Function at 0x482ebd
Capabilities:
Accept command line arguments
Authenticate hmac
Check for software breakpoints
Encrypt data using speck
Query environment variable
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b02e7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2a18
call fcn.004abb70
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x496bd6
lea eax, [ebp + 0xc]
mov dword [ebp - 0x1a04], eax
mov eax, dword [ebp - 0x1a04]
movzx eax, byte [eax]
test eax, eax
je 0x496bc2
mov byte [ebp - 0x21], 0
mov dword [ebp - 0x8fc], 6
mov dword [ebp - 0x1560], 0xd453606d
push 2
lea ecx, [ebp - 0x1e3c]
call fcn.00409f19
mov dword [ebp - 0x2e8], 0xffffffff
mov dword [ebp - 0x2e0], 0
jmp 0x482f54
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 2
jge 0x482f70
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x2500], 0x73eb905d
jmp 0x482f47
lea eax, [ebp - 0x1e3c]
push eax
push 0
push 0x6e34
push 0
push 0x1daa
lea eax, [ebp - 0x2e0]
push eax
call fcn.00474fc9
add esp, 0x18
push 0x10cc
push 1
push 0
lea eax, [ebp - 0x2e8]
push eax
call fcn.004719e4
add esp, 0x10
mov dword [ebp - 0x2e8], 0
jmp 0x482fc5
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x1b
jne 0x483028
push 1
push 1
call fcn.004705f5
pop ecx
pop ecx
mov dword [ebp - 0x8fc], 1
jmp 0x482ff2
mov eax, dword [ebp - 0x8fc]
dec eax
mov dword [ebp - 0x8fc], eax
cmp dword [ebp - 0x8fc], 0xfffffff6
jge 0x483026
lea eax, [ebp - 0x1560]
push eax
lea eax, [ebp - 0x1e3c]
push eax
push 0x49f2
push 1
push 0
push 0x285
push 0x45cc
call fcn.0046ca3b
add esp, 0x1c
jmp 0x482fe5
jmp 0x482fb8
lea ecx, [ebp - 0x1e3c]
call fcn.00409fc5
mov dword [ebp - 0x808], 6
push 1
lea ecx, [ebp - 0x1b80]
call fcn.00409f19
mov dword [ebp - 0xa08], 0xd4f2887c
mov dword [ebp - 0xa00], 1
mov dword [ebp - 0xc48], 0x2df3d37a
mov dword [ebp - 0xa10], 2
push 1
lea ecx, [ebp - 0x1b70]
call fcn.00409f19
mov dword [ebp - 0x1568], 0x99da9727
push 0x1c52
push 0x78d9
lea eax, [ebp - 0x1b80]
push eax
push 1
push 0x37cb
push 1
push 0xa21
lea eax, [ebp - 0x2f0]
push eax
call fcn.00470672
add esp, 0x20
mov dword [ebp - 0x2f0], 0
jmp 0x4830d0
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 1
jge 0x4830ef
push dword [ebp - 0x2f0]
lea ecx, [ebp - 0x1b70]
call fcn.00409fe1
or dword [eax], 0xffffffff
jmp 0x4830c3
cmp dword [ebp - 0xa00], 0x46c2
jl 0x483107
mov dword [ebp - 0x1288], 1
jmp 0x48310e
and dword [ebp - 0x1288], 0
imul eax, dword [ebp - 0xa00], 0xafe3
mov dword [ebp - 0xc48], eax
mov esi, dword [ebp - 0xc48]
push 0
lea ecx, [ebp - 0x1b80]
call fcn.00409fe1
mov ecx, dword [ebp - 0x1288]
imul ecx, dword [eax]
cmp esi, ecx
jne 0x48314a
mov dword [ebp - 0x1290], 1
jmp 0x483151
and dword [ebp - 0x1290], 0
push 0
lea ecx, [ebp - 0x1b80]
call fcn.00409fe1
mov eax, dword [eax]
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp - 0xa08]
imul eax, dword [ebp - 0x1290]
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x1298], eax
push 0
lea ecx, [ebp - 0x1b70]
call fcn.00409fe1
mov ecx, dword [ebp - 0x1298]
mov dword [eax], ecx
cmp dword [ebp - 0x1298], 0
je 0x4831eb
push 0x7f37
push 0x34ee
lea eax, [ebp - 0xa00]
push eax
push 1
lea eax, [ebp - 0xa08]
push eax
push 0
call fcn.004825f9
add esp, 0x18
push 0x44ac
push 0xce
push 0x6640
push 1
lea eax, [ebp - 0x1b70]
push eax
push 0
call fcn.00477b8b
add esp, 0x18
jmp 0x4831fe
push 0
push 1
push 0x3541
push 0
call fcn.0047fb24
add esp, 0x10
push 1
push 0x4442
lea eax, [ebp - 0x1568]
push eax
push 0x2716
lea eax, [ebp - 0x1b80]
push eax
push 0
push 0
push 0x4a76
push 0x6cfd
push 0x64d1
lea eax, [ebp - 0xa10]
push eax
push 0x453a
lea eax, [ebp - 0x1b70]
push eax
call fcn.0046db42
add esp, 0x34
lea ecx, [ebp - 0x1b70]
call fcn.00409fc5
lea ecx, [ebp - 0x1b80]
call fcn.00409fc5
mov dword [ebp - 0x3cc], 0xd453606d
push 0x32d3
push 1
push 0xdfa
push 0x1888
push 1
push 0x1f0e
call fcn.00470a46
add esp, 0x18
mov dword [ebp - 0xac], 0xffffffff
mov dword [ebp - 0x1588], 0xc8dd
mov dword [ebp - 0x1590], 7
mov dword [ebp - 0xac], 0xfffffffc
jmp 0x4832bd
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x16
jne 0x4832f1
mov byte [ebp - 0x175], 0
push 1
push 0x3905
push 1
push 0x155c
lea eax, [ebp - 0x175]
push eax
push 0x789e
call fcn.00470de6
add esp, 0x18
jmp 0x4832b0
mov dword [ebp - 0xac], 0
jmp 0x48330a
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xffffffe6
jg 0x48362a
mov dword [ebp - 0x12e8], 0x44b1
mov dword [ebp - 0x1570], str.qptcurq_iokhubvfi_pul_rnemtzf_sqdp_bkta_ypuawv_fyjmrhb_tsmcpwyq_vure_ycjizh
cmp dword [ebp - 0x12e8], 0x464a
jle 0x4833e7
and dword [ebp - 0x904], 0
jmp 0x483351
mov eax, dword [ebp - 0x904]
inc eax
mov dword [ebp - 0x904], eax
cmp dword [ebp - 0x904], 0x57c2
jge 0x4833e7
and dword [ebp - 0x90c], 0
jmp 0x483377
mov eax, dword [ebp - 0x90c]
inc eax
mov dword [ebp - 0x90c], eax
cmp dword [ebp - 0x90c], 0x282a
jge 0x4833e2
and dword [ebp - 0x718], 0
jmp 0x483399
mov eax, dword [ebp - 0x718]
inc eax
mov dword [ebp - 0x718], eax
cmp dword [ebp - 0x718], 0x6c94
jge 0x4833e0
mov eax, dword [ebp - 0x904]
imul eax, dword [ebp - 0x90c]
cdq
idiv dword [ebp - 0x718]
mov eax, edx
cdq
mov dword [ebp - 0x159c], eax
mov dword [ebp - 0x1598], edx
push dword [ebp - 0x1598]
push dword [ebp - 0x159c]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x48338c
jmp 0x48336a
jmp 0x483344
mov dword [ebp - 0x1580], 0x3bfa32a1
and dword [ebp - 4], 0
cmp dword [ebp - 0x12e8], 0x4405
jge 0x483411
mov edx, dword [ebp - 0x1570]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x48342d
or dword [ebp - 4], 0xffffffff
jmp 0x483437
push 4
lea ecx, [ebp - 0x1e54]
call fcn.00409f19
mov dword [ebp - 0x12f0], 0x7ce3
mov dword [ebp - 0x1578], str.rzmjapmo_mkufibjpg_wfra_fjbr_jbmbg_mwvlfxgm_jcaynssj_isl_wqsduiqn_lummsf_oiw_nxqramw
cmp dword [ebp - 0x12f0], 0x7ef9
jle 0x483555
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
and dword [ebp - 0x354], 0
jmp 0x48348e
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0x63f2
jge 0x483555
and dword [ebp - 0x8e8], 0
jmp 0x4834b4
mov eax, dword [ebp - 0x8e8]
inc eax
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 0x13eb
jge 0x483550
and dword [ebp - 0x35c], 0
jmp 0x4834da
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0x3307
jge 0x48354b
and dword [ebp - 0x6cc], 0
jmp 0x4834fc
mov eax, dword [ebp - 0x6cc]
inc eax
mov dword [ebp - 0x6cc], eax
cmp dword [ebp - 0x6cc], 0xfca
jge 0x483549
mov eax, dword [ebp - 0x354]
mov ecx, dword [ebp - 0x8e8]
sar eax, cl
mov ecx, dword [ebp - 0x35c]
add ecx, dword [ebp - 0x6cc]
or eax, ecx
cdq
mov dword [ebp - 0x15a8], eax
mov dword [ebp - 0x15a4], edx
push dword [ebp - 0x15a4]
push dword [ebp - 0x15a8]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x4834ef
jmp 0x4834cd
jmp 0x4834a7
jmp 0x483481
mov dword [ebp - 4], 2
cmp dword [ebp - 0x12f0], 0x7c6e
jge 0x483578
mov edx, dword [ebp - 0x1578]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x483594
or dword [ebp - 4], 0xffffffff
jmp 0x48359e
lea eax, [ebp - 0x1e54]
push eax
lea eax, [ebp - 0x21b4]
push eax
push 1
push 0x2daa
push 0x4df5
push 0x3a8a
push 0x4d98
push 0
call fcn.0046c195
add esp, 0x20
lea eax, [ebp - 0xac]
push eax
push 1
lea eax, [ebp - 0x1580]
push eax
push 0
lea eax, [ebp - 0x1588]
push eax
lea eax, [ebp - 0x1e54]
push eax
lea eax, [ebp - 0x1590]
push eax
call fcn.0047c6d0
add esp, 0x1c
mov byte [ebp - 0xf0], 0
push 0
push 0
push 0x1471
lea eax, [ebp - 0xf0]
push eax
call fcn.00476ac2
add esp, 0x10
lea ecx, [ebp - 0x1e54]
call fcn.00409fc5
jmp 0x4832fd
push 2
lea ecx, [ebp - 0x1e24]
call fcn.00409f19
mov dword [ebp - 0x2e4], 0xffffffff
mov dword [ebp - 0x9c], 0
jmp 0x48365a
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x483676
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x2480], 0x73eb905d
jmp 0x48364d
mov dword [ebp - 0x12f8], 0x5821
mov dword [ebp - 0x1ab8], str.bjviqp_pljhroim_tynfn_jlocicwx_pvdvb_ougxndw_uulewug_yjtqn
cmp dword [ebp - 0x12f8], 0x5a85
jle 0x483740
and dword [ebp - 0x364], 0
jmp 0x4836b0
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x5c79
jge 0x483730
and dword [ebp - 0x7f0], 0
jmp 0x4836d2
mov eax, dword [ebp - 0x7f0]
inc eax
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x7f0], 0x1180
jge 0x48372b
mov eax, dword [ebp - 0x364]
or eax, dword [ebp - 0x7f0]
cdq
mov dword [ebp - 0x15b4], eax
mov dword [ebp - 0x15b0], edx
push dword [ebp - 0x15b0]
push dword [ebp - 0x15b4]
lea ecx, [ebp - 0x25c4]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x25c4]
call fcn.00409baf
jmp 0x4836c5
jmp 0x4836a3
push 0x702
push 0x1928
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x12f8], 0x5765
jge 0x48375f
push dword [ebp - 0x1ab8]
call fcn.00499a27
pop ecx
jmp 0x48377b
or dword [ebp - 4], 0xffffffff
jmp 0x483785
mov dword [ebp - 0xc8], 0xfffffff6
mov dword [ebp - 0xc8], 0
jmp 0x4837a8
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffe3
je 0x483a2c
mov dword [ebp - 0x2f8], 0x58d32ffa
mov dword [ebp - 0x1310], 1
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 1
jne 0x483855
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x23e8], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x2f8], eax
jge 0x483804
mov dword [ebp - 0x1300], 1
jmp 0x48380b
and dword [ebp - 0x1300], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x1300], eax
je 0x483825
mov dword [ebp - 0x1308], 1
jmp 0x48382c
and dword [ebp - 0x1308], 0
mov eax, dword [ebp - 0xc8]
imul eax, dword [ebp - 0x1308]
add eax, dword [ebp - 0xc8]
neg eax
mov dword [ebp - 0x1310], eax
je 0x483855
mov dword [ebp - 0x1318], 1
jmp 0x48385c
and dword [ebp - 0x1318], 0
mov eax, dword [ebp - 0x1318]
sub eax, 0x3b483900
jne 0x4838a2
push 0
push 0x124d
push 1
push 0x1ce3
push 0x548a
push 0x1378
push 0x2264
push 0x6231
push 0x8e3
push 0x298
call fcn.004766e8
add esp, 0x28
jmp 0x483a27
mov dword [ebp - 0x1ac0], 0x4a90c6d2
push 0x3e94
push 0
push 0
push 0x3f4b
push 0x465c
push 0x5a69
push 0x61d4
call fcn.00473ae1
add esp, 0x1c
mov dword [ebp - 0x1320], 0x3942
mov dword [ebp - 0x1ac8], str.lnldzk_eegf_jnft_btt_zxeuebkyv
cmp dword [ebp - 0x1320], 0x3cb7
jle 0x4839d0
and dword [ebp - 0x36c], 0
jmp 0x48390b
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x3051
jge 0x4839d0
and dword [ebp - 0x6d4], 0
jmp 0x483931
mov eax, dword [ebp - 0x6d4]
inc eax
mov dword [ebp - 0x6d4], eax
cmp dword [ebp - 0x6d4], 0xca0
jge 0x4839cb
and dword [ebp - 0x374], 0
jmp 0x483957
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x1c02
jge 0x4839c6
and dword [ebp - 0x880], 0
jmp 0x483979
mov eax, dword [ebp - 0x880]
inc eax
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x880], 0x55db
jge 0x4839c4
mov eax, dword [ebp - 0x36c]
mov ecx, dword [ebp - 0x6d4]
sar eax, cl
xor eax, dword [ebp - 0x374]
or eax, dword [ebp - 0x880]
cdq
mov dword [ebp - 0x15c0], eax
mov dword [ebp - 0x15bc], edx
push dword [ebp - 0x15bc]
push dword [ebp - 0x15c0]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x48396c
jmp 0x48394a
jmp 0x483924
jmp 0x4838fe
cmp dword [ebp - 0x1ac0], 0
je 0x4839de
jmp 0x48379b
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1320], 0x3831
jge 0x483a01
mov edx, dword [ebp - 0x1ac8]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x483a1d
or dword [ebp - 4], 0xffffffff
jmp 0x483a27
jmp 0x48379b
push 0x6a0
push 0x37b7
push 1
push 0x74dc
push 1
call fcn.00470fa9
add esp, 0x14
mov dword [ebp - 0x9c], 0
jmp 0x483a60
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x483a82
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x1e24]
call fcn.00409fe1
mov dword [eax], 5
jmp 0x483a53
mov dword [ebp - 0x37c], 0xcff0ea75
mov dword [ebp - 0x1ad8], 5
mov dword [ebp - 0x37c], 0xffffffe3
jmp 0x483aaf
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0xffffffe8
je 0x483b13
mov dword [ebp - 0x1ad0], 1
mov byte [ebp - 0x110], 0
push 0x18be
lea eax, [ebp - 0x110]
push eax
push 0
push 1
push 0x5860
call fcn.00474d5b
add esp, 0x14
lea eax, [ebp - 0x1ad0]
push eax
lea eax, [ebp - 0x1ad8]
push eax
push 0
push 0
push 1
push 0x57eb
push 0x23c
push 0x2485
call fcn.0047fd9b
add esp, 0x20
jmp 0x483aa2
lea eax, [ebp - 0x2e4]
push eax
push 0xb4b
push 0x4888
push 0x2841
push 0x36b7
push 0x767e
push 1
push 0x2182
push 0x7bb1
push 0x5332
push 0
call fcn.0046d770
add esp, 0x2c
mov dword [ebp - 0x84], 7
mov dword [ebp - 0x8c8], 0xfffffff8
mov dword [ebp - 0x1b10], 0xf390f3bd
mov dword [ebp - 0x1b18], 8
mov dword [ebp - 0x1378], 0x3da
mov dword [ebp - 0x1ae0], str.kcqjkl_lprj_omvnn_wxvnc_jbhggmenf_xqhwoxgd_ndhhew
cmp dword [ebp - 0x1378], 0x4fd
jle 0x483c78
and dword [ebp - 0x6dc], 0
jmp 0x483bb0
mov eax, dword [ebp - 0x6dc]
inc eax
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x6dc], 0x41de
jge 0x483c78
and dword [ebp - 0x384], 0
jmp 0x483bd6
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0x78e
jge 0x483c73
and dword [ebp - 0x7f8], 0
jmp 0x483bfc
mov eax, dword [ebp - 0x7f8]
inc eax
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 0x35d3
jge 0x483c6e
and dword [ebp - 0x38c], 0
jmp 0x483c1e
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0x1c76
jge 0x483c6c
mov ecx, dword [ebp - 0x6dc]
sub ecx, dword [ebp - 0x384]
mov eax, dword [ebp - 0x7f8]
cdq
idiv dword [ebp - 0x38c]
add ecx, edx
mov eax, ecx
cdq
mov dword [ebp - 0x15cc], eax
mov dword [ebp - 0x15c8], edx
push dword [ebp - 0x15c8]
push dword [ebp - 0x15cc]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x483c11
jmp 0x483bef
jmp 0x483bc9
jmp 0x483ba3
mov dword [ebp - 0x6e4], 0
jmp 0x483c91
mov eax, dword [ebp - 0x6e4]
inc eax
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6e4], 1
jge 0x483cad
mov eax, dword [ebp - 0x6e4]
mov dword [ebp + eax*4 - 0x11c], 0xffffffff
jmp 0x483c84
mov dword [ebp - 4], 8
cmp dword [ebp - 0x1378], 0xcc
jge 0x483cd0
mov edx, dword [ebp - 0x1ae0]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x483cec
or dword [ebp - 4], 0xffffffff
jmp 0x483cf6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x84], 0
jmp 0x483d22
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jg 0x4840af
mov dword [ebp - 0xa74], 0x3fe6
push 1
lea ecx, [ebp - 0x1e30]
call fcn.00409f19
mov dword [ebp - 0x1dc], 0xb470
mov dword [ebp - 0xefc], 0xfffffffe
push 1
lea ecx, [ebp - 0x1e6c]
call fcn.00409f19
push 0x4047
push 1
push 0
push 1
lea eax, [ebp - 0x1ae8]
push eax
push 0x85d
lea eax, [ebp - 0x1e30]
push eax
call fcn.004726c9
add esp, 0x1c
push 0
lea eax, [ebp - 0x1e6c]
push eax
push 0
lea eax, [ebp - 0x1ae8]
push eax
push 0x7aa4
push 0x3eb4
call fcn.0046d3ec
add esp, 0x18
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0x11c], 0
je 0x483f64
mov dword [ebp - 0x1280], 9
mov dword [ebp - 0x1af8], 0xfffffff6
mov dword [ebp - 0x394], 0
jmp 0x483df2
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 1
jge 0x483e0e
mov eax, dword [ebp - 0x394]
mov dword [ebp + eax*4 - 0x1af0], 7
jmp 0x483de5
mov esi, dword [ebp - 0x1280]
push 0
lea ecx, [ebp - 0x1e30]
call fcn.00409fe1
mov dword [eax], esi
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0x23bc], eax
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x1dc], eax
jle 0x483e52
cmp dword [ebp - 0x84], 0
je 0x483e52
mov dword [ebp - 0x113c], 1
jmp 0x483e59
and dword [ebp - 0x113c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x113c], eax
jg 0x483e73
mov dword [ebp - 0xa18], 1
jmp 0x483e7a
and dword [ebp - 0xa18], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa18]
mov dword [ebp + eax - 0x1af0], ecx
mov eax, dword [ebp - 0xa18]
mov dword [ebp - 0x1af8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11c], 0xf5e3
jge 0x483eb8
mov dword [ebp - 0x1b00], 1
jmp 0x483ebf
and dword [ebp - 0x1b00], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11c], 0x3acb6d6
jle 0x483ede
mov dword [ebp - 0x1b08], 1
jmp 0x483ee5
and dword [ebp - 0x1b08], 0
mov eax, dword [ebp - 0x1280]
mov dword [ebp - 0x230c], eax
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0x23e4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
mov dword [ebp - 0x1f5c], eax
mov dword [ebp - 0x8c8], 0xffffffff
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0xefc], eax
mov eax, dword [ebp - 0x1b10]
cmp dword [ebp - 0xefc], eax
jne 0x483f40
mov dword [ebp - 0xa7c], 1
jmp 0x483f47
and dword [ebp - 0xa7c], 0
mov esi, dword [ebp - 0xa7c]
shl esi, 3
push 0
lea ecx, [ebp - 0x1e6c]
call fcn.00409fe1
mov dword [eax], esi
jmp 0x484094
mov dword [ebp - 0xa20], 0xfffffff7
mov dword [ebp - 0x1dc], 0
jmp 0x483f87
mov eax, dword [ebp - 0x1dc]
dec eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jl 0x483faf
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x483fad
push 0
push 1
call fcn.00477c1d
pop ecx
pop ecx
jmp 0x483f7a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
mov dword [ebp - 0x2214], eax
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0x1f64], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp + eax*4 - 0x11c]
mov dword [ebp - 0x23c0], eax
mov eax, 0xfffa
cmp eax, 0x364f
je 0x483ff9
mov dword [ebp - 0x1360], 1
jmp 0x484000
and dword [ebp - 0x1360], 0
mov eax, dword [ebp - 0xa20]
cmp dword [ebp - 0x1360], eax
jge 0x484023
cmp dword [ebp - 0x8c8], 0
je 0x484023
mov dword [ebp - 0xa84], 1
jmp 0x48402a
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xa20]
cmp dword [ebp - 0xa84], eax
jl 0x484044
mov dword [ebp - 0xf04], 1
jmp 0x48404b
and dword [ebp - 0xf04], 0
mov eax, dword [ebp - 0x1b18]
cmp dword [ebp - 0xf04], eax
jl 0x484065
mov dword [ebp - 0xa8c], 1
jmp 0x48406c
and dword [ebp - 0xa8c], 0
cmp dword [ebp - 0xa8c], 1
jg 0x484081
mov dword [ebp - 0x1144], 1
jmp 0x484088
and dword [ebp - 0x1144], 0
mov eax, dword [ebp - 0x1144]
mov dword [ebp - 0xa20], eax
lea ecx, [ebp - 0x1e6c]
call fcn.00409fc5
lea ecx, [ebp - 0x1e30]
call fcn.00409fc5
jmp 0x483d15
mov dword [ebp - 0x2e4], 0
jmp 0x4840c8
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x1b
jne 0x484cda
push 2
lea ecx, [ebp - 0x20b0]
call fcn.00409f19
mov dword [ebp - 0x39c], 0
jmp 0x4840fb
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 2
jge 0x48411d
push dword [ebp - 0x39c]
lea ecx, [ebp - 0x20b0]
call fcn.00409fe1
mov dword [eax], 0x862fd41e
jmp 0x4840ee
push 0x3670
push 0x6a9b
push 0xe6d
push 0
push 1
push 0x591c
push 0x7ce2
push 0x7fae
push 0x4314
push 0x43a2
push 0x7cc5
call fcn.00477d00
add esp, 0x2c
push 0x3494
push 0xf4f
push 0
push 1
call fcn.0047e144
add esp, 0x10
lea ecx, [ebp - 0x20b0]
call fcn.00409fc5
mov byte [ebp - 0x13d], 0
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x54], 0
jmp 0x484195
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jle 0x4842c0
mov dword [ebp - 0x1b20], 0x9646b8d9
mov dword [ebp - 0x6ec], 0
jmp 0x4841c2
mov eax, dword [ebp - 0x6ec]
inc eax
mov dword [ebp - 0x6ec], eax
cmp dword [ebp - 0x6ec], 4
jge 0x4841de
mov eax, dword [ebp - 0x6ec]
mov dword [ebp + eax*4 - 0x23f8], 0x4e6d
jmp 0x4841b5
push 1
push 0
push 1
call fcn.004808b7
add esp, 0xc
cmp dword [ebp - 0x54], 0
je 0x4842a8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x23f8]
mov dword [ebp - 0x1f6c], eax
cmp dword [ebp - 0x54], 0x7e4
jg 0x48421e
mov dword [ebp - 0x1264], 1
jmp 0x484225
and dword [ebp - 0x1264], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jg 0x484239
mov dword [ebp - 0xa94], 1
jmp 0x484240
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xa94], eax
jl 0x484257
mov dword [ebp - 0xf0c], 1
jmp 0x48425e
and dword [ebp - 0xf0c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x23f8]
cmp dword [ebp - 0xf0c], eax
jl 0x48427f
mov dword [ebp - 0xa9c], 1
jmp 0x484286
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0xa9c]
add eax, 0xffff
sub eax, dword [ebp - 0x54]
cmp dword [ebp - 0x1264], eax
jg 0x4842a8
mov dword [ebp - 0xaa4], 1
jmp 0x4842af
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0xaa4]
mov dword [ebp - 0x1b20], eax
jmp 0x48418e
mov dword [ebp - 0xf14], 0x1107
mov dword [ebp - 0x1b28], str.jlyssu_gdqu_fybuqcui_gyusumdko_awejfo_htdn_otonwxrfb_iygy
cmp dword [ebp - 0xf14], 0x12be
jle 0x484382
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
and dword [ebp - 0x3a4], 0
jmp 0x484302
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0x478f
jge 0x484382
and dword [ebp - 0x800], 0
jmp 0x484324
mov eax, dword [ebp - 0x800]
inc eax
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x800], 0x1e31
jge 0x48437d
mov eax, dword [ebp - 0x3a4]
add eax, dword [ebp - 0x800]
cdq
mov dword [ebp - 0x15d8], eax
mov dword [ebp - 0x15d4], edx
push dword [ebp - 0x15d4]
push dword [ebp - 0x15d8]
lea ecx, [ebp - 0x25f4]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x25f4]
call fcn.00409baf
jmp 0x484317
jmp 0x4842f5
push 0
push 0x2d83
push 0
call fcn.0046e630
add esp, 0xc
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xf14], 0xeb0
jge 0x4843b2
push dword [ebp - 0x1b28]
call fcn.00499a27
pop ecx
jmp 0x4843ce
or dword [ebp - 4], 0xffffffff
jmp 0x4843d8
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x484629
mov dword [ebp - 0xaac], 0x588c
mov dword [ebp - 0x1b30], str.xqdu_ddxnmzlzm_fxi_rijuvgtvw_jacicfh_yrzmqrr_zydizul_dqbsiav_scmjs_bjwyqrglr_tldxpqi_kpysrff_puxmybd_wfienkc
cmp dword [ebp - 0xaac], 0x5c4f
jle 0x4844bd
push 0
push 0xb07
push 0x95f
push 0x3ca
push 0x108d
call dword [sym.imp.GDI32.dll_CreateBitmap]
and dword [ebp - 0x3ac], 0
jmp 0x48443d
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0x1251
jge 0x4844bd
and dword [ebp - 0x6f4], 0
jmp 0x48445f
mov eax, dword [ebp - 0x6f4]
inc eax
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 0x4d1c
jge 0x4844b8
mov eax, dword [ebp - 0x3ac]
xor eax, dword [ebp - 0x6f4]
cdq
mov dword [ebp - 0x15e4], eax
mov dword [ebp - 0x15e0], edx
push dword [ebp - 0x15e0]
push dword [ebp - 0x15e4]
lea ecx, [ebp - 0x2918]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x2918]
call fcn.00409baf
jmp 0x484452
jmp 0x484430
mov dword [ebp - 0x221c], 0x1928
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xaac], 0x577a
jge 0x4844e6
push dword [ebp - 0x1b30]
call fcn.00499a27
pop ecx
jmp 0x484502
or dword [ebp - 4], 0xffffffff
jmp 0x48450c
push 0
push 0x300a
push 1
call fcn.004712bf
add esp, 0xc
mov dword [ebp - 0x114c], 0x1e2a
mov dword [ebp - 0x1b38], str.wjrpr_jcummpkc_awroddzlp_riiyhzb_bkfhq
cmp dword [ebp - 0x114c], 0x2155
jle 0x4845b6
and dword [ebp - 0x3b4], 0
jmp 0x484553
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0x514
jge 0x4845b6
and dword [ebp - 0x888], 0
jmp 0x484575
mov eax, dword [ebp - 0x888]
inc eax
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x888], 0x7839
jge 0x4845b4
mov eax, dword [ebp - 0x3b4]
mov ecx, dword [ebp - 0x888]
shl eax, cl
cdq
mov dword [ebp - 0x15f0], eax
mov dword [ebp - 0x15ec], edx
push dword [ebp - 0x15ec]
push dword [ebp - 0x15f0]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x484568
jmp 0x484546
mov byte [ebp - 0xf4], 0
lea eax, [ebp - 0xf4]
push eax
push 1
push 0x1fe1
push 0xabb
push 0
call fcn.00479ec4
add esp, 0x14
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x114c], 0x1c83
jge 0x4845fd
mov edx, dword [ebp - 0x1b38]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x484619
or dword [ebp - 4], 0xffffffff
jmp 0x484623
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x924], 0xb1658084
mov dword [ebp - 0x3c4], 5
push 2
lea ecx, [ebp - 0x1e0c]
call fcn.00409f19
push 0x6431
push 0x3076
push 0x5908
push 0
push 1
push 0x26bc
push 0
push 0x2314
lea eax, [ebp - 0x1e0c]
push eax
lea eax, [ebp - 0x1f74]
push eax
call fcn.0047893c
add esp, 0x28
mov eax, dword [ebp - 0x924]
sub eax, dword [ebp - 0x924]
cmp eax, 0xffffffff
jb 0x48469c
mov dword [ebp - 0xab4], 1
jmp 0x4846a3
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0xab4]
add eax, 0x11f07b4b
mov dword [ebp - 0x3c4], eax
jne 0x4847c9
mov dword [ebp - 0xf1c], 0x9fa
mov dword [ebp - 0x1b40], str.mgpmyt_kducuby_yohelmlak_yvlcdomxa_fni_lblkrapy_yzewc_spsuve_nccmyvi
cmp dword [ebp - 0xf1c], 0xa1d
jle 0x484753
and dword [ebp - 0x3bc], 0
jmp 0x4846f0
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0x75aa
jge 0x484753
and dword [ebp - 0x6fc], 0
jmp 0x484712
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0x2809
jge 0x484751
mov eax, dword [ebp - 0x3bc]
mov ecx, dword [ebp - 0x6fc]
sar eax, cl
cdq
mov dword [ebp - 0x15fc], eax
mov dword [ebp - 0x15f8], edx
push dword [ebp - 0x15f8]
push dword [ebp - 0x15fc]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x484705
jmp 0x4846e3
mov byte [ebp - 0x112], 0
push 0x6ae6
push 1
lea eax, [ebp - 0x112]
push eax
push 0x4354
push 0
push 0
push 0x70a7
call fcn.004703a7
add esp, 0x1c
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0xf1c], 0x715
jge 0x4847a1
mov edx, dword [ebp - 0x1b40]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x4847bd
or dword [ebp - 4], 0xffffffff
jmp 0x4847c7
jmp 0x484838
mov dword [ebp - 0x1b48], 1
mov dword [ebp - 0x1b50], 0x5a260df3
mov dword [ebp - 0x1b60], 3
mov dword [ebp - 0x1b58], 7
lea eax, [ebp - 0x3c4]
push eax
lea eax, [ebp - 0x1b48]
push eax
lea eax, [ebp - 0x1b50]
push eax
push 0x60e2
push 1
push 0x147a
lea eax, [ebp - 0x1b58]
push eax
push 0
lea eax, [ebp - 0x1b60]
push eax
lea eax, [ebp - 0x1e0c]
push eax
lea eax, [ebp - 0x924]
push eax
call fcn.00471851
add esp, 0x2c
push 0x14e
push 0
push 0
lea eax, [ebp - 0x3c4]
push eax
push 1
push 0x2255
push 0x1019
push 0x4ef7
call fcn.0047dc2e
add esp, 0x20
lea ecx, [ebp - 0x1e0c]
call fcn.00409fc5
mov dword [ebp - 0x808], 1
jmp 0x484885
mov eax, dword [ebp - 0x808]
dec eax
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x808], 0xfffffff6
jge 0x484cd5
mov dword [ebp - 0x1154], 5
push 4
lea ecx, [ebp - 0x1388]
call fcn.00409f19
mov dword [ebp - 0xf34], 0x85a7
mov dword [ebp - 0x9fc], 0xfffffffa
mov dword [ebp - 0x9b4], 0xdfbc43c
mov dword [ebp - 0x126c], 0
mov dword [ebp - 0x20c], 0
jmp 0x4848ea
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x484906
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x12a4], 1
jmp 0x4848dd
push 0
lea eax, [ebp - 0x1388]
push eax
push 0x4115
push 1
lea eax, [ebp - 0x20c]
push eax
push 0x7857
call fcn.00476607
add esp, 0x18
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x12a4]
push 2
lea ecx, [ebp - 0x1388]
call fcn.00409fe1
cmp esi, dword [eax]
je 0x484954
mov dword [ebp - 0xabc], 1
jmp 0x48495b
and dword [ebp - 0xabc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12a4]
cmp dword [ebp - 0xabc], eax
je 0x48497c
mov dword [ebp - 0x130c], 1
jmp 0x484983
and dword [ebp - 0x130c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12a4]
cmp dword [ebp - 0x130c], eax
je 0x4849a4
mov dword [ebp - 0xac4], 1
jmp 0x4849ab
and dword [ebp - 0xac4], 0
mov dword [ebp - 0x9fc], 0x4e5878ed
mov esi, dword [ebp - 0x9fc]
push 2
lea ecx, [ebp - 0x1388]
call fcn.00409fe1
mov ecx, dword [ebp - 0xac4]
add ecx, dword [eax]
cmp esi, ecx
jg 0x4849e0
mov dword [ebp - 0xf24], 1
jmp 0x4849e7
and dword [ebp - 0xf24], 0
push 3
lea ecx, [ebp - 0x1388]
call fcn.00409fe1
mov ecx, dword [ebp - 0xf24]
cmp ecx, dword [eax]
je 0x484a0a
mov dword [ebp - 0xacc], 1
jmp 0x484a11
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0x9b4]
dec eax
mov dword [ebp - 0x9b4], eax
mov eax, dword [ebp - 0x9b4]
cmp eax, dword [ebp - 0xacc]
jne 0x484a38
mov dword [ebp - 0xad4], 1
jmp 0x484a3f
and dword [ebp - 0xad4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12a4]
neg eax
mov dword [ebp - 0x1154], eax
mov eax, dword [ebp - 0x1154]
cmp eax, dword [ebp - 0xad4]
jg 0x484a6e
mov dword [ebp - 0xf2c], 1
jmp 0x484a75
and dword [ebp - 0xf2c], 0
cmp dword [ebp - 0xf2c], 0x8694a219
je 0x484a8d
mov dword [ebp - 0xadc], 1
jmp 0x484a94
and dword [ebp - 0xadc], 0
mov eax, dword [ebp - 0xf34]
cmp dword [ebp - 0xadc], eax
jge 0x484aae
mov dword [ebp - 0x92c], 1
jmp 0x484ab5
and dword [ebp - 0x92c], 0
push 2
lea ecx, [ebp - 0x1388]
call fcn.00409fe1
mov ecx, dword [ebp - 0x92c]
mov dword [eax], ecx
cmp dword [ebp - 0x92c], 1
je 0x484adf
mov dword [ebp - 0x1c5c], 1
jmp 0x484ae6
and dword [ebp - 0x1c5c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x12a4]
mov dword [ebp - 0x2334], eax
cmp dword [ebp - 0x126c], 0
jbe 0x484b0e
mov dword [ebp - 0xae4], 1
jmp 0x484b15
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0x126c]
imul eax, dword [ebp - 0xae4]
test eax, eax
je 0x484b4a
mov dword [ebp - 0x1c70], 0xcbde
mov dword [ebp - 0x1c78], 0x2ad21dd8
mov eax, dword [ebp - 0x1c70]
neg eax
mov dword [ebp - 0x1c78], eax
jmp 0x484b73
mov byte [ebp - 0xf6], 0
movzx eax, byte [ebp - 0xf6]
test eax, eax
je 0x484b73
push 0
push 0x14c9
push 0x1931
push 0x790
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
push 0x6a0d
push 1
lea eax, [ebp - 0x1388]
push eax
lea eax, [ebp - 0x9fc]
push eax
lea eax, [ebp - 0xf34]
push eax
push 1
call fcn.00471765
add esp, 0x18
lea ecx, [ebp - 0x1388]
call fcn.00409fc5
mov dword [ebp - 0x3cc], 0
jmp 0x484bbd
mov eax, dword [ebp - 0x3cc]
dec eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0xffffffec
jle 0x484cd0
push 2
lea ecx, [ebp - 0x20c0]
call fcn.00409f19
push 0x902
push 0x3845
push 0x3084
lea eax, [ebp - 0x20c0]
push eax
push 1
lea eax, [ebp - 0x28c]
push eax
push 0x471b
push 1
push 0x105a
push 0x7c8c
push 0x5cda
call fcn.00471851
add esp, 0x2c
mov dword [ebp - 0x28c], 0
jmp 0x484c2d
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 4
jge 0x484c49
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x1f30], 0x667a876e
jmp 0x484c20
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1f30], 0
jmp 0x484c77
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f30]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1f30], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1f30], 1
jg 0x484cac
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x484caa
push 0
push 1
push 0x1c6c
call fcn.0047a6ba
add esp, 0xc
jmp 0x484c5c
lea ecx, [ebp - 0x20c0]
call fcn.00409fc5
push 1
lea ecx, [ebp - 0x1e24]
call fcn.00409fe1
cmp dword [eax], 0
je 0x484ccb
jmp 0x484cd0
jmp 0x484bb0
jmp 0x484878
jmp 0x4840bb
lea ecx, [ebp - 0x1e24]
call fcn.00409fc5
mov dword [ebp - 0x1424], 0x37ffeac8
mov dword [ebp - 0x1558], 0x3e4f6f48
mov dword [ebp - 0x78], 0
jmp 0x484d09
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x484d1f
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1330], 0x825e
jmp 0x484d02
mov dword [ebp - 0x78], 0
jmp 0x484d2f
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x484d45
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1608], 0x2305aba9
jmp 0x484d28
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1330], 0
je 0x485056
mov dword [ebp - 0x1d4], 0x3a0f
mov dword [ebp - 0x934], 0xe85fcb44
mov dword [ebp - 0xf4c], 8
mov dword [ebp - 0x704], 0
jmp 0x484d8f
mov eax, dword [ebp - 0x704]
inc eax
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 3
jge 0x484dab
mov eax, dword [ebp - 0x704]
mov dword [ebp + eax*4 - 0x1c84], 0
jmp 0x484d82
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x484ffc
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1330], 0xaab21a84
jne 0x484def
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1330], 0
jne 0x484def
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1330], 0
jne 0x484def
and dword [ebp - 0xaec], 0
jmp 0x484df9
mov dword [ebp - 0xaec], 1
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0xaec], eax
jle 0x484e13
mov dword [ebp - 0x115c], 1
jmp 0x484e1a
and dword [ebp - 0x115c], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x115c], eax
je 0x484e34
mov dword [ebp - 0xaf4], 1
jmp 0x484e3b
and dword [ebp - 0xaf4], 0
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0xaf4]
jge 0x484e55
mov dword [ebp - 0xf3c], 1
jmp 0x484e5c
and dword [ebp - 0xf3c], 0
mov eax, dword [ebp - 0xf3c]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x934]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x1330]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1330]
jge 0x484e95
mov dword [ebp - 0xafc], 1
jmp 0x484e9c
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0xafc], eax
jle 0x484ec6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1608], 0
je 0x484ec6
mov dword [ebp - 0x1370], 1
jmp 0x484ecd
and dword [ebp - 0x1370], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c84]
add eax, dword [ebp - 0x1370]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1608]
je 0x484efb
mov dword [ebp - 0xb04], 1
jmp 0x484f02
and dword [ebp - 0xb04], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c84]
cmp dword [ebp - 0xb04], eax
jg 0x484f30
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1608], 0
jne 0x484f30
and dword [ebp - 0xf44], 0
jmp 0x484f3a
mov dword [ebp - 0xf44], 1
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1330]
sub ecx, dword [ebp - 0xf44]
mov eax, dword [ebp + eax - 0x1330]
imul eax, ecx
mov dword [ebp - 0xb0c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb0c]
mov dword [ebp + eax - 0x1c84], ecx
cmp dword [ebp - 0xb0c], 0
je 0x484f92
mov eax, 0xffff
test eax, eax
je 0x484f92
mov dword [ebp - 0x1164], 1
jmp 0x484f99
and dword [ebp - 0x1164], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x1164], eax
jl 0x484fb9
cmp dword [ebp - 0x934], 0
jne 0x484fb9
and dword [ebp - 0xb14], 0
jmp 0x484fc3
mov dword [ebp - 0xb14], 1
mov eax, dword [ebp - 0xb14]
sub eax, 0x3de76903
mov dword [ebp - 0x1424], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c84]
mov dword [ebp - 0xf4c], eax
cmp dword [ebp - 0xf4c], 0
je 0x484ffc
mov dword [ebp - 0xb1c], 1
jmp 0x485003
and dword [ebp - 0xb1c], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0xb1c], eax
jl 0x485022
or eax, 0xffffffff
je 0x485022
mov dword [ebp - 0x1274], 1
jmp 0x485029
and dword [ebp - 0x1274], 0
cmp dword [ebp - 0x1274], 0xc42fa43d
jb 0x485041
mov dword [ebp - 0xb24], 1
jmp 0x485048
and dword [ebp - 0xb24], 0
mov eax, dword [ebp - 0xb24]
mov dword [ebp - 0x1558], eax
jmp 0x485075
mov byte [ebp - 0xf8], 0
lea eax, [ebp - 0xf8]
push eax
push 1
push 1
push 0x6455
call fcn.004719e4
add esp, 0x10
mov byte [ebp - 0x114], 0
movzx eax, byte [ebp - 0x114]
test eax, eax
je 0x4850a7
push 0x26a5
push 0x48a2
push 0x50ef
push 0
push 0x2a52
push 1
call fcn.0046c893
add esp, 0x18
lea eax, [ebp - 0x1180]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov dword [ebp - 0x1188], eax
mov dword [ebp - 0x214], 0xffffffff
push 2
lea ecx, [ebp - 0x1e84]
call fcn.00409f19
mov dword [ebp - 0x18e8], 0xfffffffd
push 0
push 0
lea eax, [ebp - 0x1f7c]
push eax
push 0x2bc6
push 0x3935
lea eax, [ebp - 0x1e84]
push eax
call fcn.0046d102
add esp, 0x18
mov dword [ebp - 0x214], 0xfffffff9
jmp 0x48511f
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0xf
jl 0x4852b3
mov dword [ebp - 0x21c], 8
mov dword [ebp - 0xf54], 0xfffd
mov dword [ebp - 0x21c], 1
jmp 0x485159
mov eax, dword [ebp - 0x21c]
dec eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0
jl 0x4852a1
mov dword [ebp - 0x2c4], 0
push 3
lea ecx, [ebp - 0x1b90]
call fcn.00409f19
push 0
push 0x1f11
push 0x150b
push 0x712b
push 0x2b2a
lea eax, [ebp - 0x2224]
push eax
push 0x6cd5
push 1
push 0x7ed8
lea eax, [ebp - 0x1b90]
push eax
push 0x36b1
push 0x1a83
push 0x77e1
call fcn.0047f0e2
add esp, 0x34
mov dword [ebp - 0x2c4], 1
jmp 0x4851dd
mov eax, dword [ebp - 0x2c4]
dec eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
jl 0x48526f
mov dword [ebp - 0x142c], 0xac9d73df
push 0x47cf
push 0x340e
lea eax, [ebp - 0x214]
push eax
push 0x3a53
lea eax, [ebp - 0x2c4]
push eax
push 0xd5f
lea eax, [ebp - 0x18e8]
push eax
push 0x387e
push 0
push 1
push 0x24a5
lea eax, [ebp - 0x21c]
push eax
push 0x665d
lea eax, [ebp - 0x1b90]
push eax
push 0x6598
push 0x189c
lea eax, [ebp - 0x142c]
push eax
push 1
push 0x1605
push 0x313
lea eax, [ebp - 0x1e84]
push eax
call fcn.0046f840
add esp, 0x54
jmp 0x4851d0
push 1
lea ecx, [ebp - 0x1b90]
call fcn.00409fe1
cmp dword [eax], 0
je 0x485291
lea ecx, [ebp - 0x1b90]
call fcn.00409fc5
jmp 0x48514c
lea ecx, [ebp - 0x1b90]
call fcn.00409fc5
jmp 0x48514c
mov eax, dword [ebp - 0xf54]
dec eax
mov dword [ebp - 0xf54], eax
jmp 0x485112
lea ecx, [ebp - 0x1e84]
call fcn.00409fc5
mov dword [ebp - 0x93c], 0xcefa9d19
mov dword [ebp - 0xb2c], 0xc14173bf
mov dword [ebp - 0x3d4], 0xffffffff
push 1
lea ecx, [ebp - 0xa3c]
call fcn.00409f19
mov dword [ebp - 0x9bc], 0x7104272b
push 1
push 0
lea eax, [ebp - 0x1f84]
push eax
lea eax, [ebp - 0xa3c]
push eax
call fcn.0047ec8f
add esp, 0x10
mov dword [ebp - 0xb2c], 0xffffffff
mov eax, dword [ebp - 0xb2c]
cmp dword [ebp - 0x93c], eax
jge 0x48534c
mov eax, dword [ebp - 0x9bc]
inc eax
mov dword [ebp - 0x9bc], eax
mov eax, dword [ebp - 0x9bc]
cmp dword [ebp - 0x93c], eax
jg 0x48534c
mov dword [ebp - 0x116c], 1
jmp 0x485353
and dword [ebp - 0x116c], 0
push 0
lea ecx, [ebp - 0xa3c]
call fcn.00409fe1
mov esi, eax
push 0
lea ecx, [ebp - 0xa3c]
call fcn.00409fe1
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x485381
mov dword [ebp - 0x1a08], 1
jmp 0x485388
and dword [ebp - 0x1a08], 0
push 0
lea ecx, [ebp - 0xa3c]
call fcn.00409fe1
mov esi, dword [ebp - 0x93c]
push 0
lea ecx, [ebp - 0xa3c]
call fcn.00409fe1
imul esi, dword [eax]
cmp dword [ebp - 0x116c], esi
jg 0x4853bf
mov dword [ebp - 0xb34], 1
jmp 0x4853c6
and dword [ebp - 0xb34], 0
cmp dword [ebp - 0xb34], 0x89480189
jae 0x4853de
mov dword [ebp - 0xa28], 1
jmp 0x4853e5
and dword [ebp - 0xa28], 0
push 0
lea ecx, [ebp - 0xa3c]
call fcn.00409fe1
mov ecx, dword [ebp - 0xa28]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa28]
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0
je 0x485517
mov dword [ebp - 0x1c6c], 0xfffffffe
mov dword [ebp - 0x1c68], 0xfffffffe
mov dword [ebp - 0x1c64], 0xfffffffe
mov dword [ebp - 0x1c60], 0xfffffffe
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1c6c], 0x2b94
jge 0x48545a
mov dword [ebp - 0xf5c], 1
jmp 0x485461
and dword [ebp - 0xf5c], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1c6c], 0xc3ae
jl 0x485480
mov dword [ebp - 0xb3c], 1
jmp 0x485487
and dword [ebp - 0xb3c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1c6c]
mov dword [ebp - 0x23b4], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1c6c]
mov dword [ebp - 0x1f8c], eax
push 0
lea ecx, [ebp - 0xa3c]
call fcn.00409fe1
cmp dword [eax], 0xd0127420
jae 0x4854ce
mov dword [ebp - 0x1314], 1
jmp 0x4854d5
and dword [ebp - 0x1314], 0
mov eax, dword [ebp - 0x1314]
mov dword [ebp - 0x3d4], eax
mov esi, dword [ebp - 0x3d4]
push 0
lea ecx, [ebp - 0xa3c]
call fcn.00409fe1
mov dword [eax], esi
mov byte [ebp - 0xfa], 0
push 0x5085
lea eax, [ebp - 0xfa]
push eax
push 0
push 0
call fcn.0047e144
add esp, 0x10
jmp 0x48555c
mov byte [ebp - 0x145], 0
movzx eax, byte [ebp - 0x145]
test eax, eax
je 0x48555c
push 0xf20
push 0x214b
push 0x340
push 0x1c8a
push 0xebb
push 0x1582
push 0x241c
push 0x1b9
push 0xaad
call dword [sym.imp.GDI32.dll_Arc]
lea ecx, [ebp - 0xa3c]
call fcn.00409fc5
mov dword [ebp - 0x58], 0x4914d2ed
mov dword [ebp - 0x908], 0x592c
mov dword [ebp - 0x944], 0
mov dword [ebp - 0x9c4], 0x678e045
mov dword [ebp - 0x1434], 0x27f44fb6
mov dword [ebp - 0x2230], 0xb996340c
push 2
lea ecx, [ebp - 0x20f0]
call fcn.00409f19
mov dword [ebp - 0x1f94], 0x6a4a
mov dword [ebp - 0x1a10], 0
mov dword [ebp - 0x1444], 0xd8d86f2f
push 0x2690
push 0x4401
push 1
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x20f0]
push eax
push 0x58a6
push 0x6201
push 1
call fcn.0046c195
add esp, 0x20
mov dword [ebp - 0x294], 0
jmp 0x485612
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 3
jge 0x48562e
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x27f8], 0xffffffff
jmp 0x485605
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jne 0x4856d8
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x233c], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x58], eax
jg 0x48565b
mov dword [ebp - 0xb44], 1
jmp 0x485662
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0xb44]
sub eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x908]
lea eax, [eax + ecx - 0xed1e]
test eax, eax
jb 0x48568e
cmp dword [ebp - 0x58], 0
je 0x48568e
mov dword [ebp - 0xf64], 1
jmp 0x485695
and dword [ebp - 0xf64], 0
mov eax, dword [ebp - 0xf64]
mov dword [ebp - 0x944], eax
cmp dword [ebp - 0x944], 0xab06
jle 0x4856b9
mov dword [ebp - 0xb4c], 1
jmp 0x4856c0
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0xb4c]
add eax, 5
jne 0x4856d8
and dword [ebp - 0x1174], 0
jmp 0x4856e2
mov dword [ebp - 0x1174], 1
mov eax, dword [ebp - 0x908]
imul eax, dword [ebp - 0x1174]
add eax, dword [ebp - 0x908]
mov dword [ebp - 0x9c4], eax
je 0x4858ad
mov dword [ebp - 0x18f4], 0xffffffff
mov dword [ebp - 0x143c], 0x88af16de
mov dword [ebp - 0x1f9c], 0xfffffffd
mov dword [ebp - 0x223c], 0
mov dword [ebp - 0x1fa4], 0x299b5f27
mov dword [ebp - 0x23c8], 8
mov dword [ebp - 0x1fac], 0
mov dword [ebp - 0x2248], 0xfffffff9
mov dword [ebp - 0x1fb4], 0xfffffffd
mov dword [ebp - 0x2344], 0x6c132d45
push 4
lea ecx, [ebp - 0x20d0]
call fcn.00409f19
mov dword [ebp - 0x1fbc], 0x86cc6b0c
mov dword [ebp - 0x2254], 2
mov dword [ebp - 0x1fc4], 0xd1334807
mov dword [ebp - 0x23d0], 2
mov dword [ebp - 0x1fcc], 0
mov dword [ebp - 0x8c], 0
jmp 0x4857bd
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x4857df
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x20d0]
call fcn.00409fe1
mov dword [eax], 0x70c30f14
jmp 0x4857b0
mov dword [ebp - 0x8c], 0
jmp 0x4857f8
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x485814
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x2a18], 7
jmp 0x4857eb
lea eax, [ebp - 0x1434]
push eax
push 0
push 0x1050
lea eax, [ebp - 0x18f4]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x944]
push eax
lea eax, [ebp - 0x908]
push eax
push 0x675
lea eax, [ebp - 0x143c]
push eax
lea eax, [ebp - 0x9c4]
push eax
push 1
push 0x5a8d
push 0x3a54
call fcn.00480086
add esp, 0x34
push 0x19da
push 0
push 0x7915
push 0xa64
push 0x30d
push 0x6cd5
push 0x5341
push 0x312d
push 1
push 0x88a
lea eax, [ebp - 0x1a10]
push eax
call fcn.0047d707
add esp, 0x2c
lea ecx, [ebp - 0x20d0]
call fcn.00409fc5
jmp 0x485933
mov dword [ebp - 0x2264], 0xfffffff7
push 1
lea ecx, [ebp - 0x20e0]
call fcn.00409f19
mov dword [ebp - 0x3dc], 0
jmp 0x4858dd
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 1
jge 0x4858ff
push dword [ebp - 0x3dc]
lea ecx, [ebp - 0x20e0]
call fcn.00409fe1
mov dword [eax], 0x9ad35785
jmp 0x4858d0
push 0x637d
push 0x17f5
push 1
push 1
push 0
lea eax, [ebp - 0x1444]
push eax
push 0x6e48
push 0x458b
call fcn.0047fd9b
add esp, 0x20
lea ecx, [ebp - 0x20e0]
call fcn.00409fc5
lea ecx, [ebp - 0x20f0]
call fcn.00409fc5
push 0x61d1
push 0x7e01
push 0x6b1e
push 0x7174
push 0x1ea0
push 0x6def
push 0x265d
push 1
push 0
push 1
push 0x519a
push 0x36e7
push 0x7210
push 0xfed
call fcn.0046f1ab
add esp, 0x38
mov dword [ebp - 0x1a48], 0x37ffeac8
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x224], 0
jmp 0x4859b0
mov eax, dword [ebp - 0x224]
dec eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0xffffffed
je 0x4859d4
push 1
push 1
push 0
call fcn.004808b7
add esp, 0xc
cmp dword [ebp - 0x224], 0
je 0x4859d2
jmp 0x4859d4
jmp 0x4859a3
mov byte [ebp - 0xfc], 0
lea eax, [ebp - 0xfc]
push eax
push 0x5e03
push 1
push 0x60dd
push 0
push 1
push 0x529c
push 0x7fbf
call fcn.004823bf
add esp, 0x20
mov dword [ebp - 0x14b4], 0x3e4f6f48
mov dword [ebp - 0xe8], 0x49f6d4a0
mov dword [ebp - 0x94c], 0
mov dword [ebp - 0xb54], 0x43ac
mov dword [ebp - 0x1900], str.sxdzzjesh_fwjau_zlwc_qiglnz_wxnhs_inyxazyvc_agftxigit_nzpkk_voggmbzp
cmp dword [ebp - 0xb54], 0x442f
jle 0x485af0
and dword [ebp - 0x810], 0
jmp 0x485a5c
mov eax, dword [ebp - 0x810]
inc eax
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 0x118e
jge 0x485af0
and dword [ebp - 0x70c], 0
jmp 0x485a82
mov eax, dword [ebp - 0x70c]
inc eax
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x70c], 0x550b
jge 0x485aeb
and dword [ebp - 0x3e4], 0
jmp 0x485aa4
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0x61f3
jge 0x485ae9
mov ecx, dword [ebp - 0x70c]
add ecx, dword [ebp - 0x3e4]
mov eax, dword [ebp - 0x810]
shl eax, cl
cdq
mov dword [ebp - 0x1614], eax
mov dword [ebp - 0x1610], edx
push dword [ebp - 0x1610]
push dword [ebp - 0x1614]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x485a97
jmp 0x485a75
jmp 0x485a4f
mov dword [ebp - 0xb64], 0x5e32
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0xb54], 0x4177
jge 0x485b1d
mov edx, dword [ebp - 0x1900]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x485b39
or dword [ebp - 4], 0xffffffff
jmp 0x485b43
mov dword [ebp - 0x1a20], 0x4d441147
mov dword [ebp - 0x1fd4], 0x3d8e66c
mov dword [ebp - 0xf6c], 0x4e3a
mov dword [ebp - 0x144c], str.arra_uqdciwat_yltcpkhp_irlldqrto_kptegomhj
cmp dword [ebp - 0xf6c], 0x513a
jle 0x485c21
and dword [ebp - 0x3ec], 0
jmp 0x485b91
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 0x3266
jge 0x485c11
and dword [ebp - 0x514], 0
jmp 0x485bb3
mov eax, dword [ebp - 0x514]
inc eax
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 0x515d
jge 0x485c0c
mov eax, dword [ebp - 0x3ec]
add eax, dword [ebp - 0x514]
cdq
mov dword [ebp - 0x1620], eax
mov dword [ebp - 0x161c], edx
push dword [ebp - 0x161c]
push dword [ebp - 0x1620]
lea ecx, [ebp - 0x2624]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x2624]
call fcn.00409baf
jmp 0x485ba6
jmp 0x485b84
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
mov dword [ebp - 0x3f4], 0
jmp 0x485c3a
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 2
jge 0x485c56
mov eax, dword [ebp - 0x3f4]
mov dword [ebp + eax*4 - 0x1e8], 0x8070
jmp 0x485c2d
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0xf6c], 0x4e1f
jge 0x485c75
push dword [ebp - 0x144c]
call fcn.00499a27
pop ecx
jmp 0x485c91
or dword [ebp - 4], 0xffffffff
jmp 0x485c9b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e8]
mov dword [ebp - 0x234c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e8]
mov dword [ebp - 0x1fdc], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x1e8]
cmp dword [ebp + eax - 0x1e8], ecx
jne 0x485d16
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1e8], 0
jne 0x485d16
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1e8], 0
jne 0x485d16
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1e8], 0
jne 0x485d16
and dword [ebp - 0xb5c], 0
jmp 0x485d20
mov dword [ebp - 0xb5c], 1
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe8], 0x14
jmp 0x485d45
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xffffffef
jne 0x48623c
mov dword [ebp - 0xa04], 1
mov dword [ebp - 0x190c], 2
mov dword [ebp - 0xf84], 9
mov dword [ebp - 0x127c], 0x4b2f
mov dword [ebp - 0x1a18], str.dlqm_blkhtis_srxhwd_whs_xrj_zygqhakq_uemi_vaych
cmp dword [ebp - 0x127c], 0x4ed5
jle 0x485e3c
and dword [ebp - 0x520], 0
jmp 0x485daa
mov eax, dword [ebp - 0x520]
inc eax
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 0x660d
jge 0x485e3c
and dword [ebp - 0x518], 0
jmp 0x485dd0
mov eax, dword [ebp - 0x518]
inc eax
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0x6284
jge 0x485e37
and dword [ebp - 0x3fc], 0
jmp 0x485df2
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0xfd0
jge 0x485e35
mov eax, dword [ebp - 0x518]
sub eax, dword [ebp - 0x3fc]
and eax, dword [ebp - 0x520]
cdq
mov dword [ebp - 0x162c], eax
mov dword [ebp - 0x1628], edx
push dword [ebp - 0x1628]
push dword [ebp - 0x162c]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x485de5
jmp 0x485dc3
jmp 0x485d9d
mov dword [ebp - 0x404], 0xffffffff
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x127c], 0x48cd
jge 0x485e69
mov edx, dword [ebp - 0x1a18]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x485e85
or dword [ebp - 4], 0xffffffff
jmp 0x485e8f
mov dword [ebp - 0x9cc], 0xffffffff
mov dword [ebp - 0xa4], 0
jmp 0x485eb2
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x485ece
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x222c], 0xc0de450b
jmp 0x485ea5
mov dword [ebp - 0xa4], 0
jmp 0x485ee7
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x485f03
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x2374], 0xffff
jmp 0x485eda
cmp dword [ebp - 0xa04], 0xfffffffe
jne 0x485f18
mov dword [ebp - 0x954], 1
jmp 0x485f1f
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0xb64]
dec eax
mov dword [ebp - 0xb64], eax
mov dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x2274], eax
mov eax, dword [ebp - 0xa04]
cmp dword [ebp - 0x404], eax
jle 0x485f5c
mov dword [ebp - 0xf74], 1
jmp 0x485f63
and dword [ebp - 0xf74], 0
mov eax, dword [ebp - 0xf74]
neg eax
add eax, dword [ebp - 0xe8]
je 0x485f81
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1e8], 0
mov eax, 0x4840c2c
test eax, eax
je 0x485fa6
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2374], 0
je 0x485fa6
mov dword [ebp - 0xb6c], 1
jmp 0x485fad
and dword [ebp - 0xb6c], 0
mov eax, dword [ebp - 0xf84]
cmp dword [ebp - 0xb6c], eax
jge 0x485fc7
mov dword [ebp - 0x117c], 1
jmp 0x485fce
and dword [ebp - 0x117c], 0
cmp dword [ebp - 0x117c], 1
jl 0x485fe3
mov dword [ebp - 0xb74], 1
jmp 0x485fea
and dword [ebp - 0xb74], 0
mov eax, dword [ebp - 0x9cc]
add eax, dword [ebp - 0xb74]
sub eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x404]
jne 0x486010
mov dword [ebp - 0xf7c], 1
jmp 0x486017
and dword [ebp - 0xf7c], 0
mov eax, dword [ebp - 0xf7c]
sub eax, 4
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x2374]
jle 0x48603b
mov dword [ebp - 0xb7c], 1
jmp 0x486042
and dword [ebp - 0xb7c], 0
mov eax, dword [ebp - 0x9cc]
cmp dword [ebp - 0xb7c], eax
jle 0x486065
cmp dword [ebp - 0x94c], 0
je 0x486065
mov dword [ebp - 0x1368], 1
jmp 0x48606c
and dword [ebp - 0x1368], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x1368], eax
jg 0x486086
mov dword [ebp - 0xb84], 1
jmp 0x48608d
and dword [ebp - 0xb84], 0
cmp dword [ebp - 0xb84], 6
jl 0x4860a2
mov dword [ebp - 0xb8c], 1
jmp 0x4860a9
and dword [ebp - 0xb8c], 0
mov eax, dword [ebp - 0xf84]
add eax, dword [ebp - 0xb8c]
mov dword [ebp - 0x404], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e8]
cmp dword [ebp - 0x404], eax
jne 0x4860dc
mov dword [ebp - 0x1184], 1
jmp 0x4860e3
and dword [ebp - 0x1184], 0
mov eax, dword [ebp - 0xa04]
cmp eax, dword [ebp - 0x1184]
jg 0x4860fd
mov dword [ebp - 0xb94], 1
jmp 0x486104
and dword [ebp - 0xb94], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e8]
cmp dword [ebp - 0xb94], eax
jle 0x486125
mov dword [ebp - 0xf8c], 1
jmp 0x48612c
and dword [ebp - 0xf8c], 0
cmp dword [ebp - 0xf8c], 0xc919
jge 0x486144
mov dword [ebp - 0xb9c], 1
jmp 0x48614b
and dword [ebp - 0xb9c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x954]
mov dword [ebp + eax - 0x222c], ecx
mov eax, dword [ebp - 0x954]
cmp eax, dword [ebp - 0xb9c]
jle 0x486178
mov dword [ebp - 0x1284], 1
jmp 0x48617f
and dword [ebp - 0x1284], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e8]
imul eax, dword [ebp - 0x1284]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x2374]
je 0x4861ae
mov dword [ebp - 0xba4], 1
jmp 0x4861b5
and dword [ebp - 0xba4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e8]
cmp dword [ebp - 0xba4], eax
jle 0x4861d6
mov dword [ebp - 0x1454], 1
jmp 0x4861dd
and dword [ebp - 0x1454], 0
cmp dword [ebp - 0x190c], 0x6cbc
jle 0x4861f5
mov dword [ebp - 0x145c], 1
jmp 0x4861fc
and dword [ebp - 0x145c], 0
mov eax, dword [ebp - 0x9cc]
mov dword [ebp - 0x1fe4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1e8], 0xffffffff
jle 0x486224
mov dword [ebp - 0xf94], 1
jmp 0x48622b
and dword [ebp - 0xf94], 0
mov eax, dword [ebp - 0xf94]
mov dword [ebp - 0x1a20], eax
jmp 0x485d38
mov dword [ebp - 0x94], 0
jmp 0x486255
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x486271
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x1340], 0x825e
jmp 0x486248
mov dword [ebp - 0xbac], 0x637b
mov dword [ebp - 0x1464], str.rxyxqndf_jfxoyin_vnpxzh_cbnqafzfl_rgdfdynbo_fvdv_tctxxjy
cmp dword [ebp - 0xbac], 0x63a7
jle 0x486392
and dword [ebp - 0x528], 0
jmp 0x4862ab
mov eax, dword [ebp - 0x528]
inc eax
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0x7132
jge 0x486392
and dword [ebp - 0x40c], 0
jmp 0x4862d1
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0x3f40
jge 0x48638d
and dword [ebp - 0x530], 0
jmp 0x4862f7
mov eax, dword [ebp - 0x530]
inc eax
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 0x5122
jge 0x486388
and dword [ebp - 0x414], 0
jmp 0x48631d
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0x907
jge 0x486383
mov eax, dword [ebp - 0x528]
imul eax, dword [ebp - 0x40c]
xor eax, dword [ebp - 0x530]
xor eax, dword [ebp - 0x414]
cdq
mov dword [ebp - 0x1638], eax
mov dword [ebp - 0x1634], edx
push dword [ebp - 0x1634]
push dword [ebp - 0x1638]
lea ecx, [ebp - 0x2828]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x2828]
call fcn.00409baf
jmp 0x486310
jmp 0x4862ea
jmp 0x4862c4
jmp 0x48629e
mov dword [ebp - 0x2ec], 0xffffffff
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0xbac], 0x6251
jge 0x4863bb
push dword [ebp - 0x1464]
call fcn.00499a27
pop ecx
jmp 0x4863d7
or dword [ebp - 4], 0xffffffff
jmp 0x4863e1
push 2
lea ecx, [ebp - 0x1ed8]
call fcn.00409f19
mov dword [ebp - 0x118c], 0x7f70
mov dword [ebp - 0x1918], str.dvofis_iidyn_clhkxuw_hgfu_oxi_ttofn_ghz_zivlvrms_arwbgdor_eci
cmp dword [ebp - 0x118c], 0x81b7
jle 0x486485
and dword [ebp - 0x538], 0
jmp 0x486424
mov eax, dword [ebp - 0x538]
inc eax
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x538], 0x919
jge 0x486485
and dword [ebp - 0x41c], 0
jmp 0x486446
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0x6090
jge 0x486483
mov eax, dword [ebp - 0x538]
and eax, dword [ebp - 0x41c]
cdq
mov dword [ebp - 0x1644], eax
mov dword [ebp - 0x1640], edx
push dword [ebp - 0x1640]
push dword [ebp - 0x1644]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x486439
jmp 0x486417
mov dword [ebp - 0x146c], 0xfffffffd
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x118c], 0x7bd3
jge 0x4864b2
mov edx, dword [ebp - 0x1918]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x4864ce
or dword [ebp - 4], 0xffffffff
jmp 0x4864d8
push 0x637c
push 1
lea eax, [ebp - 0x1ed8]
push eax
push 0
lea eax, [ebp - 0x23d4]
push eax
push 0x3dfd
call fcn.00475dd5
add esp, 0x18
mov dword [ebp - 0x2ec], 0xfffffff9
jmp 0x486515
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0xf
jl 0x48663c
mov dword [ebp - 0x22c], 8
mov dword [ebp - 0x1474], 0xfffd
mov dword [ebp - 0x22c], 1
jmp 0x48654f
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jl 0x48661f
mov dword [ebp - 0x1a28], 0
push 3
lea ecx, [ebp - 0x1ba0]
call fcn.00409f19
push 0
lea eax, [ebp - 0x1ba0]
push eax
push 0x2526
lea eax, [ebp - 0x1fec]
push eax
push 0x62ae
push 0x5658
push 0x7c5a
push 1
push 0x3167
push 1
call fcn.00479408
add esp, 0x28
lea eax, [ebp - 0x2ec]
push eax
push 1
push 0x56ad
lea eax, [ebp - 0x146c]
push eax
push 0x6d68
push 0x5e68
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x1a28]
push eax
push 1
lea eax, [ebp - 0x1ed8]
push eax
lea eax, [ebp - 0x1ba0]
push eax
call fcn.00471a82
add esp, 0x2c
push 1
lea ecx, [ebp - 0x1ba0]
call fcn.00409fe1
cmp dword [eax], 0
je 0x48660f
lea ecx, [ebp - 0x1ba0]
call fcn.00409fc5
jmp 0x486542
lea ecx, [ebp - 0x1ba0]
call fcn.00409fc5
jmp 0x486542
push 0
push 0x7bee
lea eax, [ebp - 0x1474]
push eax
push 0
call fcn.00477a24
add esp, 0x10
jmp 0x486508
lea ecx, [ebp - 0x1ed8]
call fcn.00409fc5
mov dword [ebp - 0x94], 0
jmp 0x486660
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x48667c
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x1674], 0x2305aba9
jmp 0x486653
mov dword [ebp - 0xf9c], 0x6d4e
mov dword [ebp - 0x147c], str.hrehotk_fnmmgjjdw_mskbinow_lwih_ybgh_tffkag_lcp_fdg_ertfpaz_osmpzdsw_wxrshv_sigzqxfs
cmp dword [ebp - 0xf9c], 0x6e00
jle 0x48674c
push 0x78d
push 0
push 0
push 0xbc4
call dword [sym.imp.GDI32.dll_PolyPolygon]
and dword [ebp - 0x540], 0
jmp 0x4866ca
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 0x454b
jge 0x48674c
and dword [ebp - 0x424], 0
jmp 0x4866ec
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0x231f
jge 0x486747
mov eax, dword [ebp - 0x540]
mov ecx, dword [ebp - 0x424]
sar eax, cl
cdq
mov dword [ebp - 0x1650], eax
mov dword [ebp - 0x164c], edx
push dword [ebp - 0x164c]
push dword [ebp - 0x1650]
lea ecx, [ebp - 0x2654]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x2654]
call fcn.00409baf
jmp 0x4866df
jmp 0x4866bd
mov dword [ebp - 0xbb4], 0x4c63
mov dword [ebp - 0x1924], str.ogxuex_ejtmasjgy_vdnl_yvicmq_hsny_fvtrykavb_cstuwpsv_ojwpuo_lqovy_inyfkglxi_lzkcbncrw_jnonx_vigzsplsj
cmp dword [ebp - 0xbb4], 0x4f50
jle 0x48684b
and dword [ebp - 0x550], 0
jmp 0x486786
mov eax, dword [ebp - 0x550]
inc eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0x17e7
jge 0x48684b
and dword [ebp - 0x548], 0
jmp 0x4867ac
mov eax, dword [ebp - 0x548]
inc eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0x7452
jge 0x486846
and dword [ebp - 0x42c], 0
jmp 0x4867d2
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0x1876
jge 0x486841
and dword [ebp - 0x434], 0
jmp 0x4867f4
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0x590e
jge 0x48683f
mov ecx, dword [ebp - 0x548]
add ecx, dword [ebp - 0x42c]
mov eax, dword [ebp - 0x550]
sar eax, cl
and eax, dword [ebp - 0x434]
cdq
mov dword [ebp - 0x165c], eax
mov dword [ebp - 0x1658], edx
push dword [ebp - 0x1658]
push dword [ebp - 0x165c]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x4867e7
jmp 0x4867c5
jmp 0x48679f
jmp 0x486779
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0xbb4], 0x4be5
jge 0x48686e
mov edx, dword [ebp - 0x1924]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x48688a
or dword [ebp - 4], 0xffffffff
jmp 0x486894
mov dword [ebp - 0x43c], 1
mov dword [ebp - 0x558], 0
jmp 0x4868b7
mov eax, dword [ebp - 0x558]
inc eax
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 4
jge 0x4868d3
mov eax, dword [ebp - 0x558]
mov dword [ebp + eax*4 - 0x2528], 0x9841
jmp 0x4868aa
mov dword [ebp - 0x43c], 0
jmp 0x4868ec
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x43c], 3
jg 0x486a3a
mov dword [ebp - 0x560], 9
mov dword [ebp - 0x560], 0
jmp 0x48691c
mov eax, dword [ebp - 0x560]
inc eax
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x560], 3
jg 0x4869bb
mov dword [ebp - 0x444], 0
jmp 0x486942
mov eax, dword [ebp - 0x444]
inc eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 1
jge 0x48695e
mov eax, dword [ebp - 0x444]
mov dword [ebp + eax*4 - 0x29c], 0xfffffff9
jmp 0x486935
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x29c], 0
jmp 0x48698c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x29c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x29c], 4
jge 0x4869b6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp + eax*4 - 0x2528], 0xffff
jmp 0x486971
jmp 0x48690f
mov byte [ebp - 0x116], 0
movzx eax, byte [ebp - 0x116]
test eax, eax
je 0x486a35
push 0x2137
push 0x5b50
push 0x14bf
push 0x35a1
push 0x126f
push 0x4f11
push 0x2bc8
push 0x3de4
push 1
push 0
push 0x536b
push 0x70e0
push 0x3eb8
push 0x236c
push 0x635a
push 0x4a8d
push 0x639f
push 0
push 0x39e1
push 0x5870
push 0x38f9
call fcn.0046f840
add esp, 0x54
jmp 0x4868df
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0xf9c], 0x6be8
jge 0x486a59
push dword [ebp - 0x147c]
call fcn.00499a27
pop ecx
jmp 0x486a75
or dword [ebp - 4], 0xffffffff
jmp 0x486a7f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1340], 0
je 0x487828
mov dword [ebp - 0xbbc], 0x7d0f
mov dword [ebp - 0x1a30], str.ktzadje_shulr_sigivuutj_xjrb
cmp dword [ebp - 0xbbc], 0x7d53
jle 0x486bb5
and dword [ebp - 0x570], 0
jmp 0x486acc
mov eax, dword [ebp - 0x570]
inc eax
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 0x51f8
jge 0x486bb5
and dword [ebp - 0x568], 0
jmp 0x486af2
mov eax, dword [ebp - 0x568]
inc eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 0x1721
jge 0x486bb0
and dword [ebp - 0x44c], 0
jmp 0x486b18
mov eax, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0x109b
jge 0x486bab
and dword [ebp - 0x454], 0
jmp 0x486b3e
mov eax, dword [ebp - 0x454]
inc eax
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0x143c
jge 0x486ba6
mov eax, dword [ebp - 0x568]
cdq
idiv dword [ebp - 0x44c]
mov eax, dword [ebp - 0x570]
sub eax, edx
and eax, dword [ebp - 0x454]
cdq
mov dword [ebp - 0x1668], eax
mov dword [ebp - 0x1664], edx
push dword [ebp - 0x1664]
push dword [ebp - 0x1668]
lea ecx, [ebp - 0x29a8]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x29a8]
call fcn.00409baf
jmp 0x486b31
jmp 0x486b0b
jmp 0x486ae5
jmp 0x486abf
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0xbbc], 0x7b2c
jge 0x486bd4
push dword [ebp - 0x1a30]
call fcn.00499a27
pop ecx
jmp 0x486bf0
or dword [ebp - 4], 0xffffffff
jmp 0x486bfa
mov dword [ebp - 0x3c], 0
jmp 0x486c0a
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x486c20
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x2128], 0xa6318529
jmp 0x486c03
mov dword [ebp - 0x3c], 0
jmp 0x486c30
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x486c46
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1bb0], 0xffffffff
jmp 0x486c29
mov dword [ebp - 0x3c], 0
jmp 0x486c56
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x486c6c
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1484], 4
jmp 0x486c4f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1bb0], 0
jmp 0x486c9a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bb0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1bb0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bb0], 1
jg 0x486cce
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bb0]
imul eax, dword [ebp + eax*4 - 0x2128], 0
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1484], eax
jmp 0x486c7f
mov dword [ebp - 0x1c0], 0x3a0f
mov dword [ebp - 0x96c], 0xe85fcb44
mov dword [ebp - 0x234], 0xe83c773
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x1494], 1
mov dword [ebp - 0xb4], 0
jmp 0x486d19
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x486d35
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x318], 0
jmp 0x486d0c
mov dword [ebp - 0xb4], 0
jmp 0x486d4e
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x486d6a
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x2438], 0xad24015e
jmp 0x486d41
mov dword [ebp - 0x234], 2
jmp 0x486d83
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
jl 0x487118
mov dword [ebp - 0x18], 0xbb11accb
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0x18], 0
jmp 0x486db1
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x487113
push 2
lea ecx, [ebp - 0x1ef0]
call fcn.00409f19
push 0x7f6a
push 0x5ed5
push 0
push 0x711c
lea eax, [ebp - 0x1ef0]
push eax
push 0
lea eax, [ebp - 0x2284]
push eax
push 1
push 0x2a0c
call fcn.00480747
add esp, 0x24
cmp dword [ebp - 0x234], 0xbd42ca8c
je 0x486e10
mov dword [ebp - 0x1930], 1
jmp 0x486e17
and dword [ebp - 0x1930], 0
mov eax, dword [ebp - 0x18]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x318]
cmp dword [ebp + eax*4 - 0x318], ecx
jle 0x486e3b
mov dword [ebp - 0x131c], 1
jmp 0x486e42
and dword [ebp - 0x131c], 0
cmp dword [ebp - 0x131c], 0x29f58382
jge 0x486e5a
mov dword [ebp - 0xbc4], 1
jmp 0x486e61
and dword [ebp - 0xbc4], 0
cmp dword [ebp - 0xbc4], 0
jne 0x486e76
mov dword [ebp - 0x148c], 1
jmp 0x486e7d
and dword [ebp - 0x148c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x318], 0
ja 0x486e96
mov dword [ebp - 0xfa4], 1
jmp 0x486e9d
and dword [ebp - 0xfa4], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x318]
cmp eax, dword [ebp - 0xfa4]
jl 0x486ebb
mov dword [ebp - 0xbcc], 1
jmp 0x486ec2
and dword [ebp - 0xbcc], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x318]
imul eax, dword [ebp - 0xbcc]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd0], 2
jmp 0x486ef2
cmp dword [ebp - 0xd0], 0
jl 0x487103
mov dword [ebp - 0xfb4], 0xffffffff
cmp dword [ebp - 0x18], 0
je 0x486f28
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x318], 0
je 0x486f28
and dword [ebp - 0x1194], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x1194]
mov ecx, dword [ebp - 0x18]
sub eax, dword [ebp + ecx*4 - 0x318]
cmp eax, 0xfff6
jae 0x486f56
lea ecx, [ebp - 0x1ef0]
call fcn.00409fc5
jmp 0x486daa
jmp 0x486d76
lea eax, [ebp - 0x1494]
push eax
push 0
push 0x4f9b
push 0
push 0x78f1
push 0x457d
call fcn.00482d10
add esp, 0x18
mov dword [ebp - 0x11b4], 8
mov dword [ebp - 0xe0], 0xfffffff6
mov dword [ebp - 0xe0], 0
jmp 0x487167
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xffffffe3
je 0x487281
mov dword [ebp - 0x2cc], 0x58d32ffa
mov dword [ebp - 0xbfc], 1
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 1
jne 0x487214
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x1ff4], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x2cc], eax
jge 0x4871c3
mov dword [ebp - 0xbf4], 1
jmp 0x4871ca
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0xbf4], eax
je 0x4871e4
mov dword [ebp - 0xfbc], 1
jmp 0x4871eb
and dword [ebp - 0xfbc], 0
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0xfbc]
add eax, dword [ebp - 0xe0]
neg eax
mov dword [ebp - 0xbfc], eax
je 0x487214
mov dword [ebp - 0x1358], 1
jmp 0x48721b
and dword [ebp - 0x1358], 0
mov eax, dword [ebp - 0x1358]
sub eax, 0x3b483900
jne 0x48724e
mov byte [ebp - 0xfe], 0
push 1
push 0x1bec
push 0x129a
lea eax, [ebp - 0xfe]
push eax
push 1
call fcn.00471f80
add esp, 0x14
jmp 0x48727c
mov dword [ebp - 0x193c], 0x4a90c6d2
push 0x4656
push 0x164f
push 0
push 1
call fcn.0047c5e9
add esp, 0x10
cmp dword [ebp - 0x193c], 0
je 0x48727c
jmp 0x48715a
jmp 0x48715a
push 0
push 0
push 0x36fe
push 0x3715
push 0x7bae
push 0x6b9
push 0x70a9
push 0x5237
push 0x5cd8
push 0x6ef9
call fcn.00473387
add esp, 0x28
mov dword [ebp - 0x184], 4
mov dword [ebp - 0x578], 0
jmp 0x4872d8
mov eax, dword [ebp - 0x578]
inc eax
mov dword [ebp - 0x578], eax
cmp dword [ebp - 0x578], 1
jge 0x4872f4
mov eax, dword [ebp - 0x578]
mov dword [ebp + eax*4 - 0xc04], 0
jmp 0x4872cb
mov dword [ebp - 0x184], 0
jmp 0x48730d
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jg 0x487346
mov dword [ebp - 0x149c], 1
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x184]
mov eax, dword [ebp + eax*4 - 0xc04]
mov dword [ebp + ecx*4 - 0xc04], eax
mov dword [ebp - 0x149c], 0xffffcb1a
jmp 0x487300
push 0x4d37
push 0x3d6a
push 1
push 1
push 0x4eb3
push 0
call fcn.00477337
add esp, 0x18
mov dword [ebp - 0x45c], 0
jmp 0x48737c
mov eax, dword [ebp - 0x45c]
inc eax
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 3
jge 0x487398
mov eax, dword [ebp - 0x45c]
mov dword [ebp + eax*4 - 0x1c90], 0
jmp 0x48736f
mov dword [ebp - 0xc14], 0x2285
mov dword [ebp - 0xfc4], 0xee1c
mov dword [ebp - 0x11a4], 0xffffffff
mov dword [ebp - 0x2354], 1
mov dword [ebp - 0x1948], 0xfffffff8
mov dword [ebp - 0xfcc], 0x96378555
mov dword [ebp - 0x9d4], 0x725245f5
mov dword [ebp - 0x14ac], 0xfffffff8
mov dword [ebp - 0x964], 0
mov dword [ebp - 0x580], 0
jmp 0x48740b
mov eax, dword [ebp - 0x580]
inc eax
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 2
jge 0x487427
mov eax, dword [ebp - 0x580]
mov dword [ebp + eax*4 - 0x13f0], 0
jmp 0x4873fe
mov eax, dword [ebp - 0xfc4]
mov dword [ebp - 0x1ffc], eax
mov eax, dword [ebp - 0x964]
inc eax
mov dword [ebp - 0x964], eax
mov eax, dword [ebp - 0x964]
inc eax
cmp dword [ebp - 0xfc4], eax
je 0x48745b
mov dword [ebp - 0xc0c], 1
jmp 0x487462
and dword [ebp - 0xc0c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13f0]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x13f0]
cmp eax, 0xfd77ccca
jb 0x48748f
mov byte [ebp - 0x16d], 0
mov dword [ebp - 0x464], 0x16b471df
mov dword [ebp - 0x11bc], 0x65e790e8
mov dword [ebp - 0x974], 0
push 1
lea ecx, [ebp - 0x1f08]
call fcn.00409f19
mov dword [ebp - 0x1954], 0x196e6c8c
mov dword [ebp - 0x2004], 0
mov dword [ebp - 0x2c], 0
jmp 0x48787e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x48789a
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1f08]
call fcn.00409fe1
mov dword [eax], 0xfffffffa
jmp 0x487877
mov dword [ebp - 0x2c], 0
jmp 0x4878aa
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x4878c0
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1cd4], 6
jmp 0x4878a3
mov dword [ebp - 0x2c], 0
jmp 0x4878d0
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x4878e6
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2454], 0x7736d0c1
jmp 0x4878c9
mov eax, 0xe60f
test eax, eax
je 0x487a27
cmp dword [ebp - 0x464], 0x47597a61
jg 0x48790b
mov dword [ebp - 0xc6c], 1
jmp 0x487912
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x129c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x129c]
mov dword [ebp + eax - 0x1cd4], ecx
cmp dword [ebp - 0x129c], 0x31
jl 0x48794b
or eax, 0xffffffff
je 0x48794b
mov dword [ebp - 0xc64], 1
jmp 0x487952
and dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0xff4], eax
push 0
lea ecx, [ebp - 0x1f08]
call fcn.00409fe1
mov ecx, dword [ebp - 0xff4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc64]
sub eax, dword [ebp - 0x464]
cmp dword [ebp - 0xff4], eax
jl 0x487993
mov dword [ebp - 0xc74], 1
jmp 0x48799a
and dword [ebp - 0xc74], 0
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0x11bc], eax
mov eax, dword [ebp - 0x11bc]
cmp eax, dword [ebp - 0xc74]
jg 0x4879c0
mov dword [ebp - 0xffc], 1
jmp 0x4879c7
and dword [ebp - 0xffc], 0
mov eax, dword [ebp - 0x464]
cmp dword [ebp - 0xffc], eax
jle 0x4879e1
mov dword [ebp - 0xa0c], 1
jmp 0x4879e8
and dword [ebp - 0xa0c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa0c]
mov dword [ebp + eax - 0x2454], ecx
cmp dword [ebp - 0xa0c], 0
jne 0x487a1b
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x487a1b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1cd4], 0
je 0x487a27
mov dword [ebp - 0xc7c], 1
jmp 0x487a2e
and dword [ebp - 0xc7c], 0
mov eax, dword [ebp - 0x974]
cmp dword [ebp - 0xc7c], eax
jge 0x487a48
mov dword [ebp - 0x135c], 1
jmp 0x487a4f
and dword [ebp - 0x135c], 0
mov eax, dword [ebp - 0x464]
cmp dword [ebp - 0x135c], eax
jg 0x487a69
mov dword [ebp - 0xc84], 1
jmp 0x487a70
and dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0xc84]
mov dword [ebp - 0x1954], eax
lea ecx, [ebp - 0x1f08]
call fcn.00409fc5
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x487c22
mov dword [ebp - 0x1004], 0x733e
mov dword [ebp - 0x1a50], str.ukvdqnep_uyxnhsd_ywutcmazw_dywm_kanuwtv_cmdwvvapu_iueuihv
cmp dword [ebp - 0x1004], 0x742f
jle 0x487b3a
push 0
call dword [sym.imp.USER32.dll_RegisterClassW]
and dword [ebp - 0x588], 0
jmp 0x487ad8
mov eax, dword [ebp - 0x588]
inc eax
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 0x5913
jge 0x487b3a
and dword [ebp - 0x46c], 0
jmp 0x487afa
mov eax, dword [ebp - 0x46c]
inc eax
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0x6af
jge 0x487b38
mov eax, dword [ebp - 0x588]
imul eax, dword [ebp - 0x46c]
cdq
mov dword [ebp - 0x1680], eax
mov dword [ebp - 0x167c], edx
push dword [ebp - 0x167c]
push dword [ebp - 0x1680]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x487aed
jmp 0x487acb
mov dword [ebp - 0x590], 0xfffffff8
push 1
push 0x7698
push 0x1775
push 0x7c35
push 0x69dd
push 0x22ed
push 1
push 0x4a9c
push 0x670
call fcn.004724f7
add esp, 0x24
mov dword [ebp - 0x590], 0
jmp 0x487b8c
mov eax, dword [ebp - 0x590]
dec eax
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 0xfffffff8
jle 0x487bac
mov dword [ebp - 0x14bc], 0xffff
cmp dword [ebp - 0x14bc], 0
je 0x487baa
jmp 0x487bac
jmp 0x487b7f
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x1004], 0x700b
jge 0x487bcf
mov edx, dword [ebp - 0x1a50]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x487beb
or dword [ebp - 4], 0xffffffff
jmp 0x487bf5
push 0x159f
push 0
push 0xa1f
push 0x1dac
push 0x1241
push 0
push 0xfab
push 0x212f
push 0x1685
call dword [sym.imp.USER32.dll_DrawIconEx]
mov byte [ebp - 0x100], 0
mov dword [ebp - 0x124], 0x915a1369
mov dword [ebp - 0x12a8], 5
cmp dword [ebp - 0x124], 0
jne 0x487c7d
xor eax, eax
jne 0x487c7d
cmp dword [ebp - 0x124], 0
jne 0x487c63
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x487c63
and dword [ebp - 0xc8c], 0
jmp 0x487c6d
mov dword [ebp - 0xc8c], 1
mov eax, dword [ebp - 0xc8c]
inc eax
je 0x487c90
push 4
pop eax
test eax, eax
je 0x487c90
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x487c90
mov dword [ebp - 0x11c4], 1
jmp 0x487c97
and dword [ebp - 0x11c4], 0
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0x11c4]
test eax, eax
jne 0x487cba
cmp dword [ebp - 0x124], 0
jne 0x487cba
and dword [ebp - 0xc94], 0
jmp 0x487cc4
mov dword [ebp - 0xc94], 1
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xc94], eax
je 0x487cde
mov dword [ebp - 0x100c], 1
jmp 0x487ce5
and dword [ebp - 0x100c], 0
mov eax, dword [ebp - 0x12a8]
cmp dword [ebp - 0x100c], eax
jne 0x487cff
mov dword [ebp - 0xc9c], 1
jmp 0x487d06
and dword [ebp - 0xc9c], 0
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0xc9c]
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0x12a8]
push eax
push 0x5737
push 1
push 0x53d7
push 0
call fcn.0047e2cc
add esp, 0x14
mov dword [ebp - 0xca4], 0x66d5
mov dword [ebp - 0x14c4], str.aqjmgnk_tguuind_mzidrf_jhxhh_jkih_vwq_wxrwiyyqs_nxi_cfth_ktjpul_tuoc_aqkoif_crwakt_dndq
cmp dword [ebp - 0xca4], 0x68c5
jle 0x487e56
and dword [ebp - 0x474], 0
jmp 0x487d70
mov eax, dword [ebp - 0x474]
inc eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 0xc10
jge 0x487e56
and dword [ebp - 0x598], 0
jmp 0x487d96
mov eax, dword [ebp - 0x598]
inc eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0x3787
jge 0x487e51
and dword [ebp - 0x47c], 0
jmp 0x487dbc
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 0x1acb
jge 0x487e4c
and dword [ebp - 0x5a0], 0
jmp 0x487de2
mov eax, dword [ebp - 0x5a0]
inc eax
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 0x6d34
jge 0x487e47
mov eax, dword [ebp - 0x474]
sub eax, dword [ebp - 0x598]
or eax, dword [ebp - 0x47c]
or eax, dword [ebp - 0x5a0]
cdq
mov dword [ebp - 0x168c], eax
mov dword [ebp - 0x1688], edx
push dword [ebp - 0x1688]
push dword [ebp - 0x168c]
lea ecx, [ebp - 0x2684]
call fcn.00401a71
pop ecx
pop ecx
mov ecx, eax
call fcn.00409bb9
push eax
call fcn.00499a27
pop ecx
lea ecx, [ebp - 0x2684]
call fcn.00409baf
jmp 0x487dd5
jmp 0x487daf
jmp 0x487d89
jmp 0x487d63
movzx eax, byte [ebp - 0x100]
test eax, eax
je 0x487ead
push 0x5bcc
push 1
push 1
push 1
push 0x1740
push 0x7cb7
push 0x73d2
call fcn.004726c9
add esp, 0x1c
push 0x789c
push 0
push 0x6c5d
push 0x6eac
push 1
push 0x106b
push 0x416e
push 0x65bc
call fcn.00481683
add esp, 0x20
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0xca4], 0x6316
jge 0x487ecc
push dword [ebp - 0x14c4]
call fcn.00499a27
pop ecx
jmp 0x487ee8
or dword [ebp - 4], 0xffffffff
jmp 0x487ef2
cmp dword [ebp - 0x1188], 0
je 0x495bb1
cmp dword [ebp - 0x1180], 1
jle 0x495bb1
mov dword [ebp - 0x23c4], 0x19195c58
mov dword [ebp - 0x2388], 6
mov dword [ebp - 0x2384], 6
mov dword [ebp - 0x2380], 6
mov dword [ebp - 0x237c], 6
mov dword [ebp - 0x484], 0
jmp 0x487f57
mov eax, dword [ebp - 0x484]
inc eax
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 3
jge 0x487f73
mov eax, dword [ebp - 0x484]
mov dword [ebp + eax*4 - 0x13e8], 0x25b9b55b
jmp 0x487f4a
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x13e8], 0xffffffe3
jmp 0x487f9e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x13e8], 0xffffffe9
jle 0x48844e
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0x23c], 0xef51
mov dword [ebp - 0x200c], 0x3d2afddf
mov dword [ebp - 0x22a4], 2
mov dword [ebp - 0x5a8], 0
jmp 0x487ff2
mov eax, dword [ebp - 0x5a8]
inc eax
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 1
jge 0x48800e
mov eax, dword [ebp - 0x5a8]
mov dword [ebp + eax*4 - 0x2014], 0xffffffff
jmp 0x487fe5
mov dword [ebp - 0x12c], 0xffffffeb
jmp 0x488027
cmp dword [ebp - 0x12c], 0x15
jne 0x488449
mov dword [ebp - 0x1d08], 0x3df75dce
mov dword [ebp - 0x1d04], 0x3df75dce
mov dword [ebp - 0x1d00], 0x3df75dce
mov dword [ebp - 0x1cfc], 0x3df75dce
lea ecx, [ebp - 0x9ed]
call fcn.0040a91e
push eax
lea eax, [ebp - 0x1cf8]
push eax
lea eax, [ebp - 0x1d08]
push eax
lea ecx, [ebp - 0x24d0]
call fcn.00422ae1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x200]
call fcn.00422abb
mov dword [ebp - 0xc0], 0xa35f394a
mov dword [ebp - 0x1024], 0x776d
mov dword [ebp - 0x14d4], str.qdyifjkh_piu_hibuplpt_srukiaheu_feavmtm_gvl_ultdy_ijkrg_mirln_yuqynbjd_pgxjmzyb
cmp dword [ebp - 0x1024], 0x7969
jle 0x488581
and dword [ebp - 0x4ac], 0
jmp 0x4884ef
cmp dword [ebp - 0x4ac], 0x469d
jge 0x488581
and dword [ebp - 0x4a4], 0
jmp 0x488515
mov dword [ebp - 0x11e4], 0x871e8ee
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x1024], 0x7481
jge 0x4885ae
mov edx, dword [ebp - 0x14d4]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x4885ca
or dword [ebp - 4], 0xffffffff
jmp 0x4885d4
push 0x1b6b
push 1
push 0x1d65
push 0x2613
push 0x7bf
push 1
call fcn.00480c46
add esp, 0x18
mov dword [ebp - 0x2b8], 0xffffffff
push 2
lea ecx, [ebp - 0x1dc4]
call fcn.00409f19
mov dword [ebp - 0x14e0], 0xfffffffd
lea eax, [ebp - 0x1dc4]
push eax
lea eax, [ebp - 0x2350]
push eax
push 0
push 0
call fcn.0047c5e9
add esp, 0x10
mov dword [ebp - 0x2b8], 0xfffffff9
jmp 0x495c25
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0xf
jl 0x495cc4
mov dword [ebp - 0x14d8], 8
mov dword [ebp - 0x14e8], 0xfffd
push 1
lea eax, [ebp - 0x14d8]
push eax
push 1
push 0x32f9
lea eax, [ebp - 0x1dc4]
push eax
push 0x7955
push 0x79b7
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x14e0]
push eax
push 0x4ef7
push 1
push 0x61f3
push 0x30de
call fcn.00480ee4
add esp, 0x34
push 0x3c52
push 0x46a8
push 0x54aa
push 0x247a
push 1
lea eax, [ebp - 0x14e8]
push eax
push 1
push 0x6288
push 0x3ad2
call fcn.0046f0b9
add esp, 0x24
jmp 0x495c18
lea ecx, [ebp - 0x1dc4]
call fcn.00409fc5
push 3
lea ecx, [ebp - 0x1df4]
call fcn.00409f19
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x1500], 0
mov dword [ebp - 0x11c0], 0x5502
mov dword [ebp - 0x14f0], str.bqteogaa_luhclx_lafg_wckplyd_cxfznq_qgirpy
cmp dword [ebp - 0x11c0], 0x56d5
jle 0x495d96
and dword [ebp - 0x86c], 0
jmp 0x495d2a
mov eax, dword [ebp - 0x86c]
inc eax
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 0xbd9
jge 0x495d8e
and dword [ebp - 0x874], 0
jmp 0x495d4c
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x874], 0x2069
jge 0x495d8c
mov eax, dword [ebp - 0x86c]
cdq
idiv dword [ebp - 0x874]
mov eax, edx
cdq
mov dword [ebp - 0x1998], eax
mov dword [ebp - 0x1994], edx
push dword [ebp - 0x1994]
push dword [ebp - 0x1998]
mov ecx, 0xae33d8
call fcn.00409bc4
jmp 0x495d3f
jmp 0x495d1d
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp - 0x1508], 9
mov dword [ebp - 4], 0xa6
cmp dword [ebp - 0x11c0], 0x52ce
jge 0x495dc3
mov edx, dword [ebp - 0x14f0]
mov ecx, 0xae33d8
call fcn.0040c802
jmp 0x495ddf
or dword [ebp - 4], 0xffffffff
jmp 0x495de9
push 4
lea ecx, [ebp - 0x1ddc]
call fcn.00409f19
push 0x706d
push 0x26f6
lea eax, [ebp - 0x1df4]
push eax
push 0x1045
push 0x42dc
push 0
push 0
lea eax, [ebp - 0x2c0]
push eax
push 1
call fcn.0047bf15
add esp, 0x24
mov dword [ebp - 0x2c0], 0
jmp 0x495e3f
cmp dword [ebp - 0x2c0], 4
jge 0x495e61
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x1ddc]
call fcn.00409fe1
mov dword [eax], 0x7ddbf4df
jmp 0x495e32
mov dword [ebp - 0x2c8], 0
jmp 0x495e7a
push 0
push 0
push 0
push 0
push 1
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
jmp 0x496bde
push 1
call fcn.00476ab1
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret