Function at 0x4761a9
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c99dd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x720
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x288], 0x5208
mov dword [ebp - 0x3b8], str.ufthbm_djwnh_lirlfqam_oyyp_najq_nfbmgibh_xdgkygyg_ssbwtm_fgyy_yzfdczi_ahqkavsto
cmp dword [ebp - 0x288], 0x52b3
jle 0x476277
and dword [ebp - 0x18], 0
jmp 0x4761ff
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x36d
jge 0x476277
and dword [ebp - 0x128], 0
jmp 0x47621e
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x1b3b
jge 0x476275
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x128]
cdq
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x4a0], edx
push dword [ebp - 0x4a0]
push dword [ebp - 0x4a4]
lea ecx, [ebp - 0x570]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x570]
call fcn.004030c4
jmp 0x476211
jmp 0x4761f8
cmp dword [ebp + 8], 2
jl 0x476b93
push 1
lea eax, [ebp - 0x6b4]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.00472147
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x528]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x528]
lea edi, [ebp - 0x514]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x2e4], 0x7c74
mov dword [ebp - 0x3c4], str.fan_zzlwsm_dthptwxbj_ngzslofz_jmnluhwdp_fxrantml
cmp dword [ebp - 0x2e4], 0x7e40
jle 0x47637f
and dword [ebp - 0x28], 0
jmp 0x4762e1
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x2e5f
jge 0x47637f
and dword [ebp - 0x20], 0
jmp 0x4762fb
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x5315
jge 0x47637a
and dword [ebp - 0x1b0], 0
jmp 0x47631a
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x57de
jge 0x476375
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x28]
shl eax, cl
cdq
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], edx
push dword [ebp - 0x40c]
push dword [ebp - 0x410]
lea ecx, [ebp - 0x660]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x660]
call fcn.004030c4
jmp 0x47630d
jmp 0x4762f4
jmp 0x4762da
cmp dword [ebp - 0x514], 0
je 0x47639c
push 0
push dword [ebp - 0x50c]
push dword [ebp - 0x510]
call dword [ebp - 0x514]
and dword [ebp - 4], 0
cmp dword [ebp - 0x2e4], 0x7b2c
jge 0x4763b8
push dword [ebp - 0x3c4]
call fcn.0049d905
pop ecx
jmp 0x4763d4
or dword [ebp - 4], 0xffffffff
jmp 0x4763de
mov dword [ebp - 0x294], 0x16ca
mov dword [ebp - 0x2f8], str.lcyfcw_kxudbcq_xemmkshu_ttygmw_jduss_khxktaz_ibkbv_urmst_npy_ukc_lbmajwng
cmp dword [ebp - 0x294], 0x19f2
jle 0x4764c7
and dword [ebp - 0x130], 0
jmp 0x476418
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x71f8
jge 0x4764bc
and dword [ebp - 0x30], 0
jmp 0x476435
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x5c45
jge 0x4764b7
and dword [ebp - 0x230], 0
jmp 0x476454
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x6ee0
jge 0x4764b2
mov eax, dword [ebp - 0x130]
sub eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x230]
shl eax, cl
cdq
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], edx
push dword [ebp - 0x4ac]
push dword [ebp - 0x4b0]
lea ecx, [ebp - 0x5a0]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x5a0]
call fcn.004030c4
jmp 0x476447
jmp 0x47642e
jmp 0x47640b
push 0x262
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
call fcn.0049d9f1
mov dword [ebp - 4], 2
cmp dword [ebp - 0x294], 0x1443
jge 0x4764eb
push dword [ebp - 0x2f8]
call fcn.0049d905
pop ecx
jmp 0x476507
or dword [ebp - 4], 0xffffffff
jmp 0x476511
mov dword [ebp - 0x24c], 0x409f
mov dword [ebp - 0x46c], str.eiuhkcp_ixymegj_cminbtgle_zvoainms_mabz_oglykszir_iogjeoy_pwjcc_bavr_dadchwtkx_wstbdod_xjp_mqau
mov dword [ebp - 0x2d4], 0x5a1c
mov dword [ebp - 0x304], str.qtia_juwq_cer_cok_uhyukshvw_qxrz_xyzrucv_ubksl_abhz_wsrr_qda_qllq_weh
cmp dword [ebp - 0x2d4], 0x5bdc
jle 0x47661f
push 0
push 0x869
push 0
push 0
push 0x11f5
push 0xf63
call dword [sym.imp.USER32.dll_ToAsciiEx]
and dword [ebp - 0x38], 0
jmp 0x476571
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x6058
jge 0x47661f
and dword [ebp - 0x138], 0
jmp 0x476594
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x1d2
jge 0x47661a
and dword [ebp - 0x40], 0
jmp 0x4765ad
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x7e42
jge 0x476615
and dword [ebp - 0x1b8], 0
jmp 0x4765cc
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x348a
jge 0x476613
mov eax, dword [ebp - 0x38]
cdq
idiv dword [ebp - 0x138]
imul edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x1b8]
mov eax, edx
cdq
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], edx
push dword [ebp - 0x41c]
push dword [ebp - 0x420]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x4765bf
jmp 0x4765a6
jmp 0x476587
jmp 0x47656a
cmp dword [ebp - 0x24c], 0x4274
jle 0x476787
mov dword [ebp - 0x244], 0x1986
mov dword [ebp - 0x4e8], str.vrqonresi_qgq_fpziv_snrtq_qsqinpnt_fppxvxr_dfuxuyof_fbggev_zgrbp_cunwdzt_locxpmsot
cmp dword [ebp - 0x244], 0x1d4c
jle 0x4766d8
and dword [ebp - 0x48], 0
jmp 0x476660
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x5edf
jge 0x4766d8
and dword [ebp - 0x140], 0
jmp 0x47667f
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x1e7f
jge 0x4766d6
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x140]
cdq
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], edx
push dword [ebp - 0x4b8]
push dword [ebp - 0x4bc]
lea ecx, [ebp - 0x714]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x714]
call fcn.004030c4
jmp 0x476672
jmp 0x476659
and dword [ebp - 0x50], 0
jmp 0x4766e5
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x58f2
jge 0x476742
and dword [ebp - 0x1f8], 0
jmp 0x476704
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x68b9
jge 0x476740
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x1f8]
sar eax, cl
cdq
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], edx
push dword [ebp - 0x42c]
push dword [ebp - 0x430]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x4766f7
jmp 0x4766de
mov dword [ebp - 4], 4
cmp dword [ebp - 0x244], 0x15d5
jge 0x476761
push dword [ebp - 0x4e8]
call fcn.0049d905
pop ecx
jmp 0x47677d
or dword [ebp - 4], 0xffffffff
jmp 0x476787
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2d4], 0x591e
jge 0x4767aa
mov edx, dword [ebp - 0x304]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x4767c6
or dword [ebp - 4], 0xffffffff
jmp 0x4767d0
jmp 0x47961f
cmp dword [ebp + 8], 1
jne 0x47740b
call fcn.00472fca
mov dword [ebp - 0x238], 0x1740
mov dword [ebp - 0x25c], 0xee1
mov dword [ebp - 0x478], str.urfdisnz_ghl_iro_yoxzwk_vpeodkcg_dwf_psfj_lutjti_dxdzau_coviqg_ezgwe_hbwvaumwm
cmp dword [ebp - 0x25c], 0x12a9
jle 0x476c6a
and dword [ebp - 0x80], 0
jmp 0x476bdd
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xd42
jge 0x476c6a
and dword [ebp - 0x1c8], 0
jmp 0x476c00
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x457b
jge 0x476c65
and dword [ebp - 0x88], 0
jmp 0x476c22
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x76a0
jge 0x476c63
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x1c8]
xor eax, dword [ebp - 0x88]
cdq
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], edx
push dword [ebp - 0x44c]
push dword [ebp - 0x450]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x476c15
jmp 0x476bf3
jmp 0x476bd6
mov dword [ebp - 0x334], str.qgubz_dhtxk_tnnbhw
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x25c], 0xe24
jge 0x476c97
mov edx, dword [ebp - 0x478]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x476cb3
or dword [ebp - 4], 0xffffffff
jmp 0x476cbd
cmp dword [ebp - 0x238], 0x18ba
jle 0x476f3b
and dword [ebp - 0x168], 0
jmp 0x476ce3
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x2493
jge 0x476f35
and dword [ebp - 0xa0], 0
jmp 0x476d09
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x3156
jge 0x476f30
mov dword [ebp - 0x2a4], 0x3deb
mov dword [ebp - 0x328], str.uvflsa_lvspfmvj_kwx_jqo_cigud_rvidtf
cmp dword [ebp - 0x2a4], 0x3f92
jle 0x476e3e
and dword [ebp - 0x200], 0
jmp 0x476d53
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x5a1c
jge 0x476e3e
and dword [ebp - 0x160], 0
jmp 0x476d79
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x50db
jge 0x476e39
and dword [ebp - 0x90], 0
jmp 0x476d9f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x4ba6
jge 0x476e34
and dword [ebp - 0x98], 0
jmp 0x476dc5
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x4e63
jge 0x476e2f
mov ecx, dword [ebp - 0x160]
imul ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x200]
sar eax, cl
mov ecx, dword [ebp - 0x98]
shl eax, cl
cdq
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], edx
push dword [ebp - 0x4dc]
push dword [ebp - 0x4e0]
lea ecx, [ebp - 0x690]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x690]
call fcn.004030c4
jmp 0x476db8
jmp 0x476d92
jmp 0x476d6c
jmp 0x476d46
and dword [ebp - 0x1d0], 0
jmp 0x476e54
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x2bc8
jge 0x476ee6
and dword [ebp - 0xa8], 0
jmp 0x476e7a
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x25ae
jge 0x476ee1
mov eax, dword [ebp - 0x168]
sub eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x1d0]
add ecx, dword [ebp - 0xa8]
or eax, ecx
cdq
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], edx
push dword [ebp - 0x45c]
push dword [ebp - 0x460]
lea ecx, [ebp - 0x600]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x600]
call fcn.004030c4
jmp 0x476e6d
jmp 0x476e47
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x2a4], 0x3da9
jge 0x476f05
push dword [ebp - 0x328]
call fcn.0049d905
pop ecx
jmp 0x476f21
or dword [ebp - 4], 0xffffffff
jmp 0x476f2b
jmp 0x476cfc
jmp 0x476cd6
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x264], 0x405d
mov dword [ebp - 0x4f8], str.inxpcopt_lpuk_dmbcuxte_zloar_bosbxehvl_jmqwahjob_fhc_vfzmgozgu_tpckp_lde_rove_rgyyqix_mgcdd_fmrvr
cmp dword [ebp - 0x264], 0x40b5
jle 0x476fd2
and dword [ebp - 0x170], 0
jmp 0x476f71
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x6a9d
jge 0x476fd2
and dword [ebp - 0xb0], 0
jmp 0x476f93
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x6e70
jge 0x476fd0
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0xb0]
cdq
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], edx
push dword [ebp - 0x2f0]
push dword [ebp - 0x2f4]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x476f86
jmp 0x476f64
call fcn.0049d612
cdq
push 3
pop ecx
idiv ecx
add edx, 3
imul eax, edx, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x264], 0x3cfd
jge 0x477010
mov edx, dword [ebp - 0x4f8]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x47702c
or dword [ebp - 4], 0xffffffff
jmp 0x477036
mov dword [ebp - 0x274], 0x1281
mov dword [ebp - 0x500], str.nef_wlx_wzagbvpqp_ptodvsn_xolh_rgamurij_igsvqwtlr_tesomqa
cmp dword [ebp - 0x274], 0x151d
jle 0x4770f0
and dword [ebp - 0x228], 0
jmp 0x477070
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x7c0f
jge 0x4770f0
and dword [ebp - 0xb8], 0
jmp 0x477092
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x2799
jge 0x4770eb
mov eax, dword [ebp - 0x228]
xor eax, dword [ebp - 0xb8]
cdq
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], edx
push dword [ebp - 0x2fc]
push dword [ebp - 0x300]
lea ecx, [ebp - 0x6e4]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x6e4]
call fcn.004030c4
jmp 0x477085
jmp 0x477063
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x2ac], 0x170b
mov dword [ebp - 0x340], str.epgvg_msbnbwt_ugvdnho_uvbo_kwdvtrua_ohrkumnz_deyop_ucbw_oatms_vgmekze_gpy_xqyagrisj_axezkg_ygtgxhc
cmp dword [ebp - 0x2ac], 0x1727
jle 0x4771f7
and dword [ebp - 0x178], 0
jmp 0x477131
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x381d
jge 0x4771f7
and dword [ebp - 0xc0], 0
jmp 0x477157
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x4997
jge 0x4771f2
and dword [ebp - 0x1d8], 0
jmp 0x47717d
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x4d9a
jge 0x4771ed
and dword [ebp - 0xc8], 0
jmp 0x47719f
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x16f1
jge 0x4771eb
mov eax, dword [ebp - 0x178]
cdq
idiv dword [ebp - 0xc0]
mov eax, dword [ebp - 0x1d8]
add eax, dword [ebp - 0xc8]
xor eax, edx
cdq
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x308], edx
push dword [ebp - 0x308]
push dword [ebp - 0x30c]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x477192
jmp 0x477170
jmp 0x47714a
jmp 0x477124
cmp dword [ebp - 0x238], 0x1619
jge 0x47734f
mov dword [ebp - 0x26c], 0x4e28
mov dword [ebp - 0x484], str.chsyfsdjf_unl_madqqky
cmp dword [ebp - 0x26c], 0x5039
jle 0x4772fb
and dword [ebp - 0x208], 0
jmp 0x477241
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x63aa
jge 0x4772f3
and dword [ebp - 0x180], 0
jmp 0x477267
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x5b8
jge 0x4772ee
and dword [ebp - 0xd0], 0
jmp 0x477289
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x40b2
jge 0x4772e9
mov eax, dword [ebp - 0x180]
imul eax, dword [ebp - 0xd0]
xor eax, dword [ebp - 0x208]
cdq
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], edx
push dword [ebp - 0x314]
push dword [ebp - 0x318]
lea ecx, [ebp - 0x630]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x630]
call fcn.004030c4
jmp 0x47727c
jmp 0x47725a
jmp 0x477234
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push dword [ebp - 0x334]
call fcn.0049d905
pop ecx
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x26c], 0x4b91
jge 0x477323
push dword [ebp - 0x484]
call fcn.0049d905
pop ecx
jmp 0x47733f
mov dword [ebp - 4], 0x16
jmp 0x47734f
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x2ac], 0x132e
jge 0x47736f
mov edx, dword [ebp - 0x340]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x47738b
mov dword [ebp - 4], 0x16
jmp 0x47739b
jmp 0x4773b7
or dword [ebp - 4], 0xffffffff
jmp 0x4773c1
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x274], 0xf91
jge 0x4773e0
push dword [ebp - 0x500]
call fcn.0049d905
pop ecx
jmp 0x4773fc
or dword [ebp - 4], 0xffffffff
jmp 0x477406
jmp 0x4787ee
mov dword [ebp - 0x2cc], 0x524d
mov dword [ebp - 0x34c], str.vmmrb_usa_eyvwusp_vkhe_uaczzb_jnimlpwtr_clgzcojdx_aziiyelqp_jerym
cmp dword [ebp - 0x2cc], 0x5387
jle 0x4774f6
and dword [ebp - 0xe0], 0
jmp 0x477445
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x1a16
jge 0x4774f6
and dword [ebp - 0xd8], 0
jmp 0x47746b
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x2931
jge 0x4774f1
and dword [ebp - 0x188], 0
jmp 0x47748d
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x3e0a
jge 0x4774ec
mov eax, dword [ebp - 0xd8]
sub eax, dword [ebp - 0x188]
xor eax, dword [ebp - 0xe0]
cdq
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x320], edx
push dword [ebp - 0x320]
push dword [ebp - 0x324]
lea ecx, [ebp - 0x540]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x540]
call fcn.004030c4
jmp 0x477480
jmp 0x47745e
jmp 0x477438
xor ecx, ecx
call fcn.004385ce
push eax
call fcn.0049d633
pop ecx
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x2cc], 0x5191
jge 0x477523
push dword [ebp - 0x34c]
call fcn.0049d905
pop ecx
jmp 0x47753f
or dword [ebp - 4], 0xffffffff
jmp 0x477549
mov dword [ebp - 0x2b4], 0x2e6a
mov dword [ebp - 0x358], str.zge_rgol_bihxelz_ankpwfhkv_zudub_nktcx_dpfrmj_eexezcrru_dobr_kvskz_xxnk
cmp dword [ebp - 0x2b4], 0x30b0
jle 0x477759
and dword [ebp - 0x1e0], 0
jmp 0x477583
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x1a9c
jge 0x477759
and dword [ebp - 0xe8], 0
jmp 0x4775a9
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x4f3
jge 0x477754
mov eax, dword [ebp - 0x1e0]
cdq
idiv dword [ebp - 0xe8]
mov eax, edx
cdq
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x338], edx
mov dword [ebp - 0x27c], 0x2471
mov dword [ebp - 0x490], str.dyfxdzb_tths_arwdr_qrludg_dyrjufa_migjwdez_krxjvmesv_engwasj_ozljcn
cmp dword [ebp - 0x27c], 0x250a
jle 0x4776d4
and dword [ebp - 0x190], 0
jmp 0x47760f
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x4d92
jge 0x4776d4
and dword [ebp - 0xf0], 0
jmp 0x477635
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x37e6
jge 0x4776cf
and dword [ebp - 0x220], 0
jmp 0x47765b
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x587f
jge 0x4776ca
and dword [ebp - 0xf8], 0
jmp 0x47767d
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x4f29
jge 0x4776c8
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0xf0]
sar eax, cl
or eax, dword [ebp - 0x220]
or eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], edx
push dword [ebp - 0x32c]
push dword [ebp - 0x330]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x477670
jmp 0x47764e
jmp 0x477628
jmp 0x477602
push dword [ebp - 0x338]
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x558]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x558]
call fcn.004030c4
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x27c], 0x2333
jge 0x477729
mov edx, dword [ebp - 0x490]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x477745
or dword [ebp - 4], 0xffffffff
jmp 0x47774f
jmp 0x47759c
jmp 0x477576
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x284], 0x1fac
mov dword [ebp - 0x508], str.pouq_uryfacy_jxwwkul_anmpdjaf_uaqfxzt_yoghjkh_qkzdzs_itvoqdra_xpsija
cmp dword [ebp - 0x284], 0x2240
jle 0x477882
and dword [ebp - 0x198], 0
jmp 0x47779a
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x7c39
jge 0x477882
and dword [ebp - 0x100], 0
jmp 0x4777c0
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x6cbb
jge 0x47787d
and dword [ebp - 0x1e8], 0
jmp 0x4777e6
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x807
jge 0x477878
and dword [ebp - 0x108], 0
jmp 0x47780c
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x255d
jge 0x477873
mov eax, dword [ebp - 0x198]
xor eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x1e8]
and ecx, dword [ebp - 0x108]
or eax, ecx
cdq
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], edx
push dword [ebp - 0x344]
push dword [ebp - 0x348]
lea ecx, [ebp - 0x588]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x588]
call fcn.004030c4
jmp 0x4777ff
jmp 0x4777d9
jmp 0x4777b3
jmp 0x47778d
cmp dword [ebp - 0x2b4], 0x2aa8
jge 0x47789a
push dword [ebp - 0x358]
call fcn.0049d905
pop ecx
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x284], 0x1d72
jge 0x4778b6
push dword [ebp - 0x508]
call fcn.0049d905
pop ecx
jmp 0x4778d2
mov dword [ebp - 4], 0x22
jmp 0x4778e2
jmp 0x4778fe
or dword [ebp - 4], 0xffffffff
jmp 0x477908
mov dword [ebp - 0x2dc], 0x4c01
mov dword [ebp - 0x364], str.nhxqbjxx_bfjfp_wbolvbxqx
cmp dword [ebp - 0x2dc], 0x4e0b
jle 0x4779e5
and dword [ebp - 0x1a0], 0
jmp 0x477942
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x1dc3
jge 0x4779d4
and dword [ebp - 0x110], 0
jmp 0x477968
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x508
jge 0x4779cf
and dword [ebp - 0x210], 0
jmp 0x47798a
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x7301
jge 0x4779cd
mov eax, dword [ebp - 0x1a0]
add eax, dword [ebp - 0x110]
and eax, dword [ebp - 0x210]
cdq
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x350], edx
push dword [ebp - 0x350]
push dword [ebp - 0x354]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x47797d
jmp 0x47795b
jmp 0x477935
push 0
push 0
push 0x20f5
push 0
call dword [sym.imp.USER32.dll_AppendMenuA]
mov dword [ebp - 0x23c], 0x6ff5
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x2dc], 0x4943
jge 0x477a12
mov edx, dword [ebp - 0x364]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x477a2e
or dword [ebp - 4], 0xffffffff
jmp 0x477a38
mov dword [ebp - 0x498], str.ahho_avicmdkp_mkcqigiw_lmnx_ctvtmlr_dgeorssgx_nayqztfcz_zkfqaww_mgqvylap_mpxtfoqxe_fodwll
cmp dword [ebp - 0x23c], 0x71f4
jle 0x477d21
and dword [ebp - 0x24], 0
jmp 0x477a5f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x713b
jge 0x477d21
mov dword [ebp - 0x2bc], 0x113f
mov dword [ebp - 0x370], str.vqtrrnmv_hcyzy_flkbw_gqvqb_jkrigpzss_fkbowmtbd_jcun_yaiqrtz_chzouwr_uttb_evfypxup_ivgxdq
cmp dword [ebp - 0x2bc], 0x11cc
jle 0x477b77
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
and dword [ebp - 0x120], 0
jmp 0x477ab4
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x1c02
jge 0x477b77
and dword [ebp - 0x118], 0
jmp 0x477ada
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x18ec
jge 0x477b72
and dword [ebp - 0x1a8], 0
jmp 0x477b00
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x136e
jge 0x477b6d
and dword [ebp - 0x1f0], 0
jmp 0x477b22
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x3b55
jge 0x477b6b
mov eax, dword [ebp - 0x118]
sub eax, dword [ebp - 0x1a8]
and eax, dword [ebp - 0x120]
and eax, dword [ebp - 0x1f0]
cdq
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], edx
push dword [ebp - 0x35c]
push dword [ebp - 0x360]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x477b15
jmp 0x477af3
jmp 0x477acd
jmp 0x477aa7
and dword [ebp - 0x2c], 0
jmp 0x477b84
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x53a5
jge 0x477cd3
and dword [ebp - 0x34], 0
jmp 0x477b9e
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x68a7
jge 0x477cce
mov dword [ebp - 0x28c], 6
mov dword [ebp - 0x49c], str.pqejiwm_nbkyygu_xlcp_bea_bnea_jaxkr
cmp dword [ebp - 0x28c], 0x152
jle 0x477c40
and dword [ebp - 0x14], 0
jmp 0x477bd8
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x25fb
jge 0x477c40
and dword [ebp - 0x1c], 0
jmp 0x477bee
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x25bd
jge 0x477c3e
mov eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x1c]
cdq
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], edx
push dword [ebp - 0x368]
push dword [ebp - 0x36c]
lea ecx, [ebp - 0x5b8]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x5b8]
call fcn.004030c4
jmp 0x477be7
jmp 0x477bd1
and dword [ebp - 0x3c], 0
jmp 0x477c4d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x4dcf
jge 0x477c87
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
or eax, dword [ebp - 0x34]
or eax, dword [ebp - 0x3c]
cdq
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], edx
push dword [ebp - 0x374]
push dword [ebp - 0x378]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x477c46
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x28c], 0xffffff92
jge 0x477ca3
push dword [ebp - 0x49c]
call fcn.0049d905
pop ecx
jmp 0x477cbf
or dword [ebp - 4], 0xffffffff
jmp 0x477cc9
jmp 0x477b97
jmp 0x477b7d
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x2bc], 0x1113
jge 0x477cf6
mov edx, dword [ebp - 0x370]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x477d12
or dword [ebp - 4], 0xffffffff
jmp 0x477d1c
jmp 0x477a58
push 0
push 0
push 0
push 0
push 0x19
push 0x64
push 0x1863b
push 0x18695
push 0x90000000
push 0xac0ffc
push 0xac0ffc
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0x234], eax
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x23c], 0x6c82
jge 0x477e42
mov dword [ebp - 0x240], 0x606c
mov dword [ebp - 0x37c], str.akeruze_ygjml_jmlozqx_rgmyiysbq_hzyzu
cmp dword [ebp - 0x240], 0x62ff
jle 0x477de6
and dword [ebp - 0x44], 0
jmp 0x477d98
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x397e
jge 0x477de6
and dword [ebp - 0x4c], 0
jmp 0x477dae
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x48f3
jge 0x477de4
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x4c]
sar eax, cl
cdq
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], edx
push dword [ebp - 0x380]
push dword [ebp - 0x384]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x477da7
jmp 0x477d91
mov edx, dword [ebp - 0x498]
mov ecx, 0xac7540
call fcn.00499c07
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x240], 0x5f0c
jge 0x477e16
mov edx, dword [ebp - 0x37c]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x477e32
mov dword [ebp - 4], 0x2c
jmp 0x477e42
jmp 0x477f8c
or dword [ebp - 4], 0xffffffff
jmp 0x477f96
mov dword [ebp - 0x250], 0x4b2
mov dword [ebp - 0x388], str.stuhxlacu_zxcff_pht_rtqcby_rhnequ_oyyn_pxq_ieprozngd_txlqtewh_eto_syuzy_jaktgia_gvppe
cmp dword [ebp - 0x250], 0x7fa
jle 0x478086
and dword [ebp - 0x8c], 0
jmp 0x477fd0
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x77d5
jge 0x478079
and dword [ebp - 0x74], 0
jmp 0x477fed
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x5ed3
jge 0x478074
and dword [ebp - 0x7c], 0
jmp 0x478003
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xbd8
jge 0x47806f
and dword [ebp - 0x84], 0
jmp 0x478022
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x70fd
jge 0x47806d
mov eax, dword [ebp - 0x74]
cdq
idiv dword [ebp - 0x7c]
mov eax, edx
cdq
idiv dword [ebp - 0x84]
mov eax, dword [ebp - 0x8c]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], edx
push dword [ebp - 0x398]
push dword [ebp - 0x39c]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x478015
jmp 0x477ffc
jmp 0x477fe6
jmp 0x477fc3
push 0x14e1
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
push 5
push dword [ebp - 0x234]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x250], 0x2b1
jge 0x4780b7
mov edx, dword [ebp - 0x388]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x4780d3
or dword [ebp - 4], 0xffffffff
jmp 0x4780dd
mov dword [ebp - 0x258], 0x1571
mov dword [ebp - 0x4a8], str.gpsibyu_bfdpcn_mxccrhosz_hlwgv_qgl
cmp dword [ebp - 0x258], 0x15f3
jle 0x478176
and dword [ebp - 0x94], 0
jmp 0x478113
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x88e
jge 0x478176
and dword [ebp - 0x9c], 0
jmp 0x478135
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xa57
jge 0x478174
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x9c]
shl eax, cl
cdq
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], edx
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x478128
jmp 0x478106
push dword [ebp - 0x234]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x258], 0x11a9
jge 0x4781a5
mov edx, dword [ebp - 0x4a8]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x4781c1
or dword [ebp - 4], 0xffffffff
jmp 0x4781cb
mov eax, dword [ebp + 8]
inc eax
mov dword [ebp - 0x394], eax
lea eax, [ebp - 0x394]
push eax
push fcn.004761a9
lea ecx, [ebp - 0x51c]
call fcn.00499df2
mov dword [ebp - 0x278], 0x1eda
mov dword [ebp - 0x3ac], str.pbgxci_ggaka_ppqiyuhg_dtgvgcaav_ctcvrdm_ime_ukfoh
cmp dword [ebp - 0x278], 0x20b1
jle 0x478554
and dword [ebp - 0xd4], 0
jmp 0x478226
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x134e
jge 0x478554
mov dword [ebp - 0x268], 0x4fd5
mov dword [ebp - 0x3a0], str.iksc_psobp_xlx_nyooehs_fykswne_drjyuw_hqgev_soeoroh_aiuxuyyyu_xnx_pqbnjad_uusfnni_vncwxqbp_ljbtz
cmp dword [ebp - 0x268], 0x4fe3
jle 0x478348
and dword [ebp - 0xa4], 0
jmp 0x478270
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x2c70
jge 0x478333
and dword [ebp - 0xac], 0
jmp 0x478296
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x19df
jge 0x47832e
and dword [ebp - 0xb4], 0
jmp 0x4782bc
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xe7f
jge 0x478329
and dword [ebp - 0xbc], 0
jmp 0x4782de
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x1285
jge 0x478327
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0xac]
xor eax, dword [ebp - 0xb4]
xor eax, dword [ebp - 0xbc]
cdq
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], edx
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x4782d1
jmp 0x4782af
jmp 0x478289
jmp 0x478263
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
and dword [ebp - 0xdc], 0
jmp 0x47835e
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x3603
jge 0x478506
and dword [ebp - 0xe4], 0
jmp 0x478384
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x3ca
jge 0x478501
and dword [ebp - 0xec], 0
jmp 0x4783aa
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x61b5
jge 0x4784fc
mov dword [ebp - 0x260], 0x3357
mov dword [ebp - 0x4e4], str.mzsmgrhy_vkclahnr_tvycql_uxuzgjxp_lfavku_cpff_klsi_vkzj_vbmsofad
cmp dword [ebp - 0x260], 0x3736
jle 0x478474
and dword [ebp - 0xc4], 0
jmp 0x4783f4
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x7d09
jge 0x478474
and dword [ebp - 0xcc], 0
jmp 0x478416
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x5f5c
jge 0x47846f
mov eax, dword [ebp - 0xc4]
sub eax, dword [ebp - 0xcc]
cdq
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], edx
push dword [ebp - 0x3bc]
push dword [ebp - 0x3c0]
lea ecx, [ebp - 0x618]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x618]
call fcn.004030c4
jmp 0x478409
jmp 0x4783e7
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xe4]
imul ecx, dword [ebp - 0xec]
sar eax, cl
cdq
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x3c8], edx
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x260], 0x3008
jge 0x4784bb
push dword [ebp - 0x4e4]
call fcn.0049d905
pop ecx
jmp 0x4784d7
or dword [ebp - 4], 0xffffffff
jmp 0x4784e1
push dword [ebp - 0x3c8]
push dword [ebp - 0x3cc]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x47839d
jmp 0x478377
jmp 0x478351
mov dword [ebp - 4], 0x38
cmp dword [ebp - 0x268], 0x4fba
jge 0x478529
mov edx, dword [ebp - 0x3a0]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x478545
or dword [ebp - 4], 0xffffffff
jmp 0x47854f
jmp 0x478219
push 0
push 0
push 0
lea eax, [ebp - 0x730]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x4786b5
push 0
push 0
push 0x10
push dword [ebp - 0x234]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x51c]
call fcn.00472f6a
mov dword [ebp - 0x270], 0x1d6e
mov dword [ebp - 0x4b4], str.nkgiye_ejxggq_xlaus_frcdtemm_irfnpobrz
cmp dword [ebp - 0x270], 0x1e01
jle 0x478669
push 0
push 0xfe
push 0x1f59
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
and dword [ebp - 0xf4], 0
jmp 0x4785e6
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x39f7
jge 0x478669
and dword [ebp - 0xfc], 0
jmp 0x478608
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x2490
jge 0x478664
mov eax, dword [ebp - 0xf4]
cdq
idiv dword [ebp - 0xfc]
mov eax, edx
cdq
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], edx
push dword [ebp - 0x3d4]
push dword [ebp - 0x3d8]
lea ecx, [ebp - 0x648]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x648]
call fcn.004030c4
jmp 0x4785fb
jmp 0x4785d9
jmp 0x4786b5
mov dword [ebp - 0x280], 0x69c5
mov dword [ebp - 0x504], str.wmoy_pzy_hpboqbj_zvnhb_xawp_pjoldy_owor
cmp dword [ebp - 0x280], 0x6c58
jle 0x47874c
and dword [ebp - 0x104], 0
jmp 0x4786eb
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xf72
jge 0x47874c
and dword [ebp - 0x10c], 0
jmp 0x47870d
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x62ec
jge 0x47874a
mov eax, dword [ebp - 0x104]
xor eax, dword [ebp - 0x10c]
cdq
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x3e0], edx
push dword [ebp - 0x3e0]
push dword [ebp - 0x3e4]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x478700
jmp 0x4786de
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x278], 0x1eba
jge 0x47876f
mov edx, dword [ebp - 0x3ac]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x47878b
or dword [ebp - 4], 0xffffffff
jmp 0x478795
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x280], 0x6966
jge 0x4787b8
mov edx, dword [ebp - 0x504]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x4787d4
or dword [ebp - 4], 0xffffffff
jmp 0x4787de
lea ecx, [ebp - 0x51c]
call fcn.00472f5f
jmp 0x47961f
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x288], 0x5070
jge 0x47880d
push dword [ebp - 0x3b8]
call fcn.0049d905
pop ecx
jmp 0x478829
or dword [ebp - 4], 0xffffffff
jmp 0x478833
mov dword [ebp - 0x290], 0x35c1
mov dword [ebp - 0x4c0], str.osgpqtf_xrytkiyk_hdf_cwcthuzw
cmp dword [ebp - 0x290], 0x3691
jle 0x4788df
and dword [ebp - 0x114], 0
jmp 0x47886d
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x5d43
jge 0x4788ce
and dword [ebp - 0x11c], 0
jmp 0x47888f
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x368
jge 0x4788cc
mov eax, dword [ebp - 0x114]
or eax, dword [ebp - 0x11c]
cdq
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x3ec], edx
push dword [ebp - 0x3ec]
push dword [ebp - 0x3f0]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x478882
jmp 0x478860
push 0
push 0
push 0x1fa5
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov dword [ebp - 0x2d0], 0x7604
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x290], 0x32ef
jge 0x47890c
mov edx, dword [ebp - 0x4c0]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x478928
or dword [ebp - 4], 0xffffffff
jmp 0x478932
mov dword [ebp - 0x298], 0x44f5
mov dword [ebp - 0x2ec], str.zocnrnqj_rnxykwkay_umtm_yyb_xwnejkp_mvqdw_ytidpoptj_slijb_runaqj_bxc_bdjj
cmp dword [ebp - 0x298], 0x4582
jle 0x4789ee
and dword [ebp - 0x124], 0
jmp 0x47896c
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x2a81
jge 0x4789ee
and dword [ebp - 0x12c], 0
jmp 0x47898e
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x5ec5
jge 0x4789e9
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x12c]
shl eax, cl
cdq
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x3f8], edx
push dword [ebp - 0x3f8]
push dword [ebp - 0x3fc]
lea ecx, [ebp - 0x678]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x678]
call fcn.004030c4
jmp 0x478981
jmp 0x47895f
mov dword [ebp - 0x4d8], str.ecd_hrnvmrvll_wgbgnuees_wnhh_ddbp_ufonzjkuw_vzt_pva_mqylyf_jtuy_skztvkkt
mov dword [ebp - 4], 0x44
cmp dword [ebp - 0x298], 0x4303
jge 0x478a17
push dword [ebp - 0x2ec]
call fcn.0049d905
pop ecx
jmp 0x478a33
or dword [ebp - 4], 0xffffffff
jmp 0x478a3d
mov dword [ebp - 0x2c8], 0x1026
mov dword [ebp - 0x3e8], str.tbs_yvnfaw_blkwngika_usre_nwzhdoc_qoz_xfjnvuhdr_rdrjmgrv_rfmn_jfpe_qzb
cmp dword [ebp - 0x2c8], 0x11b9
jle 0x478b6a
and dword [ebp - 0x144], 0
jmp 0x478a77
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x66fe
jge 0x478b60
and dword [ebp - 0x134], 0
jmp 0x478a9d
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x3edc
jge 0x478b5b
and dword [ebp - 0x13c], 0
jmp 0x478ac3
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x4963
jge 0x478b56
and dword [ebp - 0x14c], 0
jmp 0x478ae9
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x2cde
jge 0x478b51
mov eax, dword [ebp - 0x134]
cdq
idiv dword [ebp - 0x13c]
mov eax, dword [ebp - 0x144]
sub eax, edx
xor eax, dword [ebp - 0x14c]
cdq
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x404], edx
push dword [ebp - 0x404]
push dword [ebp - 0x408]
lea ecx, [ebp - 0x6a8]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x6a8]
call fcn.004030c4
jmp 0x478adc
jmp 0x478ab6
jmp 0x478a90
jmp 0x478a6a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
cmp dword [ebp - 0x2d0], 0x77e6
jle 0x4791cb
and dword [ebp - 0x1ac], 0
jmp 0x478b90
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x7ca1
jge 0x4791cb
mov dword [ebp - 0x2c0], 0x4aaa
mov dword [ebp - 0x4fc], str.icjqgpe_pcwys_ykb_vrs_mrkgsv_ncnctjn_wlwknkxmo_mbmr
cmp dword [ebp - 0x2c0], 0x4d3d
jle 0x478c6c
and dword [ebp - 0x164], 0
jmp 0x478bda
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x653d
jge 0x478c6c
and dword [ebp - 0x154], 0
jmp 0x478c00
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x2340
jge 0x478c67
and dword [ebp - 0x15c], 0
jmp 0x478c22
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x7ef1
jge 0x478c65
mov eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x15c]
or eax, dword [ebp - 0x164]
cdq
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], edx
push dword [ebp - 0x414]
push dword [ebp - 0x418]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x478c15
jmp 0x478bf3
jmp 0x478bcd
and dword [ebp - 0x1b4], 0
jmp 0x478c82
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x311b
jge 0x47917d
mov dword [ebp - 0x2b8], 0x536e
mov dword [ebp - 0x3dc], str.dslzy_qzfh_sdhppmpz_qtpkg_rkrnuk_elkrxqp_yhkxplmd_lgbe_tunfam
cmp dword [ebp - 0x2b8], 0x5519
jle 0x478d60
and dword [ebp - 0x17c], 0
jmp 0x478ccc
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x1381
jge 0x478d60
and dword [ebp - 0x16c], 0
jmp 0x478cf2
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x184c
jge 0x478d5b
and dword [ebp - 0x174], 0
jmp 0x478d14
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x2c8b
jge 0x478d59
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x174]
sar eax, cl
or eax, dword [ebp - 0x17c]
cdq
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], edx
push dword [ebp - 0x424]
push dword [ebp - 0x428]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x478d07
jmp 0x478ce5
jmp 0x478cbf
and dword [ebp - 0x1bc], 0
jmp 0x478d76
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x1898
jge 0x47912f
mov dword [ebp - 0x2b0], 0x2c67
mov dword [ebp - 0x4cc], str.nqd_uotbh_wbepvne_npozq_wyol_otrn_wulcop_fzxhc_cdx_lyrztr_hhjmmyztt_cokkpr_ean
cmp dword [ebp - 0x2b0], 0x2e0b
jle 0x478e4e
and dword [ebp - 0x184], 0
jmp 0x478dc0
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x6a5b
jge 0x478e41
and dword [ebp - 0x18c], 0
jmp 0x478de2
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x3e26
jge 0x478e3c
mov eax, dword [ebp - 0x184]
imul eax, dword [ebp - 0x18c]
cdq
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], edx
push dword [ebp - 0x434]
push dword [ebp - 0x438]
lea ecx, [ebp - 0x6cc]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x6cc]
call fcn.004030c4
jmp 0x478dd5
jmp 0x478db3
push 0xabd
push 0
call dword [sym.imp.USER32.dll_CharLowerBuffW]
and dword [ebp - 0x1c4], 0
jmp 0x478e64
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x4f10
jge 0x4790e5
mov dword [ebp - 0x2a0], 0x965
mov dword [ebp - 0x4ec], str.rursn_qjndjkb_xrckryk_mdk
cmp dword [ebp - 0x2a0], 0xa41
jle 0x478f42
and dword [ebp - 0x1a4], 0
jmp 0x478eae
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x66d0
jge 0x478f42
and dword [ebp - 0x194], 0
jmp 0x478ed4
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x2174
jge 0x478f3d
and dword [ebp - 0x19c], 0
jmp 0x478ef6
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x503d
jge 0x478f3b
mov ecx, dword [ebp - 0x194]
sub ecx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x1a4]
shl eax, cl
cdq
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], edx
push dword [ebp - 0x444]
push dword [ebp - 0x448]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x478ee9
jmp 0x478ec7
jmp 0x478ea1
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x1b4]
shl eax, cl
mov ecx, dword [ebp - 0x1bc]
imul ecx, dword [ebp - 0x1c4]
and eax, ecx
cdq
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], edx
mov dword [ebp - 4], 0x46
cmp dword [ebp - 0x2a0], 0x5d9
jge 0x478f8f
mov edx, dword [ebp - 0x4ec]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x478fab
or dword [ebp - 4], 0xffffffff
jmp 0x478fb5
mov dword [ebp - 0x2a8], 0x67c9
mov dword [ebp - 0x3d0], str.owbbmuohl_yqemi_orbkskb
cmp dword [ebp - 0x2a8], 0x6813
jle 0x479081
and dword [ebp - 0x1cc], 0
jmp 0x478fef
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x5ce8
jge 0x479081
and dword [ebp - 0x1d4], 0
jmp 0x479015
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x2124
jge 0x47907c
and dword [ebp - 0x1dc], 0
jmp 0x479037
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x3258
jge 0x47907a
mov eax, dword [ebp - 0x1cc]
and eax, dword [ebp - 0x1d4]
and eax, dword [ebp - 0x1dc]
cdq
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], edx
push dword [ebp - 0x454]
push dword [ebp - 0x458]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x47902a
jmp 0x479008
jmp 0x478fe2
push dword [ebp - 0x464]
push dword [ebp - 0x468]
mov ecx, 0xac7540
call fcn.004985d1
mov dword [ebp - 4], 0x48
cmp dword [ebp - 0x2a8], 0x661e
jge 0x4790ba
mov edx, dword [ebp - 0x3d0]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x4790d6
or dword [ebp - 4], 0xffffffff
jmp 0x4790e0
jmp 0x478e57
mov dword [ebp - 4], 0x4a
cmp dword [ebp - 0x2b0], 0x2ab9
jge 0x479104
push dword [ebp - 0x4cc]
call fcn.0049d905
pop ecx
jmp 0x479120
or dword [ebp - 4], 0xffffffff
jmp 0x47912a
jmp 0x478d69
mov dword [ebp - 4], 0x4c
cmp dword [ebp - 0x2b8], 0x512d
jge 0x479152
mov edx, dword [ebp - 0x3dc]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x47916e
or dword [ebp - 4], 0xffffffff
jmp 0x479178
jmp 0x478c75
mov dword [ebp - 4], 0x4e
cmp dword [ebp - 0x2c0], 0x4994
jge 0x4791a0
mov edx, dword [ebp - 0x4fc]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x4791bc
or dword [ebp - 4], 0xffffffff
jmp 0x4791c6
jmp 0x478b83
mov dword [ebp - 4], 0x50
cmp dword [ebp - 0x2c8], 0xed8
jge 0x4791ea
push dword [ebp - 0x3e8]
call fcn.0049d905
pop ecx
jmp 0x479206
or dword [ebp - 4], 0xffffffff
jmp 0x479210
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.004761a9
pop ecx
mov dword [ebp - 4], 0x52
mov dword [ebp - 0x2e0], 0x5fc2
mov dword [ebp - 0x494], str.jnyjuuzj_rdxwznoi_krulyoufc_ugjmqqbuh_rhatyr_tzpjcskfp_ydxvjeg_dxpbzpzbg_fkolaald_gkxepx_fbefpt_icq
cmp dword [ebp - 0x2e0], 0x608d
jle 0x479335
and dword [ebp - 0x1e4], 0
jmp 0x47925c
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x8fc
jge 0x479323
and dword [ebp - 0x1ec], 0
jmp 0x479282
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x2e48
jge 0x47931e
and dword [ebp - 0x1f4], 0
jmp 0x4792a8
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x691b
jge 0x479319
and dword [ebp - 0x1fc], 0
jmp 0x4792ca
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x792a
jge 0x479317
mov eax, dword [ebp - 0x1e4]
add eax, dword [ebp - 0x1ec]
mov edx, dword [ebp - 0x1f4]
mov ecx, dword [ebp - 0x1fc]
shl edx, cl
and eax, edx
cdq
mov dword [ebp - 0x474], eax
mov dword [ebp - 0x470], edx
push dword [ebp - 0x470]
push dword [ebp - 0x474]
mov ecx, 0xac7540
call fcn.004985d1
jmp 0x4792bd
jmp 0x47929b
jmp 0x479275
jmp 0x47924f
push 0
push 0x1ea7
push 0x223e
call dword [sym.imp.GDI32.dll_CreatePen]
cmp dword [ebp - 0x2d0], 0x7380
jge 0x47948b
mov dword [ebp - 0x2d8], 0x15f0
mov dword [ebp - 0x3f4], str.rqbjyxpea_yzduumngj_nput_ziezsyalg_hrqz_lhwm_mrohs_qwylefonm_iauattgk_udqjfi_wfyonm
cmp dword [ebp - 0x2d8], 0x16a8
jle 0x479433
and dword [ebp - 0x214], 0
jmp 0x47937f
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x899
jge 0x479433
and dword [ebp - 0x204], 0
jmp 0x4793a5
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x7bf7
jge 0x47942e
and dword [ebp - 0x20c], 0
jmp 0x4793c7
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x5eed
jge 0x479429
mov eax, dword [ebp - 0x204]
cdq
idiv dword [ebp - 0x20c]
xor edx, dword [ebp - 0x214]
mov eax, edx
cdq
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], edx
push dword [ebp - 0x47c]
push dword [ebp - 0x480]
lea ecx, [ebp - 0x6fc]
call fcn.00472f2b
pop ecx
pop ecx
mov ecx, eax
call fcn.004032d7
push eax
call fcn.0049d905
pop ecx
lea ecx, [ebp - 0x6fc]
call fcn.004030c4
jmp 0x4793ba
jmp 0x479398
jmp 0x479372
mov edx, dword [ebp - 0x4d8]
mov ecx, 0xac7540
call fcn.00499c07
mov byte [ebp - 4], 0x53
cmp dword [ebp - 0x2d8], 0x12b8
jge 0x47945f
push dword [ebp - 0x3f4]
call fcn.0049d905
pop ecx
jmp 0x47947b
mov dword [ebp - 4], 0x52
jmp 0x47948b
mov byte [ebp - 4], 0x55
cmp dword [ebp - 0x2e0], 0x5def
jge 0x4794ab
mov edx, dword [ebp - 0x494]
mov ecx, 0xac7540
call fcn.00499c07
jmp 0x4794c7
mov dword [ebp - 4], 0x52
jmp 0x4794d7
jmp 0x479615
or dword [ebp - 4], 0xffffffff
jmp 0x47961f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret