Function at 0x40a6f9
Capabilities:
Check os version
Get common file path
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4aecfb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x17ec
call fcn.004ab150
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x415301
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xee8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xee0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xef0], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0xc1c], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xed8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xb88], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xb80], eax
mov eax, dword [ebp - 0xc1c]
movzx eax, byte [eax]
test eax, eax
je 0x40a95d
mov eax, dword [ebp - 0xb78]
mov dword [ebp - 0xea8], eax
mov eax, dword [ebp - 0xb80]
mov dword [ebp - 0xeb8], eax
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 0xec0], eax
mov dword [ebp - 0x6f8], 0x2def
mov dword [ebp - 0xeb0], str.lfhzyx_mjdfve_pbui_chrqu_lpaqwwz_zqmypb_aauo_gbhizfsr_pzviwtl_ciu_tgpfofad_xmhgn_sbn
cmp dword [ebp - 0x6f8], 0x2e5b
jle 0x40a881
and dword [ebp - 0x1c0], 0
jmp 0x40a7e5
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x32b5
jge 0x40a865
and dword [ebp - 0x3d0], 0
jmp 0x40a807
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0x38f1
jge 0x40a860
mov eax, dword [ebp - 0x1c0]
add eax, dword [ebp - 0x3d0]
cdq
mov dword [ebp - 0xb94], eax
mov dword [ebp - 0xb90], edx
push dword [ebp - 0xb90]
push dword [ebp - 0xb94]
lea ecx, [ebp - 0x15c4]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x15c4]
call fcn.00441f21
jmp 0x40a7fa
jmp 0x40a7d8
push 0x2550
push 0
push 0x1737
push 0xa68
push 0x9dd
call dword [sym.imp.GDI32.dll_ExtFloodFill]
mov eax, dword [ebp - 0xea8]
mov dword [ebp - 0x1a4], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x6f8], 0x2ada
jge 0x40a8a9
push dword [ebp - 0xeb0]
call fcn.00499008
pop ecx
jmp 0x40a8c5
or dword [ebp - 4], 0xffffffff
jmp 0x40a8cf
mov eax, dword [ebp - 0xeb8]
mov dword [ebp - 0xa28], eax
mov eax, dword [ebp - 0xec0]
mov dword [ebp - 0xed0], eax
mov eax, dword [ebp - 0x1a4]
mov dword [eax], 0
jmp 0x40a906
mov eax, dword [ebp - 0x1a4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1a4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1a4]
cmp dword [eax], 7
jg 0x40a958
mov dword [ebp - 0xec8], 0xffffffff
mov eax, dword [ebp - 0xa28]
mov dword [eax], 2
mov eax, dword [ebp - 0x1a4]
cmp dword [eax], 0
je 0x40a93f
cmp dword [ebp - 0xec8], 0
je 0x40a93d
jmp 0x40a958
jmp 0x40a956
push 0
mov ecx, dword [ebp - 0xed0]
call fcn.00442139
mov ecx, dword [ebp - 0xa28]
mov eax, dword [eax]
mov dword [ecx], eax
jmp 0x40a8f5
jmp 0x4152ff
mov eax, dword [ebp - 0xed8]
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp - 0xee0]
mov dword [ebp - 0xeac], eax
mov eax, dword [ebp - 0xee8]
mov dword [ebp - 0xa18], eax
mov eax, dword [ebp - 0xef0]
mov dword [ebp - 0x504], eax
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x1d0], 0
jmp 0x40a9b0
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jge 0x40a9cc
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xef8], 0xfffffffb
jmp 0x40a9a3
mov dword [ebp - 0x16c], 0
jmp 0x40a9e5
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x40aa01
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0xef8], 0
jmp 0x40a9d8
mov byte [ebp - 0x99], 0
push 0x3656
push 0x4ff1
push 0
lea eax, [ebp - 0x99]
push eax
push 0x1be0
call fcn.0042dc44
add esp, 0x14
push 0x7f88
push 1
push 0
push 1
push 0x412
push 0x268c
call fcn.00407df8
add esp, 0x18
mov dword [ebp - 0xf08], 0x7013
mov dword [ebp - 0xf10], 0x5ba7723
push 4
lea ecx, [ebp - 0x1140]
call fcn.0044204b
mov dword [ebp - 0xa48], 0x685b
mov dword [ebp - 0xf00], str.onsn_mwj_ynynsz_qzzsow
cmp dword [ebp - 0xa48], 0x68eb
jle 0x40ab20
and dword [ebp - 0x328], 0
jmp 0x40aaa0
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x5864
jge 0x40ab20
and dword [ebp - 0x1d8], 0
jmp 0x40aac2
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x30a5
jge 0x40ab1b
mov eax, dword [ebp - 0x328]
add eax, dword [ebp - 0x1d8]
cdq
mov dword [ebp - 0xba0], eax
mov dword [ebp - 0xb9c], edx
push dword [ebp - 0xb9c]
push dword [ebp - 0xba0]
lea ecx, [ebp - 0x16f0]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x16f0]
call fcn.00441f21
jmp 0x40aab5
jmp 0x40aa93
mov dword [ebp - 4], 2
cmp dword [ebp - 0xa48], 0x66e2
jge 0x40ab3f
push dword [ebp - 0xf00]
call fcn.00499008
pop ecx
jmp 0x40ab5b
or dword [ebp - 4], 0xffffffff
jmp 0x40ab65
mov dword [ebp - 0x428], 0
jmp 0x40ab7e
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 4
jge 0x40aba0
push dword [ebp - 0x428]
lea ecx, [ebp - 0x1140]
call fcn.00442139
mov dword [eax], 0x4d073ff8
jmp 0x40ab71
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x40abc0
push 0x4a73
push 0
call fcn.0043ed0c
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x1140]
push eax
lea eax, [ebp - 0xf08]
push eax
lea eax, [ebp - 0xf10]
push eax
call fcn.0043dcd0
add esp, 0x10
lea ecx, [ebp - 0x1140]
call fcn.0044211d
push 0
push 1
push 0
push 0x4876
push 0x73e4
push 0x44df
push 0x5397
push 0x380a
call fcn.004165fd
add esp, 0x20
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x4b0], 0xe83c773
mov dword [ebp - 0xa58], 0x1bd77dfc
mov dword [ebp - 0x4bc], 2
mov dword [ebp - 0x4b0], 0xfffffff8
cmp dword [ebp - 0x4b0], 0
jne 0x40ac58
mov dword [ebp - 0xa50], 1
jmp 0x40ac5f
and dword [ebp - 0xa50], 0
cmp dword [ebp - 0xa50], 0
je 0x40ac75
push 0
call fcn.0043565d
pop ecx
jmp 0x40aecc
push 2
lea ecx, [ebp - 0x1170]
call fcn.0044204b
push 1
lea ecx, [ebp - 0x1158]
call fcn.0044204b
push 0
push 1
push 0x752f
lea eax, [ebp - 0x1170]
push eax
push 0x4105
push 0x670b
lea eax, [ebp - 0x12c]
push eax
push 0x45a
call fcn.00401a07
add esp, 0x20
mov dword [ebp - 0x12c], 0
jmp 0x40acd6
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jge 0x40acf5
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x1158]
call fcn.00442139
and dword [eax], 0
jmp 0x40acc9
push 0
lea eax, [ebp - 0xa58]
push eax
push 0x7ba7
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x4b0]
push eax
push 0x7d63
push 0x683
push 0x279b
push 0x67f5
push 1
push 0x73cd
push 0x460a
lea eax, [ebp - 0x1158]
push eax
lea eax, [ebp - 0x1170]
push eax
push 0x7ef1
push 0xecf
push 0x3cea
push 0
call fcn.0041bfd4
add esp, 0x48
mov dword [ebp - 0xa60], 0x749d
mov dword [ebp - 0xf94], str.tuhgoej_ukyocuqk_kyrnixnl
cmp dword [ebp - 0xa60], 0x750e
jle 0x40ae57
and dword [ebp - 0x1e0], 0
jmp 0x40ad92
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x361b
jge 0x40ae57
and dword [ebp - 0x330], 0
jmp 0x40adb8
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0x40a0
jge 0x40ae52
and dword [ebp - 0x1e8], 0
jmp 0x40adde
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x6413
jge 0x40ae4d
and dword [ebp - 0x3d8], 0
jmp 0x40ae00
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0x74e0
jge 0x40ae4b
mov eax, dword [ebp - 0x1e0]
imul eax, dword [ebp - 0x330]
imul eax, dword [ebp - 0x1e8]
xor eax, dword [ebp - 0x3d8]
cdq
mov dword [ebp - 0xbac], eax
mov dword [ebp - 0xba8], edx
push dword [ebp - 0xba8]
push dword [ebp - 0xbac]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x40adf3
jmp 0x40add1
jmp 0x40adab
jmp 0x40ad85
mov dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0xa58], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0xa60], 0x730a
jge 0x40ae90
mov edx, dword [ebp - 0xf94]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x40aeac
or dword [ebp - 4], 0xffffffff
jmp 0x40aeb6
lea ecx, [ebp - 0x1158]
call fcn.0044211d
lea ecx, [ebp - 0x1170]
call fcn.0044211d
mov dword [ebp - 0x1f0], 0
jmp 0x40aee5
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x40af01
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xb70], 0xfffffffb
jmp 0x40aed8
push 1
lea ecx, [ebp - 0x123c]
call fcn.0044204b
mov dword [ebp - 0x1ac], 0xffffffff
lea eax, [ebp - 0x1348]
push eax
push 0
push 0x1fbd
push 0
push 0x2096
lea eax, [ebp - 0x123c]
push eax
call fcn.004040c7
add esp, 0x18
mov byte [ebp - 0x92], 0
push 0
lea eax, [ebp - 0x92]
push eax
push 0x5435
push 0x2557
push 0x381f
call fcn.00419d44
add esp, 0x14
mov dword [ebp - 0x1ac], 0
jmp 0x40af7c
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jl 0x40afb0
mov dword [ebp - 0xf9c], 0xffffffff
push 0
lea eax, [ebp - 0xf9c]
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x123c]
push eax
call fcn.00435484
add esp, 0x10
jmp 0x40af6f
lea ecx, [ebp - 0x123c]
call fcn.0044211d
mov dword [ebp - 0x134], 0
jmp 0x40afd4
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x40b16b
mov dword [ebp - 0xe4], 0x4fd3df75
mov dword [ebp - 0xa68], 0x5f0ed1ad
mov dword [ebp - 0xf8c], 0xfffffff9
mov dword [ebp - 0x12ac], 0xdac7a8cf
mov dword [ebp - 0x338], 0
jmp 0x40b022
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 1
jge 0x40b03e
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0xf98], 0x5ef889a2
jmp 0x40b015
mov dword [ebp - 0xe4], 0x12
jmp 0x40b057
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xfffffff0
jge 0x40b155
mov dword [ebp - 0x4e8], 0x144a
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0xa68], eax
cmp dword [ebp - 0xa68], 0
je 0x40b09d
xor eax, eax
jne 0x40b091
mov eax, dword [ebp - 0xe4]
inc eax
inc eax
je 0x40b09d
mov dword [ebp - 0xa20], 1
jmp 0x40b0a4
and dword [ebp - 0xa20], 0
cmp dword [ebp - 0x4e8], 0
je 0x40b0c2
mov eax, 0xee1d
test eax, eax
je 0x40b0c2
mov dword [ebp - 0x7ec], 1
jmp 0x40b0c9
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x7ec], eax
jg 0x40b0e3
mov dword [ebp - 0x55c], 1
jmp 0x40b0ea
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0xa20]
cmp eax, dword [ebp - 0x55c]
jge 0x40b104
mov dword [ebp - 0x4b8], 1
jmp 0x40b10b
and dword [ebp - 0x4b8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp + eax - 0xf98], ecx
mov eax, dword [ebp - 0x4b8]
sub eax, dword [ebp - 0x4e8]
mov dword [ebp - 0xf8c], eax
push 0
push 0x9c8
push 0x39a3
push 0x3589
push 0x1745
push 0
call fcn.00415819
add esp, 0x18
jmp 0x40b04a
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0xb70], 0
jmp 0x40afc7
mov dword [ebp - 0x1f8], 0xa137b189
push 1
lea ecx, [ebp - 0x1128]
call fcn.0044204b
push 0x4012
lea eax, [ebp - 0x1128]
push eax
push 0
push 0x56ef
lea eax, [ebp - 0x174]
push eax
push 0
push 0x3029
call fcn.004068ef
add esp, 0x1c
mov dword [ebp - 0x174], 0
jmp 0x40b1c4
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x40b1e0
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0xfe0], 0x3717be9f
jmp 0x40b1b7
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x12b4], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x580], eax
push 0
lea ecx, [ebp - 0x1128]
call fcn.00442139
mov ecx, dword [ebp - 0x580]
mov dword [eax], ecx
mov eax, dword [ebp - 0x580]
sub eax, dword [ebp - 0x1f8]
imul ecx, dword [ebp - 0x1f8], 0xe327
cmp eax, ecx
je 0x40b239
mov eax, 0x61d2250d
test eax, eax
jne 0x40b239
and dword [ebp - 0x570], 0
jmp 0x40b243
mov dword [ebp - 0x570], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x570]
mov dword [ebp + eax - 0xfe0], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xfe0], 9
lea ecx, [ebp - 0x1128]
call fcn.0044211d
mov dword [ebp - 0x574], 0xe9bf
push 3
lea ecx, [ebp - 0xfa8]
call fcn.0044204b
mov dword [ebp - 0x468], 0xffffffff
mov dword [ebp - 0x12bc], 4
push 0
lea eax, [ebp - 0xfa8]
push eax
lea eax, [ebp - 0x12c4]
push eax
call fcn.0041aeca
add esp, 0xc
lea eax, [ebp - 0x468]
push eax
lea eax, [ebp - 0x574]
push eax
lea eax, [ebp - 0xfa8]
push eax
push 0
call fcn.004310ee
add esp, 0x10
cmp dword [ebp - 0x468], 0
jne 0x40b2e9
mov dword [ebp - 0x56c], 1
jmp 0x40b2f0
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0
je 0x40b338
mov dword [ebp - 0xa64], 0xf5cbf793
mov eax, dword [ebp - 0xa64]
dec eax
mov dword [ebp - 0xa64], eax
lea eax, [ebp - 0x574]
push eax
push 0
lea eax, [ebp - 0xfa8]
push eax
push 0
call fcn.0043b1e9
add esp, 0x10
jmp 0x40b349
push 1
push 0x6c4d
push 0
call fcn.00403506
add esp, 0xc
lea ecx, [ebp - 0xfa8]
call fcn.0044211d
mov byte [ebp - 0xdd], 0
push 0x62b0
push 1
push 1
push 0x7f83
push 0
push 0x4a2e
push 0x6f27
call fcn.00406b93
add esp, 0x1c
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x40b42c
push 2
lea ecx, [ebp - 0x11b8]
call fcn.0044204b
mov dword [ebp - 0x12cc], 0x867b8f5f
mov dword [ebp - 0xb1c], 1
mov dword [ebp - 0x200], 0
jmp 0x40b3c6
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x40b3e8
push dword [ebp - 0x200]
lea ecx, [ebp - 0x11b8]
call fcn.00442139
mov dword [eax], 4
jmp 0x40b3b9
push 0x429e
push 0
push 0x1c7b
lea eax, [ebp - 0x11b8]
push eax
call fcn.00425387
add esp, 0x10
push 0
push 0x798e
lea eax, [ebp - 0xb1c]
push eax
push 1
call fcn.0042f309
add esp, 0x10
lea ecx, [ebp - 0x11b8]
call fcn.0044211d
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x28], 0x5540d7f8
mov dword [ebp - 0x7f4], 0x6137
mov dword [ebp - 0xe14], str.xzzwucma_rfcqitokf_ifuw_kyzz_pjhjsqgwn_nufpw_ugs_xrlylduu_pmdg_atfid
cmp dword [ebp - 0x7f4], 0x6343
jle 0x40b51e
and dword [ebp - 0x340], 0
jmp 0x40b46d
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x2943
jge 0x40b51e
and dword [ebp - 0x208], 0
jmp 0x40b493
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x3608
jge 0x40b519
and dword [ebp - 0x3e0], 0
jmp 0x40b4b5
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0x120a
jge 0x40b514
mov eax, dword [ebp - 0x340]
and eax, dword [ebp - 0x208]
xor eax, dword [ebp - 0x3e0]
cdq
mov dword [ebp - 0xbb8], eax
mov dword [ebp - 0xbb4], edx
push dword [ebp - 0xbb4]
push dword [ebp - 0xbb8]
lea ecx, [ebp - 0x160c]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x160c]
call fcn.00441f21
jmp 0x40b4a8
jmp 0x40b486
jmp 0x40b460
mov dword [ebp - 4], 6
cmp dword [ebp - 0x7f4], 0x5f25
jge 0x40b53d
push dword [ebp - 0xe14]
call fcn.00499008
pop ecx
jmp 0x40b559
or dword [ebp - 4], 0xffffffff
jmp 0x40b563
mov dword [ebp - 0x54], 0
jmp 0x40b573
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x40b589
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x11d0], 0x902314af
jmp 0x40b56c
mov dword [ebp - 0x57c], 0x306f
mov dword [ebp - 0xb24], str.shsckl_qspdrmoy_wgy_bgaea_sshvlcghl_yxjtjdjvu_vjon_lhxjopmn_fnsnxdvye_emo_izahin_plwxoc_rqsc_ybbr
cmp dword [ebp - 0x57c], 0x3202
jle 0x40b655
and dword [ebp - 0x210], 0
jmp 0x40b5c3
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x4030
jge 0x40b655
and dword [ebp - 0x348], 0
jmp 0x40b5e9
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x309c
jge 0x40b650
and dword [ebp - 0x218], 0
jmp 0x40b60b
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x6bbc
jge 0x40b64e
mov eax, dword [ebp - 0x210]
xor eax, dword [ebp - 0x348]
xor eax, dword [ebp - 0x218]
cdq
mov dword [ebp - 0xbc4], eax
mov dword [ebp - 0xbc0], edx
push dword [ebp - 0xbc0]
push dword [ebp - 0xbc4]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x40b5fe
jmp 0x40b5dc
jmp 0x40b5b6
mov dword [ebp - 0x54], 0
jmp 0x40b665
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x40b67b
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xbd0], 0x2c593c86
jmp 0x40b65e
mov dword [ebp - 4], 8
cmp dword [ebp - 0x57c], 0x2ffd
jge 0x40b69e
mov edx, dword [ebp - 0xb24]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x40b6ba
or dword [ebp - 4], 0xffffffff
jmp 0x40b6c4
mov dword [ebp - 0x28], 0xffffffef
jmp 0x40b6d4
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe8
jl 0x40b983
mov dword [ebp - 0x110], 0x160cbeb9
cmp dword [ebp - 0x28], 0
jge 0x40b6fa
mov dword [ebp - 0x934], 1
jmp 0x40b701
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x934], eax
jne 0x40b718
mov dword [ebp - 0x584], 1
jmp 0x40b71f
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
neg eax
je 0x40b755
push 0x2578
push 0x5821
push 0x1e33
push 0x55fc
push 0x5418
push 0
push 1
push 1
call fcn.00427224
add esp, 0x20
jmp 0x40b97e
mov dword [ebp - 0x430], 0x96da
mov dword [ebp - 0x4c0], 0xfffffffa
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x28], eax
jl 0x40b780
mov dword [ebp - 0x59c], 1
jmp 0x40b787
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x430], 0x6f4846e1
jle 0x40b79f
mov dword [ebp - 0xecc], 1
jmp 0x40b7a6
and dword [ebp - 0xecc], 0
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x430]
add eax, 0x222a2a83
je 0x40b7d6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbd0], 0
je 0x40b7d6
mov dword [ebp - 0x7fc], 1
jmp 0x40b7dd
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x7fc]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x430]
cmp dword [ebp - 0x4c0], eax
je 0x40b80a
mov dword [ebp - 0x58c], 1
jmp 0x40b811
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0xffffffff
jae 0x40b82f
cmp dword [ebp - 0x110], 0
je 0x40b82f
mov dword [ebp - 0x9d4], 1
jmp 0x40b836
and dword [ebp - 0x9d4], 0
cmp dword [ebp - 0x9d4], 0xe31b5465
je 0x40b84e
mov dword [ebp - 0xb2c], 1
jmp 0x40b855
and dword [ebp - 0xb2c], 0
cmp dword [ebp - 0x4c0], 0
je 0x40b879
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x11d0], 0
je 0x40b879
mov dword [ebp - 0x594], 1
jmp 0x40b880
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x594]
lea eax, [ecx + eax - 0xcefc]
test eax, eax
jne 0x40b8a3
mov dword [ebp - 0x804], 1
jmp 0x40b8aa
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x804], eax
jne 0x40b8c4
mov dword [ebp - 0x93c], 1
jmp 0x40b8cb
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x93c]
jne 0x40b8ee
cmp dword [ebp - 0x110], 0
je 0x40b8ee
mov dword [ebp - 0x5a4], 1
jmp 0x40b8f5
and dword [ebp - 0x5a4], 0
cmp dword [ebp - 0x5a4], 0xfffffff8
jge 0x40b90a
mov dword [ebp - 0x80c], 1
jmp 0x40b911
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x80c]
add eax, 0xffff
cmp eax, 2
jne 0x40b92d
mov dword [ebp - 0xe1c], 1
jmp 0x40b934
and dword [ebp - 0xe1c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbd0]
mov dword [ebp - 0x12d4], eax
cmp dword [ebp - 0x28], 9
jg 0x40b959
mov dword [ebp - 0x5ac], 1
jmp 0x40b960
and dword [ebp - 0x5ac], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5ac]
sub ecx, dword [ebp + eax - 0x11d0]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x11d0], ecx
jmp 0x40b6cd
mov dword [ebp - 0x28], 0
jmp 0x40b993
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x40b9a9
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xbd0], 0xc987f9bd
jmp 0x40b98c
mov eax, dword [ebp - 0xb34]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x4fc], eax
mov dword [ebp - 0x1030], 1
mov dword [ebp - 0x102c], 1
mov dword [ebp - 0x1028], 1
mov dword [ebp - 0x1024], 1
lea ecx, [ebp - 0x506]
call fcn.00442148
push eax
lea eax, [ebp - 0x1020]
push eax
lea eax, [ebp - 0x1030]
push eax
lea ecx, [ebp - 0x14dc]
call fcn.0044214b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf20]
call fcn.004420f7
mov dword [ebp - 0x220], 0
jmp 0x40ba2e
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 2
jge 0x40ba4a
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x12f4], 0x9beab1d6
jmp 0x40ba21
push 2
lea ecx, [ebp - 0xf20]
call fcn.00442139
and dword [eax], 0
jmp 0x40ba80
push 2
lea ecx, [ebp - 0xf20]
call fcn.00442139
mov dword [ebp - 0xa24], eax
mov eax, dword [ebp - 0xa24]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xa24]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xf20]
call fcn.00442139
cmp dword [eax], 4
jle 0x40bb93
mov dword [ebp - 0xa4], 0xdbeccce1
mov byte [ebp - 0x94], 0
lea eax, [ebp - 0x94]
push eax
push 0
call fcn.0042e02d
pop ecx
pop ecx
mov dword [ebp - 0xa4], 0
jmp 0x40bad0
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 8
jge 0x40bb8e
mov dword [ebp - 0xe24], 0xeb44952
cmp dword [ebp - 0xa4], 0
jne 0x40bafc
mov dword [ebp - 0xf90], 1
jmp 0x40bb03
and dword [ebp - 0xf90], 0
imul eax, dword [ebp - 0xa4], 0
cmp eax, 1
jbe 0x40bb1b
mov dword [ebp - 0xb3c], 1
jmp 0x40bb22
and dword [ebp - 0xb3c], 0
push 2
lea ecx, [ebp - 0xf20]
call fcn.00442139
cmp dword [eax], 0x4d63a88e
je 0x40bb4c
cmp dword [ebp - 0xe24], 0
je 0x40bb4c
mov dword [ebp - 0x5b4], 1
jmp 0x40bb53
and dword [ebp - 0x5b4], 0
cmp dword [ebp - 0x5b4], 0
je 0x40bb68
mov dword [ebp - 0x814], 1
jmp 0x40bb6f
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x814]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x12f4], eax
jmp 0x40bac3
jmp 0x40ba5c
lea ecx, [ebp - 0xf20]
call fcn.0044211d
mov dword [ebp - 0x13c], 0x689351f2
mov dword [ebp - 0x500], 0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x1080], 0xd564
mov dword [ebp - 0x107c], 0xd564
mov dword [ebp - 0x1078], 0xd564
mov dword [ebp - 0x1074], 0xd564
lea ecx, [ebp - 0x489]
call fcn.00442148
push eax
lea eax, [ebp - 0x1070]
push eax
lea eax, [ebp - 0x1080]
push eax
lea ecx, [ebp - 0x1564]
call fcn.0044214b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x13a4]
call fcn.004420f7
mov dword [ebp - 0x3e8], 0xfffffff9
mov dword [ebp - 0xb4c], 0xc6f44469
cmp dword [ebp - 0x13c], 0
je 0x40bc67
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x12dc], eax
mov eax, 0xbc50
cmp eax, 0xc3a2
jle 0x40bc5a
mov dword [ebp - 0x5bc], 1
jmp 0x40bc61
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x500]
cmp dword [ebp - 0xf0], 0
je 0x40bdf4
cmp dword [ebp - 0x500], 0
je 0x40bdf4
mov dword [ebp - 0xb44], 0xffffffff
lea eax, [ebp - 0xf0]
push eax
push 0
lea eax, [ebp - 0x13a4]
push eax
lea eax, [ebp - 0xb44]
push eax
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x500]
push eax
call fcn.0042d646
add esp, 0x18
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x40bdef
mov dword [ebp - 0x944], 0x4252
mov dword [ebp - 0xed4], str.gtj_zmgwmgd_sbeftnb_casmam_gwia_vdatup_kbbk_dxuovlw
cmp dword [ebp - 0x944], 0x4453
jle 0x40bd96
and dword [ebp - 0x350], 0
jmp 0x40bd08
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x22ec
jge 0x40bd8a
and dword [ebp - 0x228], 0
jmp 0x40bd2a
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x4fcb
jge 0x40bd85
mov eax, dword [ebp - 0x350]
mov ecx, dword [ebp - 0x228]
sar eax, cl
cdq
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbd8], edx
push dword [ebp - 0xbd8]
push dword [ebp - 0xbdc]
lea ecx, [ebp - 0x1780]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x1780]
call fcn.00441f21
jmp 0x40bd1d
jmp 0x40bcfb
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
push 0x22c2
push 0
push 0x1dc3
call fcn.0043381f
add esp, 0xc
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x944], 0x4157
jge 0x40bdc9
push dword [ebp - 0xed4]
call fcn.00499008
pop ecx
jmp 0x40bde5
or dword [ebp - 4], 0xffffffff
jmp 0x40bdef
jmp 0x40bf97
push 1
lea ecx, [ebp - 0x11e8]
call fcn.0044204b
mov dword [ebp - 0x68], 0
jmp 0x40be11
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x40be27
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x1288], 0xf5c9b8db
jmp 0x40be0a
mov dword [ebp - 0x68], 0
jmp 0x40be37
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x40be53
push dword [ebp - 0x68]
lea ecx, [ebp - 0x11e8]
call fcn.00442139
mov dword [eax], 0x19195c58
jmp 0x40be30
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1288]
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0xb4c], eax
mov dword [ebp - 0xf0], 0
jmp 0x40be8b
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x18
jne 0x40bf8c
mov dword [ebp - 0xe2c], 1
mov eax, dword [ebp - 0x13c]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x1288]
je 0x40becc
cmp dword [ebp - 0x3e8], 0
je 0x40becc
mov dword [ebp - 0x5c4], 1
jmp 0x40bed3
and dword [ebp - 0x5c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1288]
cmp eax, dword [ebp - 0x5c4]
jl 0x40bef4
mov dword [ebp - 0x81c], 1
jmp 0x40befb
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0xe2c]
cmp eax, dword [ebp - 0x81c]
je 0x40bf15
mov dword [ebp - 0x5cc], 1
jmp 0x40bf1c
and dword [ebp - 0x5cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5cc]
sub ecx, dword [ebp + eax - 0x1288]
cmp ecx, 0xffff
ja 0x40bf43
mov dword [ebp - 0x9dc], 1
jmp 0x40bf4a
and dword [ebp - 0x9dc], 0
mov esi, dword [ebp - 0x9dc]
add esi, 0x5d07
push 0
lea ecx, [ebp - 0x11e8]
call fcn.00442139
mov dword [eax], esi
push 0x5226
lea eax, [ebp - 0x3e8]
push eax
push 0x12a9
push 0
lea eax, [ebp - 0x13c]
push eax
call fcn.0041aaab
add esp, 0x14
jmp 0x40be7e
lea ecx, [ebp - 0x11e8]
call fcn.0044211d
lea ecx, [ebp - 0x13a4]
call fcn.0044211d
mov dword [ebp - 0x2c], 0x5540d7f8
mov dword [ebp - 0x12e4], 0x177e
mov dword [ebp - 0x12ec], 0xffffffff
mov dword [ebp - 0x12f8], 0xfffffffd
mov dword [ebp - 0x1304], 3
mov dword [ebp - 0xb54], 0x96c7979b
mov dword [ebp - 0x230], 0
jmp 0x40bff4
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x40c010
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x1630], 0xebaeef20
jmp 0x40bfe7
push 0x47f1
push 0xade
push 0x3595
push 0x3619
push 0x5ff5
push 0x7bbb
push 0x61a5
push 0
push 0xec
push 0x623
lea eax, [ebp - 0xb54]
push eax
push 0x3a60
push 0x775a
push 0
push 0x1c30
call fcn.00402021
add esp, 0x3c
push 0x29e4
push 0x19d8
push 0
call fcn.0041aea6
add esp, 0xc
mov dword [ebp - 0x136c], 0xc96dd1e1
mov dword [ebp - 0x1374], 0xffffffff
mov dword [ebp - 0x137c], 0x56a9ef72
mov dword [ebp - 0x1384], 0x1fc3eee
mov dword [ebp - 0x138c], 0xef7d6512
push 2
lea ecx, [ebp - 0x13b4]
call fcn.0044204b
mov dword [ebp - 0x5d4], 0x8ed4a55f
lea eax, [ebp - 0x1394]
push eax
push 0
lea eax, [ebp - 0x13b4]
push eax
call fcn.0041d53c
add esp, 0xc
mov eax, dword [ebp - 0x5d4]
dec eax
mov dword [ebp - 0x5d4], eax
lea ecx, [ebp - 0x13b4]
call fcn.0044211d
push 0x2ef8
push 1
push 0
call fcn.004079f8
add esp, 0xc
mov dword [ebp - 0x824], 0x7aec
mov dword [ebp - 0xf44], str.cqhm_ypyhhi_pkkqw
cmp dword [ebp - 0x824], 0x7bed
jle 0x40c1cc
and dword [ebp - 0x358], 0
jmp 0x40c137
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x5ca3
jge 0x40c1cc
and dword [ebp - 0x238], 0
jmp 0x40c15d
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x163d
jge 0x40c1c7
and dword [ebp - 0x458], 0
jmp 0x40c17f
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 0x35cc
jge 0x40c1c5
mov eax, dword [ebp - 0x358]
cdq
idiv dword [ebp - 0x238]
and edx, dword [ebp - 0x458]
mov eax, edx
cdq
mov dword [ebp - 0xbe8], eax
mov dword [ebp - 0xbe4], edx
push dword [ebp - 0xbe4]
push dword [ebp - 0xbe8]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x40c172
jmp 0x40c150
jmp 0x40c12a
mov dword [ebp - 0x64], 0
jmp 0x40c1dc
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x40c1f2
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x1278], 0x902314af
jmp 0x40c1d5
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x824], 0x7a1d
jge 0x40c215
mov edx, dword [ebp - 0xf44]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x40c231
or dword [ebp - 4], 0xffffffff
jmp 0x40c23b
mov dword [ebp - 0x61c], 0x999
mov dword [ebp - 0xe3c], str.zlwe_jfagv_iywucm_vsk_vvfh_mwmkcsgs_izgg_ziit_bpfqdp_oyvg_itqnczd_dtro
cmp dword [ebp - 0x61c], 0xa7a
jle 0x40c2f8
and dword [ebp - 0x240], 0
jmp 0x40c275
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x643c
jge 0x40c2f8
and dword [ebp - 0x360], 0
jmp 0x40c297
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0x6966
jge 0x40c2f3
mov eax, dword [ebp - 0x240]
cdq
idiv dword [ebp - 0x360]
mov eax, edx
cdq
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbf0], edx
push dword [ebp - 0xbf0]
push dword [ebp - 0xbf4]
lea ecx, [ebp - 0x157c]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x157c]
call fcn.00441f21
jmp 0x40c28a
jmp 0x40c268
mov dword [ebp - 0x38], 0xfe0a8eac
mov dword [ebp - 0x14], 0xfffffffe
push 4
lea ecx, [ebp - 0x13d4]
call fcn.0044204b
mov dword [ebp - 0x5c], 0
jmp 0x40c323
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x40c339
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x4f0], 0x3e469209
jmp 0x40c31c
mov dword [ebp - 0x5c], 0
jmp 0x40c349
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x40c365
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x13d4]
call fcn.00442139
mov dword [eax], 1
jmp 0x40c342
push 0x2bc
push 0
push 1
push 0x7bd9
push 0xb85
push 0x2530
lea eax, [ebp - 0x38]
push eax
call fcn.00403711
add esp, 0x1c
mov dword [ebp - 0x844], 0x1e58
mov dword [ebp - 0xb6c], str.kek_oljgr_rjlkugqj_tgbskdily_jweyujtev_vmqck_ejikt_awakxore_bsrnzbxp
cmp dword [ebp - 0x844], 0x1ff0
jle 0x40c46b
push 0
push 0
push 0x2636
push 0x18f2
call dword [sym.imp.USER32.dll_SendMessageW]
and dword [ebp - 0x248], 0
jmp 0x40c3d7
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x3127
jge 0x40c46b
and dword [ebp - 0x1b4], 0
jmp 0x40c3fd
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x2e3
jge 0x40c466
and dword [ebp - 0x3f0], 0
jmp 0x40c41f
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x8e6
jge 0x40c464
mov eax, dword [ebp - 0x248]
imul eax, dword [ebp - 0x1b4]
imul eax, dword [ebp - 0x3f0]
cdq
mov dword [ebp - 0xc00], eax
mov dword [ebp - 0xbfc], edx
push dword [ebp - 0xbfc]
push dword [ebp - 0xc00]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x40c412
jmp 0x40c3f0
jmp 0x40c3ca
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
je 0x40c47f
mov dword [ebp - 0xb5c], 1
jmp 0x40c486
and dword [ebp - 0xb5c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x145c], eax
mov eax, 0xaff6
test eax, eax
jne 0x40c49c
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jne 0x40c4b0
mov dword [ebp - 0x5dc], 1
jmp 0x40c4b7
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x5dc]
jg 0x40c4d5
push 9
pop eax
test eax, eax
je 0x40c4d5
mov dword [ebp - 0x94c], 1
jmp 0x40c4dc
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x94c]
imul eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jg 0x40c4fe
mov dword [ebp - 0x5e4], 1
jmp 0x40c505
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1464], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x146c], eax
mov eax, 0xed7c
imul eax, eax, 0x3ca4
imul eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x40c543
mov dword [ebp - 0x82c], 1
jmp 0x40c54a
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x82c]
add eax, 8
je 0x40c85f
mov dword [ebp - 0x4c8], 8
mov dword [ebp - 0x5ec], 0x10ad
mov dword [ebp - 0xe34], str.jfolpr_rsgg_ddxadqms_jhmfv
cmp dword [ebp - 0x5ec], 0x10dc
jle 0x40c687
and dword [ebp - 0x250], 0
jmp 0x40c59d
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0xef7
jge 0x40c687
and dword [ebp - 0x368], 0
jmp 0x40c5c3
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0x1bf0
jge 0x40c682
and dword [ebp - 0x258], 0
jmp 0x40c5e9
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x4d39
jge 0x40c67d
and dword [ebp - 0x438], 0
jmp 0x40c60f
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 0x41f6
jge 0x40c678
mov eax, dword [ebp - 0x250]
mov ecx, dword [ebp - 0x368]
sar eax, cl
mov ecx, dword [ebp - 0x258]
sub ecx, dword [ebp - 0x438]
sar eax, cl
cdq
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], edx
push dword [ebp - 0xc08]
push dword [ebp - 0xc0c]
lea ecx, [ebp - 0x1720]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x1720]
call fcn.00441f21
jmp 0x40c602
jmp 0x40c5dc
jmp 0x40c5b6
jmp 0x40c590
mov dword [ebp - 0x60c], 0x360e5697
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x5ec], 0x103a
jge 0x40c6b0
push dword [ebp - 0xe34]
call fcn.00499008
pop ecx
jmp 0x40c6cc
or dword [ebp - 4], 0xffffffff
jmp 0x40c6d6
mov dword [ebp - 0x14], 0
jmp 0x40c6e6
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x40c85a
mov dword [ebp - 0xedc], 0x10b2d4ad
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x4f0], 0
jne 0x40c713
mov dword [ebp - 0xa54], 1
jmp 0x40c71a
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0xa54]
sub eax, dword [ebp - 0x4c8]
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0x4c8]
inc eax
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0xb64], 1
jg 0x40c74e
mov dword [ebp - 0x5f4], 1
jmp 0x40c755
and dword [ebp - 0x5f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4f0]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x4f0]
imul eax, dword [ebp - 0x38]
cmp dword [ebp - 0x5f4], eax
jge 0x40c787
mov dword [ebp - 0x834], 1
jmp 0x40c78e
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x60c]
cmp dword [ebp - 0x834], eax
jl 0x40c7a8
mov dword [ebp - 0x5fc], 1
jmp 0x40c7af
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x5fc], 0x928694a2
jae 0x40c7c7
mov dword [ebp - 0x954], 1
jmp 0x40c7ce
and dword [ebp - 0x954], 0
cmp dword [ebp - 0x954], 0xfffffff9
jl 0x40c7e3
mov dword [ebp - 0x604], 1
jmp 0x40c7ea
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 0xffff
je 0x40c802
mov dword [ebp - 0x83c], 1
jmp 0x40c809
and dword [ebp - 0x83c], 0
cmp dword [ebp - 0x83c], 0x910760b9
jne 0x40c821
mov dword [ebp - 0x9e4], 1
jmp 0x40c828
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x60c]
cmp dword [ebp - 0x9e4], eax
jl 0x40c842
mov dword [ebp - 0x614], 1
jmp 0x40c849
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0xedc], eax
jmp 0x40c6df
jmp 0x40c8e9
and dword [ebp - 0x1058], 0
and dword [ebp - 0x1054], 0
and dword [ebp - 0x1050], 0
and dword [ebp - 0x104c], 0
lea ecx, [ebp - 0x4f5]
call fcn.00442148
push eax
lea eax, [ebp - 0x1048]
push eax
lea eax, [ebp - 0x1058]
push eax
lea ecx, [ebp - 0x14fc]
call fcn.0044214b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x13c4]
call fcn.004420f7
push 0x6bd7
push 0x21a3
push 1
lea eax, [ebp - 0x13c4]
push eax
push 0
push 0x4bfc
push 0x7b24
push 1
push 0x7738
call fcn.00406348
add esp, 0x24
lea ecx, [ebp - 0x13c4]
call fcn.0044211d
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x844], 0x1a7f
jge 0x40c90c
mov edx, dword [ebp - 0xb6c]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x40c928
or dword [ebp - 4], 0xffffffff
jmp 0x40c932
lea ecx, [ebp - 0x13d4]
call fcn.0044211d
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x61c], 0x78b
jge 0x40c95c
push dword [ebp - 0xe3c]
call fcn.00499008
pop ecx
jmp 0x40c978
or dword [ebp - 4], 0xffffffff
jmp 0x40c982
mov dword [ebp - 0x64], 0
jmp 0x40c992
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x40c9a8
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xc78], 0x2c593c86
jmp 0x40c98b
push 2
lea ecx, [ebp - 0xae4]
call fcn.0044204b
mov dword [ebp - 0xb84], 0x1651328f
push 3
lea ecx, [ebp - 0x1200]
call fcn.0044204b
mov dword [ebp - 0x95c], 0x1be1
mov dword [ebp - 0xb74], str.tqmgpwhu_xamadsk_slemlnfjr_assak_pmvqtsj
cmp dword [ebp - 0x95c], 0x1dae
jle 0x40ca86
and dword [ebp - 0x260], 0
jmp 0x40ca06
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x76f6
jge 0x40ca86
and dword [ebp - 0x370], 0
jmp 0x40ca28
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0x642e
jge 0x40ca81
mov eax, dword [ebp - 0x260]
sub eax, dword [ebp - 0x370]
cdq
mov dword [ebp - 0xc18], eax
mov dword [ebp - 0xc14], edx
push dword [ebp - 0xc14]
push dword [ebp - 0xc18]
lea ecx, [ebp - 0x1660]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x1660]
call fcn.00441f21
jmp 0x40ca1b
jmp 0x40c9f9
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x95c], 0x19ce
jge 0x40caa5
push dword [ebp - 0xb74]
call fcn.00499008
pop ecx
jmp 0x40cac1
or dword [ebp - 4], 0xffffffff
jmp 0x40cacb
lea eax, [ebp - 0xae4]
push eax
push 0
lea eax, [ebp - 0xf88]
push eax
push 0x3469
call fcn.0042c349
add esp, 0x10
mov dword [ebp - 0x624], 0x2e71
mov dword [ebp - 0xb7c], str.xvqh_xndegxhay_kwvuei_vdaexvvy_gnanz_wijsyaiyx_hkyxo_xokxgbyg_aia_lzhdg_eef_rojjzigu_rft
cmp dword [ebp - 0x624], 0x307d
jle 0x40cc0c
and dword [ebp - 0x268], 0
jmp 0x40cb22
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0xee8
jge 0x40cc0c
and dword [ebp - 0x3f8], 0
jmp 0x40cb48
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x213e
jge 0x40cc07
and dword [ebp - 0x270], 0
jmp 0x40cb6e
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x7498
jge 0x40cc02
and dword [ebp - 0x378], 0
jmp 0x40cb94
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0x11ea
jge 0x40cbfd
mov eax, dword [ebp - 0x268]
cdq
idiv dword [ebp - 0x3f8]
mov eax, dword [ebp - 0x270]
imul eax, dword [ebp - 0x378]
and eax, edx
cdq
mov dword [ebp - 0xc24], eax
mov dword [ebp - 0xc20], edx
push dword [ebp - 0xc20]
push dword [ebp - 0xc24]
lea ecx, [ebp - 0x17d4]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x17d4]
call fcn.00441f21
jmp 0x40cb87
jmp 0x40cb61
jmp 0x40cb3b
jmp 0x40cb15
push 0x7c4c
push 0x4c9d
push 0
lea eax, [ebp - 0xf88]
push eax
lea eax, [ebp - 0x1200]
push eax
call fcn.0043c746
add esp, 0x14
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x624], 0x2a98
jge 0x40cc4d
push dword [ebp - 0xb7c]
call fcn.00499008
pop ecx
jmp 0x40cc69
or dword [ebp - 4], 0xffffffff
jmp 0x40cc73
mov dword [ebp - 0x84c], 0x79d0
mov dword [ebp - 0xe44], str.slc_nfwd_wuqoss_iif_emezy_rclb_sgcmu_wgldpmkh_vivaxrl_hxfwencn
cmp dword [ebp - 0x84c], 0x7a3c
jle 0x40cd2d
and dword [ebp - 0x278], 0
jmp 0x40ccad
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x6250
jge 0x40cd2d
and dword [ebp - 0x478], 0
jmp 0x40cccf
mov eax, dword [ebp - 0x478]
inc eax
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 0x5836
jge 0x40cd28
mov eax, dword [ebp - 0x278]
xor eax, dword [ebp - 0x478]
cdq
mov dword [ebp - 0xc30], eax
mov dword [ebp - 0xc2c], edx
push dword [ebp - 0xc2c]
push dword [ebp - 0xc30]
lea ecx, [ebp - 0x1690]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x1690]
call fcn.00441f21
jmp 0x40ccc2
jmp 0x40cca0
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x84c], 0x77a8
jge 0x40cd4c
push dword [ebp - 0xe44]
call fcn.00499008
pop ecx
jmp 0x40cd68
or dword [ebp - 4], 0xffffffff
jmp 0x40cd72
push 0
lea ecx, [ebp - 0xae4]
call fcn.00442139
mov dword [eax], 0xffffffe2
jmp 0x40cdab
push 0
lea ecx, [ebp - 0xae4]
call fcn.00442139
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x62c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x62c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xae4]
call fcn.00442139
cmp dword [eax], 0xfffffff4
jl 0x40ce1d
mov dword [ebp - 0x280], 0x386cce57
mov dword [ebp - 0x280], 5
jmp 0x40cde0
mov eax, dword [ebp - 0x280]
dec eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0xffffffe7
jge 0x40cdf9
push 0x976
push 0
call fcn.004271f9
pop ecx
pop ecx
jmp 0x40cdd3
mov byte [ebp - 0x96], 0
push 0
push 0x3dde
push 0
lea eax, [ebp - 0x96]
push eax
call fcn.00431691
add esp, 0x10
jmp 0x40cd87
push 1
lea eax, [ebp - 0xb84]
push eax
push 1
lea eax, [ebp - 0x1200]
push eax
push 0x3a03
push 0x7e5e
push 0
lea eax, [ebp - 0xae4]
push eax
call fcn.0040a369
add esp, 0x20
lea ecx, [ebp - 0x1200]
call fcn.0044211d
lea ecx, [ebp - 0xae4]
call fcn.0044211d
mov dword [ebp - 0x2c], 0xffffffef
jmp 0x40ce70
cmp dword [ebp - 0x2c], 0xffffffe8
jl 0x40e387
mov dword [ebp - 0xa2c], 0xef7d6512
mov dword [ebp - 0x108], 0xce96b779
push 1
lea ecx, [ebp - 0x1230]
call fcn.0044204b
mov dword [ebp - 0x380], 0
jmp 0x40ceb4
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 1
jge 0x40ced6
push dword [ebp - 0x380]
lea ecx, [ebp - 0x1230]
call fcn.00442139
mov dword [eax], 6
jmp 0x40cea7
push 0x1c5c
lea eax, [ebp - 0x108]
push eax
push 0
lea eax, [ebp - 0xa2c]
push eax
push 0x5282
push 0x63bf
push 0x573c
push 0x337d
push 0x32d2
push 0x159a
call fcn.0043c234
add esp, 0x28
mov dword [ebp - 0x108], 0
jmp 0x40cf2a
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jg 0x40cfc0
push 4
lea ecx, [ebp - 0x1218]
call fcn.0044204b
push 0x12d9
lea eax, [ebp - 0x1218]
push eax
push 0x1514
lea eax, [ebp - 0x1474]
push eax
push 0
push 0
push 0x19f1
call fcn.00419f53
add esp, 0x1c
push 0x508d
lea eax, [ebp - 0xa2c]
push eax
push 0x21ae
push 0x7689
push 0x6461
push 1
lea eax, [ebp - 0x1218]
push eax
lea eax, [ebp - 0x108]
push eax
push 0
push 0
push 0x4313
lea eax, [ebp - 0x1230]
push eax
call fcn.00425855
add esp, 0x30
lea ecx, [ebp - 0x1218]
call fcn.0044211d
jmp 0x40cf1d
lea ecx, [ebp - 0x1230]
call fcn.0044211d
mov dword [ebp - 0xec], 0x160cbeb9
mov dword [ebp - 0x634], 0x7046
mov dword [ebp - 0xee4], str.bhposmaso_pie_ecjffonrm_hdiixf_xecnzthy_gcesoo_gkfikfysl_yusq_qypzd_rrgbgvjew_zuftqcqc_vuuoht
cmp dword [ebp - 0x634], 0x737e
jle 0x40d102
push 0x1807
call dword [sym.imp.USER32.dll_SetFocus]
and dword [ebp - 0x288], 0
jmp 0x40d01a
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x4f74
jge 0x40d102
and dword [ebp - 0x400], 0
jmp 0x40d040
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0x43fc
jge 0x40d0fd
and dword [ebp - 0x290], 0
jmp 0x40d066
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x3d4d
jge 0x40d0f8
and dword [ebp - 0x388], 0
jmp 0x40d08c
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0x4acc
jge 0x40d0f3
mov eax, dword [ebp - 0x288]
add eax, dword [ebp - 0x400]
mov ecx, dword [ebp - 0x290]
sar eax, cl
or eax, dword [ebp - 0x388]
cdq
mov dword [ebp - 0xc3c], eax
mov dword [ebp - 0xc38], edx
push dword [ebp - 0xc38]
push dword [ebp - 0xc3c]
lea ecx, [ebp - 0x1750]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x1750]
call fcn.00441f21
jmp 0x40d07f
jmp 0x40d059
jmp 0x40d033
jmp 0x40d00d
mov dword [ebp - 0x194], 0xffffffff
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x634], 0x6e67
jge 0x40d12b
push dword [ebp - 0xee4]
call fcn.00499008
pop ecx
jmp 0x40d147
or dword [ebp - 4], 0xffffffff
jmp 0x40d151
mov dword [ebp - 0x118], 0x6768
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0xf54], 0
mov dword [ebp - 0x974], 0xc7c747ca
mov dword [ebp - 0x298], 0
jmp 0x40d192
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 4
jge 0x40d1ae
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0x550], 0
jmp 0x40d185
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x550], 0xbb6b
jge 0x40d1cd
mov dword [ebp - 0x854], 1
jmp 0x40d1d4
and dword [ebp - 0x854], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x550]
cmp eax, dword [ebp - 0x854]
jle 0x40d1f5
mov dword [ebp - 0x63c], 1
jmp 0x40d1fc
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x63c], eax
jg 0x40d216
mov dword [ebp - 0x64c], 1
jmp 0x40d21d
and dword [ebp - 0x64c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x550], 1
jge 0x40d239
mov dword [ebp - 0xb8c], 1
jmp 0x40d240
and dword [ebp - 0xb8c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x550]
mov dword [ebp - 0x147c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x550], 0x6a0b3493
je 0x40d272
mov dword [ebp - 0x964], 1
jmp 0x40d279
and dword [ebp - 0x964], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x550]
cmp dword [ebp - 0x964], eax
jle 0x40d29a
mov dword [ebp - 0x644], 1
jmp 0x40d2a1
and dword [ebp - 0x644], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x550]
cmp dword [ebp - 0x644], eax
jne 0x40d2c2
mov dword [ebp - 0x85c], 1
jmp 0x40d2c9
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x85c], eax
jge 0x40d2e3
mov dword [ebp - 0x9ec], 1
jmp 0x40d2ea
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x64c]
cmp eax, dword [ebp - 0x9ec]
jge 0x40d30d
cmp dword [ebp - 0x194], 0
je 0x40d30d
mov dword [ebp - 0x654], 1
jmp 0x40d314
and dword [ebp - 0x654], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x550]
cmp dword [ebp - 0x654], eax
jne 0x40d335
mov dword [ebp - 0x864], 1
jmp 0x40d33c
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x864], eax
je 0x40d356
mov dword [ebp - 0x65c], 1
jmp 0x40d35d
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 0x93f6
jl 0x40d375
mov dword [ebp - 0x96c], 1
jmp 0x40d37c
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x96c], eax
jl 0x40d396
mov dword [ebp - 0x50], 0xa137b189
push 1
lea ecx, [ebp - 0x1194]
call fcn.0044204b
mov dword [ebp - 0xbe0], 0xc1da7bc9
mov dword [ebp - 0x3a8], 0
jmp 0x40e3be
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 1
jge 0x40e3e0
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0x1194]
call fcn.00442139
mov dword [eax], 0xfffffffd
jmp 0x40e3b1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], eax
je 0x40e3f4
mov dword [ebp - 0x71c], 1
jmp 0x40e3fb
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x71c], eax
jl 0x40e412
mov dword [ebp - 0x99c], 1
jmp 0x40e419
and dword [ebp - 0x99c], 0
cmp dword [ebp - 0x99c], 8
je 0x40e42e
mov dword [ebp - 0x8cc], 1
jmp 0x40e435
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x724], eax
push 0
lea ecx, [ebp - 0x1194]
call fcn.00442139
mov ecx, dword [ebp - 0x724]
mov dword [eax], ecx
mov eax, dword [ebp - 0x724]
cmp eax, dword [ebp - 0x8cc]
jle 0x40e46d
mov dword [ebp - 0x72c], 1
jmp 0x40e474
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x72c], eax
jg 0x40e48b
mov dword [ebp - 0xa44], 1
jmp 0x40e492
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xa44], eax
jne 0x40e4a9
mov dword [ebp - 0x734], 1
jmp 0x40e4b0
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x734]
jne 0x40e4ca
mov dword [ebp - 0x8d4], 1
jmp 0x40e4d1
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x8d4], eax
jg 0x40e4e8
mov dword [ebp - 0x73c], 1
jmp 0x40e4ef
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0xbe0], eax
push 0x5972
push 0x277a
push 0
call fcn.00420303
add esp, 0xc
lea ecx, [ebp - 0x1194]
call fcn.0044211d
mov dword [ebp - 0x2c], 0
jmp 0x40e52a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x40e6d3
push 2
lea ecx, [ebp - 0x13e4]
call fcn.0044204b
push 0x44a7
lea eax, [ebp - 0x13e4]
push eax
push 0
push 0x56b9
push 1
push 0x1a76
push 0x5846
push 0
lea eax, [ebp - 0x12b0]
push eax
call fcn.00406348
add esp, 0x24
mov byte [ebp - 0x83], 0
mov dword [ebp - 0x9a4], 0x3d0
mov dword [ebp - 0xef4], str.obgmjwroc_noqr_flficpwqr_efkndo_vosetdqh_ooummz_ermocen_bzkopgwm_kfex
cmp dword [ebp - 0x9a4], 0x425
jle 0x40e60f
and dword [ebp - 0x2d8], 0
jmp 0x40e5ae
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x5676
jge 0x40e60f
and dword [ebp - 0x448], 0
jmp 0x40e5d0
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0x2dc4
jge 0x40e60d
mov eax, dword [ebp - 0x2d8]
xor eax, dword [ebp - 0x448]
cdq
mov dword [ebp - 0xc6c], eax
mov dword [ebp - 0xc68], edx
push dword [ebp - 0xc68]
push dword [ebp - 0xc6c]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x40e5c3
jmp 0x40e5a1
push 0
lea eax, [ebp - 0x83]
push eax
push 1
push 0x869
push 0x6611
push 0
push 0x3aae
push 0x4d70
push 0x3c04
call fcn.00432927
add esp, 0x24
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x9a4], 0x50
jge 0x40e65d
mov edx, dword [ebp - 0xef4]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x40e679
or dword [ebp - 4], 0xffffffff
jmp 0x40e683
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x40e6b5
push 0xc8b
push 0x6d1c
push 0x7548
push 1
push 0
push 0x3697
call fcn.0040a097
add esp, 0x18
lea ecx, [ebp - 0x13e4]
call fcn.0044211d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xc78], 0xc987f9bd
jmp 0x40e523
mov dword [ebp - 0xb4], 0x3ae35568
mov dword [ebp - 0xc04], 2
push 2
lea ecx, [ebp - 0x10ec]
call fcn.0044204b
mov dword [ebp - 0xbf8], 0xc6516eae
mov dword [ebp - 0x1314], 0xfffffff7
push 0
lea eax, [ebp - 0x10ec]
push eax
push 0x10b7
lea eax, [ebp - 0x14c]
push eax
push 0
call fcn.0042bed3
add esp, 0x14
mov dword [ebp - 0x14c], 0
jmp 0x40e740
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x40e75c
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0xc10], 9
jmp 0x40e733
mov dword [ebp - 0xb4], 0x12
jmp 0x40e775
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x17
jne 0x40ed3d
push 3
lea ecx, [ebp - 0xa78]
call fcn.0044204b
mov dword [ebp - 0x75c], 0x1615e82a
mov dword [ebp - 0xf64], 0xe9ad3ee7
push 1
push 0x1471
push 0
push 0x657a
lea eax, [ebp - 0x12b8]
push eax
lea eax, [ebp - 0xa78]
push eax
push 0x5319
push 0x39d0
push 0x2d99
push 0x43e3
call fcn.00404199
add esp, 0x28
push 1
push 1
lea eax, [ebp - 0xa78]
push eax
push 0x499f
push 0x3480
push 0x5816
push 0x1299
push 0x964
call fcn.00401a07
add esp, 0x20
push 2
lea ecx, [ebp - 0xa78]
call fcn.00442139
cmp dword [eax], 0
jne 0x40e8e2
push 2
lea ecx, [ebp - 0xa78]
call fcn.00442139
cmp dword [eax], 0xfffffff8
je 0x40e83b
mov dword [ebp - 0x744], 1
jmp 0x40e842
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0xb4]
add eax, 0xffff
mov dword [ebp - 0x75c], eax
push 2
lea ecx, [ebp - 0xa78]
call fcn.00442139
cmp dword [eax], 0
jne 0x40e880
push 2
lea ecx, [ebp - 0xa78]
call fcn.00442139
cmp dword [eax], 0
jne 0x40e880
and dword [ebp - 0x8dc], 0
jmp 0x40e88a
mov dword [ebp - 0x8dc], 1
mov eax, dword [ebp - 0x744]
cmp eax, dword [ebp - 0x8dc]
jle 0x40e8a4
mov dword [ebp - 0x74c], 1
jmp 0x40e8ab
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x74c], eax
je 0x40e8c5
mov dword [ebp - 0xa0c], 1
jmp 0x40e8cc
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0xa0c]
sub eax, 0x470d45ea
jne 0x40e8e2
and dword [ebp - 0x754], 0
jmp 0x40e8ec
mov dword [ebp - 0x754], 1
cmp dword [ebp - 0x754], 0x20d70069
jge 0x40e908
push 1
push 0
call fcn.0040a2e9
pop ecx
pop ecx
jmp 0x40ed2d
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x8e4], 0x33b4
mov dword [ebp - 0xbec], str.inrada_uvumpne_tzzk_dhmdpds_ghefie_raepcbo_vmjkchz_oyzug_utel_niih
cmp dword [ebp - 0x8e4], 0x3448
jle 0x40ea37
and dword [ebp - 0x2e0], 0
jmp 0x40e94c
cmp dword [ebp - 0x2e0], 0x6542
jge 0x40ea37
and dword [ebp - 0x3b0], 0
jmp 0x40e972
cmp dword [ebp - 0x3b0], 0x1a35
jge 0x40ea32
mov dword [ebp - 0xe6c], 0xffffffff
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x8e4], 0x31cb
jge 0x40ea60
push dword [ebp - 0xbec]
call fcn.00499008
pop ecx
jmp 0x40ea7c
or dword [ebp - 4], 0xffffffff
jmp 0x40ea86
mov dword [ebp - 0x154], 0xd2a48b75
push 3
lea ecx, [ebp - 0x126c]
call fcn.0044204b
mov dword [ebp - 0x120], 0xb711a46c
lea eax, [ebp - 0x131c]
push eax
lea eax, [ebp - 0x126c]
push eax
push 0x1617
push 0
push 0x3e8d
push 0x6387
push 0
call fcn.00420c74
add esp, 0x1c
lea eax, [ebp - 0xe6c]
push eax
lea eax, [ebp - 0xbf8]
push eax
lea eax, [ebp - 0x126c]
push eax
lea eax, [ebp - 0x10ec]
push eax
lea eax, [ebp - 0x154]
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x75c]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xf64]
push eax
lea eax, [ebp - 0xb4]
push eax
push 0x2cf5
lea eax, [ebp - 0xc04]
push eax
push 1
lea eax, [ebp - 0xa78]
push eax
push 0
call fcn.0040426f
add esp, 0x3c
mov dword [ebp - 0x120], 0
jmp 0x40eb4e
lea ecx, [ebp - 0xa78]
call fcn.0044211d
jmp 0x40e768
lea ecx, [ebp - 0x10ec]
call fcn.0044211d
cmp dword [ebp - 0x4fc], 0
jle 0x4152ff
push 2
lea ecx, [ebp - 0x534]
call fcn.0044204b
mov dword [ebp - 0x184], 0x1651328f
push 3
lea ecx, [ebp - 0xf30]
call fcn.0044204b
push 0x4add
push 0
lea eax, [ebp - 0xb10]
push eax
lea eax, [ebp - 0x534]
push eax
call fcn.00420ae4
add esp, 0x10
push 0x3706
lea eax, [ebp - 0xf30]
push eax
lea eax, [ebp - 0xb10]
push eax
push 0x336
push 0
call fcn.00416959
add esp, 0x14
push 0
lea ecx, [ebp - 0x534]
call fcn.00442139
mov dword [eax], 0xffffffe2
jmp 0x40edf1
push 0
lea ecx, [ebp - 0x534]
call fcn.00442139
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x764]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x764]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x534]
call fcn.00442139
cmp dword [eax], 0xfffffff4
jl 0x40ee74
mov dword [ebp - 0x300], 0x386cce57
mov dword [ebp - 0x300], 5
jmp 0x40ee26
mov eax, dword [ebp - 0x300]
dec eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0xffffffe7
jge 0x40ee55
mov byte [ebp - 0xb6], 0
push 0
lea eax, [ebp - 0xb6]
push eax
push 1
push 0x5bfc
push 0x51db
call fcn.0040317f
add esp, 0x14
jmp 0x40ee19
mov byte [ebp - 0x87], 0
push 1
lea eax, [ebp - 0x87]
push eax
push 0
call fcn.00405c09
add esp, 0xc
jmp 0x40edcd
mov dword [ebp - 0x184], 0
jmp 0x40ee8d
cmp dword [ebp - 0x184], 0xffffffea
jg 0x40f022
mov dword [ebp - 0x15c], 0x6ce4a6f4
mov dword [ebp - 0x494], 0
cmp dword [ebp - 0x15c], 0
je 0x40efaa
cmp dword [ebp - 0x184], 0
je 0x40efaa
and dword [ebp - 0xe7c], 0
mov eax, 0x28ab
test eax, eax
jne 0x40efcc
lea ecx, [ebp - 0xf30]
call fcn.0044211d
lea ecx, [ebp - 0x534]
call fcn.0044211d
mov dword [ebp - 0x12c0], 0xfffffff9
mov byte [ebp - 0x89], 0
push 0x3753
push 0
push 1
lea eax, [ebp - 0x89]
push eax
call fcn.004025ef
add esp, 0x10
mov byte [ebp - 0x8b], 0
movzx eax, byte [ebp - 0x8b]
test eax, eax
je 0x40f080
push 0x1510
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov dword [ebp - 0xc28], 0xffff
mov dword [ebp - 0x3c0], 0xd29be1d9
lea eax, [ebp - 0x3c0]
push eax
push 0
push 0x7512
push 0
lea eax, [ebp - 0xc28]
push eax
call fcn.00402a65
add esp, 0x14
cmp dword [ebp - 0x3c0], 0
je 0x40f0ff
jmp 0x415333
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xb68], eax
push 0x16c9
push 0x1122
push 0
push dword [ebp - 0xb60]
push dword [ebp - 0xb68]
call fcn.0043c746
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret