Function at 0x420ab6
Capabilities:
Accept command line arguments
Encrypt data using speck
Get common file path
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bf097
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2b08
call fcn.004bb2d0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x4343be
lea eax, [ebp + 0x4c]
mov dword [ebp - 0x19f4], eax
lea eax, [ebp + 0x48]
mov dword [ebp - 0x1744], eax
lea eax, [ebp + 0x3c]
mov dword [ebp - 0x1614], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x174c], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x1604], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x15fc], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x160c], eax
mov eax, dword [ebp - 0x19f4]
movzx eax, byte [eax]
test eax, eax
je 0x434308
mov eax, dword [ebp - 0x1744]
mov dword [ebp - 0x1754], eax
mov eax, dword [ebp - 0x174c]
mov dword [ebp - 0x15e4], eax
mov eax, dword [ebp - 0x1754]
movzx eax, byte [eax]
test eax, eax
je 0x4342d6
mov dword [ebp - 0x1774], 1
push 4
lea ecx, [ebp - 0x1f24]
call fcn.0043557d
mov dword [ebp - 0x1764], 0x65c829e
mov dword [ebp - 0x176c], 8
mov dword [ebp - 0x177c], 0x9015
push 3
lea ecx, [ebp - 0x1f78]
call fcn.0043557d
push 0x15dc
push 1
push 0
push 1
push 0x5fe3
push 0x42a2
push 0x1ea0
push 0x4179
push 0x6dbb
push 0x47ab
push 0x4cc7
lea eax, [ebp - 0x175c]
push eax
push 1
push 0x352
lea eax, [ebp - 0x1f24]
push eax
push 0x66ac
push 1
push 0x74f0
push 0x726c
call fcn.0040e36d
add esp, 0x4c
push 0x7e52
lea eax, [ebp - 0x1f78]
push eax
push 0x14b8
push 0x43ad
push 1
push 0x2b81
push 1
push 1
push 0x7db
push 0
push 0x2332
push 0x6a34
lea eax, [ebp - 0x175c]
push eax
push 0x1eb8
push 1
call fcn.0041f168
add esp, 0x3c
push 0x4f1d
lea eax, [ebp - 0x1764]
push eax
push 1
push 1
push 0x1a11
lea eax, [ebp - 0x176c]
push eax
lea eax, [ebp - 0x1f78]
push eax
push 0x1029
lea eax, [ebp - 0x1774]
push eax
lea eax, [ebp - 0x177c]
push eax
push 0
push 0x40f5
lea eax, [ebp - 0x1f24]
push eax
push 0x5964
call fcn.00406aa1
add esp, 0x38
lea ecx, [ebp - 0x1f78]
call fcn.0043564f
lea ecx, [ebp - 0x1f24]
call fcn.0043564f
push 0x6b43
push 0
push 1
push 0
push 1
push 0x5e5a
push 0xa4c
call fcn.00419872
add esp, 0x1c
mov dword [ebp - 0x1be4], 1
mov dword [ebp - 0x1f0], 0xffffffff
mov dword [ebp - 0x26a4], 0x4eea2a3b
mov dword [ebp - 0x2648], 1
push 1
lea ecx, [ebp - 0x24cc]
call fcn.0043557d
mov dword [ebp - 0x23d0], 0x21afa9b6
mov dword [ebp - 0x50], 0
jmp 0x420d1f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x420d35
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x24bc], 0
jmp 0x420d18
mov dword [ebp - 0x50], 0
jmp 0x420d45
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x420d61
push dword [ebp - 0x50]
lea ecx, [ebp - 0x24cc]
call fcn.0043566b
mov dword [eax], 0xfffffffb
jmp 0x420d3e
mov dword [ebp - 0x50], 0
jmp 0x420d71
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x420d87
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x1354], 0xf1a969ac
jmp 0x420d6a
mov dword [ebp - 0x1f0], 0
jmp 0x420da0
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 2
jg 0x420e66
push 1
lea ecx, [ebp - 0x1b44]
call fcn.0043557d
mov dword [ebp - 0x348], 0
jmp 0x420dd3
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 1
jge 0x420df2
push dword [ebp - 0x348]
lea ecx, [ebp - 0x1b44]
call fcn.0043566b
and dword [eax], 0
jmp 0x420dc6
push 0
lea ecx, [ebp - 0x1b44]
call fcn.0043566b
and dword [eax], 0
jmp 0x420e28
push 0
lea ecx, [ebp - 0x1b44]
call fcn.0043566b
mov dword [ebp - 0xe6c], eax
mov eax, dword [ebp - 0xe6c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xe6c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1b44]
call fcn.0043566b
cmp dword [eax], 2
jg 0x420e56
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [ebp - 0x1f0]
mov eax, dword [ebp + eax*4 - 0x24bc]
mov dword [ebp + ecx*4 - 0x24bc], eax
jmp 0x420e04
lea ecx, [ebp - 0x1b44]
call fcn.0043564f
jmp 0x420d93
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1354]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1354], eax
lea ecx, [ebp - 0x24cc]
call fcn.0043564f
push 4
lea ecx, [ebp - 0x2038]
call fcn.0043557d
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x258], 0xfffffffe
mov dword [ebp - 0x298], 0
jmp 0x420ec6
mov eax, dword [ebp - 0x298]
dec eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0xffffffeb
jg 0x420ffe
mov dword [ebp - 0x1e14], 0xfffffffd
mov dword [ebp - 0x1e10], 0xfffffffd
mov dword [ebp - 0x1e0c], 0xfffffffd
mov dword [ebp - 0x1e08], 0xfffffffd
lea ecx, [ebp - 0x6a1]
call fcn.0043567a
push eax
lea eax, [ebp - 0x1e04]
push eax
lea eax, [ebp - 0x1e14]
push eax
lea ecx, [ebp - 0x28b0]
call fcn.0043567d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x24dc]
call fcn.00435629
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jne 0x420f53
xor eax, eax
inc eax
jne 0x420f53
and dword [ebp - 0x135c], 0
jmp 0x420f5d
mov dword [ebp - 0x135c], 1
push 0
lea ecx, [ebp - 0x24dc]
call fcn.0043566b
mov ecx, dword [ebp - 0x135c]
mov dword [eax], ecx
mov dword [ebp - 0x258], 0
jmp 0x420f8b
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xfffffffd
jl 0x420fee
push 0x7a9d
push 1
push 1
push 0
push 0x5f28
push 0x272c
push 0x10d1
push 0x3c62
push 0x60ae
push 0x7a04
push 0x63b1
push 0x22d2
push 1
push 0x6bcd
push 0x3fd7
push 0x6749
push 1
push 0x4db5
push 0x3575
call fcn.0040e36d
add esp, 0x4c
jmp 0x420f7e
lea ecx, [ebp - 0x24dc]
call fcn.0043564f
jmp 0x420eb9
mov dword [ebp - 0x1bdc], 0x65c829e
mov dword [ebp - 0x354], 0x6ff23b1a
mov dword [ebp - 0x13cc], 0xa01c77dc
mov dword [ebp - 0x1364], 0x4a51
mov dword [ebp - 0x1784], str.rxz_isehd_qdhd_fsmienyn_ajojb
cmp dword [ebp - 0x1364], 0x4ab7
jle 0x4210bb
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
and dword [ebp - 0x5ac], 0
jmp 0x42105a
mov eax, dword [ebp - 0x5ac]
inc eax
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 0x3523
jge 0x4210bb
and dword [ebp - 0x34c], 0
jmp 0x42107c
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0x5bf4
jge 0x4210b9
mov eax, dword [ebp - 0x5ac]
sub eax, dword [ebp - 0x34c]
cdq
mov dword [ebp - 0x17a0], eax
mov dword [ebp - 0x179c], edx
push dword [ebp - 0x179c]
push dword [ebp - 0x17a0]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x42106f
jmp 0x42104d
mov dword [ebp - 0x4e4], 0
jmp 0x4210d4
mov eax, dword [ebp - 0x4e4]
inc eax
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x4e4], 2
jge 0x4210f0
mov eax, dword [ebp - 0x4e4]
mov dword [ebp + eax*4 - 0x1d48], 0x7084bc9c
jmp 0x4210c7
and dword [ebp - 4], 0
cmp dword [ebp - 0x1364], 0x47e9
jge 0x421110
mov edx, dword [ebp - 0x1784]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x42112c
or dword [ebp - 4], 0xffffffff
jmp 0x421136
cmp dword [ebp - 0x354], 0
jne 0x421194
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x279c], eax
mov eax, 0x165352f7
cmp eax, 0x5b2906c
jge 0x421163
mov dword [ebp - 0x136c], 1
jmp 0x42116a
and dword [ebp - 0x136c], 0
mov eax, dword [ebp - 0x136c]
mov dword [ebp - 0x354], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d48]
cmp dword [ebp - 0x354], eax
je 0x421194
mov eax, 0xacd40988
test eax, eax
je 0x4211b0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d48], 0
je 0x4211b0
mov dword [ebp - 0x1374], 1
jmp 0x4211b7
and dword [ebp - 0x1374], 0
cmp dword [ebp - 0x1374], 1
ja 0x4211cc
mov dword [ebp - 0x137c], 1
jmp 0x4211d3
and dword [ebp - 0x137c], 0
cmp dword [ebp - 0x137c], 0x8e99
jg 0x42134f
mov eax, 0xb4ef66b1
test eax, eax
je 0x42134f
mov dword [ebp - 0x1384], 0x567b
mov dword [ebp - 0x178c], str.utzmgmmn_zvdomboa_fdcji_bvgduboj_lnayenhbp_crkefco_lque_kkuddl_wbo_kiaemua_tjnnfxmg_sth
cmp dword [ebp - 0x1384], 0x5995
jle 0x4212b3
and dword [ebp - 0x614], 0
jmp 0x42122a
mov eax, dword [ebp - 0x614]
inc eax
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x614], 0x28a3
jge 0x4212ad
and dword [ebp - 0x35c], 0
jmp 0x42124c
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0x844
jge 0x4212a8
mov eax, dword [ebp - 0x614]
cdq
idiv dword [ebp - 0x35c]
mov eax, edx
cdq
mov dword [ebp - 0x17ac], eax
mov dword [ebp - 0x17a8], edx
push dword [ebp - 0x17a8]
push dword [ebp - 0x17ac]
lea ecx, [ebp - 0x2990]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0x2990]
call fcn.00435424
jmp 0x42123f
jmp 0x42121d
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov byte [ebp - 0x162], 0
push 0
lea eax, [ebp - 0x162]
push eax
push 0
push 1
push 1
push 0x5e59
call fcn.0041b3b4
add esp, 0x18
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1384], 0x529a
jge 0x4212f5
push dword [ebp - 0x178c]
call fcn.004a9457
pop ecx
jmp 0x421311
or dword [ebp - 4], 0xffffffff
jmp 0x42131b
mov byte [ebp - 0x191], 0
push 1
push 0x1d72
push 1
lea eax, [ebp - 0x191]
push eax
push 0x7565
push 0x419d
push 0x6e13
push 1
push 0
call fcn.0040aabf
add esp, 0x24
jmp 0x421398
mov byte [ebp - 0x164], 0
push 0
push 0x5af1
push 0x53d0
push 0x2ee6
push 0x3037
lea eax, [ebp - 0x164]
push eax
push 0x556a
push 0x524c
push 0
push 0x3e37
push 0x3ac7
push 0x6c05
push 1
call fcn.00402569
add esp, 0x34
mov eax, dword [ebp - 0x13cc]
inc eax
mov dword [ebp - 0x13cc], eax
mov dword [ebp - 0x13d4], 0x60d1
mov dword [ebp - 0x1794], str.jsrm_vbnluxqu_maif_eynyinnf_ddskm_gqzy_kwuw_cyxcagvk_pgrlmi
cmp dword [ebp - 0x13d4], 0x615d
jle 0x42143c
and dword [ebp - 0x4ec], 0
jmp 0x4213db
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0x7265
jge 0x42143c
and dword [ebp - 0x364], 0
jmp 0x4213fd
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x44d9
jge 0x42143a
mov eax, dword [ebp - 0x4ec]
or eax, dword [ebp - 0x364]
cdq
mov dword [ebp - 0x17b8], eax
mov dword [ebp - 0x17b4], edx
push dword [ebp - 0x17b4]
push dword [ebp - 0x17b8]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x4213f0
jmp 0x4213ce
mov dword [ebp - 0x1b34], 8
mov dword [ebp - 4], 4
cmp dword [ebp - 0x13d4], 0x5d9a
jge 0x421469
mov edx, dword [ebp - 0x1794]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x421485
or dword [ebp - 4], 0xffffffff
jmp 0x42148f
mov dword [ebp - 0x140c], 0x244d513c
mov dword [ebp - 0x68], 0x8d7cbae8
mov dword [ebp - 0x36c], 0x4c7ba3f3
mov dword [ebp - 0x1aac], 0x2138b36c
mov dword [ebp - 0x1ab4], 0xfffffffd
mov dword [ebp - 0x5b4], 0
jmp 0x4214d7
mov eax, dword [ebp - 0x5b4]
inc eax
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 3
jge 0x4214f3
mov eax, dword [ebp - 0x5b4]
mov dword [ebp + eax*4 - 0x283c], 0xffffffff
jmp 0x4214ca
cmp dword [ebp - 0x68], 0
jne 0x42150c
cmp dword [ebp - 0x68], 0
jne 0x42150c
xor eax, eax
jne 0x42150c
and dword [ebp - 0x13dc], 0
jmp 0x421516
mov dword [ebp - 0x13dc], 1
mov eax, dword [ebp - 0x13dc]
neg eax
cmp eax, dword [ebp - 0x68]
jge 0x42152f
mov dword [ebp - 0x13e4], 1
jmp 0x421536
and dword [ebp - 0x13e4], 0
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x13e4]
lea eax, [ecx + eax + 3]
imul eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x68]
jg 0x421558
mov dword [ebp - 0x13ec], 1
jmp 0x42155f
and dword [ebp - 0x13ec], 0
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x13ec], eax
jl 0x421579
mov dword [ebp - 0x13f4], 1
jmp 0x421580
and dword [ebp - 0x13f4], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x13f4], eax
jne 0x421597
mov dword [ebp - 0x13fc], 1
jmp 0x42159e
and dword [ebp - 0x13fc], 0
cmp dword [ebp - 0x13fc], 0
jne 0x4215b3
mov dword [ebp - 0x1404], 1
jmp 0x4215ba
and dword [ebp - 0x1404], 0
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x1404]
cmp eax, dword [ebp - 0x68]
jle 0x4215d7
cmp dword [ebp - 0x68], 0
jne 0x4215d7
and dword [ebp - 0x1aa4], 0
jmp 0x4215e1
mov dword [ebp - 0x1aa4], 1
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x23d8], eax
mov dword [ebp - 0x140c], 0
mov eax, dword [ebp - 0x140c]
inc eax
sub eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x1aac]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x36c], 0
je 0x421628
cmp dword [ebp - 0x36c], 0
je 0x421628
mov dword [ebp - 0x1428], 1
jmp 0x42162f
and dword [ebp - 0x1428], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x283c]
cmp dword [ebp - 0x1428], eax
jle 0x421650
mov dword [ebp - 0x1390], 1
jmp 0x421657
and dword [ebp - 0x1390], 0
cmp dword [ebp - 0x1390], 0xcd45
jge 0x42166f
mov dword [ebp - 0x890], 1
jmp 0x421676
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x1ab4], eax
mov dword [ebp - 0x1b2c], 0x9015
mov dword [ebp - 0x80], 0xb32a831d
mov dword [ebp - 0x4f4], 4
mov dword [ebp - 0x230], 0xbd4856cd
mov dword [ebp - 0x1e8], 0xfffc
mov dword [ebp - 0x6c8], 0xb296
mov dword [ebp - 0x314], 0x1675
mov dword [ebp - 0x1acc], 0xffff
mov dword [ebp - 0x1ae4], 0x5e7
mov dword [ebp - 0xeb8], 0x42359916
mov dword [ebp - 0x44], 0
jmp 0x4216f3
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x421709
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x7c8], 1
jmp 0x4216ec
mov dword [ebp - 0x44], 0
jmp 0x421719
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x42172f
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x374], 0x1dda8db8
jmp 0x421712
mov dword [ebp - 0x44], 0
jmp 0x42173f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x421755
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x7d4], 0xffffffff
jmp 0x421738
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x2650], eax
cmp dword [ebp - 0x80], 0xffffffff
jbe 0x42177c
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x42177c
mov dword [ebp - 0x134c], 1
jmp 0x421783
and dword [ebp - 0x134c], 0
cmp dword [ebp - 0x134c], 0
je 0x42179e
cmp dword [ebp - 0x80], 0
je 0x42179e
mov dword [ebp - 0x780], 1
jmp 0x4217a5
and dword [ebp - 0x780], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x780]
mov dword [ebp + eax - 0x7c8], ecx
cmp dword [ebp - 0x780], 0
je 0x4217d3
cmp dword [ebp - 0x80], 0
je 0x4217d3
mov dword [ebp - 0x12f8], 1
jmp 0x4217da
and dword [ebp - 0x12f8], 0
cmp dword [ebp - 0x12f8], 0x79c63c40
jle 0x4217f2
mov dword [ebp - 0x898], 1
jmp 0x4217f9
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x4f4]
imul eax, dword [ebp - 0x898]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x4f4], eax
jge 0x421826
mov dword [ebp - 0xe88], 1
jmp 0x42182d
and dword [ebp - 0xe88], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0xe88], eax
je 0x421847
mov dword [ebp - 0x8a0], 1
jmp 0x42184e
and dword [ebp - 0x8a0], 0
cmp dword [ebp - 0x8a0], 0
jne 0x421867
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x421867
and dword [ebp - 0x1180], 0
jmp 0x421871
mov dword [ebp - 0x1180], 1
cmp dword [ebp - 0x1180], 1
jae 0x421886
mov dword [ebp - 0x8a8], 1
jmp 0x42188d
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x8a8], eax
jl 0x4218a7
mov dword [ebp - 0xe90], 1
jmp 0x4218ae
and dword [ebp - 0xe90], 0
cmp dword [ebp - 0xe90], 1
ja 0x4218c3
mov dword [ebp - 0x8b0], 1
jmp 0x4218ca
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x8b0]
neg eax
sub eax, dword [ebp - 0x230]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x374]
jg 0x4218f3
mov dword [ebp - 0x13b8], 1
jmp 0x4218fa
and dword [ebp - 0x13b8], 0
mov eax, dword [ebp - 0x13b8]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x23e0], eax
cmp dword [ebp - 0x4f4], 0
jne 0x421927
mov dword [ebp - 0xe98], 1
jmp 0x42192e
and dword [ebp - 0xe98], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x374], 5
jne 0x42194a
mov dword [ebp - 0x8b8], 1
jmp 0x421951
and dword [ebp - 0x8b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c8]
cmp dword [ebp - 0x8b8], eax
jg 0x421972
mov dword [ebp - 0x8c0], 1
jmp 0x421979
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0xe98]
cmp eax, dword [ebp - 0x8c0]
jne 0x421993
mov dword [ebp - 0x1188], 1
jmp 0x42199a
and dword [ebp - 0x1188], 0
cmp dword [ebp - 0x1188], 0x2420
jge 0x4219b2
mov dword [ebp - 0x8c8], 1
jmp 0x4219b9
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x6c8]
cmp eax, dword [ebp - 0x8c8]
je 0x4219d8
or eax, 0xffffffff
je 0x4219d8
mov dword [ebp - 0x1abc], 1
jmp 0x4219df
and dword [ebp - 0x1abc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c8]
mov dword [ebp - 0x2718], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x374]
sub eax, 0x9cde
cmp eax, dword [ebp - 0x314]
jne 0x421a18
mov dword [ebp - 0xea0], 1
jmp 0x421a1f
and dword [ebp - 0xea0], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0xea0], eax
jne 0x421a36
mov dword [ebp - 0x8d0], 1
jmp 0x421a3d
and dword [ebp - 0x8d0], 0
cmp dword [ebp - 0x8d0], 0
jb 0x421a52
mov dword [ebp - 0x1300], 1
jmp 0x421a59
and dword [ebp - 0x1300], 0
mov eax, dword [ebp - 0x1300]
neg eax
jne 0x421a71
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7c8], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7c8], 0x8101bc64
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x230], eax
jg 0x421a9c
mov dword [ebp - 0x8d8], 1
jmp 0x421aa3
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x8d8]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x421abe
mov dword [ebp - 0xea8], 1
jmp 0x421ac5
and dword [ebp - 0xea8], 0
imul eax, dword [ebp - 0xea8], 0x8e43
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x7d4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x374]
je 0x421af7
mov dword [ebp - 0x8e0], 1
jmp 0x421afe
and dword [ebp - 0x8e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7d4]
cmp dword [ebp - 0x8e0], eax
jl 0x421b2c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7d4], 0
jne 0x421b2c
and dword [ebp - 0x1190], 0
jmp 0x421b36
mov dword [ebp - 0x1190], 1
mov eax, dword [ebp - 0x6c8]
cmp dword [ebp - 0x1190], eax
jne 0x421b50
mov dword [ebp - 0x8e8], 1
jmp 0x421b57
and dword [ebp - 0x8e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7d4]
cmp eax, dword [ebp - 0x8e8]
jg 0x421b78
mov dword [ebp - 0xeb0], 1
jmp 0x421b7f
and dword [ebp - 0xeb0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7d4]
cmp dword [ebp - 0xeb0], eax
jle 0x421ba0
mov dword [ebp - 0x1ac4], 1
jmp 0x421ba7
and dword [ebp - 0x1ac4], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x23e8], eax
cmp dword [ebp - 0x80], 0
je 0x421d42
mov dword [ebp - 0x1f8], 0xfffffffa
mov dword [ebp - 0x2658], 0xffffffff
mov dword [ebp - 0x23f0], 0x4ca6a668
mov dword [ebp - 0x1aec], 0xfffffff8
cmp dword [ebp - 0x1acc], 0
je 0x421c43
cmp dword [ebp - 0x314], 0xffffffff
jl 0x421c03
mov dword [ebp - 0x8f0], 1
jmp 0x421c0a
and dword [ebp - 0x8f0], 0
cmp dword [ebp - 0x8f0], 0x1f29a3a7
jge 0x421c22
mov dword [ebp - 0x142c], 1
jmp 0x421c29
and dword [ebp - 0x142c], 0
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x142c], eax
jne 0x421c43
mov dword [ebp - 0x1ad4], 1
jmp 0x421c4a
and dword [ebp - 0x1ad4], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x27dc], eax
mov eax, dword [ebp - 0x1f8]
sub eax, 0x7078c3f
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x7d4]
je 0x421c7c
mov dword [ebp - 0x1adc], 1
jmp 0x421c83
and dword [ebp - 0x1adc], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x23f8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7c8], 0
je 0x421cb4
cmp dword [ebp - 0x1ae4], 0
je 0x421cb4
mov dword [ebp - 0x8f8], 1
jmp 0x421cbb
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0x8f8]
mov dword [ebp - 0xeb8], eax
mov eax, dword [ebp - 0xeb8]
mov dword [ebp - 0x2660], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x2400], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x2720], eax
cmp dword [ebp - 0x1f8], 0x350090e7
jne 0x421d03
mov dword [ebp - 0x900], 1
jmp 0x421d0a
and dword [ebp - 0x900], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x900]
mov dword [ebp + eax - 0x7c8], ecx
lea eax, [ebp - 0x1aec]
push eax
push 1
push 0x1aaf
push 0
push 1
push 1
push 0
push 0x4b6
call fcn.00410a55
add esp, 0x20
jmp 0x421dc1
mov dword [ebp - 0x1af4], 0xf1f47437
push 0x3c89
push 0
lea eax, [ebp - 0x1af4]
push eax
push 0x6a3a
push 0
push 0x1b9c
push 0x7cfd
push 1
lea eax, [ebp - 0x6c8]
push eax
push 0x6e8
push 0x4523
push 0x5749
call fcn.00409869
add esp, 0x30
mov dword [ebp - 0x1e8], 0
jmp 0x421da4
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 1
jg 0x421dc1
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp + eax*4 - 0x7d4], 0
je 0x421dbf
jmp 0x421dc1
jmp 0x421d97
push 3
lea ecx, [ebp - 0x1f90]
call fcn.0043557d
mov dword [ebp - 0x38c], 0xfffffff9
mov dword [ebp - 0x170], 0x833fcb50
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x66c], 0
jmp 0x421e05
mov eax, dword [ebp - 0x66c]
inc eax
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 2
jge 0x421e21
mov eax, dword [ebp - 0x66c]
mov dword [ebp + eax*4 - 0x2970], 0xffffffff
jmp 0x421df8
lea eax, [ebp - 0x504]
push eax
push 1
push 0x71d1
push 1
push 0x2b45
push 1
push 1
lea eax, [ebp - 0x170]
push eax
push 1
push 0x3312
push 0
lea eax, [ebp - 0x38c]
push eax
push 0x3cd2
call fcn.004202a5
add esp, 0x34
cmp dword [ebp - 0x38c], 0
je 0x42201c
mov dword [ebp - 0x1198], 0x6a3f
mov dword [ebp - 0x1afc], str.xbgp_agxlgxgd_uipv_ssboo_mmv_jysah_dbyigb_wzhmblvt_rda_vfs
cmp dword [ebp - 0x1198], 0x6be0
jle 0x421f57
and dword [ebp - 0x37c], 0
jmp 0x421ea5
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0x876
jge 0x421f57
and dword [ebp - 0x4fc], 0
jmp 0x421ecb
mov eax, dword [ebp - 0x4fc]
inc eax
mov dword [ebp - 0x4fc], eax
cmp dword [ebp - 0x4fc], 0x2d8c
jge 0x421f52
and dword [ebp - 0x384], 0
jmp 0x421eed
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0x15aa
jge 0x421f4d
mov eax, dword [ebp - 0x37c]
imul eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x384]
cdq
mov dword [ebp - 0x17c4], eax
mov dword [ebp - 0x17c0], edx
push dword [ebp - 0x17c0]
push dword [ebp - 0x17c4]
lea ecx, [ebp - 0x2a8c]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0x2a8c]
call fcn.00435424
jmp 0x421ee0
jmp 0x421ebe
jmp 0x421e98
mov dword [ebp - 0x1b04], 0x6b8f3d42
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1198], 0x6766
jge 0x421f80
push dword [ebp - 0x1afc]
call fcn.004a9457
pop ecx
jmp 0x421f9c
or dword [ebp - 4], 0xffffffff
jmp 0x421fa6
push 1
push 0x63fb
push 1
push 0x7c4a
push 0x7690
push 0
push 0x7b30
push 0x5823
push 0x3010
push 1
call fcn.0040d6bd
add esp, 0x28
push 0xf86
push 0
push 0x67e7
push 0x21e2
push 1
push 0x3745
push 0x21ab
push 0x66f4
lea eax, [ebp - 0x38c]
push eax
push 1
push 0
push 0x71cb
push 0
lea eax, [ebp - 0x1b04]
push eax
call fcn.00413f0a
add esp, 0x38
jmp 0x4222bb
mov dword [ebp - 0x2408], 0x9339b884
mov dword [ebp - 0x2668], 0xfe1f230b
mov dword [ebp - 0x2410], 0xdd8e181f
mov dword [ebp - 0x27a4], 7
mov dword [ebp - 0x2418], 0x7f5e1753
mov dword [ebp - 0x5bc], 0
jmp 0x422067
mov eax, dword [ebp - 0x5bc]
inc eax
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 4
jge 0x422083
mov eax, dword [ebp - 0x5bc]
mov dword [ebp + eax*4 - 0x1c2c], 0x188047d2
jmp 0x42205a
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x2670], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1c2c], 0xf63588c5
je 0x4220ad
mov dword [ebp - 0x1b0c], 1
jmp 0x4220b4
and dword [ebp - 0x1b0c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c2c]
mov dword [ebp - 0x2420], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x1c2c], 0xf7d2
add eax, 0x2e0f2044
cmp eax, 0x9f19
jg 0x4220f0
mov dword [ebp - 0x908], 1
jmp 0x4220f7
and dword [ebp - 0x908], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c2c]
mov dword [ebp - 0x2728], eax
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x2428], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x2678], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x2430], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1c2c], 0
jne 0x422155
mov dword [ebp - 0xec0], 1
jmp 0x42215c
and dword [ebp - 0xec0], 0
cmp dword [ebp - 0xec0], 0x6b471dfd
jne 0x422174
mov dword [ebp - 0x910], 1
jmp 0x42217b
and dword [ebp - 0x910], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x910]
sub ecx, dword [ebp + eax - 0x1c2c]
mov dword [ebp - 0x504], ecx
mov dword [ebp - 0x170], 0
jmp 0x4221ad
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jg 0x4222bb
mov dword [ebp - 0x27cc], 0xd514faf1
mov dword [ebp - 0x2438], 7
mov dword [ebp - 0x2680], 0x2a1efe0c
mov dword [ebp - 0x2440], 0xfffffffe
mov dword [ebp - 0x2730], 3
mov dword [ebp - 0x2448], 0x98072f25
push 3
lea ecx, [ebp - 0x24ec]
call fcn.0043557d
mov dword [ebp - 0x1b14], 0x360e5697
mov dword [ebp - 0x31c], 0
jmp 0x422226
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 1
jge 0x422242
mov eax, dword [ebp - 0x31c]
mov dword [ebp + eax*4 - 0x2688], 0x983c17a3
jmp 0x422219
push 0x6a71
push 1
push 0xcab
lea eax, [ebp - 0x31c]
push eax
push 0x3bb2
push 0x58c5
lea eax, [ebp - 0x24ec]
push eax
push 0xbcf
push 0x247c
push 0x451e
push 0x33
push 0x34fa
push 0x4b
push 1
push 1
call fcn.004082e1
add esp, 0x3c
push 0x6fcc
push 1
push 0
push 0
push 0x7b6d
lea eax, [ebp - 0x1b14]
push eax
push 0
call fcn.00405cc5
add esp, 0x1c
lea ecx, [ebp - 0x24ec]
call fcn.0043564f
jmp 0x4221a0
lea eax, [ebp - 0x2038]
push eax
push 0
push 0x7e55
push 0x31d1
push 0x7e9e
push 0
push 1
push 0x79a7
push 1
lea eax, [ebp - 0x1b24]
push eax
push 0x58e2
call fcn.00412eb2
add esp, 0x2c
mov dword [ebp - 0x178], 0x3342eb9
mov dword [ebp - 0x1308], 6
mov dword [ebp - 0xed0], 0xd68f9855
mov dword [ebp - 0x394], 0
jmp 0x422329
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 1
jge 0x422345
mov eax, dword [ebp - 0x394]
mov dword [ebp + eax*4 - 0x1b1c], 0x85755261
jmp 0x42231c
mov dword [ebp - 0x178], 0
jmp 0x42235e
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0xf
jle 0x4224d7
mov dword [ebp - 0xcc], 0x6ec7516a
cmp dword [ebp - 0xcc], 0
je 0x42242c
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], eax
jg 0x42239c
mov dword [ebp - 0xec8], 1
jmp 0x4223a3
and dword [ebp - 0xec8], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x1308], eax
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x1308], eax
jne 0x4223c9
mov dword [ebp - 0x918], 1
jmp 0x4223d0
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x918]
jl 0x4223ea
mov dword [ebp - 0x920], 1
jmp 0x4223f1
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0xec8]
cmp eax, dword [ebp - 0x920]
jg 0x42240b
mov dword [ebp - 0x11a0], 1
jmp 0x422412
and dword [ebp - 0x11a0], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x11a0], eax
jle 0x42242c
mov dword [ebp - 0x928], 1
jmp 0x422433
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x928]
mov dword [ebp - 0xed0], eax
cmp dword [ebp - 0xed0], 1
jae 0x422454
mov dword [ebp - 0x930], 1
jmp 0x42245b
and dword [ebp - 0x930], 0
cmp dword [ebp - 0x930], 1
jl 0x422470
mov dword [ebp - 0x13c0], 1
jmp 0x422477
and dword [ebp - 0x13c0], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x13c0], eax
jge 0x42248e
cmp dword [ebp - 0x178], 0
je 0x4224a3
cmp dword [ebp - 0xcc], 0
je 0x4224a3
mov dword [ebp - 0x938], 1
jmp 0x4224aa
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x178]
imul eax, dword [ebp - 0x938]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1b1c], eax
cmp dword [ebp - 0xcc], 0
je 0x4224d2
jmp 0x422351
jmp 0x422351
push 0xb08
push 0
lea eax, [ebp - 0x1b24]
push eax
lea eax, [ebp - 0x1f90]
push eax
push 0x6409
push 0x3dad
push 0
push 0x70d8
push 0x1124
push 0
call fcn.0040f32a
add esp, 0x28
push 0x782d
push 1
push 0x55f7
push 0x6f85
lea eax, [ebp - 0x1f90]
push eax
lea eax, [ebp - 0x1b2c]
push eax
push 0x5f0a
lea eax, [ebp - 0x1b34]
push eax
lea eax, [ebp - 0x2038]
push eax
lea eax, [ebp - 0x1bdc]
push eax
push 0x38d1
push 0x7511
lea eax, [ebp - 0x1be4]
push eax
push 0
push 1
call fcn.004082e1
add esp, 0x3c
lea ecx, [ebp - 0x1f90]
call fcn.0043564f
lea ecx, [ebp - 0x2038]
call fcn.0043564f
push 4
lea ecx, [ebp - 0x1b54]
call fcn.0043557d
mov dword [ebp - 0x200], 0x8e9934b0
push 4
lea ecx, [ebp - 0x1c68]
call fcn.0043557d
mov dword [ebp - 0xed8], 0x7dbe
mov dword [ebp - 0x1bec], str.pnc_cfs_eghhz_ffra_ywi_bwedjj_asdddnx_ssfwd
cmp dword [ebp - 0xed8], 0x8009
jle 0x422656
and dword [ebp - 0x61c], 0
jmp 0x4225d6
mov eax, dword [ebp - 0x61c]
inc eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0x1856
jge 0x422656
and dword [ebp - 0x39c], 0
jmp 0x4225f8
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0x29a2
jge 0x422651
mov eax, dword [ebp - 0x61c]
add eax, dword [ebp - 0x39c]
cdq
mov dword [ebp - 0x17d0], eax
mov dword [ebp - 0x17cc], edx
push dword [ebp - 0x17cc]
push dword [ebp - 0x17d0]
lea ecx, [ebp - 0x2a2c]
call fcn.00401a1e
pop ecx
pop ecx
mov ecx, eax
call fcn.0043542e
push eax
call fcn.004a9457
pop ecx
lea ecx, [ebp - 0x2a2c]
call fcn.00435424
jmp 0x4225eb
jmp 0x4225c9
mov dword [ebp - 0x290], 0
jmp 0x42266f
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 4
jge 0x42268e
push dword [ebp - 0x290]
lea ecx, [ebp - 0x1b54]
call fcn.0043566b
or dword [eax], 0xffffffff
jmp 0x422662
mov dword [ebp - 4], 8
cmp dword [ebp - 0xed8], 0x7b42
jge 0x4226ad
push dword [ebp - 0x1bec]
call fcn.004a9457
pop ecx
jmp 0x4226c9
or dword [ebp - 4], 0xffffffff
jmp 0x4226d3
push 0x1cb1
push 0x40cd
lea eax, [ebp - 0x290]
push eax
push 1
push 0x26d0
lea eax, [ebp - 0x1c68]
push eax
push 1
push 1
push 1
push 0x313
call fcn.004089af
add esp, 0x28
mov dword [ebp - 0x940], 0x501
mov dword [ebp - 0x1bf4], str.oxjpgznlh_vdoxqca_ddyloirag_okorel_krabjsc_tryx_izmsew_oxjdlsw_kceyzfnv_sboahwu
cmp dword [ebp - 0x940], 0x734
jle 0x422802
and dword [ebp - 0x3ac], 0
jmp 0x42273f
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0x945
jge 0x422802
and dword [ebp - 0x50c], 0
jmp 0x422765
mov eax, dword [ebp - 0x50c]
inc eax
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0x5512
jge 0x4227fd
and dword [ebp - 0x3a4], 0
jmp 0x42278b
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0x6ea9
jge 0x4227f8
and dword [ebp - 0x5c4], 0
jmp 0x4227ad
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 0x281e
jge 0x4227f6
mov eax, dword [ebp - 0x50c]
sub eax, dword [ebp - 0x3a4]
add eax, dword [ebp - 0x5c4]
or eax, dword [ebp - 0x3ac]
cdq
mov dword [ebp - 0x17dc], eax
mov dword [ebp - 0x17d8], edx
push dword [ebp - 0x17d8]
push dword [ebp - 0x17dc]
mov ecx, 0xab56b8
call fcn.00435439
jmp 0x4227a0
jmp 0x42277e
jmp 0x422758
jmp 0x422732
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x940], 0x22d
jge 0x422825
mov edx, dword [ebp - 0x1bf4]
mov ecx, 0xab56b8
call fcn.004371ef
jmp 0x422841
or dword [ebp - 4], 0xffffffff
jmp 0x42284b
push 2
lea ecx, [ebp - 0x1b54]
call fcn.0043566b
and dword [eax], 0
jmp 0x422881
push 2
lea ecx, [ebp - 0x1b54]
call fcn.0043566b
mov dword [ebp - 0x11a8], eax
mov eax, dword [ebp - 0x11a8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x11a8]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x1b54]
call fcn.0043566b
cmp dword [eax], 0xd
jl 0x42296f
mov dword [ebp - 0x948], 0xafbbd0a7
mov dword [ebp - 0x1bfc], 0x89bdd777
mov dword [ebp - 0x514], 0
jmp 0x4228c4
mov eax, dword [ebp - 0x514]
inc eax
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 2
jge 0x4228e0
mov eax, dword [ebp - 0x514]
mov dword [ebp + eax*4 - 0x21b8], 0x5589b583
jmp 0x4228b7
mov dword [ebp - 0x948], 0
imul eax, dword [ebp - 0x948], 9
cmp eax, 1
jge 0x422902
mov dword [ebp - 0xee0], 1
jmp 0x422909
and dword [ebp - 0xee0], 0
mov eax, dword [ebp - 0xee0]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x2450], eax
or eax, 0xffffffff
je 0x422936
xor eax, eax
je 0x422936
mov dword [ebp - 0x950], 1
jmp 0x42293d
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x950]
neg eax
mov dword [ebp - 0x1310], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1310]
mov dword [ebp + eax - 0x21b8], ecx
mov eax, dword [ebp - 0x1310]
mov dword [ebp - 0x1bfc], eax
jmp 0x42285d
push 1
lea ecx, [ebp - 0x1c68]
call fcn.0043566b
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x7f0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x7f0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x7f0]
cmp dword [eax], 0
jne 0x4229ee
mov dword [ebp - 0x200], 0
jmp 0x4229b7
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0xfffffff9
je 0x4229ec
mov byte [ebp - 0x1d1], 0
push 1
push 0
push 0x5ba7
push 1
push 0x5a39
push 0x42
push 1
lea eax, [ebp - 0x1d1]
push eax
call fcn.00409ef0
add esp, 0x20
jmp 0x4229aa
jmp 0x422a48
mov dword [ebp - 0x1c04], 0xfffffffc
mov dword [ebp - 0x1c0c], 0xfffffff8
push 1
push 0x5836
push 0x58c2
push 0x580
lea eax, [ebp - 0x1c04]
push eax
push 0x5f0b
lea eax, [ebp - 0x1c0c]
push eax
push 0x1ba6
push 0
push 0x4b96
push 0x3ca5
lea eax, [ebp - 0x1c68]
push eax
push 1
call fcn.00402569
add esp, 0x34
lea ecx, [ebp - 0x1c68]
call fcn.0043564f
lea ecx, [ebp - 0x1b54]
call fcn.0043564f
mov byte [ebp - 0x1d], 0
mov dword [ebp - 0x788], 0xfffffffd
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x1de0], 0x5b0bb8bf
mov dword [ebp - 0x1ddc], 0x5b0bb8bf
mov dword [ebp - 0x1dd8], 0x5b0bb8bf
mov dword [ebp - 0x1dd4], 0x5b0bb8bf
mov dword [ebp - 0x1964], 0xfffd
mov dword [ebp - 0xef0], 0
mov dword [ebp - 0x6d0], 0xcefbde28
push 1
lea ecx, [ebp - 0x1fa8]
call fcn.0043557d
push 1
push 0
push 0
push 0x5bb
lea eax, [ebp - 0x2148]
push eax
push 0x125e
push 1
push 0x54d2
push 0x49b7
push 0x322b
lea eax, [ebp - 0x1fa8]
push eax
call fcn.00416e0b
add esp, 0x2c
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x214c], eax
cmp dword [ebp - 0x1964], 0
jle 0x422b21
mov dword [ebp - 0xee8], 1
jmp 0x422b28
and dword [ebp - 0xee8], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x958], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x958]
mov dword [ebp + eax - 0x1de0], ecx
mov eax, dword [ebp - 0x958]
cmp eax, dword [ebp - 0xee8]
jge 0x422b65
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x422b65
and dword [ebp - 0x960], 0
jmp 0x422b6f
mov dword [ebp - 0x960], 1
mov eax, dword [ebp - 0x3b4]
cmp dword [ebp - 0x960], eax
je 0x422b89
mov dword [ebp - 0x11b0], 1
jmp 0x422b90
and dword [ebp - 0x11b0], 0
mov eax, dword [ebp - 0x3b4]
cmp eax, dword [ebp - 0x11b0]
jg 0x422baa
mov dword [ebp - 0x968], 1
jmp 0x422bb1
and dword [ebp - 0x968], 0
imul eax, dword [ebp - 0x968], 0x32c5
mov dword [ebp - 0xef0], eax
cmp dword [ebp - 0xef0], 0
jne 0x422bdc
cmp dword [ebp - 0x6d0], 0
jne 0x422bdc
and dword [ebp - 0x970], 0
jmp 0x422be6
mov dword [ebp - 0x970], 1
mov eax, dword [ebp - 0x970]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x2154], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x788]
cmp dword [ebp + eax - 0x1de0], ecx
jl 0x422c1f
mov dword [ebp - 0x1400], 1
jmp 0x422c26
and dword [ebp - 0x1400], 0
mov eax, dword [ebp - 0x788]
imul eax, dword [ebp - 0x1400]
test eax, eax
je 0x422c4c
mov eax, 0xfffd
test eax, eax
je 0x422c4c
mov dword [ebp - 0x978], 1
jmp 0x422c53
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x3b4]
cmp dword [ebp - 0x978], eax
je 0x422c6d
mov dword [ebp - 0xef8], 1
jmp 0x422c74
and dword [ebp - 0xef8], 0
push 0
lea ecx, [ebp - 0x1fa8]
call fcn.0043566b
mov ecx, dword [ebp - 0xef8]
mov dword [eax], ecx
lea ecx, [ebp - 0x1fa8]
call fcn.0043564f
mov dword [ebp - 0x840], 0xfffffffd
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x1dc0], 0x5b0bb8bf
mov dword [ebp - 0x1dbc], 0x5b0bb8bf
mov dword [ebp - 0x1db8], 0x5b0bb8bf
mov dword [ebp - 0x1db4], 0x5b0bb8bf
mov dword [ebp - 0x173c], 0xfffd
mov dword [ebp - 0x1318], 0
mov dword [ebp - 0x6d8], 0xcefbde28
push 1
lea ecx, [ebp - 0x20b0]
call fcn.0043557d
mov dword [ebp - 0x64c], 0
jmp 0x422d14
mov eax, dword [ebp - 0x64c]
inc eax
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 1
jge 0x422d36
push dword [ebp - 0x64c]
lea ecx, [ebp - 0x20b0]
call fcn.0043566b
mov dword [eax], 0xbbb66efe
jmp 0x422d07
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0x215c], eax
cmp dword [ebp - 0x173c], 0
jle 0x422d57
mov dword [ebp - 0x11b8], 1
jmp 0x422d5e
and dword [ebp - 0x11b8], 0
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x980], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x980]
mov dword [ebp + eax - 0x1dc0], ecx
mov eax, dword [ebp - 0x980]
cmp eax, dword [ebp - 0x11b8]
jge 0x422d9b
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x422d9b
and dword [ebp - 0x988], 0
jmp 0x422da5
mov dword [ebp - 0x988], 1
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x988], eax
je 0x422dbf
mov dword [ebp - 0xf00], 1
jmp 0x422dc6
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0x3bc]
cmp eax, dword [ebp - 0xf00]
jg 0x422de0
mov dword [ebp - 0x990], 1
jmp 0x422de7
and dword [ebp - 0x990], 0
imul eax, dword [ebp - 0x990], 0x32c5
mov dword [ebp - 0x1318], eax
cmp dword [ebp - 0x1318], 0
jne 0x422e12
cmp dword [ebp - 0x6d8], 0
jne 0x422e12
and dword [ebp - 0x998], 0
jmp 0x422e1c
mov dword [ebp - 0x998], 1
mov eax, dword [ebp - 0x998]
mov dword [ebp - 0x6d8], eax
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x2164], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x840]
cmp dword [ebp + eax - 0x1dc0], ecx
jl 0x422e55
mov dword [ebp - 0xf08], 1
jmp 0x422e5c
and dword [ebp - 0xf08], 0
mov eax, dword [ebp - 0x840]
imul eax, dword [ebp - 0xf08]
test eax, eax
je 0x422e82
mov eax, 0xfffd
test eax, eax
je 0x422e82
mov dword [ebp - 0x9a0], 1
jmp 0x422e89
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x9a0], eax
je 0x422ea3
mov dword [ebp - 0x11c0], 1
jmp 0x422eaa
and dword [ebp - 0x11c0], 0
push 0
lea ecx, [ebp - 0x20b0]
call fcn.0043566b
mov ecx, dword [ebp - 0x11c0]
mov dword [eax], ecx
lea ecx, [ebp - 0x20b0]
call fcn.0043564f
mov dword [ebp - 0x54], 0x2e91a04
mov dword [ebp - 0xf4], 6
mov dword [ebp - 0x54], 0x19
jmp 0x422eeb
cmp dword [ebp - 0x54], 0x14
jl 0x42304a
push 2
lea ecx, [ebp - 0x1fc0]
call fcn.0043557d
push 0
lea eax, [ebp - 0x300]
push eax
push 0x53fc
push 1
push 1
push 0x6948
push 0x4362
push 0x7cc4
lea eax, [ebp - 0x1fc0]
push eax
call fcn.00419c3a
add esp, 0x24
mov dword [ebp - 0x300], 0
jmp 0x422f4b
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 1
jge 0x422f67
mov eax, dword [ebp - 0x300]
mov dword [ebp + eax*4 - 0x51c], 0x5cc25bfc
jmp 0x422f3e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x51c], 0
jne 0x422f93
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x51c], 0xef5d
jg 0x422f93
and dword [ebp - 0x9a8], 0
jmp 0x422f9d
mov dword [ebp - 0x9a8], 1
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0x9a8], 0xffffffff
cmp dword [ebp + eax - 0x51c], ecx
jne 0x422fbf
mov dword [ebp - 0xf10], 1
jmp 0x422fc6
and dword [ebp - 0xf10], 0
cmp dword [ebp - 0xf10], 0xfffffff6
je 0x422fdb
mov dword [ebp - 0xf4], 0xfffffff3
jmp 0x423063
cmp dword [ebp - 0xf4], 7
jne 0x4233ac
mov dword [ebp - 0x3d4], 0x23e5
mov dword [ebp - 0x1520], 0x8f5063f3
mov dword [ebp - 0x3c4], 0
jmp 0x42309d
cmp dword [ebp - 0x3c4], 2
jge 0x4230b9
mov eax, dword [ebp - 0x3c4]
mov dword [ebp + eax*4 - 0x21c4], 0xe80c
jmp 0x423090
push 0
lea eax, [ebp - 0x3d4]
push eax
push 0x3ab5
push 0x710a
lea eax, [ebp - 0x54]
push eax
push 0x512f
push 0x5f5b
push 0x3c30
push 1
push 1
push 1
call fcn.00416697
add esp, 0x2c
xor eax, eax
sub eax, dword [ebp - 0xf4]
je 0x4230fe
push 4
lea ecx, [ebp - 0x1b64]
call fcn.0043557d
push 2
lea ecx, [ebp - 0x2050]
call fcn.0043557d
push 4
lea ecx, [ebp - 0x14dc]
call fcn.0043557d
mov dword [ebp - 0x216c], 0xfffffffe
mov dword [ebp - 0x2174], 0x164caf14
push 3
lea ecx, [ebp - 0x24fc]
call fcn.0043557d
push 0x15be
push 1
push 1
push 0x7633
lea eax, [ebp - 0x18]
push eax
push 0x5ee9
push 0x53b3
push 0xfe5
push 1
lea eax, [ebp - 0x2050]
push eax
push 0x74bf
push 0
call fcn.0040aed6
add esp, 0x30
mov dword [ebp - 0x18], 0
jmp 0x42343d
cmp dword [ebp - 0x18], 4
jge 0x423459
push dword [ebp - 0x18]
lea ecx, [ebp - 0x14dc]
call fcn.0043566b
mov dword [eax], 0x833fcb50
jmp 0x423436
mov dword [ebp - 0x18], 0
jmp 0x423469
mov eax, dword [ebp - 0x15e4]
mov dword [ebp - 0x15ec], eax
mov eax, dword [ebp - 0x15ec]
mov dword [ebp - 0x15f4], eax
mov eax, dword [ebp - 0x15f4]
movzx eax, byte [eax]
test eax, eax
je 0x434303
push 0
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
jmp 0x4343b9
mov eax, dword [ebp - 0x15fc]
mov dword [ebp - 0x1654], eax
mov eax, dword [ebp - 0x1604]
mov dword [ebp - 0x1624], eax
mov eax, dword [ebp - 0x160c]
mov dword [ebp - 0x162c], eax
mov eax, dword [ebp - 0x1614]
mov dword [ebp - 0x161c], eax
mov eax, dword [ebp - 0x161c]
movzx eax, byte [eax]
test eax, eax
je 0x434390
mov eax, dword [ebp - 0x1624]
mov dword [ebp - 0x1634], eax
mov eax, dword [ebp - 0x162c]
mov dword [ebp - 0x163c], eax
mov eax, dword [ebp - 0x1634]
mov dword [ebp - 0x164c], eax
mov eax, dword [ebp - 0x163c]
mov dword [ebp - 0x1644], eax
mov eax, dword [ebp - 0x1644]
push dword [eax]
mov ecx, dword [ebp - 0x164c]
call fcn.0043566b
mov dword [eax], 1
jmp 0x4343b9
mov eax, dword [ebp - 0x1654]
mov dword [ebp - 0x165c], eax
mov eax, dword [ebp - 0x165c]
mov dword [ebp - 0x1344], eax
mov eax, dword [ebp - 0x1344]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1344]
mov dword [ecx], eax
jmp 0x434573
mov eax, dword [ebp + 0x50]
mov dword [ebp - 0x16bc], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x167c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x16c4], eax
mov eax, dword [ebp + 0x54]
mov dword [ebp - 0x16d4], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x16cc], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x1664], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x16e4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1674], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x16dc], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x166c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x16ec], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x16f4], eax
mov eax, dword [ebp - 0x1664]
movzx eax, byte [eax]
test eax, eax
je 0x4344cd
mov eax, dword [ebp - 0x166c]
mov dword [ebp - 0x168c], eax
mov eax, dword [ebp - 0x1674]
mov dword [ebp - 0x1694], eax
mov eax, dword [ebp - 0x167c]
mov dword [ebp - 0x1684], eax
mov eax, dword [ebp - 0x1684]
movzx eax, byte [eax]
test eax, eax
je 0x43447f
push 0
push 0
push 0
push 0x8ac
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
jmp 0x4344c8
mov eax, dword [ebp - 0x168c]
mov dword [ebp - 0x169c], eax
mov eax, dword [ebp - 0x1694]
mov dword [ebp - 0x16a4], eax
mov eax, dword [ebp - 0x169c]
mov dword [ebp - 0x16b4], eax
mov eax, dword [ebp - 0x16a4]
mov dword [ebp - 0x16ac], eax
mov eax, dword [ebp - 0x16ac]
push dword [eax]
mov ecx, dword [ebp - 0x16b4]
call fcn.0043566b
mov dword [eax], 1
jmp 0x434573
mov eax, dword [ebp - 0x16bc]
mov dword [ebp - 0x16fc], eax
mov eax, dword [ebp - 0x16c4]
mov dword [ebp - 0x1734], eax
mov eax, dword [ebp - 0x16cc]
mov dword [ebp - 0x171c], eax
mov eax, dword [ebp - 0x16d4]
mov dword [ebp - 0x1704], eax
mov eax, dword [ebp - 0x16dc]
mov dword [ebp - 0x170c], eax
mov eax, dword [ebp - 0x16e4]
mov dword [ebp - 0x172c], eax
mov eax, dword [ebp - 0x16ec]
mov dword [ebp - 0x1724], eax
mov eax, dword [ebp - 0x16f4]
mov dword [ebp - 0x1714], eax
push dword [ebp - 0x16fc]
push dword [ebp - 0x1704]
push dword [ebp - 0x170c]
push 0x7e2c
push dword [ebp - 0x1714]
push 0
push dword [ebp - 0x171c]
push dword [ebp - 0x1724]
push 0x7d22
push dword [ebp - 0x172c]
push 1
push dword [ebp - 0x1734]
call fcn.004129d9
add esp, 0x30
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret