Function at 0x465308
Capabilities:
Delete registry key
Encode data using xor
Get common file path
Get system information on windows
Get thread local storage value
Identify system language via api
Log keystrokes
Set thread local storage value

Disassembly:
mov eax, 0x4c59a1
call fcn.004c4dd0
sub esp, 0xdac
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x60], dl
mov dword [ebp - 0x14c], ecx
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 0x7c8a6b95
xor ebx, ebx
inc ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x24], 0xd221
mov dword [ebp - 0x40], 0x947e29ac
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x465370
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x4cc], 0xd7ba9668
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x465357
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x46537c
cmp dword [ebp - 0x1c], eax
mov esi, eax
je 0x46537e
mov esi, ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
xor edx, edx
cmp ecx, 0xd8d92426
setne dl
sub edx, dword [ebp - 0x34]
xor eax, eax
cmp edx, 0xec1b
setg al
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ebx
je 0x4653b9
cmp dword [ebp - 0x1c], 0
je 0x4653b9
mov edx, ebx
jmp 0x4653bb
xor edx, edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x1c]
jge 0x4653d4
mov eax, dword [ebp - 0x4c4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4cc]
mov edx, dword [ebp - 0x4c4]
sub edx, 0xbe74fd57
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x24]
cmp ecx, 3
sbb eax, eax
inc eax
cmp eax, 0xfffffffa
ja 0x465410
cmp dword [ebp - 0x1c], 0
je 0x465410
mov eax, ebx
jmp 0x465412
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x1c]
add eax, esi
cmp eax, dword [ebp - 0x14]
jne 0x46543d
mov byte [ebp - 0x35], 0
cmp byte [ebp - 0x35], 0
je 0x4654e8
push 0x1d01
call dword [sym.imp.USER32.dll_GetDC]
jmp 0x4654e8
mov dword [ebp - 0x44], 0x965da1f7
mov dword [ebp - 0x24], 0xb039b7c3
mov dword [ebp - 0x1c], 0
jmp 0x4654de
mov dword [ebp - 0x34], ebx
push 2
lea ecx, [ebp - 0x4a8]
call fcn.0040b279
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x465489
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4a8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x465472
xor eax, eax
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], 0
je 0x46549a
push eax
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], ebx
jne 0x4654a8
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
inc eax
cmp eax, dword [ebp - 0x1c]
jge 0x4654cb
mov eax, dword [ebp - 0x4a8]
xor esi, esi
cmp dword [eax + 4], esi
je 0x4654cb
mov eax, ebx
jmp 0x4654cd
xor eax, eax
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x4a8]
call fcn.0040b34b
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffeb
jl 0x465457
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], 0x7c8a6b95
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x24], 0xd221
mov dword [ebp - 0x40], 0x947e29ac
mov dword [ebp - 0x50], 0x1c8d
cmp dword [ebp - 0x50], 0x2021
jle 0x465588
xor ebx, ebx
xor edi, edi
xor esi, esi
xor eax, eax
mov dword [ebp - 0x40], eax
add eax, esi
and eax, edi
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xc10]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
push 0
push 1
lea ecx, [ebp - 0xc10]
call fcn.0040b827
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x7b86
jl 0x465529
inc esi
cmp esi, 0x17e4
jl 0x465524
inc edi
cmp edi, 0x16bd
jl 0x465522
inc ebx
cmp ebx, 0x7207
jl 0x465520
xor ebx, ebx
inc ebx
and dword [ebp - 4], 0
cmp dword [ebp - 0x50], 0x19ab
jge 0x4655a0
push str.luhkildn_tawblej_phn_hdpojj_fhf
call fcn.004af8e7
pop ecx
or edi, 0xffffffff
mov dword [ebp - 4], edi
xor eax, eax
jmp 0x4655cf
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x4655f1
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x5f8], 0xd7ba9668
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x4655d8
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x4655fd
cmp dword [ebp - 0x1c], eax
mov esi, eax
je 0x4655ff
mov esi, ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x14]
sub edx, eax
neg edx
sbb edx, edx
inc edx
xor ecx, ecx
cmp edx, 0xd8d92426
setne cl
sub ecx, dword [ebp - 0x34]
xor eax, eax
cmp ecx, 0xec1b
setg al
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ebx
je 0x46563a
cmp dword [ebp - 0x1c], 0
je 0x46563a
mov edx, ebx
jmp 0x46563c
xor edx, edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x1c]
jge 0x465655
mov eax, dword [ebp - 0x5f0]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x5f8]
mov edx, dword [ebp - 0x5f0]
sub edx, 0xbe74fd57
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x24]
cmp ecx, 3
sbb eax, eax
inc eax
cmp eax, 0xfffffffa
ja 0x465691
cmp dword [ebp - 0x1c], 0
je 0x465691
mov eax, ebx
jmp 0x465693
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x1c]
add eax, esi
cmp eax, dword [ebp - 0x14]
jne 0x4656be
mov byte [ebp - 0x35], 0
cmp byte [ebp - 0x35], 0
je 0x465769
push 0x1d01
call dword [sym.imp.USER32.dll_GetDC]
jmp 0x465769
mov dword [ebp - 0x44], 0x965da1f7
mov dword [ebp - 0x24], 0xb039b7c3
mov dword [ebp - 0x1c], 0
jmp 0x46575f
mov dword [ebp - 0x34], ebx
push 2
lea ecx, [ebp - 0x4c0]
call fcn.0040b279
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x46570a
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x4656f3
xor eax, eax
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], 0
je 0x46571b
push eax
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], ebx
jne 0x465729
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
inc eax
cmp eax, dword [ebp - 0x1c]
jge 0x46574c
mov eax, dword [ebp - 0x4c0]
xor esi, esi
cmp dword [eax + 4], esi
je 0x46574c
mov eax, ebx
jmp 0x46574e
xor eax, eax
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x4c0]
call fcn.0040b34b
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffeb
jl 0x4656d8
mov dword [ebp - 0x1c], 0x185299da
mov dword [ebp - 0x14], 0xbeb0647d
mov dword [ebp - 0x40], 5
mov dword [ebp - 0x40], 0xee39f3fa
push 3
lea ecx, [ebp - 0xa30]
call fcn.0040b279
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], 0xc5ad058b
mov dword [ebp - 0x50], 0x1280
cmp dword [ebp - 0x50], 0x1637
jle 0x4657fa
xor ebx, ebx
xor edi, edi
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x40], ecx
mov eax, esi
sar eax, cl
lea ecx, [edi + ebx]
and eax, ecx
cdq
push edx
push eax
mov ecx, 0xade298
call fcn.0040b052
mov ecx, dword [ebp - 0x40]
inc ecx
mov dword [ebp - 0x40], ecx
cmp ecx, 0x4a57
jl 0x4657b7
inc esi
cmp esi, 0x28bb
jl 0x4657b2
inc edi
cmp edi, 0x6775
jl 0x4657b0
inc ebx
cmp ebx, 0x24a1
jl 0x4657ae
xor ebx, ebx
inc ebx
mov dword [ebp - 0x2c], 0
jmp 0x465816
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xa30]
mov dword [eax + ecx*4], 0xf3b8cff2
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x465803
push 2
pop edi
mov dword [ebp - 4], edi
cmp dword [ebp - 0x50], 0xeaa
jge 0x46583a
mov edx, str.lmiiawks_vsfpb_uftz
mov ecx, 0xade298
call fcn.0040d8d7
or dword [ebp - 4], 0xffffffff
jmp 0x465864
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
mov esi, eax
je 0x465875
mov esi, ebx
mov dword [ebp - 0x14], 0x14b5
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp eax, ecx
setl dl
imul edx, dword [ebp - 0x1c]
xor eax, eax
cmp edx, esi
setge al
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x4658a9
cmp dword [ebp - 0x1c], eax
jne 0x4658ac
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], 0x7af2c9a1
lea ecx, [ebp - 0xa30]
call fcn.0040b34b
mov dword [ebp - 0x4c], 0
push ebx
lea ecx, [ebp - 0xa48]
call fcn.0040b279
mov dword [ebp - 0x1c], 0
jmp 0x4658f4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], 0x4fd3df75
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x4658e6
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], ebx
jge 0x46591b
xor esi, esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa48]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x465907
mov dword [ebp - 0x70], 0x1b
jmp 0x46593c
mov byte [ebp - 0x35], 0
cmp byte [ebp - 0x35], 0
je 0x465939
push 0x44c
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
dec dword [ebp - 0x70]
cmp dword [ebp - 0x70], 0xffffffe9
jne 0x465924
lea ecx, [ebp - 0xa48]
call fcn.0040b34b
mov dword [ebp - 0x58], 0x7c8a6b95
or ecx, 0xffffffff
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xa8], ecx
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], eax
push 3
pop esi
cmp dword [ebp - 0x2c], esi
jge 0x465993
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x3d8], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jl 0x46597f
xor eax, eax
mov dword [ebp - 0xa8], edi
cmp dword [ebp - 0xa8], eax
jl 0x465a71
push esi
lea ecx, [ebp - 0x598]
call fcn.0040b279
mov dword [ebp - 0x40], 0xb9dbea52
mov dword [ebp - 0x40], 0x8382bdb9
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x2c], eax
jmp 0x4659dc
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x598]
mov dword [eax + ecx*4], 0x374c7af
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jl 0x4659c9
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0x3d8]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x598]
mov dword [eax + 8], ecx
mov dword [ebp - 0x40], ecx
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x465a2a
cmp dword [ebp - 0xa8], eax
jne 0x465a15
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xa8]
cmp dword [ebp + eax*4 - 0x3d8], ebx
jle 0x465a28
mov eax, ebx
jmp 0x465a2a
xor eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0x3d8]
mov ecx, dword [ebp - 0x40]
sub ecx, eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0x3d8]
imul eax, ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x598]
call fcn.0040b34b
dec dword [ebp - 0xa8]
jns 0x4659a5
xor eax, eax
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], 0
je 0x465a83
push eax
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
xor eax, eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x50], 0x287e
cmp dword [ebp - 0x50], 0x2b58
jle 0x465b24
mov edi, eax
mov dword [ebp - 0x40], edi
jmp 0x465aad
xor eax, eax
mov esi, eax
jmp 0x465ab3
xor eax, eax
mov ebx, eax
mov dword [ebp - 0x24], edi
mov ecx, esi
shl edi, cl
mov eax, ebx
xor eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xcd0]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
push 0
push 1
lea ecx, [ebp - 0xcd0]
call fcn.0040b827
inc ebx
cmp ebx, 0x7298
jl 0x465abc
inc esi
cmp esi, 0x4a9a
mov edi, dword [ebp - 0x40]
jl 0x465ab1
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x731
jl 0x465aab
push 0
push 0x4a3
call dword [sym.imp.GDI32.dll_RectVisible]
xor ebx, ebx
inc ebx
push 2
pop edi
push 3
pop esi
mov dword [ebp - 0x28], 0x5761be36
mov dword [ebp - 4], 4
cmp dword [ebp - 0x50], 0x2716
jge 0x465b46
push str.ghcxr_qkivwnhs_wvy_tynxoazxu
call fcn.004af8e7
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x465b73
mov dword [ebp - 0x14], 0x41311e2d
mov dword [ebp - 0x1c], 0xbd4856cd
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x2c], 0xf72d4ea6
jbe 0x465bb7
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xd94b
setg cl
mov edx, 0x81d21f1e
cmp edx, ecx
sbb eax, eax
inc eax
mov edx, 0xa831d26e
cmp edx, eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x2c]
jle 0x465bb7
mov ecx, ebx
jmp 0x465bb9
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
add eax, ecx
je 0x465c39
mov dword [ebp - 0x44], 0xfffa
mov dword [ebp - 0x40], 0x799333c7
mov dword [ebp - 0x24], 0x58f5537c
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x28], 0xf7bdd484
mov dword [ebp - 0x34], ebx
xor eax, eax
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], al
je 0x465c06
push eax
push 0x172
push 0x11df
push 0xab0
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x465c18
dec dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setl dl
mov dword [ebp - 0x14], edx
jmp 0x465e7b
push 4
lea ecx, [ebp - 0x204]
call fcn.0040b279
mov dword [ebp - 0x28], 0xc1dc0ac7
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x465c73
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x204]
mov dword [eax + ecx*4], 0x4f163671
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x465c58
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x465c93
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x8e8], 0x9c36de1f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x465c7b
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], esi
jg 0x465e70
mov dword [ebp - 0x424], 0x21a1
mov dword [ebp - 0x420], 0x21a1
mov dword [ebp - 0x41c], 0x21a1
mov dword [ebp - 0x418], 0x21a1
mov dword [ebp - 0x34], 0x3e67b33d
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], 0
je 0x465cef
push eax
push 0x402
push 0x158c
push 0x182a
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
xor eax, eax
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], 0
je 0x465d02
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
xor eax, eax
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], eax
jl 0x465e65
mov dword [ebp - 0x50], 0x463a
cmp dword [ebp - 0x50], 0x48ed
jle 0x465d85
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
xor edi, edi
xor esi, esi
mov dword [ebp - 0x40], esi
mov ebx, esi
mov esi, 0x23ba
mov eax, ebx
and eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xc40]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
push 0
push 1
lea ecx, [ebp - 0xc40]
call fcn.0040b827
dec ebx
dec esi
jne 0x465d32
mov esi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x4e73
jl 0x465d2b
inc edi
cmp edi, 0xa33
jl 0x465d26
xor ebx, ebx
inc ebx
push 2
pop edi
mov dword [ebp - 4], 6
cmp dword [ebp - 0x50], 0x42e5
jge 0x465da0
push str.wgqrhhsjr_sdiswbtns_ljjmf_amjwizd_qgltyf_wuxqs_asqc_jcdp_nfccs
call fcn.004af8e7
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x465dca
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp eax, ebx
setge cl
xor ebx, ebx
mov eax, dword [ebp - 0x204]
cmp ecx, dword [eax + edx*4]
setne bl
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ebx, eax
setge dl
xor ecx, ecx
mov eax, dword [ebp - 0x204]
cmp edx, dword [eax + esi*4]
setge cl
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x424]
neg edx
sbb edx, edx
inc edx
mov esi, dword [ebp - 0x204]
mov eax, dword [ebp - 0x418]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [esi + 0xc]
je 0x465e2c
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x204]
mov eax, dword [ecx + eax*4]
xor ebx, ebx
cmp eax, dword [ecx + edx*4]
setge bl
mov dword [esi + 0xc], ebx
mov dword [ebp - 0x8e8], ebx
mov dword [ebp - 0x14], ebx
dec dword [ebp - 0x1c]
xor eax, eax
xor ebx, ebx
inc ebx
jmp 0x465d05
inc dword [ebp - 0x30]
push 3
pop esi
jmp 0x465c96
lea ecx, [ebp - 0x204]
call fcn.0040b34b
mov dword [ebp - 0x1c], 0xffffffed
jmp 0x465eba
mov byte [ebp - 0x35], 0
cmp byte [ebp - 0x35], 0
je 0x465eb7
push 0x2076
push 0xf72
push 0x4c9
push 0x2682
push 0x21f3
push 0x2484
push 0x25d8
call dword [sym.imp.GDI32.dll_RoundRect]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xf
jge 0x465e84
mov dword [ebp - 0x30], 0x60477862
mov dword [ebp - 0x24], 0xdfc9b996
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0xf4df7b14
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x28], 5
push edi
lea ecx, [ebp - 0x89c]
call fcn.0040b279
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], 0xbb5fb49a
mov dword [ebp - 0x40], 0xffff
mov dword [ebp - 0x2c], 0
jmp 0x465f34
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x89c]
mov dword [eax + ecx*4], 0x205300ce
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jl 0x465f21
mov dword [ebp - 0x30], 0
jmp 0x465f8a
mov dword [ebp - 0x14], 0xffff
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
test eax, eax
setle cl
cmp ecx, dword [ebp - 0x30]
je 0x465f67
xor eax, eax
cmp dword [ebp - 0x14], eax
mov edx, eax
je 0x465f69
mov edx, ebx
mov eax, dword [ebp - 0x14]
dec eax
neg eax
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, edx
setg cl
mov eax, dword [ebp - 0x30]
add eax, ecx
cmp eax, 7
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xf
je 0x465f42
dec dword [ebp - 0x40]
lea ecx, [ebp - 0x89c]
call fcn.0040b34b
mov dword [ebp - 0x28], 0xd221
push ebx
lea ecx, [ebp - 0x710]
call fcn.0040b279
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x148], 8
mov dword [ebp - 0x144], 8
mov dword [ebp - 0x140], 8
mov dword [ebp - 0x13c], 8
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x40], 0xffff
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jge 0x466015
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x710]
mov dword [eax + ecx*4], 0x1713b910
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jl 0x465ffb
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jl 0x4660f8
push edi
lea ecx, [ebp - 0x8d0]
call fcn.0040b279
mov dword [ebp - 0x24], 0x4678dc2a
mov dword [ebp - 0x24], 9
push esi
lea ecx, [ebp - 0x74c]
call fcn.0040b279
mov dword [ebp - 0x24], 0xd9827359
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x466072
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x8d0]
mov dword [eax + ecx*4], 0x7be7e550
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x466058
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x466094
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x74c]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x46607a
xor eax, eax
dec dword [ebp - 0x40]
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], 0
je 0x4660d9
push eax
push 0x62f
push 0x2000
push 0x213b
push 0x26d5
push 0x877
push 0x1ede
push 0x979
push 0xefc
push 0xf3f
push 0x1a75
call dword [sym.imp.GDI32.dll_StretchBlt]
lea ecx, [ebp - 0x74c]
call fcn.0040b34b
lea ecx, [ebp - 0x8d0]
call fcn.0040b34b
dec dword [ebp - 0x14]
jns 0x466021
lea ecx, [ebp - 0x710]
call fcn.0040b34b
mov dword [ebp - 0x24], 0x947e29ac
mov dword [ebp - 0x40], 0x8748
mov dword [ebp - 0x1c], 7
push edi
lea ecx, [ebp - 0x4d8]
call fcn.0040b279
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x50], 0xfffffffd
mov dword [ebp - 0x54], 0
jmp 0x46614c
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x288], 0xfffffffe
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], esi
jl 0x46613b
mov dword [ebp - 0x54], 0
jmp 0x46616d
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4d8]
mov dword [eax + ecx*4], 0xa2e712c5
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], edi
jl 0x46615a
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x288]
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x40], 0x52c58fb7
mov dword [ebp - 0x288], ebx
mov eax, dword [ebp - 0x4d8]
mov dword [eax], ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, ebx
setle cl
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setl dl
imul edx, dword [ebp - 0x1c]
sub edx, 0x1210
cmp edx, 0x90ef874a
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x1c]
xor eax, eax
or edx, 0xffffffff
cmp ecx, edx
setne al
cmp eax, edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp eax, ecx
setge dl
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x284]
mov eax, dword [ebp - 0x50]
xor edx, edx
cmp ecx, eax
setge dl
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x1c], 0x11
jmp 0x466231
mov byte [ebp - 0x35], 0
cmp byte [ebp - 0x35], 0
je 0x46622e
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1c
jge 0x46621e
lea ecx, [ebp - 0x4d8]
call fcn.0040b34b
mov dword [ebp - 0x30], 0xae355683
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffeb
jle 0x46634b
or ecx, 0xffffffff
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x44], 0xfffffff9
mov dword [ebp - 0x44], ecx
jmp 0x466335
mov dword [ebp - 0x20], 0x26d2e858
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x466292
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xb50], esi
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
jl 0x46627d
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe7
jne 0x466304
push ebx
lea ecx, [ebp - 0x36c]
call fcn.0040b279
mov dword [ebp - 0x2c], 0
jmp 0x4662c3
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x36c]
mov dword [eax + ecx*4], 0xbc7dcd66
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jl 0x4662b0
mov eax, dword [ebp - 0x36c]
xor esi, esi
mov dword [eax], esi
push 3
pop esi
xor eax, eax
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], al
jne 0x466350
mov eax, dword [ebp - 0x36c]
inc dword [eax]
cmp dword [eax], esi
jle 0x4662d5
lea ecx, [ebp - 0x36c]
call fcn.0040b34b
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe7
je 0x46629b
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x466332
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], 0
je 0x46631d
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xb50]
dec dword [ebp - 0x20]
push 0
pop eax
jns 0x46630c
or ecx, 0xffffffff
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ecx
jle 0x46626d
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffeb
jg 0x46625b
mov dword [ebp - 0x2c], eax
jmp 0x466368
push eax
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x658], 0xd7ba9668
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jl 0x466357
mov dword [ebp - 0x1c], 0x38ec
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x54], 0x2ba7b7e8
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], 0x8d9ba5f2
push edi
lea ecx, [ebp - 0x94]
call fcn.0040b279
mov dword [ebp - 0x40], 0xc3997b09
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x14], 0x77ae2718
mov dword [ebp - 0x2c], 0
jmp 0x4663c4
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0x9b857552
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jl 0x4663b1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x44]
imul edx, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x30], 0xfff7
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x54], ecx
xor eax, eax
cmp dword [ebp - 0x54], eax
je 0x4663f8
cmp dword [ebp - 0x30], eax
mov ecx, ebx
jne 0x4663fa
mov ecx, eax
xor eax, eax
cmp ecx, 0x8331c587
sete al
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
neg ecx
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
imul eax, dword [ebp - 0x44], 0x18c9
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x30], 0xbf118c84
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x48]
je 0x46643e
cmp dword [ebp - 0x2c], 0
je 0x46643e
mov edx, ebx
jmp 0x466440
xor edx, edx
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp edx, eax
setg cl
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp eax, ecx
setl dl
sub edx, dword [ebp - 0x44]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x54], ebx
cmp dword [ebp - 0x54], 0
jl 0x466634
or edx, 0xffffffff
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x50], 0x39fa4ee4
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, 0x1dc6
setge cl
imul ecx, dword [ebp - 0x30]
sub ecx, 4
neg ecx
sbb ecx, ecx
neg ecx
mov esi, dword [ebp - 0x54]
sub edx, ecx
mov eax, dword [ebp - 0x94]
sub edx, dword [eax]
mov eax, dword [ebp - 0x20]
sub edx, eax
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x54]
xor ecx, ecx
cmp edx, eax
setne cl
mov eax, dword [ebp - 0x94]
cmp dword [eax + esi*4], ecx
jge 0x4664d4
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x94]
xor esi, esi
cmp dword [eax + ecx*4], esi
jne 0x4664d6
xor eax, eax
jmp 0x4664d8
xor esi, esi
mov eax, ebx
cmp eax, dword [ebp - 0x30]
jl 0x4664ef
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x94]
cmp dword [eax + ecx*4], esi
jne 0x4664ef
xor ecx, ecx
jmp 0x4664f1
mov ecx, ebx
mov esi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov edi, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x54]
xor edx, edx
cmp ecx, 0xe0c4
setg dl
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
inc edx
mov ecx, dword [ebp - 0x94]
sub edx, dword [ecx + eax*4]
neg edx
sbb edx, edx
inc edx
xor eax, eax
cmp dword [ecx + esi*4], edx
setne al
mov edx, dword [ebp - 0x20]
add edx, eax
mov eax, dword [ebp - 0x94]
sub edx, dword [eax + edi*4]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, 0x5104e0b
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x94]
mov dword [eax + ebx*4], ecx
imul eax, dword [ebp - 0x40], 9
test eax, eax
je 0x46660e
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x466610
xor esi, esi
inc esi
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0xffff
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setge dl
sub edx, 0xffff
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x30]
add edx, esi
imul edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x48]
xor edx, edx
cmp ecx, eax
setl dl
mov eax, dword [ebp - 0x44]
xor ebx, ebx
cmp eax, edx
setl bl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, ebx
setle cl
add ecx, 0xbd03
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x44]
xor edx, edx
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x20]
cmp ecx, 0xb7607968
je 0x466620
xor eax, eax
cmp dword [ebp - 0x48], eax
jne 0x466620
xor ebx, ebx
inc ebx
jmp 0x466625
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x46656e
mov esi, eax
jmp 0x466571
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x14], eax
dec dword [ebp - 0x54]
push 2
pop edi
jns 0x46646c
lea ecx, [ebp - 0x94]
call fcn.0040b34b
xor eax, eax
cmp dword [ebp - 0x4c], eax
jne 0x46664d
cmp dword [ebp - 0x58], eax
mov esi, eax
je 0x46664f
mov esi, ebx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x4c]
sub edx, eax
neg edx
sbb edx, edx
inc edx
xor ecx, ecx
cmp edx, 0xd8d92426
setne cl
sub ecx, dword [ebp - 0x3c]
xor eax, eax
cmp ecx, 0xec1b
setg al
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ebx
je 0x46668a
cmp dword [ebp - 0x58], 0
je 0x46668a
mov edx, ebx
jmp 0x46668c
xor edx, edx
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp - 0x58]
jge 0x4666a5
mov eax, dword [ebp - 0x650]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x658]
mov edx, dword [ebp - 0x650]
sub edx, 0xbe74fd57
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x28]
cmp ecx, 3
sbb eax, eax
inc eax
cmp eax, 0xfffffffa
ja 0x4666e1
cmp dword [ebp - 0x58], 0
je 0x4666e1
mov eax, ebx
jmp 0x4666e3
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x58]
add eax, esi
cmp eax, dword [ebp - 0x4c]
jne 0x466818
mov dword [ebp - 0x2c], 0x60477862
mov dword [ebp - 0x28], 7
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x46673f
mov dword [ebp - 0x14], 0x7c203980
mov dword [ebp - 0x14], eax
jmp 0x466736
mov dword [ebp - 0x4c], 0xfffffff6
mov dword [ebp - 0x4c], 0xffffffec
cmp dword [ebp - 0x4c], eax
jge 0x466733
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x40]
inc dword [ebp - 0x4c]
js 0x466728
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe6
je 0x466715
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x17
jl 0x466709
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], al
je 0x46675f
push 0x21c1
push 0x220d
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
xor eax, eax
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], 0
je 0x466775
push 0x1d01
call dword [sym.imp.USER32.dll_GetDC]
xor eax, eax
mov dword [ebp - 0x1c], 0x4e2
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x46679e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x740], 0x898f01ba
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x466785
xor eax, eax
dec dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x12
jge 0x467138
or esi, 0xffffffff
mov dword [ebp - 0x30], 0xea122098
cmp dword [ebp - 0x1c], eax
je 0x467095
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x34], 0x1b17d72b
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x73c], eax
dec dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setle dl
add edx, 0x108fc3a9
mov eax, dword [ebp - 0x30]
sub eax, edx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
jmp 0x467116
mov dword [ebp - 0x48], 0x965da1f7
mov dword [ebp - 0x2c], 0xc75b57fd
mov dword [ebp - 0x2c], 0xffffffee
jmp 0x4668a3
mov dword [ebp - 0x30], 0x1bf2
mov dword [ebp - 0x14], 0
jmp 0x466850
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6f8], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x46683f
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], 0
jmp 0x46689a
mov dword [ebp - 0x14], 0xef9d7865
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], 0
jl 0x466894
mov ecx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x6f8], ecx
mov eax, dword [ebp - 0x30]
dec dword [ebp - 0x14]
jns 0x46687c
mov eax, dword [ebp - 0x14]
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jle 0x466868
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffec
jl 0x46682f
mov dword [ebp - 0x28], 0xb039b7c3
mov dword [ebp - 0x28], ebx
push 3
lea ecx, [ebp - 0xa24]
call fcn.0040b279
or esi, 0xffffffff
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x40], 0x2ba7b7e8
mov dword [ebp - 0x54], 0
jmp 0x4668e3
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x8fc], esi
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], edi
jl 0x4668d6
mov dword [ebp - 0x54], 0
jmp 0x466900
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0xa24]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 3
jl 0x4668f1
mov dword [ebp - 0x54], 0
push 4
pop esi
jmp 0x466923
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xd98], 0xfffffff9
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], esi
jl 0x466912
mov eax, dword [ebp - 0x8f8]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x40]
lea ecx, [ebp - 0xa24]
call fcn.0040b34b
mov dword [ebp - 0x58], 0
cmp dword [ebp - 0x58], 0xffffffeb
jge 0x466773
push esi
lea ecx, [ebp - 0x4f0]
call fcn.0040b279
mov dword [ebp - 0x1c], 0
jmp 0x466974
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4f0]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x466965
mov dword [ebp - 0x1c], 0
jmp 0x46698f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb70], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x466982
mov ecx, dword [ebp - 0xb68]
xor edx, edx
mov eax, dword [ebp - 0x4f0]
cmp dword [eax], ecx
setne dl
mov eax, ebx
sub eax, edx
je 0x4669dc
xor eax, eax
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], al
je 0x4669c6
push eax
push eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
xor eax, eax
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], 0
je 0x4669ed
push 0x111c
call dword [sym.imp.USER32.dll_IsIconic]
jmp 0x4669ed
xor eax, eax
mov byte [ebp - 0x35], al
cmp byte [ebp - 0x35], al
je 0x4669ed
push eax
call dword [sym.imp.ole32.dll_CoInitialize]
lea ecx, [ebp - 0x4f0]
call fcn.0040b34b
mov dword [ebp - 0x3c], ebx
push edi
lea ecx, [ebp - 0x5b0]
call fcn.0040b279
movdqa xmm0, xmmword [0xad2a20]
movdqu xmmword [ebp - 0xabc], xmm0
lea ecx, [ebp - 0xabc]
lea eax, [ebp - 0xaac]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x728]
call fcn.0040b325
mov dword [ebp - 0x20], 0xb785b647
mov dword [ebp - 0x40], 0xe2caeaba
xor eax, eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x466a66
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x5b0]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x466a4c
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x466a84
xor esi, esi
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x138], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x466a71
mov eax, dword [ebp - 0x134]
mov edi, dword [ebp - 0x728]
xor eax, eax
cmp dword [edi + 8], 0x98cafa32
sete al
cmp eax, ebx
jg 0x466aaa
cmp dword [edi + 8], 0
je 0x466aaa
mov eax, ebx
jmp 0x466aac
xor eax, eax
mov esi, dword [ebp - 0x5b0]
mov dword [esi + 4], eax
mov dword [ebp - 0x20], 0xffffffea
jmp 0x466c28
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, 0x4b26
setl cl
cmp ecx, 0x8101aedf
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setne dl
neg edx
mov dword [esi + 4], edx
push 0
pop eax
sete al
xor ecx, ecx
cmp eax, dword [edi + 8]
setg cl
mov eax, dword [ebp - 0x134]
xor edx, edx
cmp edx, eax
sbb eax, eax
inc eax
cmp eax, ecx
jge 0x466b14
cmp dword [ebp - 0x134], edx
je 0x466b14
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x134]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x466bf6
cmp dword [ebp - 0x20], 0x15
jl 0x466ac1
lea ecx, [ebp - 0x728]
call fcn.0040b34b
lea ecx, [ebp - 0x5b0]
call fcn.0040b34b
push 2
pop edi
push edi
lea ecx, [ebp - 0x520]
call fcn.0040b279
push ebx
lea ecx, [ebp - 0x384]
call fcn.0040b279
mov dword [ebp - 0x14], 0
jmp 0x466c7f
cmp dword [ebp - 0x14], ebx
jl 0x466c6c
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x30], eax
jl 0x467116
mov dword [ebp - 0x14], 0xae7b1b0c
mov dword [ebp - 0x14], eax
jmp 0x4670f9
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x4c], edi
cmp dword [ebp - 0x4c], eax
jl 0x4670f6
mov dword [ebp - 0x44], 0x29207965
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x4670cf
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x4670f1
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x740], 0x653e3f36
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x4670d8
xor eax, eax
dec dword [ebp - 0x4c]
jns 0x4670b4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x4670a9
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x467111
push eax
push eax
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
xor eax, eax
dec dword [ebp - 0x30]
jns 0x46709d
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], al
je 0x467128
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x12
push 0
pop eax
jl 0x4667b1
mov dword [ebp - 0x1c], 0x4e2
mov dword [ebp - 0x40], 0x35a7
cmp dword [ebp - 0x40], 0x37c8
jle 0x46719c
mov esi, eax
jmp 0x467155
xor eax, eax
mov edi, eax
mov eax, esi
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xd30]
call fcn.00401a48
pop ecx
pop ecx
mov ecx, eax
call fcn.0040b047
push eax
call fcn.004af8e7
pop ecx
push 0
push ebx
lea ecx, [ebp - 0xd30]
call fcn.0040b827
inc edi
cmp edi, 0x2056
jl 0x467157
inc esi
cmp esi, 0x301d
jl 0x467153
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x40], 0x3316
jge 0x4671b7
push str.atfrr_bohycj_ejjitg_webaelr_ksiajlw_xxwlvrbbb_dehfnaws_ncmuehn_jjbv
call fcn.004af8e7
pop ecx
or ecx, 0xffffffff
mov dword [ebp - 4], ecx
xor eax, eax
jmp 0x4671e6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x467208
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9a8], 0x898f01ba
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4671ef
xor eax, eax
dec dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x12
jge 0x467339
jmp 0x46721c
xor eax, eax
mov dword [ebp - 0x30], 0xea122098
cmp dword [ebp - 0x1c], eax
je 0x46727f
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x34], 0x1b17d72b
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x9a4], eax
dec dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setle dl
add edx, 0x108fc3a9
mov eax, dword [ebp - 0x30]
sub eax, edx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
jmp 0x467317
mov dword [ebp - 0x30], 2
cmp dword [ebp - 0x30], eax
jl 0x467317
mov dword [ebp - 0x14], 0xae7b1b0c
mov dword [ebp - 0x14], eax
jmp 0x4672f2
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x4c], 2
cmp dword [ebp - 0x4c], eax
jl 0x4672ef
mov dword [ebp - 0x44], 0x29207965
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x4672c5
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x4672e7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x46729b
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x46730b
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], al
je 0x467329
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x12
push 0xffffffffffffffff
pop ecx
jl 0x46721a
mov dword [ebp - 0x44], 0xac204e2d
mov dword [ebp - 0x40], 0xf6872920
mov dword [ebp - 0x694], 0x4ab462a7
mov dword [ebp - 0x690], 0x4ab462a7
mov dword [ebp - 0x68c], 0x4ab462a7
mov dword [ebp - 0x688], 0x4ab462a7
mov dword [ebp - 0x44], 0xffffffe3
jmp 0x467481
push 4
lea ecx, [ebp - 0x24c]
call fcn.0040b279
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x14], 0
jmp 0x4673ab
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24c]
mov dword [eax + ecx*4], 0x7ca0029b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x467398
mov dword [ebp - 0x20], 3
cmp dword [ebp - 0x20], 0
jl 0x467467
push 2
lea ecx, [ebp - 0x758]
call fcn.0040b279
mov dword [ebp - 0x14], 0
jmp 0x4673eb
cmp dword [ebp - 0x14], 2
jl 0x4673d8
mov eax, dword [ebp - 0x24c]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x24c]
call fcn.0040b34b
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xe
jg 0x46737b
xor eax, eax
mov byte [ebp - 0x15], al
mov dword [ebp - 0x34], 0x79aa
cmp dword [ebp - 0x34], 0x7d20
jle 0x46751f