Function at 0x41aadd
Capabilities:
Get common file path
Query or enumerate registry value
Suspend thread

Disassembly:
mov eax, 0x4ca77f
call fcn.004ca220
sub esp, 0x234
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x14], 0xc64a6847
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0xe4]
call fcn.0040bc2e
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
jmp 0x41ab25
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x41ab16
mov dword [ebp - 0x14], ebx
push 0x15
pop esi
jmp 0x41ab43
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x41ab40
call dword [sym.imp.KERNEL32.dll_GetLastError]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
je 0x41ab32
mov dword [ebp - 0x14], ebx
jmp 0x41ab88
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x41ab73
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xe4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x1c]
jns 0x41ab5c
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xe4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x41ab4d
lea ecx, [ebp - 0xe4]
call fcn.0040bd00
mov eax, dword [0xa9c5d0]
test al, 1
jne 0x41ac1c
or eax, edi
mov dword [0xa9c5d0], eax
mov dword [0xa9c590], ebx
mov dword [0xa9c594], ebx
push ebx
push ebx
call fcn.0040e44c
mov dword [0xa9c590], eax
mov dword [0xa9c598], ebx
mov dword [0xa9c5a0], ebx
mov dword [0xa9c5ac], 0x3f800000
mov dword [ebp - 0xb0], eax
mov dword [0xa9c59c], ebx
lea eax, [ebp - 0xb0]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x194]
push eax
mov ecx, 0xa9c598
call fcn.0040e182
mov dword [0xa9c5a4], 7
mov dword [0xa9c5a8], 8
push 0x4cb5b9
call fcn.004b4d1d
pop ecx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], ebx
jmp 0x41ac39
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x41ac33
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1d
jne 0x41ac24
imul eax, dword [ebp - 0x48], 0x2710
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x70]
push eax
call fcn.0041c4df
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x14], 0x324ec2e0
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x20], 0x5761ac7e
mov dword [ebp - 0x28], 0xa258
mov dword [ebp - 0x28], 0xd8e65dd4
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], esi
push 3
pop esi
jmp 0x41aca5
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x41aca2
push 0x23a3
push ebx
push 0x2661
push ebx
call dword [sym.imp.USER32.dll_LoadStringA]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jge 0x41ac88
mov dword [ebp - 0x14], 6
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jne 0x41ad15
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, 0xa0c0e075
cmp eax, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setge dl
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x20]
mov ecx, 0xffff98d8
sub ecx, eax
sub ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
xor eax, eax
cmp ecx, 5
setl al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x14], 2
mov eax, ebx
ja 0x41ad17
mov eax, edi
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
je 0x41ad26
cmp dword [ebp - 0x1c], ebx
mov edx, edi
jne 0x41ad28
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setle cl
push 4
pop eax
sub eax, ecx
je 0x41ad40
cmp dword [ebp - 0x24], ebx
mov eax, edi
jne 0x41ad42
mov eax, ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x4c], ebx
je 0x41af18
mov dword [ebp - 0x28], 0xa00f47a6
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x2c], 0xc74aa0d7
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x28], 0x166941fc
mov dword [ebp - 0x28], 0x2d3f5047
mov dword [ebp - 0x28], 0xcd76ce4a
mov dword [ebp - 0x3c], 0xfffffff6
mov dword [ebp - 0x44], 0x629c4ddb
push edi
lea ecx, [ebp - 0x10c]
call fcn.0040bc2e
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x14], ebx
jmp 0x41adb6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x154], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x41ada5
mov dword [ebp - 0x14], ebx
jmp 0x41add3
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x41adc0
inc dword [ebp - 0x14c]
dec dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
neg eax
je 0x41adef
cmp dword [ebp - 0x1c], ebx
mov esi, edi
jne 0x41adf1
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 0x14c]
mov ecx, 0x885dc1b6
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x44]
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, edx
setge cl
mov eax, 0x83796483
sub eax, ecx
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setne dl
xor ecx, ecx
mov eax, dword [ebp - 0x10c]
cmp edx, dword [eax]
setge cl
cmp esi, ecx
jne 0x41ae85
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x3c], 4
jmp 0x41ae7d
inc dword [ebp - 0x28]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x41ae7a
push ebx
push 0x1cb2
push 0xd9c
push 0x1ac6
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0x1d
jge 0x41ae59
jmp 0x41aeff
mov dword [ebp - 0x44], 0xa3fda37b
mov dword [ebp - 0x30], 0xa81d68c2
mov dword [ebp - 0x2c], 0x7a88ff76
mov dword [ebp - 0x2c], 0x2c7e12fd
mov dword [ebp - 0x2c], 0x8298bbeb
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x2c], 0x13c9534c
mov dword [ebp - 0x2c], 0x9d6c8400
mov dword [ebp - 0x2c], 0x67dbf129
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x1c], ebx
jmp 0x41aeda
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x74], 0xade726f2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x41aecc
mov dword [ebp - 0x20], 0xffffffff
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x74]
lea ecx, [ebp - 0x10c]
call fcn.0040bd00
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa8], eax
jmp 0x41c4c0
mov eax, dword [0xa9c5d0]
test al, 2
jne 0x41af9d
or eax, 2
mov dword [0xa9c5d0], eax
mov dword [0xa9c5b0], ebx
mov dword [0xa9c5b4], ebx
push ebx
push ebx
call fcn.0040e44c
mov dword [0xa9c5b0], eax
mov dword [0xa9c5b8], ebx
mov dword [0xa9c5c0], ebx
mov dword [0xa9c5cc], 0x3f800000
mov dword [ebp - 0xb4], eax
mov dword [0xa9c5bc], ebx
lea eax, [ebp - 0xb4]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x198]
push eax
mov ecx, 0xa9c5b8
call fcn.0040e182
mov dword [0xa9c5c4], 7
mov dword [0xa9c5c8], 8
push 0x4cb5b4
call fcn.004b4d1d
pop ecx
mov dword [ebp - 0x14], 0x324ec2e0
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x20], 0x5761ac7e
mov dword [ebp - 0x28], 0xa258
mov dword [ebp - 0x28], 0xd8e65dd4
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], 0x15
jmp 0x41afe9
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x41afe6
push 0x23a3
push ebx
push 0x2661
push ebx
call dword [sym.imp.USER32.dll_LoadStringA]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jge 0x41afcc
mov dword [ebp - 0x14], 6
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jne 0x41b059
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, 0xa0c0e075
cmp eax, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setge dl
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x20]
mov ecx, 0xffff98d8
sub ecx, eax
sub ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
xor eax, eax
cmp ecx, 5
setl al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x14], 2
mov eax, ebx
ja 0x41b05b
mov eax, edi
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
je 0x41b06a
cmp dword [ebp - 0x1c], ebx
mov edx, edi
jne 0x41b06c
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setle cl
push 4
pop eax
sub eax, ecx
je 0x41b084
cmp dword [ebp - 0x24], ebx
mov eax, edi
jne 0x41b086
mov eax, ebx
mov dword [ebp - 0x20], eax
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x90], xmm0
movdqa xmm0, xmmword [0xa8f7e0]
movdqu xmmword [ebp - 0x1ac], xmm0
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x1ac]
push eax
push ebx
lea ecx, [ebp - 0x6c]
call fcn.0040ebbd
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], 0x7c2
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], 0xda5659cd
mov dword [ebp - 0x20], 0xfc53d8b3
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x1c], ebx
jmp 0x41b103
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd8], 0xea983111
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x41b0f2
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x30], ecx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xd0], ebx
jne 0x41b126
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xcc]
mov edx, dword [ecx + 0xc]
mov eax, edx
imul eax, edx
xor ecx, ecx
cmp eax, 5
setge cl
xor eax, eax
cmp ecx, 0xa191
setle al
cmp eax, edx
jg 0x41b151
test edx, edx
mov edx, ebx
je 0x41b153
mov edx, edi
mov eax, dword [ebp - 0xd8]
xor ecx, ecx
cmp eax, edx
setne cl
xor edx, edx
cmp ecx, 0x8f8f
setle dl
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x28]
cmp eax, edx
mov ecx, edi
cmovge ecx, ebx
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
imul eax, ecx
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
sub eax, 0xfffffff9
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x6c]
cmp dword [eax + 8], ebx
jne 0x41b1a9
cmp dword [ebp - 0x20], ebx
mov edx, ebx
je 0x41b1ab
mov edx, edi
xor ecx, ecx
mov eax, dword [ebp - 0x6c]
cmp edx, dword [eax + 4]
setl cl
xor eax, eax
mov edx, dword [ebp - 0x30]
cmp ecx, dword [edx + 0xc]
setl al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x6c]
call fcn.0040bd00
lea eax, [ebp - 0x48]
push eax
call fcn.0041c541
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], 0x324ec2e0
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x20], 0x5761ac7e
mov dword [ebp - 0x1c], 0xa258
mov dword [ebp - 0x1c], 0xd8e65dd4
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], 0x15
jmp 0x41b22f
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x41b22c
push 0x23a3
push ebx
push 0x2661
push ebx
call dword [sym.imp.USER32.dll_LoadStringA]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jge 0x41b212
mov dword [ebp - 0x14], 6
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jne 0x41b29f
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, 0xa0c0e075
cmp eax, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setge dl
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x20]
mov ecx, 0xffff98d8
sub ecx, eax
sub ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
xor eax, eax
cmp ecx, 5
setl al
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x14], 2
mov eax, ebx
ja 0x41b2a1
mov eax, edi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
je 0x41b2b0
cmp dword [ebp - 0x34], ebx
mov edx, edi
jne 0x41b2b2
mov edx, ebx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setle cl
push 4
pop eax
sub eax, ecx
je 0x41b2ca
cmp dword [ebp - 0x24], ebx
mov eax, edi
jne 0x41b2cc
mov eax, ebx
mov dword [ebp - 0x20], eax
cmp byte [ebp + 0xc], bl
jne 0x41b2dd
cmp dword [ebp - 0x3c], ebx
jne 0x41b7a7
mov dword [ebp - 0x24], 0x6706
cmp dword [ebp - 0x24], 0x6892
jle 0x41b358
mov edx, ebx
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov ecx, ebx
mov dword [ebp - 0x34], ebx
shl eax, cl
and eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0x1e8]
call fcn.004019b1
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x41b318
mov eax, dword [eax]
push eax
call fcn.004b4d47
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1e8]
call fcn.0040c2ae
mov ecx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x3642
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
jl 0x41b2fc
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x1f3e
jl 0x41b2f7
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x6867
jl 0x41b2f2
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x24], 0x64f0
jge 0x41b36f
push str.jamoe_osbpma_brqaxvc_caugnl_mkls_lyksdv_wcy_sspok_rmngpwfil
call fcn.004b4d47
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41b3a1
mov dword [ebp - 0x24], 0x60b4ffb8
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x1c], ebx
jmp 0x41b3c1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x80], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x41b3b7
mov dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], ebx
jl 0x41b3e0
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x80], ebx
jne 0x41b3e0
dec dword [ebp - 0x24]
jns 0x41b3d2
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], 0x8586fd5d
lea eax, [ebp - 0x240]
push eax
mov dl, byte [ebp + 0xc]
mov ecx, dword [ebp - 0x48]
call fcn.0040f634
pop ecx
mov esi, eax
lea edi, [ebp - 0x90]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, 0x799a
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov eax, 0xa12b57e8
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], 0xfffffff9
mov dword [ebp - 0x5c], ebx
push 3
pop esi
jmp 0x41b546
mov eax, dword [ebp - 0x5c]
cmp dword [ebp + eax*4 - 0xc4], ebx
je 0x41b485
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41b503
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
jmp 0x41b503
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x38], 1
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41b4bb
push 0x20b
push 0x118f
push 0x1009
push 0x1744
push 0xa45
call dword [sym.imp.GDI32.dll_Ellipse]
mov dword [ebp - 0x14], 0xffffffff
mov eax, dword [ebp - 0x5c]
mov esi, dword [ebp + eax*4 - 0xc4]
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xc4], esi
mov ecx, dword [ebp - 0x30]
add ecx, 0xffffbcf3
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 3
setl al
xor edx, edx
cmp eax, esi
setge dl
mov eax, dword [ebp - 0x5c]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x38], ecx
push 3
pop esi
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], ebx
jl 0x41b543
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x41b539
mov dword [ebp - 0x1c], 0x2c5b641b
mov dword [ebp - 0x1c], ebx
jmp 0x41b530
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x41b523
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x41b517
dec dword [ebp - 0x14]
jns 0x41b50b
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], esi
jle 0x41b461
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41b563
push 0x683
call dword [sym.imp.GDI32.dll_GetStockObject]
xor edi, edi
inc edi
cmp byte [ebp + 0xc], 0
je 0x41b7a7
cmp dword [ebp - 0x88], 0
je 0x41b7a7
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x24], 0x1bb000e2
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x41b5a4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc8], 0xfff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x41b593
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp dword [ebp - 0x30], eax
setne cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14], 0xdd1e
add eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
inc ecx
neg ecx
mov eax, dword [ebp - 0x14]
inc eax
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, edx
setne cl
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setne dl
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
neg ecx
xor edx, edx
cmp ecx, 0x3428
setge dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0xffffffff
setle al
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], ebx
jmp 0x41b6db
mov dword [ebp - 0x30], 0xc74bf7a8
mov dword [ebp - 0x24], ebx
jmp 0x41b6d3
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x41b6d0
push 2
lea ecx, [ebp - 0xf0]
call fcn.0040bc2e
mov dword [ebp - 0x20], ebx
jmp 0x41b696
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf0]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x41b687
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xc8], ebx
jne 0x41b6c5
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
lea ecx, [ebp - 0xf0]
call fcn.0040bd00
dec dword [ebp - 0x1c]
jns 0x41b675
jmp 0x41b6d0
lea ecx, [ebp - 0xf0]
call fcn.0040bd00
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x41b66d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x41b661
mov dword [ebp - 0x20], 0x657d
cmp dword [ebp - 0x20], 0x662d
jle 0x41b742
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov eax, esi
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x200]
call fcn.004019b1
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x41b713
mov eax, dword [eax]
push eax
call fcn.004b4d47
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x200]
call fcn.0040c2ae
mov ecx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x1ade
jl 0x41b6f7
inc esi
cmp esi, 0x4778
jl 0x41b6f2
push 3
pop esi
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x20], 0x6211
jge 0x41b769
push str.bgs_oakp_ycbkg_wtnj_pfbuk_qmevfcrfr_vygpfvcaz_ddlyn
call fcn.004b4d47
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41b79b
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xa0], eax
push esi
lea ecx, [ebp - 0x178]
call fcn.0040bc2e
push 2
lea ecx, [ebp - 0x16c]
call fcn.0040bc2e
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x14], ebx
jmp 0x41b7df
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x178]
mov dword [eax + ecx*4], 0xae9714a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x41b7cc
mov dword [ebp - 0x14], ebx
jmp 0x41b7fc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x16c]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x41b7e9
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41b816
push 0xd80
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov esi, dword [ebp - 0x16c]
mov dword [esi + 4], ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41b839
push 0x21b8
push 0x92f
push ebx
call dword [sym.imp.USER32.dll_InflateRect]
inc dword [esi + 4]
cmp dword [esi + 4], 2
jle 0x41b81f
lea ecx, [ebp - 0x16c]
call fcn.0040bd00
lea ecx, [ebp - 0x178]
call fcn.0040bd00
cmp dword [ebp - 0x3c], 0
jne 0x41c0d5
cmp dword [ebp - 0x90], 0
jle 0x41c0d5
mov dword [ebp - 0x24], 0x4f45
cmp dword [ebp - 0x24], 0x4f6a
jle 0x41b904
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, ebx
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x34], ebx
add eax, edx
and eax, ecx
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x218]
call fcn.004019b1
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x41b8bb
mov eax, dword [eax]
push eax
call fcn.004b4d47
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x218]
call fcn.0040c2ae
mov ecx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x5c03
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
jl 0x41b89d
inc esi
cmp esi, 0x2d39
jl 0x41b898
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x3c82
jl 0x41b896
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x335b
jl 0x41b891
mov dword [ebp - 4], 4
cmp dword [ebp - 0x24], 0x4bb5
jge 0x41b91f
push str.yxduqhrbj_wwryee_lupw_zfgefpcug_tnsdlb_edlpxmar_vbzcqmgt_zogwnn_gqm_nal_hbthqzz_zelxkpgnm_neniwnlfd_ehqldfco
call fcn.004b4d47
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41b94e
mov dword [ebp - 0x20], 0xa00f47a6
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x2c], 0xc74aa0d7
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x20], 0x166941fc
mov dword [ebp - 0x20], 0x2d3f5047
mov dword [ebp - 0x20], 0xcd76ce4a
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x30], 0x629c4ddb
push edi
lea ecx, [ebp - 0x130]
call fcn.0040bc2e
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x14], ebx
jmp 0x41b9b6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x148], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x41b9a5
mov dword [ebp - 0x14], ebx
jmp 0x41b9d4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x41b9c1
inc dword [ebp - 0x140]
dec dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg eax
je 0x41b9f0
cmp dword [ebp - 0x34], ebx
mov esi, edi
jne 0x41b9f2
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x140]
mov ecx, 0x885dc1b6
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x30]
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x34]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
setge cl
mov eax, 0x83796483
sub eax, ecx
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setne dl
xor ecx, ecx
mov eax, dword [ebp - 0x130]
cmp edx, dword [eax]
setge cl
cmp esi, ecx
jne 0x41ba87
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x24], 4
jmp 0x41ba7f
inc dword [ebp - 0x34]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41ba7c
push ebx
push 0x1cb2
push 0xd9c
push 0x1ac6
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1d
jge 0x41ba5a
jmp 0x41bb01
mov dword [ebp - 0x30], 0xa3fda37b
mov dword [ebp - 0x38], 0xa81d68c2
mov dword [ebp - 0x2c], 0x7a88ff76
mov dword [ebp - 0x2c], 0x2c7e12fd
mov dword [ebp - 0x2c], 0x8298bbeb
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x2c], 0x13c9534c
mov dword [ebp - 0x2c], 0x9d6c8400
mov dword [ebp - 0x2c], 0x67dbf129
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x20], ebx
jmp 0x41badc
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x60], 0xade726f2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x41bace
mov dword [ebp - 0x1c], 0xffffffff
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x60]
lea ecx, [ebp - 0x130]
call fcn.0040bd00
mov dword [ebp - 0x1c], 0x5c68ec0a
mov dword [ebp - 0x2c], 0xfffffffa
push edi
lea ecx, [ebp - 0x118]
call fcn.0040bc2e
mov eax, 0x509e
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x20], ebx
jmp 0x41bb5b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], 0xc299e885
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x41bb48
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xb
je 0x41bdcd
mov dword [ebp - 0x20], 0x6951ad38
mov dword [ebp - 0x2c], 0xa6f44401
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], 0xafa01777
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x40], 0x9c4ddb84
mov dword [ebp - 0x40], 5
push 2
lea ecx, [ebp - 0x184]
call fcn.0040bc2e
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x40], 0x9297
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x20], ebx
jmp 0x41bbed
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x184]
mov dword [eax + ecx*4], 0xec352115
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x41bbda
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jle 0x41bdb7
mov dword [ebp - 0x38], 0x7c4d1454
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x38], 0x7818
cmp dword [ebp - 0x38], 0x79a1
jle 0x41bcb0
push ebx
push ebx
call dword [sym.imp.USER32.dll_CharUpperBuffW]
mov dword [ebp - 0x14], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov edx, ebx
mov dword [ebp - 0x34], edx
mov ecx, esi
sar eax, cl
mov dword [ebp - 0x40], eax
mov eax, edx
xor eax, dword [ebp - 0x40]
or eax, dword [ebp - 0x14]
cdq
push edx
push eax
lea ecx, [ebp - 0x230]
call fcn.004019b1
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x41bc60
mov eax, dword [eax]
push eax
call fcn.004b4d47
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x230]
call fcn.0040c2ae
mov edx, dword [ebp - 0x34]
inc edx
mov dword [ebp - 0x34], edx
cmp edx, 0x13f
jl 0x41bc40
inc esi
cmp esi, 0x5043
mov eax, dword [ebp - 0x24]
jl 0x41bc34
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x62e9
jl 0x41bc32
mov ecx, dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x1798
jl 0x41bc2d
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [ebp - 0x40], edi
mov dword [ebp - 4], 6
cmp dword [ebp - 0x38], 0x76c3
jge 0x41bcce
push str.mxcb_sgr_qvdhtiru_foxlnu_vrg_rlqzksjoo_fnrrh_brwh_fsxi_jtihcro_epuf
call fcn.004b4d47
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41bcfd
mov dword [ebp - 0x40], 0x45acee61
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], 0x89aa5088
push edi
lea ecx, [ebp - 0x160]
call fcn.0040bc2e
mov dword [ebp - 0x24], 0x73ed1322
mov dword [ebp - 0x14], ebx
jmp 0x41bd37
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1d0], 0x75ff4442
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x41bd26
mov dword [ebp - 0x14], ebx
jmp 0x41bd52
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x160]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x41bd42
mov dword [ebp - 0x38], 0xc9a57b5b
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x38], eax
jle 0x41bd7f
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x1c8]
mov ecx, edi
jg 0x41bd81
mov ecx, ebx
xor eax, eax
cmp ecx, 0xffffffff
setne al
sub eax, dword [ebp - 0x100]
neg eax
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, 0xffffffff
setle cl
mov eax, dword [ebp - 0x160]
mov dword [eax], ecx
lea ecx, [ebp - 0x160]
call fcn.0040bd00
inc dword [ebp - 0x20]
jmp 0x41bbf6
inc dword [ebp - 0x30]
lea ecx, [ebp - 0x184]
call fcn.0040bd00
inc dword [ebp - 0x1c]
jmp 0x41bb63
mov ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x118]
mov dword [eax], ecx
lea ecx, [ebp - 0x118]
call fcn.0040bd00
mov dword [ebp - 0x14], 0x327439cb
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x2c], 0x3700168a
push 0xfffffffffffffffb
pop esi
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, 0xcd9d75
setg cl
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setl dl
mov dword [ebp - 0x2c], edx
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp eax, ecx
setl dl
xor eax, eax
cmp edx, dword [ebp - 0x2c]
setne al
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setg cl
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setge dl
sub edx, 0xcbe9
neg edx
sbb edx, edx
inc edx
imul eax, edx, 0x9150
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41bea6
push 0x3a2
push ebx
push ebx
push ebx
push ebx
push 0x1761
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x20], ebx
jmp 0x41bebf
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x19c], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x41beb2
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x41beeb
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41bee6
push 0x1ca
push 0x627
push ebx
call dword [sym.imp.USER32.dll_CheckMenuItem]
dec dword [ebp - 0x28]
jns 0x41becc
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41bf02
push ebx
push 0x311
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [ebp - 0x24], 0x477862fd
mov dword [ebp - 0x30], 0x9cb0bef
mov dword [ebp - 0x24], ebx
jmp 0x41c015
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x28], ebx
je 0x41bfe3
push 4
lea ecx, [ebp - 0x124]
call fcn.0040bc2e
mov dword [ebp - 0x38], 0x36be856d
mov dword [ebp - 0x20], ebx
jmp 0x41bf61
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], 0xbfb2c41a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x41bf4e
mov dword [ebp - 0x34], 0x7f5e
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x124]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, ecx
setle dl
sub edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
mov ecx, 0xfffd
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp eax, ecx
setle dl
mov eax, 0xb95ae649
cmp eax, edx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp ecx, eax
setg dl
mov ecx, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
cmp ecx, edx
setge al
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x124]
call fcn.0040bd00
jmp 0x41c002
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x1c], ebx
jmp 0x41bffc
mov dword [ebp - 0x30], 0x8bbd188
dec dword [ebp - 0x30]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffd
jne 0x41bfef
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41c012
push ebx
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe7
je 0x41bf18
cmp dword [ebp - 0x8c], 0
je 0x41c0d5
cmp dword [ebp - 0x90], 0
je 0x41c0d5
push 2
lea ecx, [ebp - 0x190]
call fcn.0040bc2e
mov dword [ebp - 0x20], 0xc184c506
mov dword [ebp - 0x20], ebx
jmp 0x41c065
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], 0x5b57
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x41c052
mov dword [ebp - 0x20], ebx
jmp 0x41c0aa
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x28], ebx
jl 0x41c0a7
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41c090
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x41c0a2
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
dec dword [ebp - 0x28]
jns 0x41c07b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x41c070
lea ecx, [ebp - 0x190]
call fcn.0040bd00
mov ecx, dword [ebp - 0x8c]
call fcn.0041a7f5
mov esi, eax
mov dword [ebp - 0x3c], esi
lea eax, [ebp - 0x48]
push eax
call fcn.0041c541
mov dword [eax], esi
mov dword [ebp - 0x1c], 0x632667a8
mov dword [ebp - 0x2c], 0xab9737e0
mov dword [ebp - 0x40], 0x95e2de4b
mov dword [ebp - 0x38], 4
push edi
lea ecx, [ebp - 0x13c]
call fcn.0040bc2e
push 2
pop esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], 0x36ca9a47
mov dword [ebp - 0x28], 0xfffa
mov dword [ebp - 0x14], ebx
jmp 0x41c127
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1b8], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x41c116
mov dword [ebp - 0x14], ebx
jmp 0x41c145
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x13c]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x41c132
mov dword [ebp - 0x14], ebx
jmp 0x41c160
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], 0x380d42f5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x41c14f
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
test eax, eax
setg cl
imul eax, ecx, 0x34ef
sub eax, dword [ebp - 0x1c]
jne 0x41c192
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
xor eax, eax
test ecx, ecx
setne al
cmp eax, ecx
jge 0x41c1ab
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
test eax, eax
setns cl
inc ecx
jne 0x41c1c8
cmp dword [ebp - 0x28], ebx
mov eax, ebx
je 0x41c1ca
mov eax, edi
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x13c]
call fcn.0040bd00
lea ecx, [ebp - 0x90]
call fcn.0041a133
push esi
lea ecx, [ebp - 0x9c]
call fcn.0040bc2e
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x20], 0xa2337124
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x20], ebx
jmp 0x41c21f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 0x643cdf98
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x41c20c
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x20]
neg esi
sbb esi, esi
neg esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x2c], eax
imul ecx, dword [ebp - 0x24], 0x13e1
sub ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x24]
sub eax, esi
neg eax
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, edx
setl cl
add ecx, 6
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov esi, dword [ebp - 0x2c]
mov edx, dword [esi + 4]
mov ecx, dword [ebp - 0x24]
lea eax, [edx - 1]
mov dword [esi + 4], eax
cmp edx, ecx
jge 0x41c2a8
mov dword [ebp - 0x2c], 0x64f6cbcb
mov dword [ebp - 0x40], 8
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setg dl
add edx, dword [esi + 4]
mov dword [ebp - 0x40], edx
jmp 0x41c409
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x24], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x9c]
cmp ecx, dword [eax]
setle dl
add edx, 0x78e1
mov dword [ebp - 0x24], edx
mov ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x20]
add eax, 0xffff103f
add eax, ecx
cmp eax, 0xfffffff8
ja 0x41c3b8
cmp dword [ebp - 0x24], ebx
jne 0x41c3b8
mov dword [ebp - 0x14], ebx
jmp 0x41c3ad
mov dword [ebp - 0x2c], 0x29c6149a
mov dword [ebp - 0x20], ebx
jmp 0x41c318
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1c4], 0x86e0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x41c307
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
setg dl
cmp edx, 0xf2012cb5
jne 0x41c345
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1bc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jne 0x41c372
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x9c]
cmp dword [eax + ecx*4], ebx
mov edx, ebx
je 0x41c374
mov edx, edi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
sete cl
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setge dl
neg edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 0x21f4251d
setge dl
xor eax, eax
cmp edx, dword [esi + 4]
setle al
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x41c2fb
jmp 0x41c409
mov dword [ebp - 0x30], 0x34f9
mov dword [ebp - 0x38], 0x3c66883c
mov dword [ebp - 0x30], 0xecce005a
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1c], ebx
je 0x41c3dc
cmp dword [ebp - 0x38], ebx
mov ecx, edi
jne 0x41c3de
mov ecx, ebx
mov eax, dword [ebp - 0x38]
sub ecx, eax
xor edx, edx
cmp ecx, 0xfffb
setne dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, 0x4a59
je 0x41c403
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x9c]
call fcn.0040bd00
cmp dword [ebp - 0x4c], 0
jne 0x41c4c0
mov esi, dword [ebp - 0x3c]
test esi, esi
je 0x41c4c0
mov dword [ebp - 0x1c], 0xffffffff
cmp dword [ebp - 0x1c], ebx
je 0x41c444
mov dword [ebp - 0x2c], 0xfffffffd
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
jmp 0x41c4a3
mov dword [ebp - 0x30], 0x895196ee
mov dword [ebp - 0x28], 0xfffffff9
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xf6802998
sbb ecx, ecx
neg ecx
sub ecx, dword [ebp - 0x1c]
xor eax, eax
cmp ecx, edi
setl al
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x1c]
add edx, 3
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, 0xe468a07c
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x44]
mov ecx, esi
call fcn.0041a990
mov esi, eax
mov dword [ebp - 0xa8], esi
lea eax, [ebp - 0x70]
push eax
call fcn.0041c4df
mov dword [eax], esi
mov eax, dword [ebp + 8]
mov edi, eax
lea esi, [ebp - 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret