Function at 0x470321
Capabilities:
Contain obfuscated stackstrings
Encrypt data using speck
Get graphical window text
Query service status
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b5ef7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2ea8
call fcn.004a5670
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1728], 0x1e09
push 2
lea ecx, [ebp - 0x2368]
call fcn.004293d0
mov dword [ebp - 0x620], 0
jmp 0x47037a
mov eax, dword [ebp - 0x620]
inc eax
mov dword [ebp - 0x620], eax
cmp dword [ebp - 0x620], 2
jge 0x47039c
push dword [ebp - 0x620]
lea ecx, [ebp - 0x2368]
call fcn.004294be
mov dword [eax], 1
jmp 0x47036d
mov byte [ebp - 0x2a8], 0
movzx eax, byte [ebp - 0x2a8]
test eax, eax
je 0x4703bd
push 0x97f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 1
lea ecx, [ebp - 0x2368]
call fcn.004294be
and dword [eax], 0
lea ecx, [ebp - 0x2368]
call fcn.004294a2
push 2
lea ecx, [ebp - 0x2458]
call fcn.004293d0
mov dword [ebp - 0x430], 0
jmp 0x4703fe
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 2
jge 0x470420
push dword [ebp - 0x430]
lea ecx, [ebp - 0x2458]
call fcn.004294be
mov dword [eax], 1
jmp 0x4703f1
mov byte [ebp - 0x22f], 0
movzx eax, byte [ebp - 0x22f]
test eax, eax
je 0x470441
push 0x97f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 1
lea ecx, [ebp - 0x2458]
call fcn.004294be
and dword [eax], 0
lea ecx, [ebp - 0x2458]
call fcn.004294a2
mov dword [ebp - 0x360], 0x3ad3b315
mov dword [ebp - 0x1774], 1
mov dword [ebp - 0x864], 0x3e86
push 4
lea ecx, [ebp - 0x1988]
call fcn.004293d0
mov dword [ebp - 0x1bcc], 0xa796
mov dword [ebp - 0x1bdc], 0x1d4595a2
mov dword [ebp - 0xdc], 0
jmp 0x4704b4
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 4
jge 0x4704d6
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x1988]
call fcn.004294be
mov dword [eax], 0xfffffffa
jmp 0x4704a7
mov dword [ebp - 0xdc], 0
jmp 0x4704ef
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x47050b
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x2ac8], 1
jmp 0x4704e2
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x360], eax
jg 0x470525
mov dword [ebp - 0xc24], 1
jmp 0x47052c
and dword [ebp - 0xc24], 0
mov eax, dword [ebp - 0xc24]
mov dword [ebp - 0x1774], eax
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x1774], eax
jge 0x470552
mov dword [ebp - 0x1794], 1
jmp 0x470559
and dword [ebp - 0x1794], 0
push 3
lea ecx, [ebp - 0x1988]
call fcn.004294be
cmp dword [eax], 0
jne 0x47057d
cmp dword [ebp - 0x864], 0
jne 0x47057d
and dword [ebp - 0x177c], 0
jmp 0x470587
mov dword [ebp - 0x177c], 1
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x177c], eax
jl 0x4705a1
mov dword [ebp - 0x1784], 1
jmp 0x4705a8
and dword [ebp - 0x1784], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x1784], eax
jne 0x4705c8
mov eax, 0xb9c2
test eax, eax
jne 0x4705c8
and dword [ebp - 0x19e8], 0
jmp 0x4705d2
mov dword [ebp - 0x19e8], 1
push 3
lea ecx, [ebp - 0x1988]
call fcn.004294be
mov ecx, dword [ebp - 0x1bcc]
cmp dword [eax], ecx
jle 0x4705f5
mov dword [ebp - 0x178c], 1
jmp 0x4705fc
and dword [ebp - 0x178c], 0
mov eax, dword [ebp - 0x864]
cmp dword [ebp - 0x178c], eax
jg 0x470618
xor eax, eax
inc eax
jne 0x470618
and dword [ebp - 0x1bd4], 0
jmp 0x470622
mov dword [ebp - 0x1bd4], 1
mov esi, dword [ebp - 0x864]
push 3
lea ecx, [ebp - 0x1988]
call fcn.004294be
cmp esi, dword [eax]
jle 0x470654
push 3
lea ecx, [ebp - 0x1988]
call fcn.004294be
cmp dword [eax], 0
jne 0x470654
and dword [ebp - 0x914], 0
jmp 0x47065e
mov dword [ebp - 0x914], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x914]
mov dword [ebp + eax - 0x2ac8], ecx
mov eax, dword [ebp - 0x1794]
cmp eax, dword [ebp - 0x914]
je 0x47068b
mov dword [ebp - 0x179c], 1
jmp 0x470692
and dword [ebp - 0x179c], 0
mov eax, dword [ebp - 0x179c]
mov dword [ebp - 0x1bdc], eax
lea ecx, [ebp - 0x1988]
call fcn.004294a2
mov dword [ebp - 0x1bc4], str.vzuv_uhmgjz_zhrfrnqli_qkl_oxvof_nqkquok_nnjq_jdtoblnik_vtn_apugh_zqwxpkzp_kckf
mov dword [ebp - 0x2b0], 0x871c7bf0
mov dword [ebp - 0x1e44], 0xffffffff
mov dword [ebp - 0x1e4c], 1
mov dword [ebp - 0xa24], 1
mov dword [ebp - 0xa1c], 0xbdae4f9d
mov dword [ebp - 0x964], 0xdadf8609
mov dword [ebp - 0x1e54], 0x8f738f58
mov dword [ebp - 0x874], 0x20604811
mov dword [ebp - 0x1e5c], 4
mov dword [ebp - 0x15c], 0
jmp 0x470726
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jge 0x470742
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x20dc], 0xa6847dfa
jmp 0x470719
mov dword [ebp - 0x15c], 0
jmp 0x47075b
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jge 0x470777
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x2710], 0
jmp 0x47074e
mov dword [ebp - 0x2b0], 0
jmp 0x470790
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 2
jg 0x470c15
mov dword [ebp - 0x2960], 0xf9d44c03
mov dword [ebp - 0x2644], 0x41637c1d
mov dword [ebp - 0x29b8], 0x32a1
mov dword [ebp - 0x264c], 0
mov dword [ebp - 0x1560], 0x5ba13b28
mov dword [ebp - 0x28e4], 0x6c4a87fc
mov dword [ebp - 0x2654], 0xfffffff7
mov dword [ebp - 0x2ab0], 4
mov dword [ebp - 0x265c], 8
mov dword [ebp - 0x17cc], 0xc0faab39
mov dword [ebp - 0x1e34], 0xffffffff
mov dword [ebp - 0x3f8], 0xfffffffc
mov dword [ebp - 0x1e24], 0xfffffffa
mov dword [ebp - 0x400], 0xa025ec56
mov dword [ebp - 0x28ec], 3
mov dword [ebp - 0x86c], 5
mov dword [ebp - 0x1e1c], 0x14a1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x20dc]
mov dword [ebp - 0x17a4], eax
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x17a4]
mov dword [ebp + eax*4 - 0x20dc], ecx
cmp dword [ebp - 0x17a4], 3
jle 0x470881
mov dword [ebp - 0x17bc], 1
jmp 0x470888
and dword [ebp - 0x17bc], 0
mov eax, 0xbac8ef34
test eax, eax
je 0x4708a6
cmp dword [ebp - 0x3f8], 0
je 0x4708a6
mov dword [ebp - 0x17ac], 1
jmp 0x4708ad
and dword [ebp - 0x17ac], 0
mov eax, dword [ebp - 0x86c]
sub eax, dword [ebp - 0x17ac]
mov dword [ebp - 0x1be4], eax
mov eax, dword [ebp - 0x86c]
dec eax
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x1be4], 0
jne 0x4708e1
mov dword [ebp - 0x17b4], 1
jmp 0x4708e8
and dword [ebp - 0x17b4], 0
cmp dword [ebp - 0x17b4], 0x744ed25e
jne 0x470900
mov dword [ebp - 0x17c4], 1
jmp 0x470907
and dword [ebp - 0x17c4], 0
mov eax, dword [ebp - 0x17bc]
add eax, dword [ebp - 0x17c4]
mov dword [ebp - 0x17cc], eax
jne 0x47092d
cmp dword [ebp - 0x1560], 0
jne 0x47092d
and dword [ebp - 0x17d4], 0
jmp 0x470937
mov dword [ebp - 0x17d4], 1
mov eax, dword [ebp - 0x17d4]
mov dword [ebp - 0xa1c], eax
mov dword [ebp - 0x400], 2
jmp 0x47095c
mov eax, dword [ebp - 0x400]
dec eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0
jl 0x470c10
mov dword [ebp - 0x3c8], 1
mov dword [ebp - 0x215c], 0xfffffffe
mov dword [ebp - 0x2158], 0xfffffffe
mov dword [ebp - 0x2154], 0xfffffffe
mov dword [ebp - 0x2150], 0xfffffffe
mov dword [ebp - 0x1684], 0xfffffff9
mov dword [ebp - 0x3f8], 0
jmp 0x4709be
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 2
jg 0x470c0b
mov dword [ebp - 0x798], 0
jmp 0x4709e4
mov eax, dword [ebp - 0x798]
inc eax
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 1
jge 0x470a00
mov eax, dword [ebp - 0x798]
mov dword [ebp + eax*4 - 0x310], 0x392e
jmp 0x4709d7
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b0]
mov ecx, dword [ebp + ecx*4 - 0x20dc]
cmp dword [ebp + eax - 0x310], ecx
jl 0x470a28
mov dword [ebp - 0x17dc], 1
jmp 0x470a2f
and dword [ebp - 0x17dc], 0
mov eax, dword [ebp - 0x17dc]
sub eax, dword [ebp - 0x3c8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x215c]
jg 0x470a56
mov dword [ebp - 0x1848], 1
jmp 0x470a5d
and dword [ebp - 0x1848], 0
cmp dword [ebp - 0x1848], 0xffff
jb 0x470a85
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x310], 0
je 0x470a85
mov dword [ebp - 0x1bec], 1
jmp 0x470a8c
and dword [ebp - 0x1bec], 0
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x2664], eax
cmp dword [ebp - 0x1560], 0
je 0x470ab3
mov eax, 0x72679f1a
test eax, eax
je 0x470ab3
and dword [ebp - 0xa0c], 0
jmp 0x470abd
mov dword [ebp - 0xa0c], 1
mov eax, dword [ebp - 0x1684]
cmp dword [ebp - 0xa0c], eax
jge 0x470ad7
mov dword [ebp - 0xa14], 1
jmp 0x470ade
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x1684]
add eax, dword [ebp - 0xa14]
jne 0x470afe
mov eax, 0xc3d34e0b
test eax, eax
jne 0x470afe
and dword [ebp - 0x1bf4], 0
jmp 0x470b08
mov dword [ebp - 0x1bf4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x310]
mov dword [ebp - 0x29cc], eax
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x400], eax
jne 0x470b42
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x310], 0
jne 0x470b42
and dword [ebp - 0x168c], 0
jmp 0x470b4c
mov dword [ebp - 0x168c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x310]
cmp dword [ebp - 0x168c], eax
jl 0x470b6d
mov dword [ebp - 0x1e14], 1
jmp 0x470b74
and dword [ebp - 0x1e14], 0
mov eax, dword [ebp - 0x1e1c]
mov dword [ebp - 0x266c], eax
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0x28f4], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x2674], eax
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x1e24], eax
jge 0x470bb2
mov dword [ebp - 0x1e2c], 1
jmp 0x470bb9
and dword [ebp - 0x1e2c], 0
mov eax, dword [ebp - 0x1e34]
mov dword [ebp - 0x2a5c], eax
mov eax, dword [ebp - 0x874]
sub eax, dword [ebp - 0x874]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x215c]
cmp dword [ebp - 0x3c8], eax
jge 0x470bf3
mov dword [ebp - 0x1694], 1
jmp 0x470bfa
and dword [ebp - 0x1694], 0
mov eax, dword [ebp - 0x1694]
mov dword [ebp - 0x964], eax
jmp 0x4709b1
jmp 0x47094f
jmp 0x470783
cmp dword [ebp - 0x964], 9
jae 0x470c2a
mov dword [ebp - 0x1e3c], 1
jmp 0x470c31
and dword [ebp - 0x1e3c], 0
mov eax, dword [ebp - 0x964]
mov dword [ebp - 0x267c], eax
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x28fc], eax
mov eax, dword [ebp - 0x874]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x20dc]
cmp eax, dword [ebp - 0x1e44]
jl 0x470c6c
cmp dword [ebp - 0x1e4c], 0
xor eax, eax
sub eax, dword [ebp - 0x1e54]
cmp eax, dword [ebp - 0x1e5c]
jg 0x470c88
mov dword [ebp - 0x169c], 1
jmp 0x470c8f
and dword [ebp - 0x169c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x169c]
mov dword [ebp + eax - 0x2710], ecx
mov dword [ebp - 0x318], 0x3ad3b315
mov dword [ebp - 0x16a4], 1
mov dword [ebp - 0x91c], 0x3e86
push 4
lea ecx, [ebp - 0x19c4]
call fcn.004293d0
mov dword [ebp - 0x1e6c], 0xa796
mov dword [ebp - 0x1e7c], 0x1d4595a2
mov dword [ebp - 0xe4], 0
jmp 0x470cfa
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 4
jge 0x470d1c
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x19c4]
call fcn.004294be
mov dword [eax], 0xfffffffa
jmp 0x470ced
mov dword [ebp - 0xe4], 0
jmp 0x470d35
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x470d51
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x2b7c], 1
jmp 0x470d28
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x318], eax
jg 0x470d6b
mov dword [ebp - 0xa2c], 1
jmp 0x470d72
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0xa2c]
mov dword [ebp - 0x16a4], eax
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x16a4], eax
jge 0x470d98
mov dword [ebp - 0x16b4], 1
jmp 0x470d9f
and dword [ebp - 0x16b4], 0
push 3
lea ecx, [ebp - 0x19c4]
call fcn.004294be
cmp dword [eax], 0
jne 0x470dc3
cmp dword [ebp - 0x91c], 0
jne 0x470dc3
and dword [ebp - 0xa34], 0
jmp 0x470dcd
mov dword [ebp - 0xa34], 1
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0xa34], eax
jl 0x470de7
mov dword [ebp - 0x16ac], 1
jmp 0x470dee
and dword [ebp - 0x16ac], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x16ac], eax
jne 0x470e0e
mov eax, 0xb9c2
test eax, eax
jne 0x470e0e
and dword [ebp - 0x1e64], 0
jmp 0x470e18
mov dword [ebp - 0x1e64], 1
push 3
lea ecx, [ebp - 0x19c4]
call fcn.004294be
mov ecx, dword [ebp - 0x1e6c]
cmp dword [eax], ecx
jle 0x470e3b
mov dword [ebp - 0xa3c], 1
jmp 0x470e42
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0x91c]
cmp dword [ebp - 0xa3c], eax
jg 0x470e5e
xor eax, eax
inc eax
jne 0x470e5e
and dword [ebp - 0x1e74], 0
jmp 0x470e68
mov dword [ebp - 0x1e74], 1
mov esi, dword [ebp - 0x91c]
push 3
lea ecx, [ebp - 0x19c4]
call fcn.004294be
cmp esi, dword [eax]
jle 0x470e9a
push 3
lea ecx, [ebp - 0x19c4]
call fcn.004294be
cmp dword [eax], 0
jne 0x470e9a
and dword [ebp - 0x87c], 0
jmp 0x470ea4
mov dword [ebp - 0x87c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x87c]
mov dword [ebp + eax - 0x2b7c], ecx
mov eax, dword [ebp - 0x16b4]
cmp eax, dword [ebp - 0x87c]
je 0x470ed1
mov dword [ebp - 0xa44], 1
jmp 0x470ed8
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0x1e7c], eax
lea ecx, [ebp - 0x19c4]
call fcn.004294a2
mov dword [ebp - 0xadc], 0x4c17
mov dword [ebp - 0x304], 0x871c7bf0
mov dword [ebp - 0x1ecc], 0xffffffff
mov dword [ebp - 0x1ed4], 1
mov dword [ebp - 0x16fc], 1
mov dword [ebp - 0x16f4], 0xbdae4f9d
mov dword [ebp - 0x884], 0xdadf8609
mov dword [ebp - 0x1edc], 0x8f738f58
mov dword [ebp - 0x924], 0x20604811
mov dword [ebp - 0x1f2c], 4
mov dword [ebp - 0x184], 0
jmp 0x470f6c
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x470f88
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x20f4], 0xa6847dfa
jmp 0x470f5f
mov dword [ebp - 0x184], 0
jmp 0x470fa1
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x470fbd
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x2948], 0
jmp 0x470f94
mov dword [ebp - 0x304], 0
jmp 0x470fd6
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 2
jg 0x47145b
mov dword [ebp - 0x2684], 0xf9d44c03
mov dword [ebp - 0x29e0], 0x41637c1d
mov dword [ebp - 0x268c], 0x32a1
mov dword [ebp - 0x2904], 0
mov dword [ebp - 0xa6c], 0x5ba13b28
mov dword [ebp - 0x2694], 0x6c4a87fc
mov dword [ebp - 0x2a8c], 0xfffffff7
mov dword [ebp - 0x269c], 4
mov dword [ebp - 0x290c], 8
mov dword [ebp - 0xa5c], 0xc0faab39
mov dword [ebp - 0x1ebc], 0xffffffff
mov dword [ebp - 0x390], 0xfffffffc
mov dword [ebp - 0x1eac], 0xfffffffa
mov dword [ebp - 0x320], 0xa025ec56
mov dword [ebp - 0x26a4], 3
mov dword [ebp - 0x97c], 5
mov dword [ebp - 0x1ea4], 0x14a1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x20f4]
mov dword [ebp - 0x16bc], eax
mov eax, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x16bc]
mov dword [ebp + eax*4 - 0x20f4], ecx
cmp dword [ebp - 0x16bc], 3
jle 0x4710c7
mov dword [ebp - 0xa54], 1
jmp 0x4710ce
and dword [ebp - 0xa54], 0
mov eax, 0xbac8ef34
test eax, eax
je 0x4710ec
cmp dword [ebp - 0x390], 0
je 0x4710ec
mov dword [ebp - 0xa4c], 1
jmp 0x4710f3
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0x97c]
sub eax, dword [ebp - 0xa4c]
mov dword [ebp - 0x1e84], eax
mov eax, dword [ebp - 0x97c]
dec eax
mov dword [ebp - 0x97c], eax
cmp dword [ebp - 0x1e84], 0
jne 0x471127
mov dword [ebp - 0x16c4], 1
jmp 0x47112e
and dword [ebp - 0x16c4], 0
cmp dword [ebp - 0x16c4], 0x744ed25e
jne 0x471146
mov dword [ebp - 0x16cc], 1
jmp 0x47114d
and dword [ebp - 0x16cc], 0
mov eax, dword [ebp - 0xa54]
add eax, dword [ebp - 0x16cc]
mov dword [ebp - 0xa5c], eax
jne 0x471173
cmp dword [ebp - 0xa6c], 0
jne 0x471173
and dword [ebp - 0x16d4], 0
jmp 0x47117d
mov dword [ebp - 0x16d4], 1
mov eax, dword [ebp - 0x16d4]
mov dword [ebp - 0x16f4], eax
mov dword [ebp - 0x320], 2
jmp 0x4711a2
mov eax, dword [ebp - 0x320]
dec eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0
jl 0x471456
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x214c], 0xfffffffe
mov dword [ebp - 0x2148], 0xfffffffe
mov dword [ebp - 0x2144], 0xfffffffe
mov dword [ebp - 0x2140], 0xfffffffe
mov dword [ebp - 0xa74], 0xfffffff9
mov dword [ebp - 0x390], 0
jmp 0x471204
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 2
jg 0x471451
mov dword [ebp - 0x438], 0
jmp 0x47122a
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 1
jge 0x471246
mov eax, dword [ebp - 0x438]
mov dword [ebp + eax*4 - 0x3e8], 0x392e
jmp 0x47121d
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x304]
mov ecx, dword [ebp + ecx*4 - 0x20f4]
cmp dword [ebp + eax - 0x3e8], ecx
jl 0x47126e
mov dword [ebp - 0xa64], 1
jmp 0x471275
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0xa64]
sub eax, dword [ebp - 0x328]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x214c]
jg 0x47129c
mov dword [ebp - 0x16dc], 1
jmp 0x4712a3
and dword [ebp - 0x16dc], 0
cmp dword [ebp - 0x16dc], 0xffff
jb 0x4712cb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e8], 0
je 0x4712cb
mov dword [ebp - 0x1e8c], 1
jmp 0x4712d2
and dword [ebp - 0x1e8c], 0
mov eax, dword [ebp - 0x16fc]
mov dword [ebp - 0x29f4], eax
cmp dword [ebp - 0xa6c], 0
je 0x4712f9
mov eax, 0x72679f1a
test eax, eax
je 0x4712f9
and dword [ebp - 0x16e4], 0
jmp 0x471303
mov dword [ebp - 0x16e4], 1
mov eax, dword [ebp - 0xa74]
cmp dword [ebp - 0x16e4], eax
jge 0x47131d
mov dword [ebp - 0x16ec], 1
jmp 0x471324
and dword [ebp - 0x16ec], 0
mov eax, dword [ebp - 0xa74]
add eax, dword [ebp - 0x16ec]
jne 0x471344
mov eax, 0xc3d34e0b
test eax, eax
jne 0x471344
and dword [ebp - 0x1e94], 0
jmp 0x47134e
mov dword [ebp - 0x1e94], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e8]
mov dword [ebp - 0x26ac], eax
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x320], eax
jne 0x471388
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e8], 0
jne 0x471388
and dword [ebp - 0xa7c], 0
jmp 0x471392
mov dword [ebp - 0xa7c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e8]
cmp dword [ebp - 0xa7c], eax
jl 0x4713b3
mov dword [ebp - 0x1e9c], 1
jmp 0x4713ba
and dword [ebp - 0x1e9c], 0
mov eax, dword [ebp - 0x1ea4]
mov dword [ebp - 0x2914], eax
mov eax, dword [ebp - 0x16f4]
mov dword [ebp - 0x26b4], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x2a64], eax
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x1eac], eax
jge 0x4713f8
mov dword [ebp - 0x1eb4], 1
jmp 0x4713ff
and dword [ebp - 0x1eb4], 0
mov eax, dword [ebp - 0x1ebc]
mov dword [ebp - 0x26bc], eax
mov eax, dword [ebp - 0x924]
sub eax, dword [ebp - 0x924]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x214c]
cmp dword [ebp - 0x328], eax
jge 0x471439
mov dword [ebp - 0xa84], 1
jmp 0x471440
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0x884], eax
jmp 0x4711f7
jmp 0x471195
jmp 0x470fc9
cmp dword [ebp - 0x884], 9
jae 0x471470
mov dword [ebp - 0x1ec4], 1
jmp 0x471477
and dword [ebp - 0x1ec4], 0
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0x291c], eax
mov eax, dword [ebp - 0x16fc]
mov dword [ebp - 0x26c4], eax
mov eax, dword [ebp - 0x924]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x20f4]
cmp eax, dword [ebp - 0x1ecc]
jl 0x4714b2
cmp dword [ebp - 0x1ed4], 0
xor eax, eax
sub eax, dword [ebp - 0x1edc]
cmp eax, dword [ebp - 0x1f2c]
jg 0x4714ce
mov dword [ebp - 0xa8c], 1
jmp 0x4714d5
and dword [ebp - 0xa8c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa8c]
mov dword [ebp + eax - 0x2948], ecx
mov dword [ebp - 0x440], 2
mov dword [ebp - 0x2a08], 0
mov dword [ebp - 0x26cc], 0x787d6364
mov dword [ebp - 0x628], 0
jmp 0x47151f
mov eax, dword [ebp - 0x628]
inc eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 2
jge 0x47153b
mov eax, dword [ebp - 0x628]
mov dword [ebp + eax*4 - 0x2bb4], 0x5f70
jmp 0x471512
mov dword [ebp - 0x440], 1
jmp 0x471554
mov eax, dword [ebp - 0x440]
dec eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0
jl 0x4717aa
mov dword [ebp - 0x448], 8
push 2
lea ecx, [ebp - 0x2780]
call fcn.004293d0
mov dword [ebp - 0x720], 0
jmp 0x471591
mov eax, dword [ebp - 0x720]
inc eax
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 2
jge 0x4715b3
push dword [ebp - 0x720]
lea ecx, [ebp - 0x2780]
call fcn.004294be
mov dword [eax], 1
jmp 0x471584
mov byte [ebp - 0x26d], 0
movzx eax, byte [ebp - 0x26d]
test eax, eax
je 0x4715e5
push 0
push 0x1e6a
push 0x1720
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
mov dword [ebp - 0x448], 1
jmp 0x4715fe
mov eax, dword [ebp - 0x448]
dec eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0
jl 0x47179a
mov dword [ebp - 0x630], 0x8748afa2
mov dword [ebp - 0x2924], 0x1c58bdfa
mov dword [ebp - 0x26d4], 4
mov dword [ebp - 0x2aa8], 0
mov dword [ebp - 0x26dc], 0xffffffff
mov dword [ebp - 0x292c], 5
mov dword [ebp - 0x630], 1
jmp 0x471660
mov eax, dword [ebp - 0x630]
dec eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0
jl 0x471795
mov dword [ebp - 0x7d8], 0x58a835a2
mov dword [ebp - 0x26e4], 0
mov dword [ebp - 0x450], 0
jmp 0x47169a
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 2
jge 0x4716b6
mov eax, dword [ebp - 0x450]
mov dword [ebp + eax*4 - 0x2c14], 0x64a90c6d
jmp 0x47168d
mov dword [ebp - 0x7d8], 0
jmp 0x4716cf
mov eax, dword [ebp - 0x7d8]
inc eax
mov dword [ebp - 0x7d8], eax
cmp dword [ebp - 0x7d8], 1
jg 0x471790
mov dword [ebp - 0x410], 0x9bd697e7
mov dword [ebp - 0x2a1c], 0xfffffff9
mov dword [ebp - 0x26ec], 0
mov dword [ebp - 0x1704], 0xfffffffc
mov dword [ebp - 0x458], 0
jmp 0x47171d
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 1
jge 0x471739
mov eax, dword [ebp - 0x458]
mov dword [ebp + eax*4 - 0x2934], 0x3c3d2146
jmp 0x471710
mov dword [ebp - 0x410], 0
jmp 0x471752
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 1
jg 0x47177e
mov byte [ebp - 0x231], 0
movzx eax, byte [ebp - 0x231]
test eax, eax
je 0x47177c
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x471745
mov eax, dword [ebp - 0x1704]
dec eax
mov dword [ebp - 0x1704], eax
jmp 0x4716c2
jmp 0x471653
jmp 0x4715f1
lea ecx, [ebp - 0x2780]
call fcn.004294a2
jmp 0x471547
mov dword [ebp - 0x1f74], str.hopjk_duaoz_tdku_fyyuonamg_ektbzt_tepigk_dutnu_esen_udkb_gpktzrtl_jcn_epoahk_pax
mov dword [ebp - 0x398], 0
mov dword [ebp - 0xa94], 0xf845d811
mov dword [ebp - 0x1f34], 0x44ad3740
mov byte [ebp - 0x2a7], 0
movzx eax, byte [ebp - 0x2a7]
test eax, eax
je 0x4717ea
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
mov dword [ebp - 0x398], 0
jmp 0x471803
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x13
jge 0x471871
mov dword [ebp - 0x24bc], 0x662a2b3b
mov dword [ebp - 0x24b8], 0x662a2b3b
mov dword [ebp - 0x24b4], 0x662a2b3b
mov dword [ebp - 0x24b0], 0x662a2b3b
mov dword [ebp - 0xa94], 0xb165
mov eax, dword [ebp - 0x398]
add eax, dword [ebp - 0xa94]
mov dword [ebp - 0x170c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x170c]
mov dword [ebp + eax - 0x24bc], ecx
mov eax, dword [ebp - 0x170c]
mov dword [ebp - 0x1f34], eax
jmp 0x4717f6
cmp dword [ebp - 0xadc], 0x4eba
jle 0x471e42
mov dword [ebp - 0x1a0], 0xc3837ace
mov dword [ebp - 0x728], 0xffffffff
mov dword [ebp - 0x330], 0xffffffff
mov dword [ebp - 0x172c], 0x7718da91
mov dword [ebp - 0xac4], 0xfffffffb
mov dword [ebp - 0x26f4], 0xcdaa9320
mov dword [ebp - 0x638], 0
jmp 0x4718d6
mov eax, dword [ebp - 0x638]
inc eax
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x638], 1
jge 0x4718f2
mov eax, dword [ebp - 0x638]
mov dword [ebp + eax*4 - 0x194], 0xb9f9b31
jmp 0x4718c9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x194], 0xffffffef
jmp 0x471920
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x194]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x194], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x194], 0xfffffffd
jg 0x471d1a
mov dword [ebp - 0x1a4], 0xd00693e9
mov dword [ebp - 0x460], 0
jmp 0x471957
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 1
jge 0x471973
mov eax, dword [ebp - 0x460]
mov dword [ebp + eax*4 - 0x88c], 0xbbd4aa41
jmp 0x47194a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x194]
mov dword [ebp - 0x2a6c], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x26fc], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x293c], eax
mov dword [ebp - 0x1a0], 0x1ab4
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x728], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x194]
cmp dword [ebp - 0x728], eax
jle 0x4719d5
mov dword [ebp - 0x1f3c], 1
jmp 0x4719dc
and dword [ebp - 0x1f3c], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x1a0], eax
jle 0x4719fc
mov eax, 0xbd13
test eax, eax
jne 0x4719fc
and dword [ebp - 0xa9c], 0
jmp 0x471a06
mov dword [ebp - 0xa9c], 1
cmp dword [ebp - 0xa9c], 0
jle 0x471a1b
mov dword [ebp - 0x1714], 1
jmp 0x471a22
and dword [ebp - 0x1714], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x194]
cmp dword [ebp - 0x1714], eax
jle 0x471a43
mov dword [ebp - 0xaa4], 1
jmp 0x471a4a
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x330], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x194]
cmp dword [ebp - 0x330], eax
jle 0x471b0c
mov dword [ebp - 0x1a0], 0
jmp 0x471a8e
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jl 0x471ae0
mov byte [ebp - 0x233], 0
movzx eax, byte [ebp - 0x233]
test eax, eax
je 0x471abd
push 0
push 0x209f
push 0x9aa
push 0
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
mov byte [ebp - 0x275], 0
movzx eax, byte [ebp - 0x275]
test eax, eax
je 0x471ade
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetMenu]
jmp 0x471a81
mov byte [ebp - 0x235], 0
movzx eax, byte [ebp - 0x235]
test eax, eax
je 0x471b07
push 0
push 0x14ba
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x471d15
mov dword [ebp - 0xec], 0
jmp 0x471b25
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x471b41
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x2790], 1
jmp 0x471b18
mov dword [ebp - 0xec], 0
jmp 0x471b5a
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x471b76
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x2b94], 0x57b06f86
jmp 0x471b4d
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x2704], eax
xor eax, eax
inc eax
je 0x471b90
cmp dword [ebp - 0x1a4], 0
jne 0x471ba2
cmp dword [ebp - 0x172c], 0
jne 0x471ba2
and dword [ebp - 0x171c], 0
jmp 0x471bac
mov dword [ebp - 0x171c], 1
cmp dword [ebp - 0x171c], 0xfff7
jbe 0x471bd4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88c], 0
je 0x471bd4
mov dword [ebp - 0xaac], 1
jmp 0x471bdb
and dword [ebp - 0xaac], 0
cmp dword [ebp - 0xaac], 1
ja 0x471bf0
mov dword [ebp - 0x1f44], 1
jmp 0x471bf7
and dword [ebp - 0x1f44], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x2a24], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x2a2c], eax
push 8
pop eax
cmp eax, 0x2576
jne 0x471c25
mov dword [ebp - 0x1724], 1
jmp 0x471c2c
and dword [ebp - 0x1724], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88c]
cmp dword [ebp - 0x1724], eax
jl 0x471c4d
mov dword [ebp - 0xab4], 1
jmp 0x471c54
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0x1a4]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2790]
add ecx, dword [ebp - 0xab4]
imul eax, ecx
cmp eax, dword [ebp - 0x172c]
jle 0x471c84
mov dword [ebp - 0xabc], 1
jmp 0x471c8b
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0x728]
cmp dword [ebp - 0xabc], eax
jne 0x471ca5
mov dword [ebp - 0x1f4c], 1
jmp 0x471cac
and dword [ebp - 0x1f4c], 0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x273c], eax
mov eax, dword [ebp - 0x330]
cmp dword [ebp - 0x1a4], eax
jle 0x471cd2
mov dword [ebp - 0x1734], 1
jmp 0x471cd9
and dword [ebp - 0x1734], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88c]
imul eax, dword [ebp - 0x1734]
neg eax
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x2b94]
mov dword [ebp - 0xac4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac4]
mov dword [ebp + eax - 0x2790], ecx
jmp 0x471905
and dword [ebp - 0x470], 0
jmp 0x471d30
mov eax, dword [ebp - 0x470]
inc eax
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0x6254
jge 0x471e42
push 1
lea ecx, [ebp - 0x27a0]
call fcn.004293d0
mov dword [ebp - 0x640], 0xc4d8e5cc
mov dword [ebp - 0x468], 0
jmp 0x471d70
mov eax, dword [ebp - 0x468]
inc eax
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 1
jge 0x471d92
push dword [ebp - 0x468]
lea ecx, [ebp - 0x27a0]
call fcn.004294be
mov dword [eax], 0xd3df75dc
jmp 0x471d63
mov dword [ebp - 0x640], 0
jmp 0x471dab
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 0
jg 0x471ddc
mov byte [ebp - 0x29f], 0
movzx eax, byte [ebp - 0x29f]
test eax, eax
je 0x471dda
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
jmp 0x471d9e
lea ecx, [ebp - 0x27a0]
call fcn.004294a2
and dword [ebp - 0x7a0], 0
jmp 0x471dfd
mov eax, dword [ebp - 0x7a0]
inc eax
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 0x61ae
jge 0x471e3d
mov eax, dword [ebp - 0x470]
cdq
idiv dword [ebp - 0x7a0]
mov eax, edx
cdq
mov dword [ebp - 0x1c00], eax
mov dword [ebp - 0x1bfc], edx
push dword [ebp - 0x1bfc]
push dword [ebp - 0x1c00]
mov ecx, 0xac0340
call fcn.004850fd
jmp 0x471df0
jmp 0x471d23
cmp dword [ebp - 0x1728], 0x1f46
jle 0x4723da
and dword [ebp - 0x738], 0
jmp 0x471e68
mov eax, dword [ebp - 0x738]
inc eax
mov dword [ebp - 0x738], eax
cmp dword [ebp - 0x738], 0x53c9
jge 0x4723da
mov dword [ebp - 0xad4], 0x7d3e
mov dword [ebp - 0x1f6c], str.djgqrir_opq_mexdfcv_byrzmvqn_zvdqb_cwpwlm
cmp dword [ebp - 0xad4], 0x7d5a
jle 0x471f73
and dword [ebp - 0x478], 0
jmp 0x471eb2
mov eax, dword [ebp - 0x478]
inc eax
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 0x587f
jge 0x471f66
and dword [ebp - 0x648], 0
jmp 0x471ed8
mov eax, dword [ebp - 0x648]
inc eax
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 0x37d4
jge 0x471f61
and dword [ebp - 0x480], 0
jmp 0x471efa
mov eax, dword [ebp - 0x480]
inc eax
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0x43eb
jge 0x471f5c
mov eax, dword [ebp - 0x478]
imul eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x480]
sar eax, cl
cdq
mov dword [ebp - 0x1c0c], eax
mov dword [ebp - 0x1c08], edx
push dword [ebp - 0x1c08]
push dword [ebp - 0x1c0c]
lea ecx, [ebp - 0x2ca4]
call fcn.00453eca
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a41
push eax
call fcn.00489da5
pop ecx
lea ecx, [ebp - 0x2ca4]
call fcn.0040282e
jmp 0x471eed
jmp 0x471ecb
jmp 0x471ea5
push 0x1ca4
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
and dword [ebp - 0x658], 0
jmp 0x471f89
mov eax, dword [ebp - 0x658]
inc eax
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x658], 0x1b90
jge 0x472390
mov dword [ebp - 0x1744], 0x7592
mov dword [ebp - 0x1f64], str.xsvo_gvmy_jgamil_xfjevawyj_vlzoo_elyhtdgu
cmp dword [ebp - 0x1744], 0x7904
jle 0x472088
and dword [ebp - 0x730], 0
jmp 0x471fd3
mov eax, dword [ebp - 0x730]
inc eax
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x730], 0x6af6
jge 0x472088
and dword [ebp - 0x488], 0
jmp 0x471ff9
mov eax, dword [ebp - 0x488]
inc eax
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 0x238
jge 0x472083
and dword [ebp - 0x650], 0
jmp 0x47201b
mov eax, dword [ebp - 0x650]
inc eax
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 0x77ce
jge 0x47207e
mov eax, dword [ebp - 0x730]
cdq
idiv dword [ebp - 0x488]
imul edx, dword [ebp - 0x650]
mov eax, edx
cdq
mov dword [ebp - 0x1c18], eax
mov dword [ebp - 0x1c14], edx
push dword [ebp - 0x1c14]
push dword [ebp - 0x1c18]
lea ecx, [ebp - 0x2de8]
call fcn.00453eca
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a41
push eax
call fcn.00489da5
pop ecx
lea ecx, [ebp - 0x2de8]
call fcn.0040282e
jmp 0x47200e
jmp 0x471fec
jmp 0x471fc6
and dword [ebp - 0x4a0], 0
jmp 0x47209e
mov eax, dword [ebp - 0x4a0]
inc eax
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x4a0], 0x1cc3
jge 0x472346
mov dword [ebp - 0x173c], 0xc4
mov dword [ebp - 0x1f54], str.nhutgiw_kjynvxqm_nyh_pnpkluwcy_aqrn_hlankzm
cmp dword [ebp - 0x173c], 0x453
jle 0x47219b
and dword [ebp - 0x490], 0
jmp 0x4720e8
mov eax, dword [ebp - 0x490]
inc eax
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0x71f5
jge 0x47219b
and dword [ebp - 0x7f8], 0
jmp 0x47210e
mov eax, dword [ebp - 0x7f8]
inc eax
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 0x126
jge 0x472196
and dword [ebp - 0x498], 0
jmp 0x472130
mov eax, dword [ebp - 0x498]
inc eax
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x498], 0x672a
jge 0x472191
mov eax, dword [ebp - 0x490]
mov ecx, dword [ebp - 0x7f8]
shl eax, cl
and eax, dword [ebp - 0x498]
cdq
mov dword [ebp - 0x1c24], eax
mov dword [ebp - 0x1c20], edx
push dword [ebp - 0x1c20]
push dword [ebp - 0x1c24]
lea ecx, [ebp - 0x2d34]
call fcn.00453eca
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a41
push eax
call fcn.00489da5
pop ecx
lea ecx, [ebp - 0x2d34]
call fcn.0040282e
jmp 0x472123
jmp 0x472101
jmp 0x4720db
mov eax, dword [ebp - 0x658]
imul eax, dword [ebp - 0x4a0]
add eax, dword [ebp - 0x738]
cdq
mov dword [ebp - 0x1c3c], eax
mov dword [ebp - 0x1c38], edx
and dword [ebp - 4], 0
cmp dword [ebp - 0x173c], 0xffffff4b
jge 0x4721d7
push dword [ebp - 0x1f54]
call fcn.00489da5
pop ecx
jmp 0x4721f3
or dword [ebp - 4], 0xffffffff
jmp 0x4721fd
mov dword [ebp - 0xacc], 0x550a
mov dword [ebp - 0x1f5c], str.bdht_ivkpcwfl_oesxt_tjno_ypltpusd_nutlzeepo_kpjh_ecyvzfwrj_tqm_lhhmhn_adeitt
cmp dword [ebp - 0xacc], 0x5618
jle 0x4722c6
push 0xf80
push 0xde8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call dword [sym.imp.USER32.dll_GetMessageA]
and dword [ebp - 0x4a8], 0
jmp 0x472250
mov eax, dword [ebp - 0x4a8]
inc eax
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0x10c
jge 0x4722b2
and dword [ebp - 0x660], 0
jmp 0x472272
mov eax, dword [ebp - 0x660]
inc eax
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0x5386
jge 0x4722b0
mov eax, dword [ebp - 0x4a8]
imul eax, dword [ebp - 0x660]
cdq
mov dword [ebp - 0x1c30], eax
mov dword [ebp - 0x1c2c], edx
push dword [ebp - 0x1c2c]
push dword [ebp - 0x1c30]
mov ecx, 0xac0340
call fcn.004850fd
jmp 0x472265
jmp 0x472243
push 0x5d9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
push dword [ebp - 0x1c38]
push dword [ebp - 0x1c3c]
lea ecx, [ebp - 0x2e9c]
call fcn.00453eca
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a41
push eax
call fcn.00489da5
pop ecx
lea ecx, [ebp - 0x2e9c]
call fcn.0040282e
mov dword [ebp - 4], 2
cmp dword [ebp - 0xacc], 0x5133
jge 0x47231b
mov edx, dword [ebp - 0x1f5c]
mov ecx, 0xac0340
call fcn.004865ab
jmp 0x472337
or dword [ebp - 4], 0xffffffff
jmp 0x472341
jmp 0x472091
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1744], 0x7587
jge 0x472365
push dword [ebp - 0x1f64]
call fcn.00489da5
pop ecx
jmp 0x472381
or dword [ebp - 4], 0xffffffff
jmp 0x47238b
jmp 0x471f7c
mov dword [ebp - 4], 6
cmp dword [ebp - 0xad4], 0x7bef
jge 0x4723af
push dword [ebp - 0x1f6c]
call fcn.00489da5
pop ecx
jmp 0x4723cb
or dword [ebp - 4], 0xffffffff
jmp 0x4723d5
jmp 0x471e5b
mov dword [ebp - 0x7a8], 2
mov dword [ebp - 0x295c], 0
mov dword [ebp - 0x2744], 0x787d6364
mov dword [ebp - 0x4b0], 0
jmp 0x472411
mov eax, dword [ebp - 0x4b0]
inc eax
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 2
jge 0x47242d
mov eax, dword [ebp - 0x4b0]
mov dword [ebp + eax*4 - 0x2c6c], 0x5f70
jmp 0x472404
mov dword [ebp - 0x7a8], 1
jmp 0x472446
mov eax, dword [ebp - 0x7a8]
dec eax
mov dword [ebp - 0x7a8], eax
cmp dword [ebp - 0x7a8], 0
jl 0x47269c
mov dword [ebp - 0x668], 8
push 2
lea ecx, [ebp - 0x27b0]
call fcn.004293d0
mov dword [ebp - 0x4b8], 0
jmp 0x472483
mov eax, dword [ebp - 0x4b8]
inc eax
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 2
jge 0x4724a5
push dword [ebp - 0x4b8]
lea ecx, [ebp - 0x27b0]
call fcn.004294be
mov dword [eax], 1
jmp 0x472476
mov byte [ebp - 0x20a], 0
movzx eax, byte [ebp - 0x20a]
test eax, eax
je 0x4724d7
push 0
push 0x1e6a
push 0x1720
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
mov dword [ebp - 0x668], 1
jmp 0x4724f0
mov eax, dword [ebp - 0x668]
dec eax
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 0
jl 0x47268c
mov dword [ebp - 0x4c0], 0x8748afa2
mov dword [ebp - 0x2a74], 0x1c58bdfa
mov dword [ebp - 0x274c], 4
mov dword [ebp - 0x2964], 0
mov dword [ebp - 0x2754], 0xffffffff
mov dword [ebp - 0x2a34], 5
mov dword [ebp - 0x4c0], 1
jmp 0x472552
mov eax, dword [ebp - 0x4c0]
dec eax
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 0
jl 0x472687
mov dword [ebp - 0x4c8], 0x58a835a2
mov dword [ebp - 0x275c], 0
mov dword [ebp - 0x740], 0
jmp 0x47258c
mov eax, dword [ebp - 0x740]
inc eax
mov dword [ebp - 0x740], eax
cmp dword [ebp - 0x740], 2
jge 0x4725a8
mov eax, dword [ebp - 0x740]
mov dword [ebp + eax*4 - 0x2bfc], 0x64a90c6d
jmp 0x47257f
mov dword [ebp - 0x4c8], 0
jmp 0x4725c1
mov eax, dword [ebp - 0x4c8]
inc eax
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 1
jg 0x472682
mov dword [ebp - 0x4d0], 0x9bd697e7
mov dword [ebp - 0x296c], 0xfffffff9
mov dword [ebp - 0x2764], 0
mov dword [ebp - 0x174c], 0xfffffffc
mov dword [ebp - 0x670], 0
jmp 0x47260f
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 1
jge 0x47262b
mov eax, dword [ebp - 0x670]
mov dword [ebp + eax*4 - 0x2ab8], 0x3c3d2146
jmp 0x472602
mov dword [ebp - 0x4d0], 0
jmp 0x472644
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 1
jg 0x472670
mov byte [ebp - 0x20c], 0
movzx eax, byte [ebp - 0x20c]
test eax, eax
je 0x47266e
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x472637
mov eax, dword [ebp - 0x174c]
dec eax
mov dword [ebp - 0x174c], eax
jmp 0x4725b4
jmp 0x472545
jmp 0x4724e3
lea ecx, [ebp - 0x27b0]
call fcn.004294a2
jmp 0x472439
mov dword [ebp - 4], 8
cmp dword [ebp - 0xadc], 0x4a15
jge 0x4726bf
mov edx, dword [ebp - 0x1f74]
mov ecx, 0xac0340
call fcn.004865ab
jmp 0x4726db
or dword [ebp - 4], 0xffffffff
jmp 0x4726e5
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x1754], 0xf845d811
mov dword [ebp - 0x1f7c], 0x44ad3740
mov byte [ebp - 0x20e], 0
movzx eax, byte [ebp - 0x20e]
test eax, eax
je 0x47271b
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
mov dword [ebp - 0x3d0], 0
jmp 0x472734
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0x13
jge 0x4727a2
mov dword [ebp - 0x24fc], 0x662a2b3b
mov dword [ebp - 0x24f8], 0x662a2b3b
mov dword [ebp - 0x24f4], 0x662a2b3b
mov dword [ebp - 0x24f0], 0x662a2b3b
mov dword [ebp - 0x1754], 0xb165
mov eax, dword [ebp - 0x3d0]
add eax, dword [ebp - 0x1754]
mov dword [ebp - 0xae4], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xae4]
mov dword [ebp + eax - 0x24fc], ecx
mov eax, dword [ebp - 0xae4]
mov dword [ebp - 0x1f7c], eax
jmp 0x472727
mov dword [ebp - 0x2260], 0xfffffff8
mov dword [ebp - 0x225c], 0xfffffff8
mov dword [ebp - 0x2258], 0xfffffff8
mov dword [ebp - 0x2254], 0xfffffff8
lea ecx, [ebp - 0x81d]
call fcn.004294cd
push eax
lea eax, [ebp - 0x2250]
push eax
lea eax, [ebp - 0x2260]
push eax
lea ecx, [ebp - 0x2c7c]
call fcn.004294d0
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9cc]
call fcn.0042947c
mov dword [ebp - 0x338], 0xeb606930
mov dword [ebp - 0x96c], 0
mov dword [ebp - 0x1f84], 0xf5291260
push 0
lea ecx, [ebp - 0x9cc]
call fcn.004294be
mov dword [eax], 0xffffffe5
jmp 0x472856
push 0
lea ecx, [ebp - 0x9cc]
call fcn.004294be
mov dword [ebp - 0x175c], eax
mov eax, dword [ebp - 0x175c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x175c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9cc]
call fcn.004294be
cmp dword [eax], 0x1c
jle 0x472e7c
mov dword [ebp - 0x164], 0x26d2e858
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x1210], 0xa256013
mov dword [ebp - 0x1208], 0x901672c6
mov dword [ebp - 0x1f70], 0x4c396c7
cmp dword [ebp - 0x164], 0xd3f7bf4
jge 0x4728b6
mov dword [ebp - 0xaec], 1
jmp 0x4728bd
and dword [ebp - 0xaec], 0
mov eax, dword [ebp - 0xaec]
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0
je 0x472b36
push 2
lea ecx, [ebp - 0x9cc]
call fcn.004294be
cmp dword [eax], 0
je 0x472a34
cmp dword [ebp - 0x164], 1
jbe 0x472901
mov dword [ebp - 0x1764], 1
jmp 0x472908
and dword [ebp - 0x1764], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x1764], eax
jl 0x472922
mov dword [ebp - 0x176c], 1
jmp 0x472929
and dword [ebp - 0x176c], 0
push 0
lea ecx, [ebp - 0x9cc]
call fcn.004294be
mov ecx, dword [ebp - 0x176c]
cmp ecx, dword [eax]
jl 0x47294c
mov dword [ebp - 0xaf8], 1
jmp 0x472953
and dword [ebp - 0xaf8], 0
mov eax, dword [ebp - 0x164]
imul eax, dword [ebp - 0xaf8]
cmp eax, 0xfffa
jae 0x472973
mov dword [ebp - 0x11ec], 1
jmp 0x47297a
and dword [ebp - 0x11ec], 0
cmp dword [ebp - 0x11ec], 0x2377d644
jl 0x472992
mov dword [ebp - 0xb00], 1
jmp 0x472999
and dword [ebp - 0xb00], 0
imul eax, dword [ebp - 0xb00], 0xa2a6
test eax, eax
jne 0x4729c2
push 1
lea ecx, [ebp - 0x9cc]
call fcn.004294be
cmp dword [eax], 0
jne 0x4729c2
and dword [ebp - 0x11f0], 0
jmp 0x4729cc
mov dword [ebp - 0x11f0], 1
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x11f0], eax
je 0x4729e6
mov dword [ebp - 0xb08], 1
jmp 0x4729ed
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0xb08], eax
jne 0x472a07
mov dword [ebp - 0x1810], 1
jmp 0x472a0e
and dword [ebp - 0x1810], 0
mov eax, dword [ebp - 0x96c]
imul eax, dword [ebp - 0x1810]
test eax, eax
je 0x472a34
cmp dword [ebp - 0x338], 0
je 0x472a34
mov dword [ebp - 0xb10], 1
jmp 0x472a3b
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0xb10], eax
jge 0x472a55
mov dword [ebp - 0x11f8], 1
jmp 0x472a5c
and dword [ebp - 0x11f8], 0
push 0
lea ecx, [ebp - 0x9cc]
call fcn.004294be
mov ecx, dword [ebp - 0x11f8]
cmp ecx, dword [eax]
jl 0x472a7f
mov dword [ebp - 0xb18], 1
jmp 0x472a86
and dword [ebp - 0xb18], 0
cmp dword [ebp - 0xb18], 1
jne 0x472a9b
mov dword [ebp - 0x1568], 1
jmp 0x472aa2
and dword [ebp - 0x1568], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x1568], eax
jge 0x472abc
mov dword [ebp - 0xb20], 1
jmp 0x472ac3
and dword [ebp - 0xb20], 0
mov esi, dword [ebp - 0xb20]
add esi, 0xda56
push 0
lea ecx, [ebp - 0x9cc]
call fcn.004294be
cmp esi, dword [eax]
jl 0x472aec
mov dword [ebp - 0x1200], 1
jmp 0x472af3
and dword [ebp - 0x1200], 0
mov eax, dword [ebp - 0x1f84]
cmp dword [ebp - 0x1200], eax
jge 0x472b36
mov byte [ebp - 0x212], 0
movzx eax, byte [ebp - 0x212]
test eax, eax
je 0x472b31
push 0x1430
push 0x1d40
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_LineTo]
jmp 0x472e53
mov dword [ebp - 0x92c], 0x427e5571
mov dword [ebp - 0x894], 0x66a3c8fc
push 2
lea ecx, [ebp - 0x1f94]
call fcn.004293d0
mov dword [ebp - 0x2054], 1
mov dword [ebp - 0x7e0], 0
jmp 0x472b7a
mov eax, dword [ebp - 0x7e0]
inc eax
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x7e0], 2
jge 0x472b9c
push dword [ebp - 0x7e0]
lea ecx, [ebp - 0x1f94]
call fcn.004294be
mov dword [eax], 0x7e9f
jmp 0x472b6d
mov dword [ebp - 0x244], 0xffffffec
jmp 0x472bb5
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x33
jne 0x472e48
mov dword [ebp - 0x678], 0x7e6007b4
push 2
lea ecx, [ebp - 0x2380]
call fcn.004293d0
mov dword [ebp - 0x4d8], 0
jmp 0x472bf2
mov eax, dword [ebp - 0x4d8]
inc eax
mov dword [ebp - 0x4d8], eax
cmp dword [ebp - 0x4d8], 2
jge 0x472c11
push dword [ebp - 0x4d8]
lea ecx, [ebp - 0x2380]
call fcn.004294be
or dword [eax], 0xffffffff
jmp 0x472be5
cmp dword [ebp - 0x164], 0
je 0x472dc7
mov dword [ebp - 0x92c], 3
cmp dword [ebp - 0x678], 0xffffffff
jg 0x472c3d
mov dword [ebp - 0xb28], 1
jmp 0x472c44
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0xb28], eax
jne 0x472c5e
mov dword [ebp - 0x1720], 1
jmp 0x472c65
and dword [ebp - 0x1720], 0
cmp dword [ebp - 0x1720], 0x63b350b8
jne 0x472c7d
mov dword [ebp - 0xb30], 1
jmp 0x472c84
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0xb30]
dec eax
imul eax, dword [ebp - 0x678]
mov dword [ebp - 0x1208], eax
mov eax, dword [ebp - 0x1208]
cmp dword [ebp - 0x244], eax
jl 0x472cb8
cmp dword [ebp - 0x92c], 0
jne 0x472cb8
and dword [ebp - 0xb38], 0
jmp 0x472cc2
mov dword [ebp - 0xb38], 1
mov esi, dword [ebp - 0x894]
imul esi, dword [ebp - 0xb38]
push 1
lea ecx, [ebp - 0x1f94]
call fcn.004294be
cmp esi, dword [eax]
jle 0x472cec
mov dword [ebp - 0x1570], 1
jmp 0x472cf3
and dword [ebp - 0x1570], 0
mov eax, dword [ebp - 0x678]
add eax, dword [ebp - 0x1570]
cmp dword [ebp - 0x338], eax
jne 0x472d13
mov dword [ebp - 0xb40], 1
jmp 0x472d1a
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0x96c]
add eax, dword [ebp - 0xb40]
je 0x472d31
cmp dword [ebp - 0x164], 0
jne 0x472d3e
push 0
lea ecx, [ebp - 0x9cc]
call fcn.004294be
mov eax, dword [ebp - 0x894]
cmp dword [ebp - 0x244], eax
jge 0x472d58
mov dword [ebp - 0xb48], 1
jmp 0x472d5f
and dword [ebp - 0xb48], 0
mov dword [ebp - 0x1210], 0x7567
mov esi, dword [ebp - 0x1210]
mov eax, dword [ebp - 0xb48]
neg eax
imul esi, eax
push 0
lea ecx, [ebp - 0x1f94]
call fcn.004294be
add esi, dword [eax]
mov dword [ebp - 0x1884], esi
push 0
lea ecx, [ebp - 0x2380]
call fcn.004294be
mov ecx, dword [ebp - 0x1884]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x1f94]
call fcn.004294be
mov ecx, dword [ebp - 0x1884]
add ecx, dword [eax]
je 0x472dc7
mov dword [ebp - 0x204c], 1
jmp 0x472dce
and dword [ebp - 0x204c], 0
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x276c], eax
cmp dword [ebp - 0x2054], 0
jne 0x472df5
mov eax, 0xffff
test eax, eax
jne 0x472df5
and dword [ebp - 0xb50], 0
jmp 0x472dff
mov dword [ebp - 0xb50], 1
mov eax, dword [ebp - 0x894]
cmp dword [ebp - 0xb50], eax
jg 0x472e19
mov dword [ebp - 0x205c], 1
jmp 0x472e20
and dword [ebp - 0x205c], 0
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x2974], eax
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x1f70], eax
lea ecx, [ebp - 0x2380]
call fcn.004294a2
jmp 0x472ba8
lea ecx, [ebp - 0x1f94]
call fcn.004294a2
mov byte [ebp - 0x214], 0
movzx eax, byte [ebp - 0x214]
test eax, eax
je 0x472e77
push 0x2538
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
jmp 0x472832
lea ecx, [ebp - 0x9cc]
call fcn.004294a2
xor ecx, ecx
call fcn.0042973b
push eax
call fcn.00489ad3
pop ecx
push 2
lea ecx, [ebp - 0x2410]
call fcn.004293d0
mov dword [ebp - 0x4e0], 0
jmp 0x472ebb
mov eax, dword [ebp - 0x4e0]
inc eax
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 2
jge 0x472edd
push dword [ebp - 0x4e0]
lea ecx, [ebp - 0x2410]
call fcn.004294be
mov dword [eax], 1
jmp 0x472eae
mov byte [ebp - 0x216], 0
movzx eax, byte [ebp - 0x216]
test eax, eax
je 0x472efe
push 0x97f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 1
lea ecx, [ebp - 0x2410]
call fcn.004294be
and dword [eax], 0
lea ecx, [ebp - 0x2410]
call fcn.004294a2
mov dword [ebp - 0xc50], 0x6a12
push 1
lea ecx, [ebp - 0x1fa4]
call fcn.004293d0
mov dword [ebp - 0x2b8], 0x971c1ec2
mov dword [ebp - 0xb60], 0x2509e71b
mov dword [ebp - 0x748], 0
jmp 0x472f5d
mov eax, dword [ebp - 0x748]
inc eax
mov dword [ebp - 0x748], eax
cmp dword [ebp - 0x748], 1
jge 0x472f7f
push dword [ebp - 0x748]
lea ecx, [ebp - 0x1fa4]
call fcn.004294be
mov dword [eax], 0x91a049fe
jmp 0x472f50
mov dword [ebp - 0x2b8], 0
jmp 0x472f98
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jg 0x473093
mov dword [ebp - 0x4e8], 0x39ed080c
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x1fa4]
call fcn.004294be
cmp dword [eax], 0
je 0x472fca
jmp 0x473093
mov dword [ebp - 0x4e8], 0
jmp 0x472fe3
mov eax, dword [ebp - 0x4e8]
dec eax
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 0
jl 0x47308e
mov dword [ebp - 0x89c], 0x7e6a
mov dword [ebp - 0x1578], 0x713e
push 0
lea ecx, [ebp - 0x1fa4]
call fcn.004294be
mov esi, eax
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x1fa4]
call fcn.004294be
imul eax, dword [eax], 0
cmp dword [esi], eax
jle 0x473037
mov dword [ebp - 0x1218], 1
jmp 0x47303e
and dword [ebp - 0x1218], 0
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x2774], eax
mov eax, dword [ebp - 0x89c]
cmp dword [ebp - 0x89c], eax
jge 0x473064
mov dword [ebp - 0xb58], 1
jmp 0x47306b
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0x1218]
sub eax, dword [ebp - 0xb58]
mov dword [ebp - 0x1578], eax
mov eax, dword [ebp - 0x1578]
mov dword [ebp - 0xb60], eax
jmp 0x472fd6
jmp 0x472f8b
mov dword [ebp - 0xb60], 0x4edf0ebf
lea ecx, [ebp - 0x1fa4]
call fcn.004294a2
mov dword [ebp - 0x1a28], str.jcrbfrbpg_ujnv_ksd_qeiuj_cvpjfpndc
push 3
lea ecx, [ebp - 0x1fb4]
call fcn.004293d0
push 3
lea ecx, [ebp - 0x27d0]
call fcn.004293d0
mov dword [ebp - 0xf4], 0
jmp 0x4730e5
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x473107
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x1fb4]
call fcn.004294be
mov dword [eax], 0xb110c93b
jmp 0x4730d8
mov dword [ebp - 0xf4], 0
jmp 0x473120
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x473142
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x27d0]
call fcn.004294be
mov dword [eax], 0xcb8ce3e6
jmp 0x473113
push 1
lea ecx, [ebp - 0x1fb4]
call fcn.004294be
mov dword [eax], 0xffffffe4
jmp 0x47317b
push 1
lea ecx, [ebp - 0x1fb4]
call fcn.004294be
mov dword [ebp - 0x1220], eax
mov eax, dword [ebp - 0x1220]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1220]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1fb4]
call fcn.004294be
cmp dword [eax], 0xc
je 0x473260
push 2
lea ecx, [ebp - 0x27c0]
call fcn.004293d0
push 1
lea ecx, [ebp - 0x2320]
call fcn.004293d0
mov dword [ebp - 0x17c], 0
jmp 0x4731c4
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x4731e6
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x27c0]
call fcn.004294be
mov dword [eax], 0xfc07e17f
jmp 0x4731b7
mov dword [ebp - 0x17c], 0
jmp 0x4731ff
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x473221
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x2320]
call fcn.004294be
mov dword [eax], 0x3c15
jmp 0x4731f2
push 0
lea ecx, [ebp - 0x2320]
call fcn.004294be
mov dword [ebp - 0xb68], eax
mov eax, dword [ebp - 0xb68]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb68]
mov dword [ecx], eax
lea ecx, [ebp - 0x2320]
call fcn.004294a2
lea ecx, [ebp - 0x27c0]
call fcn.004294a2
jmp 0x473157
lea ecx, [ebp - 0x27d0]
call fcn.004294a2
lea ecx, [ebp - 0x1fb4]
call fcn.004294a2
cmp dword [ebp - 0xc50], 0x6d63
jle 0x47331c
and dword [ebp - 0x680], 0
jmp 0x47329c
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 0x16e3
jge 0x47331c
and dword [ebp - 0x4f0], 0
jmp 0x4732be
mov eax, dword [ebp - 0x4f0]
inc eax
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 0x2707
jge 0x473317
mov eax, dword [ebp - 0x680]
and eax, dword [ebp - 0x4f0]
cdq
mov dword [ebp - 0x1c48], eax
mov dword [ebp - 0x1c44], edx
push dword [ebp - 0x1c44]
push dword [ebp - 0x1c48]
lea ecx, [ebp - 0x2d64]
call fcn.00453eca
pop ecx
pop ecx
mov ecx, eax
call fcn.00402a41
push eax
call fcn.00489da5
pop ecx
lea ecx, [ebp - 0x2d64]
call fcn.0040282e
jmp 0x4732b1
jmp 0x47328f
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xb70], 0x62d5
mov dword [ebp - 0x1ae4], str.jrml_kepo_ujdrlvp_bfvny_cim_avw_hmtehwjen_bcorucw_fkjcwvkf_oesshb_nsjfd
cmp dword [ebp - 0xb70], 0x63af
jle 0x4733f1
and dword [ebp - 0x688], 0
jmp 0x47335d
mov eax, dword [ebp - 0x688]
inc eax
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x688], 0x53cd
jge 0x4733f1
and dword [ebp - 0x7b0], 0
jmp 0x473383
mov eax, dword [ebp - 0x7b0]
inc eax
mov dword [ebp - 0x7b0], eax
cmp dword [ebp - 0x7b0], 0x66aa
jge 0x4733ec
and dword [ebp - 0x4f8], 0
jmp 0x4733a5
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 0x64f5
jge 0x4733ea
mov ecx, dword [ebp - 0x7b0]
add ecx, dword [ebp - 0x4f8]
mov eax, dword [ebp - 0x688]
sar eax, cl
cdq
mov dword [ebp - 0x1c54], eax
mov dword [ebp - 0x1c50], edx
push dword [ebp - 0x1c50]
push dword [ebp - 0x1c54]
mov ecx, 0xac0340
call fcn.004850fd
jmp 0x473398
jmp 0x473376
jmp 0x473350
cmp dword [ebp - 0x1728], 0x1c61
jge 0x473409
push dword [ebp - 0x1bc4]
call fcn.00489da5
pop ecx
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0xb70], 0x60a0
jge 0x473429
mov edx, dword [ebp - 0x1ae4]
mov ecx, 0xac0340
call fcn.004865ab
jmp 0x473445
mov dword [ebp - 4], 0xa
jmp 0x473455
jmp 0x473471
or dword [ebp - 4], 0xffffffff
jmp 0x47347b
mov dword [ebp - 0x21c0], 0xfffffff8
mov dword [ebp - 0x21bc], 0xfffffff8
mov dword [ebp - 0x21b8], 0xfffffff8
mov dword [ebp - 0x21b4], 0xfffffff8
lea ecx, [ebp - 0x849]
call fcn.004294cd
push eax
lea eax, [ebp - 0x21b0]
push eax
lea eax, [ebp - 0x21c0]
push eax
lea ecx, [ebp - 0x2c0c]
call fcn.004294d0
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9d8]
call fcn.0042947c
mov dword [ebp - 0x3a0], 0xeb606930
mov dword [ebp - 0x984], 0
mov dword [ebp - 0x19f8], 0xf5291260
push 0
lea ecx, [ebp - 0x9d8]
call fcn.004294be
mov dword [eax], 0xffffffe5
jmp 0x47352f
push 0
lea ecx, [ebp - 0x9d8]
call fcn.004294be
mov dword [ebp - 0x1228], eax
mov eax, dword [ebp - 0x1228]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1228]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9d8]
call fcn.004294be
cmp dword [eax], 0x1c
jle 0x473b55
mov dword [ebp - 0xfc], 0x26d2e858
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0xbd0], 0xa256013
mov dword [ebp - 0xbc0], 0x901672c6
mov dword [ebp - 0x1a08], 0x4c396c7
cmp dword [ebp - 0xfc], 0xd3f7bf4
jge 0x47358f
mov dword [ebp - 0xb78], 1
jmp 0x473596
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0xb78]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0
je 0x47380f
push 2
lea ecx, [ebp - 0x9d8]
call fcn.004294be
cmp dword [eax], 0
je 0x47370d
cmp dword [ebp - 0xfc], 1
jbe 0x4735da
mov dword [ebp - 0x1580], 1
jmp 0x4735e1
and dword [ebp - 0x1580], 0
mov eax, dword [ebp - 0x3a0]
cmp dword [ebp - 0x1580], eax
jl 0x4735fb
mov dword [ebp - 0xb80], 1
jmp 0x473602
and dword [ebp - 0xb80], 0
push 0
lea ecx, [ebp - 0x9d8]
call fcn.004294be
mov ecx, dword [ebp - 0xb80]
cmp ecx, dword [eax]
jl 0x473625
mov dword [ebp - 0x1230], 1
jmp 0x47362c
and dword [ebp - 0x1230], 0
mov eax, dword [ebp - 0xfc]
imul eax, dword [ebp - 0x1230]
cmp eax, 0xfffa
jae 0x47364c
mov dword [ebp - 0xb88], 1
jmp 0x473653
and dword [ebp - 0xb88], 0
cmp dword [ebp - 0xb88], 0x2377d644
jl 0x47366b
mov dword [ebp - 0x1820], 1
jmp 0x473672
and dword [ebp - 0x1820], 0
imul eax, dword [ebp - 0x1820], 0xa2a6
test eax, eax
jne 0x47369b
push 1
lea ecx, [ebp - 0x9d8]
call fcn.004294be
cmp dword [eax], 0
jne 0x47369b
and dword [ebp - 0xb90], 0
jmp 0x4736a5
mov dword [ebp - 0xb90], 1
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0xb90], eax
je 0x4736bf
mov dword [ebp - 0x1238], 1
jmp 0x4736c6
and dword [ebp - 0x1238], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x1238], eax
jne 0x4736e0
mov dword [ebp - 0xb98], 1
jmp 0x4736e7
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0x984]
imul eax, dword [ebp - 0xb98]
test eax, eax
je 0x47370d
cmp dword [ebp - 0x3a0], 0
je 0x47370d
mov dword [ebp - 0x1588], 1
jmp 0x473714
and dword [ebp - 0x1588], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x1588], eax
jge 0x47372e
mov dword [ebp - 0xba0], 1
jmp 0x473735
and dword [ebp - 0xba0], 0
push 0
lea ecx, [ebp - 0x9d8]
call fcn.004294be
mov ecx, dword [ebp - 0xba0]
cmp ecx, dword [eax]
jl 0x473758
mov dword [ebp - 0x1240], 1
jmp 0x47375f
and dword [ebp - 0x1240], 0
cmp dword [ebp - 0x1240], 1
jne 0x473774
mov dword [ebp - 0xba8], 1
jmp 0x47377b
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xba8], eax
jge 0x473795
mov dword [ebp - 0x1730], 1
jmp 0x47379c
and dword [ebp - 0x1730], 0
mov esi, dword [ebp - 0x1730]
add esi, 0xda56
push 0
lea ecx, [ebp - 0x9d8]
call fcn.004294be
cmp esi, dword [eax]
jl 0x4737c5
mov dword [ebp - 0xbb0], 1
jmp 0x4737cc
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0x19f8]
cmp dword [ebp - 0xbb0], eax
jge 0x47380f
mov byte [ebp - 0x218], 0
movzx eax, byte [ebp - 0x218]
test eax, eax
je 0x47380a
push 0x1430
push 0x1d40
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_LineTo]
jmp 0x473b2c
mov dword [ebp - 0x934], 0x427e5571
mov dword [ebp - 0x8a4], 0x66a3c8fc
push 2
lea ecx, [ebp - 0x1fc4]
call fcn.004293d0
mov dword [ebp - 0x1a00], 1
mov dword [ebp - 0x500], 0
jmp 0x473853
mov eax, dword [ebp - 0x500]
inc eax
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 2
jge 0x473875
push dword [ebp - 0x500]
lea ecx, [ebp - 0x1fc4]
call fcn.004294be
mov dword [eax], 0x7e9f
jmp 0x473846
mov dword [ebp - 0x24c], 0xffffffec
jmp 0x47388e
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x33
jne 0x473b21
mov dword [ebp - 0x508], 0x7e6007b4
push 2
lea ecx, [ebp - 0x2488]
call fcn.004293d0
mov dword [ebp - 0x750], 0
jmp 0x4738cb
mov eax, dword [ebp - 0x750]
inc eax
mov dword [ebp - 0x750], eax
cmp dword [ebp - 0x750], 2
jge 0x4738ea
push dword [ebp - 0x750]
lea ecx, [ebp - 0x2488]
call fcn.004294be
or dword [eax], 0xffffffff
jmp 0x4738be
cmp dword [ebp - 0xfc], 0
je 0x473aa0
mov dword [ebp - 0x934], 3
cmp dword [ebp - 0x508], 0xffffffff
jg 0x473916
mov dword [ebp - 0x1248], 1
jmp 0x47391d
and dword [ebp - 0x1248], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x1248], eax
jne 0x473937
mov dword [ebp - 0xbb8], 1
jmp 0x47393e
and dword [ebp - 0xbb8], 0
cmp dword [ebp - 0xbb8], 0x63b350b8
jne 0x473956
mov dword [ebp - 0x1590], 1
jmp 0x47395d
and dword [ebp - 0x1590], 0
mov eax, dword [ebp - 0x1590]
dec eax
imul eax, dword [ebp - 0x508]
mov dword [ebp - 0xbc0], eax
mov eax, dword [ebp - 0xbc0]
cmp dword [ebp - 0x24c], eax
jl 0x473991
cmp dword [ebp - 0x934], 0
jne 0x473991
and dword [ebp - 0x1250], 0
jmp 0x47399b
mov dword [ebp - 0x1250], 1
mov esi, dword [ebp - 0x8a4]
imul esi, dword [ebp - 0x1250]
push 1
lea ecx, [ebp - 0x1fc4]
call fcn.004294be
cmp esi, dword [eax]
jle 0x4739c5
mov dword [ebp - 0xbc8], 1
jmp 0x4739cc
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0x508]
add eax, dword [ebp - 0xbc8]
cmp dword [ebp - 0x3a0], eax
jne 0x4739ec
mov dword [ebp - 0x188c], 1
jmp 0x4739f3
and dword [ebp - 0x188c], 0
mov eax, dword [ebp - 0x984]
add eax, dword [ebp - 0x188c]
je 0x473a0a
cmp dword [ebp - 0xfc], 0
jne 0x473a17
push 0
lea ecx, [ebp - 0x9d8]
call fcn.004294be
mov eax, dword [ebp - 0x8a4]
cmp dword [ebp - 0x24c], eax
jge 0x473a31
mov dword [ebp - 0x1258], 1
jmp 0x473a38
and dword [ebp - 0x1258], 0
mov dword [ebp - 0xbd0], 0x7567
mov esi, dword [ebp - 0xbd0]
mov eax, dword [ebp - 0x1258]
neg eax
imul esi, eax
push 0
lea ecx, [ebp - 0x1fc4]
call fcn.004294be
add esi, dword [eax]
mov dword [ebp - 0xbd8], esi
push 0
lea ecx, [ebp - 0x2488]
call fcn.004294be
mov ecx, dword [ebp - 0xbd8]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x1fc4]
call fcn.004294be
mov ecx, dword [ebp - 0xbd8]
add ecx, dword [eax]
je 0x473aa0
mov dword [ebp - 0x1d34], 1
jmp 0x473aa7
and dword [ebp - 0x1d34], 0
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x2a3c], eax
cmp dword [ebp - 0x1a00], 0
jne 0x473ace
mov eax, 0xffff
test eax, eax
jne 0x473ace
and dword [ebp - 0x1598], 0
jmp 0x473ad8
mov dword [ebp - 0x1598], 1
mov eax, dword [ebp - 0x8a4]
cmp dword [ebp - 0x1598], eax
jg 0x473af2
mov dword [ebp - 0x1d38], 1
jmp 0x473af9
and dword [ebp - 0x1d38], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2784], eax
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x1a08], eax
lea ecx, [ebp - 0x2488]
call fcn.004294a2
jmp 0x473881
lea ecx, [ebp - 0x1fc4]
call fcn.004294a2
mov byte [ebp - 0x21a], 0
movzx eax, byte [ebp - 0x21a]
test eax, eax
je 0x473b50
push 0x2538
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
jmp 0x47350b
lea ecx, [ebp - 0x9d8]
call fcn.004294a2
mov dword [ebp - 0x64], 8
mov dword [ebp - 0x7c], 3
mov dword [ebp - 0x340], 0
push 1
lea ecx, [ebp - 0x23b0]
call fcn.004293d0
mov dword [ebp - 0x1a20], 0x78c3fce
mov dword [ebp - 0x44], 0
jmp 0x473b9f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x473bb5
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1cc], 9
jmp 0x473b98
mov dword [ebp - 0x44], 0
jmp 0x473bc5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x473be1
push dword [ebp - 0x44]
lea ecx, [ebp - 0x23b0]
call fcn.004294be
mov dword [eax], 0x6a91a76a
jmp 0x473bbe
mov dword [ebp - 0x44], 0
jmp 0x473bf1
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x473c07
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x29b4], 0xffffffff
jmp 0x473bea
mov dword [ebp - 0x64], 0
jmp 0x473c17
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jg 0x473e42
push 3
lea ecx, [ebp - 0x210c]
call fcn.004293d0
mov dword [ebp - 0x1d44], 0x714ffd81
mov dword [ebp - 0x2300], 0x537c
mov dword [ebp - 0x22fc], 0x537c
mov dword [ebp - 0x22f8], 0x537c
mov dword [ebp - 0x22f4], 0x537c
lea ecx, [ebp - 0x859]
call fcn.004294cd
push eax
lea eax, [ebp - 0x22f0]
push eax
lea eax, [ebp - 0x2300]
push eax
lea ecx, [ebp - 0x2c8c]
call fcn.004294d0
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2bac]
call fcn.0042947c
mov dword [ebp - 0x16c], 0
jmp 0x473cae
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 4
jge 0x473cca
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x24ec], 2
jmp 0x473ca1
mov dword [ebp - 0x16c], 0
jmp 0x473ce3
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x473d05
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x210c]
call fcn.004294be
mov dword [eax], 0xde2bbef7
jmp 0x473cd6
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x24ec], 0
jmp 0x473d33
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24ec]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x24ec], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x24ec], 0
jg 0x473d64
mov dword [ebp - 0x1f24], 0
push 0
lea ecx, [ebp - 0x210c]
call fcn.004294be
mov eax, dword [eax]
mov dword [ebp - 0x1f24], eax
jmp 0x473d18
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x297c], eax
cmp dword [ebp - 0x64], 0x5229
je 0x473d82
mov dword [ebp - 0xbe0], 1
jmp 0x473d89
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0xbe0]
sub eax, 0xa8db
jne 0x473da6
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x473da6
and dword [ebp - 0x1260], 0
jmp 0x473db0
mov dword [ebp - 0x1260], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x1260], eax
jne 0x473dc7
mov dword [ebp - 0x1a10], 1
jmp 0x473dce
and dword [ebp - 0x1a10], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x2794], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp - 0x2a7c], eax
push 2
lea ecx, [ebp - 0x210c]
call fcn.004294be
cmp dword [eax], 0
jne 0x473e05
cmp dword [ebp - 0x1d44], 0
je 0x473e17
cmp dword [ebp - 0x64], 0
je 0x473e17
mov dword [ebp - 0xbe8], 1
jmp 0x473e1e
and dword [ebp - 0xbe8], 0
mov eax, dword [ebp - 0xbe8]
mov dword [ebp - 0x7c], eax
lea ecx, [ebp - 0x2bac]
call fcn.004294a2
lea ecx, [ebp - 0x210c]
call fcn.004294a2
jmp 0x473c10
mov dword [ebp - 0x7c], 0
jmp 0x473e52
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jg 0x474289
mov dword [ebp - 0x104], 0xffff
mov dword [ebp - 0x1a18], 1
mov dword [ebp - 0xc28], 4
mov dword [ebp - 0x1740], 0x1d345d19
mov dword [ebp - 0x1894], 0x823388
mov dword [ebp - 0x1d50], 1
mov dword [ebp - 0x64], 0
jmp 0x473ea8
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jg 0x474057
mov dword [ebp - 0x1270], 0x7356
mov byte [ebp - 0x21c], 0
movzx eax, byte [ebp - 0x21c]
test eax, eax
je 0x473edd
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x1cc]
mov dword [ebp - 0x27a4], eax
cmp dword [ebp - 0x1270], 2
jle 0x473f02
mov dword [ebp - 0x1268], 1
jmp 0x473f09
and dword [ebp - 0x1268], 0
cmp dword [ebp - 0x104], 0x6396
jg 0x473f21
mov dword [ebp - 0x1738], 1
jmp 0x473f28
and dword [ebp - 0x1738], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x1738], eax
jl 0x473f42
mov dword [ebp - 0xbf0], 1
jmp 0x473f49
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0xbf0]
jne 0x473f63
mov dword [ebp - 0xbf8], 1
jmp 0x473f6a
and dword [ebp - 0xbf8], 0
mov eax, dword [ebp - 0x1268]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
cmp eax, dword [ebp - 0xbf8]
jge 0x473f8d
cmp dword [ebp - 0x340], 0
jne 0x473fa6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1cc], 0
jne 0x473fa6
and dword [ebp - 0x15a0], 0
jmp 0x473fb0
mov dword [ebp - 0x15a0], 1
push 0
lea ecx, [ebp - 0x23b0]
call fcn.004294be
mov ecx, dword [ebp - 0x15a0]
cmp ecx, dword [eax]
je 0x473fd3
mov dword [ebp - 0xc00], 1
jmp 0x473fda
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0xc00]
sub eax, dword [ebp - 0x1270]
cmp eax, 0x2b13
jne 0x473ff9
mov dword [ebp - 0xc08], 1
jmp 0x474000
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0xc08]
neg eax
cmp eax, dword [ebp - 0x104]
jg 0x47401c
mov dword [ebp - 0x1830], 1
jmp 0x474023
and dword [ebp - 0x1830], 0
cmp dword [ebp - 0x1830], 0xfffffffb
jle 0x474038
mov dword [ebp - 0xc10], 1
jmp 0x47403f
and dword [ebp - 0xc10], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xc10]
mov dword [ebp + eax - 0x29b4], ecx
jmp 0x473ea1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp + eax*4 - 0x1cc], 6
jbe 0x474070
mov dword [ebp - 0x1278], 1
jmp 0x474077
and dword [ebp - 0x1278], 0
cmp dword [ebp - 0x1278], 1
jle 0x47408c
mov dword [ebp - 0x1288], 1
jmp 0x474093
and dword [ebp - 0x1288], 0
cmp dword [ebp - 0x104], 0
jne 0x4740d9
mov eax, dword [ebp - 0x104]
sub eax, 0xe57
je 0x4740be
cmp dword [ebp - 0x104], 0
je 0x4740be
mov dword [ebp - 0xc18], 1
jmp 0x4740c5
and dword [ebp - 0xc18], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xc18], eax
jl 0x4740d9
and dword [ebp - 0x15a8], 0
jmp 0x4740e3
mov dword [ebp - 0x15a8], 1
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x15a8]
mov dword [ebp - 0x1a18], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ebp + ecx*4 - 0x1cc]
cmp dword [ebp + eax - 0x29b4], ecx
jl 0x474118
mov dword [ebp - 0xc20], 1
jmp 0x47411f
and dword [ebp - 0xc20], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
cmp dword [ebp - 0xc20], eax
jg 0x474140
mov dword [ebp - 0x1280], 1
jmp 0x474147
and dword [ebp - 0x1280], 0
mov eax, dword [ebp - 0x1280]
mov dword [ebp - 0xc28], eax
mov eax, dword [ebp - 0xc28]
mov dword [ebp - 0x1740], eax
cmp dword [ebp - 0x1740], 0
jne 0x47417a
cmp dword [ebp - 0x104], 0
jne 0x47417a
and dword [ebp - 0xc30], 0
jmp 0x474184
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 1
ja 0x474199
mov dword [ebp - 0xc38], 1
jmp 0x4741a0
and dword [ebp - 0xc38], 0
mov eax, dword [ebp - 0x1288]
cmp eax, dword [ebp - 0xc38]
je 0x4741ba
mov dword [ebp - 0x15b0], 1
jmp 0x4741c1
and dword [ebp - 0x15b0], 0
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x1cc]
cmp dword [ebp - 0x15b0], eax
jge 0x4741df
mov dword [ebp - 0xc40], 1
jmp 0x4741e6
and dword [ebp - 0xc40], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0xc40], eax
jle 0x474200
mov dword [ebp - 0x1ee8], 1
jmp 0x474207
and dword [ebp - 0x1ee8], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x2984], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29b4]
mov dword [ebp - 0x27b4], eax
mov eax, dword [ebp - 0x1a20]
cmp dword [ebp - 0x340], eax
jl 0x474240
mov dword [ebp - 0x1290], 1
jmp 0x474247
and dword [ebp - 0x1290], 0
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x1cc]
cmp dword [ebp - 0x1290], eax
jge 0x474265
mov dword [ebp - 0xc48], 1
jmp 0x47426c
and dword [ebp - 0xc48], 0
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0x1894], eax
mov eax, dword [ebp - 0x1894]
mov dword [ebp - 0x1d50], eax
jmp 0x473e4b
lea ecx, [ebp - 0x23b0]
call fcn.004294a2
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0xc50], 0x6980
jge 0x4742b3
push dword [ebp - 0x1a28]
call fcn.00489da5
pop ecx
jmp 0x4742cf
or dword [ebp - 4], 0xffffffff
jmp 0x4742d9
mov dword [ebp - 0xc4], 0xfffffffd
push 3
lea ecx, [ebp - 0x18f8]
call fcn.004293d0
mov dword [ebp - 0x690], 0
jmp 0x474309
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 3
jge 0x47432b
push dword [ebp - 0x690]
lea ecx, [ebp - 0x18f8]
call fcn.004294be
mov dword [eax], 1
jmp 0x4742fc
mov dword [ebp - 0xc4], 0xe48d327c
mov dword [ebp - 0xc4], 0
jmp 0x47434e
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jg 0x47443b
mov dword [ebp - 0x1298], 1
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x18f8]
call fcn.004294be
mov esi, eax
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x18f8]
call fcn.004294be
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x47439b
mov dword [ebp - 0x1fe8], 1
jmp 0x4743a2
and dword [ebp - 0x1fe8], 0
mov dword [ebp - 0x1298], 0xfff7
mov eax, dword [ebp - 0x1298]
mov dword [ebp - 0x2514], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x2518], eax
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x18f8]
call fcn.004294be
push 0xfffffffffffffffe
pop ecx
sub ecx, dword [eax]
je 0x4743e5
mov eax, 0xe5a9
test eax, eax
jne 0x4743f7
mov eax, 0x4ba8b35e
test eax, eax
jne 0x4743f7
and dword [ebp - 0xc58], 0
jmp 0x474401
mov dword [ebp - 0xc58], 1
cmp dword [ebp - 0xc58], 0
je 0x474416
mov dword [ebp - 0x15b8], 1
jmp 0x47441d
and dword [ebp - 0x15b8], 0
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x18f8]
call fcn.004294be
mov ecx, dword [ebp - 0x15b8]
mov dword [eax], ecx
jmp 0x474341
lea ecx, [ebp - 0x18f8]
call fcn.004294a2
push 2
lea ecx, [ebp - 0x2428]
call fcn.004293d0
mov dword [ebp - 0x510], 0
jmp 0x47446c
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 2
jge 0x47448e
push dword [ebp - 0x510]
lea ecx, [ebp - 0x2428]
call fcn.004294be
mov dword [eax], 1
jmp 0x47445f
mov byte [ebp - 0x21e], 0
movzx eax, byte [ebp - 0x21e]
test eax, eax
je 0x4744af
push 0x97f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 1
lea ecx, [ebp - 0x2428]
call fcn.004294be
and dword [eax], 0
lea ecx, [ebp - 0x2428]
call fcn.004294a2
mov dword [ebp - 0xd58], 0x1834
push 1
lea ecx, [ebp - 0x1fd4]
call fcn.004293d0
mov dword [ebp - 0x2fc], 0x971c1ec2
mov dword [ebp - 0x1748], 0x2509e71b
mov dword [ebp - 0x808], 0
jmp 0x47450e
mov eax, dword [ebp - 0x808]
inc eax
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x808], 1
jge 0x474530
push dword [ebp - 0x808]
lea ecx, [ebp - 0x1fd4]
call fcn.004294be
mov dword [eax], 0x91a049fe
jmp 0x474501
mov dword [ebp - 0x2fc], 0
jmp 0x474549
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0
jg 0x474644
mov dword [ebp - 0x518], 0x39ed080c
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0x1fd4]
call fcn.004294be
cmp dword [eax], 0
je 0x47457b
jmp 0x474644
mov dword [ebp - 0x518], 0
jmp 0x474594
mov eax, dword [ebp - 0x518]
dec eax
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0
jl 0x47463f
mov dword [ebp - 0x8ac], 0x7e6a
mov dword [ebp - 0xc68], 0x713e
push 0
lea ecx, [ebp - 0x1fd4]
call fcn.004294be
mov esi, eax
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0x1fd4]
call fcn.004294be
imul eax, dword [eax], 0
cmp dword [esi], eax
jle 0x4745e8
mov dword [ebp - 0xc60], 1
jmp 0x4745ef
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x2520], eax
mov eax, dword [ebp - 0x8ac]
cmp dword [ebp - 0x8ac], eax
jge 0x474615
mov dword [ebp - 0x12a0], 1
jmp 0x47461c
and dword [ebp - 0x12a0], 0
mov eax, dword [ebp - 0xc60]
sub eax, dword [ebp - 0x12a0]
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp - 0xc68]
mov dword [ebp - 0x1748], eax
jmp 0x474587
jmp 0x47453c
mov dword [ebp - 0x1748], 0x4edf0ebf
lea ecx, [ebp - 0x1fd4]
call fcn.004294a2
mov dword [ebp - 0x1a48], 0xffffffff
mov dword [ebp - 0x1d5c], 0x45307222
mov dword [ebp - 0x2528], 0xff23b1a9
mov dword [ebp - 0x2530], 2
push 1
lea ecx, [ebp - 0x23e0]
call fcn.004293d0
mov dword [ebp - 0x1d68], 0xd0a7
mov dword [ebp - 0x1a30], 0x1c587c7a
push 2
lea ecx, [ebp - 0x27e0]
call fcn.004293d0
push 4
lea ecx, [ebp - 0x2398]
call fcn.004293d0
mov dword [ebp - 0x2538], 0xf7c2
mov dword [ebp - 0x974], 3
mov dword [ebp - 0x3fc], 0x997736e
mov dword [ebp - 0x1ef0], 6
mov dword [ebp - 0x1a40], 0x3dc4
mov dword [ebp - 0x2540], 1
mov dword [ebp - 0x3c], 0
jmp 0x474708
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x474724
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x23e0]
call fcn.004294be
mov dword [eax], 0x1d8f8f57
jmp 0x474701
mov dword [ebp - 0x3c], 0
jmp 0x474734
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x474750
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x27e0]
call fcn.004294be
mov dword [eax], 0x79d44f4c
jmp 0x47472d
mov dword [ebp - 0x3c], 0
jmp 0x474760
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x47477c
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2398]
call fcn.004294be
mov dword [eax], 1
jmp 0x474759
mov eax, dword [ebp - 0x974]
mov ecx, dword [ebp - 0x974]
dec ecx
mov dword [ebp - 0x974], ecx
test eax, eax
je 0x474811
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x2548], eax
mov esi, dword [ebp - 0x1a30]
push 0
lea ecx, [ebp - 0x2398]
call fcn.004294be
mov ecx, dword [ebp - 0x1d5c]
imul ecx, dword [eax]
sub esi, ecx
mov dword [ebp - 0x1a38], esi
push 0
lea ecx, [ebp - 0x23e0]
call fcn.004294be
mov ecx, dword [ebp - 0x1a38]
mov dword [eax], ecx
cmp dword [ebp - 0x1ef0], 0x30de
jge 0x4747f0
mov dword [ebp - 0xc70], 1
jmp 0x4747f7
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0x1a40]
cmp dword [ebp - 0xc70], eax
jg 0x474811
mov dword [ebp - 0x12a8], 1
jmp 0x474818
and dword [ebp - 0x12a8], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x12a8]
cmp eax, dword [ebp - 0x1d68]
jge 0x474835
mov dword [ebp - 0xc78], 1
jmp 0x47483c
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0xc78]
mov dword [ebp - 0x1a48], eax
mov dword [ebp - 0x3fc], 0
jmp 0x474861
cmp dword [ebp - 0x3fc], 6
je 0x4748c2
mov dword [ebp - 0x1f78], 0x68647d02
mov dword [ebp - 0x1a50], 0xa44e0c42
cmp dword [ebp - 0x1f78], 0
je 0x474893
lea ecx, [ebp - 0x2398]
call fcn.004294a2
lea ecx, [ebp - 0x27e0]
call fcn.004294a2
lea ecx, [ebp - 0x23e0]
call fcn.004294a2
mov dword [ebp - 0x1a80], str.yjjvdr_pwsn_fsek_sujxjtpek_joktnwvm_msgjtm_nhk_azrvpmg
push 3
lea ecx, [ebp - 0x1fe4]
call fcn.004293d0
push 3
lea ecx, [ebp - 0x2800]
call fcn.004293d0
mov dword [ebp - 0x18c], 0
jmp 0x474920