdd2
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x2188
push 0
pop ebx
mov esi, dword [ebp - 0x24]
jl 0x40cdc8
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x783
jl 0x40cdc3
inc edi
cmp edi, 0x4e7e
jl 0x40cdbe
xor edi, edi
inc edi
push 2
pop esi
push 0x142b
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1c], 0x195d
jge 0x40ce47
mov edx, str.nsmofyll_ccqmik_mbpetm_wih_wnjwb_ujkapqk
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
jmp 0x40ce73
push 8
pop eax
mov dword [ebp - 4], eax
cmp dword [ebp - 0x18], 0x5f2c
jge 0x40ce91
mov edx, str.zyip_huufx_uvflrgvnx_cpjxhjw_nawbletbb_zum_vjdpnh_ybuxdxgws_ejbmxor_puihkoxn_cowykwrv_lhmi_bqyd
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
jmp 0x40cebd
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x40cf2e
mov dword [ebp - 0x24], 0x5ccb9725
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xe662
setle cl
cmp ecx, dword [ebp - 0x24]
jle 0x40ceee
cmp dword [ebp - 0x1c], ebx
mov edx, ebx
je 0x40cef0
mov edx, edi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x248]
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
xor eax, eax
cmp ecx, 0xa116
setle al
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x1c]
jns 0x40cec5
inc dword [ebp - 0x20]
jmp 0x40cc98
inc dword [ebp - 0x30]
lea ecx, [ebp - 0x1c4]
call fcn.0040e212
mov al, byte [ebp + 0xc]
test al, al
jne 0x40cf55
cmp dword [ebp - 0x28], 0
jne 0x40d0d2
mov dword [ebp - 0x1c], 0x825e
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x20], 0x39d
mov dword [ebp - 0x34], 0x8ccedb77
inc dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0x30
jle 0x40cff5
mov dword [ebp - 0x24], 0x17059141
mov dword [ebp - 0x34], 6
cmp dword [ebp - 0x20], ebx
je 0x40cf9a
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
mov eax, edi
jle 0x40cf9c
mov eax, ebx
cmp eax, dword [ebp - 0x24]
jg 0x40cfa8
cmp dword [ebp - 0x30], ebx
mov esi, ebx
je 0x40cfaa
mov esi, edi
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x24]
add eax, esi
imul edx, eax
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp eax, ecx
setl dl
sub edx, dword [ebp - 0x34]
neg edx
sbb edx, edx
inc edx
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x34], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x30
jg 0x40cf7d
mov al, byte [ebp + 0xc]
lea ecx, [ebp - 0x2d8]
push ecx
mov dl, al
mov ecx, dword [ebp - 0x50]
call fcn.004019f3
pop ecx
mov esi, eax
lea edi, [ebp - 0x9c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x34], 0x7dfa860b
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x34], 0x2cb51dba
mov dword [ebp - 0x34], 0x43250e6d
movdqa xmm0, xmmword [0xa8cf80]
movdqu xmmword [ebp - 0x1fc], xmm0
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1fc]
push eax
push ebx
lea ecx, [ebp - 0x114]
call fcn.004105b3
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x34], 0xb3bfa32a
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x30], 0xdae4
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40d09c
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_OpenProcess]
inc dword [ebp - 0x30]
lea ecx, [ebp - 0x114]
call fcn.0040e212
xor edi, edi
push 2
inc edi
pop esi
cmp byte [ebp + 0xc], 0
je 0x40d0d2
mov ecx, dword [ebp - 0x94]
test ecx, ecx
je 0x40d0d2
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0x18], 0x90c4
mov dword [ebp - 0x20], 6
push 3
lea ecx, [ebp - 0x164]
call fcn.0040e140
mov dword [ebp - 0x24], ebx
jmp 0x40d105
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x40d0f2
cmp dword [ebp - 0x18], 0xfffb
jne 0x40d130
mov dword [ebp - 0x18], ebx
jmp 0x40d125
mov dword [ebp - 0x34], edi
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe7
jg 0x40d119
jmp 0x40d21c
mov dword [ebp - 0x24], 0x97bc8b4
mov dword [ebp - 0x1c], 0x7731
mov dword [ebp - 0x18], 4
jmp 0x40d1ae
mov dword [ebp - 0x1c], 0xacff
cmp dword [ebp - 0x1c], ebx
je 0x40d169
mov ecx, edi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
lea eax, [ecx - 0xb2fc]
cmp dword [ebp - 0x1c], eax
jg 0x40d16b
mov ecx, ebx
add ecx, 0xdd664087
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
test ecx, ecx
setg al
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], ebx
jmp 0x40d1a5
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40d1a2
push 0xfdc
push 0x1a97
push ebx
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x21
jl 0x40d188
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffff
jge 0x40d147
mov dword [ebp - 0x1c], ebx
jmp 0x40d217
mov dword [ebp - 0x34], 0xf321ee01
mov dword [ebp - 0x34], 0x5d7c1543
mov dword [ebp - 0x18], ebx
jmp 0x40d1ff
mov dword [ebp - 0x24], ebx
jmp 0x40d1f7
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], ebx
jl 0x40d1ed
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x164]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x20]
jns 0x40d1d9
mov dword [ebp - 0x34], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x40d1d1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x40d1cc
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40d214
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x40d1b9
lea ecx, [ebp - 0x164]
call fcn.0040e212
cmp dword [ebp - 0x28], 0
jne 0x40db0f
cmp dword [ebp - 0x9c], 0
jle 0x40db0f
movdqa xmm0, xmmword [0xa8cf20]
movdqu xmmword [ebp - 0x20c], xmm0
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x20c]
push eax
push ebx
lea ecx, [ebp - 0xe0]
call fcn.004105b3
mov dword [ebp - 0x34], 0x5286e871
mov dword [ebp - 0x34], 6
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40d2a6
push ebx
push 0x8b2
push ebx
push 0x258b
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0xe0]
call fcn.0040e212
mov dword [ebp - 0x34], edi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40d2d4
push 0x1220
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40d3af
mov dword [ebp - 0x1c], 0x568b
cmp dword [ebp - 0x1c], 0x58af
jle 0x40d361
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x20], 0x53e8
mov eax, ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0x6086
cdq
push edx
push eax
lea ecx, [ebp - 0x288]
call fcn.004019bd
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x40d321
mov eax, dword [eax]
push eax
call fcn.0049dd57
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x288]
call fcn.0040e5e0
mov eax, dword [ebp - 0x30]
add eax, esi
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x2c]
jne 0x40d309
mov eax, dword [ebp - 0x24]
add esi, eax
dec dword [ebp - 0x20]
jne 0x40d2fd
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x271b
jl 0x40d2f4
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 2
pop esi
push ebx
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x1c], 0x54af
jge 0x40d383
push str.lutn_harerjswt_bgckgtwc_ybd_xxe_ujdpfsw_zhqoetr_iskwmgch_tdut
call fcn.0049dd57
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x40d3af
push 3
lea ecx, [ebp - 0xc0]
call fcn.0040e140
mov dword [ebp - 0x30], 0x2da7
cmp dword [ebp - 0x30], 0x2fed
jle 0x40d433
mov edx, ebx
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov ecx, esi
sar eax, cl
and eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0x2b8]
call fcn.004019bd
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x40d3f6
mov eax, dword [eax]
push eax
call fcn.0049dd57
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2b8]
call fcn.0040e5e0
inc esi
cmp esi, 0x5262
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
jl 0x40d3d8
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x689b
jl 0x40d3d6
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x29c2
jl 0x40d3d1
push 2
pop esi
mov dword [ebp - 0x18], 0x6915a136
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x30], 0x2b53
jge 0x40d455
push str.aeaxwujzt_xhzv_qrzsrtq_pizii_gixgomrz_qhgyhl_onghfcf_ojuzl_zdujy_eite_wahpruk_kxx_doqx
call fcn.0049dd57
