Function at 0x412806
Capabilities:
Encrypt data using speck
Parse pe header
Query service status
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ba7e5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x638
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c4], 0x40f0
mov dword [ebp - 0x368], str.bztw_rrbsmsuqn_cggzoo
cmp dword [ebp - 0x2c4], 0x42fd
jle 0x4128e9
and dword [ebp - 0x54], 0
jmp 0x41285c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xfe
jge 0x4128e9
and dword [ebp - 0x1d8], 0
jmp 0x41287f
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x6be1
jge 0x4128e4
and dword [ebp - 0x10c], 0
jmp 0x4128a1
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x6402
jge 0x4128e2
mov eax, dword [ebp - 0x1d8]
imul eax, dword [ebp - 0x10c]
and eax, dword [ebp - 0x54]
cdq
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], edx
push dword [ebp - 0x3e4]
push dword [ebp - 0x3e8]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x412894
jmp 0x412872
jmp 0x412855
cmp dword [ebp + 0x10], 0
jbe 0x41290b
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x41290b
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.00410fac
pop ecx
pop ecx
jmp 0x415532
and dword [ebp - 4], 0
cmp dword [ebp - 0x2c4], 0x4065
jge 0x41292b
mov edx, dword [ebp - 0x368]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x412947
or dword [ebp - 4], 0xffffffff
jmp 0x412951
cmp dword [ebp + 0x10], 0
jne 0x413cd7
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.00405480
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x2c0], 0x6580
mov dword [ebp - 0x424], str.zxzpwulvp_nxlxblb_ciwamif
cmp dword [ebp - 0x2c0], 0x68e6
jle 0x412a67
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetPropA]
and dword [ebp - 0x17c], 0
jmp 0x4129b7
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x68a
jge 0x412a5d
and dword [ebp - 0x5c], 0
jmp 0x4129d4
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x5a44
jge 0x412a58
and dword [ebp - 0x124], 0
jmp 0x4129f3
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x3664
jge 0x412a53
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x5c]
shl eax, cl
mov ecx, dword [ebp - 0x124]
shl eax, cl
cdq
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], edx
push dword [ebp - 0x398]
push dword [ebp - 0x39c]
lea ecx, [ebp - 0x5d0]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x5d0]
call fcn.00402af1
jmp 0x4129e6
jmp 0x4129cd
jmp 0x4129aa
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x2c0], 0x64f4
jge 0x412a86
push dword [ebp - 0x424]
call fcn.0048e258
pop ecx
jmp 0x412aa2
or dword [ebp - 4], 0xffffffff
jmp 0x412aac
cmp dword [0xabc1c8], 0
jne 0x413b90
mov dword [ebp - 0x434], 0xdc2
lea eax, [ebp - 0x434]
push eax
call fcn.00410c52
pop ecx
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x2c8], 0x1971
mov dword [ebp - 0x390], str.cftc_dsl_hgbsuy_tghyc_jajbivde_dsrrzt_narssmc_kkioj_xkc_cphvz_vzhgb_uttqhzpr_onvjyzv_qnv
cmp dword [ebp - 0x2c8], 0x1b0e
jle 0x412be5
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
and dword [ebp - 0x64], 0
jmp 0x412b16
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xa2b
jge 0x412be5
and dword [ebp - 0x1ac], 0
jmp 0x412b39
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x5f62
jge 0x412be0
and dword [ebp - 0x6c], 0
jmp 0x412b56
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x6d8
jge 0x412bdb
and dword [ebp - 0x12c], 0
jmp 0x412b75
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x1fd8
jge 0x412bd6
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x1ac]
shl eax, cl
xor eax, dword [ebp - 0x6c]
xor eax, dword [ebp - 0x12c]
cdq
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], edx
push dword [ebp - 0x41c]
push dword [ebp - 0x420]
lea ecx, [ebp - 0x618]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x618]
call fcn.00402af1
jmp 0x412b68
jmp 0x412b4f
jmp 0x412b2c
jmp 0x412b0f
mov byte [ebp - 0x1f4], 0xb
mov byte [ebp - 0x1f3], 0x79
mov byte [ebp - 0x1f2], 0
mov byte [ebp - 0x1f1], 0x4a
mov byte [ebp - 0x1f0], 4
mov byte [ebp - 0x1ef], 0x6a
mov byte [ebp - 0x1ee], 8
mov byte [ebp - 0x1ed], 0x76
mov byte [ebp - 0x1ec], 6
mov byte [ebp - 0x1eb], 0x7c
mov byte [ebp - 0x1ea], 0xa
mov byte [ebp - 0x1e9], 0x50
mov byte [ebp - 0x1e8], 3
mov byte [ebp - 0x1e7], 0x63
mov byte [ebp - 0x1e6], 2
mov byte [ebp - 0x1e5], 0x83
mov byte [ebp - 0x1e4], 0xc
mov byte [ebp - 0x1e3], 0x68
mov byte [ebp - 0x1e2], 1
mov byte [ebp - 0x1e1], 0x78
mov byte [ebp - 0x1e0], 9
mov byte [ebp - 0x1df], 0x83
mov byte [ebp - 0x1de], 5
mov byte [ebp - 0x1dd], 0x89
mov byte [ebp - 0x1dc], 1
mov byte [ebp - 0x1db], 7
mov byte [ebp - 0x1da], 0x82
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2c8], 0x1761
jge 0x412cc1
push dword [ebp - 0x390]
call fcn.0048e258
pop ecx
jmp 0x412cdd
or dword [ebp - 4], 0xffffffff
jmp 0x412ce7
and dword [ebp - 0x14], 0
and dword [ebp - 0x2b8], 0
jmp 0x412cfc
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1b
jae 0x413139
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1f4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x412e4c
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x23c], 0x6f0
mov dword [ebp - 0x2d8], str.vri_xcjty_dzdvsrcr_bicdtea_cdfmoe_xaxx_dpscdgx_slazidgqk_aadjyj_lmxwbeov_xrbjhzcy
cmp dword [ebp - 0x23c], 0x7e8
jle 0x412dfb
and dword [ebp - 0x7c], 0
jmp 0x412d5c
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x437d
jge 0x412dfb
and dword [ebp - 0x74], 0
jmp 0x412d76
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x215d
jge 0x412df6
and dword [ebp - 0x184], 0
jmp 0x412d95
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x5668
jge 0x412df1
mov eax, dword [ebp - 0x74]
cdq
idiv dword [ebp - 0x184]
mov eax, dword [ebp - 0x7c]
sub eax, edx
cdq
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], edx
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0x648]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x648]
call fcn.00402af1
jmp 0x412d88
jmp 0x412d6f
jmp 0x412d55
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 6
cmp dword [ebp - 0x23c], 0x5a7
jge 0x412e21
push dword [ebp - 0x2d8]
call fcn.0048e258
pop ecx
jmp 0x412e3d
or dword [ebp - 4], 0xffffffff
jmp 0x412e47
jmp 0x412cf4
mov dword [ebp - 0x284], 0x6b4f
mov dword [ebp - 0x3d4], str.kxoyju_pgodxuoyn_hnlymrsz_friu_ztmu_zczymjkxq_mnm_sydbkb_jsorurw_njaxmc_qfmcxth
cmp dword [ebp - 0x284], 0x6d90
jle 0x412f27
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
and dword [ebp - 0x134], 0
jmp 0x412e8e
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x52ca
jge 0x412f0e
and dword [ebp - 0x84], 0
jmp 0x412eb0
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1a1a
jge 0x412f09
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x84]
cdq
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x3f0], edx
push dword [ebp - 0x3f0]
push dword [ebp - 0x3f4]
lea ecx, [ebp - 0x510]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x510]
call fcn.00402af1
jmp 0x412ea3
jmp 0x412e81
push 0x249e
push 0
push 0x2213
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x1f3]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2b8]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 4], 8
cmp dword [ebp - 0x284], 0x6a59
jge 0x412f64
push dword [ebp - 0x3d4]
call fcn.0048e258
pop ecx
jmp 0x412f80
or dword [ebp - 4], 0xffffffff
jmp 0x412f8a
mov dword [ebp - 0x244], 0x399b
mov dword [ebp - 0x2e4], str.giyghixnd_twxpkey_ebl_fjjhr_uyiwqhtmo_aqxix_jqdmccdrz
cmp dword [ebp - 0x244], 0x3b15
jle 0x4130bb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
and dword [ebp - 0x1c4], 0
jmp 0x412fd1
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x7632
jge 0x4130bb
and dword [ebp - 0x8c], 0
jmp 0x412ff7
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x66b4
jge 0x4130b6
and dword [ebp - 0x13c], 0
jmp 0x41301d
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x4b5b
jge 0x4130b1
and dword [ebp - 0x94], 0
jmp 0x413043
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x4cd4
jge 0x4130ac
mov eax, dword [ebp - 0x1c4]
cdq
idiv dword [ebp - 0x8c]
imul edx, dword [ebp - 0x13c]
xor edx, dword [ebp - 0x94]
mov eax, edx
cdq
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], edx
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
lea ecx, [ebp - 0x600]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x600]
call fcn.00402af1
jmp 0x413036
jmp 0x413010
jmp 0x412fea
jmp 0x412fc4
cmp dword [ebp - 0x18c], 0
jge 0x4130d7
mov eax, dword [ebp - 0x18c]
add eax, 0x100
mov dword [ebp - 0x18c], eax
jmp 0x4130bb
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x244], 0x395f
jge 0x4130f6
push dword [ebp - 0x2e4]
call fcn.0048e258
pop ecx
jmp 0x413112
or dword [ebp - 4], 0xffffffff
jmp 0x41311c
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x1f4]
mov cl, byte [ebp - 0x18c]
mov byte [ebp + eax - 0x44c], cl
jmp 0x412cf4
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x44c], 0
lea eax, [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x540]
call fcn.004312e8
mov edx, dword [ebp - 0x294]
mov ecx, eax
call fcn.00405480
mov dword [0xabc1c8], eax
lea ecx, [ebp - 0x540]
call fcn.00402ca8
mov dword [ebp - 0x24c], 0x474d
mov dword [ebp - 0x2f0], str.hhzovbt_pzys_crmdt_aksdjzan_anr_akoavyn_yryjsnxrg_odtvajg_hmoct_ujzgifwoh_fwxde_bkukvvs_irbjr
cmp dword [ebp - 0x24c], 0x4932
jle 0x413296
and dword [ebp - 0x1b4], 0
jmp 0x4131b0
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x5241
jge 0x413296
and dword [ebp - 0x9c], 0
jmp 0x4131d6
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x59a5
jge 0x413291
and dword [ebp - 0x144], 0
jmp 0x4131fc
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x5282
jge 0x41328c
and dword [ebp - 0xa4], 0
jmp 0x413222
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x7784
jge 0x413287
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x144]
sub eax, dword [ebp - 0xa4]
or eax, dword [ebp - 0x1b4]
cdq
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x438], edx
push dword [ebp - 0x438]
push dword [ebp - 0x43c]
lea ecx, [ebp - 0x4e0]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x4e0]
call fcn.00402af1
jmp 0x413215
jmp 0x4131ef
jmp 0x4131c9
jmp 0x4131a3
and dword [ebp - 0x194], 0
jmp 0x4132ac
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xe
jae 0x413404
mov dword [ebp - 0x234], 0x71b4
mov dword [ebp - 0x410], str.frhf_mfesvkey_fighiy_fbo_ceuq_vtxxqwulv_fetvg_apd_vbdtne_kyzg_wtszn_nqgcuhc_uecfnunvi_xehtuytg
cmp dword [ebp - 0x234], 0x7244
jle 0x4133ac
call dword [sym.imp.USER32.dll_CreatePopupMenu]
and dword [ebp - 0xac], 0
jmp 0x4132f9
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x242a
jge 0x4133ac
and dword [ebp - 0x14c], 0
jmp 0x41331f
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x38ad
jge 0x4133a7
and dword [ebp - 0xb4], 0
jmp 0x413341
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x2f9b
jge 0x4133a2
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x14c]
shl eax, cl
and eax, dword [ebp - 0xb4]
cdq
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], edx
push dword [ebp - 0x3bc]
push dword [ebp - 0x3c0]
lea ecx, [ebp - 0x570]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x570]
call fcn.00402af1
jmp 0x413334
jmp 0x413312
jmp 0x4132ec
mov eax, dword [ebp - 0x194]
mov byte [ebp + eax - 0x44c], 0
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x234], 0x70c8
jge 0x4133d9
push dword [ebp - 0x410]
call fcn.0048e258
pop ecx
jmp 0x4133f5
or dword [ebp - 4], 0xffffffff
jmp 0x4133ff
jmp 0x41329f
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x24c], 0x45fe
jge 0x413423
push dword [ebp - 0x2f0]
call fcn.0048e258
pop ecx
jmp 0x41343f
or dword [ebp - 4], 0xffffffff
jmp 0x413449
mov byte [ebp - 0x228], 0xc
mov byte [ebp - 0x227], 0x74
mov byte [ebp - 0x226], 3
mov byte [ebp - 0x225], 0x64
mov byte [ebp - 0x224], 6
mov byte [ebp - 0x223], 0x55
mov byte [ebp - 0x222], 0xd
mov byte [ebp - 0x221], 0x5e
mov byte [ebp - 0x220], 0
mov byte [ebp - 0x21f], 0x4c
mov byte [ebp - 0x21e], 5
mov byte [ebp - 0x21d], 0x70
mov byte [ebp - 0x21c], 2
mov byte [ebp - 0x21b], 0x72
mov byte [ebp - 0x21a], 1
mov byte [ebp - 0x219], 0x81
mov byte [ebp - 0x218], 0xb
mov byte [ebp - 0x217], 0x84
mov byte [ebp - 0x216], 9
mov byte [ebp - 0x215], 0x76
mov byte [ebp - 0x214], 8
mov byte [ebp - 0x213], 0x84
mov byte [ebp - 0x212], 7
mov byte [ebp - 0x211], 0x89
mov byte [ebp - 0x210], 4
mov byte [ebp - 0x20f], 0x8d
mov byte [ebp - 0x20e], 0x15
mov byte [ebp - 0x20d], 0xad
mov byte [ebp - 0x20c], 0x59
mov byte [ebp - 0x20b], 0xac
mov byte [ebp - 0x20a], 0x9d
mov byte [ebp - 0x209], 0x3a
mov byte [ebp - 0x208], 0x85
mov byte [ebp - 0x207], 0xea
mov byte [ebp - 0x206], 0xdb
mov byte [ebp - 0x205], 0xdd
mov byte [ebp - 0x204], 0xcc
mov byte [ebp - 0x203], 0xcf
mov byte [ebp - 0x202], 0x44
mov byte [ebp - 0x201], 0x99
mov byte [ebp - 0x200], 0xee
mov byte [ebp - 0x1ff], 0xa5
mov byte [ebp - 0x1fe], 0x4a
mov byte [ebp - 0x1fd], 0x2b
mov byte [ebp - 0x1fc], 0x85
mov byte [ebp - 0x1fb], 0x31
mov byte [ebp - 0x1fa], 0xf0
mov byte [ebp - 0x1f9], 0xa
mov byte [ebp - 0x1f8], 0x80
and dword [ebp - 0x18], 0
and dword [ebp - 0x254], 0
jmp 0x4135b5
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x31
jae 0x4138da
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x228]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x413751
mov dword [ebp - 0x28c], 0x2e06
mov dword [ebp - 0x3dc], str.jncxb_bouhxzsv_xbyjhri
cmp dword [ebp - 0x28c], 0x2f97
jle 0x4136f0
and dword [ebp - 0xbc], 0
jmp 0x413614
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x3f90
jge 0x4136db
and dword [ebp - 0x154], 0
jmp 0x41363a
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x15f6
jge 0x4136d6
and dword [ebp - 0xc4], 0
jmp 0x413660
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x2d7f
jge 0x4136d1
and dword [ebp - 0x1d4], 0
jmp 0x413682
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x20a7
jge 0x4136cf
mov eax, dword [ebp - 0xbc]
xor eax, dword [ebp - 0x154]
mov edx, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x1d4]
shl edx, cl
xor eax, edx
cdq
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x400], edx
push dword [ebp - 0x400]
push dword [ebp - 0x404]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x413675
jmp 0x413653
jmp 0x41362d
jmp 0x413607
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov dword [ebp - 0x254], 0x15
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x28c], 0x2ddd
jge 0x41371d
mov edx, dword [ebp - 0x3dc]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x413739
or dword [ebp - 4], 0xffffffff
jmp 0x413743
mov eax, dword [ebp - 0x18]
add eax, 0x13
mov dword [ebp - 0x18], eax
jmp 0x4135ad
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x227]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x254]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jge 0x41378b
mov eax, dword [ebp - 0x19c]
add eax, 0x100
mov dword [ebp - 0x19c], eax
jmp 0x41376f
mov dword [ebp - 0x2ac], 0x3d19
mov dword [ebp - 0x2fc], str.xsrtcy_vkv_jkp
cmp dword [ebp - 0x2ac], 0x3ed7
jle 0x413878
and dword [ebp - 0xcc], 0
jmp 0x4137c5
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x5b30
jge 0x413878
and dword [ebp - 0x15c], 0
jmp 0x4137eb
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x5c07
jge 0x413873
and dword [ebp - 0xd4], 0
jmp 0x41380d
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x9d3
jge 0x41386e
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0xd4]
shl eax, cl
cdq
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x3c8], edx
push dword [ebp - 0x3c8]
push dword [ebp - 0x3cc]
lea ecx, [ebp - 0x630]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x630]
call fcn.00402af1
jmp 0x413800
jmp 0x4137de
jmp 0x4137b8
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x228]
mov cl, byte [ebp - 0x19c]
mov byte [ebp + eax - 0x45c], cl
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x2ac], 0x39d9
jge 0x4138af
push dword [ebp - 0x2fc]
call fcn.0048e258
pop ecx
jmp 0x4138cb
or dword [ebp - 4], 0xffffffff
jmp 0x4138d5
jmp 0x4135ad
mov dword [ebp - 0x25c], 0x307a
mov dword [ebp - 0x430], str.zuiw_gudkcv_monfkt_gmt_xzli_mezbeyopz_aiodpksq_lphoopbi_jbek
cmp dword [ebp - 0x25c], 0x31db
jle 0x4139f4
push 0
push 0xe9f
push 0xe73
push 0xd84
push 0x1f13
call dword [sym.imp.GDI32.dll_CreateBitmap]
and dword [ebp - 0xdc], 0
jmp 0x413930
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x79c6
jge 0x4139f4
and dword [ebp - 0x164], 0
jmp 0x413956
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x7f
jge 0x4139ef
and dword [ebp - 0xe4], 0
jmp 0x413979
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x1b66
jge 0x4139ea
and dword [ebp - 0x1bc], 0
jmp 0x41399b
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x6370
jge 0x4139e8
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x164]
shl eax, cl
mov ecx, dword [ebp - 0xe4]
sub ecx, dword [ebp - 0x1bc]
and eax, ecx
cdq
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], edx
push dword [ebp - 0x428]
push dword [ebp - 0x42c]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x41398e
jmp 0x41396c
jmp 0x413949
jmp 0x413923
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x45c], 0
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x25c], 0x2e7e
jge 0x413a25
mov edx, dword [ebp - 0x430]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x413a41
or dword [ebp - 4], 0xffffffff
jmp 0x413a4b
lea eax, [ebp - 0x45c]
push eax
lea ecx, [ebp - 0x5a0]
call fcn.004312e8
mov edx, dword [ebp - 0x294]
mov ecx, eax
call fcn.00405480
mov dword [0xabc330], eax
lea ecx, [ebp - 0x5a0]
call fcn.00402ca8
and dword [ebp - 0xf4], 0
jmp 0x413a90
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xf
jae 0x413b90
mov dword [ebp - 0x264], 0x652b
mov dword [ebp - 0x308], str.clxeglaiq_jypi_lmbvdbh_gqpih_cmd_meqsdqbin_ulhhmoe_curw_xewnzvp_pmdme_hxtoyb_efqdl_cqbxthvlu
cmp dword [ebp - 0x264], 0x65fe
jle 0x413b34
and dword [ebp - 0xec], 0
jmp 0x413ad3
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x6a9f
jge 0x413b34
and dword [ebp - 0x16c], 0
jmp 0x413af5
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x2eaa
jge 0x413b32
mov eax, dword [ebp - 0xec]
sub eax, dword [ebp - 0x16c]
cdq
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d0], edx
push dword [ebp - 0x2d0]
push dword [ebp - 0x2d4]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x413ae8
jmp 0x413ac6
mov eax, dword [ebp - 0xf4]
mov byte [ebp + eax - 0x45c], 0
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x264], 0x6455
jge 0x413b65
mov edx, dword [ebp - 0x308]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x413b81
or dword [ebp - 4], 0xffffffff
jmp 0x413b8b
jmp 0x413a83
mov dword [ebp - 0x2bc], 0x5365
mov dword [ebp - 0x38c], str.kinyfty_kbfddyppa_gomtywe_lvmguf
cmp dword [ebp - 0x2bc], 0x54ff
jle 0x413c5c
and dword [ebp - 0x1a4], 0
jmp 0x413bca
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x4893
jge 0x413c5c
and dword [ebp - 0xfc], 0
jmp 0x413bf0
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x5fa7
jge 0x413c57
and dword [ebp - 0x104], 0
jmp 0x413c12
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x48d3
jge 0x413c55
mov eax, dword [ebp - 0x1a4]
and eax, dword [ebp - 0xfc]
xor eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], edx
push dword [ebp - 0x2dc]
push dword [ebp - 0x2e0]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x413c05
jmp 0x413be3
jmp 0x413bbd
mov eax, dword [0xabc1c8]
cmp eax, dword [ebp - 0xc0]
je 0x413c76
mov eax, dword [0xabc330]
cmp eax, dword [ebp - 0xc0]
jne 0x413c8e
mov ecx, dword [ebp + 0xc]
call fcn.00402d04
push eax
push dword [ebp + 8]
call fcn.00410fac
pop ecx
pop ecx
jmp 0x415532
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x2bc], 0x51ec
jge 0x413cb1
mov edx, dword [ebp - 0x38c]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x413ccd
or dword [ebp - 4], 0xffffffff
jmp 0x413cd7
mov eax, dword [ebp + 8]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4153e6
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x4153e6
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x2a8], 0x1ded
mov dword [ebp - 0x3ec], str.hzpxtvuec_zokxjfguz_yykz_wlay_apop_wwqjmclci
cmp dword [ebp - 0x2a8], 0x1e9c
jle 0x413e10
push 0xfce
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
and dword [ebp - 0x110], 0
jmp 0x413d4d
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xf7b
jge 0x413e10
and dword [ebp - 0x108], 0
jmp 0x413d73
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x76
jge 0x413e0b
and dword [ebp - 0x174], 0
jmp 0x413d96
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x3a94
jge 0x413e06
and dword [ebp - 0x114], 0
jmp 0x413db8
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x41bc
jge 0x413e04
mov eax, dword [ebp - 0x110]
cdq
idiv dword [ebp - 0x108]
add edx, dword [ebp - 0x174]
or edx, dword [ebp - 0x114]
mov eax, edx
cdq
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], edx
push dword [ebp - 0x2e8]
push dword [ebp - 0x2ec]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x413dab
jmp 0x413d89
jmp 0x413d66
jmp 0x413d40
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 0x4550
jne 0x41539d
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x74], 0
jbe 0x41539d
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ecx + eax + 0x78], 0
je 0x41539d
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x34]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x28], edx
mov eax, 0xffff
mov word [ebp - 0x1c], ax
or dword [ebp - 0x30], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x413e84
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x413e7f
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x1c], ax
jmp 0x41471c
mov dword [ebp - 0x26c], 0x6bef
mov dword [ebp - 0x314], str.zuxfpldx_gdbwv_kzjx_hxr_czhbpkas_gpmcit_frsljr_zfxyf_dpz
cmp dword [ebp - 0x26c], 0x6df6
jle 0x413f87
and dword [ebp - 0x50], 0
jmp 0x413eb5
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x3455
jge 0x413f87
and dword [ebp - 0x1cc], 0
jmp 0x413ed8
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x21e2
jge 0x413f82
and dword [ebp - 0x11c], 0
jmp 0x413efe
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x35ad
jge 0x413f7d
and dword [ebp - 0x58], 0
jmp 0x413f17
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x4469
jge 0x413f78
mov eax, dword [ebp - 0x1cc]
cdq
idiv dword [ebp - 0x11c]
add edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x58]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], edx
push dword [ebp - 0x2f4]
push dword [ebp - 0x2f8]
lea ecx, [ebp - 0x4f8]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x4f8]
call fcn.00402af1
jmp 0x413f10
jmp 0x413ef1
jmp 0x413ecb
jmp 0x413eae
mov eax, dword [0xabc2b0]
and eax, 1
jne 0x413fb3
mov eax, dword [0xabc2b0]
or eax, 1
mov dword [0xabc2b0], eax
mov ecx, 0xabc2ec
call fcn.00402e11
push 0x4bb8bc
call fcn.0048df0f
pop ecx
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x26c], 0x6907
jge 0x413fd2
push dword [ebp - 0x314]
call fcn.0048e258
pop ecx
jmp 0x413fee
or dword [ebp - 4], 0xffffffff
jmp 0x413ff8
mov dword [ebp - 0x2b4], 0x66cc
mov dword [ebp - 0x320], str.xaxrq_sgacswrt_ueqi_apwdsplcf_muod_bsxqfuvd_tfbnehlb_ctsdif_adm_wslpot
cmp dword [ebp - 0x2b4], 0x69b2
jle 0x414082
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
and dword [ebp - 0x60], 0
jmp 0x414033
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xd6f
jge 0x414082
and dword [ebp - 0x68], 0
jmp 0x414049
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x7c73
jge 0x414080
mov eax, dword [ebp - 0x60]
cdq
idiv dword [ebp - 0x68]
mov eax, edx
cdq
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x300], edx
push dword [ebp - 0x300]
push dword [ebp - 0x304]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x414042
jmp 0x41402c
movzx eax, byte [0xabc1c6]
test eax, eax
je 0x4141e3
mov ecx, 0xabc2ec
call fcn.00431366
movzx eax, al
test eax, eax
jne 0x4141e3
mov dword [ebp - 0x29c], 0x67c6
mov dword [ebp - 0x394], str.kgys_xhom_jir_gekrmneb_laeny_egrrws_aymkrdh_xastxt_brcfucqe_ykzlslgkj_oivjh_koeu_doob_zmqlmozi
cmp dword [ebp - 0x29c], 0x6b96
jle 0x41414d
push 0
push 0x1f7c
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
and dword [ebp - 0x70], 0
jmp 0x4140e6
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x938
jge 0x41414d
and dword [ebp - 0x78], 0
jmp 0x4140fc
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x7582
jge 0x41414b
and dword [ebp - 0x80], 0
jmp 0x414112
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x6be2
jge 0x414149
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x78]
or eax, dword [ebp - 0x80]
cdq
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], edx
push dword [ebp - 0x30c]
push dword [ebp - 0x310]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x41410b
jmp 0x4140f5
jmp 0x4140df
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x274]
push eax
mov ecx, 0xabc2ec
call fcn.00402de9
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x29c], 0x6500
jge 0x414188
mov edx, dword [ebp - 0x394]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x4141a4
or dword [ebp - 4], 0xffffffff
jmp 0x4141ae
lea eax, [ebp - 0x464]
push eax
mov ecx, 0xabc2ec
call fcn.00402ddb
push eax
lea ecx, [ebp - 0x274]
call fcn.00402dfe
movzx eax, al
test eax, eax
je 0x4141e3
lea ecx, [ebp - 0x274]
call fcn.0043136f
mov eax, dword [eax + 4]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x2b4], 0x658a
jge 0x414206
mov edx, dword [ebp - 0x320]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x414222
or dword [ebp - 4], 0xffffffff
jmp 0x41422c
cmp dword [ebp - 0x30], 0xffffffff
jne 0x41471c
mov ecx, 0xabc2ec
call fcn.004313b3
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0xabc2ec
call fcn.004313b7
and dword [ebp - 0x38], 0
jmp 0x41425e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
cmp ecx, dword [eax + 0x18]
jae 0x41471c
mov dword [ebp - 0x27c], 0x5dd7
mov dword [ebp - 0x3a0], str.monniqfzz_csjk_tglwvae_xewf_lwtjxvngc_rqusqs_ffmhhf_qbf
cmp dword [ebp - 0x27c], 0x5e46
jle 0x414313
and dword [ebp - 0x88], 0
jmp 0x4142a7
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x3b51
jge 0x414308
and dword [ebp - 0x90], 0
jmp 0x4142c9
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x48f5
jge 0x414306
mov eax, dword [ebp - 0x88]
xor eax, dword [ebp - 0x90]
cdq
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x318], edx
push dword [ebp - 0x318]
push dword [ebp - 0x31c]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x4142bc
jmp 0x41429a
push 0xa91
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x38]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x27c], 0x5b0d
jge 0x41434b
mov edx, dword [ebp - 0x3a0]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x414367
or dword [ebp - 4], 0xffffffff
jmp 0x414371
cmp dword [ebp - 0x2a4], 0
je 0x414717
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x4b0]
call fcn.004312e8
mov dword [ebp - 0x238], 0x6317
mov dword [ebp - 0x32c], str.ctoigtss_ztlr_afjhgpmq_wromwry_zcyx_wgg
cmp dword [ebp - 0x238], 0x63d5
jle 0x414464
and dword [ebp - 0xa8], 0
jmp 0x4143cf
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x1e7c
jge 0x414464
and dword [ebp - 0x98], 0
jmp 0x4143f5
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x247c
jge 0x41445f
and dword [ebp - 0xa0], 0
jmp 0x414417
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x4744
jge 0x41445d
mov eax, dword [ebp - 0x98]
cdq
idiv dword [ebp - 0xa0]
or edx, dword [ebp - 0xa8]
mov eax, edx
cdq
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], edx
push dword [ebp - 0x324]
push dword [ebp - 0x328]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x41440a
jmp 0x4143e8
jmp 0x4143c2
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x4b0]
call fcn.00405480
mov dword [ebp - 0x248], eax
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x238], 0x5f4e
jge 0x41449b
mov edx, dword [ebp - 0x32c]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x4144b7
or dword [ebp - 4], 0xffffffff
jmp 0x4144c1
movzx eax, byte [0xabc1c6]
test eax, eax
je 0x4144e1
mov ecx, 0xabc2ec
call fcn.00431366
movzx eax, al
test eax, eax
jne 0x4145ef
lea eax, [ebp - 0x248]
push eax
mov ecx, 0xabc2ec
call fcn.00431375
mov ecx, dword [ebp - 0x38]
mov dword [eax], ecx
mov dword [ebp - 0x240], 0x11b
mov dword [ebp - 0x3ac], str.dhwdleo_isqwgvzi_boe
cmp dword [ebp - 0x240], 0x464
jle 0x41459f
push 0x1659
call dword [sym.imp.GDI32.dll_GetStockObject]
and dword [ebp - 0xb0], 0
jmp 0x41453c
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x7ef
jge 0x41459f
and dword [ebp - 0xb8], 0
jmp 0x41455e
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x60c6
jge 0x41459d
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xb8]
shl eax, cl
cdq
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x330], edx
push dword [ebp - 0x330]
push dword [ebp - 0x334]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x414551
jmp 0x41452f
mov byte [0xabc1c6], 1
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x240], 0xfffffeee
jge 0x4145c9
mov edx, dword [ebp - 0x3ac]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x4145e5
or dword [ebp - 4], 0xffffffff
jmp 0x4145ef
cmp dword [ebp - 0x30], 0xffffffff
jne 0x41470c
mov eax, dword [ebp - 0x248]
cmp eax, dword [ebp - 0xc0]
jne 0x41470c
mov dword [ebp - 0x250], 0x63fc
mov dword [ebp - 0x338], str.lisa_wegcgqjbo_muef_hqxzjgb_xsrs_ocmviic_mkwm_uzqnfhzda_hqwiper_qph_epfvcx
cmp dword [ebp - 0x250], 0x6500
jle 0x4146bd
and dword [ebp - 0xc8], 0
jmp 0x414645
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x166f
jge 0x4146a7
and dword [ebp - 0xd0], 0
jmp 0x414667
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x559b
jge 0x4146a5
mov eax, dword [ebp - 0xc8]
imul eax, dword [ebp - 0xd0]
cdq
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], edx
push dword [ebp - 0x33c]
push dword [ebp - 0x340]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x41465a
jmp 0x414638
push 0x1599
push 0
push 0
push 0x1ce5
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x250], 0x6240
jge 0x4146e6
mov edx, dword [ebp - 0x338]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x414702
or dword [ebp - 4], 0xffffffff
jmp 0x41470c
lea ecx, [ebp - 0x4b0]
call fcn.00402ca8
jmp 0x414257
cmp dword [ebp + 0x10], 0
jne 0x41473c
cmp dword [ebp - 0x30], 0xffffffff
je 0x41473c
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x30]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x1c], ax
movzx eax, word [ebp - 0x1c]
cmp eax, 0xffff
je 0x41539d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x1c]
movzx eax, word [ebp - 0x1c]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x258], 0x606
mov dword [ebp - 0x344], str.lflte_bfrp_cvy
cmp dword [ebp - 0x258], 0x61a
jle 0x41482f
and dword [ebp - 0xd8], 0
jmp 0x41479b
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x3937
jge 0x41482f
and dword [ebp - 0xe0], 0
jmp 0x4147c1
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x657b
jge 0x41482a
and dword [ebp - 0xe8], 0
jmp 0x4147e3
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x7159
jge 0x414828
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0x348], edx
push dword [ebp - 0x348]
push dword [ebp - 0x34c]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x4147d6
jmp 0x4147b4
jmp 0x41478e
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x258], 0x2d8
jge 0x414860
mov edx, dword [ebp - 0x344]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x41487c
or dword [ebp - 4], 0xffffffff
jmp 0x414886
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x28]
jbe 0x415395
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x28]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x24], edx
jae 0x415395
mov dword [ebp - 0x260], 0x63f2
mov dword [ebp - 0x3c4], str.cmtxikud_khtrww_fbmqmv_mgbcy_ajniqxoh_rqsgposhv_luebrgc_wmoqj_rcnyvq_iejgtozin_zuztogkm_qixk
cmp dword [ebp - 0x260], 0x67d8
jle 0x414965
and dword [ebp - 0xf0], 0
jmp 0x4148e5
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x6ba
jge 0x414965
and dword [ebp - 0xf8], 0
jmp 0x414907
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x1f79
jge 0x414960
mov eax, dword [ebp - 0xf0]
or eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], edx
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea ecx, [ebp - 0x528]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x528]
call fcn.00402af1
jmp 0x4148fa
jmp 0x4148d8
mov eax, dword [0xabc2b0]
and eax, 2
jne 0x41498c
mov eax, dword [0xabc2b0]
or eax, 2
mov dword [0xabc2b0], eax
push 0xbcc
call fcn.004019ca
pop ecx
mov byte [0xabc2c4], al
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x260], 0x6209
jge 0x4149ab
push dword [ebp - 0x3c4]
call fcn.0048e258
pop ecx
jmp 0x4149c7
or dword [ebp - 4], 0xffffffff
jmp 0x4149d1
mov byte [ebp - 0x48], 0
mov byte [ebp - 0x47], 0x65
mov byte [ebp - 0x46], 5
mov byte [ebp - 0x45], 0xb7
mov byte [ebp - 0x44], 0xe5
mov byte [ebp - 0x43], 0x55
mov byte [ebp - 0x42], 0xc6
mov byte [ebp - 0x41], 2
mov byte [ebp - 0x40], 0x6f
mov byte [ebp - 0x3f], 1
mov byte [ebp - 0x3e], 0x71
and dword [ebp - 0x20], 0
and dword [ebp - 0x278], 0
jmp 0x414a12
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xb
jae 0x414d19
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x48]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x414cc8
mov dword [ebp - 0x268], 0x50cf
mov dword [ebp - 0x350], str.bigr_jvoi_jfurg_ldg_tsxoia
cmp dword [ebp - 0x268], 0x53fc
jle 0x414b20
and dword [ebp - 0x120], 0
jmp 0x414a6e
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x2006
jge 0x414b20
and dword [ebp - 0x100], 0
jmp 0x414a94
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x7cfd
jge 0x414b1b
and dword [ebp - 0x118], 0
jmp 0x414ab6
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x4af2
jge 0x414b16
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0x118]
or eax, dword [ebp - 0x120]
cdq
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], edx
push dword [ebp - 0x360]
push dword [ebp - 0x364]
lea ecx, [ebp - 0x558]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x558]
call fcn.00402af1
jmp 0x414aa9
jmp 0x414a87
jmp 0x414a61
mov dword [ebp - 0x278], 5
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x268], 0x4d30
jge 0x414b49
push dword [ebp - 0x350]
call fcn.0048e258
pop ecx
jmp 0x414b65
or dword [ebp - 4], 0xffffffff
jmp 0x414b6f
mov eax, dword [ebp - 0x20]
add eax, 3
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x270], 0x2370
mov dword [ebp - 0x3d0], str.vcnneofx_pvsv_jtx_sznc_nwzkpkg_kzix_xklohi_kwrp_tqalmh_kztyh_tgtlls_pek_diehkjahj_oohjrcmg
cmp dword [ebp - 0x270], 0x2720
jle 0x414c7a
and dword [ebp - 0x128], 0
jmp 0x414bb2
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x6be9
jge 0x414c7a
and dword [ebp - 0x130], 0
jmp 0x414bd8
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x243e
jge 0x414c75
and dword [ebp - 0x138], 0
jmp 0x414bfe
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x7144
jge 0x414c70
and dword [ebp - 0x140], 0
jmp 0x414c20
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x4fd1
jge 0x414c6e
mov eax, dword [ebp - 0x128]
cdq
idiv dword [ebp - 0x130]
mov ecx, dword [ebp - 0x138]
add ecx, dword [ebp - 0x140]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], edx
push dword [ebp - 0x36c]
push dword [ebp - 0x370]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x414c13
jmp 0x414bf1
jmp 0x414bcb
jmp 0x414ba5
jmp 0x414a0a
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x47]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x278]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jge 0x414cff
mov eax, dword [ebp - 0x148]
add eax, 0x100
mov dword [ebp - 0x148], eax
jmp 0x414ce3
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x48]
mov cl, byte [ebp - 0x148]
mov byte [ebp + eax - 0x230], cl
jmp 0x414a0a
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x230], 0
mov eax, dword [0xabc2b0]
and eax, 4
jne 0x414d5a
mov eax, dword [0xabc2b0]
or eax, 4
mov dword [0xabc2b0], eax
lea eax, [ebp - 0x230]
push eax
mov ecx, 0xabc298
call fcn.004312e8
push 0x4bb8ad
call fcn.0048df0f
pop ecx
mov dword [ebp - 0x280], 0x2fe2
mov dword [ebp - 0x35c], str.wcoxiudfc_cdewcmdg_ttc_sfmhjqfe_fqnhso
cmp dword [ebp - 0x280], 0x31d2
jle 0x414e53
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
and dword [ebp - 0x150], 0
jmp 0x414da0
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x40ac
jge 0x414e53
and dword [ebp - 0x158], 0
jmp 0x414dc6
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x7da
jge 0x414e4e
and dword [ebp - 0x160], 0
jmp 0x414de8
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x6ce2
jge 0x414e49
mov eax, dword [ebp - 0x150]
add eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x160]
sar eax, cl
cdq
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], edx
push dword [ebp - 0x378]
push dword [ebp - 0x37c]
lea ecx, [ebp - 0x588]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x588]
call fcn.00402af1
jmp 0x414ddb
jmp 0x414db9
jmp 0x414d93
and dword [ebp - 0x168], 0
jmp 0x414e69
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 4
jae 0x414e82
mov eax, dword [ebp - 0x168]
mov byte [ebp + eax - 0x230], 0
jmp 0x414e5c
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x280], 0x2dc9
jge 0x414ea1
push dword [ebp - 0x35c]
call fcn.0048e258
pop ecx
jmp 0x414ebd
or dword [ebp - 4], 0xffffffff
jmp 0x414ec7
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
movsx eax, byte [eax]
movsx ecx, byte [0xabc2c4]
cmp eax, ecx
je 0x414ee7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
jmp 0x414ecd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x480]
call fcn.00432c8e
mov dword [ebp - 0x288], 0x1800
mov dword [ebp - 0x3d8], str.lqmxlhkb_gcy_sxwuubvpy_pfnpbr_txxnvs_sffmlb
cmp dword [ebp - 0x288], 0x18e9
jle 0x415001
and dword [ebp - 0x180], 0
jmp 0x414f39
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x6aa4
jge 0x415001
and dword [ebp - 0x170], 0
jmp 0x414f5f
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x3171
jge 0x414ffc
and dword [ebp - 0x178], 0
jmp 0x414f85
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x95a
jge 0x414ff7
and dword [ebp - 0x188], 0
jmp 0x414fa7
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x34e0
jge 0x414ff5
mov eax, dword [ebp - 0x170]
imul eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x180]
sub ecx, eax
sub ecx, dword [ebp - 0x188]
mov eax, ecx
cdq
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], edx
push dword [ebp - 0x384]
push dword [ebp - 0x388]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x414f9a
jmp 0x414f78
jmp 0x414f52
jmp 0x414f2c
push 0xabc298
lea ecx, [ebp - 0x480]
call fcn.00431317
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x288], 0x1748
jge 0x415034
mov edx, dword [ebp - 0x3d8]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x415050
or dword [ebp - 4], 0xffffffff
jmp 0x41505a
lea eax, [ebp - 0x460]
push eax
lea ecx, [ebp - 0x480]
call fcn.004033d0
push dword [eax]
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x480]
call fcn.004033bc
push dword [eax]
lea ecx, [ebp - 0x4c8]
call fcn.00432cb7
mov dword [ebp - 0x290], 0x31d5
mov dword [ebp - 0x2cc], str.gsj_bcgniz_jhstlnn_gnwz_nrqkc_ssdvrj_mar_wxdipgip_ajl_ysghlo_gffxdnnlt_englj
cmp dword [ebp - 0x290], 0x3347
jle 0x415179
and dword [ebp - 0x190], 0
jmp 0x4150c7
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x5601
jge 0x415179
and dword [ebp - 0x198], 0
jmp 0x4150ed
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x7fcd
jge 0x415174
and dword [ebp - 0x1a0], 0
jmp 0x41510f
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xbe
jge 0x41516f
mov eax, dword [ebp - 0x190]
imul eax, dword [ebp - 0x198]
xor eax, dword [ebp - 0x1a0]
cdq
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x3f8], edx
push dword [ebp - 0x3f8]
push dword [ebp - 0x3fc]
lea ecx, [ebp - 0x5b8]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x5b8]
call fcn.00402af1
jmp 0x415102
jmp 0x4150e0
jmp 0x4150ba
lea eax, [ebp - 0x4c8]
push eax
call fcn.00405c23
pop ecx
mov dword [ebp - 0x22c], eax
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x290], 0x2fa6
jge 0x4151ab
push dword [ebp - 0x2cc]
call fcn.0048e258
pop ecx
jmp 0x4151c7
or dword [ebp - 4], 0xffffffff
jmp 0x4151d1
cmp dword [ebp - 0x22c], 0
je 0x41534c
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x498]
call fcn.004312e8
lea edx, [ebp - 0x3e0]
lea ecx, [ebp - 0x498]
call fcn.0040583a
movzx eax, al
test eax, eax
je 0x415224
push 0
push dword [ebp - 0x3e0]
push 0
push dword [ebp - 0x22c]
call fcn.00412806
add esp, 0x10
mov dword [ebp - 0x24], eax
jmp 0x41533f
mov dword [ebp - 0x298], 0x1bfe
mov dword [ebp - 0x374], str.bbxa_gpuqnsto_wnkgg_rotul_lvfiuey_dpetpqite_ufhmipsc
cmp dword [ebp - 0x298], 0x1d75
jle 0x4152de
and dword [ebp - 0x1a8], 0
jmp 0x41525e
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x4031
jge 0x4152de
and dword [ebp - 0x1b0], 0
jmp 0x415280
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x2196
jge 0x4152d9
mov eax, dword [ebp - 0x1a8]
or eax, dword [ebp - 0x1b0]
cdq
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x408], edx
push dword [ebp - 0x408]
push dword [ebp - 0x40c]
lea ecx, [ebp - 0x5e8]
call fcn.00405272
pop ecx
pop ecx
mov ecx, eax
call fcn.00402d04
push eax
call fcn.0048e258
pop ecx
lea ecx, [ebp - 0x5e8]
call fcn.00402af1
jmp 0x415273
jmp 0x415251
push 1
push 0
lea eax, [ebp - 0x498]
push eax
push dword [ebp - 0x22c]
call fcn.00412806
add esp, 0x10
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x298], 0x19b7
jge 0x415319
push dword [ebp - 0x374]
call fcn.0048e258
pop ecx
jmp 0x415335
or dword [ebp - 4], 0xffffffff
jmp 0x41533f
lea ecx, [ebp - 0x498]
call fcn.00402ca8
jmp 0x41537f
cmp dword [ebp + 0x10], 0
jne 0x415362
mov ecx, dword [ebp + 0xc]
call fcn.00402d04
mov dword [ebp - 0x2a0], eax
jmp 0x41536c
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x2a0], eax
push dword [ebp - 0x2a0]
push dword [ebp + 8]
call fcn.00410fac
pop ecx
pop ecx
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x4c8]
call fcn.00402b80
lea ecx, [ebp - 0x480]
call fcn.00402ca8
mov eax, dword [ebp - 0x24]
jmp 0x415532
mov dword [ebp - 4], 0x38
cmp dword [ebp - 0x2a8], 0x1ce1
jge 0x4153c0
mov edx, dword [ebp - 0x3ec]
mov ecx, 0xab8d58
call fcn.004329de
jmp 0x4153dc
or dword [ebp - 4], 0xffffffff
jmp 0x4153e6
mov dword [ebp - 0x2b0], 0x6086
mov dword [ebp - 0x380], str.rujp_hwkxz_jdzyjc_gmcm_hjmizhi_mgoilg_mcgdpdx_hyxm
cmp dword [ebp - 0x2b0], 0x6433
jle 0x4154e5
and dword [ebp - 0x1b8], 0
jmp 0x415420
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x63f3
jge 0x4154e5
and dword [ebp - 0x1c0], 0
jmp 0x415446
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x3c88
jge 0x4154e0
and dword [ebp - 0x1c8], 0
jmp 0x41546c
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x449e
jge 0x4154db
and dword [ebp - 0x1d0], 0
jmp 0x41548e
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x68d0
jge 0x4154d9
mov eax, dword [ebp - 0x1b8]
or eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1c8]
sub ecx, dword [ebp - 0x1d0]
or eax, ecx
cdq
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], edx
push dword [ebp - 0x414]
push dword [ebp - 0x418]
mov ecx, 0xab8d58
call fcn.004311a3
jmp 0x415481
jmp 0x41545f
jmp 0x415439
jmp 0x415413
xor eax, eax
jmp 0x415532
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret