Function at 0x42bb5f
Capabilities:
Allocate thread local storage
Authenticate hmac
Get file system object information
Identify system language via api

Disassembly:
mov eax, 0x4cc6c1
call fcn.004cc0e0
sub esp, 0x330
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x30], dl
mov byte [ebp - 0x38], cl
mov dword [ebp - 0x1c], 0x5d6c
cmp dword [ebp - 0x1c], 0x60ee
jle 0x42bbd5
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x2c4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42bbad
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2c4]
call fcn.00402d9f
inc edi
cmp edi, 0x23ce
jl 0x42bb8f
inc esi
cmp esi, 0x7c27
jl 0x42bb8d
mov dword [ebp - 0x14], 0x6b63
cmp dword [ebp - 0x14], 0x6ded
jle 0x42bc59
xor edi, edi
xor esi, esi
mov dword [ebp - 0x20], esi
mov ebx, esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], 0x485f
mov esi, ebx
mov ebx, 0x5d98
mov eax, esi
xor eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x84]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42bc1b
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x84]
call fcn.00402d9f
dec esi
dec ebx
jne 0x42bbff
mov ebx, dword [ebp - 0x2c]
dec ebx
mov dword [ebp - 0x2c], ebx
dec dword [ebp - 0x24]
jne 0x42bbf8
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x5661
jl 0x42bbec
inc edi
cmp edi, 0x5e99
jl 0x42bbe7
mov dword [ebp - 0x18], 0x9c8
and dword [ebp - 4], 0
cmp dword [ebp - 0x1c], 0x5a04
jge 0x42bc78
push str.usvdvfzx_dwnvi_hhi_laus_qbisabpis_omdqbdtl_xulqh_jwxgwii_ndkwpqg
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x1744
cmp dword [ebp - 0x20], 0x1a1b
jle 0x42bcd6
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x294]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42bcae
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x294]
call fcn.00402d9f
inc edi
cmp edi, 0x5cb6
jl 0x42bc90
inc esi
cmp esi, 0x190
jl 0x42bc8e
mov dword [ebp - 4], 2
cmp dword [ebp - 0x14], 0x6a1a
jge 0x42bcf1
push str.rdn_kixd_crtacex_kdbarbs_dzftfjcu_utjjtyso
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x18], 0x25fc
jle 0x42bdd6
mov dword [ebp - 0x1c], 0x4103
cmp dword [ebp - 0x1c], 0x44bc
jle 0x42bd4f
xor edi, edi
xor esi, esi
mov dword [ebp - 0x14], esi
mov ebx, esi
mov esi, 0x805a
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec ebx
dec esi
jne 0x42bd20
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x2114
jl 0x42bd19
inc edi
cmp edi, 0x4f26
jl 0x42bd14
inc ebp
add ah, dh
insd dword es:[edi], dx
daa
dec ebp
lds edi, [ebx - 0x6cc0d853]
invalid
mov dword [ebp - 0x24], 0x66dd
cmp dword [ebp - 0x24], 0x670c
jle 0x42be0f
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x6fc8
jl 0x42bdea
inc esi
cmp esi, 0x77c6
jl 0x42bde8
mov dword [ebp - 4], 6
cmp dword [ebp - 0x20], 0x16d2
jge 0x42be2a
push str.uiyzbr_zskcbjxu_xivhxowc_gkn_vmfef_wadybpqa_vam_sbf_kkah
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x5c27
cmp dword [ebp - 0x20], 0x5ef0
jle 0x42bea4
push 0
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x1c], esi
xor edi, edi
mov dword [ebp - 0x14], edi
and dword [ebp - 0x18], 0
mov eax, esi
cdq
idiv edi
mov dword [ebp - 0x2c], edx
mov edi, 0x36d0
mov esi, dword [ebp - 0x18]
mov eax, esi
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add esi, dword [ebp - 0x2c]
dec edi
jne 0x42be66
mov edi, dword [ebp - 0x14]
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x5589
mov esi, dword [ebp - 0x1c]
jl 0x42be52
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0xb69
jl 0x42be4d
inc ebx
cmp ebx, 0xa2c
jl 0x42be48
mov dword [ebp - 0x2c], 0x5487
cmp dword [ebp - 0x2c], 0x55e2
jle 0x42bf42
xor esi, esi
mov dword [ebp - 0x1c], esi
xor edi, edi
lea eax, [edi + esi]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0x336e
mov esi, eax
xor ebx, ebx
mov eax, esi
and eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xb4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42beec
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xb4]
call fcn.00402d9f
inc ebx
cmp ebx, 0x638a
jl 0x42bed0
dec esi
dec dword [ebp - 0x14]
jne 0x42bece
inc edi
cmp edi, 0x147e
mov esi, dword [ebp - 0x1c]
jl 0x42bebf
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x673f
jl 0x42bebd
push 0x47c
push 0x15a9
push 0
push 0x1ab1
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov al, byte [ebp - 0x38]
add al, byte [ebp - 0x30]
mov byte [ebp - 0x39], al
mov dword [ebp - 4], 8
cmp dword [ebp - 0x24], 0x641e
jge 0x42bf6a
mov edx, str.lvtvx_ahplfx_ynjejaff_lkqril_lvvok_cczdwhtes_rkryr_cwcre_rlocgenwi_mjgcgna_tdcoltpth
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x20], 0x5a6b
jge 0x42bf8d
mov edx, str.pfswi_hbhyiiie_oybfzu_hyne_ycdfrdnv_twduy_eka_nhuhyv_bgqh_joyujy_wxnli_gvfw
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x1635
cmp dword [ebp - 0x1c], 0x19ba
jle 0x42bfd7
xor esi, esi
mov edi, esi
mov ebx, 0xf85
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec edi
dec ebx
jne 0x42bfaa
inc esi
cmp esi, 0x4eb3
jl 0x42bfa3
push 0x236b
push 0x127d
push ebx
call dword [sym.imp.USER32.dll_InflateRect]
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x2c], 0x5270
jge 0x42bff2
push str.gpplytjjf_zfzn_cvutgpk_jzq
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x4ca0
cmp dword [ebp - 0x20], 0x4db1
jle 0x42c040
xor esi, esi
mov dword [ebp - 0x14], esi
xor edi, edi
mov ebx, esi
mov esi, 0x2d5a
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add ebx, edi
dec esi
jne 0x42c014
inc edi
cmp edi, 0x468f
mov esi, dword [ebp - 0x14]
jl 0x42c00d
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x31d6
jl 0x42c00b
mov dword [ebp - 0x18], 0x79f
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1c], 0x1279
jge 0x42c066
mov edx, str.ppuh_sicmjt_hiys_ugdlsxw_xzofd_bzmq_ajtjyb_vvxb_ccbahrw_vlrqqhu_bfssp
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x20], 0x4b0a
jge 0x42c089
mov edx, str.fqaccgmx_vrk_meaoxn_jpskzrdl
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x18], 0x23a9
jle 0x42c220
mov dword [ebp - 0x14], 0x4d76
cmp dword [ebp - 0x14], 0x4ebe
jle 0x42c108
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
lea ecx, [ebp - 0x204]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42c0c9
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x204]
call fcn.00402d9f
inc edi
cmp edi, 0x5ca6
jl 0x42c0ae
inc esi
cmp esi, 0x39a6
jl 0x42c0ac
push 0xd67
push 0
push 0xf81
push 0x965
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov dword [ebp - 0x1c], 0x48ca
cmp dword [ebp - 0x1c], 0x4966
jle 0x42c13e
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x2f6c
jl 0x42c11c
inc esi
cmp esi, 0x64b9
jl 0x42c11a
sub al, 0xd8
sbb ebx, ebx
invalid
mov dword [ebp - 0x20], 0x2cb
cmp dword [ebp - 0x20], 0x3fd
jle 0x42c296
xor esi, esi
mov dword [ebp - 0x14], esi
xor edi, edi
xor ebx, ebx
mov eax, esi
cdq
idiv edi
mov esi, edx
mov eax, esi
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xe4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42c25f
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xe4]
call fcn.00402d9f
inc ebx
cmp ebx, 0x2e2b
jl 0x42c240
inc edi
cmp edi, 0x363f
mov esi, dword [ebp - 0x14]
jl 0x42c237
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x48c4
jl 0x42c235
mov dword [ebp - 0x2c], 0xcc9
mov dword [ebp - 0x24], 0x3d4f
cmp dword [ebp - 0x24], 0x3e8b
jle 0x42c33c
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov dword [ebp - 0x14], esi
and dword [ebp - 0x18], 0
mov eax, edi
cdq
idiv esi
mov esi, edx
mov edi, dword [ebp - 0x18]
mov eax, esi
mov ecx, edi
shl eax, cl
and eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0x2f4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42c2eb
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2f4]
call fcn.00402d9f
inc edi
cmp edi, 0x126c
jl 0x42c2cb
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x7e2d
mov edi, dword [ebp - 0x1c]
jl 0x42c2bd
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x82a
jl 0x42c2b8
inc ebx
cmp ebx, 0x77bc
jl 0x42c2b3
push 0x26b9
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x20], 0x20f
add byte [eax], al
add byte [ecx + 0x20fe07d], al
add byte [eax], al
jge 0x42c357
push str.kca_kvporwy_rhiup_cjwy_krsgazp_kbsvcuz_neszxw
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x1930
jle 0x42c467
sub bh, cl
js 0x42c340
mov eax, 0x7f7470db
mov esi, 0xe6853295
cmp ch, ah
invalid
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x24], 0x3d1e
jge 0x42c482
push str.pips_tjyvdqd_sdmwdvhv_cuxoxhvjp_eoef_mirresp_oafusdvsw_mmilcsdo_dbxooi_kplfyn_lcngbifbe_gpfgr
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x3b47
cmp dword [ebp - 0x24], 0x3eb2
jle 0x42c4bf
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x50e
jl 0x42c49a
inc esi
cmp esi, 0x7848
jl 0x42c498
mov dword [ebp - 0x2c], 0x22c6
cmp dword [ebp - 0x2c], 0x23ac
jle 0x42c56d
push 0xc3c
push 0xef3
push 0xfe0
push 0x28b
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
xor edi, edi
mov dword [ebp - 0x20], edi
xor esi, esi
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x18], edi
mov ecx, esi
mov esi, edi
shl esi, cl
xor edi, edi
mov dword [ebp - 0x14], 0x66
mov eax, edi
xor eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x114]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42c529
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x114]
call fcn.00402d9f
add edi, ebx
dec dword [ebp - 0x14]
jne 0x42c50d
inc ebx
cmp ebx, 0x796f
jl 0x42c504
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x1ef1
mov edi, dword [ebp - 0x20]
jl 0x42c4f9
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x503f
jl 0x42c4f4
mov dword [ebp - 0x28], 0x3ce
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x24], 0x3823
jge 0x42c593
mov edx, str.osjrhz_sxvxjbxe_qtm_zrui_mcmheeq
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x6e63
cmp dword [ebp - 0x20], 0x71bc
jle 0x42c5e9
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
xor ebx, ebx
mov eax, edi
cdq
idiv esi
mov edi, edx
mov eax, ebx
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0x73eb
jl 0x42c5b7
inc esi
cmp esi, 0x1140
mov edi, dword [ebp - 0x14]
jl 0x42c5ae
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x1a3d
jl 0x42c5ac
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x2c], 0x227a
jge 0x42c604
push str.mjlquxnk_cwhtmyeyd_tywhtm_brvmtpl_zuocncwt_moguexk_ipkqmi_whh_ammkacsia_rrdqijiem_edo_stdqpwfk_gywo
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x3eea
cmp dword [ebp - 0x24], 0x3f65
jle 0x42c677
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov dword [ebp - 0x14], esi
and dword [ebp - 0x2c], 0
mov dword [ebp - 0x18], edi
mov ecx, esi
sar edi, cl
mov esi, dword [ebp - 0x2c]
mov eax, edi
mov ecx, esi
shl eax, cl
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x77c0
jl 0x42c632
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x93f
mov edi, dword [ebp - 0x1c]
jl 0x42c624
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x7322
jl 0x42c61f
inc ebx
cmp ebx, 0x28e2
jl 0x42c61a
cmp dword [ebp - 0x28], 0x22c0
jle 0x42c791
mov dword [ebp - 0x14], 0x634f
cmp dword [ebp - 0x14], 0x64a2
jle 0x42c6dc
xor esi, esi
xor edi, edi
mov eax, edi
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x234]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42c6b4
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x234]
call fcn.00402d9f
inc edi
cmp edi, 0x46ed
jl 0x42c698
inc esi
cmp esi, 0x7fd3
jl 0x42c696
xor al, 0x50
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x20], 0x6a8a
jge 0x42c7b0
mov edx, str.ppomzi_krql_rlpyb_pcyptm_xvanefa_tbtrsltb_bobnlp_vmmjqr_wwovhoqwj_gatfozq_qqisnrpru_klbbrdswe_zbbks
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x4684
cmp dword [ebp - 0x20], 0x4746
jle 0x42c851
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov eax, edi
cdq
idiv esi
mov edi, edx
mov dword [ebp - 0x14], 0x596e
xor ebx, ebx
mov eax, edi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x144]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42c7fd
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x144]
call fcn.00402d9f
inc ebx
cmp ebx, 0x29ed
jl 0x42c7df
dec edi
dec dword [ebp - 0x14]
jne 0x42c7dd
inc esi
cmp esi, 0x4918
mov edi, dword [ebp - 0x1c]
jl 0x42c7cf
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x7b13
jl 0x42c7cd
push 0
push 0x87
push 0xdb9
push 0x1a5e
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x24], 0x3e94
jge 0x42c870
mov edx, str.eag_bhozjqozi_htknryd
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], 0xa3a
mov dword [ebp - 0x24], 0x761
cmp dword [ebp - 0x24], 0x82a
jle 0x42c8fd
push 0
push 0
push 0xb44
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor esi, esi
mov dword [ebp - 0x14], esi
xor edi, edi
xor ebx, ebx
mov dword [ebp - 0x28], esi
mov ecx, edi
sar esi, cl
mov eax, esi
mov ecx, ebx
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x54]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42c8c9
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x54]
call fcn.00402d9f
inc ebx
cmp ebx, 0x580b
jl 0x42c8ae
inc edi
cmp edi, 0x145e
mov esi, dword [ebp - 0x14]
jl 0x42c8a5
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x123e
jl 0x42c8a3
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x20], 0x4578
jge 0x42c918
push str.tdua_vtzn_hcrv_xoouaxl_ksxkd_ndfu_xocb_jzqzoaocv_rngf_rcwr_zhxrr_alxkdqsk_nvmprq_vpxue
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x112d
cmp dword [ebp - 0x18], 0x12f2
jle 0x42c98b
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x1c], edi
xor esi, esi
mov dword [ebp - 0x14], esi
and dword [ebp - 0x20], 0
mov dword [ebp - 0x28], edi
mov ecx, esi
sar edi, cl
mov esi, dword [ebp - 0x20]
mov eax, edi
mov ecx, esi
sar eax, cl
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0xcbf
jl 0x42c946
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0xa84
mov edi, dword [ebp - 0x1c]
jl 0x42c938
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x78f6
jl 0x42c933
inc ebx
cmp ebx, 0x2439
jl 0x42c92e
cmp dword [ebp - 0x2c], 0x1d9e
jle 0x42cb39
mov dword [ebp - 0x20], 0x328f
cmp dword [ebp - 0x20], 0x352c
jle 0x42ca25
xor esi, esi
mov dword [ebp - 0x1c], esi
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x14], 0x34a9
xor edi, edi
mov esi, dword [ebp - 0x2c]
xor ebx, ebx
mov dword [ebp - 0x28], esi
mov ecx, edi
sar esi, cl
mov eax, ebx
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x174]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42c9e3
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x174]
call fcn.00402d9f
inc ebx
cmp ebx, 0x292
jl 0x42c9c7
inc edi
cmp edi, 0x5995
mov esi, dword [ebp - 0x2c]
jl 0x42c9be
mov esi, dword [ebp - 0x1c]
add dword [ebp - 0x2c], esi
dec dword [ebp - 0x14]
jne 0x42c9b9
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x3df3
jl 0x42c9ad
ja 0x42caa1
cmc
aad 0x7b
adc al, 0x50
add dword [eax], eax
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x24], 0x383
jge 0x42cb54
push str.ptvtnghs_zrpdfqck_fhiylgn_hduudcqe
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x56fe
cmp dword [ebp - 0x14], 0x5942
jle 0x42cbb0
xor esi, esi
xor edi, edi
mov eax, edi
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x264]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42cb88
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x264]
call fcn.00402d9f
inc edi
cmp edi, 0x47c0
jl 0x42cb6c
inc esi
cmp esi, 0x2473
jl 0x42cb6a
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x18], 0xf10
jge 0x42cbcf
mov edx, str.hrwoaywn_jeptpsr_osn_cvwuqiqg_vsdsm_bdtkw_oeeayxql_uiepcaksz_cyaqw_htydrfc_thlzf_xhticpk
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x38]
and al, byte [ebp - 0x30]
mov byte [ebp - 0x31], al
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x14], 0x55c4
jge 0x42cbf7
push str.lurqabuf_uzufr_tkoivqvr_lyrfjqyp_fymt_xpfqoffbp_ajuusxy_wqfjin_lytkc_jceyv_ramwcuuq_npysnnw
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x4b89
cmp dword [ebp - 0x18], 0x4dcb
jle 0x42cc52
xor esi, esi
xor edi, edi
mov ebx, 0x75c3
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42cc2e
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1a4]
call fcn.00402d9f
add edi, esi
dec ebx
jne 0x42cc14
inc esi
cmp esi, 0xbcc
jl 0x42cc0d
mov dword [ebp - 0x24], 0x2fb
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x18], 0x4970
jge 0x42cc74
push str.ygn_phmfk_qtry_tmbkju_vzymcwna_ochzunyh_sxkq_oqga
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x7dce
cmp dword [ebp - 0x20], 0x7e34
jle 0x42cced
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
mov eax, edi
cdq
idiv esi
mov eax, edx
neg eax
mov dword [ebp - 0x28], eax
mov edi, ebx
mov esi, 0x457b
mov ebx, eax
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add edi, ebx
dec esi
jne 0x42ccac
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x310
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x1c]
jl 0x42cc97
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x21e
jl 0x42cc92
inc ebx
mov dword [ebp - 0x1c], ebx
cmp ebx, 0x43bf
jl 0x42cc8d
cmp dword [ebp - 0x24], 0x1fb3
jle 0x42ce84
mov dword [ebp - 0x1c], 0x7fa1
cmp dword [ebp - 0x1c], 0x8127
jle 0x42cd98
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov dword [ebp - 0x28], edi
mov ecx, esi
mov esi, edi
shl esi, cl
xor edi, edi
mov eax, edi
xor eax, ebx
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x324]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42cd43
invalid
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x324]
call fcn.00402d9f
inc edi
cmp edi, 0x7916
jl 0x42cd25
inc ebx
cmp ebx, 0x33f
jl 0x42cd23
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x2a7c
mov edi, dword [ebp - 0x14]
jl 0x42cd18
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0xfed
jl 0x42cd13
push 0x195a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [0xecadcfa0], eax
fsubr qword [edx + 0x6a]
insd dword es:[edi], dx
jns 0x42ce0e
xor al, 0xfb
cdq
pushal
cmp al, 0xc7
push ebp
loopne 0x42cd2f
jo 0x42cdca
mov dword [0x53a271a], eax
in al, dx
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x20], 0x7c81
jge 0x42cea3
mov edx, str.sgzja_srrnoufeh_nmxclnq_rjvq_mst_buhyishhs_irqgh_qqehgyf_bcsrxpzf_byrbkirke_vniw_tzssafs_iltig
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x4ae
cmp dword [ebp - 0x14], 0x4f9
jle 0x42cef9
xor edi, edi
mov dword [ebp - 0x18], edi
xor esi, esi
xor ebx, ebx
mov eax, edi
cdq
idiv esi
mov edi, edx
mov eax, ebx
or eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0xa1d
jl 0x42cec7
inc esi
cmp esi, 0x987
mov edi, dword [ebp - 0x18]
jl 0x42cebe
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x41f7
jl 0x42cebc
mov dword [ebp - 0x18], 0x9c5
cmp dword [ebp - 0x18], 0xbe6
jle 0x42cf33
xor esi, esi
xor edi, edi
mov eax, esi
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x31e8
jl 0x42cf0d
inc esi
cmp esi, 0x72b3
jl 0x42cf0b
mov dword [ebp - 0x28], 0x8b6
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x14], 0xd5
jge 0x42cf59
mov edx, str.jrxzttlkw_xcu_frsrj_fqensgka_dnakcgwv_lberz_jcv_eun
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x18], 0x65a
jge 0x42cf7c
mov edx, str.gewkbhcug_qbqhcw_aepjphc_nodqmruv_bzi_agvvkq_hhbclnd_wiymx
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0xa01
cmp dword [ebp - 0x20], 0xd07
jle 0x42cfec
xor edi, edi
xor esi, esi
mov dword [ebp - 0x18], esi
mov ebx, esi
mov esi, 0x292f
mov eax, ebx
xor eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x1d4]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42cfba
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1d4]
call fcn.00402d9f
dec ebx
dec esi
jne 0x42cf9e
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x6eaa
jl 0x42cf97
inc edi
cmp edi, 0xe99
jl 0x42cf92
mov dword [ebp - 0x24], 0x2ec9
cmp dword [ebp - 0x24], 0x2f1b
jle 0x42d040
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x6c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42d01b
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.00402d9f
inc edi
cmp edi, 0x41ee
jl 0x42d000
inc esi
cmp esi, 0x5882
jl 0x42cffe
cmp dword [ebp - 0x28], 0x1fc2
jle 0x42d1f2
mov dword [ebp - 0x1c], 0x360f
cmp dword [ebp - 0x1c], 0x3826
jle 0x42d0e6
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov eax, edi
cdq
idiv esi
mov eax, edx
mov dword [ebp - 0x28], eax
xor edi, edi
mov esi, eax
mov ecx, ebx
sar esi, cl
mov eax, esi
mov ecx, edi
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x9c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42d09d
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00402d9f
inc edi
cmp edi, 0x1eae
jl 0x42d07f
inc ebx
cmp ebx, 0x5365
mov eax, dword [ebp - 0x28]
jl 0x42d077
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x3408
mov edi, dword [ebp - 0x14]
jl 0x42d06b
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x3d3b
jl 0x42d066
mov dword [ebp - 0x18], 0xcfb
cmp dword [ebp - 0x18], 0xdbd
jle 0x42d11f
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x4063
jl 0x42d0fa
inc esi
cmp esi, 0x3b16
jl 0x42d0f8
lodsd eax, dword [esi]
sub eax, 0x488059f6
mov edi, 0x71554a93
xor eax, 0x55f8a888
std
hlt
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x20], 0x87d
jge 0x42d20d
push str.pubqblahc_rnvffef_shmpjsrgq
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x5ac6
cmp dword [ebp - 0x14], 0x5ce7
jle 0x42d24a
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x50e7
jl 0x42d225
inc esi
cmp esi, 0xb40
jl 0x42d223
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x24], 0x2e9f
jge 0x42d265
push str.btfeucmg_joxixzn_yqb_dji_evcol_thsczbqi_jwqcqwhg_iuh_kduwutrkc_ens_jhegnpcln
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x2510
cmp dword [ebp - 0x1c], 0x2714
jle 0x42d2e1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
xor edi, edi
xor esi, esi
xor ebx, ebx
lea eax, [esi + edi]
and eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xcc]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42d2b0
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xcc]
call fcn.00402d9f
inc ebx
cmp ebx, 0x5141
jl 0x42d293
inc esi
cmp esi, 0x7ea5
jl 0x42d291
inc edi
cmp edi, 0x1298
jl 0x42d28f
mov al, byte [ebp - 0x38]
and byte [ebp - 0x30], al
mov dword [ebp - 0x20], 0x4890
cmp dword [ebp - 0x20], 0x4b7c
jle 0x42d351
xor esi, esi
xor ebx, ebx
mov dword [ebp - 0x18], 0x21e
xor edi, edi
mov eax, ebx
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0xfc]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42d322
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0xfc]
call fcn.00402d9f
inc edi
cmp edi, 0x18bc
jl 0x42d304
add ebx, esi
dec dword [ebp - 0x18]
jne 0x42d302
inc esi
cmp esi, 0x33ff
jl 0x42d2f9
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x14], 0x5721
jge 0x42d370
mov edx, str.tgygt_ahac_aiurypk_vscqntqxb_uhsvorz_mdooujnsy_fwebtbd_cnsvqqtf_azk_jvwm_ljl_dvwmj_uycx_ewpufjp
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x1c], 0x230c
jge 0x42d38f
push str.jnmuvd_trgsdg_wsgm
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x53eb
cmp dword [ebp - 0x24], 0x5477
jle 0x42d429
xor edi, edi
xor esi, esi
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x14], 0x2bbd
xor esi, esi
mov dword [ebp - 0x18], 0x1ca0
mov eax, edi
mov ecx, esi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x12c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42d3de
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x12c]
call fcn.00402d9f
add esi, ebx
dec dword [ebp - 0x18]
jne 0x42d3c0
mov esi, dword [ebp - 0x1c]
add ebx, esi
dec dword [ebp - 0x14]
jne 0x42d3b7
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x6126
jl 0x42d3ae
inc edi
cmp edi, 0x2942
jl 0x42d3a9
push 0
push 0
push 0xc4f
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov dword [ebp - 0x28], 0x81
mov dword [ebp - 4], 0x44
cmp dword [ebp - 0x20], 0x4828
jge 0x42d44b
push str.agjkwgjy_fogrhcxna_dpfjzwm
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], 0x2bbc
cmp dword [ebp - 0x14], 0x2d6a
jle 0x42d4c5
push 0x86a
push 0xb9c
push 0
call dword [sym.imp.GDI32.dll_PtInRegion]
xor esi, esi
xor edi, edi
xor ebx, ebx
lea eax, [ebx + edi]
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x15c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42d494
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x15c]
call fcn.00402d9f
inc ebx
cmp ebx, 0x23e5
jl 0x42d477
inc edi
cmp edi, 0x771c
jl 0x42d475
inc esi
cmp esi, 0x731
jl 0x42d473
mov dword [ebp - 4], 0x46
cmp dword [ebp - 0x24], 0x504e
jge 0x42d4e0
push str.hbunoo_mdklf_wicsd_khepe_fkdlfhxw_axlwte_zmwzeh_juurdzc_xrtmuiha_fsjl_dsatienwp_wnpxvnbk_apgveuzgh_wdhttdgi
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x28], 0x23ae
jle 0x42d621
mov dword [ebp - 0x18], 0x1b00
cmp dword [ebp - 0x18], 0x1cd5
jle 0x42d540
xor esi, esi
xor edi, edi
xor ebx, ebx
mov eax, edi
cdq
idiv ebx
mov eax, esi
mov ecx, edx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0x55a8
jl 0x42d507
inc edi
cmp edi, 0x5daf
jl 0x42d505
inc esi
cmp esi, 0xb54
jl 0x42d503
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
xchg edi, eax
adc esp, dword [edi]
dec edi
xchg edx, eax
dec ecx
cwde
sti
dec ebp
test byte [eax - 0xbfae586], 0x3e
sbb ch, dh
ljmp 0x5ff
mov dword [ebp - 0x20], 0x53f4
cmp dword [ebp - 0x20], 0x5541
jle 0x42d685
xor esi, esi
xor edi, edi
xor ebx, ebx
lea eax, [edi + esi]
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0x18c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42d654
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x18c]
call fcn.00402d9f
inc ebx
cmp ebx, 0x18a8
jl 0x42d637
inc edi
cmp edi, 0x4bb8
jl 0x42d635
inc esi
cmp esi, 0x3c15
jl 0x42d633
mov dword [ebp - 0x24], 0x38eb
cmp dword [ebp - 0x24], 0x3b44
jle 0x42d6dd
xor esi, esi
xor edi, edi
mov eax, edi
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x1bc]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42d6b5
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1bc]
call fcn.00402d9f
inc edi
cmp edi, 0x3eff
jl 0x42d699
inc esi
cmp esi, 0x1629
jl 0x42d697
mov dword [ebp - 4], 0x4a
cmp dword [ebp - 0x14], 0x2afd
jge 0x42d6f8
push str.bdyhvk_nxnphawc_fgso_wrxi_bpchx_mrdrr_sohe
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], 0x2698
cmp dword [ebp - 0x2c], 0x2a31
jle 0x42d75c
xor esi, esi
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 0x14], 0x4f39
xor edi, edi
xor esi, esi
mov dword [ebp - 0x18], 0x4193
mov eax, ebx
or eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
add esi, edi
dec dword [ebp - 0x18]
jne 0x42d725
inc edi
cmp edi, 0x1cc6
jl 0x42d71c
mov esi, dword [ebp - 0x1c]
add ebx, esi
dec dword [ebp - 0x14]
jne 0x42d71a
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x1ffe
jl 0x42d711
mov al, byte [ebp - 0x39]
sub al, byte [ebp - 0x31]
mov byte [ebp - 0x31], al
mov dword [ebp - 4], 0x4c
cmp dword [ebp - 0x20], 0x5335
jge 0x42d780
push str.ajhnqb_miek_opjxmgf_dcsafi_veq_tarqxg_qakaj_xkhelfmw
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x4c56
cmp dword [ebp - 0x1c], 0x4ec5
jle 0x42d7b9
xor esi, esi
mov edi, esi
mov ebx, 0x642a
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec edi
dec ebx
jne 0x42d79d
inc esi
cmp esi, 0x7eaa
jl 0x42d796
mov dword [ebp - 4], 0x4e
cmp dword [ebp - 0x24], 0x35c2
jge 0x42d7d4
push str.whlpodo_bpuaqqajr_iln_xutsqxed_gxeilb_fgbljfwzm_ibcoeznt_nectpxxfo
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x3852
cmp dword [ebp - 0x20], 0x3b5e
jle 0x42d837
xor edi, edi
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x18], 0x3eaf
mov eax, ebx
mov ecx, esi
shl eax, cl
and eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
dec esi
dec dword [ebp - 0x18]
jne 0x42d7fb
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x2706
jl 0x42d7f1
inc ebx
cmp ebx, 0x48f8
jl 0x42d7ec
inc edi
cmp edi, 0x8dd
jl 0x42d7ea
mov dword [ebp - 4], 0x50
cmp dword [ebp - 0x2c], 0x2400
jge 0x42d856
mov edx, str.aqfpjuzr_enw_oldjqdnfv_zsbja_viak_oukn_avtsghv_gbpqxxzh_lryal_lim_bma_pnlzci_beu
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], 0x7e9
mov dword [ebp - 4], 0x52
cmp dword [ebp - 0x1c], 0x4893
jge 0x42d880
mov edx, str.rzakkkqyt_ftnctmi_yeeivxp_lse
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0xf51
cmp dword [ebp - 0x24], 0xf97
jle 0x42d8bb
xor esi, esi
xor edi, edi
mov eax, edi
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x860
jl 0x42d898
inc esi
cmp esi, 0x7bd0
jl 0x42d896
mov dword [ebp - 4], 0x54
cmp dword [ebp - 0x20], 0x3602
jge 0x42d8da
mov edx, str.pmmrhvok_gysywoctj_fipfv_hfosffs_gkz_cru_lxaxbbumg_gdkbildy_uhj_rzco
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x2fa6
cmp dword [ebp - 0x20], 0x32a9
jle 0x42d94d
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x14], edi
xor esi, esi
mov dword [ebp - 0x18], esi
and dword [ebp - 0x1c], 0
mov dword [ebp - 0x28], edi
mov ecx, esi
sar edi, cl
mov esi, dword [ebp - 0x1c]
mov eax, edi
mov ecx, esi
shl eax, cl
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x144d
jl 0x42d908
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x5a32
mov edi, dword [ebp - 0x14]
jl 0x42d8fa
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x397e
jl 0x42d8f5
inc ebx
cmp ebx, 0x7f5e
jl 0x42d8f0
cmp dword [ebp - 0x2c], 0x18a2
jle 0x42db68
mov dword [ebp - 0x14], 0x67c1
cmp dword [ebp - 0x14], 0x6835
jle 0x42d9b2
xor esi, esi
xor ebx, ebx
xor edi, edi
xor eax, eax
mov dword [ebp - 0x18], eax
xor eax, edi
lea ecx, [ebx + esi]
or eax, ecx
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x40c8
jl 0x42d975
inc edi
cmp edi, 0x21e7
jl 0x42d970
inc ebx
cmp ebx, 0x1ea4
jl 0x42d96e
inc esi
cmp esi, 0x798f
jl 0x42d96c
mov dword [ebp - 0x1c], 0x1c4d
cmp dword [ebp - 0x1c], 0x1ef8
jle 0x42da0b
xor esi, esi
xor ebx, ebx
xor edi, edi
xor ecx, ecx
mov dword [ebp - 0x18], ecx
lea eax, [edi + ebx]
shl eax, cl
and eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
mov ecx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x5282
jl 0x42d9cd
inc edi
cmp edi, 0x28d9
jl 0x42d9c8
inc ebx
cmp ebx, 0x7f20
jl 0x42d9c6
inc esi
cmp esi, 0x328c
add byte [eax], al
jl 0x42d9c4
mov dword [ebp - 0x18], 0x5191
cmp dword [ebp - 0x18], 0x556d
jle 0x42da41
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x5082
jl 0x42da1f
inc esi
cmp esi, 0x7d08
jl 0x42da1d
pop edx
int1
fcomp qword [ecx + 0x73]
adc al, byte [edi]
and eax, 0x61d32710
imul eax, dword [edi], 0x6b275fa7
scasb al, byte es:[edi]
fmul qword [edi]
salc
lodsb al, byte cs:[esi]
js 0x42da07
jmp 0x429fe4
mov dword [ebp - 4], 0x5c
cmp dword [ebp - 0x24], 0xe8c
jge 0x42db87
mov edx, str.nkeng_maeflm_luzjvm_qpqbkquit_mcqr_yxxcxn_nzs_flbpmn_xnr_ykqi_pqzr
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x5e
cmp dword [ebp - 0x20], 0x2c96
jge 0x42dbaa
mov edx, str.ekdvihxh_tjvxcymf_ybukml_chj_uoabnpuj_lnctcrh_ibhskh
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0x7c0
mov dword [ebp - 0x1c], 0x3e32
cmp dword [ebp - 0x1c], 0x3ee9
jle 0x42dc2b
push 0
push 0x1207
push 0x7b8
push 0
push 0x466
push 0x1d8a
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
xor esi, esi
mov edi, esi
mov ebx, 0x42b1
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42dc08
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x1ec]
call fcn.00402d9f
dec edi
dec ebx
jne 0x42dbee
inc esi
cmp esi, 0x5c8f
jl 0x42dbe7
mov dword [ebp - 0x20], 0x650e
cmp dword [ebp - 0x20], 0x66f8
jle 0x42dc87
xor edi, edi
xor esi, esi
mov dword [ebp - 0x14], esi
mov ebx, esi
mov dword [ebp - 0x18], 0x7d0f
xor esi, esi
mov eax, esi
and eax, ebx
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x1572
jl 0x42dc4d
dec ebx
dec dword [ebp - 0x18]
jne 0x42dc4b
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x60a3
jl 0x42dc42
inc edi
cmp edi, 0x514d
jl 0x42dc3d
cmp dword [ebp - 0x28], 0x2081
jle 0x42dd57
cld
dec esp
pop es
out dx, al
adc al, 0x9f
in al, dx
sbb byte [ecx], bl
xchg esi, eax
inc eax
cmpsd dword [esi], dword es:[edi]
mov ebp, 0x48503267
dec edx
or eax, 0xc14ee140
or ah, ah
add al, 0xf4
or al, 0xc8
add esp, ebp
pop eax
dec edx
xor dword [ebx - 0x6f], esp
fild dword [eax - 0x5c]
sub edi, dword [edx]
idiv byte [eax]
pop ss
imul eax, dword [esi], 0xffffffa0
retf
mov dword [ebp - 4], 0x60
cmp dword [ebp - 0x1c], 0x3d0d
jge 0x42dd72
push str.lwnbl_scjvzxy_gwn_mxrlieimq
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x62
cmp dword [ebp - 0x20], 0x6213
jge 0x42dd95
mov edx, str.puqmx_cfwztb_map
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x31]
sub al, byte [ebp - 0x30]
mov byte [ebp - 0x31], al
mov dword [ebp - 0x18], 0x6cde
cmp dword [ebp - 0x18], 0x6f61
jle 0x42ddf9
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
lea ecx, [ebp - 0x21c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42ddd1
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x21c]
call fcn.00402d9f
inc edi
cmp edi, 0x5e89
jl 0x42ddb6
inc esi
cmp esi, 0x6b48
jl 0x42ddb4
mov dword [ebp - 0x1c], 0x1b48
cmp dword [ebp - 0x1c], 0x1c34
jle 0x42de5d
xor esi, esi
xor edi, edi
xor ebx, ebx
lea eax, [ebx + edi]
add eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x24c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42de2c
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x24c]
call fcn.00402d9f
inc ebx
cmp ebx, 0x7f8
jl 0x42de0f
inc edi
cmp edi, 0x694a
jl 0x42de0d
inc esi
cmp esi, 0x163b
jl 0x42de0b
mov dword [ebp - 0x28], 0x1245
mov dword [ebp - 4], 0x64
cmp dword [ebp - 0x18], 0x69cf
jge 0x42de7f
push str.arwyjh_wvyu_syylstca_mtpg_qvezwnyi_qfjccdq_giysqmwdr_kbzhlgv
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x1e87
cmp dword [ebp - 0x20], 0x2017
jle 0x42dee8
xor edi, edi
xor esi, esi
mov dword [ebp - 0x14], esi
xor ebx, ebx
mov dword [ebp - 0x18], 0x1f7b
xor esi, esi
mov eax, ebx
mov ecx, esi
shl eax, cl
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc esi
cmp esi, 0x29b2
jl 0x42dea5
mov esi, dword [ebp - 0x14]
add ebx, esi
dec dword [ebp - 0x18]
jne 0x42dea3
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x154c
jl 0x42de9a
inc edi
cmp edi, 0x6102
jl 0x42de95
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 4], 0x66
cmp dword [ebp - 0x1c], 0x1b1b
jge 0x42df03
push str.gbvl_qggyhvzix_qkjmprtt_ikjaawfzs_gnipvrux_rse_rqccolenu_wjqupijr
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x28], 0x240f
jle 0x42e089
mov dword [ebp - 0x18], 0x31d0
cmp dword [ebp - 0x18], 0x3550
jle 0x42df53
xor esi, esi
xor edi, edi
mov eax, edi
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x4858
jl 0x42df28
inc esi
cmp esi, 0x1743
jl 0x42df26
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [ebp - 0x14], 0x700d
cmp dword [ebp - 0x14], 0x71e2
jle 0x42dfb1
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
xor esi, esi
xor edi, edi
mov eax, edi
xor eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x27c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42df89
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x27c]
call fcn.00402d9f
inc edi
cmp edi, 0x111a
jl 0x42df6d
inc esi
cmp esi, 0x4499
jl 0x42df6b
add edi, dword [edi + eax*8 - 0x69]
leave
jl 0x42df72
add al, 0x65
jnp 0x42df7f
in al, dx
inc ebp
fimul word [edx - 0x1d550666]
dec ebx
mov dl, bh
in eax, 0x3a
add eax, 0x535a1bce
cmp al, ah
push ebp
cmpsd dword [esi], dword es:[edi]
xchg esi, eax
mov bl, 0xfe
adc byte [eax + 0x68], dl
mov dh, 0x2b
add byte [eax], al
mov dword [ebp - 4], 0x6c
cmp dword [ebp - 0x20], 0x1b3b
jge 0x42e0a8
mov edx, str.sygvxt_jhjuiwbw_qmdakgv_rcisp_mnubsb_qtsmdnko_sktoco_kxrbgi_csx_baveelmkf_mzcynuc_gxxmtjvx
mov ecx, 0xac8118
call fcn.0042b974
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0x86
mov dword [ebp - 0x1c], 0x2351
cmp dword [ebp - 0x1c], 0x2550
jle 0x42e10d
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x2ac]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42e0e5
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2ac]
call fcn.00402d9f
inc edi
cmp edi, 0x2e98
jl 0x42e0c7
inc esi
cmp esi, 0x6341
jl 0x42e0c5
mov dword [ebp - 0x20], 0x614
cmp dword [ebp - 0x20], 0x9d0
jle 0x42e164
xor esi, esi
xor edi, edi
lea eax, [edi + esi]
cdq
push edx
push eax
lea ecx, [ebp - 0x2dc]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42e13c
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x2dc]
call fcn.00402d9f
inc edi
cmp edi, 0x111d
jl 0x42e121
inc esi
cmp esi, 0x48cb
jl 0x42e11f
cmp dword [ebp - 0x28], 0x1981
jle 0x42e2df
mov dword [ebp - 0x18], 0x4ba1
cmp dword [ebp - 0x18], 0x4dcc
jle 0x42e1a8
xor esi, esi
xor edi, edi
mov eax, edi
and eax, esi
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc edi
cmp edi, 0x1411
jl 0x42e185
inc esi
cmp esi, 0x6af
jl 0x42e183
mov dword [ebp - 0x14], 0x57b4
cmp dword [ebp - 0x14], 0x5862
jle 0x42e22a
push 0x6ef
push es
add byte [eax], al
push 0x60d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
xor esi, esi
xor edi, edi
mov eax, esi
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x30c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42e1fa
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x30c]
call fcn.00402d9f
inc edi
cmp edi, 0x548d
jl 0x42e1dc
inc esi
cmp esi, 0xba5
jl 0x42e1da
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
jl 0x42e1ba
neg byte [edi + edx*4 + 0x289d0544]
mov byte [ebx + ebp*8], dl
mov dword [edx], esi
mov esp, 0x213245ec
or eax, 0xcbcbf12b
mov ah, 0xd9
sub eax, 0x39e92543
sbb al, byte [eax]
add cl, ch
and al, byte ds:[eax]
add byte [edi], bh
inc ebp
nop
xor ebx, dword [0x828890c6]
test dword [eax], 0xbe6f1f41
dec ebx
test eax, 0x1307becf
retf 0x96a0
mov dword [ebp - 4], 0x72
cmp dword [ebp - 0x1c], 0x20e5
jge 0x42e2fa
push str.umoynq_nhyqee_cfsjxs_dzf_zujlzfs_vap_dgot_cgfr_pjtunopf_ggomjjpp_qurbyfwe
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0x3208
cmp dword [ebp - 0x28], 0x3557
jle 0x42e35d
push 0x30f
call dword [sym.imp.KERNEL32.dll_TlsFree]
xor esi, esi
mov dword [ebp - 0x18], esi
xor edi, edi
xor ebx, ebx
mov eax, esi
cdq
idiv edi
mov esi, edx
mov eax, esi
mov ecx, ebx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xac8118
call fcn.0042a134
inc ebx
cmp ebx, 0x139f
jl 0x42e329
inc edi
cmp edi, 0x5084
mov esi, dword [ebp - 0x18]
jl 0x42e320
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x5f64
jl 0x42e31e
mov dword [ebp - 4], 0x74
cmp dword [ebp - 0x20], 0x3fc
jge 0x42e378
push str.klnjrudg_urodcmmem_xoghgkhki_odqhfa
call fcn.004b69fa
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0x2c00
cmp dword [ebp - 0x28], 0x2f73
jle 0x42e3e3
xor esi, esi
mov edi, esi
mov ebx, 0x7229
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0x33c]
call fcn.00404de8
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x42e3af
mov eax, dword [eax]
push eax
call fcn.004b69fa
pop ecx
push 0
push 1
lea ecx, [ebp - 0x33c]
call fcn.00402d9f
dec edi
dec ebx
jne 0x42e395
inc esi
cmp esi, 0x2cb1
jl 0x42e38e
push 0x257
push 0x212f
push ebx
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
mov al, byte [ebp - 0x31]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret