Function at 0x4a1e42
Capabilities:
Delete registry key
Delete registry value
Get memory capacity
Log keystrokes
Modify service
Read .ini file
Set thread local storage value

Disassembly:
mov eax, 0x4c71c1
call fcn.004c60c8
sub esp, 0xdd8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x6c], dl
mov dword [ebp - 0x54], ecx
push 2
lea ecx, [ebp - 0x4ac]
call fcn.0045223e
xor eax, eax
mov dword [ebp - 0x14], eax
xor edi, edi
inc edi
cmp dword [ebp - 0x14], edi
jge 0x4a1e90
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x178], 0xfff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a1e78
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x4a1eb0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x304], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a1e98
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x4a1ec6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9c8], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4a1eb5
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp - 0x304]
mov eax, dword [ebp - 0x178]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x9c8], eax
mov dword [ebp - 0x34], 0xa4a9bdba
mov dword [ebp - 0x24], 0x4d8a94b2
push 2
lea ecx, [ebp - 0x644]
call fcn.0045223e
mov dword [ebp - 0x40], 0xe7ccce1c
push edi
lea ecx, [ebp - 0x81c]
call fcn.0045223e
mov dword [ebp - 0x24], 0xb827be6
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x4a1f46
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x644]
mov dword [eax + ecx*4], 0x35357f45
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a1f2b
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x4a1f65
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x81c]
and dword [eax + ecx*4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a1f4e
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x4a207b
mov dword [ebp - 0x20], 0x17612d29
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x4a1f97
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xafc], 0xafe01bd9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x4a1f7e
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x4a201b
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0x92f644ac
mov dword [ebp - 0x24], 4
push edi
lea ecx, [ebp - 0x6f4]
call fcn.0045223e
mov dword [ebp - 0x24], 0xfffffff8
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x4a1ff2
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x6f4]
mov dword [eax + ecx*4], 0x7e813a3d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x4a1fd8
xor eax, eax
dec dword [ebp - 0x3c]
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a2005
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x6f4]
call fcn.00452310
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jle 0x4a1fa0
xor eax, eax
mov dword [ebp - 0x40], 9
push 7
pop ebx
jmp 0x4a2074
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a2043
push 0xfd3
push eax
push 0x86a
call dword [sym.imp.GDI32.dll_Polyline]
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x4a206b
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a2068
push 0x1630
push 0x1a88
push 0x1c8b
call dword [sym.imp.GDI32.dll_LineTo]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x4a2048
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jg 0x4a2027
jmp 0x4a20b0
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x644]
cmp dword [eax], ecx
setl dl
xor eax, eax
cmp edx, 0x785a
setle al
add eax, 0xc9e2
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x81c]
call fcn.00452310
lea ecx, [ebp - 0x644]
call fcn.00452310
mov dword [ebp - 0x40], 0x8a61928c
mov dword [ebp - 0x40], 0xfffffff5
cmp dword [ebp - 0x40], 0xfffffff4
je 0x4a213d
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x4a2101
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9e4], 0xfffffffe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4a20e8
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x4a212e
mov dword [ebp - 0x34], 3
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x4a212b
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x9e4], edi
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 4
jl 0x4a2116
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x14
jl 0x4a2106
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xfffffff4
jne 0x4a20dc
mov byte [ebp - 0x2d], 0
cmp byte [ebp - 0x2d], 0
je 0x4a214d
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [ebp - 0x14], 0
jmp 0x4a2169
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4ac]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a2156
mov dword [ebp - 0x2c], 0x68876942
mov dword [ebp - 0x24], 0x7c39
mov dword [ebp - 0x3c], 0x14fa
mov dword [ebp - 0x14], 0
jmp 0x4a219a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x218], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a218d
mov dword [ebp - 0x14], 0
jmp 0x4a21ba
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9fc], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a21a9
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x218]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffc
jne 0x4a21e7
mov eax, dword [ebp - 0x218]
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x24], 0x1af7
mov dword [ebp - 0x24], 0xfe57
mov dword [ebp - 0x24], 0x32d683a7
mov dword [ebp - 0x20], 0
jmp 0x4a221c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xdc4], 3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4a220b
inc dword [ebp - 0x3c]
mov byte [ebp - 0x2d], 0
cmp byte [ebp - 0x2d], 0
je 0x4a2237
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov dword [ebp - 0x14], 0
jmp 0x4a2251
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa8], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a2240
mov dword [ebp - 0xa8], edi
push 0xfffffffffffffff7
pop esi
push 0xfffffffffffffffb
pop ebx
cmp dword [ebp - 0xa8], 0
jl 0x4a2b8a
mov dword [ebp - 0x3c], 0xc5378470
movdqa xmm0, xmmword [0xaadac0]
movdqu xmmword [ebp - 0x8cc], xmm0
lea ecx, [ebp - 0x8cc]
lea eax, [ebp - 0x8bc]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x880]
call fcn.004522ea
push 2
lea ecx, [ebp - 0x70c]
call fcn.0045223e
mov dword [ebp - 0x14], 0
jmp 0x4a22c7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xec], 0xfffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4a22b6
mov dword [ebp - 0x14], 0
jmp 0x4a22e9
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x70c]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a22d6
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xe8]
je 0x4a2361
cmp dword [ebp - 0xe4], 0
je 0x4a2346
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0xe8], 4
jge 0x4a2321
xor eax, eax
cmp dword [ebp - 0xe4], eax
mov ecx, eax
je 0x4a2323
mov ecx, edi
mov eax, dword [ebp - 0xe8]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0xe4]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x3c]
jl 0x4a2346
mov edx, edi
jmp 0x4a2348
xor edx, edx
mov eax, dword [ebp - 0xe4]
xor ecx, ecx
cmp edx, eax
setg cl
cmp dword [ebp - 0xe4], ecx
jl 0x4a2361
mov edx, edi
jmp 0x4a2363
xor edx, edx
mov eax, dword [ebp - 0x3c]
sub edx, eax
mov eax, dword [ebp - 0xe4]
xor ecx, ecx
cmp edx, eax
setge cl
mov eax, dword [ebp - 0x880]
mov dword [eax], ecx
lea ecx, [ebp - 0x70c]
call fcn.00452310
lea ecx, [ebp - 0x880]
call fcn.00452310
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x4ac]
cmp dword [eax + ecx*4], 0
jne 0x4a2b8a
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], 0xb445acee
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x20], 0
jmp 0x4a23d1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x64], 0x951ad386
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x4a23c3
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
xor edx, edx
cmp ecx, eax
setge dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x20], 0xc541
jge 0x4a2468
mov dword [ebp - 0x18], 0x6a81
xor eax, eax
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x4a241a
push eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x4a2437
cmp dword [ebp - 0x64], eax
je 0x4a242b
cmp dword [ebp - 0x18], eax
mov ecx, edi
jne 0x4a242d
mov ecx, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
mov ecx, eax
je 0x4a2439
mov ecx, edi
mov eax, dword [ebp - 0x64]
imul eax, ecx
imul eax, eax, 0xffff
test eax, eax
jne 0x4a244c
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x64]
sub ecx, eax
mov dword [ebp - 0x3c], ecx
jmp 0x4a24a4
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x44], edi
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
test eax, eax
setns cl
neg ecx
je 0x4a248f
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44], eax
push 4
lea ecx, [ebp - 0x320]
call fcn.0045223e
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x3c], 0x67ff
cmp dword [ebp - 0x3c], 0x6a12
jle 0x4a251b
xor ecx, ecx
mov dword [ebp - 0x20], ecx
xor edi, edi
xor ebx, ebx
xor esi, esi
mov eax, esi
and eax, ebx
xor eax, edi
xor eax, ecx
cdq
push edx
push eax
mov ecx, 0xab95b8
call fcn.00452129
inc esi
cmp esi, 0x1a1e
mov ecx, dword [ebp - 0x20]
jl 0x4a24d6
inc ebx
cmp ebx, 0x65
jl 0x4a24d4
inc edi
cmp edi, 0x437c
jl 0x4a24d2
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x1a35
jl 0x4a24d0
xor edi, edi
inc edi
push 0xfffffffffffffffb
pop ebx
push 0xfffffffffffffff7
pop esi
and dword [ebp - 4], 0
cmp dword [ebp - 0x3c], 0x678d
jge 0x4a2537
mov edx, str.cccmbbi_rukxnfgf_ems_qaoufi_iizj_ksckjz
mov ecx, 0xab95b8
call fcn.00453acf
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4a2568
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x4a2589
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x320]
and dword [eax + ecx*4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4a2571
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x4a25ab
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa3c], 0x6ea41824
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4a2592
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x4a269f
mov dword [ebp - 0x14], 0x252604
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x4a269c
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x3c], 0xf03fa9a1
mov dword [ebp - 0x18], esi
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
xor eax, eax
cmp dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x320]
je 0x4a2608
cmp dword [ecx + 8], eax
je 0x4a2608
mov eax, edi
cmp eax, 0xfffffff8
sbb eax, eax
neg eax
cmp eax, dword [ecx]
jne 0x4a261c
xor eax, eax
cmp dword [ebp - 0x2c], eax
mov ecx, eax
je 0x4a261e
mov ecx, edi
xor eax, eax
cmp ecx, 0xd2af
setle al
cmp eax, 0xfffa
jbe 0x4a2633
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setle dl
imul edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
cmp ecx, edi
setl al
cmp eax, dword [ebp - 0x14]
jg 0x4a2680
xor eax, eax
cmp dword [ebp - 0x18], eax
mov ecx, eax
je 0x4a2682
mov ecx, edi
mov eax, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0xa3c], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x4a25ce
xor eax, eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jle 0x4a25b3
lea ecx, [ebp - 0x320]
call fcn.00452310
mov byte [ebp - 0x2d], 0
push 4
lea ecx, [ebp - 0x47c]
call fcn.0045223e
push edi
lea ecx, [ebp - 0x28c]
call fcn.0045223e
push 4
lea ecx, [ebp - 0x3bc]
call fcn.0045223e
push edi
lea ecx, [ebp - 0x724]
call fcn.0045223e
mov dword [ebp - 0x3c], 0xe06985ba
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x48], 0
jmp 0x4a2711
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x47c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 4
jl 0x4a2701
mov dword [ebp - 0x48], 0
jmp 0x4a2733
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28c]
mov dword [eax + ecx*4], 0x1febaeef
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], edi
jl 0x4a2720
mov dword [ebp - 0x48], 0
jmp 0x4a2750
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x3bc]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 4
jl 0x4a2741
mov dword [ebp - 0x48], 0
jmp 0x4a2772
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x724]
mov dword [eax + ecx*4], 0x95231fbf
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], edi
jl 0x4a275f
mov eax, dword [ebp - 0x28c]
and dword [eax], 0
mov edx, dword [ebp - 0x3bc]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x3c], 0x7fc0549e
mov dword [ebp - 0x20], 0
jmp 0x4a27b1
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x3bc]
dec dword [eax]
inc dword [ebp - 0x3c]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x4a279c
mov dword [ebp - 0x3c], 0xab1d
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, dword [edx + 8]
setl cl
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x47c]
mov eax, dword [eax + ecx*4]
cmp dword [ebp - 0x2c], eax
jge 0x4a27ef
test eax, eax
je 0x4a27f1
mov eax, edi
add eax, 3
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28c]
inc dword [eax]
cmp dword [eax], 3
jle 0x4a2786
lea ecx, [ebp - 0x724]
call fcn.00452310
lea ecx, [ebp - 0x3bc]
call fcn.00452310
lea ecx, [ebp - 0x28c]
call fcn.00452310
lea ecx, [ebp - 0x47c]
call fcn.00452310
cmp byte [ebp - 0x2d], 0
je 0x4a2b7f
mov dword [ebp - 0x14], 0x72d9ee1c
push 2
lea ecx, [ebp - 0x2ac]
call fcn.0045223e
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], 0xb6a7
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0xefb659ba
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x4a2889
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2ac]
and dword [eax + ecx*4], 0
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x4a2871
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x4a289f
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x458], 0x276cc72b
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x4a288e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2ac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0
jne 0x4a28d4
mov eax, dword [ebp - 0x2ac]
cmp dword [eax], 0
jne 0x4a28d4
xor edx, edx
jmp 0x4a28d6
mov edx, edi
mov ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
xor eax, eax
cmp edx, edi
sete al
cmp ecx, eax
jge 0x4a28eb
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x14]
sub edx, 0x4709
xor eax, eax
cmp edx, dword [ebp - 0x38]
jg 0x4a290f
cmp dword [ebp - 0x34], eax
mov ecx, eax
je 0x4a2911
mov ecx, edi
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jg 0x4a2b69
mov dword [ebp - 0x2c], 0xbd791f9e
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x3c], 5
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x4a2957
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa54], 0xd8142c78
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4a293e
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jg 0x4a2a86
mov dword [ebp - 0x3c], 0x2bce
cmp dword [ebp - 0x3c], 0x2e25
jle 0x4a29a0
mov ebx, eax
mov esi, eax
mov eax, esi
xor eax, ebx
cdq
push edx
push eax
mov ecx, 0xab95b8
call fcn.00452129
inc esi
cmp esi, 0x3cf2
jl 0x4a2977
inc ebx
cmp ebx, 0x22f
push 0
pop eax
jl 0x4a2975
push 0xfffffffffffffffb
pop ebx
mov dword [ebp - 0x24], edi
mov dword [ebp - 4], 2
cmp dword [ebp - 0x3c], 0x281c
jge 0x4a29c2
mov edx, str.prtaznlb_qedyzlnpf_zoqfsv_nxrxx_lenqqrpr_gthus_vhx_ktlapj_nhlkmdu_aaammc
mov ecx, 0xab95b8
call fcn.00453acf
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4a29f0
mov dword [ebp - 0x20], eax
jmp 0x4a2a06
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa5c], 0xfffffffa
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x4a29f5
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x4a2a2a
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x454]
jl 0x4a2a2a
xor esi, esi
jmp 0x4a2a2c
mov esi, edi
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2ac]
mov edx, dword [eax + ecx*4]
sub edx, esi
add edx, 0x5c7c
mov eax, dword [ebp - 0xa4c]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x18]
cmp eax, ecx
jle 0x4a2a64
mov eax, edi
jmp 0x4a2a66
xor eax, eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xbde8
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x40]
xor eax, eax
jmp 0x4a295a
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a2b33
mov dword [ebp - 0x34], 0x486a
cmp dword [ebp - 0x34], 0x4ada
jle 0x4a2afd
mov ebx, eax
mov esi, eax
mov dword [ebp - 0x20], eax
mov edi, esi
mov dword [ebp - 0x2c], 0x64d
mov eax, edi
mov dword [ebp - 0x3c], eax
mov esi, 0x727d
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xab95b8
call fcn.00452129
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
dec esi
jne 0x4a2abd
dec edi
dec dword [ebp - 0x2c]
jne 0x4a2ab3
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0xfae
jl 0x4a2aaa
inc ebx
cmp ebx, 0x7f4a
push 0
pop eax
push 1
pop edi
jl 0x4a2aa5
push 0xfffffffffffffffb
pop ebx
push eax
push 0x1b07
push 0x207d
call dword [sym.imp.GDI32.dll_CreatePen]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x34], 0x4544
jge 0x4a2b2d
mov edx, str.kzrnnki_lpwtewl_ixecvsyp_ngbby_oistsaxkf_nfu_itneleono_zuejlnugq_ybtlnxzj_mgnzihw_mzxgskrqk_zmyiut
mov ecx, 0xab95b8
call fcn.00453acf
or dword [ebp - 4], 0xffffffff
xor eax, eax
push 0xfffffffffffffff7
pop esi
inc dword [ebp - 0x14]
jmp 0x4a2917
lea ecx, [ebp - 0x2ac]
call fcn.00452310
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_AttachThreadInput]
dec dword [ebp - 0xa8]
jmp 0x4a2262
lea ecx, [ebp - 0x4ac]
call fcn.00452310
push 2
lea ecx, [ebp - 0x59c]
call fcn.0045223e
mov dword [ebp - 0x14], 0
jmp 0x4a2bbe
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x59c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a2bab
mov dword [ebp - 0x14], 0
jmp 0x4a2bde
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8c], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a2bcd
mov dword [ebp - 0x8c], edi
cmp dword [ebp - 0x8c], 0
jl 0x4a2c1f
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x59c]
cmp dword [eax + ecx*4], 0
jne 0x4a2c1f
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x4a2c17
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_AttachThreadInput]
dec dword [ebp - 0x8c]
jns 0x4a2bf2
lea ecx, [ebp - 0x59c]
call fcn.00452310
mov dword [ebp - 0x34], 0xa4a9bdba
mov dword [ebp - 0x24], 0x4d8a94b2
push 2
lea ecx, [ebp - 0x4c4]
call fcn.0045223e
mov dword [ebp - 0x40], 0xe7ccce1c
push edi
lea ecx, [ebp - 0x73c]
call fcn.0045223e
mov dword [ebp - 0x24], 0xb827be6
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x4a2c85
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4c4]
mov dword [eax + ecx*4], 0x35357f45
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a2c6a
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x4a2ca4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x73c]
and dword [eax + ecx*4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a2c8d
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x4a2e77
mov dword [ebp - 0x20], 0x17612d29
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x4a2cd6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xc70], 0xafe01bd9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x4a2cbd
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x4a2d5a
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0x92f644ac
mov dword [ebp - 0x24], 4
push edi
lea ecx, [ebp - 0x830]
call fcn.0045223e
mov dword [ebp - 0x24], 0xfffffff8
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x4a2d31
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x830]
mov dword [eax + ecx*4], 0x7e813a3d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x4a2d17
xor eax, eax
dec dword [ebp - 0x3c]
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a2d44
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [ebp - 0x830]
call fcn.00452310
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jle 0x4a2cdf
xor eax, eax
mov dword [ebp - 0x2c], 0x44a2
cmp dword [ebp - 0x2c], 0x4510
jle 0x4a2dcb
push 0x1aca
push eax
push eax
push eax
call dword [sym.imp.GDI32.dll_CombineRgn]
xor esi, esi
mov dword [ebp - 0x3c], esi
mov ebx, esi
mov esi, 0x3620
mov eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xd54]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
push 0
push edi
lea ecx, [ebp - 0xd54]
call fcn.0045261a
dec ebx
dec esi
jne 0x4a2d84
mov esi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x3524
jl 0x4a2d7d
push 0xfffffffffffffffb
pop ebx
push 0xfffffffffffffff7
pop esi
mov dword [ebp - 0x40], 9
cmp dword [ebp - 0x40], 7
jle 0x4a2e2d
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a2df6
push 0xfd3
push eax
push 0x86a
call dword [sym.imp.GDI32.dll_Polyline]
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x4a2e1e
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a2e1b
push 0x1630
push 0x1a88
push 0x1c8b
call dword [sym.imp.GDI32.dll_LineTo]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x4a2dfb
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 7
jg 0x4a2dda
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2c], 0x430c
jge 0x4a2e48
push str.esxemhxf_znprcslcr_tqpqlpro_lcjrr_mredsu_xxb_frxuz_pvk
call fcn.004b0bf7
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x4a2eac
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x4c4]
cmp dword [eax], ecx
setl dl
xor eax, eax
cmp edx, 0x785a
setle al
add eax, 0xc9e2
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x73c]
call fcn.00452310
lea ecx, [ebp - 0x4c4]
call fcn.00452310
push 2
lea ecx, [ebp - 0x4dc]
call fcn.0045223e
mov dword [ebp - 0x40], 0x8a61928c
mov dword [ebp - 0x40], 0xfffffff5
cmp dword [ebp - 0x40], 0xfffffff4
je 0x4a2f46
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x4a2f0a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa6c], 0xfffffffe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4a2ef1
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x4a2f37
mov dword [ebp - 0x34], 3
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x4a2f34
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xa6c], edi
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 4
jl 0x4a2f1f
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x14
jl 0x4a2f0f
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xfffffff4
jne 0x4a2ee5
mov byte [ebp - 0x2d], 0
cmp byte [ebp - 0x2d], 0
je 0x4a2f56
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [ebp - 0x2c], 0x68876942
mov dword [ebp - 0x24], 0x7c39
mov dword [ebp - 0x3c], 0x14fa
mov dword [ebp - 0x14], 0
jmp 0x4a2f81
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x240], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a2f74
mov dword [ebp - 0x14], 0
jmp 0x4a2fa1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa1c], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a2f90
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x240]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffc
jne 0x4a2fce
mov eax, dword [ebp - 0x240]
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x24], 0x1af7
mov dword [ebp - 0x24], 0xfe57
mov dword [ebp - 0x24], 0x32d683a7
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x4a300d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xdd4], 3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4a2ff4
xor eax, eax
inc dword [ebp - 0x3c]
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a3022
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x4a303a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4dc]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a3027
mov dword [ebp - 0x3c], 0xc5378470
movdqa xmm0, xmmword [0xaadac0]
movdqu xmmword [ebp - 0x92c], xmm0
lea ecx, [ebp - 0x92c]
lea eax, [ebp - 0x91c]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x754]
call fcn.004522ea
push 2
lea ecx, [ebp - 0x898]
call fcn.0045223e
mov dword [ebp - 0x14], 0
jmp 0x4a3098
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xf8], 0xfffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4a3087
mov dword [ebp - 0x14], 0
jmp 0x4a30ba
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x898]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a30a7
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0xf4]
je 0x4a3132
cmp dword [ebp - 0xf0], 0
je 0x4a3117
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0xf4], 4
jge 0x4a30f2
xor eax, eax
cmp dword [ebp - 0xf0], eax
mov ecx, eax
je 0x4a30f4
mov ecx, edi
mov eax, dword [ebp - 0xf4]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0xf0]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x3c]
jl 0x4a3117
mov edx, edi
jmp 0x4a3119
xor edx, edx
mov eax, dword [ebp - 0xf0]
xor ecx, ecx
cmp edx, eax
setg cl
cmp dword [ebp - 0xf0], ecx
jl 0x4a3132
mov edx, edi
jmp 0x4a3134
xor edx, edx
mov eax, dword [ebp - 0x3c]
sub edx, eax
mov eax, dword [ebp - 0xf0]
xor ecx, ecx
cmp edx, eax
setge cl
mov eax, dword [ebp - 0x754]
mov dword [eax], ecx
lea ecx, [ebp - 0x898]
call fcn.00452310
lea ecx, [ebp - 0x754]
call fcn.00452310
mov dword [ebp - 0x14], 0
jmp 0x4a317e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x84], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a316d
mov dword [ebp - 0x84], edi
cmp dword [ebp - 0x84], 0
jl 0x4a3a4b
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], 0xb445acee
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x20], 0
jmp 0x4a31be
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x60], 0x951ad386
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x4a31b0
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
xor edx, edx
cmp ecx, eax
setge dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x20], 0xc541
jge 0x4a3255
mov dword [ebp - 0x18], 0x6a81
xor eax, eax
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x4a3207
push eax
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x4a3224
cmp dword [ebp - 0x60], eax
je 0x4a3218
cmp dword [ebp - 0x18], eax
mov ecx, edi
jne 0x4a321a
mov ecx, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
mov ecx, eax
je 0x4a3226
mov ecx, edi
mov eax, dword [ebp - 0x60]
imul eax, ecx
imul eax, eax, 0xffff
test eax, eax
jne 0x4a3239
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x60]
sub ecx, eax
mov dword [ebp - 0x3c], ecx
jmp 0x4a3291
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x44], edi
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
test eax, eax
setns cl
neg ecx
je 0x4a327c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44], eax
push 4
lea ecx, [ebp - 0x35c]
call fcn.0045223e
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], 9
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x4a32cb
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x35c]
and dword [eax + ecx*4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4a32b3
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x4a32ed
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa84], 0x6ea41824
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4a32d4
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x4a3474
mov dword [ebp - 0x14], 0x252604
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x4a346c
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x3c], 0xf03fa9a1
mov dword [ebp - 0x3c], 0x3c25
cmp dword [ebp - 0x3c], 0x3f05
jle 0x4a3365
mov ebx, eax
mov esi, eax
mov eax, ebx
mov ecx, esi
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xab95b8
call fcn.00452129
inc esi
cmp esi, 0xa85
jl 0x4a3337
inc ebx
cmp ebx, 0x5f93
push 0
pop eax
jl 0x4a3335
push 0xfffffffffffffffb
pop ebx
push 0xfffffffffffffff7
pop esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], 8
cmp dword [ebp - 0x3c], 0x3b03
jge 0x4a3387
mov edx, str.wephgipqe_cerez_smayzmuln_uixnnhs_tkllowrdi_kchhofb_yisardh_kwhgd_ydgmjae_tfuaqmm_qhtyltgms_zpqvjcn_zeawtml_zvriiwj
mov ecx, 0xab95b8
call fcn.00453acf
or dword [ebp - 4], 0xffffffff
jmp 0x4a33b4
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x35c]
je 0x4a33dd
cmp dword [ecx + 8], eax
je 0x4a33dd
mov eax, edi
cmp eax, 0xfffffff8
sbb eax, eax
neg eax
cmp eax, dword [ecx]
jne 0x4a33f1
xor eax, eax
cmp dword [ebp - 0x2c], eax
mov ecx, eax
je 0x4a33f3
mov ecx, edi
xor eax, eax
cmp ecx, 0xd2af
setle al
cmp eax, 0xfffa
jbe 0x4a3408
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setle dl
imul edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
cmp ecx, edi
setl al
cmp eax, dword [ebp - 0x14]
jg 0x4a3455
xor eax, eax
cmp dword [ebp - 0x18], eax
mov ecx, eax
je 0x4a3457
mov ecx, edi
mov eax, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0xa84], ecx
inc dword [ebp - 0x14]
xor eax, eax
jmp 0x4a330b
inc dword [ebp - 0x20]
jmp 0x4a32f0
lea ecx, [ebp - 0x35c]
call fcn.00452310
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x4dc]
cmp dword [eax + ecx*4], 0
jne 0x4a3a4b
xor eax, eax
mov byte [ebp - 0x2d], al
mov dword [ebp - 0x3c], 0x1305
cmp dword [ebp - 0x3c], 0x1571
jle 0x4a34fb
mov dword [ebp - 0x2c], eax
mov esi, eax
mov edi, dword [ebp - 0x2c]
mov ebx, eax
mov eax, esi
and eax, edi
mov dword [ebp - 0x24], eax
mov edi, eax
mov eax, edi
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xab95b8
call fcn.00452129
inc ebx
cmp ebx, 0x2ec
jl 0x4a34bd
inc esi
cmp esi, 0x5030
push 0
pop eax
mov edi, dword [ebp - 0x2c]
jl 0x4a34b2
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x2658
push 1
pop edi
jl 0x4a34ad
push 0xfffffffffffffffb
pop ebx
push 0xfffffffffffffff7
pop esi
push 4
lea ecx, [ebp - 0x614]
call fcn.0045223e
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x3c], 0x102f
jge 0x4a3527
mov edx, str.vjcir_dptgmi_tmurrfnzx_quqvqbo_mbtzobhh_ernse
mov ecx, 0xab95b8
call fcn.00453acf
or dword [ebp - 4], 0xffffffff
jmp 0x4a3554
push edi
lea ecx, [ebp - 0x2bc]
call fcn.0045223e
push 4
lea ecx, [ebp - 0x41c]
call fcn.0045223e
push edi
lea ecx, [ebp - 0x844]
call fcn.0045223e
mov dword [ebp - 0x3c], 0xe06985ba
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x48], 0
jmp 0x4a35a0
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x614]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 4
jl 0x4a3590
mov dword [ebp - 0x48], 0
jmp 0x4a35c2
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2bc]
mov dword [eax + ecx*4], 0x1febaeef
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], edi
jl 0x4a35af
mov dword [ebp - 0x48], 0
jmp 0x4a35df
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x41c]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 4
jl 0x4a35d0
mov dword [ebp - 0x48], 0
jmp 0x4a3601
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x844]
mov dword [eax + ecx*4], 0x95231fbf
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], edi
jl 0x4a35ee
mov eax, dword [ebp - 0x2bc]
and dword [eax], 0
mov edx, dword [ebp - 0x41c]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x3c], 0x7fc0549e
mov dword [ebp - 0x20], 0
jmp 0x4a3640
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x41c]
dec dword [eax]
inc dword [ebp - 0x3c]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x4a362b
mov dword [ebp - 0x3c], 0xab1d
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, dword [edx + 8]
setl cl
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x614]
mov eax, dword [eax + ecx*4]
cmp dword [ebp - 0x2c], eax
jge 0x4a367e
test eax, eax
je 0x4a3680
mov eax, edi
add eax, 3
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x2bc]
inc dword [eax]
cmp dword [eax], 3
jle 0x4a3615
lea ecx, [ebp - 0x844]
call fcn.00452310
lea ecx, [ebp - 0x41c]
call fcn.00452310
lea ecx, [ebp - 0x2bc]
call fcn.00452310
lea ecx, [ebp - 0x614]
call fcn.00452310
cmp byte [ebp - 0x2d], 0
je 0x4a3a40
mov dword [ebp - 0x14], 0x72d9ee1c
mov dword [ebp - 0x3c], 0x2673
cmp dword [ebp - 0x3c], 0x296e
jle 0x4a3720
xor edi, edi
xor esi, esi
xor ebx, ebx
mov eax, esi
cdq
idiv ebx
xor edx, edi
mov eax, edx
cdq
push edx
push eax
mov ecx, 0xab95b8
call fcn.00452129
inc ebx
cmp ebx, 0x36e0
jl 0x4a36e6
inc esi
cmp esi, 0x63e4
jl 0x4a36e4
inc edi
cmp edi, 0x788b
jl 0x4a36e2
xor edi, edi
inc edi
push 0xfffffffffffffffb
pop ebx
push 0xfffffffffffffff7
pop esi
push 2
lea ecx, [ebp - 0x2cc]
call fcn.0045223e
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x3c], 0x2326
jge 0x4a374c
mov edx, str.wwua_rfi_obt_aung_lpn_wqygcbh_lriiwnw_zauhpdfe
mov ecx, 0xab95b8
call fcn.00453acf
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4a377d
mov dword [ebp - 0x3c], 0x55d4
cmp dword [ebp - 0x3c], 0x599d
jle 0x4a3802
mov ecx, eax
mov dword [ebp - 0x18], ecx
mov esi, eax
jmp 0x4a3798
xor eax, eax
mov ebx, eax
lea eax, [ebx + esi]
and eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0xc4c]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
push 0
push edi
lea ecx, [ebp - 0xc4c]
call fcn.0045261a
inc ebx
cmp ebx, 0x60e8
mov ecx, dword [ebp - 0x18]
jl 0x4a379a
inc esi
cmp esi, 0x5b10
jl 0x4a3796
inc ecx
mov dword [ebp - 0x18], ecx
xor eax, eax
cmp ecx, 0x116c
jl 0x4a3792
push eax
push eax
push 0x1e88
push eax
call dword [sym.imp.USER32.dll_AppendMenuA]
push 0xfffffffffffffffb
pop ebx
push 0xfffffffffffffff7
pop esi
mov dword [ebp - 0x34], 7
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x3c], 0x52af
jge 0x4a3824
push str.mmw_hwuqsc_yymsf_mpkyihqx
call fcn.004b0bf7
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4a3855
mov dword [ebp - 0x3c], 0xb6a7
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], 0xefb659ba
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x4a3887
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2cc]
and dword [eax + ecx*4], 0
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x4a386f
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x4a389d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x440], 0x276cc72b
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x4a388c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2cc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0
jne 0x4a38d2
mov eax, dword [ebp - 0x2cc]
cmp dword [eax], 0
jne 0x4a38d2
xor edx, edx
jmp 0x4a38d4
mov edx, edi
mov ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
xor eax, eax
cmp edx, edi
sete al
cmp ecx, eax
jge 0x4a38e9
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x14]
sub edx, 0x4709
xor eax, eax
cmp edx, dword [ebp - 0x3c]
jg 0x4a390d
cmp dword [ebp - 0x34], eax
mov ecx, eax
je 0x4a390f
mov ecx, edi
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jg 0x4a3a2a
mov dword [ebp - 0x2c], 0xbd791f9e
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x4a3955
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9f4], 0xd8142c78
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4a393c
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jg 0x4a39ff
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], eax
jmp 0x4a397a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa8c], 0xfffffffa
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x4a3969
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x4a399e
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x43c]
jl 0x4a399e
xor esi, esi
jmp 0x4a39a0
mov esi, edi
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2cc]
mov edx, dword [eax + ecx*4]
sub edx, esi
add edx, 0x5c7c
mov eax, dword [ebp - 0x9ec]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x18]
cmp eax, ecx
jle 0x4a39d8
mov eax, edi
jmp 0x4a39da
xor eax, eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xbde8
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
push 0
pop eax
jle 0x4a3961
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a3a1b
push eax
push 0x1b07
push 0x207d
call dword [sym.imp.GDI32.dll_CreatePen]
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x4a391e
push 0xfffffffffffffff7
pop esi
lea ecx, [ebp - 0x2cc]
call fcn.00452310
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_AttachThreadInput]
dec dword [ebp - 0x84]
jmp 0x4a3189
lea ecx, [ebp - 0x4dc]
call fcn.00452310
push 4
lea ecx, [ebp - 0x76c]
call fcn.0045223e
mov dword [ebp - 0x18], 0x66fe7d8a
mov dword [ebp - 0x3c], 0xb3b9
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x4a3a97
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x76c]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4a3a7c
xor eax, eax
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], eax
jl 0x4a3acc
dec dword [ebp - 0x3c]
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a3ac7
push eax
push 0x2580
push 0x254
push 0x65f
call dword [sym.imp.GDI32.dll_SetPixel]
xor eax, eax
dec dword [ebp - 0x18]
jns 0x4a3aa3
lea ecx, [ebp - 0x76c]
call fcn.00452310
push 4
lea ecx, [ebp - 0x8ac]
call fcn.0045223e
mov dword [ebp - 0x18], 0x66fe7d8a
mov dword [ebp - 0x3c], 0xb3b9
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x4a3b18
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x8ac]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4a3afd
xor eax, eax
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], eax
jl 0x4a3b4d
dec dword [ebp - 0x3c]
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a3b48
push eax
push 0x2580
push 0x254
push 0x65f
call dword [sym.imp.GDI32.dll_SetPixel]
xor eax, eax
dec dword [ebp - 0x18]
jns 0x4a3b24
lea ecx, [ebp - 0x8ac]
call fcn.00452310
mov dword [ebp - 0x20], 0x99cf
mov dword [ebp - 0x24], 0x229edca8
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x3c], 0x1430
cmp dword [ebp - 0x3c], 0x149d
jle 0x4a3bd0
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
xor esi, esi
xor ebx, ebx
mov eax, esi
mov ecx, ebx
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0xad8]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
push 0
push edi
lea ecx, [ebp - 0xad8]
call fcn.0045261a
inc ebx
cmp ebx, 0x44de
jl 0x4a3b8c
inc esi
cmp esi, 0x28e4
jl 0x4a3b8a
mov dword [ebp - 0x24], 0x270f9e3
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x3c], 0x12b3
jge 0x4a3bf2
push str.wepuejcd_isfnmtj_zveo
call fcn.004b0bf7
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4a3c1d
mov dword [ebp - 0x24], 0xa05d7627
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0x5fba2522
push 2
lea ecx, [ebp - 0x784]
call fcn.0045223e
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x4a3c60
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8b0], 0xd96711db
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a3c48
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x4a3c78
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x784]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a3c65
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
cmp eax, 0x927213ec
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, 0x7d50f82b
setne cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x3c]
lea ecx, [ebp - 0x784]
call fcn.00452310
mov dword [ebp - 0x20], 0x99cf
mov dword [ebp - 0x24], 0x229edca8
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0x270f9e3
mov dword [ebp - 0x24], 0xa05d7627
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x24], 0x5fba2522
push 2
lea ecx, [ebp - 0x858]
call fcn.0045223e
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x4a3d1c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6a8], 0xd96711db
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a3d04
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x4a3d34
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x858]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4a3d21
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
cmp eax, 0x927213ec
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, 0x7d50f82b
setne cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x3c]
lea ecx, [ebp - 0x858]
call fcn.00452310
mov dword [ebp - 0x14], 0x14b733c6
push 3
lea ecx, [ebp - 0x5b4]
call fcn.0045223e
mov dword [ebp - 0x3c], 0xfff6
mov dword [ebp - 0x20], 0
jmp 0x4a3da9
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x5b4]
mov dword [eax + ecx*4], 0x383cc47d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x4a3d96
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
inc edx
xor ecx, ecx
cmp edx, 0xfffffff6
setne cl
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setl dl
mov esi, dword [ebp - 0x5b4]
mov dword [esi + 4], edx
mov eax, dword [ebp - 0x14]
add eax, edx
neg eax
sbb eax, eax
inc eax
xor edx, edx
cmp eax, 0xeb6b9dd9
setne dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, edx
setne cl
add ecx, dword [ebp - 0x14]
xor eax, eax
cmp ecx, dword [ebp - 0x14]
jg 0x4a3e11
cmp dword [esi + 4], eax
mov ecx, eax
je 0x4a3e13
mov ecx, edi
cmp ecx, dword [ebp - 0x14]
jne 0x4a3e31
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a3ec4
push eax
call dword [sym.imp.USER32.dll_DestroyCursor]
jmp 0x4a3ec4
mov dword [ebp - 0x24], 0xd70c
mov dword [ebp - 0x24], 0x290ce96f
push 3
lea ecx, [ebp - 0x79c]
call fcn.0045223e
mov dword [ebp - 0x24], 0xc00eadd5
mov dword [ebp - 0x24], 8
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0x416c
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x4a3e8d
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x79c]
mov dword [eax + ecx*4], 0x2e889ec0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x4a3e72
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x4a3eb0
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a3ead
push 0xe94
push 0x1c8e
call dword [sym.imp.USER32.dll_GetWindowLongA]
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 8
jge 0x4a3e92
inc dword [ebp - 0x3c]
lea ecx, [ebp - 0x79c]
call fcn.00452310
lea ecx, [ebp - 0x5b4]
call fcn.00452310
push 4
lea ecx, [ebp - 0x874]
call fcn.0045223e
mov eax, 0xfcb1
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
push edi
lea ecx, [ebp - 0x3d4]
call fcn.0045223e
mov dword [ebp - 0x2c], 0x5fa2ef7
mov dword [ebp - 0x18], 0x886a6c65
push 4
lea ecx, [ebp - 0x374]
call fcn.0045223e
mov dword [ebp - 0x40], 0x5db5a26c
mov dword [ebp - 0x24], 0x3604
mov dword [ebp - 0x4c], 0xba6d
mov dword [ebp - 0x14], 0
jmp 0x4a3f51
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3d4]
mov dword [eax + ecx*4], 0x53e1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a3f3e
mov dword [ebp - 0x14], 0
jmp 0x4a3f72
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x374]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4a3f5f
cmp dword [ebp - 0x224], edi
jb 0x4a3fb3
mov eax, dword [ebp - 0x3d4]
cmp dword [eax], edi
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x3d4]
mov eax, dword [eax]
cmp dword [ebp - 0x18], eax
je 0x4a3fb3
test eax, eax
jne 0x4a3fb3
xor ecx, ecx
jmp 0x4a3fb5
mov ecx, edi
mov eax, dword [ebp - 0x374]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x224]
mov eax, dword [ebp - 0x220]
xor eax, eax
cmp dword [ebp - 0x228], eax
jne 0x4a3fd9
cmp dword [ebp - 0x18], eax
je 0x4a3fdb
mov eax, edi
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x374]
cmp dword [eax + 0xc], 0
je 0x4a4104
mov dword [ebp - 0x40], 0xffffffec
cmp dword [ebp - 0x40], 0xffffffea
je 0x4a4178
xor eax, eax
mov byte [ebp - 0x2d], al
mov dword [ebp - 0x20], 0x45a6
cmp dword [ebp - 0x20], 0x469b
jle 0x4a408e
mov dword [ebp - 0x38], eax
mov ecx, eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x18], 0x5f94
mov ebx, ecx
mov dword [ebp - 0x3c], 0x48a4
mov esi, eax
mov eax, ebx
mov ecx, esi
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0xaf0]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
push 0
push edi
lea ecx, [ebp - 0xaf0]
call fcn.0045261a
inc esi
cmp esi, 0xe5a
jl 0x4a402e
dec ebx
dec dword [ebp - 0x3c]
push 0
pop eax
jne 0x4a402c
mov ebx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
add ecx, ebx
mov dword [ebp - 0x2c], ecx
dec dword [ebp - 0x18]
jne 0x4a4023
inc ebx
mov dword [ebp - 0x38], ebx
cmp ebx, 0x8a
jl 0x4a4017
cmp byte [ebp - 0x2d], 0
je 0x4a40a1
push eax
push eax
push 0x16f7
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x20], 0x4314
jge 0x4a40bc
push str.bhswzc_optc_bzgj_cgeqbl_ogriyee_wgku_sumwtev_ify
call fcn.004b0bf7
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4a40e7
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a40fc
push eax
push 0xcfc
call dword [sym.imp.USER32.dll_BeginPaint]
dec dword [ebp - 0x40]
jmp 0x4a3ff5
mov dword [ebp - 0x3c], 0x2932384
mov dword [ebp - 0x44], 0x6e8d2ca8
push 2
lea ecx, [ebp - 0x4f4]
call fcn.0045223e
mov dword [ebp - 0x20], 0
jmp 0x4a413b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4f4]
mov dword [eax + ecx*4], 0xe88fefd6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x4a4128
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x228]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4f4]
mov dword [eax], ecx
lea ecx, [ebp - 0x4f4]
call fcn.00452310
lea ecx, [ebp - 0x374]
call fcn.00452310
lea ecx, [ebp - 0x3d4]
call fcn.00452310
mov dword [ebp - 0x18], 0x66fe7d8a
mov dword [ebp - 0x14], 6
mov dword [ebp - 0x3c], 0x84cbed56
mov dword [ebp - 0x3c], 0x82ba8d7d
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x24], 0xd91b0598
mov dword [ebp - 0x20], 0
jmp 0x4a41d2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6cc], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x4a41c1
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, 0x69be
setl cl
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x6c8], 0xffffffff
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, edi
setg dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x14]
inc edx
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, edx
setge cl
imul ecx, ecx, 0xa83a
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setge dl
mov dword [ebp - 0x3c], edx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setge dl
mov ecx, 0x9956f43c
sub ecx, edx
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setg dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x48], 0xb3b9
push 4
lea ecx, [ebp - 0x8bc]
call fcn.0045223e
mov dword [ebp - 0x18], 0x66fe7d8a
mov dword [ebp - 0x3c], 0xb3b9
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x4a42c2
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x8bc]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4a42a7
xor eax, eax
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], eax
jl 0x4a4380
dec dword [ebp - 0x3c]
mov byte [ebp - 0x2d], al
mov dword [ebp - 0x2c], 0x7796
cmp dword [ebp - 0x2c], 0x77e6
jle 0x4a4314
mov esi, eax
mov ebx, eax
mov eax, esi
mov ecx, ebx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xab95b8
call fcn.00452129
inc ebx
cmp ebx, 0x1588
jl 0x4a42ec
inc esi
cmp esi, 0x2b26
push 0
pop eax
jl 0x4a42ea
cmp byte [ebp - 0x2d], 0
je 0x4a4330
push eax
push 0x2580
push 0x254
push 0x65f
call dword [sym.imp.GDI32.dll_SetPixel]
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x2c], 0x74f6
jge 0x4a434f
mov edx, str.pscbf_eiptzwydu_khog_sdzs_kuwzc_pvyvk_ucuzq
mov ecx, 0xab95b8
call fcn.00453acf
or dword [ebp - 4], 0xffffffff
jmp 0x4a4376
dec dword [ebp - 0x18]
xor eax, eax
jmp 0x4a42c9
lea ecx, [ebp - 0x8bc]
call fcn.00452310
mov dword [ebp - 0x20], 0
jmp 0x4a43a7
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x874]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x4a4394
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x40], 0xfffffffc
mov dword [ebp - 0x50], 0x5300ce3
mov dword [ebp - 0x28], 0xfffffff5
jmp 0x4a4450
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x2c], 0x6de0184d
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x14], 0
jne 0x4a4408
mov ecx, dword [ebp - 0x40]
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x28]
imul eax, ecx
test eax, eax
jne 0x4a43fc
mov ecx, eax
jmp 0x4a4400
mov ecx, edi
xor eax, eax
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x28], eax
jbe 0x4a440a
mov eax, edi
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffff
sbb ecx, ecx
neg ecx
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff5
jg 0x4a43ce
xor eax, eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x37
jl 0x4a44c5
mov dword [ebp - 0x18], 0x151d1a93
mov dword [ebp - 0x2c], 0x81b27067
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, ecx
setne dl
imul edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
cmp ecx, 0xfffffff8
setle dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x40]
sub ecx, eax
mov dword [ebp - 0x18], ecx
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0x37
jge 0x4a4465
xor eax, eax
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], eax
jl 0x4a4ad0
mov dword [ebp - 0x20], 0x5e48d327
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a44ef
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
xor eax, eax
mov dword [ebp - 0x20], 0x15
jmp 0x4a450d
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a450a
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor eax, eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff9
jne 0x4a44f8
dec dword [ebp - 0x48]
mov dword [ebp - 0x34], 0x29be1d92
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], eax
jmp 0x4a454f
mov dword [ebp - 0x3c], 4
dec dword [ebp - 0x3c]
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x4a454c
push eax
push eax
push 0x89
push 0x1ce6
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x2d
je 0x4a4525
mov dword [ebp - 0x44], 0xfffffff9
mov dword [ebp - 0x58], 0x67fa5c62
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x3c], 0x1c3c39ba
mov dword [ebp - 0x20], 0x2b87
cmp dword [ebp - 0x20], 0x2ee0
jle 0x4a4631
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
and dword [ebp - 0x38], 0
xor eax, eax
mov dword [ebp - 0x2c], eax
xor esi, esi
mov dword [ebp - 0x3c], esi
xor ebx, ebx
cdq
idiv esi
mov eax, edx
mov dword [ebp - 0x24], eax
mov esi, dword [ebp - 0x38]
mov ecx, ebx
sar eax, cl
and eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0xb14]
call fcn.00401993
pop ecx
pop ecx
mov ecx, eax
call fcn.0045211e
push eax
call fcn.004b0bf7
pop ecx
push 0
push edi
lea ecx, [ebp - 0xb14]
call fcn.0045261a
inc ebx
cmp ebx, 0x4ccb
mov eax, dword [ebp - 0x24]
jl 0x4a45b8
mov esi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x69c
mov eax, dword [ebp - 0x2c]
jl 0x4a45ab
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x5371
jl 0x4a45a6
mov ecx, dword [ebp - 0x38]
inc ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0x1ba3
jl 0x4a45a1
push 0x8ea
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0x50], 0x963ba20b
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x20], 0x2b6a
jge 0x4a4653
push str.rlu_izv_wyfpos_oeyh_knhbce_wih_sudjt
call fcn.004b0bf7
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4a467e
mov dword [ebp - 0x3c], 0x49f6d4a0
mov dword [ebp - 0x4c], eax
push 2
lea ecx, [ebp - 0x7b4]
call fcn.0045223e
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0xe856
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x38], 0xa08bbd18
mov dword [ebp - 0x40], 0x2be2
mov dword [ebp - 0x20], 0
jmp 0x4a46d0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7b4]
mov dword [eax + ecx*4], 0x714ad38d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x4a46bd
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x44], eax
je 0x4a474a
lea ecx, [ebp - 0x874]
call fcn.00452310
mov dword [ebp - 0x2c], 0x71c7bf0b
xor eax, eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x24], 0xd133f29
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], al
je 0x4a4b16
push 0x1a5a
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x24], 0xd133f29
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], al
je 0x4a4b59
push 0x1a5a
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], edi
push 3
lea ecx, [ebp - 0x5cc]
call fcn.0045223e
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0xf0d5dc5
mov dword [ebp - 0x24], 0xfffffff6
push 4
lea ecx, [ebp - 0x7cc]
call fcn.0045223e
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x24], 0x85267706
push 0xfffffffffffffffb
pop ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x9b47bed2
mov dword [ebp - 0x24], 0xff5a50e6
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x4a4be2
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5cc]
mov dword [eax + ecx*4], 0xf5540d7f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4a4bc7
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x4a4bfa
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x7cc]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4a4be7
mov eax, dword [ebp - 0x5cc]
mov dword [eax], 4
lea ecx, [ebp - 0x7cc]
call fcn.00452310
lea ecx, [ebp - 0x5cc]
call fcn.00452310
mov dword [ebp - 0x48], 0x4f983c
mov dword [ebp - 0x14], 0xffffffff
push edi
lea ecx, [ebp - 0x524]
call fcn.0045223e
mov dword [ebp - 0x18], 0xf1e5c8a5
mov dword [ebp - 0x14], 0
jmp 0x4a4c5f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x524]
mov dword [eax + ecx*4], 0x5b3b9da4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a4c4c
mov dword [ebp - 0x14], 0
jmp 0x4a4c7e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2d4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4a4c6d
mov dword [ebp - 0x14], 0xfffffff6
jmp 0x4a4cd3
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x3c], 0x35e1f6f0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x524]
mov dword [eax], 0xffff29df
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2d4], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffeb
jne 0x4a4c8c
xor eax, eax
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], al
je 0x4a4cf9