Function at 0x483bad
Capabilities:
Authenticate hmac
Check for time delay via gettickcount
Check os version
Create pipe
Encode data using xor
Encrypt data using speck
Extract resource via kernel32 functions
Get common file path
Get geographical location
Get graphical window text
Get memory capacity
Modify service
Query service status
Read .ini file

Disassembly:
mov eax, 0x4afa09
call fcn.004ae7a8
sub esp, 0xddc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x50], dl
mov dword [ebp - 0x98], ecx
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], eax
xor edi, edi
inc edi
cmp dword [ebp - 0x14], edi
jge 0x483bf4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x200], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x483bdc
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x483c12
xor ebx, ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x200], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x483bfe
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x483c23
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x483c46
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x168], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x483c2e
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x483c64
xor ebx, ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x168], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x483c50
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x483c75
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor eax, eax
mov dword [ebp - 0x24], 0x5540d7f8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x483c9e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x31c], 0x902314af
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x483c85
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x483cb4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x18c], 0x2c593c86
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x483ca3
mov dword [ebp - 0x24], 0xffffffef
jmp 0x483da7
mov dword [ebp - 0x20], 0x160cbeb9
mov eax, dword [ebp - 0x24]
xor ecx, ecx
test eax, eax
sets cl
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
neg ecx
je 0x483cfc
mov byte [ebp - 0x31], 0
cmp byte [ebp - 0x31], 0
je 0x483da4
call dword [sym.imp.USER32.dll_GetMessageTime]
jmp 0x483da4
mov dword [ebp - 0x14], 0x96da
mov dword [ebp - 0x2c], 0xfffffffa
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x20]
add eax, 0x222a2a83
je 0x483d28
cmp dword [ebp - 0x188], 0
je 0x483d28
mov ecx, edi
jmp 0x483d2a
xor ecx, ecx
mov eax, dword [ebp - 0x20]
imul eax, ecx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setne dl
cmp edx, 0xffffffff
jae 0x483d48
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x483d59
cmp dword [ebp - 0x314], eax
mov ecx, edi
jne 0x483d5b
mov ecx, eax
mov esi, dword [ebp - 0x14]
add esi, 0xffff3104
add esi, ecx
neg esi
sbb esi, esi
inc esi
sub esi, dword [ebp - 0x20]
neg esi
sbb esi, esi
inc esi
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp eax, ecx
setge dl
cmp edx, esi
jne 0x483d87
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 9
setle cl
sub ecx, dword [ebp - 0x314]
mov dword [ebp - 0x314], ecx
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe8
jge 0x483cc6
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x483dd5
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x18c], 0xc987f9bd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x483dbc
xor eax, eax
mov dword [ebp - 0x24], 0x689351f2
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x18], eax
movdqa xmm0, xmmword [0xacfa00]
movdqu xmmword [ebp - 0x978], xmm0
lea ecx, [ebp - 0x978]
lea eax, [ebp - 0x968]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x334]
call fcn.004420f7
mov dword [ebp - 0x44], 0xfffffff9
mov dword [ebp - 0x28], 0xc6f44469
mov dword [ebp - 0x30], 0x6c3e
cmp dword [ebp - 0x30], 0x6f00
jle 0x483e75
xor esi, esi
xor edi, edi
xor ebx, ebx
mov eax, edi
xor eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0xa60]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xa60]
call fcn.00442427
inc edi
cmp edi, 0xa09
jl 0x483e30
inc esi
cmp esi, 0x7f20
jl 0x483e2c
xor edi, edi
inc edi
and dword [ebp - 4], 0
cmp dword [ebp - 0x30], 0x68b2
jge 0x483e8d
push str.mcwqpvr_cdxcvm_ocoxh_syc_ruaxgc_cacyjfcy_flbszidft_majcqry_vrno_viual_rsqwejw_wjp_liccnc_pblcl
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x483eb8
cmp dword [ebp - 0x24], eax
je 0x483ec5
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x483f9b
cmp dword [ebp - 0x48], eax
je 0x483f9b
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], eax
jl 0x483f77
mov dword [ebp - 0x24], eax
jmp 0x483f65
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x48], eax
jmp 0x483f5c
mov dword [ebp - 0x14], 0xbdac842f
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x483f59
mov dword [ebp - 0x3c], 6
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x48]
mov esi, dword [ebp - 0x334]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x334]
mov eax, dword [eax + ecx*4]
mov dword [esi + edi*4], eax
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp dword [esi + edi*4], eax
setl dl
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp edx, eax
setne cl
neg ecx
mov dword [ebp - 0x3c], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x483f0f
xor eax, eax
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 3
jle 0x483eff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x483ef3
dec dword [ebp - 0x18]
jns 0x483eee
xor edi, edi
inc edi
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x48407e
push eax
push eax
push 0x2d4
push 0x6cb
call dword [sym.imp.USER32.dll_SetScrollInfo]
jmp 0x48407e
push edi
lea ecx, [ebp - 0x484]
call fcn.0044204b
mov dword [ebp - 0x18], 0
jmp 0x483fc1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5e0], 0xf5c9b8db
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x483fb0
mov dword [ebp - 0x18], 0
jmp 0x483fe3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x484]
mov dword [eax + ecx*4], 0x19195c58
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x483fd0
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x18], 0x18
jne 0x484073
mov ebx, 0xffff
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x5e0]
add eax, dword [ebp - 0x24]
je 0x484021
cmp dword [ebp - 0x44], 0
je 0x484021
mov ecx, edi
jmp 0x484023
xor ecx, ecx
mov eax, dword [ebp - 0x5e0]
xor edx, edx
cmp eax, ecx
setge dl
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, edx
setne cl
sub ecx, dword [ebp - 0x5e0]
cmp ebx, ecx
sbb ecx, ecx
add ecx, 0x5d08
mov eax, dword [ebp - 0x484]
mov dword [eax], ecx
mov dword [ebp - 0x44], 0xffffffec
jmp 0x484064
cmp dword [ebp - 0x24], 0
jne 0x48406a
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffee
jg 0x48405b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x18
je 0x484009
lea ecx, [ebp - 0x484]
call fcn.0044211d
lea ecx, [ebp - 0x334]
call fcn.0044211d
mov dword [ebp - 0x40], 0x177e
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x40], 3
mov dword [ebp - 0x30], 0x96c7979b
mov dword [ebp - 0x14], 0
jmp 0x4840c6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd18], 0xebaeef20
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4840b5
inc dword [ebp - 0x30]
mov dword [ebp - 0x14], 0
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x898], xmm0
lea ecx, [ebp - 0x898]
lea eax, [ebp - 0x888]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x73c]
call fcn.004420f7
movdqa xmm0, xmmword [0xacfa50]
movdqu xmmword [ebp - 0x918], xmm0
lea ecx, [ebp - 0x918]
lea eax, [ebp - 0x908]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x620]
call fcn.004420f7
mov dword [ebp - 0x2c], 0x3880e033
push 2
lea ecx, [ebp - 0x550]
call fcn.0044204b
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], 0xe5685e9d
mov dword [ebp - 0x14], 0
jmp 0x48415f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x550]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x48414c
mov esi, dword [ebp - 0x620]
xor ecx, ecx
cmp dword [esi + 4], edi
setne cl
mov eax, dword [ebp - 0x550]
mov dword [eax + 4], ecx
xor ecx, ecx
cmp dword [esi + 0xc], 0xe57b6a69
setne cl
xor edx, edx
mov eax, dword [ebp - 0x73c]
cmp ecx, dword [eax]
setl dl
mov dword [esi + 4], edx
mov eax, dword [ebp - 0x2c]
sub eax, edx
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x2c]
mov dword [ebp - 0x28], 9
lea ecx, [ebp - 0x550]
call fcn.0044211d
lea ecx, [ebp - 0x620]
call fcn.0044211d
lea ecx, [ebp - 0x73c]
call fcn.0044211d
mov dword [ebp - 0x40], 0xc96dd1e1
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x40], 0x56a9ef72
mov dword [ebp - 0x40], 0x1fc3eee
mov dword [ebp - 0x40], 0xef7d6512
push 2
lea ecx, [ebp - 0x638]
call fcn.0044204b
mov dword [ebp - 0x20], 0x8ed4a55f
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 2
jge 0x484226
xor ebx, ebx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x638]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x484211
mov dword [ebp - 0x44], 0x6235
cmp dword [ebp - 0x44], 0x6402
jle 0x4842c5
xor eax, eax
mov dword [ebp - 0x14], eax
xor esi, esi
mov dword [ebp - 0x3c], esi
mov eax, esi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0x670f
mov esi, dword [ebp - 0x14]
xor edi, edi
xor ebx, ebx
mov ecx, edi
shl eax, cl
or eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0xc34]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xc34]
call fcn.00442427
inc edi
cmp edi, 0x4867
mov eax, dword [ebp - 0x2c]
jl 0x484257
dec eax
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x30]
jne 0x484253
mov esi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x32db
jl 0x484244
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x3191
jl 0x48423f
push ebx
call dword [sym.imp.GDI32.dll_GetObjectType]
xor edi, edi
inc edi
dec dword [ebp - 0x20]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x44], 0x60a5
jge 0x4842e3
push str.sbtfr_pzdslslwj_hxpkdydz_tuqys_euidry_pttaqz_fzt_kits_mjbi_yrx_yfexwpfuo
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x48430a
lea ecx, [ebp - 0x638]
call fcn.0044211d
mov dword [ebp - 0x14], 0
jmp 0x48432f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x208], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x48431e
mov dword [ebp - 0x14], 0x110c93b4
mov dword [ebp - 0x14], 0x5013
cmp dword [ebp - 0x14], 0x53e5
jle 0x4843be
xor esi, esi
mov dword [ebp - 0x2c], esi
xor edi, edi
mov dword [ebp - 0x3c], 0x3af8
xor esi, esi
mov dword [ebp - 0x30], 0x20f6
xor ebx, ebx
mov eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0xa90]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xa90]
call fcn.00442427
add esi, edi
dec dword [ebp - 0x30]
jne 0x484364
mov esi, dword [ebp - 0x2c]
add edi, esi
dec dword [ebp - 0x3c]
jne 0x484359
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x6857
jl 0x484350
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor edi, edi
inc edi
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 4], 4
cmp dword [ebp - 0x14], 0x4e11
jge 0x4843e0
push str.rnnyf_isn_vgnju_rmlpwcnqw_sjldqknc_izfcqegx_hexuak_vbgxn
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x48440b
mov dword [ebp - 0x2c], 0x34b0
cmp dword [ebp - 0x2c], 0x375d
jle 0x48446f
push eax
push eax
push 0x149e
push 0x1a8c
push eax
call dword [sym.imp.USER32.dll_InsertMenuA]
xor esi, esi
mov dword [ebp - 0x3c], esi
xor edi, edi
mov dword [ebp - 0x30], 0x431a
mov ebx, edi
mov esi, 0x4dad
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xae0558
call fcn.00441f36
inc ebx
dec esi
jne 0x484443
mov esi, dword [ebp - 0x3c]
add edi, esi
dec dword [ebp - 0x30]
jne 0x48443c
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x2b39
jl 0x484433
xor edi, edi
inc edi
push 4
lea ecx, [ebp - 0x34c]
call fcn.0044204b
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2c], 0x33f8
jge 0x48449b
mov edx, str.ccvkz_iqsaso_abre_feuhb_atfgdwey_wcozsxqmq_ddyrnzyj_oemlcscno
mov ecx, 0xae0558
call fcn.004438dc
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4844c6
mov dword [ebp - 0x14], eax
jmp 0x4844de
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34c]
mov dword [eax + ecx*4], 0xa3c0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4844cb
mov dword [ebp - 0x14], 0xfffffff3
jmp 0x484502
mov dword [ebp - 0x28], 0xbb4e
mov eax, dword [ebp - 0x28]
sub eax, 0x103f81e9
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jle 0x4844ed
mov dword [ebp - 0x20], 0xfffffff0
cmp dword [ebp - 0x20], 0xfffffff1
jle 0x48452a
mov ecx, dword [ebp - 0x34c]
mov eax, dword [ebp - 0x20]
mov dword [ecx + 8], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff1
jg 0x48451b
lea ecx, [ebp - 0x34c]
call fcn.0044211d
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], edi
jge 0x484873
push 2
lea ecx, [ebp - 0xb8]
call fcn.0044204b
mov dword [ebp - 0x20], 0x1651328f
push 3
lea ecx, [ebp - 0x7c4]
call fcn.0044204b
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x48458c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0x5c68ec0a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x484571
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x4845b0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x7c4]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x484595
xor eax, eax
mov ecx, dword [ebp - 0xb8]
mov dword [ecx], 0xffffffe2
cmp dword [ecx], 0xfffffff4
jl 0x4847cc
mov dword [ebp - 0x44], 0x386cce57
mov dword [ebp - 0x44], 5
cmp dword [ebp - 0x44], 0xffffffe7
jge 0x4847ad
mov dword [ebp - 0x38], 0x43b9
cmp dword [ebp - 0x38], 0x43f4
jle 0x484675
mov ecx, eax
mov dword [ebp - 0x3c], ecx
jmp 0x4845fa
xor eax, eax
mov edx, ecx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x30], 0x76de
jmp 0x48460a
xor eax, eax
mov esi, eax
jmp 0x484610
xor eax, eax
mov edi, eax
xor ebx, ebx
mov eax, esi
mov ecx, edi
shl eax, cl
xor eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0x9e8]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x9e8]
call fcn.00442427
inc edi
cmp edi, 0x703c
mov edx, dword [ebp - 0x20]
jl 0x484614
inc esi
cmp esi, 0x7ba
jl 0x48460e
dec edx
mov dword [ebp - 0x20], edx
dec dword [ebp - 0x30]
jne 0x484608
mov ecx, dword [ebp - 0x3c]
inc ecx
mov dword [ebp - 0x3c], ecx
cmp ecx, 0x638f
jl 0x4845f8
mov dword [ebp - 0x3c], 0x52fc
cmp dword [ebp - 0x3c], 0x5536
jle 0x484704
and dword [ebp - 0x2c], 0
xor edi, edi
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x30], ecx
mov eax, edi
cdq
idiv esi
mov eax, edx
mov dword [ebp - 0x28], eax
xor ebx, ebx
cdq
idiv ecx
add edx, dword [ebp - 0x2c]
mov eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xac0]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xac0]
call fcn.00442427
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x6c1b
mov eax, dword [ebp - 0x28]
jl 0x48469e
inc esi
cmp esi, 0x8ce
jl 0x48468d
inc edi
cmp edi, 0x27c6
jl 0x48468b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x3272
jl 0x484689
mov byte [ebp - 0x31], 0
mov dword [ebp - 4], 8
cmp dword [ebp - 0x3c], 0x5117
jge 0x484723
push str.rwvhsgr_egmsplp_vogvyftsq
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
xor edi, edi
inc edi
cmp byte [ebp - 0x31], al
je 0x484747
push eax
push 0x1fe4
push 0x1aea
push 0x6b8
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x38], 0x427f
jge 0x484762
push str.cqczcrag_veq_nncimhmi_hfq_qytkewseb_taomqnyrr
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x4847a3
dec dword [ebp - 0x44]
xor eax, eax
jmp 0x4845d3
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x4847bf
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
xor eax, eax
mov ecx, dword [ebp - 0xb8]
inc dword [ecx]
jmp 0x4845bc
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffea
jg 0x484849
jmp 0x4847d9
xor eax, eax
mov dword [ebp - 0x18], 0x6ce4a6f4
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x18], eax
je 0x484801
cmp dword [ebp - 0x20], eax
je 0x484801
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb8]
mov dword [eax], edi
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x48483a
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x44], 2
cmp dword [ebp - 0x18], eax
je 0x48482a
cmp dword [ebp - 0x28], eax
jne 0x484840
jmp 0x484837
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 7
jle 0x484810
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffea
jle 0x4847d7
lea ecx, [ebp - 0x7c4]
call fcn.0044211d
lea ecx, [ebp - 0xb8]
call fcn.0044211d
mov eax, dword [ebp - 0x14]
xor ebx, ebx
mov dword [ebp + eax*4 - 0x208], ebx
inc dword [ebp - 0x14]
jmp 0x48453c
mov dword [ebp - 0x24], 0xfe0a8eac
mov dword [ebp - 0x48], 0xfffffffe
push 4
lea ecx, [ebp - 0x754]
call fcn.0044204b
mov dword [ebp - 0x18], 0
jmp 0x4848a5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68], 0x3e469209
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x484897
mov dword [ebp - 0x18], 0
jmp 0x4848c2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x754]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x4848b3
mov dword [ebp - 0x24], 0xfffffff5
jmp 0x4848e6
mov byte [ebp - 0x31], 0
cmp byte [ebp - 0x31], 0
je 0x4848e3
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe3
jne 0x4848d1
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, edx
setle cl
mov edx, dword [ebp - 0x48]
imul edx, dword [ebp - 0x24]
imul edx, ecx
sub edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, edx
setle cl
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x48], 0x38413370
mov eax, dword [ebp - 0x48]
xor edx, edx
cmp ecx, eax
setl dl
add edx, 8
je 0x4849e8
mov dword [ebp - 0x2c], 8
mov dword [ebp - 0x30], 0x360e5697
xor eax, eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], eax
jg 0x484a24
mov ebx, 0xffff
mov dword [ebp - 0x28], 0x10b2d4ad
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x68]
xor ecx, ecx
test eax, eax
sete cl
sub ecx, dword [ebp - 0x2c]
inc dword [ebp - 0x2c]
cmp ecx, edi
jg 0x48498b
mov esi, edi
jmp 0x48498d
xor esi, esi
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
add eax, ecx
mov ecx, dword [ebp - 0x24]
imul ecx, eax
xor edx, edx
cmp esi, ecx
setl dl
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, 0x928694a2
sbb eax, eax
neg eax
xor ecx, ecx
cmp eax, 0xfffffff9
setge cl
xor edx, edx
cmp ecx, ebx
setne dl
sub edx, 0x910760b9
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0
jle 0x484968
jmp 0x484a24
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x838], xmm0
lea ecx, [ebp - 0x838]
lea eax, [ebp - 0x828]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x650]
call fcn.004420f7
mov eax, dword [ebp - 0x650]
mov dword [eax], 5
lea ecx, [ebp - 0x650]
call fcn.0044211d
lea ecx, [ebp - 0x754]
call fcn.0044211d
mov dword [ebp - 0x18], 0xa137b189
push edi
lea ecx, [ebp - 0x49c]
call fcn.0044204b
mov dword [ebp - 0x28], 0xc1da7bc9
mov dword [ebp - 0x14], 0
jmp 0x484a65
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x49c]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x484a52
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x49c]
mov dword [eax], esi
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 8
setne al
xor ecx, ecx
cmp esi, eax
setg cl
mov eax, dword [ebp - 0x18]
xor ebx, ebx
cmp ecx, eax
setle bl
sub ebx, dword [ebp - 0x18]
neg ebx
sbb ebx, ebx
inc ebx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
sub edx, ebx
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x484ad9
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetCommState]
lea ecx, [ebp - 0x49c]
call fcn.0044211d
xor ebx, ebx
mov byte [ebp - 0x31], bl
mov dword [ebp - 0x24], 0xef7d6512
mov dword [ebp - 0x18], 0xce96b779
push edi
lea ecx, [ebp - 0xec]
call fcn.0044204b
mov dword [ebp - 0x14], ebx
jmp 0x484b1b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x484b08
cmp dword [ebp - 0x24], ebx
jne 0x484b36
mov eax, dword [ebp - 0x24]
sub eax, 0xf1eb
cmp eax, dword [ebp - 0x24]
jle 0x484b36
xor ecx, ecx
jmp 0x484b38
mov ecx, edi
xor eax, eax
cmp ecx, 0xd26ec17e
sete al
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jg 0x484ca1
push 4
lea ecx, [ebp - 0x364]
call fcn.0044204b
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x484b87
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x364]
mov dword [eax + ecx*4], 0x781b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x484b6c
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jg 0x484c89
jmp 0x484b97
xor eax, eax
mov dword [ebp - 0x30], 0x311e2db8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x18], eax
jne 0x484bcb
mov eax, dword [ebp - 0x20]
dec eax
neg eax
sbb eax, eax
neg eax
cmp eax, 0x2803
je 0x484bbe
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x484bc0
mov eax, edi
add eax, 0x38e5161e
jne 0x484bcb
xor edx, edx
jmp 0x484bcd
mov edx, edi
xor ecx, ecx
mov eax, dword [ebp - 0x364]
cmp edx, dword [eax]
setl cl
mov eax, dword [ebp - 0x30]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffc
sbb eax, eax
neg eax
cmp eax, 0xfffffff9
je 0x484bfb
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x484bfb
mov edi, eax
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xec]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
xor edx, edx
cmp eax, edi
setne dl
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
xor edi, edi
inc edi
cmp ecx, edi
setg al
cmp eax, 0x12d49381
jge 0x484c6d
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], 0
jg 0x484c7c
mov dword [ebp - 0x40], 0x21ba52b3
inc dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xec]
xor ebx, ebx
cmp dword [eax + ecx*4], ebx
jne 0x484c7c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x484c49
jmp 0x484c7c
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xec]
mov dword [eax + edx*4], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0
jle 0x484b95
lea ecx, [ebp - 0x364]
call fcn.0044211d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0
jle 0x484b54
lea ecx, [ebp - 0xec]
call fcn.0044211d
cmp byte [ebp - 0x31], 0
je 0x484fc5
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x20], 0x6768
mov dword [ebp - 0x44], 0xffffffff
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x30], 0xc7c747ca
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x484cf7
xor ebx, ebx
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x94], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x484ce2
xor eax, eax
mov dword [ebp - 0x3c], 0x11f6
cmp dword [ebp - 0x3c], 0x148d
jle 0x484d60
mov ecx, eax
mov dword [ebp - 0x2c], eax
mov ebx, eax
mov dword [ebp - 0x30], eax
mov edi, eax
mov dword [ebp - 0x28], ebx
and ebx, ecx
mov esi, eax
mov eax, esi
and eax, edi
xor eax, ebx
cdq
push edx
push eax
mov ecx, 0xae0558
call fcn.00441f36
inc esi
cmp esi, 0x2a30
jl 0x484d1a
inc edi
cmp edi, 0x754e
push 0
pop eax
jl 0x484d18
mov ebx, dword [ebp - 0x30]
inc ebx
mov dword [ebp - 0x30], ebx
cmp ebx, 0x273d
mov ecx, dword [ebp - 0x2c]
jl 0x484d11
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x798e
jl 0x484d0c
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
xor ecx, ecx
cmp eax, 0xbb6b
setl cl
mov eax, dword [ebp - 0x90]
xor edx, edx
cmp eax, ecx
setg dl
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x90]
xor ecx, ecx
cmp eax, 0x6a0b3493
setne cl
mov eax, dword [ebp - 0x94]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x88]
xor ebx, ebx
cmp edx, eax
sete bl
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp dword [ebp - 0x28], eax
setle dl
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp ebx, eax
setl cl
cmp edx, ecx
jge 0x484ddc
cmp dword [ebp - 0x38], 0
je 0x484ddc
xor edi, edi
inc edi
mov ecx, edi
jmp 0x484de1
xor ecx, ecx
xor edi, edi
inc edi
mov eax, dword [ebp - 0x90]
xor edx, edx
cmp ecx, eax
sete dl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
cmp ecx, 0x93f6
setge dl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0xc013
setl al
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x38]
jne 0x484e3d
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x484f79
push eax
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
jmp 0x484f79
mov dword [ebp - 0x28], 0x83781cdf
mov dword [ebp - 0x30], 0x8f5349dd
mov dword [ebp - 0x30], 0xcd63ccf7
mov dword [ebp - 0x44], 7
cmp dword [ebp - 0x44], 0xb
jl 0x484f68
mov esi, 0xf41adf89
push 4
lea ecx, [ebp - 0x668]
call fcn.0044204b
mov dword [ebp - 0x2c], 0xfffffffa
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x484ea2
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x668]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x484e87
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x484eb5
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x484f46
mov dword [ebp - 0x158], esi
mov dword [ebp - 0x154], esi
mov dword [ebp - 0x150], esi
mov dword [ebp - 0x14c], esi
mov dword [ebp - 0x30], 5
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setl dl
mov eax, dword [ebp - 0x38]
add eax, edx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x90]
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x30], edi
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffb
jl 0x484ebd
lea ecx, [ebp - 0x668]
call fcn.0044211d
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xb
jge 0x484e68
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x484f79
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x3c], 0x11e6
jge 0x484f98
mov edx, str.ognq_yjcugv_oeiuoume_qflygligv_kkxf_fswlf_bgd_kxqveo_vvajfgyc_fsiqd_dswzd_vouvgr
mov ecx, 0xae0558
call fcn.004438dc
or dword [ebp - 4], 0xffffffff
jmp 0x484fbf
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
movdqa xmm0, xmmword [0xacf9e0]
movdqu xmmword [ebp - 0x8b8], xmm0
lea ecx, [ebp - 0x8b8]
lea eax, [ebp - 0x8a8]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x2d4]
call fcn.004420f7
mov dword [ebp - 0x14], 0
jmp 0x485009
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x670], 0x9beab1d6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x484ff8
mov ecx, dword [ebp - 0x2d4]
add ecx, 8
xor eax, eax
mov dword [ecx], eax
cmp dword [ecx], 4
jle 0x48518e
mov dword [ebp - 0x20], 0xdbeccce1
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x485041
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 8
jge 0x48517c
mov dword [ebp - 0x44], 0xeb44952
mov dword [ebp - 0x3c], 0x3c08
cmp dword [ebp - 0x3c], 0x3e85
jle 0x4850fe
mov edx, eax
mov dword [ebp - 0x2c], edx
jmp 0x485072
xor eax, eax
mov ecx, eax
mov dword [ebp - 0x30], ecx
jmp 0x48507b
xor eax, eax
mov esi, eax
sar edx, cl
mov dword [ebp - 0x14], edx
jmp 0x485086
xor eax, eax
mov edi, eax
mov ecx, esi
sar edx, cl
mov dword [ebp - 0x28], edx
xor ebx, ebx
mov eax, edi
xor eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xc64]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xc64]
call fcn.00442427
inc edi
cmp edi, 0x346f
mov edx, dword [ebp - 0x28]
jl 0x485091
inc esi
cmp esi, 0x252c
mov edx, dword [ebp - 0x14]
jl 0x485084
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x4b30
mov edx, dword [ebp - 0x2c]
jl 0x485079
inc edx
mov dword [ebp - 0x2c], edx
cmp edx, 0x1a9a
jl 0x485070
xor edi, edi
inc edi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2d4]
cmp dword [eax + 8], 0x4d63a88e
je 0x48511d
cmp dword [ebp - 0x44], 0
je 0x48511d
mov ecx, edi
jmp 0x48511f
xor ecx, ecx
xor eax, eax
test ecx, ecx
setne al
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x66c], eax
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x3c], 0x3b10
jge 0x48514b
push str.yjb_fko_jfp_taye_vorz_guc_cowdwdaq_xqtplzl_cmwzohxoy_iirkxiekj
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x485172
inc dword [ebp - 0x20]
xor eax, eax
jmp 0x485044
mov ecx, dword [ebp - 0x2d4]
add ecx, 8
inc dword [ecx]
xor eax, eax
jmp 0x48501c
lea ecx, [ebp - 0x2d4]
call fcn.0044211d
mov dword [ebp - 0x24], 0x5540d7f8
mov dword [ebp - 0x18], 0
jmp 0x4851ba
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x544], 0x902314af
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x4851a9
mov dword [ebp - 0x18], 0
jmp 0x4851da
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d8], 0x2c593c86
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x4851c9
mov dword [ebp - 0x3c], 0x64ae
cmp dword [ebp - 0x3c], 0x651c
jle 0x48528f
xor eax, eax
mov dword [ebp - 0x2c], eax
xor ebx, ebx
mov dword [ebp - 0x30], ebx
xor esi, esi
mov ecx, ebx
shl eax, cl
mov dword [ebp - 0x28], eax
xor edi, edi
mov ebx, eax
mov ecx, esi
sar ebx, cl
mov eax, ebx
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xae0558
call fcn.00441f36
inc edi
cmp edi, 0x6a8
jl 0x48520f
inc esi
cmp esi, 0x49bd
mov eax, dword [ebp - 0x28]
jl 0x485207
mov ebx, dword [ebp - 0x30]
inc ebx
mov dword [ebp - 0x30], ebx
cmp ebx, 0x5958
mov eax, dword [ebp - 0x2c]
jl 0x4851fe
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0xb70
jl 0x4851f9
xor ebx, ebx
push ebx
push 0x255a
push 0x580
push 0x161c
push 0x1415
push 0x1815
push 0x6fb
push 0x1c1a
push 0x17bf
push 0x65
push 0x2ff
call dword [sym.imp.GDI32.dll_StretchBlt]
xor edi, edi
inc edi
mov dword [ebp - 0x24], 0xffffffef
jmp 0x48537c
mov dword [ebp - 0x20], 0x160cbeb9
mov eax, dword [ebp - 0x24]
xor ecx, ecx
test eax, eax
sets cl
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
neg ecx
je 0x4852d1
mov byte [ebp - 0x31], 0
cmp byte [ebp - 0x31], 0
je 0x485379
call dword [sym.imp.USER32.dll_GetMessageTime]
jmp 0x485379
mov dword [ebp - 0x14], 0x96da
mov dword [ebp - 0x2c], 0xfffffffa
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x20]
add eax, 0x222a2a83
je 0x4852fd
cmp dword [ebp - 0x1d4], 0
je 0x4852fd
mov ecx, edi
jmp 0x4852ff
xor ecx, ecx
mov eax, dword [ebp - 0x20]
imul eax, ecx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setne dl
cmp edx, 0xffffffff
jae 0x48531d
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x48532e
cmp dword [ebp - 0x53c], eax
mov ecx, edi
jne 0x485330
mov ecx, eax
mov esi, dword [ebp - 0x14]
add esi, 0xffff3104
add esi, ecx
neg esi
sbb esi, esi
inc esi
sub esi, dword [ebp - 0x20]
neg esi
sbb esi, esi
inc esi
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp eax, ecx
setge dl
cmp edx, esi
jne 0x48535c
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 9
setle cl
sub ecx, dword [ebp - 0x53c]
mov dword [ebp - 0x53c], ecx
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe8
jge 0x48529b
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x3c], 0x634c
jge 0x4853a5
mov edx, str.qxscvgp_tsqmpjwn_gkvmqgjq_ttnvy_foaue_vcxz_zmo_ydy_wofgh
mov ecx, 0xae0558
call fcn.004438dc
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4853d0
mov dword [ebp - 0x24], eax
jmp 0x4853e6
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1d8], 0xc987f9bd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x4853d5
mov dword [ebp - 0x20], 0x3ae35568
mov dword [ebp - 0x40], 2
push 2
lea ecx, [ebp - 0x7f4]
call fcn.0044204b
mov dword [ebp - 0x40], 0xc6516eae
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x18], 0
jmp 0x48542e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x7f4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x48541e
mov dword [ebp - 0x18], 0
jmp 0x48544e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c8], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x48543d
mov dword [ebp - 0x20], 0x12
cmp dword [ebp - 0x20], 0x17
jne 0x4854c8
push 3
lea ecx, [ebp - 0x37c]
call fcn.0044204b
mov dword [ebp - 0x40], 0x1615e82a
mov dword [ebp - 0x40], 0xe9ad3ee7
mov dword [ebp - 0x14], 0
jmp 0x485497
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x37c]
mov dword [eax + ecx*4], 0x98311173
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x485484
mov eax, dword [ebp - 0x37c]
or dword [eax + 8], 0xffffffff
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x4854b8
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
lea ecx, [ebp - 0x37c]
call fcn.0044211d
inc dword [ebp - 0x20]
jmp 0x48545a
lea ecx, [ebp - 0x7f4]
call fcn.0044211d
mov dword [ebp - 0x20], 0x40d7f825
mov dword [ebp - 0x20], 0
jmp 0x4854fd
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff5
je 0x4854e3
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
movdqa xmm0, xmmword [0xacf9e0]
movdqu xmmword [ebp - 0x958], xmm0
lea ecx, [ebp - 0x958]
lea eax, [ebp - 0x948]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x67c]
call fcn.004420f7
mov dword [ebp - 0x14], 0
jmp 0x48554d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x998], 0x9beab1d6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x48553c
mov eax, dword [ebp - 0x67c]
xor ebx, ebx
mov dword [eax + 8], ebx
lea ecx, [ebp - 0x67c]
call fcn.0044211d
mov dword [ebp - 0x20], 0x635e
cmp dword [ebp - 0x20], 0x64d0
jle 0x4855f3
and dword [ebp - 0x2c], ebx
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x3c], 0x23aa
xor esi, esi
xor edi, edi
mov dword [ebp - 0x30], 0x3337
xor ebx, ebx
mov eax, ecx
and eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xaf0]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xaf0]
call fcn.00442427
add edi, esi
dec dword [ebp - 0x30]
mov ecx, dword [ebp - 0x14]
jne 0x485595
inc esi
cmp esi, 0x3ec0
jl 0x48558a
mov eax, dword [ebp - 0x2c]
add ecx, eax
mov dword [ebp - 0x14], ecx
dec dword [ebp - 0x3c]
jne 0x485588
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x6b6c
jl 0x48557c
xor edi, edi
inc edi
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x20], 0x6193
jge 0x48560e
push str.lbf_ittv_ketnx_zpdewpx_upcpnj
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x485639
mov dword [ebp - 0x2c], 0x7013
mov dword [ebp - 0x30], 0x2b14
cmp dword [ebp - 0x30], 0x2ee2
jle 0x48567d
mov edi, eax
mov esi, eax
mov eax, esi
and eax, edi
cdq
push edx
push eax
mov ecx, 0xae0558
call fcn.00441f36
inc esi
cmp esi, 0x2788
jl 0x485654
inc edi
cmp edi, 0x3209
push 0
pop eax
jl 0x485652
xor edi, edi
inc edi
mov dword [ebp - 0x3c], 0x5ba7723
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x30], 0x299a
jge 0x4856a3
mov edx, str.mgi_rgedcaqgp_fsab_wdtwit_efzg_zgh_jyezurbui_wgsfwkxx_bylc_nfarmxvw_pxidkc
mov ecx, 0xae0558
call fcn.004438dc
or dword [ebp - 4], 0xffffffff
jmp 0x4856ca
push 0xfffffffffffffff9
pop ebx
push 4
lea ecx, [ebp - 0x4b4]
call fcn.0044204b
mov dword [ebp - 0x14], 0
jmp 0x4856f6
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4b4]
mov dword [eax + ecx*4], 0x4d073ff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4856e3
mov byte [ebp - 0x31], 0
cmp byte [ebp - 0x31], 0
je 0x485725
push 0x2466
push 0x153f
push 0x18b7
push 0x744
push 0x1bf8
call dword [sym.imp.GDI32.dll_Ellipse]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x4b4]
mov dword [eax], edx
lea ecx, [ebp - 0x4b4]
call fcn.0044211d
mov dword [ebp - 0x40], 0xfffffff6
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x48576c
push 0x1d3d
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x485786
push 0x9a6
push eax
push 0x1324
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov dword [ebp - 0x24], 0x5540d7f8
mov dword [ebp - 0x28], 0xf572
push 4
lea ecx, [ebp - 0x394]
call fcn.0044204b
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x14], 0
jmp 0x4857bc