Function at 0x46fb84
Capabilities:
Encode data using xor
Identify system language via api

Disassembly:
mov eax, 0x4c59b5
call fcn.004c4dd0
sub esp, 0x228
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x28], 0x8748
mov dword [ebp - 0x18], 7
push 2
pop esi
push esi
lea ecx, [ebp - 0x11c]
call fcn.0040b279
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x3c], 0xfffffffd
xor ebx, ebx
mov dword [ebp - 0x20], ebx
jmp 0x46fbe3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xb4], 0xfffffffe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x46fbd2
mov dword [ebp - 0x20], ebx
jmp 0x46fc01
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0xa2e712c5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x46fbee
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x28], 0x52c58fb7
xor edi, edi
inc edi
mov dword [ebp - 0xb4], edi
mov eax, dword [ebp - 0x11c]
mov dword [eax], edi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edi
setle cl
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setl dl
imul edx, dword [ebp - 0x18]
sub edx, 0x1210
cmp edx, 0x90ef874a
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x18]
xor eax, eax
cmp ecx, 0xffffffff
setne al
cmp eax, 0xffffffff
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, ecx
setge dl
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x3c]
xor edx, edx
cmp ecx, eax
setge dl
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x18], 0x11
jmp 0x46fcc5
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x46fcc2
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1c
jge 0x46fcb4
lea ecx, [ebp - 0x11c]
call fcn.0040b34b
mov dword [ebp - 0x18], 0xae355683
mov dword [ebp - 0x18], ebx
jmp 0x46fdc0
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x30], 0xffffffff
jmp 0x46fdb3
mov dword [ebp - 0x20], 0x26d2e858
mov dword [ebp - 0x24], ebx
jmp 0x46fd1c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1dc], 3
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x46fd0b
mov dword [ebp - 0x20], ebx
jmp 0x46fd7f
push edi
lea ecx, [ebp - 0xe0]
call fcn.0040b279
mov dword [ebp - 0x24], ebx
jmp 0x46fd4b
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0xbc7dcd66
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x46fd38
mov eax, dword [ebp - 0xe0]
mov dword [eax], ebx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
jne 0x46fe8b
mov eax, dword [ebp - 0xe0]
inc dword [eax]
cmp dword [eax], 3
jle 0x46fd58
lea ecx, [ebp - 0xe0]
call fcn.0040b34b
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe7
je 0x46fd27
mov dword [ebp - 0x20], 3
cmp dword [ebp - 0x20], ebx
jl 0x46fdb0
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x46fda1
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x1dc]
dec dword [ebp - 0x20]
jns 0x46fd91
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffff
jle 0x46fcff
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffeb
jg 0x46fce5
mov eax, dword [0xadf5a0]
test al, 1
jne 0x46fe4e
or eax, edi
mov dword [0xadf5a0], eax
mov dword [0xadf580], ebx
mov dword [0xadf584], ebx
push ebx
push ebx
call fcn.0040d7d6
mov dword [0xadf580], eax
mov dword [0xadf588], ebx
mov dword [0xadf590], ebx
mov dword [0xadf59c], 0x3f800000
mov dword [ebp - 0xb8], eax
mov dword [0xadf58c], ebx
lea eax, [ebp - 0xb8]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x18c]
push eax
mov ecx, 0xadf588
call fcn.0040d57b
mov dword [0xadf594], 7
mov dword [0xadf598], 8
push 0x4c6114
call fcn.004af8bd
pop ecx
mov dword [ebp - 0x40], 0x38ec
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x18], 0x2ba7b7e8
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x3c], 0x8d9ba5f2
push esi
lea ecx, [ebp - 0x54]
call fcn.0040b279
mov dword [ebp - 0x44], 0xc3997b09
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x1c], 0x77ae2718
mov dword [ebp - 0x24], ebx
jmp 0x46fea2
push ebx
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x54]
mov dword [eax + ecx*4], 0x9b857552
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x46fe92
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x30]
imul edx, dword [ebp - 0x40]
imul eax, dword [ebp - 0x20], 0xfff7
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
je 0x46fed4
cmp dword [ebp - 0x20], ebx
mov ecx, edi
jne 0x46fed6
mov ecx, ebx
xor eax, eax
cmp ecx, 0x8331c587
sete al
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
neg ecx
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
imul eax, dword [ebp - 0x30], 0x18c9
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x20], 0xbf118c84
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x28]
je 0x46ff14
cmp dword [ebp - 0x3c], ebx
mov edx, edi
jne 0x46ff16
mov edx, ebx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setg cl
mov eax, dword [ebp - 0x40]
xor edx, edx
cmp eax, ecx
setl dl
sub edx, dword [ebp - 0x30]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x4700e4
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0x39fa4ee4
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, 0x1dc6
setge cl
imul ecx, dword [ebp - 0x20]
sub ecx, 4
neg ecx
sbb ecx, ecx
neg ecx
mov esi, dword [ebp - 0x18]
or edx, 0xffffffff
sub edx, ecx
mov eax, dword [ebp - 0x54]
sub edx, dword [eax]
mov eax, dword [ebp - 0x24]
sub edx, eax
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setne cl
mov eax, dword [ebp - 0x54]
cmp dword [eax + esi*4], ecx
jge 0x46ffa0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
cmp dword [eax + ecx*4], ebx
mov eax, ebx
je 0x46ffa2
mov eax, edi
cmp eax, dword [ebp - 0x20]
jl 0x46ffb5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
cmp dword [eax + ecx*4], ebx
mov dword [ebp - 0x3c], ebx
je 0x46ffb8
mov dword [ebp - 0x3c], edi
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x34], ecx
xor edx, edx
cmp dword [ebp - 0x3c], 0xe0c4
setg dl
sub edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
inc edx
mov ecx, dword [ebp - 0x54]
sub edx, dword [ecx + eax*4]
neg edx
sbb edx, edx
inc edx
xor eax, eax
cmp dword [ecx + esi*4], edx
setne al
mov edx, dword [ebp - 0x24]
add edx, eax
mov eax, dword [ebp - 0x54]
sub edx, dword [eax + edi*4]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, 0x5104e0b
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x34]
mov dword [eax + edx*4], ecx
imul eax, dword [ebp - 0x44], 9
test eax, eax
je 0x470029
cmp dword [ebp - 0x24], ebx
jne 0x470035
cmp dword [ebp - 0x24], ebx
jne 0x470035
mov esi, ebx
xor edi, edi
inc edi
jmp 0x47003a
xor edi, edi
inc edi
mov esi, edi
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
mov dword [eax + ecx*4], 0xffff
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setge dl
sub edx, 0xffff
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x20]
add edx, esi
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
setl dl
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, dword [ebp - 0x34]
setle cl
add ecx, 0xbd03
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x24]
cmp ecx, 0xb7607968
je 0x4700d3
cmp dword [ebp - 0x28], ebx
mov eax, ebx
je 0x4700d5
mov eax, edi
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x18]
push 2
pop esi
jns 0x46ff41
lea ecx, [ebp - 0x54]
call fcn.0040b34b
mov dword [ebp - 0x28], 0x7e8b
cmp dword [ebp - 0x28], 0x7f6f
jle 0x470170
push ebx
call dword [sym.imp.USER32.dll_DestroyCursor]
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov dword [ebp - 0x44], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x34], edi
mov ecx, esi
sar edi, cl
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x3c]
mov eax, edi
mov ecx, esi
sar eax, cl
xor eax, ebx
cdq
push edx
push eax
mov ecx, 0xade298
call fcn.0040b052
inc esi
cmp esi, 0x656a
jl 0x470120
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x73ea
push 0
pop ebx
mov edi, dword [ebp - 0x44]
jl 0x470110
inc edi
mov dword [ebp - 0x44], edi
cmp edi, 0x685d
jl 0x47010b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x4e67
jl 0x470106
xor edi, edi
inc edi
imul eax, dword [ebp - 0x48], 0x2710
add eax, dword [ebp - 0x78]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x28], 0x7b36
jge 0x470198
mov edx, str.fuzlg_ivukjgaa_razyqqpyv_pzfnsscr_meiob_rmsejd_bon
mov ecx, 0xade298
call fcn.0040d8d7
or dword [ebp - 4], 0xffffffff
jmp 0x4701c1
lea eax, [ebp - 0x7c]
push eax
call fcn.00471237
mov esi, dword [eax]
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x28], 0x60477862
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x28], ebx
jmp 0x470218
mov dword [ebp - 0x1c], 0x7c203980
mov dword [ebp - 0x1c], ebx
jmp 0x47020f
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x40], 0xffffffec
cmp dword [ebp - 0x40], ebx
jge 0x47020c
mov dword [ebp - 0x2c], ebx
inc dword [ebp - 0x2c]
inc dword [ebp - 0x40]
js 0x470201
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe6
je 0x4701ee
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x17
jl 0x4701e2
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x470237
push 0x21c1
push 0x220d
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
test esi, esi
je 0x470354
mov dword [ebp - 0x44], 0x70a3
cmp dword [ebp - 0x44], 0x7388
jle 0x4702c5
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
cdq
idiv edi
mov dword [ebp - 0x34], esi
mov ecx, edx
sar esi, cl
mov eax, esi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xade298
call fcn.0040b052
inc ebx
cmp ebx, 0x6453
jl 0x470268
inc edi
cmp edi, 0x6b40
push 0
pop ebx
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
jl 0x47025b
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x7343
jl 0x470259
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x54a8
jl 0x470254
push ebx
push ebx
push 0x105d
push 0xa53
call dword [sym.imp.USER32.dll_PostMessageA]
xor edi, edi
inc edi
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x30], 0x9b55bb2c
mov dword [ebp - 4], 2
cmp dword [ebp - 0x44], 0x6ea5
jge 0x4702eb
mov edx, str.gkrmdeahg_aioe_sjysozd_hvbhdy_bwdi_geupwddv_kzx_kmaeuqwd_hbx_crzhfkuph
mov ecx, 0xade298
call fcn.0040d8d7
or dword [ebp - 4], 0xffffffff
jmp 0x470317
mov dword [ebp - 0x30], ebx
jmp 0x470324
cmp dword [ebp - 0x30], ebx
jne 0x47032a
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xb
jle 0x47031c
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x470349
push edi
push 0x11ba
push 0x1d2e
push 0x22b
call dword [sym.imp.USER32.dll_SetScrollPos]
mov dword [ebp - 0xa4], esi
jmp 0x471218
mov eax, dword [0xadf5a0]
test al, 2
jne 0x4703d9
or eax, 2
mov dword [0xadf5a0], eax
mov dword [0xadf5b0], ebx
mov dword [0xadf5b4], ebx
push ebx
push ebx
call fcn.0040d7d6
mov dword [0xadf5b0], eax
mov dword [0xadf5b8], ebx
mov dword [0xadf5c0], ebx
mov dword [0xadf5cc], 0x3f800000
mov dword [ebp - 0xa8], eax
mov dword [0xadf5bc], ebx
lea eax, [ebp - 0xa8]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x188]
push eax
mov ecx, 0xadf5b8
call fcn.0040d57b
mov dword [0xadf5c4], 7
mov dword [0xadf5c8], 8
push 0x4c610f
call fcn.004af8bd
pop ecx
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x98], xmm0
lea eax, [ebp - 0x48]
push eax
call fcn.00471299
mov ecx, dword [eax]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x28], 0xc75b57fd
mov dword [ebp - 0x28], 0xffffffee
cmp dword [ebp - 0x28], 0xffffffec
jge 0x47047d
mov dword [ebp - 0x24], 0x1bf2
mov dword [ebp - 0x1c], ebx
jmp 0x470426
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x164], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x470415
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], ebx
jmp 0x47046b
mov dword [ebp - 0x1c], 0xef9d7865
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x470465
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x164], ecx
mov eax, dword [ebp - 0x24]
dec dword [ebp - 0x1c]
jns 0x47044d
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x47043a
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffec
jl 0x470409
mov ecx, dword [ebp - 0x30]
mov al, byte [ebp + 0xc]
test al, al
jne 0x47048c
test ecx, ecx
jne 0x4706ef
lea ecx, [ebp - 0x214]
push ecx
mov dl, al
mov ecx, dword [ebp - 0x48]
call fcn.00465308
pop ecx
mov esi, eax
lea edi, [ebp - 0x98]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
inc edi
cmp byte [ebp + 0xc], 0
je 0x4706ef
cmp dword [ebp - 0x90], 0
je 0x4706ef
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], 0x7c8a6b95
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x44], 0xd221
mov dword [ebp - 0x2c], 0x947e29ac
mov dword [ebp - 0x1c], ebx
jmp 0x4704fc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x104], 0xd7ba9668
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x4704eb
cmp dword [ebp - 0x28], ebx
jne 0x47050e
cmp dword [ebp - 0x18], ebx
mov esi, ebx
je 0x470510
mov esi, edi
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
xor edx, edx
cmp ecx, 0xd8d92426
setne dl
sub edx, dword [ebp - 0x40]
xor eax, eax
cmp edx, 0xec1b
setg al
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], edi
je 0x470548
cmp dword [ebp - 0x18], ebx
mov edx, edi
jne 0x47054a
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x18]
jge 0x470563
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x104]
mov edx, dword [ebp - 0xfc]
sub edx, 0xbe74fd57
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x44]
cmp ecx, 3
sbb eax, eax
inc eax
cmp eax, 0xfffffffa
ja 0x47059c
cmp dword [ebp - 0x18], ebx
mov eax, edi
jne 0x47059e
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
add eax, esi
cmp eax, dword [ebp - 0x28]
jne 0x4705c8
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x470660
push 0x1d01
call dword [sym.imp.USER32.dll_GetDC]
jmp 0x470660
mov dword [ebp - 0x28], 0x965da1f7
mov dword [ebp - 0x2c], 0xb039b7c3
mov dword [ebp - 0x18], ebx
jmp 0x470656
mov dword [ebp - 0x1c], edi
push 2
lea ecx, [ebp - 0x110]
call fcn.0040b279
mov dword [ebp - 0x1c], ebx
jmp 0x4705ff
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x4705f0
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x470616
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], edi
jne 0x470624
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
inc eax
cmp eax, dword [ebp - 0x18]
jge 0x470643
mov eax, dword [ebp - 0x110]
cmp dword [eax + 4], ebx
mov eax, edi
jne 0x470645
mov eax, ebx
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x110]
call fcn.0040b34b
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffeb
jl 0x4705db
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xa0], eax
push 4
lea ecx, [ebp - 0x1ac]
call fcn.0040b279
mov dword [ebp - 0x1c], 0xaa32b1ce
mov dword [ebp - 0x1c], ebx
jmp 0x470694
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1ac]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x470685
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x4706d8
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x4706be
push ebx
push ebx
push 0x1721
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x4706d3
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
dec dword [ebp - 0x1c]
jns 0x4706a6
lea ecx, [ebp - 0x1ac]
call fcn.0040b34b
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x44], edi
push 3
lea ecx, [ebp - 0x184]
call fcn.0040b279
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x2c], 0x2ba7b7e8
mov dword [ebp - 0x18], ebx
push 2
pop esi
jmp 0x470726
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x154], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x470715
mov dword [ebp - 0x18], ebx
jmp 0x470740
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x184]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x470730
mov dword [ebp - 0x18], ebx
jmp 0x47075c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x234], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x47074b
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x44], eax
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0x184]
call fcn.0040b34b
mov ecx, dword [ebp - 0x30]
test ecx, ecx
jne 0x470bf0
cmp dword [ebp - 0x98], ecx
jle 0x470bf0
mov dword [ebp - 0x38], 0x5e7a
mov dword [ebp - 0x38], 0x8a87013d
mov dword [ebp - 0x38], ebx
movdqa xmm0, xmmword [0xad2a50]
movdqu xmmword [ebp - 0x1bc], xmm0
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x1bc]
push eax
push ebx
lea ecx, [ebp - 0xec]
call fcn.0040e2cd
mov dword [ebp - 0x38], 0x7b568be1
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0xcb81eca6
mov dword [ebp - 0x2c], 4
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0xec]
call fcn.0040b34b
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x47081f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x194], 0x14a02569
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x47080e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x470838
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], 0x7c8a6b95
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x58], 0xd221
mov dword [ebp - 0x2c], 0x947e29ac
mov dword [ebp - 0x1c], ebx
jmp 0x470882
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x128], 0xd7ba9668
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x470871
mov dword [ebp - 0x20], 0x1e9e
mov dword [ebp - 0xc8], str.ixm_yahr_dboadnqu_ljzg_lufc_oytboaxrz_ile
cmp dword [ebp - 0x20], 0x1ec8
jle 0x47090a
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x1c], 0x7017
mov esi, eax
mov dword [ebp - 0x2c], 0x6782
mov eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x204]
call fcn.00401a48
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4708d4
mov eax, dword [eax]
push eax
call fcn.004af8e7
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x204]
call fcn.0040b827
inc esi
dec dword [ebp - 0x2c]
jne 0x4708ba
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
add eax, esi
mov dword [ebp - 0x44], eax
dec dword [ebp - 0x1c]
jne 0x4708b1
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x2e41
jl 0x4708a5
cmp dword [ebp - 0x28], ebx
jne 0x470916
cmp dword [ebp - 0x18], ebx
mov esi, ebx
je 0x470918
mov esi, edi
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x28]
sub edx, eax
neg edx
sbb edx, edx
inc edx
xor ecx, ecx
cmp edx, 0xd8d92426
setne cl
sub ecx, dword [ebp - 0x40]
xor eax, eax
cmp ecx, 0xec1b
setg al
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], edi
je 0x470950
cmp dword [ebp - 0x18], ebx
mov edx, edi
jne 0x470952
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x18]
jge 0x47096b
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x128]
mov edx, dword [ebp - 0x120]
sub edx, 0xbe74fd57
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x58]
cmp ecx, 3
sbb eax, eax
inc eax
cmp eax, 0xfffffffa
ja 0x4709a4
cmp dword [ebp - 0x18], ebx
mov eax, edi
jne 0x4709a6
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
add eax, esi
cmp eax, dword [ebp - 0x28]
jne 0x4709ec
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x4709c7
push 0x1d01
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x20], 0x1de2
jge 0x4709e3
push dword [ebp - 0xc8]
call fcn.004af8e7
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x470b37
mov dword [ebp - 0x28], 0x965da1f7
mov dword [ebp - 0x58], 0xb039b7c3
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xffffffeb
jge 0x4709c7
mov dword [ebp - 0x1c], edi
push 2
lea ecx, [ebp - 0x140]
call fcn.0040b279
mov dword [ebp - 0x1c], ebx
jmp 0x470a27
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x470a18
mov dword [ebp - 0x2c], 0x430c
cmp dword [ebp - 0x2c], 0x46c8
jle 0x470a6a
mov esi, ebx
mov edi, ebx
mov eax, esi
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xade298
call fcn.0040b052
inc edi
cmp edi, 0x6560
jl 0x470a41
inc esi
cmp esi, 0x18a5
jl 0x470a3f
xor edi, edi
inc edi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x470a7b
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2c], 0x42ff
jge 0x470a9a
mov edx, str.esucfnc_epj_phgrfcxpj_nzegkqd
mov ecx, 0xade298
call fcn.0040d8d7
or dword [ebp - 4], 0xffffffff
jmp 0x470ac9
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], edi
jne 0x470ad7
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
inc eax
cmp eax, dword [ebp - 0x18]
jge 0x470af6
mov eax, dword [ebp - 0x140]
cmp dword [eax + 4], ebx
mov eax, edi
jne 0x470af8
mov eax, ebx
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x140]
call fcn.0040b34b
dec dword [ebp - 0x18]
jmp 0x4709fd
push 2
pop esi
cmp dword [ebp - 0x94], 0
je 0x470bf0
cmp dword [ebp - 0x38], 0
je 0x470bf0
mov dword [ebp - 0x38], 0xd33a
mov dword [ebp - 0x38], 0xa76aabec
push esi
lea ecx, [ebp - 0x14c]
call fcn.0040b279
mov dword [ebp - 0x38], 0xccb24ce5
mov dword [ebp - 0x34], 0x3dbc
push esi
lea ecx, [ebp - 0x1a0]
call fcn.0040b279
mov dword [ebp - 0x20], ebx
jmp 0x470b99
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x470b8a
mov dword [ebp - 0x20], ebx
jmp 0x470bb6
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1a0]
mov dword [eax + ecx*4], 0x2e65
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x470ba3
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x1a0]
call fcn.0040b34b
lea ecx, [ebp - 0x14c]
call fcn.0040b34b
mov ecx, dword [ebp - 0x94]
call fcn.0046f8ee
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x48]
push eax
call fcn.00471299
mov ecx, dword [ebp - 0x30]
mov dword [eax], ecx
push 4
lea ecx, [ebp - 0xf8]
call fcn.0040b279
mov dword [ebp - 0x20], ebx
push 4
pop edx
jmp 0x470c14
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x470c05
mov dword [ebp - 0x20], ebx
jmp 0x470c2b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1ec], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x470c1e
mov ecx, dword [ebp - 0x1e4]
xor edx, edx
mov eax, dword [ebp - 0xf8]
cmp dword [eax], ecx
setne dl
mov eax, edi
mov byte [ebp - 0x11], bl
sub eax, edx
je 0x470c75
cmp byte [ebp - 0x11], 0
je 0x470c5f
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x470c82
push 0x111c
call dword [sym.imp.USER32.dll_IsIconic]
jmp 0x470c82
cmp byte [ebp - 0x11], 0
je 0x470c82
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea ecx, [ebp - 0xf8]
call fcn.0040b34b
lea ecx, [ebp - 0x98]
call fcn.0046f547
push esi
lea ecx, [ebp - 0x134]
call fcn.0040b279
movdqa xmm0, xmmword [0xad2a20]
movdqu xmmword [ebp - 0x1cc], xmm0
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], ebx
push dword [ebp + 8]
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1cc]
push eax
push ebx
lea ecx, [ebp - 0xc4]
call fcn.0040e2cd
mov dword [ebp - 0x20], 0xb785b647
mov dword [ebp - 0x34], 0xe2caeaba
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
jmp 0x470d0c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x470cf9
mov dword [ebp - 0x20], ebx
jmp 0x470d20
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x74], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x470d16
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x38], ecx
xor eax, eax
cmp dword [ecx + 8], 0x98cafa32
sete al
cmp eax, edi
jg 0x470d4a
cmp dword [ecx + 8], 0
mov eax, edi
jne 0x470d4c
mov eax, ebx
mov esi, dword [ebp - 0x134]
mov dword [esi + 4], eax
mov dword [ebp - 0x20], 0xffffffea
jmp 0x470eaf
mov dword [ebp - 0x18], edi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0x4b26
setl cl
cmp ecx, 0x8101aedf
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setne dl
neg edx
mov dword [esi + 4], edx
push 0
pop eax
sete al
xor ecx, ecx
mov edx, dword [ebp - 0x38]
cmp eax, dword [edx + 8]
setg cl
mov eax, dword [ebp - 0x70]
xor edx, edx
cmp edx, eax
sbb eax, eax
inc eax
cmp eax, ecx
jge 0x470daf
cmp dword [ebp - 0x70], ebx
mov edx, edi
jne 0x470db1
mov edx, ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x70]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x20], ebx
jne 0x470e7e
cmp dword [ebp - 0x18], ebx
jne 0x470e7e
mov dword [ebp - 0x28], 3
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x470e06
push 0x1c53
push ebx
push 0x775
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov dword [ebp - 0x24], 0xfffffffa
jmp 0x470e76
mov dword [ebp - 0x1c], 0x5a40a7b4
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x28]
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 5
setne al
xor ecx, ecx
test eax, eax
setg cl
mov eax, dword [ebp - 0x70]
imul ecx, eax
mov eax, dword [ebp - 0x28]
imul eax, ecx
cmp eax, dword [ebp - 0x74]
jl 0x470e63
cmp dword [ebp - 0x18], ebx
mov ecx, edi
jne 0x470e65
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov dword [esi + 4], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe8
jle 0x470e0f
jmp 0x470ea5
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x470e91
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov dword [ebp - 0x18], ebx
jmp 0x470e9f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff2
jl 0x470e96
mov dword [ebp - 0x18], 0xe707ecb5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x15
jl 0x470d61
lea ecx, [ebp - 0xc4]
call fcn.0040b34b
lea ecx, [ebp - 0x134]
call fcn.0040b34b
cmp dword [ebp - 0x3c], 0
jne 0x471194
cmp dword [ebp - 0x30], 0
je 0x471194
mov dword [ebp - 0x38], edi
push 3
pop esi
push esi
lea ecx, [ebp - 0x178]
call fcn.0040b279
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x34], 0x2ba7b7e8
mov dword [ebp - 0x18], ebx
jmp 0x470f19
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x16c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x470f08
mov dword [ebp - 0x18], ebx
jmp 0x470f34
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x178]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x470f24
mov dword [ebp - 0x18], ebx
jmp 0x470f4f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x224], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x470f3e
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x178]
call fcn.0040b34b
mov edx, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x30]
call fcn.0046f9bc
mov dword [ebp - 0xa4], eax
push 4
lea ecx, [ebp - 0x88]
call fcn.0040b279
mov eax, 0x66fe7d8a
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x30], 0xf6f08421
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], ebx
jmp 0x470fb9
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x470faa
mov dword [ebp - 0x60], esi
cmp dword [ebp - 0x60], ebx
jl 0x471178
mov dword [ebp - 0x24], 0x73ff82f
mov dword [ebp - 0x20], 0xfffffffe
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x47100d
push 0x1370
push ebx
push 0x20dc
push 0xa1d
push 0x173e
push ebx
push 0x23f7
push 0x47a
push 0xb51
call dword [sym.imp.USER32.dll_DrawIconEx]
mov dword [ebp - 0x24], ebx
jmp 0x471142
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], 0x18670fc2
mov esi, dword [ebp - 0x60]
mov edx, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
test eax, eax
je 0x471103
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x34], 0xffffffff
push 3
pop esi
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x47113c
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x60]
mov esi, dword [ebp - 0x60]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp dword [edx + esi*4], eax
setg cl
cmp ecx, 0xdc86
je 0x471097
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x88]
cmp dword [eax + ecx*4], ebx
mov ecx, edi
jne 0x471099
mov ecx, ebx
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp ecx, eax
setl dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
push 3
pop esi
add edx, esi
neg edx
sbb edx, edx
neg edx
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x88]
cmp edx, dword [eax + ecx*4]
jg 0x4710d3
cmp dword [ebp - 0x30], ebx
mov edx, ebx
je 0x4710d5
mov edx, edi
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x18], edi
imul eax, dword [ebp - 0x18], 9
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x1c]
jns 0x47105f
jmp 0x47113c
mov dword [ebp - 0x34], 5
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x471125
push ebx
push ebx
push 0x27c
push 0x254b
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], 0x12
jle 0x471139
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x30]
jmp 0x471128
push 3
pop esi
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x471015
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x47116f
mov dword [ebp - 0x38], 0x42fa43de
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], ebx
jl 0x47116a
mov dword [ebp - 0x38], edi
dec dword [ebp - 0x20]
jns 0x471162
dec dword [ebp - 0x18]
jns 0x471153
dec dword [ebp - 0x60]
jns 0x470fcb
lea ecx, [ebp - 0x88]
call fcn.0040b34b
lea eax, [ebp - 0x7c]
push eax
call fcn.00471237
mov ecx, dword [ebp - 0xa4]
mov dword [eax], ecx
push edi
lea ecx, [ebp - 0xd4]
call fcn.0040b279
mov dword [ebp - 0x1c], ebx
jmp 0x4711b8
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], 0x1928c176
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x4711a5
mov eax, dword [ebp - 0xd4]
mov dword [eax], 0xfffffff2
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x4711dd
push 0x1c9b
call dword [sym.imp.USER32.dll_IsZoomed]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x4711ec
call dword [sym.imp.USER32.dll_GetMessageTime]
mov eax, dword [ebp - 0xd4]
inc dword [eax]
cmp dword [eax], 0x15
jl 0x4711c9
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x47120d
push 0x1135
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
lea ecx, [ebp - 0xd4]
call fcn.0040b34b
mov eax, dword [ebp + 8]
mov edi, eax
lea esi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret