Function at 0x47a5bb
Capabilities:
Encrypt data using speck
Extract resource via kernel32 functions
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4af937
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xd14
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xec], 0
jmp 0x47a603
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x47a61f
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x7d4], 0xfffffffb
jmp 0x47a5f6
mov dword [ebp - 0xc0], 0
jmp 0x47a638
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x47a654
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x7d4], 0
jmp 0x47a62b
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x47a66c
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x1e0], 0x110c93b4
mov dword [ebp - 0xa0], 0xfffffffe
push 4
lea ecx, [ebp - 0x9cc]
call fcn.0044204b
mov dword [ebp - 0xf0], 0
jmp 0x47a6a6
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 4
jge 0x47a6c8
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x9cc]
call fcn.00442139
mov dword [eax], 0xa3c0
jmp 0x47a699
mov dword [ebp - 0x1e0], 0xfffffff3
jmp 0x47a6e1
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 4
jg 0x47a707
mov dword [ebp - 0x868], 0xbb4e
mov eax, dword [ebp - 0x868]
sub eax, 0x103f81e9
mov dword [ebp - 0xa0], eax
jmp 0x47a6d4
mov dword [ebp - 0xa0], 0xfffffff0
jmp 0x47a720
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xfffffff1
jle 0x47a740
mov esi, dword [ebp - 0xa0]
push 2
lea ecx, [ebp - 0x9cc]
call fcn.00442139
mov dword [eax], esi
jmp 0x47a713
lea ecx, [ebp - 0x9cc]
call fcn.0044211d
mov dword [ebp - 0x358], 0x32fa
mov dword [ebp - 0x870], str.wzmgo_kbrx_xxj_ldclfcqpr_ojqksso_ydyg_vlqaxdwv_jybbnkvz_blpfxlz_pbesscqti_hyfyyuh_poaxpwkrr_quqwhek
cmp dword [ebp - 0x358], 0x369e
jle 0x47a7e2
and dword [ebp - 0xf8], 0
jmp 0x47a781
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x40a7
jge 0x47a7e2
and dword [ebp - 0x258], 0
jmp 0x47a7a3
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x6749
jge 0x47a7e0
mov eax, dword [ebp - 0xf8]
or eax, dword [ebp - 0x258]
cdq
mov dword [ebp - 0x6dc], eax
mov dword [ebp - 0x6d8], edx
push dword [ebp - 0x6d8]
push dword [ebp - 0x6dc]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x47a796
jmp 0x47a774
and dword [ebp - 4], 0
cmp dword [ebp - 0x358], 0x322f
jge 0x47a802
mov edx, dword [ebp - 0x870]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x47a81e
or dword [ebp - 4], 0xffffffff
jmp 0x47a828
mov dword [ebp - 0x1c], 0xfe0a8eac
mov dword [ebp - 0x18], 0xfffffffe
push 4
lea ecx, [ebp - 0xad0]
call fcn.0044204b
mov dword [ebp - 0x48], 0
jmp 0x47a853
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x47a869
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x32c], 0x3e469209
jmp 0x47a84c
mov dword [ebp - 0x48], 0
jmp 0x47a879
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x47a895
push dword [ebp - 0x48]
lea ecx, [ebp - 0xad0]
call fcn.00442139
mov dword [eax], 1
jmp 0x47a872
mov dword [ebp - 0x1c], 0xfffffff5
jmp 0x47a8a5
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe3
je 0x47a8c7
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x47a8c5
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x47a89e
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
je 0x47a8db
mov dword [ebp - 0x878], 1
jmp 0x47a8e2
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa78], eax
mov eax, 0xaff6
test eax, eax
jne 0x47a8f8
cmp dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jne 0x47a90c
mov dword [ebp - 0x620], 1
jmp 0x47a913
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x620]
jg 0x47a931
push 9
pop eax
test eax, eax
je 0x47a931
mov dword [ebp - 0x628], 1
jmp 0x47a938
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x628]
imul eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jg 0x47a95a
mov dword [ebp - 0x630], 1
jmp 0x47a961
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xaf4], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa88], eax
mov eax, 0xed7c
imul eax, eax, 0x3ca4
imul eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jge 0x47a99f
mov dword [ebp - 0x60c], 1
jmp 0x47a9a6
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x60c]
add eax, 8
je 0x47acbf
mov dword [ebp - 0x618], 0x3471
mov dword [ebp - 0x880], str.jxdg_hmxv_erpokj_bqzuzgu_gpp
cmp dword [ebp - 0x618], 0x3829
jle 0x47aae0
push 0
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [ebp - 0x2b0], 0
jmp 0x47a9f7
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x48d8
jge 0x47aae0
and dword [ebp - 0x100], 0
jmp 0x47aa1d
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x559c
jge 0x47aadb
and dword [ebp - 0x1e8], 0
jmp 0x47aa43
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x3747
jge 0x47aad6
and dword [ebp - 0x108], 0
jmp 0x47aa69
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x5795
jge 0x47aad1
mov eax, dword [ebp - 0x100]
cdq
idiv dword [ebp - 0x1e8]
sub edx, dword [ebp - 0x108]
and edx, dword [ebp - 0x2b0]
mov eax, edx
cdq
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x680], edx
push dword [ebp - 0x680]
push dword [ebp - 0x684]
lea ecx, [ebp - 0xb98]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xb98]
call fcn.00441f21
jmp 0x47aa5c
jmp 0x47aa36
jmp 0x47aa10
jmp 0x47a9ea
mov dword [ebp - 0x2fc], 8
mov dword [ebp - 4], 2
cmp dword [ebp - 0x618], 0x319b
jge 0x47ab09
push dword [ebp - 0x880]
call fcn.00499008
pop ecx
jmp 0x47ab25
or dword [ebp - 4], 0xffffffff
jmp 0x47ab2f
mov dword [ebp - 0x594], 0x360e5697
mov dword [ebp - 0x18], 0
jmp 0x47ab49
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x47acbd
mov dword [ebp - 0x890], 0x10b2d4ad
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x32c], 0
jne 0x47ab76
mov dword [ebp - 0x35c], 1
jmp 0x47ab7d
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
sub eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x888], 1
jg 0x47abb1
mov dword [ebp - 0x4d4], 1
jmp 0x47abb8
and dword [ebp - 0x4d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x32c]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x32c]
imul eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x4d4], eax
jge 0x47abea
mov dword [ebp - 0x364], 1
jmp 0x47abf1
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x594]
cmp dword [ebp - 0x364], eax
jl 0x47ac0b
mov dword [ebp - 0x598], 1
jmp 0x47ac12
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 0x928694a2
jae 0x47ac2a
mov dword [ebp - 0x36c], 1
jmp 0x47ac31
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0xfffffff9
jl 0x47ac46
mov dword [ebp - 0x4dc], 1
jmp 0x47ac4d
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0xffff
je 0x47ac65
mov dword [ebp - 0x374], 1
jmp 0x47ac6c
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0x910760b9
jne 0x47ac84
mov dword [ebp - 0x37c], 1
jmp 0x47ac8b
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x594]
cmp dword [ebp - 0x37c], eax
jl 0x47aca5
mov dword [ebp - 0x4e4], 1
jmp 0x47acac
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x890], eax
jmp 0x47ab42
jmp 0x47ad2e
and dword [ebp - 0x97c], 0
and dword [ebp - 0x978], 0
and dword [ebp - 0x974], 0
and dword [ebp - 0x970], 0
lea ecx, [ebp - 0x325]
call fcn.00442148
push eax
lea eax, [ebp - 0x96c]
push eax
lea eax, [ebp - 0x97c]
push eax
lea ecx, [ebp - 0xb18]
call fcn.0044214b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xac0]
call fcn.004420f7
push 0
lea ecx, [ebp - 0xac0]
call fcn.00442139
mov dword [eax], 5
lea ecx, [ebp - 0xac0]
call fcn.0044211d
lea ecx, [ebp - 0xad0]
call fcn.0044211d
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x110], 0
jmp 0x47ad5c
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x47ad78
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x898], 0xfffffffb
jmp 0x47ad4f
mov dword [ebp - 0x384], 0x4a36
mov dword [ebp - 0x8a0], str.ywulmkfs_rwwobrugm_ugdbhzwti_esgtp_yhfrhhd_gldr_fgrk_eaqwghxo_gcgv
cmp dword [ebp - 0x384], 0x4d58
jle 0x47ae3e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
and dword [ebp - 0x1f0], 0
jmp 0x47adbc
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x154a
jge 0x47ae3e
and dword [ebp - 0x118], 0
jmp 0x47adde
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x1918
jge 0x47ae39
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [ebp - 0x118]
sar eax, cl
cdq
mov dword [ebp - 0x6f0], eax
mov dword [ebp - 0x6ec], edx
push dword [ebp - 0x6ec]
push dword [ebp - 0x6f0]
lea ecx, [ebp - 0xd0c]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xd0c]
call fcn.00441f21
jmp 0x47add1
jmp 0x47adaf
mov dword [ebp - 0xc8], 0
jmp 0x47ae57
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x47ae73
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x898], 0
jmp 0x47ae4a
mov dword [ebp - 4], 4
cmp dword [ebp - 0x384], 0x4985
jge 0x47ae92
push dword [ebp - 0x8a0]
call fcn.00499008
pop ecx
jmp 0x47aeae
or dword [ebp - 4], 0xffffffff
jmp 0x47aeb8
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x47aed0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x20], 0x5540d7f8
mov dword [ebp - 0x5c], 0
jmp 0x47aee7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x47aefd
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x9d8], 0x902314af
jmp 0x47aee0
mov dword [ebp - 0x5c], 0
jmp 0x47af0d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x47af23
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x708], 0x2c593c86
jmp 0x47af06
mov dword [ebp - 0x20], 0xffffffef
jmp 0x47af33
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe8
jl 0x47b308
mov dword [ebp - 0xa8], 0x160cbeb9
cmp dword [ebp - 0x20], 0
jge 0x47af59
mov dword [ebp - 0x5e8], 1
jmp 0x47af60
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x5e8], eax
jne 0x47af77
mov dword [ebp - 0x38c], 1
jmp 0x47af7e
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
neg eax
je 0x47b0da
mov dword [ebp - 0x4ec], 0x3e8e
mov dword [ebp - 0x8a8], str.udik_gmvwmzdb_tbajlv_aldb
cmp dword [ebp - 0x4ec], 0x3eb1
jle 0x47b078
and dword [ebp - 0x260], 0
jmp 0x47afc6
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x6b65
jge 0x47b078
and dword [ebp - 0x120], 0
jmp 0x47afec
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x1a1e
jge 0x47b073
and dword [ebp - 0x1f8], 0
jmp 0x47b00e
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x5e25
jge 0x47b06e
mov eax, dword [ebp - 0x260]
imul eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0x1f8]
cdq
mov dword [ebp - 0x6fc], eax
mov dword [ebp - 0x6f8], edx
push dword [ebp - 0x6f8]
push dword [ebp - 0x6fc]
lea ecx, [ebp - 0xbc8]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xbc8]
call fcn.00441f21
jmp 0x47b001
jmp 0x47afdf
jmp 0x47afb9
mov byte [ebp - 0x93], 0
mov dword [ebp - 4], 6
cmp dword [ebp - 0x4ec], 0x3ccb
jge 0x47b09e
push dword [ebp - 0x8a8]
call fcn.00499008
pop ecx
jmp 0x47b0ba
or dword [ebp - 4], 0xffffffff
jmp 0x47b0c4
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x47b0d5
call dword [sym.imp.USER32.dll_GetMessageTime]
jmp 0x47b303
mov dword [ebp - 0x128], 0x96da
mov dword [ebp - 0x304], 0xfffffffa
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x20], eax
jl 0x47b105
mov dword [ebp - 0x5ec], 1
jmp 0x47b10c
and dword [ebp - 0x5ec], 0
cmp dword [ebp - 0x128], 0x6f4846e1
jle 0x47b124
mov dword [ebp - 0x8b0], 1
jmp 0x47b12b
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0x128]
add eax, 0x222a2a83
je 0x47b15b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x708], 0
je 0x47b15b
mov dword [ebp - 0x394], 1
jmp 0x47b162
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0x394]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x304], eax
je 0x47b18f
mov dword [ebp - 0x59c], 1
jmp 0x47b196
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 0xffffffff
jae 0x47b1b4
cmp dword [ebp - 0xa8], 0
je 0x47b1b4
mov dword [ebp - 0x39c], 1
jmp 0x47b1bb
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0xe31b5465
je 0x47b1d3
mov dword [ebp - 0x6d0], 1
jmp 0x47b1da
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x304], 0
je 0x47b1fe
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9d8], 0
je 0x47b1fe
mov dword [ebp - 0x4f4], 1
jmp 0x47b205
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x4f4]
lea eax, [ecx + eax - 0xcefc]
test eax, eax
jne 0x47b228
mov dword [ebp - 0x3a4], 1
jmp 0x47b22f
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x3a4], eax
jne 0x47b249
mov dword [ebp - 0x3ac], 1
jmp 0x47b250
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x5ec]
cmp eax, dword [ebp - 0x3ac]
jne 0x47b273
cmp dword [ebp - 0xa8], 0
je 0x47b273
mov dword [ebp - 0x4fc], 1
jmp 0x47b27a
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0xfffffff8
jge 0x47b28f
mov dword [ebp - 0x3b4], 1
jmp 0x47b296
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
add eax, 0xffff
cmp eax, 2
jne 0x47b2b2
mov dword [ebp - 0x6e4], 1
jmp 0x47b2b9
and dword [ebp - 0x6e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x708]
mov dword [ebp - 0xad4], eax
cmp dword [ebp - 0x20], 9
jg 0x47b2de
mov dword [ebp - 0x5a4], 1
jmp 0x47b2e5
and dword [ebp - 0x5a4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5a4]
sub ecx, dword [ebp + eax - 0x9d8]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x9d8], ecx
jmp 0x47af2c
mov dword [ebp - 0x20], 0
jmp 0x47b318
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x47b32e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x708], 0xc987f9bd
jmp 0x47b311
mov dword [ebp - 0x940], 1
mov dword [ebp - 0x93c], 1
mov dword [ebp - 0x938], 1
mov dword [ebp - 0x934], 1
lea ecx, [ebp - 0x2f1]
call fcn.00442148
push eax
lea eax, [ebp - 0x930]
push eax
lea eax, [ebp - 0x940]
push eax
lea ecx, [ebp - 0xb48]
call fcn.0044214b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8c0]
call fcn.004420f7
mov dword [ebp - 0x3bc], 0x3fcc
mov dword [ebp - 0x698], str.cdsrfsf_ytpn_uawrtvrvv_felff_ffcypcabg_tnlxtendz_xsv_mwvrwuxe
cmp dword [ebp - 0x3bc], 0x40b8
jle 0x47b48b
and dword [ebp - 0x200], 0
jmp 0x47b3c5
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x494b
jge 0x47b479
and dword [ebp - 0x298], 0
jmp 0x47b3eb
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x78ca
jge 0x47b474
and dword [ebp - 0x130], 0
jmp 0x47b40d
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x5653
jge 0x47b46f
mov eax, dword [ebp - 0x298]
cdq
idiv dword [ebp - 0x130]
and edx, dword [ebp - 0x200]
mov eax, edx
cdq
mov dword [ebp - 0x714], eax
mov dword [ebp - 0x710], edx
push dword [ebp - 0x710]
push dword [ebp - 0x714]
lea ecx, [ebp - 0xc88]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xc88]
call fcn.00441f21
jmp 0x47b400
jmp 0x47b3de
jmp 0x47b3b8
push 0x1194
push 0
push 0x1d07
call dword [sym.imp.GDI32.dll_Polygon]
mov dword [ebp - 4], 8
cmp dword [ebp - 0x3bc], 0x3e9b
jge 0x47b4aa
push dword [ebp - 0x698]
call fcn.00499008
pop ecx
jmp 0x47b4c6
or dword [ebp - 4], 0xffffffff
jmp 0x47b4d0
mov dword [ebp - 0x138], 0
jmp 0x47b4e9
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 2
jge 0x47b505
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0xa58], 0x9beab1d6
jmp 0x47b4dc
push 2
lea ecx, [ebp - 0x8c0]
call fcn.00442139
and dword [eax], 0
jmp 0x47b53b
push 2
lea ecx, [ebp - 0x8c0]
call fcn.00442139
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x504]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x504]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x8c0]
call fcn.00442139
cmp dword [eax], 4
jle 0x47b8a2
mov dword [ebp - 0x7c], 0xdbeccce1
mov dword [ebp - 0x62c], 0x7425
mov dword [ebp - 0x864], str.bcbznffeq_zao_boyduimnk_epglvv_jyulm_lbnbp_xdthyuix
cmp dword [ebp - 0x62c], 0x7672
jle 0x47b692
push 0
push 0x2476
call dword [sym.imp.USER32.dll_EndPaint]
and dword [ebp - 0x208], 0
jmp 0x47b59f
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x31ce
jge 0x47b688
and dword [ebp - 0x268], 0
jmp 0x47b5c5
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x3aa1
jge 0x47b683
and dword [ebp - 0x140], 0
jmp 0x47b5eb
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x1f1
jge 0x47b67e
and dword [ebp - 0x148], 0
jmp 0x47b611
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x3e1a
jge 0x47b679
mov eax, dword [ebp - 0x268]
cdq
idiv dword [ebp - 0x140]
xor edx, dword [ebp - 0x208]
xor edx, dword [ebp - 0x148]
mov eax, edx
cdq
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], edx
push dword [ebp - 0x71c]
push dword [ebp - 0x720]
lea ecx, [ebp - 0xbf8]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xbf8]
call fcn.00441f21
jmp 0x47b604
jmp 0x47b5de
jmp 0x47b5b8
jmp 0x47b592
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x47b796
mov dword [ebp - 0x3c4], 0x4881
mov dword [ebp - 0x694], str.dvfoxt_vqnxsohb_lnayjsn_ltb
cmp dword [ebp - 0x3c4], 0x4b76
jle 0x47b73f
and dword [ebp - 0x2c0], 0
jmp 0x47b6de
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x2177
jge 0x47b73f
and dword [ebp - 0x150], 0
jmp 0x47b700
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x4369
jge 0x47b73d
mov eax, dword [ebp - 0x2c0]
add eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], edx
push dword [ebp - 0x728]
push dword [ebp - 0x72c]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x47b6f3
jmp 0x47b6d1
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x62c], 0x707d
jge 0x47b7b5
push dword [ebp - 0x864]
call fcn.00499008
pop ecx
jmp 0x47b7d1
or dword [ebp - 4], 0xffffffff
jmp 0x47b7db
mov dword [ebp - 0x7c], 0
jmp 0x47b7eb
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 8
jge 0x47b89d
mov dword [ebp - 0x6a4], 0xeb44952
cmp dword [ebp - 0x7c], 0
jne 0x47b811
mov dword [ebp - 0x69c], 1
jmp 0x47b818
and dword [ebp - 0x69c], 0
imul eax, dword [ebp - 0x7c], 0
cmp eax, 1
jbe 0x47b82d
mov dword [ebp - 0x7c8], 1
jmp 0x47b834
and dword [ebp - 0x7c8], 0
push 2
lea ecx, [ebp - 0x8c0]
call fcn.00442139
cmp dword [eax], 0x4d63a88e
je 0x47b85e
cmp dword [ebp - 0x6a4], 0
je 0x47b85e
mov dword [ebp - 0x3cc], 1
jmp 0x47b865
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 0
je 0x47b87a
mov dword [ebp - 0x50c], 1
jmp 0x47b881
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x50c]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa58], eax
jmp 0x47b7e4
jmp 0x47b517
lea ecx, [ebp - 0x8c0]
call fcn.0044211d
mov dword [ebp - 0x24], 0x5540d7f8
mov dword [ebp - 0x44], 0
jmp 0x47b8c4
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x47b8da
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x9f0], 0x902314af
jmp 0x47b8bd
mov dword [ebp - 0x44], 0
jmp 0x47b8ea
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x47b900
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x738], 0x2c593c86
jmp 0x47b8e3
mov dword [ebp - 0x24], 0xffffffef
jmp 0x47b910
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe8
jl 0x47bbb0
mov dword [ebp - 0xbc], 0x160cbeb9
cmp dword [ebp - 0x24], 0
jge 0x47b936
mov dword [ebp - 0x3d4], 1
jmp 0x47b93d
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x3d4], eax
jne 0x47b954
mov dword [ebp - 0x5ac], 1
jmp 0x47b95b
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5ac]
neg eax
je 0x47b982
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x47b97d
call dword [sym.imp.USER32.dll_GetMessageTime]
jmp 0x47bbab
mov dword [ebp - 0x210], 0x96da
mov dword [ebp - 0x324], 0xfffffffa
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x24], eax
jl 0x47b9ad
mov dword [ebp - 0x51c], 1
jmp 0x47b9b4
and dword [ebp - 0x51c], 0
cmp dword [ebp - 0x210], 0x6f4846e1
jle 0x47b9cc
mov dword [ebp - 0x89c], 1
jmp 0x47b9d3
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x210]
add eax, 0x222a2a83
je 0x47ba03
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x738], 0
je 0x47ba03
mov dword [ebp - 0x3dc], 1
jmp 0x47ba0a
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x324], eax
je 0x47ba37
mov dword [ebp - 0x514], 1
jmp 0x47ba3e
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0xffffffff
jae 0x47ba5c
cmp dword [ebp - 0xbc], 0
je 0x47ba5c
mov dword [ebp - 0x3e4], 1
jmp 0x47ba63
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x3e4], 0xe31b5465
je 0x47ba7b
mov dword [ebp - 0x6ac], 1
jmp 0x47ba82
and dword [ebp - 0x6ac], 0
cmp dword [ebp - 0x324], 0
je 0x47baa6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9f0], 0
je 0x47baa6
mov dword [ebp - 0x5f4], 1
jmp 0x47baad
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x5f4]
lea eax, [ecx + eax - 0xcefc]
test eax, eax
jne 0x47bad0
mov dword [ebp - 0x3ec], 1
jmp 0x47bad7
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x3ec], eax
jne 0x47baf1
mov dword [ebp - 0x3f4], 1
jmp 0x47baf8
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x51c]
cmp eax, dword [ebp - 0x3f4]
jne 0x47bb1b
cmp dword [ebp - 0xbc], 0
je 0x47bb1b
mov dword [ebp - 0x5b4], 1
jmp 0x47bb22
and dword [ebp - 0x5b4], 0
cmp dword [ebp - 0x5b4], 0xfffffff8
jge 0x47bb37
mov dword [ebp - 0x3fc], 1
jmp 0x47bb3e
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
add eax, 0xffff
cmp eax, 2
jne 0x47bb5a
mov dword [ebp - 0x67c], 1
jmp 0x47bb61
and dword [ebp - 0x67c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x738]
mov dword [ebp - 0xa90], eax
cmp dword [ebp - 0x24], 9
jg 0x47bb86
mov dword [ebp - 0x524], 1
jmp 0x47bb8d
and dword [ebp - 0x524], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x524]
sub ecx, dword [ebp + eax - 0x9f0]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x9f0], ecx
jmp 0x47b909
mov dword [ebp - 0x24], 0
jmp 0x47bbc0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x47bbd6
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x738], 0xc987f9bd
jmp 0x47bbb9
mov dword [ebp - 0x4c], 0x3ae35568
mov dword [ebp - 0x42c], 2
push 2
lea ecx, [ebp - 0x66c]
call fcn.0044204b
mov dword [ebp - 0x404], 0x5c99
mov dword [ebp - 0x6b4], str.xcr_tjnizrqjq_ulnz_tmpbr_wvyxa_gvbwsxxv_ogep_kznor_wealavwf_csyzlwycl_ogygjkblr
cmp dword [ebp - 0x404], 0x5fdf
jle 0x47bd24
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
and dword [ebp - 0x158], 0
jmp 0x47bc34
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x2c0e
jge 0x47bd1e
and dword [ebp - 0x270], 0
jmp 0x47bc5a
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x231b
jge 0x47bd19
and dword [ebp - 0x160], 0
jmp 0x47bc80
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xb59
jge 0x47bd14
and dword [ebp - 0x218], 0
jmp 0x47bca6
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x7fdc
jge 0x47bd0f
mov eax, dword [ebp - 0x158]
imul eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x160]
imul ecx, dword [ebp - 0x218]
xor eax, ecx
cdq
mov dword [ebp - 0x744], eax
mov dword [ebp - 0x740], edx
push dword [ebp - 0x740]
push dword [ebp - 0x744]
lea ecx, [ebp - 0xb68]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xb68]
call fcn.00441f21
jmp 0x47bc99
jmp 0x47bc73
jmp 0x47bc4d
jmp 0x47bc27
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov dword [ebp - 0x5c4], 0xc6516eae
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x404], 0x5a4e
jge 0x47bd4d
push dword [ebp - 0x6b4]
call fcn.00499008
pop ecx
jmp 0x47bd69
or dword [ebp - 4], 0xffffffff
jmp 0x47bd73
mov dword [ebp - 0xb04], 0xfffffff7
mov dword [ebp - 0x54], 0
jmp 0x47bd8d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x47bda6
push dword [ebp - 0x54]
lea ecx, [ebp - 0x66c]
call fcn.00442139
or dword [eax], 0xffffffff
jmp 0x47bd86
mov dword [ebp - 0x54], 0
jmp 0x47bdb6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x47bdcc
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x6cc], 9
jmp 0x47bdaf
mov dword [ebp - 0x4c], 0x12
jmp 0x47bddc
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x17
jne 0x47c527
push 3
lea ecx, [ebp - 0x2e4]
call fcn.0044204b
mov dword [ebp - 0x30c], 0x1615e82a
mov dword [ebp - 0x8d4], 0xe9ad3ee7
mov dword [ebp - 0x614], 0x49f8
mov dword [ebp - 0x86c], str.gsmtjinxx_qebytwef_uwdjupf_vgsn_bgdykci_yemnu_gsz_akvvm_lww_jdfnwxg_lupf
cmp dword [ebp - 0x614], 0x4b30
jle 0x47bf67
and dword [ebp - 0x168], 0
jmp 0x47be41
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x73db
jge 0x47bf29
and dword [ebp - 0x2a0], 0
jmp 0x47be67
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x493a
jge 0x47bf24
and dword [ebp - 0x170], 0
jmp 0x47be8d
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xbf0
jge 0x47bf1f
and dword [ebp - 0x220], 0
jmp 0x47beb3
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x62c4
jge 0x47bf1a
mov eax, dword [ebp - 0x168]
and eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x170]
sub ecx, dword [ebp - 0x220]
xor eax, ecx
cdq
mov dword [ebp - 0x750], eax
mov dword [ebp - 0x74c], edx
push dword [ebp - 0x74c]
push dword [ebp - 0x750]
lea ecx, [ebp - 0xc28]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xc28]
call fcn.00441f21
jmp 0x47bea6
jmp 0x47be80
jmp 0x47be5a
jmp 0x47be34
push 0
push 0x6f9
push 0
push 0
push 0x1b6e
push 0xcf4
push 0x1b3a
push 0x1f91
push 0x533
push 0x1578
push 0x15e2
push 0x2282
push 0x21a0
call dword [sym.imp.GDI32.dll_StretchDIBits]
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x614], 0x495b
jge 0x47bf86
push dword [ebp - 0x86c]
call fcn.00499008
pop ecx
jmp 0x47bfa2
or dword [ebp - 4], 0xffffffff
jmp 0x47bfac
mov dword [ebp - 0x178], 0
jmp 0x47bfc5
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 3
jge 0x47bfe7
push dword [ebp - 0x178]
lea ecx, [ebp - 0x2e4]
call fcn.00442139
mov dword [eax], 0x98311173
jmp 0x47bfb8
push 2
lea ecx, [ebp - 0x2e4]
call fcn.00442139
or dword [eax], 0xffffffff
push 2
lea ecx, [ebp - 0x2e4]
call fcn.00442139
cmp dword [eax], 0
jne 0x47c0cc
push 2
lea ecx, [ebp - 0x2e4]
call fcn.00442139
cmp dword [eax], 0xfffffff8
je 0x47c02b
mov dword [ebp - 0x40c], 1
jmp 0x47c032
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x4c]
add eax, 0xffff
mov dword [ebp - 0x30c], eax
push 2
lea ecx, [ebp - 0x2e4]
call fcn.00442139
cmp dword [eax], 0
jne 0x47c06d
push 2
lea ecx, [ebp - 0x2e4]
call fcn.00442139
cmp dword [eax], 0
jne 0x47c06d
and dword [ebp - 0x52c], 0
jmp 0x47c077
mov dword [ebp - 0x52c], 1
mov eax, dword [ebp - 0x40c]
cmp eax, dword [ebp - 0x52c]
jle 0x47c091
mov dword [ebp - 0x414], 1
jmp 0x47c098
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x414], eax
je 0x47c0af
mov dword [ebp - 0x5bc], 1
jmp 0x47c0b6
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
sub eax, 0x470d45ea
jne 0x47c0cc
and dword [ebp - 0x41c], 0
jmp 0x47c0d6
mov dword [ebp - 0x41c], 1
cmp dword [ebp - 0x41c], 0x20d70069
jge 0x47c1e5
mov dword [ebp - 0x534], 0x7b11
mov dword [ebp - 0x6bc], str.xsidnoum_fns_ujnupfot_gftwm_cnro_zag_cubzz
cmp dword [ebp - 0x534], 0x7d6c
jle 0x47c17d
and dword [ebp - 0x278], 0
jmp 0x47c11c
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x14b7
jge 0x47c17d
and dword [ebp - 0x180], 0
jmp 0x47c13e
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0xeff
jge 0x47c17b
mov eax, dword [ebp - 0x278]
sub eax, dword [ebp - 0x180]
cdq
mov dword [ebp - 0x75c], eax
mov dword [ebp - 0x758], edx
push dword [ebp - 0x758]
push dword [ebp - 0x75c]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x47c131
jmp 0x47c10f
mov byte [ebp - 0x90], 0
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x534], 0x7999
jge 0x47c1a7
mov edx, dword [ebp - 0x6bc]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x47c1c3
or dword [ebp - 4], 0xffffffff
jmp 0x47c1cd
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x47c1e0
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
jmp 0x47c517
mov dword [ebp - 0x70], 0
mov dword [ebp - 0xa9c], 0xffffffff
mov dword [ebp - 0xb0], 0xd2a48b75
push 3
lea ecx, [ebp - 0x8d0]
call fcn.0044204b
mov dword [ebp - 0xd0], 0xb711a46c
mov dword [ebp - 0x228], 0
jmp 0x47c230
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x47c252
push dword [ebp - 0x228]
lea ecx, [ebp - 0x8d0]
call fcn.00442139
mov dword [eax], 0x50b8378c
jmp 0x47c223
cmp dword [ebp - 0x4c], 1
jge 0x47c264
mov dword [ebp - 0x424], 1
jmp 0x47c26b
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x424]
jg 0x47c282
mov dword [ebp - 0x5fc], 1
jmp 0x47c289
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x42c], eax
mov esi, dword [ebp - 0x42c]
push 0
lea ecx, [ebp - 0x66c]
call fcn.00442139
mov dword [eax], esi
push 2
lea ecx, [ebp - 0x2e4]
call fcn.00442139
push 0
lea ecx, [ebp - 0x66c]
call fcn.00442139
mov eax, dword [eax]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
dec eax
je 0x47c2f3
push 1
lea ecx, [ebp - 0x66c]
call fcn.00442139
cmp dword [eax], 0
je 0x47c2f3
mov dword [ebp - 0x7e0], 1
jmp 0x47c2fa
and dword [ebp - 0x7e0], 0
push 2
lea ecx, [ebp - 0x2e4]
call fcn.00442139
mov eax, dword [ebp - 0xb0]
add eax, 0xffff
mov dword [ebp - 0x70], eax
je 0x47c347
push 2
lea ecx, [ebp - 0x8d0]
call fcn.00442139
cmp dword [eax], 0
je 0x47c347
push 0
lea ecx, [ebp - 0x66c]
call fcn.00442139
cmp dword [eax], 0
je 0x47c347
mov dword [ebp - 0x53c], 1
jmp 0x47c34e
and dword [ebp - 0x53c], 0
mov esi, dword [ebp - 0x5c4]
add esi, dword [ebp - 0x53c]
push 2
lea ecx, [ebp - 0x2e4]
call fcn.00442139
cmp esi, dword [eax]
jg 0x47c377
mov dword [ebp - 0x434], 1
jmp 0x47c37e
and dword [ebp - 0x434], 0
push 2
lea ecx, [ebp - 0x8d0]
call fcn.00442139
mov ecx, dword [ebp - 0x434]
cmp ecx, dword [eax]
jl 0x47c3a1
mov dword [ebp - 0x43c], 1
jmp 0x47c3a8
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x5c4]
cmp dword [ebp - 0x43c], eax
jg 0x47c3c2
mov dword [ebp - 0x544], 1
jmp 0x47c3c9
and dword [ebp - 0x544], 0
push 2
lea ecx, [ebp - 0x2e4]
call fcn.00442139
mov ecx, dword [ebp - 0x544]
cmp ecx, dword [eax]
jge 0x47c3ec
mov dword [ebp - 0x444], 1
jmp 0x47c3f3
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 0x192c249d
je 0x47c40b
mov dword [ebp - 0x624], 1
jmp 0x47c412
and dword [ebp - 0x624], 0
imul eax, dword [ebp - 0x624], 0x2858
add eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0xb0]
jg 0x47c436
mov dword [ebp - 0x44c], 1
jmp 0x47c43d
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x44c]
imul eax, dword [ebp - 0x4c]
cmp eax, 0x495b2841
jl 0x47c45e
mov dword [ebp - 0x6c4], 1
jmp 0x47c465
and dword [ebp - 0x6c4], 0
push 2
lea ecx, [ebp - 0x8d0]
call fcn.00442139
push 0
lea ecx, [ebp - 0x2e4]
call fcn.00442139
mov eax, dword [eax]
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0xd0], 0
jmp 0x47c4a0
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jg 0x47c50c
mov dword [ebp - 0x54c], 1
mov dword [ebp - 0xb0], 0
jmp 0x47c4cc
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jg 0x47c50a
mov eax, dword [ebp - 0x54c]
dec eax
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x70], 0
jmp 0x47c4f2
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x47c508
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x6cc], 9
jmp 0x47c4eb
jmp 0x47c4bf
jmp 0x47c493
lea ecx, [ebp - 0x8d0]
call fcn.0044211d
lea ecx, [ebp - 0x2e4]
call fcn.0044211d
jmp 0x47bdd5
lea ecx, [ebp - 0x66c]
call fcn.0044211d
mov dword [ebp - 0xb8], 0x40d7f825
mov dword [ebp - 0xb8], 0
jmp 0x47c555
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0xfffffff5
jne 0x47c58b
mov dword [ebp - 0x7ec], 0xffffffff
mov dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0
je 0x47c589
jmp 0x47c548
jmp 0x47c548
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x968], 1
mov dword [ebp - 0x964], 1
mov dword [ebp - 0x960], 1
mov dword [ebp - 0x95c], 1
lea ecx, [ebp - 0x2e5]
call fcn.00442148
push eax
lea eax, [ebp - 0x958]
push eax
lea eax, [ebp - 0x968]
push eax
lea ecx, [ebp - 0xb28]
call fcn.0044214b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8e0]
call fcn.004420f7
mov dword [ebp - 0xd8], 0
jmp 0x47c60d
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x47c629
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0xa98], 0x9beab1d6
jmp 0x47c600
push 2
lea ecx, [ebp - 0x8e0]
call fcn.00442139
and dword [eax], 0
jmp 0x47c65f
push 2
lea ecx, [ebp - 0x8e0]
call fcn.00442139
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x5cc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5cc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x8e0]
call fcn.00442139
cmp dword [eax], 4
jle 0x47c89c
mov dword [ebp - 0x84], 0xdbeccce1
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x47c699
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov dword [ebp - 0x464], 0x6a44
mov dword [ebp - 0x7f8], str.hpyhjpvl_qlxfeauxo_rybzqyq_tsramug_lswvq_wvvb_oisp_dwnpaxq_prcwc_mjuzms_ufmoyonb_ucuq
cmp dword [ebp - 0x464], 0x6c0e
jle 0x47c777
push 0x251c
push 0x12dd
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
and dword [ebp - 0x188], 0
jmp 0x47c6e3
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x859
jge 0x47c777
and dword [ebp - 0x2b8], 0
jmp 0x47c709
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x5277
jge 0x47c772
and dword [ebp - 0x190], 0
jmp 0x47c72b
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x2b2b
jge 0x47c770
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x2b8]
shl eax, cl
and eax, dword [ebp - 0x190]
cdq
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], edx
push dword [ebp - 0x764]
push dword [ebp - 0x768]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x47c71e
jmp 0x47c6fc
jmp 0x47c6d6
mov dword [ebp - 0x84], 0
jmp 0x47c790
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 8
jge 0x47c84e
mov dword [ebp - 0x6e0], 0xeb44952
cmp dword [ebp - 0x84], 0
jne 0x47c7bc
mov dword [ebp - 0x6d4], 1
jmp 0x47c7c3
and dword [ebp - 0x6d4], 0
imul eax, dword [ebp - 0x84], 0
cmp eax, 1
jbe 0x47c7db
mov dword [ebp - 0x874], 1
jmp 0x47c7e2
and dword [ebp - 0x874], 0
push 2
lea ecx, [ebp - 0x8e0]
call fcn.00442139
cmp dword [eax], 0x4d63a88e
je 0x47c80c
cmp dword [ebp - 0x6e0], 0
je 0x47c80c
mov dword [ebp - 0x45c], 1
jmp 0x47c813
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 0
je 0x47c828
mov dword [ebp - 0x554], 1
jmp 0x47c82f
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x554]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa98], eax
jmp 0x47c783
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x464], 0x6894
jge 0x47c871
mov edx, dword [ebp - 0x7f8]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x47c88d
or dword [ebp - 4], 0xffffffff
jmp 0x47c897
jmp 0x47c63b
lea ecx, [ebp - 0x8e0]
call fcn.0044211d
mov dword [ebp - 0x604], 0x7013
mov dword [ebp - 0x46c], 0x5ba7723
push 4
lea ecx, [ebp - 0xa08]
call fcn.0044204b
mov dword [ebp - 0x230], 0
jmp 0x47c8e1
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x47c903
push dword [ebp - 0x230]
lea ecx, [ebp - 0xa08]
call fcn.00442139
mov dword [eax], 0x4d073ff8
jmp 0x47c8d4
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x47c934
push 0x2466
push 0x153f
push 0x18b7
push 0x744
push 0x1bf8
call dword [sym.imp.GDI32.dll_Ellipse]
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x604]
cmp dword [ebp - 0x46c], eax
jle 0x47c95a
mov dword [ebp - 0x55c], 1
jmp 0x47c961
and dword [ebp - 0x55c], 0
push 0
lea ecx, [ebp - 0xa08]
call fcn.00442139
mov ecx, dword [ebp - 0x55c]
mov dword [eax], ecx
lea ecx, [ebp - 0xa08]
call fcn.0044211d
mov dword [ebp - 0xae4], 0x185299da
mov dword [ebp - 0x474], 0x5b0
mov dword [ebp - 0x6e8], str.vvqkq_dfcigu_mubasl_vlezdxl_wpz_xgpwzscsr
cmp dword [ebp - 0x474], 0x924
jle 0x47ca30
and dword [ebp - 0x198], 0
jmp 0x47c9c5
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x507e
jge 0x47ca26
and dword [ebp - 0x280], 0
jmp 0x47c9e7
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x21fa
jge 0x47ca24
mov eax, dword [ebp - 0x198]
add eax, dword [ebp - 0x280]
cdq
mov dword [ebp - 0x774], eax
mov dword [ebp - 0x770], edx
push dword [ebp - 0x770]
push dword [ebp - 0x774]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x47c9da
jmp 0x47c9b8
push 0
push 0
call dword [sym.imp.USER32.dll_CharLowerBuffW]
mov dword [ebp - 0xaa4], 0xb0647dc4
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x474], 0x29d
jge 0x47ca5d
mov edx, dword [ebp - 0x6e8]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x47ca79
or dword [ebp - 4], 0xffffffff
jmp 0x47ca83
mov dword [ebp - 0xafc], 0x5ab3e90a
mov dword [ebp - 0xaac], 0x8faaaeb9
mov dword [ebp - 0x5d4], 0xbc38
mov dword [ebp - 0x1a0], 0
jmp 0x47caba
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x47cad6
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xb38], 0
jmp 0x47caad
mov dword [ebp - 0x47c], 0x6736
mov dword [ebp - 0x8a4], str.yoqdelgeh_idwei_but
cmp dword [ebp - 0x47c], 0x6a87
jle 0x47cbec
and dword [ebp - 0x1b0], 0
jmp 0x47cb10
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x37a5
jge 0x47cbd5
and dword [ebp - 0x2a8], 0
jmp 0x47cb36
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x64bd
jge 0x47cbd0
and dword [ebp - 0x238], 0
jmp 0x47cb5c
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x5368
jge 0x47cbcb
and dword [ebp - 0x1a8], 0
jmp 0x47cb7e
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x123d
jge 0x47cbc9
mov ecx, dword [ebp - 0x238]
sub ecx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x2a8]
shl eax, cl
or eax, dword [ebp - 0x1b0]
cdq
mov dword [ebp - 0x780], eax
mov dword [ebp - 0x77c], edx
push dword [ebp - 0x77c]
push dword [ebp - 0x780]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x47cb71
jmp 0x47cb4f
jmp 0x47cb29
jmp 0x47cb03
push 0xae0
push 0x1774
push 0
push 0x515
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov eax, dword [ebp - 0x5d4]
dec eax
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x47c], 0x647b
jge 0x47cc1c
mov edx, dword [ebp - 0x8a4]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x47cc38
or dword [ebp - 4], 0xffffffff
jmp 0x47cc42
mov dword [ebp - 0x38], 0x3ae35568
mov dword [ebp - 0x4a4], 2
push 2
lea ecx, [ebp - 0x660]
call fcn.0044204b
mov dword [ebp - 0x57c], 0xc6516eae
mov dword [ebp - 0xa60], 0xfffffff7
mov dword [ebp - 0x2c], 0
jmp 0x47cc84
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x47cc9d
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x660]
call fcn.00442139
or dword [eax], 0xffffffff
jmp 0x47cc7d
mov dword [ebp - 0x2c], 0
jmp 0x47ccad
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x47ccc3
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x718], 9
jmp 0x47cca6
mov dword [ebp - 0x38], 0x12
jmp 0x47ccd3
cmp dword [ebp - 0x38], 0x17
jne 0x47d4e0
push 3
lea ecx, [ebp - 0x2d8]
call fcn.0044204b
mov dword [ebp - 0x330], 0x1615e82a
mov dword [ebp - 0x70c], 0xe9ad3ee7
mov dword [ebp - 0x564], 0x2002
mov dword [ebp - 0x6f4], str.zuomjfa_fncyyxy_yknnrv
cmp dword [ebp - 0x564], 0x2249
jle 0x47cdce
and dword [ebp - 0x240], 0
jmp 0x47cd38
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x46fd
jge 0x47cdce
and dword [ebp - 0x1b8], 0
jmp 0x47cd5e
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x5c2
jge 0x47cdc9
and dword [ebp - 0x288], 0
jmp 0x47cd80
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x1e70
jge 0x47cdc7
mov eax, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x1b8]
shl eax, cl
mov ecx, dword [ebp - 0x288]
sar eax, cl
cdq
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0x788], edx
push dword [ebp - 0x788]
push dword [ebp - 0x78c]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x47cd73
jmp 0x47cd51
jmp 0x47cd2b
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x564], 0x1fa0
jge 0x47cdf1
mov edx, dword [ebp - 0x6f4]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x47ce0d
or dword [ebp - 4], 0xffffffff
jmp 0x47ce17
mov dword [ebp - 0x1c0], 0
jmp 0x47ce30
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x47ce52
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0x2d8]
call fcn.00442139
mov dword [eax], 0x98311173
jmp 0x47ce23
push 2
lea ecx, [ebp - 0x2d8]
call fcn.00442139
or dword [eax], 0xffffffff
push 2
lea ecx, [ebp - 0x2d8]
call fcn.00442139
cmp dword [eax], 0
jne 0x47cf37
push 2
lea ecx, [ebp - 0x2d8]
call fcn.00442139
cmp dword [eax], 0xfffffff8
je 0x47ce96
mov dword [ebp - 0x484], 1
jmp 0x47ce9d
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x38]
add eax, 0xffff
mov dword [ebp - 0x330], eax
push 2
lea ecx, [ebp - 0x2d8]
call fcn.00442139
cmp dword [eax], 0
jne 0x47ced8
push 2
lea ecx, [ebp - 0x2d8]
call fcn.00442139
cmp dword [eax], 0
jne 0x47ced8
and dword [ebp - 0x61c], 0
jmp 0x47cee2
mov dword [ebp - 0x61c], 1
mov eax, dword [ebp - 0x484]
cmp eax, dword [ebp - 0x61c]
jle 0x47cefc
mov dword [ebp - 0x48c], 1
jmp 0x47cf03
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x48c], eax
je 0x47cf1a
mov dword [ebp - 0x56c], 1
jmp 0x47cf21
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
sub eax, 0x470d45ea
jne 0x47cf37
and dword [ebp - 0x494], 0
jmp 0x47cf41
mov dword [ebp - 0x494], 1
cmp dword [ebp - 0x494], 0x20d70069
jge 0x47cf6c
mov byte [ebp - 0x92], 0
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x47cf67
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
jmp 0x47d4d0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0xa64], 0xffffffff
mov dword [ebp - 0xac], 0xd2a48b75
push 3
lea ecx, [ebp - 0x8f0]
call fcn.0044204b
mov dword [ebp - 0x5dc], 0x28d3
mov dword [ebp - 0x804], str.dzi_hpiurq_wwiudvobl
cmp dword [ebp - 0x5dc], 0x292f
jle 0x47d04f
and dword [ebp - 0x248], 0
jmp 0x47cfce
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0xfbe
jge 0x47d04f
and dword [ebp - 0x1c8], 0
jmp 0x47cff0
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x3c13
jge 0x47d04a
mov eax, dword [ebp - 0x248]
imul eax, dword [ebp - 0x1c8]
cdq
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x794], edx
push dword [ebp - 0x794]
push dword [ebp - 0x798]
lea ecx, [ebp - 0xcb8]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xcb8]
call fcn.00441f21
jmp 0x47cfe3
jmp 0x47cfc1
mov dword [ebp - 0xc4], 0xb711a46c
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x5dc], 0x2521
jge 0x47d078
push dword [ebp - 0x804]
call fcn.00499008
pop ecx
jmp 0x47d094
or dword [ebp - 4], 0xffffffff
jmp 0x47d09e
mov dword [ebp - 0x2c8], 0
jmp 0x47d0b7
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 3
jge 0x47d0d9
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0x8f0]
call fcn.00442139
mov dword [eax], 0x50b8378c
jmp 0x47d0aa
mov dword [ebp - 0x590], 0x1246
mov dword [ebp - 0x810], str.wiu_ufg_zxo_drsm_cvkeicdv_qumyj_fzir_vdmravyia_qgiuqi
cmp dword [ebp - 0x590], 0x14c7
jle 0x47d1c6
and dword [ebp - 0x1d8], 0
jmp 0x47d113
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xe3f
jge 0x47d1c6
and dword [ebp - 0x1d0], 0
jmp 0x47d139
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x3d9d
jge 0x47d1c1
and dword [ebp - 0x250], 0
jmp 0x47d15b
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x4b6
jge 0x47d1bc
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x250]
shl eax, cl
or eax, dword [ebp - 0x1d8]
cdq
mov dword [ebp - 0x7a4], eax
mov dword [ebp - 0x7a0], edx
push dword [ebp - 0x7a0]
push dword [ebp - 0x7a4]
lea ecx, [ebp - 0xc58]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xc58]
call fcn.00441f21
jmp 0x47d14e
jmp 0x47d12c
jmp 0x47d106
cmp dword [ebp - 0x38], 1
jge 0x47d1d8
mov dword [ebp - 0x49c], 1
jmp 0x47d1df
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x49c]
jg 0x47d1f6
mov dword [ebp - 0x574], 1
jmp 0x47d1fd
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x4a4], eax
mov esi, dword [ebp - 0x4a4]
push 0
lea ecx, [ebp - 0x660]
call fcn.00442139
mov dword [eax], esi
push 2
lea ecx, [ebp - 0x2d8]
call fcn.00442139
push 0
lea ecx, [ebp - 0x660]
call fcn.00442139
mov eax, dword [eax]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
dec eax
je 0x47d267
push 1
lea ecx, [ebp - 0x660]
call fcn.00442139
cmp dword [eax], 0
je 0x47d267
mov dword [ebp - 0x700], 1
jmp 0x47d26e
and dword [ebp - 0x700], 0
push 2
lea ecx, [ebp - 0x2d8]
call fcn.00442139
mov eax, dword [ebp - 0xac]
add eax, 0xffff
mov dword [ebp - 0x68], eax
je 0x47d2bb
push 2
lea ecx, [ebp - 0x8f0]
call fcn.00442139
cmp dword [eax], 0
je 0x47d2bb
push 0
lea ecx, [ebp - 0x660]
call fcn.00442139
cmp dword [eax], 0
je 0x47d2bb
mov dword [ebp - 0x5e4], 1
jmp 0x47d2c2
and dword [ebp - 0x5e4], 0
mov esi, dword [ebp - 0x57c]
add esi, dword [ebp - 0x5e4]
push 2
lea ecx, [ebp - 0x2d8]
call fcn.00442139
cmp esi, dword [eax]
jg 0x47d2eb
mov dword [ebp - 0x4ac], 1
jmp 0x47d2f2
and dword [ebp - 0x4ac], 0
push 2
lea ecx, [ebp - 0x8f0]
call fcn.00442139
mov ecx, dword [ebp - 0x4ac]
cmp ecx, dword [eax]
jl 0x47d315
mov dword [ebp - 0x4b4], 1
jmp 0x47d31c
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x57c]
cmp dword [ebp - 0x4b4], eax
jg 0x47d336
mov dword [ebp - 0x58c], 1
jmp 0x47d33d
and dword [ebp - 0x58c], 0
push 2
lea ecx, [ebp - 0x2d8]
call fcn.00442139
mov ecx, dword [ebp - 0x58c]
cmp ecx, dword [eax]
jge 0x47d360
mov dword [ebp - 0x4bc], 1
jmp 0x47d367
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0x192c249d
je 0x47d37f
mov dword [ebp - 0x584], 1
jmp 0x47d386
and dword [ebp - 0x584], 0
imul eax, dword [ebp - 0x584], 0x2858
add eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0xac]
jg 0x47d3aa
mov dword [ebp - 0x4c4], 1
jmp 0x47d3b1
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x4c4]
imul eax, dword [ebp - 0x38]
cmp eax, 0x495b2841
jl 0x47d3d2
mov dword [ebp - 0x87c], 1
jmp 0x47d3d9
and dword [ebp - 0x87c], 0
push 2
lea ecx, [ebp - 0x8f0]
call fcn.00442139
push 0
lea ecx, [ebp - 0x2d8]
call fcn.00442139
mov eax, dword [eax]
mov dword [ebp - 0x70c], eax
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x590], 0xfc3
jge 0x47d41a
push dword [ebp - 0x810]
call fcn.00499008
pop ecx
jmp 0x47d436
or dword [ebp - 4], 0xffffffff
jmp 0x47d440
mov dword [ebp - 0xc4], 0
jmp 0x47d459
cmp dword [ebp - 0xc4], 1
jg 0x47d4c5
mov dword [ebp - 0x4cc], 1
mov dword [ebp - 0xac], 0
jmp 0x47d485
lea ecx, [ebp - 0x8f0]
call fcn.0044211d
lea ecx, [ebp - 0x2d8]
call fcn.0044211d
jmp 0x47cccc
lea ecx, [ebp - 0x660]
call fcn.0044211d
mov dword [ebp - 0x354], 0x2947
mov dword [ebp - 0x8c4], str.zojq_zigggd_oyvpvp_qfikv_lgfxrnzns_ustvbp_luu_pzukckce
cmp dword [ebp - 0x354], 0x2b51
jle 0x47d5f3
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
and dword [ebp - 0xe8], 0
jmp 0x47d52d
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xdcd
jge 0x47d5f3
and dword [ebp - 0xe4], 0
jmp 0x47d553
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x58d5
jge 0x47d5ee
and dword [ebp - 0xf4], 0
jmp 0x47d579
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x1746
jge 0x47d5e9
and dword [ebp - 0xfc], 0
jmp 0x47d59b
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x1ac8
jge 0x47d5e7
mov eax, dword [ebp - 0xe8]
cdq
idiv dword [ebp - 0xe4]
xor edx, dword [ebp - 0xf4]
xor edx, dword [ebp - 0xfc]
mov eax, edx
cdq
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x7ac], edx
push dword [ebp - 0x7ac]
push dword [ebp - 0x7b0]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x47d58e
jmp 0x47d56c
jmp 0x47d546
jmp 0x47d520
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x354], 0x27fe
jge 0x47d616
mov edx, dword [ebp - 0x8c4]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x47d632
or dword [ebp - 4], 0xffffffff
jmp 0x47d63c
mov dword [ebp - 0xb4], 0x40d7f825
mov dword [ebp - 0xb4], 0
jmp 0x47d65f
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xfffffff5
jne 0x47d695
mov dword [ebp - 0x724], 0xffffffff
mov dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0
je 0x47d693
jmp 0x47d652
jmp 0x47d652
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb4], eax
movzx eax, byte [0xae16f4]
test eax, eax
je 0x47d6bf
mov esi, 0x5163f4
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x4801dc
mov dword [ebp - 0x360], 0x7013
mov dword [ebp - 0x368], 0x5ba7723
push 4
lea ecx, [ebp - 0xa20]
call fcn.0044204b
mov dword [ebp - 0x104], 0
jmp 0x47d6f9
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 4
jge 0x47d71b
push dword [ebp - 0x104]
lea ecx, [ebp - 0xa20]
call fcn.00442139
mov dword [eax], 0x4d073ff8
jmp 0x47d6ec
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x47d746
push 0x2466
push 0x153f
push 0x18b7
push 0x744
push 0x1bf8
call dword [sym.imp.GDI32.dll_Ellipse]
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x368], eax
jle 0x47d76c
mov dword [ebp - 0x370], 1
jmp 0x47d773
and dword [ebp - 0x370], 0
push 0
lea ecx, [ebp - 0xa20]
call fcn.00442139
mov ecx, dword [ebp - 0x370]
mov dword [eax], ecx
lea ecx, [ebp - 0xa20]
call fcn.0044211d
mov dword [ebp - 0xa6c], 0x5163f4
mov dword [ebp - 0x6c], 0xe83c773
mov dword [ebp - 0x2ec], 0x1bd77dfc
mov dword [ebp - 0x314], 2
mov dword [ebp - 0x6c], 0xfffffff8
cmp dword [ebp - 0x6c], 0
jne 0x47d7d1
mov dword [ebp - 0x378], 1
jmp 0x47d7d8
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x378], 0
je 0x47d803
mov byte [ebp - 0x94], 0
movzx eax, byte [ebp - 0x94]
test eax, eax
je 0x47d7fe
push 0xdb5
call dword [sym.imp.GDI32.dll_GetStockObject]
jmp 0x47da11
push 2
lea ecx, [ebp - 0x648]
call fcn.0044204b
push 1
lea ecx, [ebp - 0x908]
call fcn.0044204b
mov dword [ebp - 0x40], 0
jmp 0x47d82d
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x47d849
push dword [ebp - 0x40]
lea ecx, [ebp - 0x648]
call fcn.00442139
mov dword [eax], 0x348
jmp 0x47d826
mov dword [ebp - 0x40], 0
jmp 0x47d859
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x47d872
push dword [ebp - 0x40]
lea ecx, [ebp - 0x908]
call fcn.00442139
and dword [eax], 0
jmp 0x47d852
push 1
lea ecx, [ebp - 0x648]
call fcn.00442139
cmp dword [ebp - 0x6c], 0x3f08700d
je 0x47d894
mov dword [ebp - 0x380], 1
jmp 0x47d89b
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
sub eax, 7
imul eax, eax, 0xfffa
test eax, eax
je 0x47d8cc
push 0
lea ecx, [ebp - 0x908]
call fcn.00442139
cmp dword [eax], 0
je 0x47d8cc
mov dword [ebp - 0x388], 1
jmp 0x47d8d3
and dword [ebp - 0x388], 0
push 1
lea ecx, [ebp - 0x648]
call fcn.00442139
mov ecx, dword [ebp - 0x388]
cmp ecx, dword [eax]
jle 0x47d8f6
mov dword [ebp - 0x81c], 1
jmp 0x47d8fd
and dword [ebp - 0x81c], 0
push 0
lea ecx, [ebp - 0x908]
call fcn.00442139
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa38], eax
push 1
lea ecx, [ebp - 0x648]
call fcn.00442139
mov esi, eax
push 0
lea ecx, [ebp - 0x648]
call fcn.00442139
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x47d94a
mov dword [ebp - 0x390], 1
jmp 0x47d951
and dword [ebp - 0x390], 0
push 1
lea ecx, [ebp - 0x648]
call fcn.00442139
mov ecx, dword [ebp - 0x390]
add ecx, dword [eax]
mov dword [ebp - 0x2ec], ecx
cmp dword [ebp - 0x2ec], 0x6f80366e
jle 0x47d98d
mov eax, 0x67b
test eax, eax
je 0x47d98d
mov dword [ebp - 0x398], 1
jmp 0x47d994
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x398]
je 0x47d9ab
mov dword [ebp - 0x3a0], 1
jmp 0x47d9b2
and dword [ebp - 0x3a0], 0
imul eax, dword [ebp - 0x6c], 0xa80e
mov ecx, dword [ebp - 0x3a0]
sub ecx, dword [ebp - 0x6c]
cmp eax, ecx
jle 0x47d9d2
mov dword [ebp - 0x3a8], 1
jmp 0x47d9d9
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x2ec], eax
lea ecx, [ebp - 0x908]
call fcn.0044211d
lea ecx, [ebp - 0x648]
call fcn.0044211d
mov dword [ebp - 0xa40], 0x185299da
mov dword [ebp - 0xa48], 0xb0647dc4
mov dword [ebp - 0xa50], 0x5ab3e90a
mov dword [ebp - 0xa5c], 0x8faaaeb9
mov dword [ebp - 0x3b0], 0x7aa9
mov dword [ebp - 0x730], str.fgxk_rgsupk_feezwkygu_xmfbxv_ibtvout_jsmhprjk_hysgqxhzd_hry_yfhp_eoqfiqa_kgsnablkh
cmp dword [ebp - 0x3b0], 0x7cc9
jle 0x47daf3
and dword [ebp - 0x10c], 0
jmp 0x47da73
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x45b1
jge 0x47daf3
and dword [ebp - 0x114], 0
jmp 0x47da95
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x1674
jge 0x47daee
mov eax, dword [ebp - 0x10c]
or eax, dword [ebp - 0x114]
cdq
mov dword [ebp - 0x7c4], eax
mov dword [ebp - 0x7c0], edx
push dword [ebp - 0x7c0]
push dword [ebp - 0x7c4]
lea ecx, [ebp - 0xb80]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xb80]
call fcn.00441f21
jmp 0x47da88
jmp 0x47da66
mov dword [ebp - 0x3b8], 0xbc38
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x3b0], 0x79d8
jge 0x47db1c
push dword [ebp - 0x730]
call fcn.00499008
pop ecx
jmp 0x47db38
or dword [ebp - 4], 0xffffffff
jmp 0x47db42
mov dword [ebp - 0x11c], 0
jmp 0x47db5b
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x47db77
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0xb20], 0
jmp 0x47db4e
mov eax, dword [ebp - 0x3b8]
dec eax
mov dword [ebp - 0x3b8], eax
push 1
lea ecx, [ebp - 0xa14]
call fcn.0044204b
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0xdc], 0
jmp 0x47dbb4
cmp dword [ebp - 0xdc], 1
jge 0x47dbd6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret