Function at 0x48c0c6
Capabilities:
Authenticate hmac
Delete registry value
Encode data using xor
Encrypt data using speck
Extract resource via kernel32 functions
Get common file path
Get disk information
Get file size
Get geographical location
Query or enumerate registry value
Read .ini file
Start service

Disassembly:
mov eax, 0x4b7833
call fcn.004b6988
sub esp, 0xce0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x7c], dl
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x18], 0x3a4e
xor eax, eax
cmp dword [ebp - 0x18], 0x3d5c
jle 0x48c156
mov ebx, eax
mov esi, eax
mov dword [ebp - 0x34], eax
mov edi, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x24], esi
mov ecx, edi
mov edi, esi
shl edi, cl
mov esi, eax
mov eax, edi
mov ecx, esi
sar eax, cl
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
inc esi
cmp esi, 0x1240
jl 0x48c10e
mov edi, dword [ebp - 0x38]
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x5bb5
push 0
pop eax
mov esi, dword [ebp - 0x34]
jl 0x48c100
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x600e
jl 0x48c0fb
inc ebx
cmp ebx, 0x3e4e
jl 0x48c0f6
mov dword [ebp - 4], eax
cmp dword [ebp - 0x18], 0x3953
jge 0x48c171
mov edx, str.joar_nzjcmdbbj_fnmm_tcgollky_iltrt_efnpil_adtjmeirv_dnpshleu_szujwn_pzcrdga_jfa_itae_awqwicxs
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
xor eax, eax
mov dword [ebp - 0x2c], 0xf3617394
mov dword [ebp - 0x38], 0x3c576436
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x48c1a7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x15c], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x48c18e
xor eax, eax
mov dword [ebp - 0x158], 0xfffffffb
jmp 0x48c1ea
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], 0
je 0x48c1e4
push eax
push 0x26e0
call dword [sym.imp.USER32.dll_KillTimer]
xor eax, eax
dec dword [ebp - 0x158]
cmp dword [ebp - 0x158], 0xfffffff9
jne 0x48c1cd
mov esi, dword [ebp - 0x15c]
mov dword [ebp - 0x158], esi
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0x53e1e01b
setg al
imul eax, dword [ebp - 0x2c]
cmp eax, 0xffff
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp eax, ecx
setg dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x2c]
xor eax, eax
cmp esi, ecx
setne al
add eax, 0x44214078
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
sub eax, 0xa5bc
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x28], 0x53ab
cmp dword [ebp - 0x28], 0x5760
jle 0x48c2c4
xor edi, edi
mov dword [ebp - 0x18], edi
mov ebx, edi
mov dword [ebp - 0x34], 0x3f66
xor esi, esi
mov dword [ebp - 0x38], esi
mov edi, esi
mov esi, 0x3dec
mov eax, ebx
and eax, edi
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
dec edi
dec esi
jne 0x48c28b
mov esi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x9cd
jl 0x48c284
dec ebx
dec dword [ebp - 0x34]
jne 0x48c27f
mov edi, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x60f0
jl 0x48c276
mov dword [ebp - 4], 2
cmp dword [ebp - 0x28], 0x5035
jge 0x48c2e3
mov edx, str.jwccnun_lklj_lqyp_jiui_ojdb_timfar_vwq_dmyadg_galdk
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x50], 0xffffffff
push 4
lea ecx, [ebp - 0x1f4]
call fcn.00420237
mov dword [ebp - 0x24], 0x9e68
xor ebx, ebx
inc ebx
push ebx
lea ecx, [ebp - 0x3e0]
call fcn.00420237
mov dword [ebp - 0x18], 0xfca44bab
mov dword [ebp - 0x3c], 0x8a1b
mov dword [ebp - 0x14], 0
jmp 0x48c355
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1f4]
mov dword [eax + ecx*4], 0x42afa017
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x48c342
mov dword [ebp - 0x14], 0
jmp 0x48c375
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x278], 0xb4f5fdfd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x48c364
mov dword [ebp - 0x14], 0
xor edi, edi
cmp dword [ebp - 0x14], ebx
jge 0x48c399
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3e0]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
jmp 0x48c383
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x1f4]
mov dword [ecx + 0xc], eax
imul eax, eax, 0xfffffff8
test eax, eax
je 0x48c3af
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
dec eax
neg eax
sbb eax, eax
neg eax
mov esi, 0xc7a00f47
cmp esi, eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x50]
test eax, eax
jne 0x48c3f4
xor edi, edi
cmp dword [ecx + 0xc], edi
jne 0x48c3f4
mov eax, dword [ebp - 0x1f4]
cmp dword [eax + 4], edi
jne 0x48c3f4
xor ecx, ecx
jmp 0x48c3f6
mov ecx, ebx
mov eax, dword [ebp - 0x50]
sub eax, ecx
je 0x48c60e
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x40], 0x4e2b7835
mov dword [ebp - 0x3c], edi
push 3
lea ecx, [ebp - 0x474]
call fcn.00420237
mov dword [ebp - 0x20], 0
jmp 0x48c437
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x474]
mov dword [eax + ecx*4], 0xaf53c8cb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x48c424
mov dword [ebp - 0x48], 0x585c
cmp dword [ebp - 0x48], 0x5a8c
jle 0x48c4a8
xor ebx, ebx
xor esi, esi
xor eax, eax
mov dword [ebp - 0x38], eax
xor edi, edi
xor eax, esi
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0x9c4]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.004200e8
push eax
call fcn.004a11e7
pop ecx
push edi
push 1
lea ecx, [ebp - 0x9c4]
call fcn.00420613
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x349b
jl 0x48c458
inc esi
cmp esi, 0x1506
jl 0x48c451
inc ebx
cmp ebx, 0x3d86
jl 0x48c44f
mov dword [ebp - 0x34], 0x7092
cmp dword [ebp - 0x34], 0x71d6
jle 0x48c4ed
xor esi, esi
mov ebx, esi
mov dword [ebp - 0x38], 0x3eee
xor edi, edi
lea eax, [edi + ebx]
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
inc edi
cmp edi, 0x7a21
jl 0x48c4c5
dec ebx
dec dword [ebp - 0x38]
jne 0x48c4c3
inc esi
cmp esi, 0x6217
jl 0x48c4ba
mov byte [ebp - 0x19], 0
mov dword [ebp - 4], 4
cmp dword [ebp - 0x34], 0x6d11
jge 0x48c510
mov edx, str.dimdlatr_bya_nvsr_mqixoefqa_avcxcmoda_qivdvzjqn_uvzki_eouclg_amvc_wjxqojy
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
xor eax, eax
xor ebx, ebx
inc ebx
cmp byte [ebp - 0x19], al
je 0x48c525
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x48], 0x5787
jge 0x48c540
push str.zvcyi_hdskurdp_onqv_wyyz
call fcn.004a11e7
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x48c581
mov eax, dword [ebp - 0x1f4]
xor edi, edi
cmp dword [eax + 0xc], edi
je 0x48c5f7
cmp dword [ebp - 0x28], edi
jne 0x48c5a2
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3e0]
mov eax, dword [eax]
inc eax
xor ecx, ecx
cmp eax, 8
setne cl
mov eax, dword [ebp - 0x474]
mov dword [eax], ecx
test ecx, ecx
jne 0x48c5c8
xor eax, eax
cmp dword [ebp - 0x40], eax
mov edx, eax
je 0x48c5ca
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0xa81d
setge cl
mov eax, dword [ebp - 0x1f4]
mov dword [eax], ecx
mov dword [ebp - 0x278], edx
xor eax, eax
cmp edx, 6
setl al
neg ecx
cmp ecx, eax
jne 0x48c5f7
mov ecx, ebx
jmp 0x48c5f9
xor ecx, ecx
mov eax, dword [ebp - 0x3e0]
mov dword [eax], ecx
lea ecx, [ebp - 0x474]
call fcn.00420309
jmp 0x48c633
xor eax, eax
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], al
je 0x48c635
push 0x67f
push eax
push 0x201a
push 0x2a2
push 0xc28
call dword [sym.imp.GDI32.dll_ExtFloodFill]
xor eax, eax
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], 0
je 0x48c645
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
lea ecx, [ebp - 0x3e0]
call fcn.00420309
lea ecx, [ebp - 0x1f4]
call fcn.00420309
mov dword [ebp - 0x50], 0xf3617394
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x24], 0x336de018
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x48c691
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa0], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48c679
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], eax
jl 0x48c6bf
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], 0
je 0x48c6ba
push eax
push 0x213d
push 0x98c
push 0x775
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
xor eax, eax
dec dword [ebp - 0x40]
jns 0x48c699
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0xa0]
sub edx, dword [ebp - 0xa0]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp eax, 0x95a
setle cl
xor eax, eax
cmp ecx, edx
setl al
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x38]
add ecx, eax
mov eax, dword [ebp - 0xa0]
xor edx, edx
cmp eax, ecx
setne dl
mov eax, dword [ebp - 0xa0]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], 0x3c576436
mov dword [ebp - 0x40], 4
mov dword [ebp - 0x3c], 0x6e3245f1
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x48c74f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x230], 0x17571177
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48c737
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ebx
jge 0x48c76d
xor edi, edi
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x230], edi
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jl 0x48c759
xor eax, eax
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x48c792
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1ac], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x48c77d
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x48c8ab
mov dword [ebp - 0x38], 0x4d59ff44
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x48c7be
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6c], 0xfffffff9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48c7a9
xor eax, eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x48c88a
xor edi, edi
mov dword [ebp - 0x20], 5
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x1ac], edi
jne 0x48c888
mov dword [ebp - 0x20], 2
xor edi, edi
cmp dword [ebp - 0x20], edi
jl 0x48c87b
mov dword [ebp - 0x24], 0x451d
mov dword [ebp - 0x44], 0x45c2f1fc
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x1ac], edi
jne 0x48c822
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x1ac], edi
jne 0x48c822
xor esi, esi
xor edi, edi
jmp 0x48c824
mov esi, ebx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp + eax*4 - 0x1ac]
mov eax, dword [ebp - 0x1a8]
xor edx, edx
cmp eax, ecx
setg dl
mov eax, dword [ebp - 0x20]
sub eax, esi
neg eax
sbb eax, eax
inc eax
xor ecx, ecx
cmp edx, eax
sete cl
mov eax, dword [ebp - 0x6c]
add ecx, dword [ebp + eax*4 - 0x1ac]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x38]
imul edx, eax
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x44], ecx
dec dword [ebp - 0x20]
jns 0x48c7f6
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], 2
jle 0x48c7cd
xor eax, eax
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], 0
je 0x48c8a8
push eax
push eax
push 0x16d3
push 0x2499
push eax
call dword [sym.imp.USER32.dll_InsertMenuW]
xor eax, eax
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xfffffff3
jne 0x48c79a
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x48c8d7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x168], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x48c8be
xor eax, eax
mov dword [ebp - 0x164], 0xfffffffb
jmp 0x48c900
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], 0
je 0x48c8fa
push eax
push 0x26e0
call dword [sym.imp.USER32.dll_KillTimer]
xor eax, eax
dec dword [ebp - 0x164]
cmp dword [ebp - 0x164], 0xfffffff9
jne 0x48c8e3
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0xfffc
mov dword [ebp - 0x24], 0x56d2926a
mov dword [ebp - 0x14], eax
jmp 0x48ca61
mov dword [ebp - 0x2c], 0xfffffffd
push ebx
lea ecx, [ebp - 0x188]
call fcn.00420237
mov dword [ebp - 0x40], 0xbc5021c3
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x48c95e
xor edi, edi
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x188]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48c948
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffff2
je 0x48ca15
mov dword [ebp - 0x38], 0x8fe7528a
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], 0x8db370cc
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x188]
mov dword [eax], ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x38], 0xffffffff
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x48c9bd
mov ecx, ebx
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], eax
je 0x48c9ab
mov eax, ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x188]
cmp dword [eax], ecx
jne 0x48c9dd
cmp dword [ebp - 0x14], 0
je 0x48c9dd
mov edx, ebx
jmp 0x48c9df
xor edx, edx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
cmp ecx, 0xfffffff7
setl dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setle cl
mov eax, dword [ebp - 0x188]
sub ecx, dword [eax]
mov dword [ebp - 0x18], ecx
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffff2
jne 0x48c96b
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x48ca25
cmp dword [ebp - 0x18], eax
je 0x48ca25
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x188]
cmp dword [eax], ecx
setge dl
cmp edx, dword [ebp - 0x2c]
jge 0x48ca3d
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setl dl
imul eax, edx, 0x33f0
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x188]
call fcn.00420309
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffb
jle 0x48c922
mov esi, dword [ebp - 0x168]
mov dword [ebp - 0x164], esi
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
xor edx, edx
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0x53e1e01b
setg al
imul eax, dword [ebp - 0x50]
cmp eax, 0xffff
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x50]
xor edx, edx
cmp eax, ecx
setg dl
mov eax, dword [ebp - 0x50]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x50]
xor eax, eax
cmp esi, ecx
setne al
add eax, 0x44214078
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
sub eax, 0xa5bc
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], 0xe57b
mov dword [ebp - 0x50], 0x47c4d145
push ebx
lea ecx, [ebp - 0x268]
call fcn.00420237
push 3
pop esi
push esi
lea ecx, [ebp - 0x2d8]
call fcn.00420237
mov dword [ebp - 0x14], 0
jmp 0x48cb1e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x268]
mov dword [eax + ecx*4], 0x61718bc6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x48cb0b
mov dword [ebp - 0x14], 0
jmp 0x48cb3f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2d8]
mov dword [eax + ecx*4], 0x4e46196c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x48cb2c
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x2c], 0x295e
cmp dword [ebp - 0x2c], 0x2bed
jle 0x48cc1c
xor edi, edi
push edi
push 0x1a74
push 0x20f0
push 0x6ad
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov eax, dword [ebp - 0x30]
push 9
pop ecx
cmp ecx, eax
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, esi
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
je 0x48ce42
push ebx
lea ecx, [ebp - 0x3c8]
call fcn.00420237
mov dword [ebp - 0x24], 0x15b75d39
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x48cc92
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c8]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48cc78
xor eax, eax
mov dword [ebp - 0x30], 8
cmp dword [ebp - 0x30], 0x13
jle 0x48ce35
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], eax
jl 0x48cdfb
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x48], 0x1494d85d
mov dword [ebp - 0x24], 0xa98a1bd0
push ebx
lea ecx, [ebp - 0x558]
call fcn.00420237
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x48ccf6
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x558]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48cce0
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jg 0x48cde0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x18], eax
je 0x48cd1f
mov eax, dword [ebp - 0x3c8]
xor edi, edi
cmp dword [eax], edi
je 0x48cd1d
mov ecx, ebx
jmp 0x48cd23
xor eax, eax
mov ecx, eax
xor edi, edi
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c8]
mov ecx, dword [eax]
xor ebx, ebx
mov eax, dword [ebp - 0x268]
cmp ecx, dword [eax + edx*4]
setge bl
mov ecx, dword [ebp - 0x30]
imul ecx, ebx
neg ecx
xor edx, edx
mov eax, dword [ebp - 0x268]
cmp dword [eax + esi*4], ecx
setl dl
mov eax, dword [ebp - 0x18]
add eax, edx
sub eax, dword [ebp - 0x40]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xed13222c
jne 0x48cda0
xor eax, eax
xor edi, edi
cmp dword [ebp - 0x14], eax
jne 0x48cda0
mov ecx, eax
xor ebx, ebx
inc ebx
jmp 0x48cda5
xor ebx, ebx
inc ebx
mov ecx, ebx
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x50]
imul eax, ecx
test eax, eax
je 0x48cdc5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x268]
cmp dword [eax + ecx*4], edi
je 0x48cdc5
mov ecx, ebx
jmp 0x48cdc9
xor ecx, ecx
xor edi, edi
mov eax, dword [ebp - 0x558]
mov dword [eax], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
push 0
pop eax
jle 0x48cd02
lea ecx, [ebp - 0x558]
call fcn.00420309
dec dword [ebp - 0x50]
jns 0x48ccb9
xor eax, eax
cmp dword [ebp - 0x50], eax
je 0x48ce20
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2d8]
mov dword [eax], ecx
xor eax, eax
test ecx, ecx
mov ecx, ebx
jne 0x48ce22
mov ecx, eax
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x13
jg 0x48cca3
push 3
pop esi
lea ecx, [ebp - 0x3c8]
call fcn.00420309
jmp 0x48ce74
mov dword [ebp - 0x30], 0
jmp 0x48ce6f
mov dword [ebp - 0x50], 0
jmp 0x48ce67
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x2d8]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], esi
jl 0x48ce54
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jl 0x48ce4b
mov dword [ebp - 4], 8
cmp dword [ebp - 0x2c], 0x28e8
jge 0x48ce8f
push str.toqgugl_wgf_tzwdqko_gyqvhas_rukkmsb_ewkmmigd_gsxqszc_axabed_ayfanepx_blugmmg_lkeboxn
call fcn.004a11e7
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x48ceb9
lea ecx, [ebp - 0x2d8]
call fcn.00420309
lea ecx, [ebp - 0x268]
call fcn.00420309
xor edi, edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x24], 0x3e7ed6f1
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x38], 0xffff
push ebx
lea ecx, [ebp - 0x3a4]
call fcn.00420237
mov dword [ebp - 0x24], 0x3f4b1415
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x20], edi
jmp 0x48cf1b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3a4]
mov dword [eax + ecx*4], 0xe404
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48cf08
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
mov ecx, 0xfdbd0176
sub ecx, eax
xor eax, eax
cmp ecx, 0x2280643b
setge al
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
dec eax
add ecx, eax
mov eax, dword [ebp - 0x40]
xor edx, edx
cmp ecx, eax
setg dl
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
neg eax
cmp eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3a4]
jle 0x48cf73
mov ecx, dword [eax]
test ecx, ecx
jne 0x48cf7d
mov ecx, dword [eax]
test ecx, ecx
jne 0x48cf7d
xor edx, edx
jmp 0x48cf7f
mov edx, ebx
xor eax, eax
cmp edx, ecx
setl al
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x34]
lea ecx, [ebp - 0x3a4]
call fcn.00420309
mov dword [ebp - 0x30], 0xf3617394
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], 0x1c3a23fe
mov dword [ebp - 0x44], 0x3f3ac9d7
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x48cfd1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x854], 0x58bd4dfb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x48cfb9
xor eax, eax
mov dword [ebp - 0x2c], 0xffffffe7
cmp dword [ebp - 0x2c], 0x17
jg 0x48d06a
mov dword [ebp - 0x4c], 0xc266d8ff
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x48d008
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x450], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x48cff4
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x48d06a
mov dword [ebp - 0x84c], 0x7a73d2d6
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x448], eax
jne 0x48d027
cmp dword [ebp - 0x2c], eax
je 0x48d02a
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x448]
mov eax, dword [ebp - 0x44]
xor ebx, ebx
cmp eax, ecx
setne bl
mov eax, dword [ebp - 0x450]
sub ebx, eax
mov edx, dword [ebp - 0x4c]
add edx, ebx
mov eax, dword [ebp - 0x854]
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x17
push 0
pop eax
push 1
pop ebx
jle 0x48cfe2
mov dword [ebp - 0x48], 0x3c576436
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x40], 0x989b1ab4
mov dword [ebp - 0x38], ebx
push ebx
lea ecx, [ebp - 0x2fc]
call fcn.00420237
mov dword [ebp - 0x38], 6
xor eax, eax
mov dword [ebp - 0x6cc], eax
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x6c0], eax
push 4
lea ecx, [ebp - 0x5e8]
call fcn.00420237
mov dword [ebp - 0x14], edi
jmp 0x48d0d0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2fc]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x48d0bd
mov dword [ebp - 0x14], edi
jmp 0x48d0e9
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5e8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x48d0da
cmp dword [ebp - 0x20], edi
je 0x48d144
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
sub ecx, 0x86
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x40]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x40]
xor edx, edx
cmp ecx, eax
setl dl
mov eax, dword [ebp - 0x2fc]
mov dword [eax], edx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x20]
jg 0x48d144
mov ecx, ebx
jmp 0x48d146
xor ecx, ecx
xor eax, eax
cmp ecx, esi
setne al
sub eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x40]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, 0x470e
setne cl
mov dword [ebp - 0x6c4], ecx
mov eax, dword [ebp - 0x5e8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2fc]
mov dword [eax], 0x2a42bbd4
lea ecx, [ebp - 0x5e8]
call fcn.00420309
lea ecx, [ebp - 0x2fc]
call fcn.00420309
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x48d1b6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1c4], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x48d19e
xor eax, eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x24], 0x336de018
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x48d1e3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x94], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48d1cb
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], eax
jl 0x48d211
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], 0
je 0x48d20c
push eax
push 0x213d
push 0x98c
push 0x775
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
xor eax, eax
dec dword [ebp - 0x40]
jns 0x48d1eb
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x94]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp eax, 0x95a
setle cl
xor eax, eax
cmp ecx, edx
setl al
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x38]
add ecx, eax
mov eax, dword [ebp - 0x94]
xor edx, edx
cmp eax, ecx
setne dl
mov eax, dword [ebp - 0x94]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x1c0], 0xfffffffb
cmp dword [ebp - 0x1c0], 0xfffffff9
je 0x48d4fb
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x24], 0x336de018
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x48d2b0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x98], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48d298
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], eax
jl 0x48d2de
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], 0
je 0x48d2d9
push eax
push 0x213d
push 0x98c
push 0x775
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
xor eax, eax
dec dword [ebp - 0x40]
jns 0x48d2b8
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x98]
sub edx, dword [ebp - 0x98]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp eax, 0x95a
setle cl
xor eax, eax
cmp ecx, edx
setl al
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x38]
add ecx, eax
mov eax, dword [ebp - 0x98]
xor edx, edx
cmp eax, ecx
setne dl
mov eax, dword [ebp - 0x98]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x24], ecx
xor eax, eax
mov byte [ebp - 0x19], al
mov dword [ebp - 0x38], 0x23fc
cmp dword [ebp - 0x38], 0x2707
jle 0x48d375
mov edi, eax
mov esi, eax
lea eax, [esi + edi]
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
inc esi
cmp esi, 0x4884
jl 0x48d350
inc edi
cmp edi, 0x22e6
push 0
pop eax
jl 0x48d34e
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x38], 0x23e3
jge 0x48d394
mov edx, str.opivvhxh_vbpu_mjrhrxwf_fyw_nymuhb
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
jmp 0x48d3bb
xor eax, eax
mov dword [ebp - 0x40], 4
mov dword [ebp - 0x3c], 0x6e3245f1
mov dword [ebp - 0x28], 0x780d
cmp dword [ebp - 0x28], 0x7a31
jle 0x48d455
push eax
push 0x672
push 0x1a3b
push 0x1746
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
xor eax, eax
mov dword [ebp - 0x18], eax
xor edi, edi
mov dword [ebp - 0x34], edi
xor esi, esi
mov dword [ebp - 0x38], esi
xor ebx, ebx
mov eax, edi
cdq
idiv esi
mov dword [ebp - 0x24], edx
mov esi, 0x45d4
mov edi, dword [ebp - 0x18]
mov eax, edi
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
add ebx, dword [ebp - 0x24]
dec esi
jne 0x48d412
mov esi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x2dd8
mov edi, dword [ebp - 0x34]
jl 0x48d400
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x744f
jl 0x48d3fb
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0xa64
jl 0x48d3f6
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x28], 0x744b
jge 0x48d474
mov edx, str.baznnthuq_nkbuq_klhqrdxxb
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
jmp 0x48d49b
xor eax, eax
xor ebx, ebx
inc ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x48d4c0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x240], 0x17571177
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48d4a8
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ebx
jge 0x48d4de
xor edi, edi
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x240], edi
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jl 0x48d4ca
xor eax, eax
cmp byte [ebp - 0x19], 0
je 0x48d4f0
push eax
push 0x26e0
call dword [sym.imp.USER32.dll_KillTimer]
dec dword [ebp - 0x1c0]
jmp 0x48d274
mov dword [ebp - 0x50], 0xffffffff
push 4
lea ecx, [ebp - 0x20c]
call fcn.00420237
mov dword [ebp - 0x24], 0x9e68
push ebx
lea ecx, [ebp - 0x374]
call fcn.00420237
mov dword [ebp - 0x18], 0xfca44bab
mov dword [ebp - 0x3c], 0x8a1b
mov dword [ebp - 0x14], 0
jmp 0x48d54c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20c]
mov dword [eax + ecx*4], 0x42afa017
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x48d539
mov dword [ebp - 0x14], 0
jmp 0x48d56c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x288], 0xb4f5fdfd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x48d55b
mov dword [ebp - 0x14], 0
xor edi, edi
cmp dword [ebp - 0x14], ebx
jge 0x48d590
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x374]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
jmp 0x48d57a
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x20c]
mov dword [esi + 0xc], eax
imul eax, eax, 0xfffffff8
test eax, eax
je 0x48d5a6
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
dec eax
neg eax
sbb eax, eax
neg eax
mov ecx, 0xc7a00f47
cmp ecx, eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x50]
test eax, eax
jne 0x48d5eb
xor edi, edi
cmp dword [esi + 0xc], edi
jne 0x48d5eb
mov eax, dword [ebp - 0x20c]
cmp dword [eax + 4], edi
jne 0x48d5eb
xor ecx, ecx
jmp 0x48d5ed
mov ecx, ebx
mov eax, dword [ebp - 0x50]
sub eax, ecx
je 0x48d6d1
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], 0x4e2b7835
mov dword [ebp - 0x3c], edi
push 3
lea ecx, [ebp - 0x468]
call fcn.00420237
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x48d638
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x468]
mov dword [eax + ecx*4], 0xaf53c8cb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x48d61d
xor eax, eax
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], 0
je 0x48d64a
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
xor eax, eax
cmp dword [esi + 0xc], eax
je 0x48d6ba
cmp dword [ebp - 0x28], eax
jne 0x48d663
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x374]
mov eax, dword [eax]
inc eax
xor ecx, ecx
cmp eax, 8
setne cl
mov eax, dword [ebp - 0x468]
mov dword [eax], ecx
test ecx, ecx
jne 0x48d689
xor eax, eax
cmp dword [ebp - 0x38], eax
mov edx, eax
je 0x48d68b
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0xa81d
setge cl
mov eax, dword [ebp - 0x20c]
mov dword [eax], ecx
mov dword [ebp - 0x288], edx
xor eax, eax
cmp edx, 6
setl al
neg ecx
cmp ecx, eax
jne 0x48d6b8
mov ecx, ebx
jmp 0x48d6bc
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x374]
mov dword [eax], ecx
lea ecx, [ebp - 0x468]
call fcn.00420309
jmp 0x48d6f6
xor eax, eax
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], al
je 0x48d6f8
push 0x67f
push eax
push 0x201a
push 0x2a2
push 0xc28
call dword [sym.imp.GDI32.dll_ExtFloodFill]
xor eax, eax
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], 0
je 0x48d708
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
lea ecx, [ebp - 0x374]
call fcn.00420309
lea ecx, [ebp - 0x20c]
call fcn.00420309
mov dword [ebp - 0x38], 0x64f6
cmp dword [ebp - 0x38], 0x6539
jle 0x48d75b
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
xor edi, edi
xor esi, esi
mov eax, esi
and eax, edi
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
inc esi
cmp esi, 0x6cdf
jl 0x48d738
inc edi
cmp edi, 0x5251
jl 0x48d736
mov esi, dword [ebp - 0x1c4]
mov dword [ebp - 0x1c0], esi
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0x53e1e01b
setg al
imul eax, dword [ebp - 0x30]
cmp eax, 0xffff
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp eax, ecx
setg dl
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x30]
xor eax, eax
cmp esi, ecx
setne al
add eax, 0x44214078
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
sub eax, 0xa5bc
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x48]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x38], 0x63e4
jge 0x48d7e8
mov edx, str.bys_tlwafua_ubvgugms_lzfvujlm_grwfk_tuccn_ubjzvy_xxreiyn
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
jmp 0x48d80f
xor eax, eax
mov dword [ebp - 0x38], 0x18c
cmp dword [ebp - 0x38], 0x359
jle 0x48d896
push 0xf9a
push eax
push 0x1c3f
call dword [sym.imp.KERNEL32.dll_OpenProcess]
xor ecx, ecx
mov dword [ebp - 0x18], ecx
xor esi, esi
xor ebx, ebx
xor edi, edi
lea eax, [ebx + esi]
or eax, ecx
cdq
push edx
push eax
lea ecx, [ebp - 0x9f4]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.004200e8
push eax
call fcn.004a11e7
pop ecx
push edi
push 1
lea ecx, [ebp - 0x9f4]
call fcn.00420613
inc ebx
cmp ebx, 0x62a1
mov ecx, dword [ebp - 0x18]
jl 0x48d83d
inc esi
cmp esi, 0x1bb1
jl 0x48d839
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x49ab
jl 0x48d837
push edi
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x38], 0x168
jge 0x48d8b1
push str.nedyz_akajdoyb_dsrv_hxekdjcpk_vkm_ykqjfjdkb_rrgmtljqt_uugjlprw_nqns_kaqrh_cewe_ivuvydoc_rhuwni
call fcn.004a11e7
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
xor ebx, ebx
inc ebx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x18], 0x4fd9e2a8
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0xcd7820ea
mov dword [ebp - 0x20], eax
jmp 0x48d905
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xec], 0x418a5273
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x48d8f4
imul eax, dword [ebp - 0x40], 0xffff
xor ecx, ecx
cmp eax, 0xffffffff
setle cl
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x40], 0
cmp dword [ebp - 0x40], 0xffffffe5
jne 0x48dbee
mov dword [ebp - 0x38], 0x2102
cmp dword [ebp - 0x38], 0x210e
jle 0x48d996
push 0
push 0x1093
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
xor esi, esi
xor ebx, ebx
xor edi, edi
mov eax, esi
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xc28]
call fcn.0040195e
pop ecx
pop ecx
mov ecx, eax
call fcn.004200e8
push eax
call fcn.004a11e7
pop ecx
push edi
push 1
lea ecx, [ebp - 0xc28]
call fcn.00420613
inc ebx
cmp ebx, 0x5270
jl 0x48d951
inc esi
cmp esi, 0x8dd
jl 0x48d94d
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x38], 0x1fb7
jge 0x48d9b1
push str.zjz_dyhynio_qqlpr_siplgcyl_fsgqg_wpax_nhehtuspp_ach_xagqnbiz_cgpkdod_dpyk_wetsnr
call fcn.004a11e7
pop ecx
or dword [ebp - 4], 0xffffffff
push 9
xor ebx, ebx
pop esi
inc ebx
mov dword [ebp - 0x3c], 0x4b58e17c
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x48], 0xbc383c67
push ebx
lea ecx, [ebp - 0x194]
call fcn.00420237
mov dword [ebp - 0x14], 0
jmp 0x48da10
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x110], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x48d9ff
mov dword [ebp - 0x14], 0
jmp 0x48da32
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x194]
mov dword [eax + ecx*4], 0x85e0710d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x48da1f
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0
jl 0x48db79
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x24], 0xf2301355
mov dword [ebp - 0x24], 0xdd0bb265
mov dword [ebp - 0x34], 0x42fa
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x110]
mov ecx, 0x8de9
sub ecx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x110]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x110]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x6892
setge al
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x110]
sub ecx, eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x110], ecx
mov dword [ebp - 0x24], ecx
je 0x48dac8
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x110]
mov ecx, dword [ebp - 0xe8]
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp ecx, eax
sete dl
mov eax, dword [ebp - 0x194]
sub edx, dword [eax]
neg edx
sbb edx, edx
inc edx
xor eax, eax
cmp edx, 0xb7dc
setle al
cmp eax, 0xc5f6b4ab
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x34], eax
jne 0x48db21
mov eax, dword [ebp - 0x194]
xor edi, edi
cmp dword [eax], edi
jne 0x48db21
xor eax, eax
mov ecx, eax
jmp 0x48db25
mov ecx, ebx
xor eax, eax
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], eax
je 0x48db37
cmp dword [ebp - 0xe8], eax
je 0x48db37
mov eax, ebx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
dec ecx
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
test ecx, ecx
setle al
xor edx, edx
cmp eax, 0xc684
setne dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setl cl
imul ecx, dword [ebp - 0x34]
imul ecx, ecx, 0xdfdd
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
dec dword [ebp - 0x14]
jns 0x48da44
mov ecx, dword [ebp - 0xec]
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
test ecx, ecx
jne 0x48dbc6
cmp dword [ebp - 0x18], ecx
jne 0x48db93
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xe8]
sub eax, esi
xor ecx, ecx
cmp eax, 2
setg cl
xor eax, eax
cmp eax, ecx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, ebx
setg cl
cmp ecx, edx
jl 0x48dbc6
xor edi, edi
jmp 0x48dbc8
mov edi, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edi, eax
setl cl
add ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x194]
call fcn.00420309
dec dword [ebp - 0x40]
jmp 0x48d924
mov dword [ebp - 0x40], 2
push 3
lea ecx, [ebp - 0x480]
call fcn.00420237
mov dword [ebp - 0x4c], 0x1cfd1f2e
mov dword [ebp - 0x44], 0x2624
mov dword [ebp - 0x14], 0
jmp 0x48dc2c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x480]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x48dc19
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], ebx
jge 0x48dc52
xor edi, edi
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x130], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x48dc40
mov dword [ebp - 0x14], 0
jmp 0x48dc6c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7c8], 0x5d9c72
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x48dc5b
mov dword [ebp - 0x40], 0x10
jmp 0x48dd90
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], ebx
jge 0x48dca5
xor edi, edi
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x60], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48dc96
mov dword [ebp - 0x60], 0
jmp 0x48dd83
mov dword [ebp - 0x18], 0xffff
push ebx
lea ecx, [ebp - 0x570]
call fcn.00420237
mov dword [ebp - 0x20], 0
jmp 0x48dce0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x570]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x48dccd
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x7c8]
mov ecx, dword [ebp - 0x60]
xor edx, edx
mov eax, dword [ebp - 0x480]
cmp dword [eax + ecx*4], 0xc47a
setne dl
mov eax, dword [ebp - 0x130]
xor ecx, ecx
cmp edx, eax
sete cl
sub ecx, 0x4418
je 0x48dd22
cmp dword [ebp - 0x60], 0
je 0x48dd22
mov edx, ebx
jmp 0x48dd24
xor edx, edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x130], edx
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
inc dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
cmp ecx, 0xd93c
setne dl
mov eax, dword [ebp - 0x570]
mov dword [eax], edx
lea ecx, [ebp - 0x570]
call fcn.00420309
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 2
jle 0x48dcb1
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 2
je 0x48dc7e
lea ecx, [ebp - 0x480]
call fcn.00420309
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x18], 0x4fd9e2a8
mov dword [ebp - 0x28], 0x7336
cmp dword [ebp - 0x28], 0x766f
jle 0x48de1f
mov ecx, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x34], eax
mov ebx, eax
mov dword [ebp - 0x38], 0x6f35
mov esi, ecx
mov edi, 0x79c0
mov eax, esi
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
add esi, ebx
dec edi
jne 0x48dde0
mov edi, dword [ebp - 0x34]
add ebx, edi
dec dword [ebp - 0x38]
mov ecx, dword [ebp - 0x18]
jne 0x48ddd9
dec edi
mov dword [ebp - 0x34], edi
cmp edi, 0xffff9f4b
push 0
pop eax
jg 0x48ddd0
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x3ea
jl 0x48ddcd
xor ebx, ebx
inc ebx
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x28], 0x6fb1
jge 0x48de3e
mov edx, str.dlsexjtjm_yuqqebdu_eppecxyje_nxedjxq_mvg_kxgicj_qwgdz_quackdb_nptrhsdmq_aklve_jzk
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x48de6c
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0xcd7820ea
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x48de98
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe4], 0x418a5273
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x48de7f
xor eax, eax
mov dword [ebp - 0x48], 0x74cc
cmp dword [ebp - 0x48], 0x7590
jle 0x48df18
mov dword [ebp - 0x18], eax
mov ebx, eax
mov dword [ebp - 0x34], eax
mov esi, eax
mov dword [ebp - 0x38], eax
lea edi, [esi + ebx]
mov ebx, 0x3b91
mov esi, dword [ebp - 0x18]
mov eax, esi
mov ecx, edi
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
dec edi
dec ebx
jne 0x48dec0
mov esi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x5cc6
mov ebx, dword [ebp - 0x34]
jl 0x48deb5
inc ebx
mov dword [ebp - 0x34], ebx
cmp ebx, 0x1dc7
push 0
pop eax
jl 0x48deb0
mov ecx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x5d82
jl 0x48deab
xor edi, edi
push edi
push 0x10ae
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
xor ebx, ebx
inc ebx
imul eax, dword [ebp - 0x40], 0xffff
xor ecx, ecx
cmp eax, 0xffffffff
setle cl
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x48], 0x730a
jge 0x48df49
mov edx, str.wxl_smb_vvwvf_cnaleyq_dpcanf_mjooqkcya_jhjjmw
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x48df74
push 9
pop esi
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe5
jne 0x48e243
mov dword [ebp - 0x3c], 0x4b58e17c
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x48], 0xbc383c67
push ebx
lea ecx, [ebp - 0x1a0]
call fcn.00420237
mov dword [ebp - 0x14], 0
jmp 0x48dfbf
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x108], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x48dfae
mov dword [ebp - 0x14], 0
jmp 0x48dfe1
mov dword [ebp - 0x50], 0x4b990c
mov dword [ebp - 0x18], 2
push 3
lea ecx, [ebp - 0x630]
call fcn.00420237
mov dword [ebp - 0x54], 0x1cfd1f2e
mov dword [ebp - 0x4c], 0x2624
mov dword [ebp - 0x14], 0
jmp 0x48e288
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x630]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x48e275
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], ebx
jge 0x48e2ae