Function at 0x476d1c
Capabilities:
Authenticate hmac
Check os version
Delete directory
Encrypt data using speck
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ae933
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2760
call fcn.004aa590
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 3
lea ecx, [ebp - 0x1958]
call fcn.0042fb3f
mov dword [ebp - 0x814], 0xb64b5c6f
mov dword [ebp - 0x81c], 0
mov dword [ebp - 0x1180], 0xed1e12aa
lea eax, [ebp - 0x1958]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.0047170b
pop ecx
pop ecx
mov dword [ebp - 0x244], 0
jmp 0x476d9e
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 1
jge 0x476dba
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x14ac], 0x2c5b641b
jmp 0x476d91
push 1
lea ecx, [ebp - 0x1958]
call fcn.0042fc2d
cmp dword [eax], 0x72fd4914
jge 0x476ddb
mov dword [ebp - 0x1170], 1
jmp 0x476de2
and dword [ebp - 0x1170], 0
push 1
lea ecx, [ebp - 0x1958]
call fcn.0042fc2d
cmp dword [eax], 0
jne 0x476e41
push 4
pop eax
sub eax, dword [ebp - 0x814]
sub eax, dword [ebp - 0x814]
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x814]
cmp dword [ebp - 0x81c], eax
jge 0x476e23
mov dword [ebp - 0xcc8], 1
jmp 0x476e2a
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0x1180]
cmp dword [ebp - 0xcc8], eax
jl 0x476e41
and dword [ebp - 0x1168], 0
jmp 0x476e4b
mov dword [ebp - 0x1168], 1
push 1
lea ecx, [ebp - 0x1958]
call fcn.0042fc2d
mov ecx, dword [ebp - 0x1168]
cmp ecx, dword [eax]
jg 0x476e6e
mov dword [ebp - 0x1178], 1
jmp 0x476e75
and dword [ebp - 0x1178], 0
mov eax, dword [ebp - 0x1170]
cmp eax, dword [ebp - 0x1178]
jge 0x476e8f
mov dword [ebp - 0x1924], 1
jmp 0x476e96
and dword [ebp - 0x1924], 0
mov eax, dword [ebp - 0x1180]
mov dword [ebp - 0x1ef0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x81c]
mov dword [ebp + eax - 0x14ac], ecx
call fcn.004745f5
lea ecx, [ebp - 0x1958]
call fcn.0042fc11
mov dword [ebp - 0x14b4], 0xffffffff
mov dword [ebp - 0x14bc], 2
mov dword [ebp - 0x14cc], 0xa1c17c77
mov dword [ebp - 0x14c4], 0xfe81720d
call fcn.00471790
push 0
lea eax, [ebp - 0x14b4]
push eax
push 1
lea eax, [ebp - 0x14bc]
push eax
lea eax, [ebp - 0x14c4]
push eax
push 0x4ecf
lea eax, [ebp - 0x14cc]
push eax
call fcn.0046ceff
add esp, 0x1c
mov dword [ebp - 0x1a8], 0x576c3a0b
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x14dc], 0xba22e974
mov dword [ebp - 0x24c], 0xffffffff
mov dword [ebp - 0x14d4], 0x703c
mov dword [ebp - 0x14e4], 0xffffffff
mov dword [ebp - 0x2294], 0xffffffff
mov dword [ebp - 0x1f2c], 0x51ac06e3
push 1
lea ecx, [ebp - 0x1ff0]
call fcn.0042fb3f
push 0x739f
push 0x612d
push 1
push 0
push 0x5796
lea eax, [ebp - 0x1ff0]
push eax
push 0x5777
push 0x7491
push 1
lea eax, [ebp - 0x2178]
push eax
call fcn.0046e236
add esp, 0x28
lea eax, [ebp - 0x14d4]
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x14dc]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x14e4]
push eax
call fcn.00448dd1
add esp, 0x18
mov dword [ebp - 0x24c], 0xfffffff1
jmp 0x476ffc
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x29
jge 0x47722e
mov dword [ebp - 0x14fc], 0xa77b69c9
mov dword [ebp - 0x1504], 0x89fa
mov dword [ebp - 0x26c], 0
jmp 0x477036
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 2
jge 0x477052
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x23e4], 0
jmp 0x477029
mov dword [ebp - 0x250], 0x10
jmp 0x47706b
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x1d
jl 0x47721c
mov dword [ebp - 0x1188], 0x37b3
mov dword [ebp - 0x14ec], str.hjd_hflrghehu_phn_peyjlac_lnb_fcbprewka_foxqpmm_pzd_zmxsh
cmp dword [ebp - 0x1188], 0x3887
jle 0x477144
and dword [ebp - 0x4a0], 0
jmp 0x4770b2
mov eax, dword [ebp - 0x4a0]
inc eax
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x4a0], 0x5dcd
jge 0x477144
and dword [ebp - 0x274], 0
jmp 0x4770d8
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x7b61
jge 0x47713f
and dword [ebp - 0x48c], 0
jmp 0x4770fa
mov eax, dword [ebp - 0x48c]
inc eax
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0x5edd
jge 0x47713d
mov eax, dword [ebp - 0x4a0]
add eax, dword [ebp - 0x274]
and eax, dword [ebp - 0x48c]
cdq
mov dword [ebp - 0x1558], eax
mov dword [ebp - 0x1554], edx
push dword [ebp - 0x1554]
push dword [ebp - 0x1558]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x4770ed
jmp 0x4770cb
jmp 0x4770a5
mov dword [ebp - 0x27c], 0
jmp 0x47715d
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 1
jge 0x477179
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x14f4], 0x1094
jmp 0x477150
and dword [ebp - 4], 0
cmp dword [ebp - 0x1188], 0x33fc
jge 0x477199
mov edx, dword [ebp - 0x14ec]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x4771b5
or dword [ebp - 4], 0xffffffff
jmp 0x4771bf
mov dword [ebp - 0x1a8], 0x14
jmp 0x4771d8
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x1f
jge 0x4771e8
call fcn.004717b8
jmp 0x4771cb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14f4], 0xffffffff
ja 0x477204
mov dword [ebp - 0x1190], 1
jmp 0x47720b
and dword [ebp - 0x1190], 0
mov eax, dword [ebp - 0x1190]
mov dword [ebp - 0x14fc], eax
jmp 0x47705e
lea eax, [ebp - 0x1504]
push eax
call fcn.00425959
pop ecx
jmp 0x476fef
lea ecx, [ebp - 0x1ff0]
call fcn.0042fc11
push 3
lea ecx, [ebp - 0x1968]
call fcn.0042fb3f
mov dword [ebp - 0x824], 0xb64b5c6f
mov dword [ebp - 0x1e04], 0xa5d6c05b
mov dword [ebp - 0x1e00], 0xa5d6c05b
mov dword [ebp - 0x1dfc], 0xa5d6c05b
mov dword [ebp - 0x1df8], 0xa5d6c05b
mov dword [ebp - 0x284], 7
mov dword [ebp - 0x1198], 0x188e17b8
mov dword [ebp - 0x150c], 5
mov dword [ebp - 0x151c], 0x66d2
mov dword [ebp - 0x584], 0
jmp 0x4772b9
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 2
jge 0x4772d5
mov eax, dword [ebp - 0x584]
mov dword [ebp + eax*4 - 0x11d4], 0x8da8e97e
jmp 0x4772ac
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x11d4], 0
jmp 0x477303
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11d4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x11d4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x11d4], 3
jg 0x477354
mov dword [ebp - 0x200], 0xfffffff8
mov dword [ebp - 0x200], 0
jmp 0x477336
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 4
jge 0x477352
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x1e04], 0
jmp 0x477329
jmp 0x4772e8
mov dword [ebp - 0x284], 0
jmp 0x47736d
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0xfffffffa
jg 0x4773bd
mov dword [ebp - 0x1514], 0xfffffffd
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1198]
mov dword [ebp + eax - 0x11d4], ecx
push 0
lea eax, [ebp - 0x150c]
push eax
lea eax, [ebp - 0x1198]
push eax
push 1
lea eax, [ebp - 0x1514]
push eax
lea eax, [ebp - 0x151c]
push eax
call fcn.00470b4e
add esp, 0x18
jmp 0x477360
mov dword [ebp - 0x82c], 0
mov dword [ebp - 0x11c0], 0xed1e12aa
call fcn.004717f2
mov dword [ebp - 0x494], 0xe91a049f
mov dword [ebp - 0x494], 0xfffffff5
jmp 0x4773f9
mov eax, dword [ebp - 0x494]
dec eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0xffffffe6
jl 0x47748a
mov dword [ebp - 0x28c], 8
mov dword [ebp - 0x1524], 0x3f365653
mov dword [ebp - 0x28c], 0x1c
jmp 0x477433
mov eax, dword [ebp - 0x28c]
dec eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0xffffffea
je 0x477485
mov dword [ebp - 0x640], 0
jmp 0x477455
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 4
jge 0x477471
mov eax, dword [ebp - 0x640]
mov dword [ebp + eax*4 - 0x2484], 0x509978f3
jmp 0x477448
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2484]
mov dword [ebp - 0x1524], eax
jmp 0x477426
jmp 0x4773ec
lea eax, [ebp - 0x1968]
push eax
lea eax, [ebp - 0x1b0]
push eax
call fcn.0047170b
pop ecx
pop ecx
mov dword [ebp - 0x1b0], 0
jmp 0x4774b8
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 1
jge 0x4774d4
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x1534], 0x2c5b641b
jmp 0x4774ab
call fcn.0047460b
push 1
lea ecx, [ebp - 0x1968]
call fcn.0042fc2d
cmp dword [eax], 0x72fd4914
jge 0x4774fa
mov dword [ebp - 0x11b0], 1
jmp 0x477501
and dword [ebp - 0x11b0], 0
push 1
lea ecx, [ebp - 0x1968]
call fcn.0042fc2d
cmp dword [eax], 0
jne 0x477560
push 4
pop eax
sub eax, dword [ebp - 0x824]
sub eax, dword [ebp - 0x824]
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x824]
cmp dword [ebp - 0x82c], eax
jge 0x477542
mov dword [ebp - 0x11a0], 1
jmp 0x477549
and dword [ebp - 0x11a0], 0
mov eax, dword [ebp - 0x11c0]
cmp dword [ebp - 0x11a0], eax
jl 0x477560
and dword [ebp - 0x11a8], 0
jmp 0x47756a
mov dword [ebp - 0x11a8], 1
push 1
lea ecx, [ebp - 0x1968]
call fcn.0042fc2d
mov ecx, dword [ebp - 0x11a8]
cmp ecx, dword [eax]
jg 0x47758d
mov dword [ebp - 0x11b8], 1
jmp 0x477594
and dword [ebp - 0x11b8], 0
mov eax, dword [ebp - 0x11b0]
cmp eax, dword [ebp - 0x11b8]
jge 0x4775ae
mov dword [ebp - 0x152c], 1
jmp 0x4775b5
and dword [ebp - 0x152c], 0
mov eax, dword [ebp - 0x11c0]
mov dword [ebp - 0x1f34], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x82c]
mov dword [ebp + eax - 0x1534], ecx
call fcn.00474624
mov byte [ebp - 0xed], 0
mov dword [ebp - 0x1b88], 0x61928c17
mov dword [ebp - 0x1b84], 0x61928c17
mov dword [ebp - 0x1b80], 0x61928c17
mov dword [ebp - 0x1b7c], 0x61928c17
mov dword [ebp - 0x7c], 0xca8fecf7
mov dword [ebp - 0x294], 0
jmp 0x477628
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x477644
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x720], 0
jmp 0x47761b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x720], 3
jmp 0x477672
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x720]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x720], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x720], 0
jl 0x47771f
mov dword [ebp - 0x2220], 1
mov dword [ebp - 0x1cb0], 0xedb5cabf
mov dword [ebp - 0x1cac], 0xedb5cabf
mov dword [ebp - 0x1ca8], 0xedb5cabf
mov dword [ebp - 0x1ca4], 0xedb5cabf
lea ecx, [ebp - 0x74d]
call fcn.0042fc3c
push eax
lea eax, [ebp - 0x1ca0]
push eax
lea eax, [ebp - 0x1cb0]
push eax
lea ecx, [ebp - 0x2434]
call fcn.0042fc3f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x22fc]
call fcn.0042fbeb
mov dword [ebp - 0x153c], 0x5154
lea eax, [ebp - 0x153c]
push eax
push 0
push 1
push 0x7709
call fcn.0046d950
add esp, 0x10
lea ecx, [ebp - 0x22fc]
call fcn.0042fc11
jmp 0x477657
mov dword [ebp - 0x7c], 0xffffffe7
jmp 0x47772f
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffed
jne 0x477b79
mov dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0xd94], 0xd90538e0
mov dword [ebp - 0x1900], 0x732bab2
mov dword [ebp - 0x49c], 0
jmp 0x477770
mov eax, dword [ebp - 0x49c]
inc eax
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 2
jge 0x47778c
mov eax, dword [ebp - 0x49c]
mov dword [ebp + eax*4 - 0x668], 0xfffffffb
jmp 0x477763
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x668], 1
jmp 0x4777ba
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x668]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x668], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x668], 0x1b
je 0x4779c2
mov dword [ebp - 0x11c8], 0x4df1
mov dword [ebp - 0x1544], str.eefdvwr_vpweveed_zpqllg_hbr_wwrpmncik_tfm_whtn_wjjdd
cmp dword [ebp - 0x11c8], 0x50a1
jle 0x4778ac
push 0
push 0x134e
push 0
call dword [sym.imp.KERNEL32.dll_HeapFree]
and dword [ebp - 0x29c], 0
jmp 0x477817
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x49a0
jge 0x4778ac
and dword [ebp - 0x58c], 0
jmp 0x47783d
mov eax, dword [ebp - 0x58c]
inc eax
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 0x2ed4
jge 0x4778a7
and dword [ebp - 0x2a4], 0
jmp 0x47785f
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x7831
jge 0x4778a5
mov eax, dword [ebp - 0x29c]
cdq
idiv dword [ebp - 0x58c]
xor edx, dword [ebp - 0x2a4]
mov eax, edx
cdq
mov dword [ebp - 0x1564], eax
mov dword [ebp - 0x1560], edx
push dword [ebp - 0x1560]
push dword [ebp - 0x1564]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x477852
jmp 0x477830
jmp 0x47780a
mov dword [ebp - 0x1bd8], 0x5d76270
mov dword [ebp - 0x1bd4], 0x5d76270
mov dword [ebp - 0x1bd0], 0x5d76270
mov dword [ebp - 0x1bcc], 0x5d76270
mov dword [ebp - 4], 2
cmp dword [ebp - 0x11c8], 0x4a19
jge 0x4778f7
mov edx, dword [ebp - 0x1544]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x477913
or dword [ebp - 4], 0xffffffff
jmp 0x47791d
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1bd8]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x1bd8], eax
mov dword [ebp - 0x180], 0xfffffff1
jmp 0x477951
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x18
jg 0x4779bd
mov dword [ebp - 0x1240], 0xabf7c2f5
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1b88], 0
je 0x4779ab
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x720], 0
je 0x477996
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x477996
mov dword [ebp - 0x1238], 1
jmp 0x47799d
and dword [ebp - 0x1238], 0
mov eax, dword [ebp - 0x1238]
mov dword [ebp - 0x1240], eax
jmp 0x4779b0
call fcn.00474a18
cmp dword [ebp - 0x1240], 0
je 0x4779bb
jmp 0x477944
jmp 0x477944
jmp 0x47779f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x668]
mov dword [ebp - 0x1f3c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x720]
cmp dword [ebp + eax - 0x668], ecx
jne 0x4779fd
mov dword [ebp - 0x154c], 1
jmp 0x477a04
and dword [ebp - 0x154c], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1b88], 0
mov eax, dword [ebp - 0xd94]
mov dword [ebp - 0x2180], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1f44], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x668]
mov dword [ebp - 0x1248], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1248]
mov dword [ebp + eax - 0x720], ecx
mov eax, dword [ebp - 0x1248]
neg eax
cmp eax, 1
jae 0x477a69
mov dword [ebp - 0x18f0], 1
jmp 0x477a70
and dword [ebp - 0x18f0], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x22bc], eax
mov eax, 0x56eb
cmp eax, 0x1984
je 0x477a91
mov dword [ebp - 0x1250], 1
jmp 0x477a98
and dword [ebp - 0x1250], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x668]
cmp dword [ebp - 0x1250], eax
je 0x477ab9
mov dword [ebp - 0x1284], 1
jmp 0x477ac0
and dword [ebp - 0x1284], 0
imul eax, dword [ebp - 0x1284], 0x2f33
test eax, eax
je 0x477adc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x720], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x668], 0x2708cdb
cmp dword [ebp - 0x7c], 0x2708cdb
jle 0x477b0b
mov eax, 0x585c2c10
test eax, eax
je 0x477b0b
mov dword [ebp - 0x1280], 1
jmp 0x477b12
and dword [ebp - 0x1280], 0
mov eax, dword [ebp - 0x1280]
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jne 0x477b36
cmp dword [ebp - 0x7c], 0
jne 0x477b36
and dword [ebp - 0x1204], 0
jmp 0x477b40
mov dword [ebp - 0x1204], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x1204], eax
jle 0x477b57
mov dword [ebp - 0x18f8], 1
jmp 0x477b5e
and dword [ebp - 0x18f8], 0
mov eax, dword [ebp - 0xd94]
mov dword [ebp - 0x1f4c], eax
mov dword [ebp - 0x1900], 0x28c51f7e
jmp 0x477728
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x47801d
mov dword [ebp - 0xd9c], 0x4856
mov dword [ebp - 0x1928], str.jhlit_pspxl_xokgaa_jow_vqfzbhuxe_oleckrpxo_ukv_jpqqjw
cmp dword [ebp - 0xd9c], 0x4b68
jle 0x477c55
push 0x253b
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
and dword [ebp - 0x4a4], 0
jmp 0x477bcf
mov eax, dword [ebp - 0x4a4]
inc eax
mov dword [ebp - 0x4a4], eax
cmp dword [ebp - 0x4a4], 0x7681
jge 0x477c4f
and dword [ebp - 0x2ac], 0
jmp 0x477bf1
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x413b
jge 0x477c4a
mov eax, dword [ebp - 0x4a4]
sub eax, dword [ebp - 0x2ac]
cdq
mov dword [ebp - 0x1570], eax
mov dword [ebp - 0x156c], edx
push dword [ebp - 0x156c]
push dword [ebp - 0x1570]
lea ecx, [ebp - 0x24f8]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.0042fa1f
push eax
call fcn.00498447
pop ecx
lea ecx, [ebp - 0x24f8]
call fcn.0042fa15
jmp 0x477be4
jmp 0x477bc2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1908], 0xade19d29
mov dword [ebp - 0x1c38], 0x25b0e446
mov dword [ebp - 0x1c34], 0x25b0e446
mov dword [ebp - 0x1c30], 0x25b0e446
mov dword [ebp - 0x1c2c], 0x25b0e446
lea ecx, [ebp - 0x7e9]
call fcn.0042fc3c
push eax
lea eax, [ebp - 0x1c28]
push eax
lea eax, [ebp - 0x1c38]
push eax
lea ecx, [ebp - 0x244c]
call fcn.0042fc3f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2000]
call fcn.0042fbeb
mov eax, dword [ebp - 0x1908]
mov dword [ebp - 0x1160], eax
push 1
lea ecx, [ebp - 0x2000]
call fcn.0042fc2d
mov ecx, dword [ebp - 0x1160]
mov dword [eax], ecx
cmp dword [ebp - 0x1160], 0
jne 0x477f7c
mov dword [ebp - 0x1e44], 9
mov dword [ebp - 0x1e40], 9
mov dword [ebp - 0x1e3c], 9
mov dword [ebp - 0x1e38], 9
mov dword [ebp - 0x2188], 0
mov dword [ebp - 0x1920], 0x7d8cf4c5
mov dword [ebp - 0x894], 0x26b9
mov dword [ebp - 0x1910], str.nmkszlp_ddebhqqjd_jojuj_mxw_goiqh_ecu_gizqeyd_oqrlws_ieuvitku_nhx_iewo_bhksp_bpyqw
cmp dword [ebp - 0x894], 0x2902
jle 0x477dbd
and dword [ebp - 0x608], 0
jmp 0x477d5c
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 0x3bc3
jge 0x477dbd
and dword [ebp - 0x2b4], 0
jmp 0x477d7e
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x12c
jge 0x477dbb
mov eax, dword [ebp - 0x608]
sub eax, dword [ebp - 0x2b4]
cdq
mov dword [ebp - 0x157c], eax
mov dword [ebp - 0x1578], edx
push dword [ebp - 0x1578]
push dword [ebp - 0x157c]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x477d71
jmp 0x477d4f
mov dword [ebp - 0x1264], 0x5145ccb9
mov dword [ebp - 4], 4
cmp dword [ebp - 0x894], 0x24d8
jge 0x477dea
mov edx, dword [ebp - 0x1910]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x477e06
or dword [ebp - 4], 0xffffffff
jmp 0x477e10
mov dword [ebp - 0x4ac], 0
jmp 0x477e29
mov eax, dword [ebp - 0x4ac]
inc eax
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 4
jge 0x477e45
mov eax, dword [ebp - 0x4ac]
mov dword [ebp + eax*4 - 0x2770], 8
jmp 0x477e1c
mov dword [ebp - 0x89c], 0x1cf8
mov dword [ebp - 0x1918], str.uvptrpskv_fzh_wmqub
cmp dword [ebp - 0x89c], 0x1e09
jle 0x477f12
and dword [ebp - 0x2c4], 0
jmp 0x477e7f
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x5cdd
jge 0x477f12
and dword [ebp - 0x2bc], 0
jmp 0x477ea5
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x72a7
jge 0x477f0d
and dword [ebp - 0x594], 0
jmp 0x477ec7
mov eax, dword [ebp - 0x594]
inc eax
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 0x6e69
jge 0x477f0b
mov eax, dword [ebp - 0x2bc]
imul eax, dword [ebp - 0x594]
or eax, dword [ebp - 0x2c4]
cdq
mov dword [ebp - 0x1588], eax
mov dword [ebp - 0x1584], edx
push dword [ebp - 0x1584]
push dword [ebp - 0x1588]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x477eba
jmp 0x477e98
jmp 0x477e72
mov eax, dword [ebp - 0x1264]
dec eax
mov dword [ebp - 0x1264], eax
mov dword [ebp - 4], 6
cmp dword [ebp - 0x89c], 0x1c4f
jge 0x477f42
mov edx, dword [ebp - 0x1918]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x477f5e
or dword [ebp - 4], 0xffffffff
jmp 0x477f68
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1e44]
mov dword [ebp - 0x1920], eax
jmp 0x477fb7
push 0
push 0x3a3b
push 0x6ada
push 1
push 0x7a2c
push 0x25eb
push 0
push 0x4140
push 0x2231
push 0x1a03
push 0x1573
call fcn.0046f1e9
add esp, 0x2c
call fcn.004718d8
lea ecx, [ebp - 0x2000]
call fcn.0042fc11
mov dword [ebp - 4], 8
cmp dword [ebp - 0xd9c], 0x457f
jge 0x477fe1
push dword [ebp - 0x1928]
call fcn.00498447
pop ecx
jmp 0x477ffd
or dword [ebp - 4], 0xffffffff
jmp 0x478007
push 0
push 0
push 0x353e
push 0x4c7
call fcn.0046ee21
add esp, 0x10
lea ecx, [ebp - 0x1968]
call fcn.0042fc11
push 1
lea ecx, [ebp - 0x1d30]
call fcn.0042fb3f
mov dword [ebp - 0x48], 0x18885c6f
mov dword [ebp - 0x8ac], 0x7a98815c
mov dword [ebp - 0x8a4], 0xfffffffd
mov dword [ebp - 0xfc], 0xca968364
mov dword [ebp - 0x1938], 0x51938d10
mov dword [ebp - 0x1f54], 1
push 0x12f4
lea eax, [ebp - 0x2228]
push eax
lea eax, [ebp - 0x1d30]
push eax
push 0
push 0
push 0x4f6c
call fcn.0046b2b5
add esp, 0x18
mov dword [ebp - 0x48], 0
jmp 0x4780a2
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x4780be
mov byte [ebp - 0x115], 0
lea eax, [ebp - 0x115]
push eax
call fcn.00474a31
pop ecx
jmp 0x47809b
push 0
lea ecx, [ebp - 0x1d30]
call fcn.0042fc2d
cmp dword [eax], 0
je 0x4780fb
mov dword [ebp - 0x8a4], 0x456e
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
je 0x4780fb
mov dword [ebp - 0x101c], 1
jmp 0x478102
and dword [ebp - 0x101c], 0
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x101c]
add eax, dword [ebp - 0x48]
cmp eax, 1
jle 0x47811f
mov dword [ebp - 0xda4], 1
jmp 0x478126
and dword [ebp - 0xda4], 0
mov dword [ebp - 0x8ac], 1
mov eax, dword [ebp - 0x8ac]
cmp eax, dword [ebp - 0xda4]
je 0x47814a
mov dword [ebp - 0x8b4], 1
jmp 0x478151
and dword [ebp - 0x8b4], 0
cmp dword [ebp - 0x8b4], 0xffffffff
jne 0x478166
mov dword [ebp - 0x115c], 1
jmp 0x47816d
and dword [ebp - 0x115c], 0
mov eax, dword [ebp - 0x115c]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x478530
mov dword [ebp - 0x2dc], 0xfffffffe
mov dword [ebp - 0x83c], 0x2a907865
mov dword [ebp - 0x834], 0xfffffffe
mov dword [ebp - 0xfc], 0
jmp 0x4781b7
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x47852e
mov dword [ebp - 0x844], 0xfffffffe
mov dword [ebp - 0x8bc], 0x6206
mov dword [ebp - 0x1930], str.rmc_tvyeqdyao_ivzhpjlu_rqkc
cmp dword [ebp - 0x8bc], 0x6367
jle 0x4782cd
and dword [ebp - 0x2d4], 0
jmp 0x478208
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x65d5
jge 0x4782cd
and dword [ebp - 0x4b4], 0
jmp 0x47822e
mov eax, dword [ebp - 0x4b4]
inc eax
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 0x7998
jge 0x4782c8
and dword [ebp - 0x2cc], 0
jmp 0x478254
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x1aab
jge 0x4782c3
and dword [ebp - 0x660], 0
jmp 0x478276
mov eax, dword [ebp - 0x660]
inc eax
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0x3ece
jge 0x4782c1
mov ecx, dword [ebp - 0x4b4]
sub ecx, dword [ebp - 0x2cc]
sub ecx, dword [ebp - 0x660]
mov eax, dword [ebp - 0x2d4]
sar eax, cl
cdq
mov dword [ebp - 0x1594], eax
mov dword [ebp - 0x1590], edx
push dword [ebp - 0x1590]
push dword [ebp - 0x1594]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x478269
jmp 0x478247
jmp 0x478221
jmp 0x4781fb
mov dword [ebp - 0x1e14], 0x9820b275
mov dword [ebp - 0x1e10], 0x9820b275
mov dword [ebp - 0x1e0c], 0x9820b275
mov dword [ebp - 0x1e08], 0x9820b275
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x8bc], 0x5ee2
jge 0x478318
mov edx, dword [ebp - 0x1930]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x478334
or dword [ebp - 4], 0xffffffff
jmp 0x47833e
mov dword [ebp - 0x1940], 0x2ce6c1cc
mov dword [ebp - 0x48], 0
jmp 0x478358
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jl 0x47851b
mov dword [ebp - 0x8d4], 0xacda2a4f
mov dword [ebp - 0x4bc], 0
jmp 0x478385
mov eax, dword [ebp - 0x4bc]
inc eax
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 3
jge 0x4783a1
mov eax, dword [ebp - 0x4bc]
mov dword [ebp + eax*4 - 0x1a84], 0xffffffff
jmp 0x478378
mov dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
add eax, dword [ebp - 0x844]
jne 0x4783eb
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a84]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1a84]
dec ecx
push 4
pop edx
shl edx, 1
mov dword [ebp + edx - 0x1a84], ecx
test eax, eax
jne 0x4783eb
and dword [ebp - 0xdac], 0
jmp 0x4783f5
mov dword [ebp - 0xdac], 1
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x83c]
cmp dword [ebp - 0xdac], eax
jle 0x47841b
mov dword [ebp - 0x8c4], 1
jmp 0x478422
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x1938], eax
mov dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x834], eax
je 0x478452
mov dword [ebp - 0x1024], 1
jmp 0x478459
and dword [ebp - 0x1024], 0
mov eax, dword [ebp - 0x844]
cmp eax, dword [ebp - 0x1024]
jl 0x478473
mov dword [ebp - 0x8cc], 1
jmp 0x47847a
and dword [ebp - 0x8cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a84]
sub eax, dword [ebp - 0x1940]
cmp eax, dword [ebp - 0x8cc]
jg 0x4784a1
mov dword [ebp - 0xdb4], 1
jmp 0x4784a8
and dword [ebp - 0xdb4], 0
mov eax, dword [ebp - 0xdb4]
mov dword [ebp - 0x8d4], eax
cmp dword [ebp - 0x8d4], 0
je 0x4784c4
cmp dword [ebp - 0xfc], 0
cmp dword [ebp - 0x2dc], 0xb0a94fe8
jae 0x4784dc
mov dword [ebp - 0x120c], 1
jmp 0x4784e3
and dword [ebp - 0x120c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1e14]
cmp dword [ebp - 0x120c], eax
jg 0x478503
mov dword [ebp - 0x8dc], 1
jmp 0x47850a
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x83c], eax
jmp 0x478351
cmp dword [ebp - 0x844], 0
je 0x478529
jmp 0x4781aa
jmp 0x4781aa
jmp 0x478549
mov byte [ebp - 0x12d], 0
lea eax, [ebp - 0x12d]
push eax
call fcn.00471908
pop ecx
call fcn.00474a4e
lea ecx, [ebp - 0x1d30]
call fcn.0042fc11
mov dword [ebp - 0x884], 0x2e91a04
mov dword [ebp - 0x880], 0x2e91a04
mov dword [ebp - 0x87c], 0x2e91a04
mov dword [ebp - 0x878], 0x2e91a04
mov dword [ebp - 0x854], 0
mov dword [ebp - 0x5c], 4
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x884], 0x1d
jmp 0x4785bb
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x884]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x884], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x884], 0xfffffffe
jle 0x4786e0
mov dword [ebp - 0x102c], 0
mov dword [ebp - 0x59c], 0
jmp 0x4785f2
mov eax, dword [ebp - 0x59c]
inc eax
mov dword [ebp - 0x59c], eax
cmp dword [ebp - 0x59c], 4
jge 0x47860e
mov eax, dword [ebp - 0x59c]
mov dword [ebp + eax*4 - 0x238c], 0x18d9dce
jmp 0x4785e5
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x884], 0
jne 0x478630
mov eax, 0x3859
test eax, eax
jne 0x478630
and dword [ebp - 0xdbc], 0
jmp 0x47863a
mov dword [ebp - 0xdbc], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x884]
sub eax, dword [ebp - 0xdbc]
mov dword [ebp - 0x854], eax
je 0x478661
mov dword [ebp - 0x8e4], 1
jmp 0x478668
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x102c], eax
mov eax, dword [ebp - 0x102c]
mov dword [ebp - 0x1f5c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x884]
mov dword [ebp - 0x2190], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x884]
mov dword [ebp - 0x1f64], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x229c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x884]
mov dword [ebp + ecx - 0x238c], eax
lea eax, [ebp - 0x854]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00474a64
pop ecx
pop ecx
jmp 0x4785a0
mov dword [ebp - 0x5c], 0
jmp 0x4786f0
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x12
je 0x47894c
mov dword [ebp - 0x240], 1
mov dword [ebp - 0xdcc], 0xbd1a6f32
mov dword [ebp - 0x904], 0x6b1b
mov dword [ebp - 0x1948], str.uotjhgpik_lzuz_pvvqre_najlc_nsporlw_lnxceiqf_thehc_mkibzlwe_kjdxtb_lsm_nszlounlc_faiypjqc_apoqy_mvnxobskn
cmp dword [ebp - 0x904], 0x6c31
jle 0x478804
and dword [ebp - 0x2e4], 0
jmp 0x478748
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0xee6
jge 0x4787f9
and dword [ebp - 0x4c4], 0
jmp 0x47876e
mov eax, dword [ebp - 0x4c4]
inc eax
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x4c4], 0x8b7
jge 0x4787f4
and dword [ebp - 0x2ec], 0
jmp 0x478790
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x1b99
jge 0x4787ef
mov eax, dword [ebp - 0x2e4]
add eax, dword [ebp - 0x4c4]
sub eax, dword [ebp - 0x2ec]
cdq
mov dword [ebp - 0x15a0], eax
mov dword [ebp - 0x159c], edx
push dword [ebp - 0x159c]
push dword [ebp - 0x15a0]
lea ecx, [ebp - 0x2510]
call fcn.004018f3
pop ecx
pop ecx
mov ecx, eax
call fcn.0042fa1f
push eax
call fcn.00498447
pop ecx
lea ecx, [ebp - 0x2510]
call fcn.0042fa15
jmp 0x478783
jmp 0x478761
jmp 0x47873b
push 0x263a
call dword [sym.imp.GDI32.dll_RealizePalette]
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x884], 0
jne 0x47884d
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x1f6c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2198], eax
mov eax, 0xd58
test eax, eax
je 0x478846
cmp dword [ebp - 0x240], 0
je 0x478846
mov dword [ebp - 0x8ec], 1
jmp 0x47884d
and dword [ebp - 0x8ec], 0
mov eax, 0x5799
cmp eax, 0x96a4
jl 0x478865
mov dword [ebp - 0xdc4], 1
jmp 0x47886c
and dword [ebp - 0xdc4], 0
mov eax, dword [ebp - 0x240]
imul eax, dword [ebp - 0xdc4]
sub eax, dword [ebp - 0x240]
jne 0x478885
cmp dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1f74], eax
mov eax, 0x7d594484
test eax, eax
jne 0x4788a6
cmp dword [ebp - 0x5c], 0
jne 0x4788a6
and dword [ebp - 0x8f4], 0
jmp 0x4788b0
mov dword [ebp - 0x8f4], 1
mov eax, dword [ebp - 0x240]
imul eax, dword [ebp - 0x8f4]
cmp eax, dword [ebp - 0x5c]
jg 0x4788ce
mov dword [ebp - 0x1164], 1
jmp 0x4788d5
and dword [ebp - 0x1164], 0
mov eax, dword [ebp - 0xdcc]
cmp dword [ebp - 0x1164], eax
jl 0x4788ef
mov dword [ebp - 0x8fc], 1
jmp 0x4788f6
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0xdcc], eax
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x904], 0x697e
jge 0x478921
push dword [ebp - 0x1948]
call fcn.00498447
pop ecx
jmp 0x47893d
or dword [ebp - 4], 0xffffffff
jmp 0x478947
jmp 0x4786e9
mov dword [ebp - 0xd8], 0x24a8c6a5
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x208], 0xadeb9459
mov dword [ebp - 0x7e0], 1
mov dword [ebp - 0x758], 0xe8ca4045
mov dword [ebp - 0x610], 0
jmp 0x478997
mov eax, dword [ebp - 0x610]
inc eax
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 2
jge 0x4789b3
mov eax, dword [ebp - 0x610]
mov dword [ebp + eax*4 - 0x1b10], 0xb1b9
jmp 0x47898a
mov dword [ebp - 0xd8], 0xffffffeb
jmp 0x4789cc
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x16
jge 0x478e11
mov dword [ebp - 0x104], 0x661c4438
mov dword [ebp - 0x2f4], 0
jmp 0x4789fc
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 2
jge 0x478a18
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x19c], 0
jmp 0x4789ef
cmp dword [ebp - 0xd8], 0
jne 0x478c0d
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x19c]
cmp dword [ebp + eax - 0x19c], ecx
jg 0x478a4d
mov dword [ebp - 0x1034], 1
jmp 0x478a54
and dword [ebp - 0x1034], 0
cmp dword [ebp - 0x1034], 0xfffffffa
jle 0x478a69
mov dword [ebp - 0x90c], 1
jmp 0x478a70
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x90c], eax
jg 0x478a8a
mov dword [ebp - 0xdd4], 1
jmp 0x478a91
and dword [ebp - 0xdd4], 0
mov eax, dword [ebp - 0x1b8]
imul eax, dword [ebp - 0xdd4]
test eax, eax
jne 0x478aae
mov dword [ebp - 0x914], 1
jmp 0x478ab5
and dword [ebp - 0x914], 0
imul eax, dword [ebp - 0x914], 0x4257
cmp dword [ebp - 0xd8], eax
jle 0x478ad3
mov dword [ebp - 0x1244], 1
jmp 0x478ada
and dword [ebp - 0x1244], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x19c]
cmp dword [ebp - 0x1244], eax
jle 0x478afb
mov dword [ebp - 0x1a48], 1
jmp 0x478b02
and dword [ebp - 0x1a48], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19c]
mov dword [ebp - 0x2230], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x104]
cmp dword [ebp + eax - 0x19c], ecx
jg 0x478b36
mov dword [ebp - 0x91c], 1
jmp 0x478b3d
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x91c], eax
jne 0x478b57
mov dword [ebp - 0xddc], 1
jmp 0x478b5e
and dword [ebp - 0xddc], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0xddc], eax
jl 0x478b78
mov dword [ebp - 0x1a50], 1
jmp 0x478b7f
and dword [ebp - 0x1a50], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1f7c], eax
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x104], eax
jne 0x478ba5
mov dword [ebp - 0x924], 1
jmp 0x478bac
and dword [ebp - 0x924], 0
cmp dword [ebp - 0x924], 1
jl 0x478bc1
mov dword [ebp - 0x103c], 1
jmp 0x478bc8
and dword [ebp - 0x103c], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x103c], eax
jne 0x478be2
mov dword [ebp - 0x92c], 1
jmp 0x478be9
and dword [ebp - 0x92c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19c]
imul eax, dword [ebp - 0x92c]
sub eax, 0x290b
jne 0x478c0d
and dword [ebp - 0xde4], 0
jmp 0x478c17
mov dword [ebp - 0xde4], 1
mov eax, dword [ebp - 0xde4]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x208]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x19c]
sub eax, dword [ebp - 0x1b8]
sub eax, 0x9284
cmp eax, dword [ebp - 0x1b8]
jne 0x478c55
mov dword [ebp - 0x934], 1
jmp 0x478c5c
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x7e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x19c]
cmp dword [ebp - 0x7e0], eax
jge 0x478c89
mov dword [ebp - 0x116c], 1
jmp 0x478c90
and dword [ebp - 0x116c], 0
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x116c], eax
jge 0x478caa
mov dword [ebp - 0x93c], 1
jmp 0x478cb1
and dword [ebp - 0x93c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19c]
add eax, dword [ebp - 0x93c]
cmp eax, 0x1f0b
je 0x478cde
push 8
pop eax
test eax, eax
je 0x478cde
mov dword [ebp - 0xdec], 1
jmp 0x478ce5
and dword [ebp - 0xdec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b10]
cmp dword [ebp - 0xdec], eax
jle 0x478d06
mov dword [ebp - 0x944], 1
jmp 0x478d0d
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x1b8], 0
jne 0x478da0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x758], eax
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x104], eax
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x478d5d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x19c], 0
je 0x478d5d
mov dword [ebp - 0x1a58], 1
jmp 0x478d64
and dword [ebp - 0x1a58], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b10], 0xfffffff6
jg 0x478d80
mov dword [ebp - 0x1a60], 1
jmp 0x478d87
and dword [ebp - 0x1a60], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x19c], 1
jae 0x478da0
and dword [ebp - 0x1044], 0
jmp 0x478daa
mov dword [ebp - 0x1044], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19c]
add eax, dword [ebp - 0x1044]
cmp eax, dword [ebp - 0x7e0]
jge 0x478dd1
mov dword [ebp - 0x94c], 1
jmp 0x478dd8
and dword [ebp - 0x94c], 0
cmp dword [ebp - 0x94c], 0xffff
jne 0x478df9
cmp dword [ebp - 0x208], 0
je 0x478df9
mov dword [ebp - 0xdf4], 1
jmp 0x478e00
and dword [ebp - 0xdf4], 0
mov eax, dword [ebp - 0xdf4]
mov dword [ebp - 0x208], eax
jmp 0x4789bf
mov dword [ebp - 0x954], 0x6761
mov dword [ebp - 0x1a68], str.ymp_sccbyhw_kdeuwf_yryxap_rixl_qshw_tglwhndiq_kjhkyw_dwbzsi_ikhzredr_eqxlhlts_jxoao
cmp dword [ebp - 0x954], 0x6b30
jle 0x478ea9
and dword [ebp - 0x4cc], 0
jmp 0x478e47
mov eax, dword [ebp - 0x4cc]
inc eax
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 0x57ff
jge 0x478ea9
and dword [ebp - 0x2fc], 0
jmp 0x478e69
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x1d7d
jge 0x478ea7
mov eax, dword [ebp - 0x4cc]
imul eax, dword [ebp - 0x2fc]
cdq
mov dword [ebp - 0x15ac], eax
mov dword [ebp - 0x15a8], edx
push dword [ebp - 0x15a8]
push dword [ebp - 0x15ac]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x478e5c
jmp 0x478e3a
mov byte [ebp - 0xf8], 0
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x954], 0x6748
jge 0x478ed3
mov edx, dword [ebp - 0x1a68]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x478eef
or dword [ebp - 4], 0xffffffff
jmp 0x478ef9
lea eax, [ebp - 0xf8]
push eax
call fcn.00474ac1
pop ecx
push 1
lea ecx, [ebp - 0x1d00]
call fcn.0042fb3f
mov dword [ebp - 0x50], 0x18885c6f
mov dword [ebp - 0x118c], 0x7a98815c
push 0
push 0x916
push 0
push 0x2d37
call fcn.0046bec1
add esp, 0x10
mov dword [ebp - 0xe64], 0xfffffffd
mov dword [ebp - 0x11c], 0xca968364
push 1
lea ecx, [ebp - 0x1978]
call fcn.0042fb3f
mov dword [ebp - 0x1c0], 0
jmp 0x478f74
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x478f90
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x24b0], 0x624039b6
jmp 0x478f67
lea eax, [ebp - 0x1978]
push eax
push 0
lea eax, [ebp - 0x1c0]
push eax
push 0
call fcn.0046d553
add esp, 0x10
call fcn.004719cc
push 0
lea ecx, [ebp - 0x1978]
call fcn.0042fc2d
and dword [eax], 0
jmp 0x478fe5
push 0
lea ecx, [ebp - 0x1978]
call fcn.0042fc2d
mov dword [ebp - 0x1214], eax
mov eax, dword [ebp - 0x1214]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1214]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1978]
call fcn.0042fc2d
cmp dword [eax], 2
jg 0x47903a
mov dword [ebp - 0x5a4], 0xfe1ca2
mov dword [ebp - 0x5a4], 2
jmp 0x47901a
mov eax, dword [ebp - 0x5a4]
dec eax
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 0
jl 0x479033
push 0
push 0x1a92
call fcn.00489b4b
pop ecx
pop ecx
jmp 0x47900d
call fcn.00474b03
jmp 0x478fc1
lea ecx, [ebp - 0x1978]
call fcn.0042fc11
mov dword [ebp - 0x13c0], 0x51938d10
push 2
lea ecx, [ebp - 0x2010]
call fcn.0042fb3f
mov dword [ebp - 0x18c], 0xc184c506
mov dword [ebp - 0x304], 0
jmp 0x47907f
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 2
jge 0x4790a1
push dword [ebp - 0x304]
lea ecx, [ebp - 0x2010]
call fcn.0042fc2d
mov dword [eax], 0x5b57
jmp 0x479072
mov dword [ebp - 0x18c], 0
jmp 0x4790ba
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 1
jg 0x4792a7
mov dword [ebp - 0xb8], 0x7c8a6b95
push 3
lea ecx, [ebp - 0x1d48]
call fcn.0042fb3f
lea eax, [ebp - 0x230]
push eax
push 0x6a26
push 0
push 0x38eb
lea eax, [ebp - 0x1d48]
push eax
push 0x86c
call fcn.004951af
add esp, 0x18
mov dword [ebp - 0x230], 0
jmp 0x47911e
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 2
jge 0x47913a
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x21cc], 0xfffffffa
jmp 0x479111
mov dword [ebp - 0xb8], 1
jmp 0x479153
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x479297
mov dword [ebp - 0x1804], 0xffffffff
cmp dword [ebp - 0xb8], 0
je 0x479178
jmp 0x479297
cmp dword [ebp - 0x18c], 0xfffffff7
ja 0x47918d
mov dword [ebp - 0xdfc], 1
jmp 0x479194
and dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x95c], eax
push 1
lea ecx, [ebp - 0x1d48]
call fcn.0042fc2d
mov ecx, dword [ebp - 0x95c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x95c]
sub eax, 5
cmp dword [ebp - 0xdfc], eax
je 0x4791d2
mov dword [ebp - 0x964], 1
jmp 0x4791d9
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x964]
jge 0x4791f3
mov dword [ebp - 0x104c], 1
jmp 0x4791fa
and dword [ebp - 0x104c], 0
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x104c]
jge 0x479214
mov dword [ebp - 0x96c], 1
jmp 0x47921b
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x96c], eax
jne 0x479235
mov dword [ebp - 0xe04], 1
jmp 0x47923c
and dword [ebp - 0xe04], 0
mov eax, dword [ebp - 0x1804]
cmp dword [ebp - 0xe04], eax
je 0x479256
mov dword [ebp - 0x974], 1
jmp 0x47925d
and dword [ebp - 0x974], 0
cmp dword [ebp - 0x974], 0xffff
jb 0x479275
mov dword [ebp - 0x1174], 1
jmp 0x47927c
and dword [ebp - 0x1174], 0
mov eax, dword [ebp - 0x1174]
add eax, 8
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x21cc], eax
jmp 0x479146
lea ecx, [ebp - 0x1d48]
call fcn.0042fc11
jmp 0x4790ad
lea ecx, [ebp - 0x2010]
call fcn.0042fc11
mov dword [ebp - 0x21a0], 1
push 1
lea ecx, [ebp - 0x12ec]
call fcn.0042fb3f
mov dword [ebp - 0xe24], 0xffffffff
mov dword [ebp - 0x176c], 0xb844a754
mov dword [ebp - 0x760], 0x2cf415d7
mov dword [ebp - 0x84c], 0
mov dword [ebp - 0xe0c], 0xb963ab1
mov dword [ebp - 0x768], 0xfe23a266
mov dword [ebp - 0x97c], 0x3203bd65
mov dword [ebp - 0x770], 0x8531d14
push 3
lea ecx, [ebp - 0x12e0]
call fcn.0042fb3f
mov dword [ebp - 0x7e8], 1
mov dword [ebp - 0x105c], 0xd12f8ba7
mov dword [ebp - 0xe2c], 0xfffffff7
mov dword [ebp - 0x14a4], 0x1d49
mov dword [ebp - 0x24], 0
jmp 0x47935e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x479374
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2414], 2
jmp 0x479357
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x12ec]
push eax
push 1
push 0
call fcn.0046b055
add esp, 0x10
mov dword [ebp - 0x24], 0
jmp 0x47939b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x4793b7
push dword [ebp - 0x24]
lea ecx, [ebp - 0x12e0]
call fcn.0042fc2d
mov dword [eax], 0x98aaf0a9
jmp 0x479394
mov dword [ebp - 0x24], 0
jmp 0x4793c7
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x4793dd
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x23a4], 0x963e
jmp 0x4793c0
mov eax, dword [ebp - 0x7e8]
inc eax
mov dword [ebp - 0x7e8], eax
mov dword [ebp - 0x97c], 1
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x1f84], eax
mov esi, dword [ebp - 0xe24]
mov edi, dword [ebp - 0xe0c]
push 1
lea ecx, [ebp - 0x12e0]
call fcn.0042fc2d
imul edi, dword [eax]
cmp esi, edi
jle 0x47942c
mov dword [ebp - 0x984], 1
jmp 0x479433
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0xe0c]
cmp dword [ebp - 0x984], eax
jne 0x47944d
mov dword [ebp - 0x1054], 1
jmp 0x479454
and dword [ebp - 0x1054], 0
mov eax, dword [ebp - 0x760]
cmp dword [ebp - 0x1054], eax
jne 0x47946e
mov dword [ebp - 0x98c], 1
jmp 0x479475
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x84c]
cmp dword [ebp - 0x98c], eax
jne 0x47948f
mov dword [ebp - 0xe14], 1
jmp 0x479496
and dword [ebp - 0xe14], 0
imul eax, dword [ebp - 0xe14], 0x1355
test eax, eax
jne 0x4794b6
mov eax, 0x1c8d
test eax, eax
jne 0x4794b6
and dword [ebp - 0x994], 0
jmp 0x4794c0
mov dword [ebp - 0x994], 1
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x760], eax
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x770]
inc eax
cmp eax, 0x20f620a3
jle 0x4794f2
mov dword [ebp - 0x127c], 1
jmp 0x4794f9
and dword [ebp - 0x127c], 0
mov esi, dword [ebp - 0x768]
add esi, dword [ebp - 0x127c]
push 1
lea ecx, [ebp - 0x12e0]
call fcn.0042fc2d
cmp esi, dword [eax]
jl 0x479522
mov dword [ebp - 0x99c], 1
jmp 0x479529
and dword [ebp - 0x99c], 0
cmp dword [ebp - 0x99c], 0xa7b5
jne 0x479541
mov dword [ebp - 0xe1c], 1
jmp 0x479548
and dword [ebp - 0xe1c], 0
mov eax, dword [ebp - 0x105c]
cmp dword [ebp - 0xe1c], eax
jle 0x479562
mov dword [ebp - 0x9a4], 1
jmp 0x479569
and dword [ebp - 0x9a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2414]
mov dword [ebp - 0x1328], eax
push 0
lea ecx, [ebp - 0x12ec]
call fcn.0042fc2d
mov ecx, dword [ebp - 0x1328]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x12e0]
call fcn.0042fc2d
mov ecx, dword [ebp - 0x9a4]
mov dword [eax], ecx
mov eax, 0xb10079d6
sub eax, dword [ebp - 0x105c]
cmp eax, 0xfffffffe
jb 0x4795c2
mov dword [ebp - 0x9ac], 1
jmp 0x4795c9
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0xe24], eax
cmp dword [ebp - 0x14a4], 0
jne 0x4795f9
push 0
lea ecx, [ebp - 0x12ec]
call fcn.0042fc2d
cmp dword [eax], 0
jne 0x4795f9
and dword [ebp - 0x9b4], 0
jmp 0x479603
mov dword [ebp - 0x9b4], 1
mov eax, dword [ebp - 0xe2c]
cmp eax, dword [ebp - 0x9b4]
jne 0x47961b
call fcn.00474be8
jmp 0x47977c
mov dword [ebp - 0x150], 0x6fac5adf
mov esi, dword [ebp - 0x150]
push 0
lea ecx, [ebp - 0x12ec]
call fcn.0042fc2d
cmp esi, dword [eax]
jle 0x479648
mov dword [ebp - 0x117c], 1
jmp 0x47964f
and dword [ebp - 0x117c], 0
push 0
lea ecx, [ebp - 0x12e0]
call fcn.0042fc2d
mov ecx, dword [ebp - 0x117c]
cmp ecx, dword [eax]
jge 0x479672
mov dword [ebp - 0x9bc], 1
jmp 0x479679
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x9bc]
mov dword [ebp - 0x84c], eax
cmp dword [ebp - 0x84c], 0
jne 0x47969c
xor eax, eax
inc eax
jne 0x47969c
and dword [ebp - 0x9c4], 0
jmp 0x4796a6
mov dword [ebp - 0x9c4], 1
mov eax, dword [ebp - 0xe2c]
cmp dword [ebp - 0x9c4], eax
je 0x4796c0
mov dword [ebp - 0x1064], 1
jmp 0x4796c7
and dword [ebp - 0x1064], 0
mov eax, dword [ebp - 0x1064]
sub eax, 9
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x768], eax
jge 0x4796f0
mov dword [ebp - 0x1878], 1
jmp 0x4796f7
and dword [ebp - 0x1878], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x22dc], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x1f8c], eax
mov eax, dword [ebp - 0x7e8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x23a4]
sub eax, dword [ebp - 0x150]
je 0x479740
cmp dword [ebp - 0x150], 0
je 0x479740
mov dword [ebp - 0x1330], 1
jmp 0x479747
and dword [ebp - 0x1330], 0
push 0
lea ecx, [ebp - 0x12ec]
call fcn.0042fc2d
cmp dword [ebp - 0x770], 0xfffffffe
jle 0x479769
mov dword [ebp - 0x9cc], 1
jmp 0x479770
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x9cc]
mov dword [ebp - 0x176c], eax
lea ecx, [ebp - 0x12e0]
call fcn.0042fc11
lea ecx, [ebp - 0x12ec]
call fcn.0042fc11
lea eax, [ebp - 0x1d00]
push eax
lea eax, [ebp - 0x21a8]
push eax
call fcn.00474c1e
pop ecx
pop ecx
mov dword [ebp - 0x50], 0
jmp 0x4797b7
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x479d7e
mov dword [ebp - 0x10c], 0x62fd41e5
mov dword [ebp - 0x30c], 9
mov dword [ebp - 0xa0c], 0xffffffff
mov dword [ebp - 0x1778], 0x1460deea
mov dword [ebp - 0x4d4], 0
jmp 0x479802
mov eax, dword [ebp - 0x4d4]
inc eax
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 3
jge 0x47981e
mov eax, dword [ebp - 0x4d4]
mov dword [ebp + eax*4 - 0x2308], 0xffffffff
jmp 0x4797f5
call fcn.00474c66
mov dword [ebp - 0x10c], 0xfffffff3
jmp 0x47983c
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xfffffff0
je 0x479bc1
mov dword [ebp - 0xa4], 0xde2167fa
mov dword [ebp - 0x828], 0
mov dword [ebp - 0x121c], 5
mov dword [ebp - 0xa4], 0x12
jmp 0x479880
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x479bbc
mov dword [ebp - 0x778], 0xffff
mov dword [ebp - 0x1c8], 0x85f402be
mov dword [ebp - 0x1338], 0xc245e320
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x1f94], eax
cmp dword [ebp - 0x10c], 0
jne 0x4798cc
mov dword [ebp - 0xe4c], 1
jmp 0x4798d3
and dword [ebp - 0xe4c], 0
mov dword [ebp - 0x30c], 0xffffffff
cmp dword [ebp - 0x30c], 0
je 0x47998a
cmp dword [ebp - 0x30c], 0xeb66
jle 0x479902
mov dword [ebp - 0xe34], 1
jmp 0x479909
and dword [ebp - 0xe34], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0xe34], eax
jle 0x479923
mov dword [ebp - 0x9d4], 1
jmp 0x47992a
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x121c], eax
mov eax, dword [ebp - 0x121c]
mov dword [ebp - 0x2244], eax
mov eax, dword [ebp - 0x1338]
mov dword [ebp - 0x1f9c], eax
mov eax, dword [ebp - 0x1c8]
sub eax, 0x7a2e
je 0x47996c
xor eax, eax
inc eax
je 0x47996c
mov dword [ebp - 0x9dc], 1
jmp 0x479973
and dword [ebp - 0x9dc], 0
imul eax, dword [ebp - 0x9dc], 0xfffffffc
test eax, eax
je 0x47998a
mov dword [ebp - 0xe3c], 1
jmp 0x479991
and dword [ebp - 0xe3c], 0
cmp dword [ebp - 0xe3c], 0xffffffff
jne 0x4799a6
mov dword [ebp - 0x9e4], 1
jmp 0x4799ad
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x9e4]
neg eax
cmp eax, dword [ebp - 0x10c]
jge 0x4799c9
mov dword [ebp - 0x106c], 1
jmp 0x4799d0
and dword [ebp - 0x106c], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x106c], eax
jle 0x4799ea
mov dword [ebp - 0x9ec], 1
jmp 0x4799f1
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x828]
cmp dword [ebp - 0x9ec], eax
jg 0x479a0b
mov dword [ebp - 0xe44], 1
jmp 0x479a12
and dword [ebp - 0xe44], 0
mov eax, dword [ebp - 0xe44]
sub eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xa4]
jne 0x479a2a
xor eax, eax
je 0x479a41
xor eax, eax
je 0x479a41
push 4
pop eax
test eax, eax
je 0x479a41
mov dword [ebp - 0x9f4], 1
jmp 0x479a48
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x828]
cmp dword [ebp - 0x9f4], eax
jne 0x479a62
mov dword [ebp - 0x1184], 1
jmp 0x479a69
and dword [ebp - 0x1184], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x1184], eax
jne 0x479a83
mov dword [ebp - 0x9fc], 1
jmp 0x479a8a
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x9fc], eax
jne 0x479aa4
mov dword [ebp - 0xa04], 1
jmp 0x479aab
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0xe4c]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x778]
cmp eax, dword [ebp - 0xa04]
je 0x479ad1
mov dword [ebp - 0x1880], 1
jmp 0x479ad8
and dword [ebp - 0x1880], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x21b0], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1fa4], eax
mov eax, 0xffff
cmp eax, 0x1081
jb 0x479b08
mov dword [ebp - 0x1074], 1
jmp 0x479b0f
and dword [ebp - 0x1074], 0
mov eax, dword [ebp - 0x1074]
mov dword [ebp - 0xa0c], eax
cmp dword [ebp - 0xa0c], 0
je 0x479b2d
cmp dword [ebp - 0x30c], 0
jne 0x479b3b
xor eax, eax
inc eax
jne 0x479b3b
and dword [ebp - 0x1340], 0
jmp 0x479b45
mov dword [ebp - 0x1340], 1
mov eax, dword [ebp - 0x1778]
mov dword [ebp - 0x22a4], eax
xor eax, eax
inc eax
cmp eax, 0xeb6b
jl 0x479b70
cmp dword [ebp - 0x778], 0
je 0x479b70
mov dword [ebp - 0xe54], 1
jmp 0x479b77
and dword [ebp - 0xe54], 0
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0xe54]
test eax, eax
je 0x479ba4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2308], 0
je 0x479ba4
mov dword [ebp - 0xa14], 1
jmp 0x479bab
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0x1c8], eax
jmp 0x479873
jmp 0x47982f
mov dword [ebp - 0x210], 0x60477862
mov dword [ebp - 0x1888], 0xffffffff
mov dword [ebp - 0x1348], 0x936be856
mov dword [ebp - 0x1350], 0x86335c0d
mov dword [ebp - 0x210], 0x1b
jmp 0x479c02
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0xfffffff2
je 0x479c45
mov dword [ebp - 0x648], 6
mov dword [ebp - 0x648], 0x19
jmp 0x479c2e
mov eax, dword [ebp - 0x648]
dec eax
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 0xffffffe6
jne 0x479c3e
call fcn.00474c8c
jmp 0x479c21
call fcn.00474ca2
jmp 0x479bf5
lea eax, [ebp - 0x1348]
push eax
lea eax, [ebp - 0x1888]
push eax
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x1350]
push eax
call fcn.00471aaa
add esp, 0x10
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x479d79
mov dword [ebp - 0x1784], 0xb72fd491
mov dword [ebp - 0x1890], 0xfffffffb
mov dword [ebp - 0x1fac], 1
mov dword [ebp - 0x20a8], 0xf38c0887
mov dword [ebp - 0x1fb4], 0x744d0289
mov dword [ebp - 0x20b0], 0
mov dword [ebp - 0x1fbc], 4
mov dword [ebp - 0x20b8], 0xfffffffd
mov dword [ebp - 0x1fc4], 0xb9a733e3
mov dword [ebp - 0x20c0], 0
push 1
lea ecx, [ebp - 0x2020]
call fcn.0042fb3f
mov dword [ebp - 0x1358], 0x104272ba
lea eax, [ebp - 0x2020]
push eax
lea eax, [ebp - 0x1fcc]
push eax
call fcn.00471b4d
pop ecx
pop ecx
push 0x78c1
push 0x7fa3
push 1
push 0x65a8
push 0x64e3
push 1
lea eax, [ebp - 0x1784]
push eax
push 0x3aa
push 0x3948
push 0
push 0x3392
push 0x123f
push 0x6137
lea eax, [ebp - 0x1358]
push eax
push 0x60e4
push 0x76bd
lea eax, [ebp - 0x1890]
push eax
call fcn.00470d72
add esp, 0x44
lea ecx, [ebp - 0x2020]
call fcn.0042fc11
call fcn.004718fd
jmp 0x4797b0
mov dword [ebp - 0x1d0], 0x8ade19d2
mov dword [ebp - 0xa1c], 0xffffffff
mov dword [ebp - 0x314], 0
jmp 0x479dab
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 3
jge 0x479dc7
mov eax, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0x1988], 1
jmp 0x479d9e
push 0
push 0x29e2
push 0x27d8
lea eax, [ebp - 0x1d0]
push eax
push 1
call fcn.004703b1
add esp, 0x14
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x20c8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1988], 0xf5e3d1aa
jne 0x479e0f
mov dword [ebp - 0x124c], 1
jmp 0x479e16
and dword [ebp - 0x124c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1988]
mov dword [ebp - 0xa1c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1988]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x1988]
add ecx, dword [ebp - 0x124c]
sub eax, ecx
cmp dword [ebp - 0xa1c], eax
jl 0x479e5d
mov dword [ebp - 0xe5c], 1
jmp 0x479e64
and dword [ebp - 0xe5c], 0
mov eax, dword [ebp - 0x1d0]
add eax, dword [ebp - 0xe5c]
cmp dword [ebp - 0x1d0], eax
jl 0x479e84
mov dword [ebp - 0xa24], 1
jmp 0x479e8b
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0xa24]
sub eax, 9
cmp eax, 0x1054
jne 0x479ea7
mov dword [ebp - 0x107c], 1
jmp 0x479eae
and dword [ebp - 0x107c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1988]
cmp dword [ebp - 0x107c], eax
jne 0x479ece
mov dword [ebp - 0xa2c], 1
jmp 0x479ed5
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0xa2c]
mov dword [ebp - 0x1d0], eax
push 0
lea ecx, [ebp - 0x1d00]
call fcn.0042fc2d
cmp dword [eax], 0
je 0x479f1e
mov dword [ebp - 0xe64], 0x456e
mov eax, dword [ebp - 0xe64]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x479f1e
mov dword [ebp - 0xa34], 1
jmp 0x479f25
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0xa34]
add eax, dword [ebp - 0x50]
cmp eax, 1
jle 0x479f42
mov dword [ebp - 0xa3c], 1
jmp 0x479f49
and dword [ebp - 0xa3c], 0
mov dword [ebp - 0x118c], 1
mov eax, dword [ebp - 0x118c]
cmp eax, dword [ebp - 0xa3c]
je 0x479f6d
mov dword [ebp - 0xe6c], 1
jmp 0x479f74
and dword [ebp - 0xe6c], 0
cmp dword [ebp - 0xe6c], 0xffffffff
jne 0x479f89
mov dword [ebp - 0xa44], 1
jmp 0x479f90
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x47b8c1
mov dword [ebp - 0x1a0], 0xe0a8eac8
mov dword [ebp - 0x1a0], 0
jmp 0x479fc6
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 7
jl 0x47a004
mov byte [ebp - 0xfd], 0
push 0x1f15
push 0x4a08
lea eax, [ebp - 0xfd]
push eax
push 1
push 0
push 0x7fdb
push 0x99f
push 0x36a
call fcn.004712bd
add esp, 0x20
jmp 0x479fb9
mov dword [ebp - 0x1084], 0x5db3
mov dword [ebp - 0x1360], str.qrwfavbh_vqexruet_ijcogfbj_seftx_izuzbri_oxsjqiu_aukqaeh_ifn_vsxogbp_rdfym_pbhanozgy_kyxq_zgwzkrej
cmp dword [ebp - 0x1084], 0x5e91
jle 0x47a0e4
and dword [ebp - 0x4dc], 0
jmp 0x47a03e
mov eax, dword [ebp - 0x4dc]
inc eax
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x4dc], 0x6c80
jge 0x47a0d0
and dword [ebp - 0x31c], 0
jmp 0x47a064
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0x7057
jge 0x47a0cb
and dword [ebp - 0x5ac], 0
jmp 0x47a086
mov eax, dword [ebp - 0x5ac]
inc eax
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 0x61fb
jge 0x47a0c9
mov eax, dword [ebp - 0x4dc]
and eax, dword [ebp - 0x31c]
or eax, dword [ebp - 0x5ac]
cdq
mov dword [ebp - 0x15b8], eax
mov dword [ebp - 0x15b4], edx
push dword [ebp - 0x15b4]
push dword [ebp - 0x15b8]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x47a079
jmp 0x47a057
jmp 0x47a031
push 0
push 0
push 0x139b
push 0x1cce
call dword [sym.imp.USER32.dll_PostMessageA]
lea eax, [ebp - 0x1a0]
push eax
call fcn.00474cb8
pop ecx
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x1084], 0x5be5
jge 0x47a114
mov edx, dword [ebp - 0x1360]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x47a130
or dword [ebp - 4], 0xffffffff
jmp 0x47a13a
mov dword [ebp - 0x50c], 0xfffffffe
mov dword [ebp - 0x7f8], 0x2a907865
mov dword [ebp - 0x4c], 0x51d69f42
mov dword [ebp - 0x114], 0xffffffff
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x179c], 0xffffffff
mov dword [ebp - 0x324], 0
jmp 0x47a189
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 3
jge 0x47a1a5
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0x864], 0x860bc23c
jmp 0x47a17c
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jle 0x47a1b9
mov dword [ebp - 0xa4c], 1
jmp 0x47a1c0
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0xa4c]
je 0x47a1e0
mov eax, 0x4b28
test eax, eax
je 0x47a1e0
mov dword [ebp - 0xe74], 1
jmp 0x47a1e7
and dword [ebp - 0xe74], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xe74]
jle 0x47a1fc
cmp dword [ebp - 0x4c], 0
je 0x47a350
mov dword [ebp - 0x64], 0x32aa61fc
cmp dword [ebp - 0x64], 0
jne 0x47a21b
mov eax, 0xa8af
test eax, eax
jne 0x47a21b
and dword [ebp - 0xe7c], 0
jmp 0x47a225
mov dword [ebp - 0xe7c], 1
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1fd4], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x20d0], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1fdc], eax
cmp dword [ebp - 0x64], 1
jle 0x47a252
mov dword [ebp - 0x1790], 1
jmp 0x47a259
and dword [ebp - 0x1790], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x20dc], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1fe4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x64]
cmp dword [ebp + eax - 0x864], ecx
je 0x47a289
mov dword [ebp - 0xa54], 1
jmp 0x47a290
and dword [ebp - 0xa54], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x864]
add eax, dword [ebp - 0xa54]
cmp eax, dword [ebp - 0x64]
jl 0x47a2b4
mov dword [ebp - 0x1224], 1
jmp 0x47a2bb
and dword [ebp - 0x1224], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x1224], eax
jge 0x47a2d2
mov dword [ebp - 0xa5c], 1
jmp 0x47a2d9
and dword [ebp - 0xa5c], 0
cmp dword [ebp - 0xa5c], 9
je 0x47a2ee
mov dword [ebp - 0xa64], 1
jmp 0x47a2f5
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0xe7c]
cmp eax, dword [ebp - 0xa64]
jl 0x47a312
cmp dword [ebp - 0x64], 0
jne 0x47a312
and dword [ebp - 0x108c], 0
jmp 0x47a31c
mov dword [ebp - 0x108c], 1
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x108c]
cmp eax, 0xfffffffe
jle 0x47a337
mov dword [ebp - 0xa6c], 1
jmp 0x47a33e
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0xa6c]
mov dword [ebp - 0x114], eax
jmp 0x47a3ab
mov dword [ebp - 0x1368], 0
push 0x2113
push 0
push 0x3dd4
push 1
push 0
push 0x733b
call fcn.0046f66d
add esp, 0x18
lea eax, [ebp - 0x1368]
push eax
push 0x3c7d
push 0
push 1
lea eax, [ebp - 0x114]
push eax
push 0x7c09
push 0x22d8
lea eax, [ebp - 0x4c]
push eax
push 0
push 0x442c
call fcn.0046e236
add esp, 0x28
cmp dword [ebp - 0x3c], 0x95d0c5fd
jne 0x47a3c0
mov dword [ebp - 0xe84], 1
jmp 0x47a3c7
and dword [ebp - 0xe84], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x864]
cmp dword [ebp - 0xe84], eax
je 0x47a3e7
mov dword [ebp - 0xa74], 1
jmp 0x47a3ee
and dword [ebp - 0xa74], 0
xor eax, eax
sub eax, dword [ebp - 0x114]
sub eax, 0xd1c2
cmp dword [ebp - 0xa74], eax
je 0x47a40c
mov eax, 0x720f
test eax, eax
je 0x47a41d
xor eax, eax
inc eax
je 0x47a41d
mov dword [ebp - 0x1898], 1
jmp 0x47a424
and dword [ebp - 0x1898], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x864]
mov dword [ebp - 0x20e8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x864]
mov dword [ebp - 0x1ff4], eax
xor eax, eax
cmp eax, 0xefd7f9b6
jb 0x47a45f
mov dword [ebp - 0x1194], 1
jmp 0x47a466
and dword [ebp - 0x1194], 0
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x1194]
cmp eax, dword [ebp - 0x114]
jl 0x47a49c
mov dword [ebp - 0x3c], 0x11
jmp 0x47a48a
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 9
jge 0x47a497
call fcn.00474d42
jmp 0x47a483
jmp 0x47a665
mov dword [ebp - 0x84], 0xffff
mov eax, 0x8a32
test eax, eax
je 0x47a569
mov eax, dword [ebp - 0x3c]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x864]
cmp eax, 0xc2012663
jne 0x47a4d6
mov dword [ebp - 0xa7c], 1
jmp 0x47a4dd
and dword [ebp - 0xa7c], 0
cmp dword [ebp - 0xa7c], 0x218f
jle 0x47a4f5
mov dword [ebp - 0xe8c], 1
jmp 0x47a4fc
and dword [ebp - 0xe8c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0xe8c], eax
je 0x47a516
mov dword [ebp - 0xa84], 1
jmp 0x47a51d
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
je 0x47a545
push 4
pop eax
test eax, eax
je 0x47a545
mov dword [ebp - 0x1094], 1
jmp 0x47a54c
and dword [ebp - 0x1094], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x1094]
test eax, eax
je 0x47a569
mov dword [ebp - 0x1370], 1
jmp 0x47a570
and dword [ebp - 0x1370], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x864]
mov dword [ebp - 0x20f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x864]
sub eax, dword [ebp - 0x3c]
jne 0x47a5a7
cmp dword [ebp - 0x84], 0
jne 0x47a5a7
and dword [ebp - 0xa8c], 0
jmp 0x47a5b1
mov dword [ebp - 0xa8c], 1
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0xa8c]
je 0x47a5d4
cmp dword [ebp - 0x84], 0
je 0x47a5d4
mov dword [ebp - 0xe94], 1
jmp 0x47a5db
and dword [ebp - 0xe94], 0
mov eax, dword [ebp - 0xe94]
sub eax, dword [ebp - 0x84]
neg eax
sub eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x84]
jne 0x47a603
mov dword [ebp - 0xa94], 1
jmp 0x47a60a
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0xa94]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0x179c], eax
mov dword [ebp - 0x3c], 0
jmp 0x47a62c
cmp dword [ebp - 0x3c], 2
jg 0x47a665
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x864]
mov dword [ebp + ecx*4 - 0x864], eax
mov dword [ebp - 0x4c], 0
jmp 0x47a656
cmp dword [ebp - 0x4c], 0xd
jl 0x47a663
mov dword [ebp - 0x788], 0xfffffffe
mov dword [ebp - 0xed4], 0x739
mov dword [ebp - 0x13f0], str.qnxqojixb_qyshcpd_vrvkrbi_jcfdwatl_vezpgc_iia_mxgm_vwyfgchrb_zmnbvqe_npxjkdegu_pkdchkl_bwxxftasa_lwtptrs_tdr
cmp dword [ebp - 0xed4], 0xa70
jle 0x47a729
and dword [ebp - 0x4e4], 0
jmp 0x47a6a9
mov dword [ebp - 0x11c], 0
jmp 0x47a742
mov dword [ebp - 0x1c88], 0xb57fd546
mov dword [ebp - 0x1c84], 0xb57fd546
mov dword [ebp - 0x1c80], 0xb57fd546
mov dword [ebp - 0x1c7c], 0xb57fd546
lea ecx, [ebp - 0x7f9]
call fcn.0042fc3c
push eax
lea eax, [ebp - 0x1c78]
push eax
lea eax, [ebp - 0x1c88]
push eax
lea ecx, [ebp - 0x24a4]
call fcn.0042fc3f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2320]
call fcn.0042fbeb
mov dword [ebp - 0x514], 0x6d444182
mov dword [ebp - 0xb14], 0x57e9
mov dword [ebp - 0x17fc], str.wwtwwq_qooeyqbdy_csrgezugt_zncxqpzu_xabx_zxnwx_gsl_fhnsftg_bdcswregm_cmwzi
cmp dword [ebp - 0xb14], 0x588e
jle 0x47b9f5
and dword [ebp - 0x37c], 0
jmp 0x47b962
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0xd63
jge 0x47b9f5
and dword [ebp - 0x5c4], 0
jmp 0x47b988
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 0x606
jge 0x47b9f0
and dword [ebp - 0x384], 0
jmp 0x47b9aa
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0x39bd
jge 0x47b9ee
mov eax, dword [ebp - 0x37c]
imul eax, dword [ebp - 0x5c4]
or eax, dword [ebp - 0x384]
cdq
mov dword [ebp - 0x15f4], eax
mov dword [ebp - 0x15f0], edx
push dword [ebp - 0x15f0]
push dword [ebp - 0x15f4]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x47b99d
jmp 0x47b97b
jmp 0x47b955
mov dword [ebp - 0x514], 3
jmp 0x47ba0e
mov eax, dword [ebp - 0x514]
dec eax
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 0
jl 0x47ba1e
call fcn.00474ffa
jmp 0x47ba01
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0xb14], 0x5568
jge 0x47ba41
mov edx, dword [ebp - 0x17fc]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x47ba5d
or dword [ebp - 4], 0xffffffff
jmp 0x47ba67
lea ecx, [ebp - 0x2320]
call fcn.0042fc11
mov byte [ebp - 0x13d], 0
mov dword [ebp - 0xb1c], 0xb029
push 2
lea ecx, [ebp - 0x1ce8]
call fcn.0042fb3f
mov dword [ebp - 0x1a40], 0x51ef9953
mov dword [ebp - 0x1408], 0xec0dcee0
mov dword [ebp - 0x1410], 0xffffffff
push 1
lea ecx, [ebp - 0x1cf4]
call fcn.0042fb3f
mov dword [ebp - 0x1400], 0
mov dword [ebp - 0x18e8], 0x4484f75d
mov dword [ebp - 0x1254], 0x686
mov dword [ebp - 0x13f8], str.dxek_eppkh_jwcjan_fmljett_ofm_lwir_bqigy
cmp dword [ebp - 0x1254], 0x8a0
jle 0x47bb9e
and dword [ebp - 0x38c], 0
jmp 0x47bb09
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0x1aad
jge 0x47bb9e
and dword [ebp - 0x650], 0
jmp 0x47bb2f
mov eax, dword [ebp - 0x650]
inc eax
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 0x1681
jge 0x47bb99
and dword [ebp - 0x394], 0
jmp 0x47bb51
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0x2a7e
jge 0x47bb97
mov eax, dword [ebp - 0x38c]
cdq
idiv dword [ebp - 0x650]
or edx, dword [ebp - 0x394]
mov eax, edx
cdq
mov dword [ebp - 0x1600], eax
mov dword [ebp - 0x15fc], edx
push dword [ebp - 0x15fc]
push dword [ebp - 0x1600]
mov ecx, 0xabbe58
call fcn.0042fa2a
jmp 0x47bb44
jmp 0x47bb22
jmp 0x47bafc
lea eax, [ebp - 0x1ce8]
push eax
lea eax, [ebp - 0x18e0]
push eax
call fcn.00475010
pop ecx
pop ecx
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x1254], 0x566
jge 0x47bbd6
mov edx, dword [ebp - 0x13f8]
mov ecx, 0xabbe58
call fcn.004313d0
jmp 0x47bbf2
or dword [ebp - 4], 0xffffffff
jmp 0x47bbfc
lea eax, [ebp - 0x1cf4]
push eax
lea eax, [ebp - 0x18e0]
push eax
call fcn.00475058
pop ecx
pop ecx
push 0xf0b
push 0x4b82
push 1
push 0x76b8
push 0x134a
lea eax, [ebp - 0xb1c]
push eax
push 0
call fcn.0048a09b
add esp, 0x1c
push 0x250d
push 0x2e00
push 0x7d34
lea eax, [ebp - 0x1400]
push eax
push 0
push 0x61f5
lea eax, [ebp - 0x18e8]
push eax
push 0x649
push 0x3cb8
lea eax, [ebp - 0x1408]
push eax
lea eax, [ebp - 0xb1c]
push eax
push 0x3073
lea eax, [ebp - 0x1a40]
push eax
lea eax, [ebp - 0x1ce8]
push eax
push 1
push 0x455
push 0x453c
push 0x4843
lea eax, [ebp - 0x1410]
push eax
lea eax, [ebp - 0x1cf4]
push eax
call fcn.0046b73b
add esp, 0x50
lea ecx, [ebp - 0x1cf4]
call fcn.0042fc11
lea ecx, [ebp - 0x1ce8]
call fcn.0042fc11
lea eax, [ebp - 0x13d]
push eax
call fcn.00472282
pop ecx
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0xef4], 0x12cd0ab
mov dword [ebp - 0x51c], 0
jmp 0x47bd05
mov eax, dword [ebp - 0x51c]
inc eax
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x51c], 1
jge 0x47bd21
mov eax, dword [ebp - 0x51c]
mov dword [ebp + eax*4 - 0xc8], 6
jmp 0x47bcf8
mov dword [ebp - 0x1c], 0xfffffff3
jmp 0x47bd31
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe6
jg 0x47bf6c
mov dword [ebp - 0xb2c], 0x31c587c7
mov dword [ebp - 0xedc], 0xfffffffe
mov dword [ebp - 0xb3c], 0x2718b962
mov dword [ebp - 0x1418], 3
mov dword [ebp - 0x1320], 5
mov dword [ebp - 0x74], 0
jmp 0x47bd7d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x47bd93
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x1298], 9
jmp 0x47bd76
mov dword [ebp - 0x74], 0
jmp 0x47bda3
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x47bdb9
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x245c], 0
jmp 0x47bd9c
mov eax, dword [ebp - 0x1c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x1298]
mov dword [ebp - 0xedc], eax
jne 0x47bdea
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1298], 0
jne 0x47bdea
and dword [ebp - 0xb24], 0
jmp 0x47bdf4
mov dword [ebp - 0xb24], 1
cmp dword [ebp - 0xb24], 0xffffffff
jle 0x47be09
mov dword [ebp - 0x10bc], 1
jmp 0x47be10
and dword [ebp - 0x10bc], 0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x10bc]
je 0x47be30
mov eax, 0x44f4
test eax, eax
je 0x47be30
mov dword [ebp - 0x180c], 1
jmp 0x47be37
and dword [ebp - 0x180c], 0
mov dword [ebp - 0xb2c], 0x80d68f98
mov eax, dword [ebp - 0xb2c]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x2274], eax
mov eax, dword [ebp - 0x158]
add eax, dword [ebp - 0x1c]
cmp eax, 2
jne 0x47be73
mov dword [ebp - 0xee4], 1
jmp 0x47be7a
and dword [ebp - 0xee4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xee4], eax
jne 0x47be91
mov dword [ebp - 0xb34], 1
jmp 0x47be98
and dword [ebp - 0xb34], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1298]
cmp dword [ebp - 0xb34], eax
je 0x47beb9
mov dword [ebp - 0x11ac], 1
jmp 0x47bec0
and dword [ebp - 0x11ac], 0
mov eax, dword [ebp - 0x11ac]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp - 0xb3c]
cmp dword [ebp - 0x1c], eax
je 0x47bee6
mov dword [ebp - 0xeec], 1
jmp 0x47beed
and dword [ebp - 0xeec], 0
mov eax, dword [ebp - 0xeec]
sub eax, dword [ebp - 0x1c]
dec eax
imul eax, dword [ebp - 0x1418]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1298]
jge 0x47bf19
mov dword [ebp - 0xb44], 1
jmp 0x47bf20
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xb44]
cmp eax, dword [ebp - 0x1320]
jle 0x47bf3e
mov dword [ebp - 0x1420], 1
jmp 0x47bf45
and dword [ebp - 0x1420], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20f8], eax
xor eax, eax
neg eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x245c], eax
cmp dword [ebp - 0x1c], 0
je 0x47bf67
jmp 0x47bf6c
jmp 0x47bd2a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x21e0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp + eax - 0xc8], ecx
jne 0x47bf93
mov dword [ebp - 0x10c4], 1
jmp 0x47bf9a
and dword [ebp - 0x10c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0x10c4], eax
jg 0x47bfbb
mov dword [ebp - 0x1814], 1
jmp 0x47bfc2
and dword [ebp - 0x1814], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
mov dword [ebp - 0x2100], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp + eax - 0xc8], ecx
jle 0x47bff3
mov dword [ebp - 0xb4c], 1
jmp 0x47bffa
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0xef4], eax
cmp dword [ebp - 0xef4], 0xdcbd
jge 0x47c01e
mov dword [ebp - 0xb54], 1
jmp 0x47c025
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xb54]
jle 0x47c03c
mov dword [ebp - 0x1234], 1
jmp 0x47c043
and dword [ebp - 0x1234], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
add eax, dword [ebp - 0x1234]
cmp eax, dword [ebp - 0x1c]
jl 0x47c067
mov dword [ebp - 0xb5c], 1
jmp 0x47c06e
and dword [ebp - 0xb5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp dword [ebp - 0xb5c], eax
jne 0x47c08f
mov dword [ebp - 0xefc], 1
jmp 0x47c096
and dword [ebp - 0xefc], 0
mov eax, dword [ebp - 0xefc]
sub eax, dword [ebp - 0x1c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xc8]
cmp eax, 0xe20
jg 0x47c0bf
mov dword [ebp - 0xb64], 1
jmp 0x47c0c6
and dword [ebp - 0xb64], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0xb64]
jge 0x47c0ec
mov dword [ebp - 0x10cc], 1
jmp 0x47c0f3
and dword [ebp - 0x10cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10cc]
sub ecx, dword [ebp + eax - 0xc8]
cmp ecx, dword [ebp - 0x1c]
jl 0x47c117
mov dword [ebp - 0xb6c], 1
jmp 0x47c11e
and dword [ebp - 0xb6c], 0
mov eax, dword [ebp - 0xb6c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1b40], 0x61928c17
mov dword [ebp - 0x1b3c], 0x61928c17
mov dword [ebp - 0x1b38], 0x61928c17
mov dword [ebp - 0x1b34], 0x61928c17
mov dword [ebp - 0xac], 0xca8fecf7
mov dword [ebp - 0x39c], 0
jmp 0x47c172
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 2
jge 0x47c18e
mov eax, dword [ebp - 0x39c]
mov dword [ebp + eax*4 - 0x718], 0
jmp 0x47c165
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x718], 3
jmp 0x47c1bc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x718]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x718], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x718], 0
jl 0x47c26e
mov dword [ebp - 0x2278], 1
mov dword [ebp - 0x1c60], 0xedb5cabf
mov dword [ebp - 0x1c5c], 0xedb5cabf
mov dword [ebp - 0x1c58], 0xedb5cabf
mov dword [ebp - 0x1c54], 0xedb5cabf
lea ecx, [ebp - 0x801]
call fcn.0042fc3c
push eax
lea eax, [ebp - 0x1c50]
push eax
lea eax, [ebp - 0x1c60]
push eax
lea ecx, [ebp - 0x2374]
call fcn.0042fc3f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2344]
call fcn.0042fbeb
mov dword [ebp - 0x1428], 0x5154
push 0x34f
push 0x7882
push 1
push 0
lea eax, [ebp - 0x1428]
push eax
call fcn.0046d9e6
add esp, 0x14
lea ecx, [ebp - 0x2344]
call fcn.0042fc11
jmp 0x47c1a1
mov dword [ebp - 0xac], 0xffffffe7
jmp 0x47c287
cmp dword [ebp - 0xac], 0xffffffed
jne 0x47c721
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0xf14], 0xd90538e0
mov dword [ebp - 0x192c], 0x732bab2
mov dword [ebp - 0x5cc], 0
jmp 0x47c2cb
mov eax, dword [ebp - 0x5cc]
inc eax
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 2
jge 0x47c2e7
mov eax, dword [ebp - 0x5cc]
mov dword [ebp + eax*4 - 0x674], 0xfffffffb
jmp 0x47c2be
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x674], 1
jmp 0x47c315
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x674], 0x1b
je 0x47c55b
mov byte [ebp - 0xee], 0
mov dword [ebp - 0xe8], 0x91a049fe
mov dword [ebp - 0xe8], 0
jmp 0x47c74b
cmp dword [ebp - 0xe8], 0xe
je 0x47cda7
mov dword [ebp - 0x1e0], 0x22124f84
push 2
lea ecx, [ebp - 0x12c8]
call fcn.0042fb3f
mov dword [ebp - 0xb94], 0x74c1
mov dword [ebp - 0x1440], str.klp_guvnuwuee_cgc_jlelngws_akemt
cmp dword [ebp - 0xb94], 0x75f2
jle 0x47c86b
and dword [ebp - 0x3bc], 0
jmp 0x47c7a9
mov dword [ebp - 0xf24], 7
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0xb94], 0x72a6
jge 0x47c894
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x47cdc5
push 0
push 0x69a1
call fcn.0048a2fc
pop ecx
pop ecx
call fcn.00475351
lea ecx, [ebp - 0x1d00]
call fcn.0042fc11
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x160], 0xffffffff
mov dword [ebp - 0x11bc], 0x5340
mov dword [ebp - 0x1460], str.gedfte_uziducf_resry_rrrxkbxo_utxxfgv_etwyzcwla_xgpyoli_ksmjefo_kdcybll_rcv_xtyu_xfvlgcnoz_aztkwidp_fdzcuber
cmp dword [ebp - 0x11bc], 0x5620
jle 0x47cee1