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x40d481
mov dword [ebp - 0x24], 0x28217c71
mov dword [ebp - 0x20], ebx
jmp 0x40d49c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x40d48d
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], esi
jg 0x40d58d
push 3
lea ecx, [ebp - 0xb4]
call fcn.0040e140
mov dword [ebp - 0x30], 0x5fd9
cmp dword [ebp - 0x30], 0x62a8
jle 0x40d50b
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov eax, esi
mov ecx, ebx
sar eax, cl
or eax, edi
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
inc ebx
cmp ebx, 0x555f
jl 0x40d4d2
inc esi
cmp esi, 0x1caf
push 0
pop ebx
jl 0x40d4cf
inc edi
cmp edi, 0x63b5
jl 0x40d4cd
xor edi, edi
inc edi
push 2
pop esi
mov dword [ebp - 0x20], ebx
jmp 0x40d523
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0xafa01777
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x40d510
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x30], 0x5f90
jge 0x40d548
mov edx, str.wbe_wgwejk_zdi
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
jmp 0x40d574
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc0]
cmp dword [ecx + eax*4], ebx
je 0x40d5de
lea ecx, [ebp - 0xb4]
call fcn.0040e212
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax + 8]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setg dl
mov dword [ebp - 0x24], edx
lea ecx, [ebp - 0xc0]
call fcn.0040e212
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x34], 0xfff6
mov dword [ebp - 0x1c], ebx
jmp 0x40d668
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
mov dword [eax + 8], 0xd393e75c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
push 3
pop esi
mov eax, dword [ebp - 0xc0]
sub esi, dword [eax + ecx*4]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp esi, eax
setge dl
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
setg cl
imul ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x40d62b
mov eax, dword [ebp - 0xb4]
cmp dword [eax], ebx
mov ecx, edi
jne 0x40d62d
mov ecx, ebx
mov eax, dword [ebp - 0x18]
imul eax, ecx
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0xb4]
call fcn.0040e212
inc dword [ebp - 0x18]
push 2
pop esi
jmp 0x40d4a5
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40d665
push 0xdac
push 0x1390
call dword [sym.imp.USER32.dll_GetDlgItem]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x40d64c
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], ebx
jne 0x40d67b
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov ecx, edi
sub ecx, eax
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
push 8
pop ecx
cmp ecx, eax
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, 0xdc1b6eab
jne 0x40d6d9
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40d6c6
push 0x241b
call dword [sym.imp.USER32.dll_SetCapture]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40d6e0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
jmp 0x40d6e0
mov dword [ebp - 0x1c], 0xd6273d59
movdqa xmm0, xmmword [0xa8cf60]
movdqu xmmword [ebp - 0x22c], xmm0
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x22c]
push eax
push ebx
lea ecx, [ebp - 0x60]
call fcn.004105b3
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x30], 0xf7921e12
mov dword [ebp - 0x18], ebx
jmp 0x40d791
mov dword [ebp - 0x20], ebx
jmp 0x40d734
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1cc], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x40d727
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x60]
cmp dword [eax + ecx*4], ebx
jne 0x40d797
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x60]
cmp dword [eax + ecx*4], ebx
je 0x40d783
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x60]
cmp dword [eax + ecx*4], ebx
jne 0x40d76b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x60]
cmp dword [eax + ecx*4], ebx
jne 0x40d76b
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
test eax, eax
mov eax, edi
jne 0x40d785
mov eax, ebx
mov dword [ebp - 0x1cc], eax
inc dword [ebp - 0x18]
push 2
pop esi
cmp dword [ebp - 0x18], 3
jle 0x40d722
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x60]
call fcn.0040e212
cmp dword [ebp - 0x98], 0
je 0x40db0f
cmp dword [ebp - 0x9c], 0
je 0x40db0f
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x20], 0xb6318d58
mov dword [ebp - 0x24], 0x9b4e
mov dword [ebp - 0x2c], 0xffff
mov dword [ebp - 0x30], 0x371
cmp dword [ebp - 0x30], 0x394
jle 0x40d855
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x28]
mov eax, edi
and eax, esi
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
inc edi
cmp edi, 0x510b
jl 0x40d7fb
inc esi
cmp esi, 0x2d10
push 0
pop ebx
jl 0x40d7f6
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x225e
jl 0x40d7f4
push 0x439
push ebx
push ebx
push ebx
push ebx
push 0xec3
push 0x149b
push 0x1674
call dword [sym.imp.USER32.dll_ScrollWindowEx]
xor edi, edi
inc edi
push 2
pop esi
push 4
lea ecx, [ebp - 0x17c]
call fcn.0040e140
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x30], 0x30b
jge 0x40d881
mov edx, str.msprdoqd_oesotjlag_nsfypeea_zea_oizow_qiv_coaj_csg_ptwnupz_memr_oba_hxluujc_ghi
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
jmp 0x40d8ad
mov dword [ebp - 0x18], ebx
jmp 0x40d8c0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x54], 4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x40d8b2
mov dword [ebp - 0x18], ebx
jmp 0x40d8db
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x128], 0x56fd8c65
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x40d8ca
mov dword [ebp - 0x18], ebx
jmp 0x40d8f8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x40d8e5
mov dword [ebp - 0x18], ebx
jmp 0x40d90c
cmp dword [ebp - 0x18], 4
jne 0x40d903
mov dword [ebp - 0x24], 0x9f9b3198
mov dword [ebp - 0x34], 0xbca9d692
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x30], 0xe637c5b1
mov dword [ebp - 0x40], 0xbd13d8c5
mov dword [ebp - 0x30], 0xed99ea7
mov dword [ebp - 0x30], 0x36dc9922
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x30], 0x1c80
cmp dword [ebp - 0x30], 0x1fdc
jle 0x40db9d
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x20]
lea eax, [esi + ebx]
or eax, edi
cdq
push edx
push eax
mov ecx, 0xa97fd8
call fcn.0040e02b
inc edi
cmp edi, 0x4ebd
jl 0x40db62
inc esi
cmp esi, 0x63a0
push 0
pop ebx
jl 0x40db5d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x4e7d
jl 0x40db5b
xor edi, edi
inc edi
push 2
pop esi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x30], 0x19cc
jge 0x40dbbf
mov edx, str.nlsuzoznk_jiudujtpu_xsnohz_yykxcnonc_ueptgj_gbrw_pblt_oklf_rscr_hzxana
mov ecx, 0xa97fd8
call fcn.0041000e
or dword [ebp - 4], 0xffffffff
jmp 0x40dbeb
mov dword [ebp - 0x20], ebx
jmp 0x40dc01
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2c8], 0x5dea311c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x40dbf0
mov dword [ebp - 0x24], 0xfffffffe
jmp 0x40ddcb
push esi
lea ecx, [ebp - 0x120]
call fcn.0040e140
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0x4aa41a80
push 4
lea ecx, [ebp - 0x134]
call fcn.0040e140
push edi
lea ecx, [ebp - 0x170]
call fcn.0040e140
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x2c], 0x3e2e1665
mov dword [ebp - 0x108], 0xffff
mov dword [ebp - 0x104], 0xffff
mov dword [ebp - 0x100], 0xffff
mov dword [ebp - 0xfc], 0xffff
push edi
lea ecx, [ebp - 0x194]
call fcn.0040e140
mov dword [ebp - 0x30], 0x75da
mov dword [ebp - 0x18], ebx
jmp 0x40dca6
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x40dc97
mov dword [ebp - 0x18], ebx
jmp 0x40dcc3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0x5fd0a320
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x40dcb0
mov dword [ebp - 0x18], ebx
jmp 0x40dce1
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x170]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x40dcce
mov dword [ebp - 0x18], ebx
jmp 0x40dcfa
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x194]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x40dceb
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x20], eax
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x34]
dec dword [ebp - 0x100]
mov eax, dword [ebp - 0x100]
jne 0x40dd55
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x194]
cmp dword [eax], ecx
jle 0x40dd37
mov eax, dword [ebp - 0x134]
cmp dword [eax + 8], ebx
jne 0x40dd37
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov eax, dword [ebp - 0x170]
cmp dword [eax], edi
setle cl
xor eax, eax
cmp ecx, 7
setl al
cmp eax, 0x2576953c
mov eax, ebx
jge 0x40dd57
mov eax, edi
add eax, 0x757b2dc9
je 0x40dd65
cmp dword [ebp - 0x2c], ebx
mov ecx, edi
jne 0x40dd67
mov ecx, ebx
mov eax, dword [ebp - 0x120]
mov edx, dword [eax]
sub edx, ecx
mov eax, dword [ebp - 0x20]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x19d6b80f
setne al
sub eax, 0xfffffff8
add eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
neg eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x194]
call fcn.0040e212
lea ecx, [ebp - 0x170]
call fcn.0040e212
lea ecx, [ebp - 0x134]
call fcn.0040e212
lea ecx, [ebp - 0x120]
call fcn.0040e212
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff5
jle 0x40dc13
lea ecx, [ebp - 0x9c]
call fcn.0040b802
cmp dword [ebp - 0x3c], 0
jne 0x40df74
cmp dword [ebp - 0x28], 0
je 0x40df74
mov dword [ebp - 0x18], 0xf5540d7f
push edi
lea ecx, [ebp - 0x74]
call fcn.0040e140
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x20], ebx
jmp 0x40de1f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x74]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x40de13
mov dword [ebp - 0x18], ebx
jmp 0x40df44
mov dword [ebp - 0x1c], 0x4b25b3b
movdqa xmm0, xmmword [0xa8cf40]
movdqu xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x1ec]
push eax
push ebx
lea ecx, [ebp - 0xd4]
call fcn.004105b3
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x40df36
mov esi, dword [ebp - 0xd4]
mov dword [ebp - 0x2c], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0xc], eax
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x74]
cmp dword [eax + ecx*4], ebx
sete dl
xor eax, eax
cmp edx, dword [esi + 0xc]
setg al
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x74]
cmp dword [eax + ecx*4], ebx
je 0x40def1
mov eax, dword [ebp - 0x18]
sub eax, 0x945c
mov dword [ebp - 0x3c], eax
mov esi, dword [ebp - 0x1c]
mov edx, edi
mov eax, dword [ebp - 0x74]
sub edx, dword [eax]
mov ecx, dword [ebp - 0x18]
add ecx, edx
xor edx, edx
mov eax, dword [ebp - 0x74]
cmp ecx, dword [eax + esi*4]
setg dl
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, edx
setg cl
cmp ecx, dword [ebp - 0x18]
mov dword [ebp - 0x30], edi
jg 0x40def4
mov dword [ebp - 0x30], ebx
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x74]
mov esi, dword [ebp - 0x30]
cmp esi, dword [eax + ecx*4]
setg dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
mov esi, dword [ebp - 0x2c]
cmp ecx, dword [esi + 0xc]
setne al
sub eax, 0x62dfa874
je 0x40df28
cmp dword [ebp - 0x3c], ebx
mov eax, edi
jne 0x40df2a
mov eax, ebx
mov dword [esi + 0xc], eax
dec dword [ebp - 0x1c]
jns 0x40de8a
lea ecx, [ebp - 0xd4]
call fcn.0040e212
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffec
jne 0x40de2c
lea ecx, [ebp - 0x74]
call fcn.0040e212
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x28]
call fcn.0040be2e
mov esi, eax
mov dword [ebp - 0xec], esi
lea eax, [ebp - 0x68]
push eax
call fcn.0040e254
mov dword [eax], esi
mov dword [ebp - 0x34], edi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40df8c
push ebx
push 0x1649
call dword [sym.imp.USER32.dll_FlashWindow]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x40dfa2
push ebx
push 0x6e1
push ebx
call dword [sym.imp.GDI32.dll_GetBitmapBits]
mov eax, dword [ebp + 8]
mov edi, eax
lea esi, [ebp - 0xec]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret