Function at 0x494718
Capabilities:
Get common file path
Get geographical location
Get graphical window text
Read .ini file

Disassembly:
mov eax, 0x4afaa9
call fcn.004ae7a8
sub esp, 0x33c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x14], 0xa137b189
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0x15c]
call fcn.0044204b
mov dword [ebp - 0x3c], 0xc1da7bc9
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
jmp 0x49476b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x15c]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x494758
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x15c]
mov dword [eax], esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 8
setne al
xor ecx, ecx
cmp esi, eax
setg cl
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x3c]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x3c], ecx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x4947e1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCommState]
lea ecx, [ebp - 0x15c]
call fcn.0044211d
mov dword [ebp - 0x24], 0xef7d6512
mov dword [ebp - 0x14], 0xce96b779
push edi
lea ecx, [ebp - 0xc0]
call fcn.0044204b
mov dword [ebp - 0x1c], ebx
jmp 0x49481e
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x49480b
cmp dword [ebp - 0x24], ebx
jne 0x494837
mov eax, dword [ebp - 0x24]
sub eax, 0xf1eb
cmp eax, dword [ebp - 0x24]
mov ecx, ebx
jg 0x494839
mov ecx, edi
xor eax, eax
cmp ecx, 0xd26ec17e
sete al
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jg 0x494a1e
push 4
lea ecx, [ebp - 0x12c]
call fcn.0044204b
mov dword [ebp - 0x1c], ebx
jmp 0x494878
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x12c]
mov dword [eax + ecx*4], 0x781b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x494865
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jg 0x494a0b
mov dword [ebp - 0x28], 0x311e2db8
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x14], ebx
jne 0x4948bc
mov eax, dword [ebp - 0x1c]
dec eax
neg eax
sbb eax, eax
neg eax
cmp eax, 0x2803
je 0x4948b1
cmp dword [ebp - 0x14], ebx
mov eax, ebx
je 0x4948b3
mov eax, edi
add eax, 0x38e5161e
mov edx, ebx
je 0x4948be
mov edx, edi
xor ecx, ecx
mov eax, dword [ebp - 0x12c]
cmp edx, dword [eax]
setl cl
mov eax, dword [ebp - 0x28]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffc
sbb eax, eax
neg eax
cmp eax, 0xfffffff9
je 0x4948eb
cmp dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
je 0x4948ee
mov dword [ebp - 0x20], edi
mov esi, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
xor edx, edx
cmp eax, dword [ebp - 0x20]
setne dl
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, edi
setg al
cmp eax, 0x12d49381
jge 0x494957
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x49494d
mov dword [ebp - 0x30], 0x21ba52b3
inc dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc0]
cmp dword [eax + ecx*4], ebx
jne 0x494a03
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x49492e
jmp 0x494a03
mov dword [ebp - 0x2c], 0x421d
cmp dword [ebp - 0x2c], 0x44f7
jle 0x4949b0
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x3c], edi
mov ecx, esi
sar edi, cl
mov eax, edi
and eax, ebx
cdq
push edx
push eax
mov ecx, 0xae0558
call fcn.00441f36
inc ebx
cmp ebx, 0x1d61
jl 0x494978
inc esi
cmp esi, 0x42f
push 0
pop ebx
mov edi, dword [ebp - 0x20]
jl 0x49496e
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x2d48
jl 0x49496c
xor edi, edi
inc edi
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x2c], 0x4055
jge 0x4949cb
mov edx, str.sbnlngtab_npvda_ipz_eotfkane_tnbkmix_jwdd_bltjihfn_itbnb_iigcfzqln_edl
mov ecx, 0xae0558
call fcn.004438dc
or dword [ebp - 4], 0xffffffff
jmp 0x4949f4
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc0]
mov dword [eax + edx*4], ecx
inc dword [ebp - 0x24]
jmp 0x494881
lea ecx, [ebp - 0x12c]
call fcn.0044211d
inc dword [ebp - 0x14]
jmp 0x49484a
lea ecx, [ebp - 0xc0]
call fcn.0044211d
mov eax, dword [0xae1840]
test al, 1
jne 0x494aad
or eax, edi
mov dword [0xae1840], eax
mov dword [0xae1870], ebx
mov dword [0xae1874], ebx
push ebx
push ebx
call fcn.00479d1b
mov dword [0xae1870], eax
mov dword [0xae1878], ebx
mov dword [0xae1880], ebx
mov dword [0xae188c], 0x3f800000
mov dword [ebp - 0xe0], eax
mov dword [0xae187c], ebx
lea eax, [ebp - 0xe0]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x1dc]
push eax
mov ecx, 0xae1878
call fcn.00479ac0
mov dword [0xae1884], 7
mov dword [0xae1888], 8
push 0x4afd6a
call fcn.00498fdd
pop ecx
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x1c], 0x6768
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x20], 0xc7c747ca
mov dword [ebp - 0x38], ebx
jmp 0x494adb
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x78], ebx
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 4
jl 0x494ad1
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
xor ecx, ecx
cmp eax, 0xbb6b
setl cl
mov eax, dword [ebp - 0x74]
xor edx, edx
cmp eax, ecx
setg dl
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x74]
xor ecx, ecx
cmp eax, 0x6a0b3493
setne cl
mov eax, dword [ebp - 0x78]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x6c]
xor ecx, ecx
cmp edx, eax
sete cl
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setl dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp dword [ebp - 0x3c], eax
setle cl
cmp ecx, edx
jge 0x494b42
cmp dword [ebp - 0x14], ebx
mov ecx, edi
jne 0x494b44
mov ecx, ebx
mov eax, dword [ebp - 0x74]
xor edx, edx
cmp ecx, eax
sete dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
cmp ecx, 0x93f6
setge dl
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0xc013
setl al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x14]
jne 0x494b9c
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x494d82
push ebx
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
jmp 0x494d82
mov dword [ebp - 0x3c], 0x83781cdf
mov dword [ebp - 0x20], 0x8f5349dd
mov dword [ebp - 0x20], 0xcd63ccf7
mov dword [ebp - 0x38], 7
cmp dword [ebp - 0x38], 0xb
jl 0x494d72
push 4
lea ecx, [ebp - 0x198]
call fcn.0044204b
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x1c], ebx
jmp 0x494bee
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x198]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x494bdb
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x494c05
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xfffffffb
jge 0x494d5f
mov dword [ebp - 0x34], 0x7077
cmp dword [ebp - 0x34], 0x73a1
jle 0x494c89
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, esi
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x20], 0x4010
mov esi, ebx
mov eax, esi
or eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x248]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x494c51
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x248]
call fcn.00442427
inc esi
cmp esi, 0x711d
mov ecx, dword [ebp - 0x28]
jl 0x494c35
dec ecx
mov dword [ebp - 0x28], ecx
dec dword [ebp - 0x20]
jne 0x494c33
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x5806
jl 0x494c27
mov dword [ebp - 0xdc], 0xf41adf89
mov dword [ebp - 0xd8], 0xf41adf89
mov dword [ebp - 0xd4], 0xf41adf89
mov dword [ebp - 0xd0], 0xf41adf89
mov dword [ebp - 4], 2
cmp dword [ebp - 0x34], 0x6cc1
jge 0x494ccc
push str.jyhkvyq_cuktaxdsn_pdhfcat_dtpcehsy_ujgxcjgqg
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x494cf5
mov dword [ebp - 0x20], 5
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp eax, ecx
setl dl
mov eax, dword [ebp - 0x14]
add eax, edx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setle dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x20], edi
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x1c]
jmp 0x494c08
lea ecx, [ebp - 0x198]
call fcn.0044211d
inc dword [ebp - 0x38]
jmp 0x494bb8
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x494d82
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
imul eax, dword [ebp - 0x44], 0x2710
add eax, dword [ebp - 0x7c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x2c], 0x1755
cmp dword [ebp - 0x2c], 0x17a8
jle 0x494deb
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x320]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x494dc0
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x320]
call fcn.00442427
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x3550
jl 0x494da6
inc esi
cmp esi, 0xb8e
jl 0x494da1
lea eax, [ebp - 0x80]
push eax
call fcn.00496812
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2c], 0x13cf
jge 0x494e14
push str.iqcvczuj_iuhqwis_ejismp_ulmadtkd_judszdwm_yluj_cimczgqy_xbbryx_djfpev_tfwb_iomc_jkcz_rrafagfg
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x494e3d
mov dword [ebp - 0x30], 0xfffffff6
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x494e5b
push 0x1d3d
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x494e75
push 0x9a6
push ebx
push 0x1324
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x494e87
mov dword [ebp - 0x114], eax
jmp 0x496784
mov dword [ebp - 0x30], 0xf572
push 4
lea ecx, [ebp - 0x174]
call fcn.0044204b
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], ebx
jmp 0x494eb2
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x494ea3
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x174]
mov dword [eax + 0xc], ecx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x494ed4
push ebx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
lea ecx, [ebp - 0x174]
call fcn.0044211d
mov eax, dword [0xae1840]
test al, 2
jne 0x494f64
or eax, 2
mov dword [0xae1840], eax
mov dword [0xae1850], ebx
mov dword [0xae1854], ebx
push ebx
push ebx
call fcn.00479d1b
mov dword [0xae1850], eax
mov dword [0xae1858], ebx
mov dword [0xae1860], ebx
mov dword [0xae186c], 0x3f800000
mov dword [ebp - 0xfc], eax
mov dword [0xae185c], ebx
lea eax, [ebp - 0xfc]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x1a8]
push eax
mov ecx, 0xae1858
call fcn.00479ac0
mov dword [0xae1864], 7
mov dword [0xae1868], 8
push 0x4afd65
call fcn.00498fdd
pop ecx
xorps xmm0, xmm0
movdqu xmmword [ebp - 0xb4], xmm0
mov dword [ebp - 0x38], 0x2eac4530
mov dword [ebp - 0x14], 0x576c5165
mov dword [ebp - 0x20], 0x8f928d9b
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x30], 0x1fc42ff1
push 4
lea ecx, [ebp - 0x168]
call fcn.0044204b
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0x82f4e55
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x14], ebx
jmp 0x494fc8
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x168]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x494fb8
mov dword [ebp - 0x14], ebx
jmp 0x494fe4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x94], 0x5f6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x494fd3
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x168]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, 0x9e8
setl cl
cmp ecx, dword [esi + 4]
jne 0x49500b
cmp dword [ebp - 0x38], ebx
mov edx, edi
jne 0x49500d
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setl cl
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x34]
imul eax, edx
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xf985
jg 0x495050
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x14]
sub eax, edx
neg eax
sbb eax, eax
inc eax
xor edx, edx
cmp eax, 0xc4d7
setle dl
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, edx
setle cl
cmp ecx, 0xc2391700
ja 0x4950a7
cmp dword [ebp - 0x1c], ebx
mov eax, edi
jne 0x4950a9
mov eax, ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], ebx
jmp 0x4950ed
mov dword [ebp - 0x24], ebx
jmp 0x4950e4
mov dword [ebp - 0x1c], ebx
jmp 0x4950dc
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x94], ebx
jne 0x4950e1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x4950cd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x4950c8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x4950c3
lea ecx, [ebp - 0x168]
call fcn.0044211d
lea eax, [ebp - 0x44]
push eax
call fcn.00496874
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
push 2
lea ecx, [ebp - 0x150]
call fcn.0044204b
mov dword [ebp - 0x14], ebx
jmp 0x495130
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 0x9b3198a8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x49511d
mov dword [ebp - 0x14], ebx
jmp 0x495149
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5c], 0x8094a188
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x49513b
mov dword [ebp - 0x58], ebx
jmp 0x495167
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 3
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 2
jl 0x495154
lea ecx, [ebp - 0x150]
call fcn.0044211d
mov al, byte [ebp + 0xc]
test al, al
jne 0x495189
cmp dword [ebp - 0x38], 0
jne 0x4954e1
lea ecx, [ebp - 0x348]
push ecx
mov dl, al
mov ecx, dword [ebp - 0x44]
call fcn.00483bad
pop ecx
mov esi, eax
lea edi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x30], 0xfffffff9
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x4951c3
push ebx
push 0x12d0
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x4951d8
push 0x1510
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
cmp byte [ebp + 0xc], 0
je 0x4954de
cmp dword [ebp - 0xac], 0
je 0x4954de
mov dword [ebp - 0x30], 0xffff
mov dword [ebp - 0x1c], 0xd29be1d9
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
je 0x495268
mov dword [ebp - 0x1c], ebx
jmp 0x495245
cmp byte [ebp - 0x15], 0
je 0x495242
push ebx
push 0xde7
push 0x2455
push 0x2465
push 0x1c3f
push 0x1541
push 0x231b
push 0xb6f
push 0x6f8
call dword [sym.imp.GDI32.dll_BitBlt]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe6
mov byte [ebp - 0x15], bl
jge 0x49520d
cmp byte [ebp - 0x15], 0
je 0x495281
push ebx
push ebx
push 0x25ce
push 0x20be
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x495281
mov dword [ebp - 0x1c], 0xf5872d9e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x110], eax
xor edi, edi
inc edi
mov dword [ebp - 0x14], edi
movdqa xmm0, xmmword [0xacfa30]
movdqu xmmword [ebp - 0x1f8], xmm0
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x1f8]
push eax
push ebx
lea ecx, [ebp - 0x54]
call fcn.00443dad
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x1c], 0xb5486b6f
mov dword [ebp - 0x14], 0xcd8c45cd
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov esi, 0x9e9d
mov eax, dword [ebp - 0x54]
mov dword [eax], esi
mov edx, dword [ebp - 0x14]
dec edx
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, esi
setle cl
sub edx, ecx
add edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x14]
jg 0x495338
cmp dword [ebp - 0x1c], ebx
je 0x495338
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x4954c8
push ebx
push 0x4bd
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
jmp 0x4954c8
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], 0x76f9
cmp dword [ebp - 0x24], 0x797d
jle 0x4953de
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov ecx, ebx
mov dword [ebp - 0x34], ecx
cdq
idiv esi
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x1c], 0x6507
mov esi, dword [ebp - 0x2c]
mov eax, esi
and eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x290]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x49538d
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x290]
call fcn.00442427
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ecx
dec dword [ebp - 0x1c]
jne 0x495371
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x7cfa
mov eax, dword [ebp - 0x20]
jl 0x49535c
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x4f12
jl 0x495357
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x5677
jl 0x495352
mov dword [ebp - 0x2c], 0x61b8ce22
mov dword [ebp - 4], 6
cmp dword [ebp - 0x24], 0x7348
jge 0x495400
push str.pybwxd_xfruxyf_rpmhqxz_hkmnuvi_dkza_egpbizib_yfwjjr_qalwxbki_uetlk_prjn_cwbhkoj
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x495429
mov dword [ebp - 0x1c], ebx
jmp 0x4954b5
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x24], ebx
jmp 0x4954ac
mov dword [ebp - 0x14], ebx
jmp 0x495454
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x495451
call dword [sym.imp.KERNEL32.dll_GetACP]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x495442
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x54]
cmp dword [eax + ecx*4], ebx
je 0x495483
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
neg eax
push 0
pop eax
setne al
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x54]
cmp dword [eax + ecx*4], ebx
je 0x495491
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x54]
mov dword [eax + edx*4], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x49543d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x495431
mov ecx, dword [ebp - 0x28]
dec ecx
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
lea ecx, [ebp - 0x54]
call fcn.0044211d
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x10c], eax
jmp 0x4954e1
xor edi, edi
inc edi
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], 0x5edade09
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x24], 0x6e8
cmp dword [ebp - 0x24], 0x88e
jle 0x495578
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x34], 0x5035
mov eax, ebx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x2c], 0x2aff
mov esi, eax
mov edi, 0x67f
mov eax, esi
cdq
push edx
push eax
mov ecx, 0xae0558
call fcn.00441f36
inc esi
dec edi
jne 0x495529
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
add eax, ecx
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x2c]
jne 0x495522
mov esi, dword [ebp - 0x14]
add ecx, esi
mov dword [ebp - 0x28], ecx
dec dword [ebp - 0x34]
jne 0x495516
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x6d0c
jl 0x49550c
push ebx
push ebx
push 0x2636
push 0x18f2
call dword [sym.imp.USER32.dll_SendMessageW]
inc edi
mov dword [ebp - 4], 8
cmp dword [ebp - 0x24], 0x4cb
jge 0x495597
mov edx, str.stk_xwgvh_jllhw
mov ecx, 0xae0558
call fcn.004438dc
or dword [ebp - 4], 0xffffffff
jmp 0x4955c0
mov dword [ebp - 0x14], ebx
jmp 0x4955d6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x184], 0xd102
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4955c5
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x4955ef
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
cmp dword [ebp - 0x1c], ebx
je 0x495606
mov ecx, edi
xor eax, eax
test ecx, ecx
sets al
cmp eax, 0xf6f4
mov eax, edi
jg 0x495608
mov eax, ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x38], 0
jne 0x496291
cmp dword [ebp - 0xb4], 0
jle 0x496291
mov dword [ebp - 0x1c], 0xaf43b7c7
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x30], 0x6ef3b063
mov dword [ebp - 0x14], 0x5159
cmp dword [ebp - 0x14], 0x5253
jle 0x4956e2
push ebx
push 0x1a8d
push 0xbe5
push 0x2270
call dword [sym.imp.USER32.dll_SetScrollPos]
mov edx, ebx
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x20], ebx
mov esi, ecx
mov ecx, eax
shl esi, cl
and esi, edx
mov eax, esi
xor eax, dword [ebp - 0x20]
cdq
push edx
push eax
lea ecx, [ebp - 0x2f0]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x495694
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2f0]
call fcn.00442427
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x72f3
jl 0x495677
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x6d0d
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
jl 0x49566c
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x3db6
jl 0x495667
inc edx
mov dword [ebp - 0x28], edx
cmp edx, 0x67e1
jl 0x495662
mov dword [ebp - 0x20], 0x3550e352
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x14], 0x4ff1
jge 0x495704
push str.nzd_bjajbiie_sbq_vuvs_oqllfm
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x49572d
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x30], 0x10079d62
mov dword [ebp - 0x14], ebx
jmp 0x495751
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x218], 0xeede
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x495740
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x495861
mov dword [ebp - 0x2c], 0x2db6
cmp dword [ebp - 0x2c], 0x3119
jle 0x4957cf
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x2c0]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4957a4
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2c0]
call fcn.00442427
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0xd8
jl 0x49578a
inc esi
cmp esi, 0x2752
jl 0x495785
mov dword [ebp - 0x30], 6
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x2c], 0x2ca4
jge 0x4957f1
push str.wmefl_geoxvx_bjyyudes_cres_audolbwzl_uwpbihvyg_qwmltrgz_sxwbtlfu_nyfnju_uof_epxxboc
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x49581a
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x20], 0xf620a34
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x20]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x2c]
add eax, ecx
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
add eax, 6
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x1c]
jmp 0x495764
mov dword [ebp - 0x34], 0x39
cmp dword [ebp - 0x34], 0x1cc
jle 0x4958ea
mov dword [ebp - 0x20], ebx
mov edx, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, esi
shl eax, cl
and eax, edx
and eax, dword [ebp - 0x20]
cdq
push edx
push eax
lea ecx, [ebp - 0x230]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4958a1
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x230]
call fcn.00442427
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x36a8
mov edx, dword [ebp - 0x28]
jl 0x495880
inc esi
cmp esi, 0x5722
jl 0x49587b
inc edx
mov dword [ebp - 0x28], edx
cmp edx, 0xe78
jl 0x495879
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x7f7a
jl 0x495874
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x34], 0xfffffdca
jge 0x495905
push str.pfodr_opnr_wyyytdt_brtwsr_lnsmojhm
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x49592e
push 3
lea ecx, [ebp - 0xf8]
call fcn.0044204b
mov dword [ebp - 0x28], 0x2e8b
cmp dword [ebp - 0x28], 0x2fff
jle 0x4959d6
push ebx
push 0x3bb
push 0x1d76
push 0x913
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
mov eax, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov edx, eax
mov ecx, esi
shl edx, cl
mov dword [ebp - 0x34], edx
mov esi, ebx
mov eax, esi
and eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0x278]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x495999
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x278]
call fcn.00442427
inc esi
cmp esi, 0x4fbf
mov edx, dword [ebp - 0x34]
jl 0x49597d
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x7c3d
mov eax, dword [ebp - 0x20]
jl 0x49596f
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x4607
jl 0x49596a
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x28], 0x2c02
jge 0x4959f1
push str.vphrxp_vocwous_pbyxc_pmunmb_cytnzb
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x495a1a
movdqa xmm0, xmmword [0xacfa40]
movdqu xmmword [ebp - 0x208], xmm0
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x208]
push eax
push ebx
lea ecx, [ebp - 0xec]
call fcn.00443dad
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ebx
jmp 0x495a74
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x495a61
mov dword [ebp - 0x14], ebx
jmp 0x495a90
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x90], 0x1e1e87df
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x495a7f
mov dword [ebp - 0x90], ebx
cmp dword [ebp - 0x90], 2
jg 0x495bc1
mov dword [ebp - 0x14], 0x801fc3ee
mov dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], ebx
jl 0x495b40
mov edi, dword [ebp - 0xec]
mov dword [ebp - 0x30], 0xffffffff
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x90]
xor edx, edx
mov eax, dword [ebp - 0xf8]
cmp dword [eax + ecx*4], 0xa1b6a89f
setg dl
mov eax, dword [ebp - 0x90]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x20], ecx
mov dword [edi + 8], ecx
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0xf8]
mov esi, dword [ecx + eax*4]
add esi, 0x6ec1
mov eax, dword [ebp - 0x30]
imul eax, dword [ecx + edx*4]
sub esi, eax
neg esi
sbb esi, esi
inc esi
sub esi, dword [ebp - 0x20]
neg esi
sbb esi, esi
inc esi
imul eax, esi, 0x63ec
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x14]
jns 0x495ac6
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0xf8]
cmp dword [eax + ecx*4], ebx
jne 0x495bbe
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x495bab
mov dword [ebp - 0x30], 0xb8846b51
mov dword [ebp - 0x14], ebx
jmp 0x495b9a
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x495b86
push 0x1971
push ebx
push ebx
push ebx
push ebx
push 0xf47
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x495b97
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x495b69
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x1c]
jns 0x495b5d
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 2
jle 0x495aa9
xor edi, edi
inc edi
lea ecx, [ebp - 0xec]
call fcn.0044211d
lea ecx, [ebp - 0xf8]
call fcn.0044211d
mov dword [ebp - 0x14], ebx
jmp 0x495be6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x68], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x495bdc
mov dword [ebp - 0x14], ebx
jmp 0x495bff
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x40], 0x93e75cb5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x495bf1
mov dword [ebp - 0x64], 0xffffffe3
cmp dword [ebp - 0x64], 0xfffffffd
jg 0x495df1
push 2
lea ecx, [ebp - 0x120]
call fcn.0044204b
mov dword [ebp - 0x28], 0x7e2b
cmp dword [ebp - 0x28], 0x8064
jle 0x495ca2
mov eax, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
cdq
idiv esi
mov ecx, edx
mov dword [ebp - 0x34], ecx
mov esi, ebx
mov eax, esi
and eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x2a8]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x495c65
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2a8]
call fcn.00442427
inc esi
cmp esi, 0x3ca
mov ecx, dword [ebp - 0x34]
jl 0x495c49
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x3358
mov eax, dword [ebp - 0x20]
jl 0x495c3c
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x2855
jl 0x495c37
mov dword [ebp - 0x1c], ebx
jmp 0x495cba
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x495ca7
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x28], 0x7b2e
jge 0x495cdb
push str.tzg_gdzdmku_rrboeloqd_qeodeajng_xgtflxvz_oke_xoahouauq_xcghyzjbq_ukytjz_rnacelf_bhtkqjduv_vmknhz_ptmrw_zqjccq
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x495d04
mov eax, dword [ebp - 0x120]
mov dword [eax], ebx
cmp dword [eax], 0x12
jne 0x495dde
mov byte [ebp - 0x15], bl
mov dword [ebp - 0x2c], 0x667a
cmp dword [ebp - 0x2c], 0x6946
jle 0x495d7e
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
add eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x2d8]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x495d49
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2d8]
call fcn.00442427
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x2e25
jl 0x495d2f
inc esi
cmp esi, 0x3aaa
jl 0x495d2a
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
cmp byte [ebp - 0x15], 0
je 0x495d8d
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x2c], 0x63cf
jge 0x495da8
push str.hajsrxqd_kllye_xkysh_bams_mtjl_bbeij_goodkvhio
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x495dd1
mov eax, dword [ebp - 0x120]
inc dword [eax]
jmp 0x495d0c
lea ecx, [ebp - 0x120]
call fcn.0044211d
inc dword [ebp - 0x64]
jmp 0x495c0b
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x64], eax
cmp eax, dword [ebp - 0x40]
jg 0x495e06
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x40], ebx
mov ecx, edi
jne 0x495e08
mov ecx, ebx
mov eax, dword [ebp - 0x40]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x40]
je 0x495e1a
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xa275
jg 0x495e2c
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp eax, 0xf067
setne cl
cmp ecx, 0xfafe44fa
ja 0x495e66
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x495e54
push ebx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x495ea5
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
jmp 0x495ea5
mov dword [ebp - 0x1c], ebx
jmp 0x495e79
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x48], 0x5c6a81d6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x495e6b
cmp dword [ebp - 0x40], 0xed13222c
je 0x495e95
cmp dword [ebp - 0x48], ebx
jne 0x495e8f
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
xor edx, edx
cmp ecx, eax
setge dl
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x30], 0xf572
push 4
lea ecx, [ebp - 0x138]
call fcn.0044204b
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], ebx
jmp 0x495ed0
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x495ec1
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x138]
mov dword [eax + 0xc], ecx
mov dword [ebp - 0x20], 0x39c9
cmp dword [ebp - 0x20], 0x3a7a
jle 0x495f40
push ebx
push ebx
push 0x1787
push 0x1110
push ebx
call dword [sym.imp.USER32.dll_ModifyMenuW]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov eax, ebx
and eax, esi
or eax, edi
cdq
push edx
push eax
mov ecx, 0xae0558
call fcn.00441f36
inc ebx
cmp ebx, 0x9c5
jl 0x495f0c
inc esi
cmp esi, 0x6382
push 0
pop ebx
jl 0x495f09
inc edi
cmp edi, 0x84
jl 0x495f07
xor edi, edi
inc edi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x495f50
push ebx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x20], 0x368f
jge 0x495f6f
mov edx, str.eol_gff_phixylql_ccxrngalj_aislaeqgt_hfwruwyo_ijqgku_xhczp_thv_pgbiibbe_lgq_advi_glyzs
mov ecx, 0xae0558
call fcn.004438dc
or dword [ebp - 4], 0xffffffff
jmp 0x495f98
lea ecx, [ebp - 0x138]
call fcn.0044211d
cmp dword [ebp - 0xb0], 0
je 0x496291
cmp dword [ebp - 0xb4], 0
je 0x496291
mov dword [ebp - 0x28], 0x37a4
cmp dword [ebp - 0x28], 0x38b9
jle 0x49601c
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0x308]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x495ff0
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x308]
call fcn.00442427
mov ecx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x5fd
jl 0x495fd4
inc esi
cmp esi, 0x57cb
jl 0x495fcf
mov dword [ebp - 0x2c], 0x7013
mov dword [ebp - 0x20], 0x5ba7723
push 4
lea ecx, [ebp - 0x144]
call fcn.0044204b
mov dword [ebp - 0x1c], ebx
jmp 0x49604f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], 0x4d073ff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x49603c
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x49607d
push 0x2466
push 0x153f
push 0x18b7
push 0x744
push 0x1bf8
call dword [sym.imp.GDI32.dll_Ellipse]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x144]
mov dword [eax], edx
lea ecx, [ebp - 0x144]
call fcn.0044211d
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x28], 0x357d
jge 0x4960be
push str.ogma_pdt_duu_bmv_dxx_jkyp_ntweqq_fhvbppe_rbbm_lyt_kkvouqon_gtembjk
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x4960e7
mov ecx, dword [ebp - 0xb0]
call fcn.00494673
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x20], 0x3a16
cmp dword [ebp - 0x20], 0x3c04
jle 0x496149
mov esi, ebx
mov edi, ebx
mov eax, edi
xor eax, esi
cdq
push edx
push eax
mov ecx, 0xae0558
call fcn.00441f36
inc edi
cmp edi, 0x15b2
jl 0x496110
inc esi
cmp esi, 0x474f
jl 0x49610e
push ebx
push ebx
push 0x149e
push 0x1a8c
push ebx
call dword [sym.imp.USER32.dll_InsertMenuA]
xor edi, edi
inc edi
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x20], 0x3896
jge 0x496168
mov edx, str.axulfcccz_ghge_hvnxyv_nngsat_nyrfwhhm_fzdhnbk
mov ecx, 0xae0558
call fcn.004438dc
or dword [ebp - 4], 0xffffffff
jmp 0x496191
mov dword [ebp - 0x14], ebx
jmp 0x4961a7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa4], 6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x496196
mov dword [ebp - 0x14], ebx
jmp 0x4961c3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x18c], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4961b2
mov dword [ebp - 0x24], ebx
jmp 0x4961de
push 2
lea ecx, [ebp - 0x1c0]
call fcn.0044204b
mov dword [ebp - 0x14], 0x3169
cmp dword [ebp - 0x14], 0x322d
jle 0x49632a
mov eax, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x1c], ebx
add eax, esi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x34], 0x3512
mov esi, eax
mov dword [ebp - 0x2c], 0x68a6
mov eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x338]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4962e7
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x338]
call fcn.00442427
inc esi
dec dword [ebp - 0x2c]
jne 0x4962cd
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x34]
jne 0x4962c4
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x85b
mov eax, dword [ebp - 0x20]
jl 0x4962b8
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x6de7
jl 0x4962b3
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x14], 0x3056
jge 0x496345
push str.yydp_zzgl_mbf_hojx_zbq_aindc_vqd_ertflafwp_ruijpqgkd_ovtzou_izepv_sqqowrw
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x49636e
mov dword [ebp - 0x1c], ebx
jmp 0x496386
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c0]
mov dword [eax + ecx*4], 0xdb58e469
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x496373
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x49639d
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x496488
mov dword [ebp - 0x14], 0x48e9
cmp dword [ebp - 0x14], 0x4ba2
jle 0x496438
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov eax, esi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x34], 0xcd5
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x2c], 0x6b72
and eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x260]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4963f3
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x260]
call fcn.00442427
mov ecx, dword [ebp - 0x20]
add ecx, esi
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
jne 0x4963d9
inc esi
cmp esi, 0x5017
jl 0x4963cd
dec eax
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x34]
jne 0x4963cb
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x70e9
jl 0x4963bf
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x14], 0x4740
jge 0x49645f
push str.ahramsq_ojokt_npsqw_yxqgo_ziwyxvdk
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x496488
lea ecx, [ebp - 0x1c0]
call fcn.0044211d
lea ecx, [ebp - 0xb4]
call fcn.0048d7fb
push 2
lea ecx, [ebp - 0xcc]
call fcn.0044204b
mov dword [ebp - 0x1c], 0x1651328f
push 3
lea ecx, [ebp - 0x1d8]
call fcn.0044204b
mov dword [ebp - 0x14], ebx
jmp 0x4964d7
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], 0x5c68ec0a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4964c4
mov dword [ebp - 0x14], ebx
jmp 0x4964f5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1d8]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4964e2
mov eax, dword [ebp - 0xcc]
mov dword [eax], 0xffffffe2
mov dword [ebp - 0x1c], ebx
jmp 0x496572
mov dword [ebp - 0x14], 0x6ce4a6f4
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x14], ebx
je 0x496534
cmp dword [ebp - 0x1c], ebx
je 0x496534
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xcc]
mov dword [eax], edi
mov dword [ebp - 0x14], ebx
jmp 0x496569
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x14], ebx
je 0x49655b
cmp dword [ebp - 0x30], ebx
jne 0x49656f
jmp 0x496566
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 7
jle 0x496541
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffea
jle 0x49650c
lea ecx, [ebp - 0x1d8]
call fcn.0044211d
lea ecx, [ebp - 0xcc]
call fcn.0044211d
cmp dword [ebp - 0x3c], 0
jne 0x4966f1
cmp dword [ebp - 0x38], 0
je 0x4966f1
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x30], 0xfda7ef5d
push 2
lea ecx, [ebp - 0x1e8]
call fcn.0044204b
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x1c], ebx
jmp 0x4965e6
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1e8]
mov dword [eax + ecx*4], 0x9ac54c97
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x4965d3
mov dword [ebp - 0x24], ebx
jmp 0x4966bc
mov dword [ebp - 0x30], 0xcd509978
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0x365653d4
mov dword [ebp - 0x30], 0x55cc25b
mov dword [ebp - 0x30], 0x3e713e19
push 3
lea ecx, [ebp - 0x1a4]
call fcn.0044204b
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x49663d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x108], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x496630
mov dword [ebp - 0x14], ebx
jmp 0x496658
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1a4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x496648
mov dword [ebp - 0x100], ebx
jmp 0x4966a6
mov dword [ebp - 0x30], edi
push edi
lea ecx, [ebp - 0x1cc]
call fcn.0044204b
mov dword [ebp - 0x1c], ebx
jmp 0x49668d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1cc]
mov dword [eax + ecx*4], 0xe6aa1654
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x49667a
inc dword [ebp - 0x3c]
lea ecx, [ebp - 0x1cc]
call fcn.0044211d
inc dword [ebp - 0x100]
cmp dword [ebp - 0x100], edi
jl 0x496666
lea ecx, [ebp - 0x1a4]
call fcn.0044211d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xa
jg 0x4965f4
lea ecx, [ebp - 0x1e8]
call fcn.0044211d
push dword [ebp - 0x7c]
push dword [ebp - 0x38]
call fcn.004410f9
pop ecx
pop ecx
mov esi, eax
mov dword [ebp - 0x114], esi
lea eax, [ebp - 0x80]
push eax
call fcn.00496812
mov dword [eax], esi
mov dword [ebp - 0x14], 0xac64a684
mov dword [ebp - 0x20], 0x9e53e58b
mov dword [ebp - 0x14], 7
jmp 0x496759
push 2
lea ecx, [ebp - 0x1b4]
call fcn.0044204b
mov dword [ebp - 0x28], 0x50e6da50
mov dword [ebp - 0x1c], ebx
jmp 0x496731
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1b4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x496721
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x28], ebx
jl 0x49674b
mov dword [ebp - 0x20], 6
dec dword [ebp - 0x28]
jns 0x49673f
lea ecx, [ebp - 0x1b4]
call fcn.0044211d
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 5
je 0x496708
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
je 0x496775
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jne 0x496777
mov edi, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edi, eax
setle cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp + 8]
mov edi, eax
lea esi, [ebp - 0x114]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret