Function at 0x45bc66
Capabilities:
Get common file path
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ad76f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x37c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x140], 0x679c
mov dword [ebp - 0x1ec], str.dkpjms_kuce_krilf_qsjaph
cmp dword [ebp - 0x140], 0x6a99
jle 0x45bd35
and dword [ebp - 0x9c], 0
jmp 0x45bcc5
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x3395
jge 0x45bd35
and dword [ebp - 0x1c], 0
jmp 0x45bcde
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x61a0
jge 0x45bd33
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x1c]
sar eax, cl
cdq
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], edx
push dword [ebp - 0x210]
push dword [ebp - 0x214]
lea ecx, [ebp - 0x2f0]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x2f0]
call fcn.00402d76
jmp 0x45bcd7
jmp 0x45bcb8
mov dword [ebp - 0x164], 0x5605
and dword [ebp - 4], 0
cmp dword [ebp - 0x140], 0x674f
jge 0x45bd5b
push dword [ebp - 0x1ec]
call fcn.00481635
pop ecx
jmp 0x45bd77
or dword [ebp - 4], 0xffffffff
jmp 0x45bd81
mov dword [ebp - 0x168], 0x3690
mov dword [ebp - 0x18c], str.rcuqljhq_tjyijd_gedxk_xqrvvnaa_yazmg_hgkw_htmr_onn_ghsjsctvm_oyiclpwn_affcmfht_gwxmhna_qfrkd_zpvntxe
cmp dword [ebp - 0x168], 0x37f4
jle 0x45bef1
push 0
push 0xa5a
push 0x1a3a
push 0
push 0x2ba
push 0x133a
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
and dword [ebp - 0x11c], 0
jmp 0x45bddb
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x2435
jge 0x45bea7
and dword [ebp - 0x24], 0
jmp 0x45bdf8
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x6886
jge 0x45bea2
and dword [ebp - 0xa4], 0
jmp 0x45be1b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x2ee8
jge 0x45be9d
and dword [ebp - 0x2c], 0
jmp 0x45be34
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x174
jge 0x45be98
mov eax, dword [ebp - 0x11c]
cdq
idiv dword [ebp - 0x24]
mov ecx, edx
mov eax, dword [ebp - 0xa4]
cdq
idiv dword [ebp - 0x2c]
add ecx, edx
mov eax, ecx
cdq
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], edx
push dword [ebp - 0x25c]
push dword [ebp - 0x260]
lea ecx, [ebp - 0x350]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x350]
call fcn.00402d76
jmp 0x45be2d
jmp 0x45be0e
jmp 0x45bdf1
jmp 0x45bdce
push 0x2197
push 0x138b
push 0
push 0
push 0x24df
push 0x20e2
push 0xc73
push 0x634
push 0x18db
push 0x16ef
push 0xc91
push 0x113
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchDIBits]
mov dword [ebp - 0x1f8], str.hsss_chx_kfv_rlhijzmgv_xggme_qcsbpp_agjclet_zurplox_pmbmdd_ixs_pfczd_gqwuuy_mqifmpwg_ghvtcbxw
mov dword [ebp - 4], 2
cmp dword [ebp - 0x168], 0x3362
jge 0x45bf1a
push dword [ebp - 0x18c]
call fcn.00481635
pop ecx
jmp 0x45bf36
or dword [ebp - 4], 0xffffffff
jmp 0x45bf40
mov dword [ebp - 0x130], 0x712b
mov dword [ebp - 0x240], str.peogualq_xvunwl_zhgulujvq_fzedpl_oievvps_efjp_uul_cuqf_btoung_croytqony
cmp dword [ebp - 0x130], 0x73ce
jle 0x45c037
push 0x1e13
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
and dword [ebp - 0xe4], 0
jmp 0x45bf95
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xa23
jge 0x45c037
and dword [ebp - 0x34], 0
jmp 0x45bfb2
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x7864
jge 0x45c032
and dword [ebp - 0xac], 0
jmp 0x45bfd1
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x1ba6
jge 0x45c02d
and dword [ebp - 0x3c], 0
jmp 0x45bfea
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x244
jge 0x45c02b
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0x34]
add eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x3c]
cdq
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], edx
push dword [ebp - 0x220]
push dword [ebp - 0x224]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45bfe3
jmp 0x45bfc4
jmp 0x45bfab
jmp 0x45bf88
cmp dword [ebp - 0x164], 0x58e9
jle 0x45c0ab
and dword [ebp - 0x104], 0
jmp 0x45c059
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x4695
jge 0x45c0ab
and dword [ebp - 0x44], 0
jmp 0x45c072
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x5e86
jge 0x45c0a9
mov eax, dword [ebp - 0x104]
or eax, dword [ebp - 0x44]
cdq
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], edx
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45c06b
jmp 0x45c04c
mov dword [ebp - 4], 4
cmp dword [ebp - 0x130], 0x6d57
jge 0x45c0ce
mov edx, dword [ebp - 0x240]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45c0ea
or dword [ebp - 4], 0xffffffff
jmp 0x45c0f4
cmp dword [ebp + 8], 2
jl 0x45d29f
mov dword [ebp - 0x158], 0x43f0
mov dword [ebp - 0x198], str.npwm_qnzuuoujy_qoctebgz_iczmjtatn_bojttytsy_txbf
cmp dword [ebp - 0x158], 0x4696
jle 0x45c18e
and dword [ebp - 0xb4], 0
jmp 0x45c134
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x5e57
jge 0x45c188
and dword [ebp - 0x4c], 0
jmp 0x45c14d
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x14ae
jge 0x45c186
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x4c]
sar eax, cl
cdq
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], edx
push dword [ebp - 0x230]
push dword [ebp - 0x234]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45c146
jmp 0x45c127
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
push 1
lea eax, [ebp - 0x374]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.00453ac9
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x2a8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x2a8]
lea edi, [ebp - 0x29c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x158], 0x4228
jge 0x45c1e0
mov edx, dword [ebp - 0x198]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45c1fc
or dword [ebp - 4], 0xffffffff
jmp 0x45c206
mov dword [ebp - 0x170], 0x5ca1
mov dword [ebp - 0x138], 0x6971
mov dword [ebp - 0x280], str.ctzkv_bcgdgotuy_yfga_nytgjzwtq_ipjlz_bhtojjf_bztsojfph_tuvzsmhlu_ogtd_tunkybypi_xdavjxni_lprlu_fzhdo_yptuzredl
cmp dword [ebp - 0x138], 0x6a2e
jle 0x45c2ce
and dword [ebp - 0xec], 0
jmp 0x45c24a
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x2ed8
jge 0x45c2b8
and dword [ebp - 0x54], 0
jmp 0x45c263
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x7eda
jge 0x45c2b6
mov eax, dword [ebp - 0xec]
xor eax, dword [ebp - 0x54]
cdq
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], edx
push dword [ebp - 0x274]
push dword [ebp - 0x278]
lea ecx, [ebp - 0x320]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x320]
call fcn.00402d76
jmp 0x45c25c
jmp 0x45c23d
push 0
push 0
push 0x1097
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x1bc], str.cxz_rcp_bamnj_ydzrwcxdg_pbfe_zxjkgidy
mov dword [ebp - 4], 8
cmp dword [ebp - 0x138], 0x674f
jge 0x45c2f7
push dword [ebp - 0x280]
call fcn.00481635
pop ecx
jmp 0x45c313
or dword [ebp - 4], 0xffffffff
jmp 0x45c31d
mov dword [ebp - 0x148], 0x5395
mov dword [ebp - 0x288], str.hihbmtqxh_npm_zarms_sxthhk_mihyja_mxdoyyxg_kolpvhq_glmuly_pqtfumtfe_clwuwfm_votdbp_rrzcl_qqqq_fiyt
cmp dword [ebp - 0x148], 0x5609
jle 0x45c430
and dword [ebp - 0xbc], 0
jmp 0x45c357
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x20e5
jge 0x45c41e
and dword [ebp - 0x5c], 0
jmp 0x45c374
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x4986
jge 0x45c419
and dword [ebp - 0x114], 0
jmp 0x45c397
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x17b7
jge 0x45c414
and dword [ebp - 0x64], 0
jmp 0x45c3b0
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x709a
jge 0x45c40f
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x114]
sub ecx, dword [ebp - 0x64]
and eax, ecx
cdq
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], edx
push dword [ebp - 0x184]
push dword [ebp - 0x188]
lea ecx, [ebp - 0x2c0]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x2c0]
call fcn.00402d76
jmp 0x45c3a9
jmp 0x45c38a
jmp 0x45c36d
jmp 0x45c34a
push 0x3c9
push 0x1a4
push 0
call dword [sym.imp.GDI32.dll_PtInRegion]
cmp dword [ebp - 0x170], 0x5eb8
jle 0x45c7fc
mov dword [ebp - 0x160], 0x57bf
mov dword [ebp - 0x1b0], str.riazodlpx_owkvu_lpoipo_zuiadrjui_dat
cmp dword [ebp - 0x160], 0x5855
jle 0x45c4eb
and dword [ebp - 0xc4], 0
jmp 0x45c47a
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x1217
jge 0x45c4eb
and dword [ebp - 0x6c], 0
jmp 0x45c493
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x5ba3
jge 0x45c4e9
mov eax, dword [ebp - 0xc4]
cdq
idiv dword [ebp - 0x6c]
mov eax, edx
cdq
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], edx
push dword [ebp - 0x190]
push dword [ebp - 0x194]
lea ecx, [ebp - 0x2d8]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x2d8]
call fcn.00402d76
jmp 0x45c48c
jmp 0x45c46d
and dword [ebp - 0x84], 0
jmp 0x45c501
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x424a
jge 0x45c7b7
and dword [ebp - 0xd4], 0
jmp 0x45c527
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x4a76
jge 0x45c7b2
mov dword [ebp - 0x124], 0x3d
mov dword [ebp - 0x24c], str.xinpran_obhx_mdmbi_rulmwxnq_gbgllqxi_dgyhd_nclnyb_ohbp_crklqzb_ubsuof
cmp dword [ebp - 0x124], 0x20c
jle 0x45c5f3
and dword [ebp - 0xf4], 0
jmp 0x45c571
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x4d5b
jge 0x45c5df
and dword [ebp - 0x74], 0
jmp 0x45c58a
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x1b46
jge 0x45c5dd
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0x74]
cdq
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], edx
push dword [ebp - 0x19c]
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x308]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x308]
call fcn.00402d76
jmp 0x45c583
jmp 0x45c564
push 0xe4f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
and dword [ebp - 0x8c], 0
jmp 0x45c609
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x3e48
jge 0x45c768
mov dword [ebp - 0x178], 0x5abc
mov dword [ebp - 0x1a4], str.gvwpnhuv_vehqxrnm_qvpixroty
cmp dword [ebp - 0x178], 0x5c95
jle 0x45c6e2
call dword [sym.imp.KERNEL32.dll_GetVersion]
and dword [ebp - 0xcc], 0
jmp 0x45c659
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x348d
jge 0x45c6da
and dword [ebp - 0x7c], 0
jmp 0x45c672
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x6cf8
jge 0x45c6d5
and dword [ebp - 0x10c], 0
jmp 0x45c691
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x5ef
jge 0x45c6d3
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x10c]
sar eax, cl
cdq
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], edx
push dword [ebp - 0x1a8]
push dword [ebp - 0x1ac]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45c684
jmp 0x45c66b
jmp 0x45c64c
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov eax, dword [ebp - 0x84]
cdq
idiv dword [ebp - 0xd4]
and edx, dword [ebp - 0x8c]
mov eax, edx
cdq
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], edx
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x178], 0x57c9
jge 0x45c727
mov edx, dword [ebp - 0x1a4]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45c743
or dword [ebp - 4], 0xffffffff
jmp 0x45c74d
push dword [ebp - 0x1b4]
push dword [ebp - 0x1b8]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45c5fc
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x124], 0xfffffca0
jge 0x45c787
push dword [ebp - 0x24c]
call fcn.00481635
pop ecx
jmp 0x45c7a3
or dword [ebp - 4], 0xffffffff
jmp 0x45c7ad
jmp 0x45c51a
jmp 0x45c4f4
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x160], 0x5525
jge 0x45c7d6
push dword [ebp - 0x1b0]
call fcn.00481635
pop ecx
jmp 0x45c7f2
or dword [ebp - 4], 0xffffffff
jmp 0x45c7fc
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x148], 0x5267
jge 0x45c81b
push dword [ebp - 0x288]
call fcn.00481635
pop ecx
jmp 0x45c837
or dword [ebp - 4], 0xffffffff
jmp 0x45c841
cmp dword [ebp - 0x29c], 0
je 0x45c85e
push 0
push dword [ebp - 0x294]
push dword [ebp - 0x298]
call dword [ebp - 0x29c]
mov dword [ebp - 0x128], 0x3fd9
mov dword [ebp - 0x1c8], str.sour_inqahtjij_xmdn_hiqfrxa_ufdwy_kdzityte_cqty_efhyvvn_zrzbw_rie_wdk_gorxbxh
cmp dword [ebp - 0x128], 0x40a6
jle 0x45c956
push 0x866
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
and dword [ebp - 0xfc], 0
jmp 0x45c8a5
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x1f76
jge 0x45c956
and dword [ebp - 0x94], 0
jmp 0x45c8cb
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x190d
jge 0x45c951
and dword [ebp - 0xdc], 0
jmp 0x45c8ed
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x4c25
jge 0x45c94c
mov eax, dword [ebp - 0xfc]
add eax, dword [ebp - 0x94]
xor eax, dword [ebp - 0xdc]
cdq
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c0], edx
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x338]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x338]
call fcn.00402d76
jmp 0x45c8e0
jmp 0x45c8be
jmp 0x45c898
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x170], 0x5ada
jge 0x45c979
mov edx, dword [ebp - 0x1bc]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45cac3
or dword [ebp - 4], 0xffffffff
jmp 0x45cacd
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x128], 0x3e54
jge 0x45caec
push dword [ebp - 0x1c8]
call fcn.00481635
pop ecx
jmp 0x45cb08
or dword [ebp - 4], 0xffffffff
jmp 0x45cb12
mov dword [ebp - 0x154], 0x61b3
mov dword [ebp - 0x180], str.otxum_kxjt_iikltr_wgnkagc_furxz_jtibfwcq_llvkbbur_hvxopudsw_tuk
cmp dword [ebp - 0x154], 0x645c
jle 0x45d0fe
mov dword [ebp - 0x14c], 0xac6
mov dword [ebp - 0x28c], str.mod_hary_gwexabhx_wbgegm_ayiblfbh_wvrx_sedsg_knq
cmp dword [ebp - 0x14c], 0xb29
jle 0x45cbee
and dword [ebp - 0x48], 0
jmp 0x45cb67
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x444f
jge 0x45cbee
and dword [ebp - 0x30], 0
jmp 0x45cb7d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x22f5
jge 0x45cbe9
and dword [ebp - 0x38], 0
jmp 0x45cb93
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x53b3
jge 0x45cbe7
and dword [ebp - 0x40], 0
jmp 0x45cba9
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x69d7
jge 0x45cbe5
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
sar eax, cl
and eax, dword [ebp - 0x48]
cdq
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], edx
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45cba2
jmp 0x45cb8c
jmp 0x45cb76
jmp 0x45cb60
and dword [ebp - 0x90], 0
jmp 0x45cc04
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x6606
jge 0x45d0b5
and dword [ebp - 0x98], 0
jmp 0x45cc2a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x38c
jge 0x45d0b0
mov dword [ebp - 0x144], 0x1ef9
mov dword [ebp - 0x1e0], str.mpge_igxiw_gnyxfob
cmp dword [ebp - 0x144], 0x2009
jle 0x45ccf3
and dword [ebp - 0x60], 0
jmp 0x45cc6b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x6164
jge 0x45ccf3
and dword [ebp - 0x50], 0
jmp 0x45cc81
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x3c2d
jge 0x45ccee
and dword [ebp - 0x58], 0
jmp 0x45cc97
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x4d66
jge 0x45ccec
and dword [ebp - 0x68], 0
jmp 0x45ccad
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x686a
jge 0x45ccea
mov ecx, dword [ebp - 0x50]
imul ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x60]
sar eax, cl
xor eax, dword [ebp - 0x68]
cdq
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], edx
push dword [ebp - 0x1e4]
push dword [ebp - 0x1e8]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45cca6
jmp 0x45cc90
jmp 0x45cc7a
jmp 0x45cc64
and dword [ebp - 0xa0], 0
jmp 0x45cd09
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x4ec
jge 0x45d062
mov dword [ebp - 0x13c], 0x1feb
mov dword [ebp - 0x264], str.lwie_aksmxo_elau_wyx_tbeqorn_fzskdije_xroello_sab_cvx_idbnfwm
cmp dword [ebp - 0x13c], 0x2187
jle 0x45cd93
and dword [ebp - 0x70], 0
jmp 0x45cd46
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x761d
jge 0x45cd93
and dword [ebp - 0x78], 0
jmp 0x45cd5c
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x7e63
jge 0x45cd91
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x78]
cdq
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1f0], edx
push dword [ebp - 0x1f0]
push dword [ebp - 0x1f4]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45cd55
jmp 0x45cd3f
and dword [ebp - 0xa8], 0
jmp 0x45cda9
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x30a2
jge 0x45d014
mov dword [ebp - 0x12c], 0xbaa
mov dword [ebp - 0x290], str.xqqsghan_zls_bgy_lfl_tvwnpg_zza_lyhrlkd_yog_dfqnhhf
cmp dword [ebp - 0x12c], 0xd6f
jle 0x45ce62
and dword [ebp - 0x80], 0
jmp 0x45cdea
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x62f9
jge 0x45ce62
and dword [ebp - 0x88], 0
jmp 0x45ce09
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x721a
jge 0x45ce60
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x88]
cdq
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], edx
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
lea ecx, [ebp - 0x38c]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x38c]
call fcn.00402d76
jmp 0x45cdfc
jmp 0x45cde3
mov eax, dword [ebp - 0x90]
cdq
idiv dword [ebp - 0x98]
imul edx, dword [ebp - 0xa0]
or edx, dword [ebp - 0xa8]
mov eax, edx
cdq
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x218], edx
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x12c], 0x9d3
jge 0x45ceaa
push dword [ebp - 0x290]
call fcn.00481635
pop ecx
jmp 0x45cec6
or dword [ebp - 4], 0xffffffff
jmp 0x45ced0
mov dword [ebp - 0x134], 0x211b
mov dword [ebp - 0x1d4], str.cogc_mhporsf_keif_gopdat_cpzxfo_txdw_tqjwc_iohjky_euhhr_eddcna_arqqgjvgk_aklrt
cmp dword [ebp - 0x134], 0x2251
jle 0x45cfb0
and dword [ebp - 0xb0], 0
jmp 0x45cf0a
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x5103
jge 0x45cf9f
and dword [ebp - 0xb8], 0
jmp 0x45cf30
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x78ea
jge 0x45cf9a
and dword [ebp - 0xc0], 0
jmp 0x45cf52
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x521a
jge 0x45cf98
mov eax, dword [ebp - 0xb0]
cdq
idiv dword [ebp - 0xb8]
xor edx, dword [ebp - 0xc0]
mov eax, edx
cdq
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], edx
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45cf45
jmp 0x45cf23
jmp 0x45cefd
push 0x13d2
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CombineRgn]
push dword [ebp - 0x218]
push dword [ebp - 0x21c]
mov ecx, 0xab4b00
call fcn.0047c980
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x134], 0x1e1a
jge 0x45cfe9
mov edx, dword [ebp - 0x1d4]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45d005
or dword [ebp - 4], 0xffffffff
jmp 0x45d00f
jmp 0x45cd9c
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x13c], 0x1dd2
jge 0x45d037
mov edx, dword [ebp - 0x264]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45d053
or dword [ebp - 4], 0xffffffff
jmp 0x45d05d
jmp 0x45ccfc
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x144], 0x1c91
jge 0x45d085
mov edx, dword [ebp - 0x1e0]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45d0a1
or dword [ebp - 4], 0xffffffff
jmp 0x45d0ab
jmp 0x45cc1d
jmp 0x45cbf7
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x14c], 0x741
jge 0x45d0d8
mov edx, dword [ebp - 0x28c]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45d0f4
or dword [ebp - 4], 0xffffffff
jmp 0x45d0fe
jmp 0x45d62e
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x16c], 0x7424
mov dword [ebp - 0x284], str.pqubbtap_okbr_wxiiosyu_kthw_wxfikg_inmdne_urkv_khtyakoh
cmp dword [ebp - 0x16c], 0x7494
jle 0x45d355
and dword [ebp - 0xe8], 0
jmp 0x45d2e0
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xcdd
jge 0x45d341
and dword [ebp - 0xf0], 0
jmp 0x45d302
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x5911
jge 0x45d33f
mov eax, dword [ebp - 0xe8]
or eax, dword [ebp - 0xf0]
cdq
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], edx
push dword [ebp - 0x238]
push dword [ebp - 0x23c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45d2f5
jmp 0x45d2d3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
cmp dword [ebp - 0x164], 0x5593
jge 0x45d371
mov edx, dword [ebp - 0x1f8]
mov ecx, 0xab4b00
call fcn.0047de2e
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x16c], 0x7276
jge 0x45d391
mov edx, dword [ebp - 0x284]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45d3ad
mov dword [ebp - 4], 0x26
jmp 0x45d3bd
jmp 0x45d4c2
or dword [ebp - 4], 0xffffffff
jmp 0x45d4cc
mov dword [ebp - 0x17c], 0x421b
mov dword [ebp - 0x27c], str.vsopdmih_mduvfpw_erfwy_pqfbjt_zxcxtwl_tfhxqcle_swvpuityl_ywpnbe
cmp dword [ebp - 0x17c], 0x44a3
jle 0x45d5da
and dword [ebp - 0x120], 0
jmp 0x45d506
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x90d
jge 0x45d5cb
and dword [ebp - 0x118], 0
jmp 0x45d52c
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x73a9
jge 0x45d5c6
and dword [ebp - 0x108], 0
jmp 0x45d552
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x1af7
jge 0x45d5c1
and dword [ebp - 0x110], 0
jmp 0x45d574
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x655a
jge 0x45d5bf
mov ecx, dword [ebp - 0x108]
sub ecx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x118]
sar eax, cl
and eax, dword [ebp - 0x120]
cdq
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], edx
push dword [ebp - 0x250]
push dword [ebp - 0x254]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45d567
jmp 0x45d545
jmp 0x45d51f
jmp 0x45d4f9
push 0x16ff
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.0045d641
pop ecx
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x17c], 0x3ecf
jge 0x45d608
mov edx, dword [ebp - 0x27c]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45d624
or dword [ebp - 4], 0xffffffff
jmp 0x45d62e
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret