Function at 0x46e54f
Capabilities:
Check http status code
Clear file content
Create thread
Delete registry key
Enumerate gui resources
Get thread local storage value
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x35ec
call fcn.004a4b70
push esi
push edi
push 2
lea ecx, [ebp - 0x8f8]
call fcn.0043694d
mov dword [ebp - 0x94c], 0x80db959c
mov dword [ebp - 0x5b4], 0
jmp 0x46e58e
mov eax, dword [ebp - 0x5b4]
inc eax
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 2
jge 0x46e5b0
push dword [ebp - 0x5b4]
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
mov dword [eax], 2
jmp 0x46e581
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
cmp dword [eax], 0
je 0x46e6cb
mov dword [ebp - 0x5a0], 0xffffffff
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
mov ecx, dword [ebp - 0x5a0]
cmp dword [eax], ecx
je 0x46e5f3
mov dword [ebp - 0x16bc], 1
jmp 0x46e5fa
and dword [ebp - 0x16bc], 0
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
mov ecx, dword [ebp - 0x5a0]
cmp dword [eax], ecx
je 0x46e61d
mov dword [ebp - 0x1e74], 1
jmp 0x46e624
and dword [ebp - 0x1e74], 0
mov eax, dword [ebp - 0x16bc]
cmp eax, dword [ebp - 0x1e74]
jl 0x46e695
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
mov eax, 0xfac12265
cmp eax, 0x831eb239
jae 0x46e657
mov dword [ebp - 0x1e7c], 1
jmp 0x46e65e
and dword [ebp - 0x1e7c], 0
mov eax, dword [ebp - 0x5a0]
cmp dword [ebp - 0x1e7c], eax
jle 0x46e678
mov dword [ebp - 0x20fc], 1
jmp 0x46e67f
and dword [ebp - 0x20fc], 0
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
cmp dword [ebp - 0x5a0], 0
je 0x46e6b3
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
cmp dword [eax], 0
je 0x46e6b3
mov dword [ebp - 0x1e84], 1
jmp 0x46e6ba
and dword [ebp - 0x1e84], 0
mov eax, dword [ebp - 0x1e84]
mov dword [ebp - 0x94c], eax
jmp 0x46e841
mov dword [ebp - 0x1ec4], 0xb821342f
mov dword [ebp - 0x328], 0xfffffffb
mov esi, dword [ebp - 0x328]
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
sub esi, dword [eax]
mov dword [ebp - 0x94c], esi
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x94c], eax
jle 0x46e714
mov dword [ebp - 0x1e8c], 1
jmp 0x46e71b
and dword [ebp - 0x1e8c], 0
cmp dword [ebp - 0x1e8c], 0
ja 0x46e749
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
cmp dword [eax], 0
je 0x46e749
push 4
pop eax
test eax, eax
je 0x46e749
mov dword [ebp - 0x1e94], 1
jmp 0x46e750
and dword [ebp - 0x1e94], 0
cmp dword [ebp - 0x1e94], 0xffff
je 0x46e768
mov dword [ebp - 0x1e9c], 1
jmp 0x46e76f
and dword [ebp - 0x1e9c], 0
cmp dword [ebp - 0x1e9c], 0xfffffffb
jne 0x46e788
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x46e788
and dword [ebp - 0x1ebc], 0
jmp 0x46e792
mov dword [ebp - 0x1ebc], 1
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
mov ecx, dword [ebp - 0x1ebc]
cmp ecx, dword [eax]
jl 0x46e7b5
mov dword [ebp - 0x22b0], 1
jmp 0x46e7bc
and dword [ebp - 0x22b0], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x32b8], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x31e0], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x2ef0], eax
mov dword [ebp - 0x1ec4], 0x29694d2b
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x1ec4], eax
jge 0x46e804
mov dword [ebp - 0x1ecc], 1
jmp 0x46e80b
and dword [ebp - 0x1ecc], 0
push 1
lea ecx, [ebp - 0x8f8]
call fcn.00436a3b
mov ecx, dword [ebp - 0x1ecc]
cmp ecx, dword [eax]
jge 0x46e82e
mov dword [ebp - 0x1ed4], 1
jmp 0x46e835
and dword [ebp - 0x1ed4], 0
mov eax, dword [ebp - 0x1ed4]
mov dword [ebp - 0x328], eax
mov byte [ebp - 0x43a], 0
movzx eax, byte [ebp - 0x43a]
test eax, eax
je 0x46e873
push 0
push 0x1016
push 0x12d3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
lea ecx, [ebp - 0x8f8]
call fcn.00436a1f
mov dword [ebp - 0x144], 1
mov dword [ebp - 0xa70], 0x1e043eef
mov dword [ebp - 0x2100], 0x1e283d1f
mov dword [ebp - 0x1f04], 0x14186e14
mov dword [ebp - 0x330], 0xffffffff
mov dword [ebp - 0x1f0c], 1
mov dword [ebp - 0x954], 0xfffffffb
cmp dword [ebp - 0x144], 0x4a1cf041
jg 0x46e8dc
mov dword [ebp - 0x1edc], 1
jmp 0x46e8e3
and dword [ebp - 0x1edc], 0
mov eax, dword [ebp - 0x1edc]
mov dword [ebp - 0xa70], eax
cmp dword [ebp - 0xa70], 4
jae 0x46e904
mov dword [ebp - 0x1ee4], 1
jmp 0x46e90b
and dword [ebp - 0x1ee4], 0
mov eax, dword [ebp - 0x1ee4]
mov dword [ebp - 0x2100], eax
xor eax, eax
inc eax
sub eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x144]
jle 0x46e934
mov dword [ebp - 0x1eec], 1
jmp 0x46e93b
and dword [ebp - 0x1eec], 0
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x1eec]
sub eax, dword [ebp - 0x144]
cmp eax, 0xe5b14f4e
jae 0x46e961
mov dword [ebp - 0x1ef4], 1
jmp 0x46e968
and dword [ebp - 0x1ef4], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x1ef4]
jg 0x46e982
mov dword [ebp - 0x22c0], 1
jmp 0x46e989
and dword [ebp - 0x22c0], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x319c], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x2ef8], eax
mov eax, dword [ebp - 0xa70]
add eax, 0x4692
jmp 0x46e9ba
and dword [ebp - 0x1efc], 0
mov eax, dword [ebp - 0x1efc]
mov dword [ebp - 0x1f04], eax
mov eax, dword [ebp - 0x1f04]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x1f0c], eax
cmp dword [ebp - 0x1f0c], 0x2b4c
jne 0x46e9fd
mov dword [ebp - 0x1f14], 1
jmp 0x46ea04
and dword [ebp - 0x1f14], 0
cmp dword [ebp - 0x1f14], 0xffffffff
jb 0x46ea19
mov dword [ebp - 0x1f1c], 1
jmp 0x46ea20
and dword [ebp - 0x1f1c], 0
mov dword [ebp - 0x954], 0xfffffffa
cmp dword [ebp - 0x954], 0
jne 0x46ea37
xor eax, eax
je 0x46ea47
xor eax, eax
je 0x46ea47
mov dword [ebp - 0x1f24], 1
jmp 0x46ea4e
and dword [ebp - 0x1f24], 0
cmp dword [ebp - 0x1f24], 1
jne 0x46ea63
mov dword [ebp - 0x1f2c], 1
jmp 0x46ea6a
and dword [ebp - 0x1f2c], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x1f2c]
jle 0x46ea84
mov dword [ebp - 0x1f34], 1
jmp 0x46ea8b
and dword [ebp - 0x1f34], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x1f34], eax
je 0x46eaf9
mov dword [ebp - 0x330], 0xf
jmp 0x46eab2
mov eax, dword [ebp - 0x330]
dec eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0xfffffff7
jg 0x46eadd
mov dword [ebp - 0x22c8], 0x96a9cbde
cmp dword [ebp - 0x954], 0
je 0x46ead0
jmp 0x46eadd
cmp dword [ebp - 0x22c8], 0
je 0x46eadb
jmp 0x46eadd
jmp 0x46eaa5
mov byte [ebp - 0x306], 0
movzx eax, byte [ebp - 0x306]
test eax, eax
je 0x46eaf7
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
jmp 0x46eb3d
mov dword [ebp - 0x868], 0xb4373c94
mov eax, dword [ebp - 0x868]
inc eax
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x868]
cmp dword [ebp - 0x868], eax
jle 0x46eb2a
mov dword [ebp - 0x1f3c], 1
jmp 0x46eb31
and dword [ebp - 0x1f3c], 0
mov eax, dword [ebp - 0x1f3c]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x338], 3
mov dword [ebp - 0x564], 0x4d035725
push 1
lea ecx, [ebp - 0x2030]
call fcn.0043694d
mov dword [ebp - 0x1fb4], 5
mov dword [ebp - 0x5a8], 0
jmp 0x46eb81
mov eax, dword [ebp - 0x5a8]
inc eax
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 1
jge 0x46eba3
push dword [ebp - 0x5a8]
lea ecx, [ebp - 0x2030]
call fcn.00436a3b
mov dword [eax], 0xfff6
jmp 0x46eb74
mov dword [ebp - 0x338], 0
jmp 0x46ebbc
mov eax, dword [ebp - 0x338]
dec eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0xffffffea
jne 0x46ee0a
mov dword [ebp - 0x340], 0x4217
mov dword [ebp - 0xc1c], 0x55752783
mov eax, 0xa7275995
test eax, eax
je 0x46ece8
push 0
lea ecx, [ebp - 0x2030]
call fcn.00436a3b
cmp dword [eax], 0
je 0x46ec11
cmp dword [ebp - 0x338], 0
je 0x46ec11
mov dword [ebp - 0x1f44], 1
jmp 0x46ec18
and dword [ebp - 0x1f44], 0
mov eax, dword [ebp - 0x564]
add eax, dword [ebp - 0x1f44]
jne 0x46ec41
push 0
lea ecx, [ebp - 0x2030]
call fcn.00436a3b
cmp dword [eax], 0
jne 0x46ec41
and dword [ebp - 0x1f4c], 0
jmp 0x46ec4b
mov dword [ebp - 0x1f4c], 1
mov eax, dword [ebp - 0x564]
cmp eax, dword [ebp - 0x1f4c]
jge 0x46ec77
push 0
lea ecx, [ebp - 0x2030]
call fcn.00436a3b
cmp dword [eax], 0
je 0x46ec77
mov dword [ebp - 0x1f54], 1
jmp 0x46ec7e
and dword [ebp - 0x1f54], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x1f54], eax
jle 0x46ec98
mov dword [ebp - 0x22d0], 1
jmp 0x46ec9f
and dword [ebp - 0x22d0], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x326c], eax
cmp dword [ebp - 0x340], 1
jl 0x46ecc0
mov dword [ebp - 0x1f5c], 1
jmp 0x46ecc7
and dword [ebp - 0x1f5c], 0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x1f5c], eax
jge 0x46ece1
mov dword [ebp - 0x1f64], 1
jmp 0x46ece8
and dword [ebp - 0x1f64], 0
mov esi, dword [ebp - 0x338]
push 0
lea ecx, [ebp - 0x2030]
call fcn.00436a3b
cmp esi, dword [eax]
jle 0x46ed0b
mov dword [ebp - 0x1f6c], 1
jmp 0x46ed12
and dword [ebp - 0x1f6c], 0
cmp dword [ebp - 0x1f6c], 0x44d4e2b7
jle 0x46ed2a
mov dword [ebp - 0x1f74], 1
jmp 0x46ed31
and dword [ebp - 0x1f74], 0
mov eax, dword [ebp - 0x1f74]
add eax, 7
cmp eax, dword [ebp - 0x1fb4]
jg 0x46ed4e
mov dword [ebp - 0x1f7c], 1
jmp 0x46ed55
and dword [ebp - 0x1f7c], 0
mov eax, dword [ebp - 0x1f7c]
mov dword [ebp - 0x1fb4], eax
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x2f00], eax
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x31a4], eax
cmp dword [ebp - 0x564], 0
jne 0x46edb0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x340], eax
je 0x46ed9c
mov dword [ebp - 0x1fbc], 1
jmp 0x46eda3
and dword [ebp - 0x1fbc], 0
push 0
lea ecx, [ebp - 0x2030]
call fcn.00436a3b
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0x2f08], eax
cmp dword [ebp - 0x340], 0
jge 0x46edd1
mov dword [ebp - 0x1fc4], 1
jmp 0x46edd8
and dword [ebp - 0x1fc4], 0
mov eax, dword [ebp - 0x340]
cmp eax, dword [ebp - 0x1fc4]
jg 0x46edf2
mov dword [ebp - 0x1fcc], 1
jmp 0x46edf9
and dword [ebp - 0x1fcc], 0
mov eax, dword [ebp - 0x1fcc]
mov dword [ebp - 0xc1c], eax
jmp 0x46ebaf
lea ecx, [ebp - 0x2030]
call fcn.00436a1f
push 2
lea ecx, [ebp - 0x910]
call fcn.0043694d
mov dword [ebp - 0x238], 0xfffffff8
mov dword [ebp - 0x22e0], 0x2703d9b9
mov dword [ebp - 0x740], 0
jmp 0x46ee4f
mov eax, dword [ebp - 0x740]
inc eax
mov dword [ebp - 0x740], eax
cmp dword [ebp - 0x740], 1
jge 0x46ee6b
mov eax, dword [ebp - 0x740]
mov dword [ebp + eax*4 - 0x2b28], 0x3250e6da
jmp 0x46ee42
mov dword [ebp - 0x238], 0
jmp 0x46ee84
mov eax, dword [ebp - 0x238]
dec eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0xfffffffc
jle 0x46ef04
push 2
lea ecx, [ebp - 0x25c0]
call fcn.0043694d
mov dword [ebp - 0x5b0], 0
jmp 0x46eeb3
mov eax, dword [ebp - 0x5b0]
inc eax
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 2
jge 0x46eed5
push dword [ebp - 0x5b0]
lea ecx, [ebp - 0x25c0]
call fcn.00436a3b
mov dword [eax], 0x2cb5
jmp 0x46eea6
push 1
lea ecx, [ebp - 0x25c0]
call fcn.00436a3b
cmp dword [eax], 0
je 0x46eef4
lea ecx, [ebp - 0x25c0]
call fcn.00436a1f
jmp 0x46ef04
lea ecx, [ebp - 0x25c0]
call fcn.00436a1f
jmp 0x46ee77
mov dword [ebp - 0x238], 0
jmp 0x46ef1d
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jg 0x46ef3e
mov dword [ebp - 0x22d8], 0x53e5
mov eax, dword [ebp - 0x22d8]
mov dword [ebp - 0x22e0], eax
jmp 0x46ef10
mov dword [ebp - 0xac4], 0x80db959c
mov dword [ebp - 0x160], 0x194ddbc3
mov dword [ebp - 0xc24], 0x5af9f7c8
push 3
lea ecx, [ebp - 0x2a3c]
call fcn.0043694d
mov dword [ebp - 0x19f0], 0xffffffff
push 1
lea ecx, [ebp - 0x25d8]
call fcn.0043694d
mov dword [ebp - 0x22e8], 0xfffffffd
mov dword [ebp - 0x68], 0
jmp 0x46ef9a
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x46efb0
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x33b0], 0xee5a9864
jmp 0x46ef93
mov dword [ebp - 0x68], 0
jmp 0x46efc0
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x46efdc
push dword [ebp - 0x68]
lea ecx, [ebp - 0x2a3c]
call fcn.00436a3b
mov dword [eax], 0xe3ca3691
jmp 0x46efb9
mov dword [ebp - 0x68], 0
jmp 0x46efec
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x46f005
push dword [ebp - 0x68]
lea ecx, [ebp - 0x25d8]
call fcn.00436a3b
and dword [eax], 0
jmp 0x46efe5
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x2b2c], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x33b0], 0xfffffffc
cmp dword [ebp - 0x160], 0xfffffffc
jle 0x46f036
mov dword [ebp - 0xc2c], 1
jmp 0x46f03d
and dword [ebp - 0xc2c], 0
mov eax, dword [ebp - 0x160]
sub eax, 0x2b5f7919
imul eax, eax, 0x8213
test eax, eax
jne 0x46f05e
mov dword [ebp - 0x19e8], 1
jmp 0x46f065
and dword [ebp - 0x19e8], 0
mov eax, dword [ebp - 0x19e8]
mov dword [ebp - 0xc24], eax
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0xc24], eax
je 0x46f08b
mov dword [ebp - 0xa54], 1
jmp 0x46f092
and dword [ebp - 0xa54], 0
push 1
lea ecx, [ebp - 0x2a3c]
call fcn.00436a3b
mov ecx, dword [ebp - 0xa54]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa54]
mov dword [ebp - 0x19f0], eax
mov eax, dword [ebp - 0x19f0]
imul eax, dword [ebp - 0xc2c]
imul eax, dword [ebp - 0x160]
add eax, 0x98ce
cmp eax, 0xfffffff7
jge 0x46f0dd
mov dword [ebp - 0x19f8], 1
jmp 0x46f0e4
and dword [ebp - 0x19f8], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x19f8], eax
jle 0x46f0fe
mov dword [ebp - 0xc34], 1
jmp 0x46f105
and dword [ebp - 0xc34], 0
mov eax, dword [ebp - 0xc34]
neg eax
cmp eax, dword [ebp - 0x160]
jg 0x46f127
cmp dword [ebp - 0x160], 0
jne 0x46f127
and dword [ebp - 0x1a00], 0
jmp 0x46f131
mov dword [ebp - 0x1a00], 1
cmp dword [ebp - 0x1a00], 0xfffffffc
jae 0x46f146
mov dword [ebp - 0xc3c], 1
jmp 0x46f14d
and dword [ebp - 0xc3c], 0
cmp dword [ebp - 0xc3c], 0
je 0x46f162
mov dword [ebp - 0x1a08], 1
jmp 0x46f169
and dword [ebp - 0x1a08], 0
mov eax, dword [ebp - 0x1a08]
sub eax, dword [ebp - 0x160]
imul eax, eax, 0x40c9
mov dword [ebp - 0xc44], eax
push 0
lea ecx, [ebp - 0x25d8]
call fcn.00436a3b
mov ecx, dword [ebp - 0xc44]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0x22e8], eax
push 0
lea ecx, [ebp - 0x25d8]
call fcn.00436a3b
mov dword [eax], 2
lea ecx, [ebp - 0x25d8]
call fcn.00436a1f
lea ecx, [ebp - 0x2a3c]
call fcn.00436a1f
mov dword [ebp - 0x2758], 0xfffffff9
mov dword [ebp - 0x2754], 0xfffffff9
mov dword [ebp - 0x2750], 0xfffffff9
mov dword [ebp - 0x274c], 0xfffffff9
lea ecx, [ebp - 0xa95]
call fcn.00436a4a
push eax
lea eax, [ebp - 0x2748]
push eax
lea eax, [ebp - 0x2758]
push eax
lea ecx, [ebp - 0x34c8]
call fcn.00436a4d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x33e0]
call fcn.004369f9
mov dword [ebp - 0x5b8], 0xffffffff
mov dword [ebp - 0x2b34], 0
mov dword [ebp - 0x2b3c], 0xffffffff
mov dword [ebp - 0x2b44], 0
mov dword [ebp - 0x2bcc], 1
mov dword [ebp - 0x2bd4], 0xfffffffe
mov dword [ebp - 0x2bdc], 0x8ee1d110
mov dword [ebp - 0x808], 0
jmp 0x46f287
mov eax, dword [ebp - 0x808]
inc eax
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x808], 4
jge 0x46f2a3
mov eax, dword [ebp - 0x808]
mov dword [ebp + eax*4 - 0x35b0], 0xfffffffc
jmp 0x46f27a
mov dword [ebp - 0x5b8], 0
jmp 0x46f2bc
mov eax, dword [ebp - 0x5b8]
inc eax
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 3
jg 0x46f349
mov dword [ebp - 0x22f0], 0xfffffff7
push 2
lea ecx, [ebp - 0x301c]
call fcn.0043694d
mov dword [ebp - 0x1a10], 0x60edac7a
mov dword [ebp - 0x748], 0
jmp 0x46f303
mov eax, dword [ebp - 0x748]
inc eax
mov dword [ebp - 0x748], eax
cmp dword [ebp - 0x748], 2
jge 0x46f322
push dword [ebp - 0x748]
lea ecx, [ebp - 0x301c]
call fcn.00436a3b
and dword [eax], 0
jmp 0x46f2f6
mov dword [ebp - 0x22f0], 0x4f402e31
mov eax, dword [ebp - 0x1a10]
dec eax
mov dword [ebp - 0x1a10], eax
lea ecx, [ebp - 0x301c]
call fcn.00436a1f
jmp 0x46f2af
lea ecx, [ebp - 0x33e0]
call fcn.00436a1f
mov dword [ebp - 0x5c0], 0
jmp 0x46f36d
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 2
jge 0x46f38f
push dword [ebp - 0x5c0]
lea ecx, [ebp - 0x910]
call fcn.00436a3b
mov dword [eax], 2
jmp 0x46f360
push 1
lea ecx, [ebp - 0x910]
call fcn.00436a3b
cmp dword [eax], 0
je 0x46f688
mov dword [ebp - 0x750], 0xffffffff
mov dword [ebp - 0x8c0], 1
push 2
lea ecx, [ebp - 0x302c]
call fcn.0043694d
mov dword [ebp - 0x2be4], 0xffffffff
mov dword [ebp - 0x2bec], 0xffffffff
push 4
lea ecx, [ebp - 0x2994]
call fcn.0043694d
mov dword [ebp - 0x200], 0
jmp 0x46f400
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x46f422
push dword [ebp - 0x200]
lea ecx, [ebp - 0x302c]
call fcn.00436a3b
mov dword [eax], 0xba2afe01
jmp 0x46f3f3
mov dword [ebp - 0x200], 0
jmp 0x46f43b
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 4
jge 0x46f45d
push dword [ebp - 0x200]
lea ecx, [ebp - 0x2994]
call fcn.00436a3b
mov dword [eax], 1
jmp 0x46f42e
mov dword [ebp - 0x8c0], 0xfffffff1
jmp 0x46f476
mov eax, dword [ebp - 0x8c0]
inc eax
mov dword [ebp - 0x8c0], eax
cmp dword [ebp - 0x8c0], 0xffffffff
jl 0x46f577
mov dword [ebp - 0x2bf4], 3
mov dword [ebp - 0x2bfc], 1
mov dword [ebp - 0x2c04], 0
mov dword [ebp - 0x2c0c], 0xe55459ee
mov dword [ebp - 0x2c14], 0
mov dword [ebp - 0x2c1c], 1
mov dword [ebp - 0x2c24], 0xffffffff
mov dword [ebp - 0x2c2c], 1
mov dword [ebp - 0x2c34], 0x5240ca70
mov dword [ebp - 0x2c3c], 0xffffffff
mov dword [ebp - 0x5c8], 0
jmp 0x46f500
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 3
jge 0x46f51c
mov eax, dword [ebp - 0x5c8]
mov dword [ebp + eax*4 - 0x357c], 0xb2415fb5
jmp 0x46f4f3
push 3
lea ecx, [ebp - 0x2994]
call fcn.00436a3b
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0xc4c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc4c]
mov dword [ecx], eax
mov byte [ebp - 0x308], 0
movzx eax, byte [ebp - 0x308]
test eax, eax
je 0x46f572
push 0
push 0x4dc
push 0x2235
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
jmp 0x46f469
lea ecx, [ebp - 0x2994]
call fcn.00436a1f
lea ecx, [ebp - 0x302c]
call fcn.00436a1f
push 1
lea ecx, [ebp - 0x910]
call fcn.00436a3b
mov ecx, dword [ebp - 0x750]
cmp dword [eax], ecx
je 0x46f5b0
mov dword [ebp - 0x1a18], 1
jmp 0x46f5b7
and dword [ebp - 0x1a18], 0
push 1
lea ecx, [ebp - 0x910]
call fcn.00436a3b
mov ecx, dword [ebp - 0x750]
cmp dword [eax], ecx
je 0x46f5da
mov dword [ebp - 0xc54], 1
jmp 0x46f5e1
and dword [ebp - 0xc54], 0
mov eax, dword [ebp - 0x1a18]
cmp eax, dword [ebp - 0xc54]
jl 0x46f652
push 1
lea ecx, [ebp - 0x910]
call fcn.00436a3b
mov eax, 0xfac12265
cmp eax, 0x831eb239
jae 0x46f614
mov dword [ebp - 0x1a20], 1
jmp 0x46f61b
and dword [ebp - 0x1a20], 0
mov eax, dword [ebp - 0x750]
cmp dword [ebp - 0x1a20], eax
jle 0x46f635
mov dword [ebp - 0x231c], 1
jmp 0x46f63c
and dword [ebp - 0x231c], 0
push 1
lea ecx, [ebp - 0x910]
call fcn.00436a3b
cmp dword [ebp - 0x750], 0
je 0x46f670
push 1
lea ecx, [ebp - 0x910]
call fcn.00436a3b
cmp dword [eax], 0
je 0x46f670
mov dword [ebp - 0xc5c], 1
jmp 0x46f677
and dword [ebp - 0xc5c], 0
mov eax, dword [ebp - 0xc5c]
mov dword [ebp - 0xac4], eax
jmp 0x46fe6b
push 3
lea ecx, [ebp - 0x928]
call fcn.0043694d
mov dword [ebp - 0x2c44], 0
mov dword [ebp - 0xc64], 1
mov dword [ebp - 0xc7c], 0x7638
mov dword [ebp - 0x234c], 0xfffffff7
mov dword [ebp - 0x168], 0
jmp 0x46f6d6
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x46f6f8
push dword [ebp - 0x168]
lea ecx, [ebp - 0x928]
call fcn.00436a3b
mov dword [eax], 0x7571177e
jmp 0x46f6c9
mov dword [ebp - 0x168], 0
jmp 0x46f711
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 4
jge 0x46f72d
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0xc00], 0
jmp 0x46f704
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xc00], 2
jmp 0x46f75b
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xc00]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xc00], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xc00], 0
jl 0x46fbe8
mov dword [ebp - 0x24c], 0xf9e6b99b
mov dword [ebp - 0x328c], 0x40f4eb9
mov dword [ebp - 0x3288], 0x40f4eb9
mov dword [ebp - 0x3284], 0x40f4eb9
mov dword [ebp - 0x3280], 0x40f4eb9
mov dword [ebp - 0x2c4c], 0
mov dword [ebp - 0x2c54], 0xfffffffa
xor eax, eax
inc eax
sub eax, dword [ebp - 0xc64]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0xc00]
jle 0x46f7d9
mov dword [ebp - 0x1a28], 1
jmp 0x46f7e0
and dword [ebp - 0x1a28], 0
cmp dword [ebp - 0x1a28], 0x616d
jg 0x46f7f8
mov dword [ebp - 0x2324], 1
jmp 0x46f7ff
and dword [ebp - 0x2324], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc00]
mov dword [ebp - 0x2c5c], eax
push 1
lea ecx, [ebp - 0x928]
call fcn.00436a3b
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xc00]
lea ecx, [ebp - 0x928]
call fcn.00436a3b
mov ecx, dword [ebp - 0xc64]
cmp dword [eax], ecx
jg 0x46f84c
mov dword [ebp - 0x1a30], 1
jmp 0x46f853
and dword [ebp - 0x1a30], 0
mov eax, dword [ebp - 0x24c]
add eax, dword [ebp - 0x1a30]
cmp eax, 1
jle 0x46f870
mov dword [ebp - 0xc6c], 1
jmp 0x46f877
and dword [ebp - 0xc6c], 0
push 0
lea ecx, [ebp - 0x928]
call fcn.00436a3b
mov ecx, dword [ebp - 0xc6c]
imul ecx, dword [eax]
test ecx, ecx
je 0x46f9d2
mov byte [ebp - 0x30a], 0
movzx eax, byte [ebp - 0x30a]
test eax, eax
je 0x46f8ad
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xc00]
lea ecx, [ebp - 0x928]
call fcn.00436a3b
cmp dword [eax], 0
je 0x46f8f7
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xc00]
lea ecx, [ebp - 0x928]
call fcn.00436a3b
mov eax, 0xca7a
test eax, eax
je 0x46f8f7
mov dword [ebp - 0x1a38], 1
jmp 0x46f8fe
and dword [ebp - 0x1a38], 0
mov eax, dword [ebp - 0x1a38]
neg eax
mov dword [ebp - 0xc74], eax
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xc00]
lea ecx, [ebp - 0x928]
call fcn.00436a3b
mov ecx, dword [ebp - 0xc74]
mov dword [eax], ecx
cmp dword [ebp - 0xc74], 0xffffffff
jge 0x46f941
mov dword [ebp - 0x1a40], 1
jmp 0x46f948
and dword [ebp - 0x1a40], 0
mov eax, dword [ebp - 0x24c]
cmp eax, dword [ebp - 0x1a40]
jne 0x46f962
mov dword [ebp - 0x232c], 1
jmp 0x46f969
and dword [ebp - 0x232c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x2c64], eax
cmp dword [ebp - 0x24c], 0
jg 0x46f9ac
mov dword [ebp - 0x2334], 0
mov dword [ebp - 0x233c], 0x3911e745
mov eax, dword [ebp - 0x2334]
mov dword [ebp - 0xc7c], eax
mov eax, dword [ebp - 0xc7c]
mov dword [ebp - 0x233c], eax
jmp 0x46f9cd
mov byte [ebp - 0x30c], 0
movzx eax, byte [ebp - 0x30c]
test eax, eax
je 0x46f9cd
push 0x1730
push 0
push 0
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
jmp 0x46fbe3
mov dword [ebp - 0xc94], 1
mov dword [ebp - 0x2c6c], 0xffffffff
mov dword [ebp - 0x2c74], 1
mov dword [ebp - 0x1a70], 4
mov dword [ebp - 0x5d0], 0
jmp 0x46fa13
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 1
jge 0x46fa2f
mov eax, dword [ebp - 0x5d0]
mov dword [ebp + eax*4 - 0x2344], 0
jmp 0x46fa06
cmp dword [ebp - 0x24c], 0
je 0x46fa54
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2344], 0
je 0x46fa54
mov dword [ebp - 0x1a60], 1
jmp 0x46fa5b
and dword [ebp - 0x1a60], 0
cmp dword [ebp - 0xc94], 0x3ca3
je 0x46fa73
mov dword [ebp - 0x1a48], 1
jmp 0x46fa7a
and dword [ebp - 0x1a48], 0
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xc00]
lea ecx, [ebp - 0x928]
call fcn.00436a3b
mov ecx, dword [ebp - 0x1a48]
cmp ecx, dword [eax]
jl 0x46faa8
mov dword [ebp - 0xc84], 1
jmp 0x46faaf
and dword [ebp - 0xc84], 0
push 0
lea ecx, [ebp - 0x928]
call fcn.00436a3b
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc84]
jg 0x46fad2
mov dword [ebp - 0x1a50], 1
jmp 0x46fad9
and dword [ebp - 0x1a50], 0
cmp dword [ebp - 0x1a50], 2
jg 0x46faee
mov dword [ebp - 0xc8c], 1
jmp 0x46faf5
and dword [ebp - 0xc8c], 0
mov esi, dword [ebp - 0x24c]
add esi, dword [ebp - 0xc8c]
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xc00]
lea ecx, [ebp - 0x928]
call fcn.00436a3b
add esi, dword [eax]
cmp esi, dword [ebp - 0x24c]
je 0x46fb2f
mov dword [ebp - 0x1a58], 1
jmp 0x46fb36
and dword [ebp - 0x1a58], 0
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x1a58], eax
je 0x46fb50
mov dword [ebp - 0x95c], 1
jmp 0x46fb57
and dword [ebp - 0x95c], 0
push 2
lea ecx, [ebp - 0x928]
call fcn.00436a3b
mov ecx, dword [ebp - 0x95c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc94]
cmp dword [ebp - 0x95c], eax
jne 0x46fb86
mov dword [ebp - 0xc9c], 1
jmp 0x46fb8d
and dword [ebp - 0xc9c], 0
mov eax, dword [ebp - 0x1a60]
cmp eax, dword [ebp - 0xc9c]
jge 0x46fba7
mov dword [ebp - 0x1a68], 1
jmp 0x46fbae
and dword [ebp - 0x1a68], 0
cmp dword [ebp - 0x1a68], 0xfffffffd
jle 0x46fbc3
mov dword [ebp - 0xca4], 1
jmp 0x46fbca
and dword [ebp - 0xca4], 0
mov eax, dword [ebp - 0xca4]
mov dword [ebp - 0x234c], eax
mov eax, dword [ebp - 0x1a70]
dec eax
mov dword [ebp - 0x1a70], eax
jmp 0x46f740
lea ecx, [ebp - 0x928]
call fcn.00436a1f
mov dword [ebp - 0xcbc], 0xb821342f
mov dword [ebp - 0x348], 0xfffffffb
mov dword [ebp - 0x5d8], 0
push 1
lea ecx, [ebp - 0x303c]
call fcn.0043694d
mov dword [ebp - 0x2354], 0xe9e84363
mov dword [ebp - 0x810], 0
jmp 0x46fc41
mov eax, dword [ebp - 0x810]
inc eax
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 1
jge 0x46fc63
push dword [ebp - 0x810]
lea ecx, [ebp - 0x303c]
call fcn.00436a3b
mov dword [eax], 0xf89b5461
jmp 0x46fc34
mov dword [ebp - 0x5d8], 0xffffffe6
jmp 0x46fc7c
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 0xa
je 0x46fcfe
mov dword [ebp - 0x758], 0xab8c3ad3
mov dword [ebp - 0x758], 0
jmp 0x46fca8
mov eax, dword [ebp - 0x758]
inc eax
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x758], 0
jg 0x46fce1
mov byte [ebp - 0x30e], 0
movzx eax, byte [ebp - 0x30e]
test eax, eax
je 0x46fcd5
push 0xc67
push 0x1667
push 0
call dword [sym.imp.USER32.dll_OffsetRect]
mov dword [ebp - 0x2354], 1
jmp 0x46fc9b
mov byte [ebp - 0x310], 0
movzx eax, byte [ebp - 0x310]
test eax, eax
je 0x46fcf9
call dword [sym.imp.USER32.dll_CreatePopupMenu]
jmp 0x46fc6f
lea ecx, [ebp - 0x303c]
call fcn.00436a1f
mov esi, dword [ebp - 0x348]
push 1
lea ecx, [ebp - 0x910]
call fcn.00436a3b
sub esi, dword [eax]
mov dword [ebp - 0xac4], esi
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0xac4], eax
jle 0x46fd3e
mov dword [ebp - 0xcac], 1
jmp 0x46fd45
and dword [ebp - 0xcac], 0
cmp dword [ebp - 0xcac], 0
ja 0x46fd73
push 1
lea ecx, [ebp - 0x910]
call fcn.00436a3b
cmp dword [eax], 0
je 0x46fd73
push 4
pop eax
test eax, eax
je 0x46fd73
mov dword [ebp - 0x1a78], 1
jmp 0x46fd7a
and dword [ebp - 0x1a78], 0
cmp dword [ebp - 0x1a78], 0xffff
je 0x46fd92
mov dword [ebp - 0xcb4], 1
jmp 0x46fd99
and dword [ebp - 0xcb4], 0
cmp dword [ebp - 0xcb4], 0xfffffffb
jne 0x46fdb2
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x46fdb2
and dword [ebp - 0x1a80], 0
jmp 0x46fdbc
mov dword [ebp - 0x1a80], 1
push 1
lea ecx, [ebp - 0x910]
call fcn.00436a3b
mov ecx, dword [ebp - 0x1a80]
cmp ecx, dword [eax]
jl 0x46fddf
mov dword [ebp - 0x235c], 1
jmp 0x46fde6
and dword [ebp - 0x235c], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x2c7c], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x2c84], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x2c8c], eax
mov dword [ebp - 0xcbc], 0x29694d2b
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0xcbc], eax
jge 0x46fe2e
mov dword [ebp - 0x1a88], 1
jmp 0x46fe35
and dword [ebp - 0x1a88], 0
push 1
lea ecx, [ebp - 0x910]
call fcn.00436a3b
mov ecx, dword [ebp - 0x1a88]
cmp ecx, dword [eax]
jge 0x46fe58
mov dword [ebp - 0xcc4], 1
jmp 0x46fe5f
and dword [ebp - 0xcc4], 0
mov eax, dword [ebp - 0xcc4]
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x4d0], 0x8a1f9496
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0xcdc], 0xde1fc657
mov dword [ebp - 0x454], 4
mov dword [ebp - 0x964], 0xffff
mov dword [ebp - 0x44c], 0xffffffff
push 2
lea ecx, [ebp - 0x2a9c]
call fcn.0043694d
mov dword [ebp - 0x5e0], 0
jmp 0x46fecd
mov eax, dword [ebp - 0x5e0]
inc eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 2
jge 0x46feec
push dword [ebp - 0x5e0]
lea ecx, [ebp - 0x2a9c]
call fcn.00436a3b
or dword [eax], 0xffffffff
jmp 0x46fec0
cmp dword [ebp - 0x4d0], 0
jne 0x47001b
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x2c94], eax
cmp dword [ebp - 0xf4], 0xffffffff
jge 0x46ff23
mov eax, 0xfffd
test eax, eax
je 0x46ff23
mov dword [ebp - 0x1a90], 1
jmp 0x46ff2a
and dword [ebp - 0x1a90], 0
mov eax, dword [ebp - 0xcdc]
cmp dword [ebp - 0x1a90], eax
jne 0x46ff44
mov dword [ebp - 0xccc], 1
jmp 0x46ff4b
and dword [ebp - 0xccc], 0
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xccc]
sub ecx, 6
imul eax, ecx
cmp eax, 0x5027
jl 0x46ff70
mov dword [ebp - 0x1a98], 1
jmp 0x46ff77
and dword [ebp - 0x1a98], 0
mov eax, dword [ebp - 0x4d0]
add eax, dword [ebp - 0x1a98]
cmp eax, dword [ebp - 0xf4]
je 0x46ff97
mov dword [ebp - 0xcd4], 1
jmp 0x46ff9e
and dword [ebp - 0xcd4], 0
cmp dword [ebp - 0xcd4], 0xfffffffb
je 0x46ffb3
mov dword [ebp - 0x1aa0], 1
jmp 0x46ffba
and dword [ebp - 0x1aa0], 0
mov eax, dword [ebp - 0x1aa0]
sub eax, dword [ebp - 0x454]
cmp eax, dword [ebp - 0xcdc]
jg 0x46ffda
mov dword [ebp - 0x1aa8], 1
jmp 0x46ffe1
and dword [ebp - 0x1aa8], 0
cmp dword [ebp - 0x1aa8], 0xf7d9
jge 0x46fff9
mov dword [ebp - 0xce4], 1
jmp 0x470000
and dword [ebp - 0xce4], 0
imul eax, dword [ebp - 0xce4], 0xa2b3b7be
cmp eax, dword [ebp - 0x964]
jle 0x47001b
and dword [ebp - 0x1ab0], 0
jmp 0x470025
mov dword [ebp - 0x1ab0], 1
mov eax, dword [ebp - 0x1ab0]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
je 0x470256
push 4
lea ecx, [ebp - 0x25f0]
call fcn.0043694d
mov dword [ebp - 0x228], 0
jmp 0x470064
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x470080
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x1f8c], 0
jmp 0x470057
mov dword [ebp - 0x228], 0
jmp 0x470099
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 4
jge 0x4700bb
push dword [ebp - 0x228]
lea ecx, [ebp - 0x25f0]
call fcn.00436a3b
mov dword [eax], 0x579deb47
jmp 0x47008c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f8c]
cmp dword [ebp - 0x4d0], eax
jge 0x4700dc
mov dword [ebp - 0xcec], 1
jmp 0x4700e3
and dword [ebp - 0xcec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f8c]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0xcec]
sub eax, dword [ebp - 0x454]
mov dword [ebp - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f8c], 0
je 0x470149
push 3
lea ecx, [ebp - 0x25f0]
call fcn.00436a3b
mov dword [eax], 0x867f5d1c
mov eax, 0x867f5d1c
test eax, eax
je 0x470149
cmp dword [ebp - 0x4d0], 0
je 0x470149
mov dword [ebp - 0x1ab8], 1
jmp 0x470150
and dword [ebp - 0x1ab8], 0
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x1ab8]
jne 0x47016a
mov dword [ebp - 0x2364], 1
jmp 0x470171
and dword [ebp - 0x2364], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x2c9c], eax
mov eax, dword [ebp - 0x964]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x1f8c]
cmp eax, 0xffffffff
je 0x4701ae
mov dword [ebp - 0xcf4], 1
jmp 0x4701b5
and dword [ebp - 0xcf4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f8c]
sub eax, dword [ebp - 0xcf4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1f8c]
jl 0x4701e3
mov dword [ebp - 0x1ac0], 1
jmp 0x4701ea
and dword [ebp - 0x1ac0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f8c]
cmp dword [ebp - 0x1ac0], eax
jl 0x47020b
mov dword [ebp - 0x236c], 1
jmp 0x470212
and dword [ebp - 0x236c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f8c]
mov dword [ebp - 0x2ca4], eax
push 3
lea ecx, [ebp - 0x25f0]
call fcn.00436a3b
mov eax, dword [eax]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x44c], eax
lea ecx, [ebp - 0x25f0]
call fcn.00436a1f
jmp 0x4702f3
mov dword [ebp - 0x4a4], 0x38e0ea62
mov eax, dword [ebp - 0x4a4]
dec eax
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x44c], 0
jmp 0x470286
mov eax, dword [ebp - 0x44c]
inc eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 1
jg 0x4702f3
push dword [ebp - 0x44c]
lea ecx, [ebp - 0x2a9c]
call fcn.00436a3b
cmp dword [eax], 0
je 0x4702a7
jmp 0x4702f3
mov dword [ebp - 0x4a4], 0
jmp 0x4702c0
mov eax, dword [ebp - 0x4a4]
inc eax
mov dword [ebp - 0x4a4], eax
cmp dword [ebp - 0x4a4], 1
jg 0x4702f1
mov byte [ebp - 0x312], 0
movzx eax, byte [ebp - 0x312]
test eax, eax
je 0x4702ef
push 0
push 0x849
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
jmp 0x4702b3
jmp 0x470279
mov eax, dword [ebp - 0x964]
mov dword [ebp - 0x454], eax
lea ecx, [ebp - 0x2a9c]
call fcn.00436a1f
mov dword [ebp - 0x870], 0xcff0ea75
mov byte [ebp - 0x314], 0
movzx eax, byte [ebp - 0x314]
test eax, eax
je 0x47032e
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [ebp - 0x870], 0
jmp 0x470347
mov eax, dword [ebp - 0x870]
dec eax
mov dword [ebp - 0x870], eax
cmp dword [ebp - 0x870], 0xffffffef
jne 0x47038a
mov dword [ebp - 0xcfc], 0x256a
mov byte [ebp - 0x316], 0
movzx eax, byte [ebp - 0x316]
test eax, eax
je 0x47037b
push 0x24ea
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov eax, dword [ebp - 0xcfc]
dec eax
mov dword [ebp - 0xcfc], eax
jmp 0x47033a
mov byte [ebp - 0x31a], 0
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x48c], 0x93f9
push 3
lea ecx, [ebp - 0x2620]
call fcn.0043694d
mov dword [ebp - 0x96c], 0
push 2
lea ecx, [ebp - 0x2608]
call fcn.0043694d
mov dword [ebp - 0x84], 0
jmp 0x4703df
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x4703fb
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x259c], 0x2294
jmp 0x4703d2
mov dword [ebp - 0x84], 0
jmp 0x470414
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x470436
push dword [ebp - 0x84]
lea ecx, [ebp - 0x2620]
call fcn.00436a3b
mov dword [eax], 0x8f08877e
jmp 0x470407
mov dword [ebp - 0x84], 0
jmp 0x47044f
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x470471
push dword [ebp - 0x84]
lea ecx, [ebp - 0x2608]
call fcn.00436a3b
mov dword [eax], 0x8fed6c34
jmp 0x470442
push 5
pop eax
test eax, eax
je 0x4705a3
mov eax, dword [ebp - 0x48c]
add eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jle 0x470496
mov dword [ebp - 0x1ac8], 1
jmp 0x47049d
and dword [ebp - 0x1ac8], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1ac8]
jle 0x4704c1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x259c], 0
jne 0x4704c1
and dword [ebp - 0xd04], 0
jmp 0x4704cb
mov dword [ebp - 0xd04], 1
mov eax, dword [ebp - 0x48c]
imul eax, dword [ebp - 0xd04]
test eax, eax
jne 0x4704ee
cmp dword [ebp - 0x48c], 0
jne 0x4704ee
and dword [ebp - 0x1ad0], 0
jmp 0x4704f8
mov dword [ebp - 0x1ad0], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1ad0], eax
je 0x47050f
mov dword [ebp - 0xd0c], 1
jmp 0x470516
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xd0c], eax
je 0x47052d
mov dword [ebp - 0x1ad8], 1
jmp 0x470534
and dword [ebp - 0x1ad8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x259c]
cmp dword [ebp - 0x1ad8], eax
jl 0x470555
mov dword [ebp - 0xd14], 1
jmp 0x47055c
and dword [ebp - 0xd14], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xd14]
jle 0x470573
mov dword [ebp - 0x1ae0], 1
jmp 0x47057a
and dword [ebp - 0x1ae0], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1ae0]
sub ecx, dword [ebp - 0x24]
push 4
pop edx
shl edx, 0
add ecx, dword [ebp + edx - 0x259c]
add eax, ecx
je 0x4705a3
mov dword [ebp - 0xd1c], 1
jmp 0x4705aa
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0xd1c], eax
jle 0x4705bf
cmp dword [ebp - 0x48c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x259c]
mov dword [ebp - 0x1ae8], eax
push 1
lea ecx, [ebp - 0x2620]
call fcn.00436a3b
mov ecx, dword [ebp - 0x1ae8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1ae8]
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x96c], eax
jge 0x47060d
mov dword [ebp - 0xa5c], 1
jmp 0x470614
and dword [ebp - 0xa5c], 0
push 1
lea ecx, [ebp - 0x2608]
call fcn.00436a3b
mov ecx, dword [ebp - 0xa5c]
mov dword [eax], ecx
imul eax, dword [ebp - 0xa5c], 0xfffffff6
test eax, eax
jne 0x47063b
push 2
pop eax
test eax, eax
je 0x470650
mov eax, 0x5950169f
test eax, eax
je 0x470650
mov dword [ebp - 0xd24], 1
jmp 0x470657
and dword [ebp - 0xd24], 0
mov eax, dword [ebp - 0xd24]
inc eax
cmp eax, 0xa67b
jg 0x47075f
mov dword [ebp - 0x5e8], 0
mov dword [ebp - 0x2cac], 0xffffffff
mov dword [ebp - 0xd2c], 0xf7a324c9
mov byte [ebp - 0x318], 0
movzx eax, byte [ebp - 0x318]
test eax, eax
je 0x4706a5
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UnionRect]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x259c], 0
jl 0x4706c1
mov dword [ebp - 0x1af0], 1
jmp 0x4706c8
and dword [ebp - 0x1af0], 0
mov eax, dword [ebp - 0x1af0]
mov dword [ebp - 0xd2c], eax
mov esi, dword [ebp - 0xd2c]
push 1
lea ecx, [ebp - 0x2620]
call fcn.00436a3b
cmp esi, dword [eax]
jne 0x4706f7
mov dword [ebp - 0x1af8], 1
jmp 0x4706fe
and dword [ebp - 0x1af8], 0
mov eax, dword [ebp - 0x5e8]
cmp dword [ebp - 0x1af8], eax
jle 0x470718
mov dword [ebp - 0xd34], 1
jmp 0x47071f
and dword [ebp - 0xd34], 0
mov eax, dword [ebp - 0x5e8]
cmp dword [ebp - 0xd34], eax
je 0x470739
mov dword [ebp - 0x1b00], 1
jmp 0x470740
and dword [ebp - 0x1b00], 0
mov eax, dword [ebp - 0x5e8]
mov ecx, dword [ebp - 0x5e8]
add ecx, dword [ebp - 0x1b00]
sub eax, ecx
mov dword [ebp - 0x96c], eax
jmp 0x470815
mov dword [ebp - 0x528], 0xdb59
mov dword [ebp - 0x24], 0
jmp 0x470779
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 5
jge 0x4707c8
mov dword [ebp - 0x2374], 1
cmp dword [ebp - 0x528], 0x344ffa2b
jge 0x4707a1
mov dword [ebp - 0xd3c], 1
jmp 0x4707a8
and dword [ebp - 0xd3c], 0
mov eax, dword [ebp - 0xd3c]
mov dword [ebp - 0x2374], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x259c], 0
je 0x4707c6
jmp 0x470772
jmp 0x470772
mov dword [ebp - 0x528], 1
jmp 0x4707e1
mov eax, dword [ebp - 0x528]
inc eax
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0x3a
jl 0x470815
mov dword [ebp - 0x24], 0
jmp 0x4707fa
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x470813
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2608]
call fcn.00436a3b
and dword [eax], 0
jmp 0x4707f3
jmp 0x4707d4
lea ecx, [ebp - 0x2608]
call fcn.00436a1f
lea ecx, [ebp - 0x2620]
call fcn.00436a1f
movzx eax, byte [ebp - 0x31a]
test eax, eax
je 0x470de7
mov dword [ebp - 0xb8], 0xd327cb3f
mov dword [ebp - 0xfc], 0xb0420410
mov dword [ebp - 0x45c], 0x33e7a329
mov dword [ebp - 0x4d8], 0xdb5b4c0d
cmp dword [ebp - 0xb8], 0
je 0x470887
mov dword [ebp - 0x1b08], 5
mov eax, dword [ebp - 0x1b08]
inc eax
mov dword [ebp - 0x1b08], eax
jmp 0x470cc2
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x34], 0x694d2b5f
mov dword [ebp - 0xd84], 0x6516035
mov dword [ebp - 0xaf4], 0xec31937d
cmp dword [ebp - 0xb8], 0
je 0x4708fa
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0x124]
mov dword [ebp - 0x124], eax
xor eax, eax
inc eax
cmp eax, 0xfffffff9
jge 0x4708dc
mov dword [ebp - 0xd44], 1
jmp 0x4708e3
and dword [ebp - 0xd44], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xd44], eax
jle 0x4708fa
mov dword [ebp - 0x1b10], 1
jmp 0x470901
and dword [ebp - 0x1b10], 0
cmp dword [ebp - 0x1b10], 4
jb 0x470916
mov dword [ebp - 0xd4c], 1
jmp 0x47091d
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xd4c], eax
jl 0x470934
mov dword [ebp - 0x1b18], 1
jmp 0x47093b
and dword [ebp - 0x1b18], 0
cmp dword [ebp - 0x1b18], 1
jne 0x470950
mov dword [ebp - 0xd54], 1
jmp 0x470957
and dword [ebp - 0xd54], 0
cmp dword [ebp - 0xd54], 0
jae 0x47096c
mov dword [ebp - 0x1b20], 1
jmp 0x470973
and dword [ebp - 0x1b20], 0
mov eax, dword [ebp - 0x1b20]
neg eax
cmp eax, dword [ebp - 0xb8]
jne 0x47098f
mov dword [ebp - 0xd5c], 1
jmp 0x470996
and dword [ebp - 0xd5c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xd5c], eax
jge 0x4709ad
mov dword [ebp - 0x1b28], 1
jmp 0x4709b4
and dword [ebp - 0x1b28], 0
cmp dword [ebp - 0x1b28], 0xffffffff
jbe 0x470ab8
mov dword [ebp - 0x760], 0
jmp 0x4709da
mov eax, dword [ebp - 0x760]
inc eax
mov dword [ebp - 0x760], eax
cmp dword [ebp - 0x760], 3
jge 0x4709f6
mov eax, dword [ebp - 0x760]
mov dword [ebp + eax*4 - 0x33f8], 0
jmp 0x4709cd
mov dword [ebp - 0xb8], 0
jmp 0x470a0f
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x22
jl 0x470ab6
mov dword [ebp - 0x237c], 0x955a6194
mov dword [ebp - 0x34], 0
jmp 0x470a36
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x13
jl 0x470a61
mov byte [ebp - 0x31c], 0
movzx eax, byte [ebp - 0x31c]
test eax, eax
je 0x470a5f
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
jmp 0x470a2f
mov dword [ebp - 0x34], 0
jmp 0x470a71
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x11
jl 0x470ab1
mov byte [ebp - 0x31e], 0
movzx eax, byte [ebp - 0x31e]
test eax, eax
je 0x470a96
push 0x12d6
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x33f8]
sub eax, dword [ebp - 0x237c]
mov dword [ebp - 0xfc], eax
jmp 0x470a6a
jmp 0x470a02
jmp 0x470ad4
mov byte [ebp - 0x320], 0
movzx eax, byte [ebp - 0x320]
test eax, eax
je 0x470ad4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x2cb4], eax
mov eax, dword [ebp - 0x45c]
dec eax
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x2cbc], eax
cmp dword [ebp - 0x124], 0x2f10
jl 0x470b11
mov dword [ebp - 0xd64], 1
jmp 0x470b18
and dword [ebp - 0xd64], 0
cmp dword [ebp - 0xd64], 0xe7e5ff1f
jb 0x470b33
cmp dword [ebp - 0x34], 0
je 0x470b33
and dword [ebp - 0x1b30], 0
jmp 0x470b3d
mov dword [ebp - 0x1b30], 1
mov eax, dword [ebp - 0x1b30]
dec eax
je 0x470b57
xor eax, eax
inc eax
je 0x470b57
mov dword [ebp - 0xd6c], 1
jmp 0x470b5e
and dword [ebp - 0xd6c], 0
mov eax, dword [ebp - 0xd6c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2cc4], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x2ccc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x2cd4], eax
mov eax, dword [ebp - 0xd84]
mov dword [ebp - 0x2cdc], eax
cmp dword [ebp - 0xb8], 4
je 0x470bb2
mov eax, 0x874d2d97
test eax, eax
je 0x470bb2
mov dword [ebp - 0x1b38], 1
jmp 0x470bb9
and dword [ebp - 0x1b38], 0
mov eax, dword [ebp - 0x1b38]
mov dword [ebp - 0xaf4], eax
cmp dword [ebp - 0xaf4], 0x8156
jle 0x470bdd
mov dword [ebp - 0xd74], 1
jmp 0x470be4
and dword [ebp - 0xd74], 0
mov eax, dword [ebp - 0xfc]
imul eax, dword [ebp - 0xd74]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xfc], eax
jle 0x470c11
mov dword [ebp - 0x1b40], 1
jmp 0x470c18
and dword [ebp - 0x1b40], 0
cmp dword [ebp - 0x1b40], 0x61eb6136
je 0x470c2b
push 2
pop eax
test eax, eax
je 0x470c40
cmp dword [ebp - 0x124], 0
je 0x470c40
mov dword [ebp - 0xd7c], 1
jmp 0x470c47
and dword [ebp - 0xd7c], 0
cmp dword [ebp - 0xd7c], 1
jl 0x470c5c
mov dword [ebp - 0x1b48], 1
jmp 0x470c63
and dword [ebp - 0x1b48], 0
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0xb8]
imul ecx, dword [ebp - 0x1b48]
imul eax, ecx
imul eax, dword [ebp - 0xb8]
test eax, eax
je 0x470c96
cmp dword [ebp - 0x124], 0
je 0x470c96
and dword [ebp - 0x1b50], 0
jmp 0x470ca0
mov dword [ebp - 0x1b50], 1
mov eax, dword [ebp - 0xd84]
add eax, dword [ebp - 0x1b50]
mov dword [ebp - 0x4d8], eax
cmp dword [ebp - 0x34], 0
mov eax, dword [ebp - 0xaf4]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x4d8], 0
jne 0x470d90
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x2ce4], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x2cec], eax
cmp dword [ebp - 0x4d8], 0xfffffff8
jg 0x470cfc
mov dword [ebp - 0xd8c], 1
jmp 0x470d03
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0xd8c]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x4d8], eax
jge 0x470d29
mov dword [ebp - 0x1b58], 1
jmp 0x470d30
and dword [ebp - 0x1b58], 0
mov eax, dword [ebp - 0x45c]
add eax, dword [ebp - 0x1b58]
cmp dword [ebp - 0xfc], eax
jne 0x470d50
mov dword [ebp - 0xd94], 1
jmp 0x470d57
and dword [ebp - 0xd94], 0
mov eax, dword [ebp - 0x45c]
cmp dword [ebp - 0xd94], eax
jle 0x470d71
mov dword [ebp - 0x1b60], 1
jmp 0x470d78
and dword [ebp - 0x1b60], 0
mov eax, dword [ebp - 0x1b60]
neg eax
cmp eax, 0xdd35
jle 0x470d90
and dword [ebp - 0xd9c], 0
jmp 0x470d9a
mov dword [ebp - 0xd9c], 1
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0xd9c], eax
jle 0x470db4
mov dword [ebp - 0x1b68], 1
jmp 0x470dbb
and dword [ebp - 0x1b68], 0
mov eax, dword [ebp - 0x1b68]
mov dword [ebp - 0xfc], eax
push 0
push 0x1016
push 0x12d3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
lea ecx, [ebp - 0x910]
call fcn.00436a1f
mov dword [ebp - 0x13c], 0x6c3a0b8e
mov dword [ebp - 0x1b98], 0
mov dword [ebp - 0x974], 0x3e45bbbd
mov dword [ebp - 0x2384], 0xffffffff
mov dword [ebp - 0x5f0], 0
jmp 0x470e33
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 3
jge 0x470e4f
mov eax, dword [ebp - 0x5f0]
mov dword [ebp + eax*4 - 0xb7c], 0x4438bea1
jmp 0x470e26
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb7c]
mov dword [ebp - 0x2cf4], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xb7c]
cmp dword [ebp + eax - 0xb7c], ecx
je 0x470e89
mov dword [ebp - 0xda4], 1
jmp 0x470e90
and dword [ebp - 0xda4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb7c]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0xda4]
jle 0x470ebd
mov dword [ebp - 0x1b70], 1
jmp 0x470ec4
and dword [ebp - 0x1b70], 0
cmp dword [ebp - 0x1b70], 0x9f361739
jne 0x470ee5
mov eax, 0x5898
test eax, eax
je 0x470ee5
mov dword [ebp - 0xdac], 1
jmp 0x470eec
and dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0xdac]
add eax, 0xa388
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xb7c]
jge 0x470f12
mov dword [ebp - 0x1b78], 1
jmp 0x470f19
and dword [ebp - 0x1b78], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb7c]
cmp dword [ebp - 0x1b78], eax
je 0x470f9d
mov dword [ebp - 0x13c], 2
jmp 0x470f47
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jl 0x470f98
mov eax, dword [ebp - 0x13c]
mov eax, dword [ebp + eax*4 - 0xb7c]
sub eax, dword [ebp - 0x1b98]
mov dword [ebp - 0x974], eax
mov byte [ebp - 0x43c], 0
movzx eax, byte [ebp - 0x43c]
test eax, eax
je 0x470f96
push 0x1f36
push 0
push 0x25be
push 0
push 0x13ab
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
jmp 0x470f3a
jmp 0x47115c
mov dword [ebp - 0xdbc], 0x7b1b
push 3
lea ecx, [ebp - 0x2638]
call fcn.0043694d
push 1
lea ecx, [ebp - 0x29ac]
call fcn.0043694d
mov dword [ebp - 0x170], 0
jmp 0x470fda
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jge 0x470ff9
push dword [ebp - 0x170]
lea ecx, [ebp - 0x2638]
call fcn.00436a3b
and dword [eax], 0
jmp 0x470fcd
mov dword [ebp - 0x170], 0
jmp 0x471012
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x471034
push dword [ebp - 0x170]
lea ecx, [ebp - 0x29ac]
call fcn.00436a3b
mov dword [eax], 0xf2fd6b22
jmp 0x471005
cmp dword [ebp - 0xdbc], 0x5a26cdee
jg 0x47104c
mov dword [ebp - 0xdb4], 1
jmp 0x471053
and dword [ebp - 0xdb4], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0xdb4], eax
je 0x47106d
mov dword [ebp - 0x1b80], 1
jmp 0x471074
and dword [ebp - 0x1b80], 0
mov eax, dword [ebp - 0x1b80]
mov dword [ebp - 0x13c], eax
mov eax, 0xc65b0b56
sub eax, dword [ebp - 0x13c]
add eax, 7
mov ecx, dword [ebp - 0xdbc]
imul ecx, eax
mov dword [ebp - 0x1b88], ecx
push 1
lea ecx, [ebp - 0x2638]
call fcn.00436a3b
mov ecx, dword [ebp - 0x1b88]
mov dword [eax], ecx
cmp dword [ebp - 0x1b88], 0
jne 0x4710d6
push 2
lea ecx, [ebp - 0x2638]
call fcn.00436a3b
cmp dword [eax], 0
jne 0x4710d6
and dword [ebp - 0xdc4], 0
jmp 0x4710e0
mov dword [ebp - 0xdc4], 1
cmp dword [ebp - 0xdc4], 0x6dd2cc91
jle 0x4710f8
mov dword [ebp - 0x1b90], 1
jmp 0x4710ff
and dword [ebp - 0x1b90], 0
push 0
lea ecx, [ebp - 0x29ac]
call fcn.00436a3b
mov ecx, dword [ebp - 0x1b90]
mov dword [eax], ecx
mov byte [ebp - 0x2af], 0
movzx eax, byte [ebp - 0x2af]
test eax, eax
je 0x471146
push 0
push 0x680
push 0xe75
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
lea ecx, [ebp - 0x29ac]
call fcn.00436a1f
lea ecx, [ebp - 0x2638]
call fcn.00436a1f
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2384]
cmp dword [ebp + eax - 0xb7c], ecx
je 0x47117d
mov dword [ebp - 0xdcc], 1
jmp 0x471184
and dword [ebp - 0xdcc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb7c]
cmp dword [ebp - 0xdcc], eax
jg 0x4711a5
mov dword [ebp - 0xdd4], 1
jmp 0x4711ac
and dword [ebp - 0xdd4], 0
mov eax, dword [ebp - 0x1b98]
imul eax, dword [ebp - 0xdd4]
cmp dword [ebp - 0x974], eax
je 0x4711cd
mov dword [ebp - 0x1ba0], 1
jmp 0x4711d4
and dword [ebp - 0x1ba0], 0
mov eax, dword [ebp - 0x1ba0]
mov dword [ebp - 0x974], eax
cmp dword [ebp + 8], 2
jl 0x47c7df
push 3
lea ecx, [ebp - 0x8ec]
call fcn.0043694d
mov dword [ebp - 0x2cfc], 0
mov dword [ebp - 0x1ba8], 1
mov dword [ebp - 0x1bc0], 0x7638
mov dword [ebp - 0x23b4], 0xfffffff7
mov dword [ebp - 0x208], 0
jmp 0x471238
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x47125a
push dword [ebp - 0x208]
lea ecx, [ebp - 0x8ec]
call fcn.00436a3b
mov dword [eax], 0x7571177e
jmp 0x47122b
mov dword [ebp - 0x208], 0
jmp 0x471273
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 4
jge 0x47128f
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0xbf0], 0
jmp 0x471266
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xbf0], 2
jmp 0x4712bd
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xbf0], 0
jl 0x47174a
mov dword [ebp - 0x27c], 0xf9e6b99b
mov dword [ebp - 0x32a0], 0x40f4eb9
mov dword [ebp - 0x329c], 0x40f4eb9
mov dword [ebp - 0x3298], 0x40f4eb9
mov dword [ebp - 0x3294], 0x40f4eb9
mov dword [ebp - 0x2d04], 0
mov dword [ebp - 0x2d0c], 0xfffffffa
xor eax, eax
inc eax
sub eax, dword [ebp - 0x1ba8]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0xbf0]
jle 0x47133b
mov dword [ebp - 0xddc], 1
jmp 0x471342
and dword [ebp - 0xddc], 0
cmp dword [ebp - 0xddc], 0x616d
jg 0x47135a
mov dword [ebp - 0x238c], 1
jmp 0x471361
and dword [ebp - 0x238c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbf0]
mov dword [ebp - 0x2d14], eax
push 1
lea ecx, [ebp - 0x8ec]
call fcn.00436a3b
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xbf0]
lea ecx, [ebp - 0x8ec]
call fcn.00436a3b
mov ecx, dword [ebp - 0x1ba8]
cmp dword [eax], ecx
jg 0x4713ae
mov dword [ebp - 0xde4], 1
jmp 0x4713b5
and dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0x27c]
add eax, dword [ebp - 0xde4]
cmp eax, 1
jle 0x4713d2
lea ecx, [ebp - 0x8ec]
call fcn.00436a1f
mov dword [ebp - 0xd0], 0xfffffff7
mov dword [ebp - 0x1c00], 3
mov dword [ebp - 0x23e4], 0xffffffff
mov dword [ebp - 0x5f8], 0
jmp 0x47178c
mov eax, dword [ebp - 0x5f8]
inc eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 2
jge 0x4717a8
mov eax, dword [ebp - 0x5f8]
mov dword [ebp + eax*4 - 0x2a0], 0xb57f
jmp 0x47177f
mov dword [ebp - 0xd0], 1
jmp 0x4717c1
cmp dword [ebp - 0xd0], 0
jl 0x471ae0
cmp dword [ebp + 8], 1
jne 0x481297
mov dword [ebp - 0x4cc], 0xcd50
mov dword [ebp - 0x458], 0xd9dcee34
push 2
lea ecx, [ebp - 0x2a78]
call fcn.0043694d
mov dword [ebp - 0x5e4], 0
jmp 0x47c823
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 2
jge 0x47c842
push dword [ebp - 0x5e4]
lea ecx, [ebp - 0x2a78]
call fcn.00436a3b
or dword [eax], 0xffffffff
jmp 0x47c816
mov byte [ebp - 0x359], 0
movzx eax, byte [ebp - 0x359]
test eax, eax
je 0x47c86d
push 0x95d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
mov eax, dword [ebp - 0x4cc]
cmp dword [ebp - 0x4cc], eax
jle 0x47c887
mov dword [ebp - 0x171c], 1
jmp 0x47c88e
and dword [ebp - 0x171c], 0
mov eax, dword [ebp - 0x171c]
sub eax, dword [ebp - 0x458]
cmp eax, 1
jne 0x47c8ab
mov dword [ebp - 0x1b8c], 1
jmp 0x47c8b2
and dword [ebp - 0x1b8c], 0
mov eax, dword [ebp - 0x458]
imul eax, dword [ebp - 0x1b8c]
cmp eax, dword [ebp - 0x458]
je 0x47c8d3
mov dword [ebp - 0x224c], 1
jmp 0x47c8da
and dword [ebp - 0x224c], 0
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x31d4], eax
cmp dword [ebp - 0x458], 0x4b1b055c
jl 0x47c904
cmp dword [ebp - 0x458], 0
jne 0x47c904
and dword [ebp - 0x1724], 0
jmp 0x47c90e
mov dword [ebp - 0x1724], 1
mov eax, dword [ebp - 0x4cc]
imul eax, dword [ebp - 0x4cc]
add eax, dword [ebp - 0x1724]
je 0x47c92f
mov dword [ebp - 0x1dd0], 1
jmp 0x47c936
and dword [ebp - 0x1dd0], 0
mov eax, dword [ebp - 0x458]
cmp dword [ebp - 0x1dd0], eax
je 0x47c956
mov dword [ebp - 0x258], 7
mov dword [ebp - 0x1500], 0xfffffff7
mov dword [ebp - 0x9a0], 0xcb1a7a81
mov dword [ebp - 0x14d8], 0x71658a60
mov dword [ebp - 0x58c], 0
jmp 0x4812d8
mov eax, dword [ebp - 0x58c]
inc eax
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 1
jge 0x4812f4
mov eax, dword [ebp - 0x58c]
mov dword [ebp + eax*4 - 0x22ec], 0x90ae735
jmp 0x4812cb
cmp dword [ebp - 0x258], 0x92758e92
jb 0x48130c
mov dword [ebp - 0x14b0], 1
jmp 0x481313
and dword [ebp - 0x14b0], 0
cmp dword [ebp - 0x14b0], 0xa8ed40a1
ja 0x48132b
mov dword [ebp - 0x14b8], 1
jmp 0x481332
and dword [ebp - 0x14b8], 0
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x14b8], eax
jne 0x48134c
mov dword [ebp - 0x14c0], 1
jmp 0x481353
and dword [ebp - 0x14c0], 0
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x14c0], eax
je 0x48136d
mov dword [ebp - 0x14c8], 1
jmp 0x481374
and dword [ebp - 0x14c8], 0
mov eax, dword [ebp - 0x14c8]
mov dword [ebp - 0x9a0], eax
cmp dword [ebp - 0x9a0], 0
je 0x48139e
cmp dword [ebp - 0x9a0], 0
je 0x48139e
mov dword [ebp - 0x14d0], 1
jmp 0x4813a5
and dword [ebp - 0x14d0], 0
mov eax, dword [ebp - 0x14d8]
cmp dword [ebp - 0x14d0], eax
jne 0x4813bf
mov dword [ebp - 0x14e0], 1
jmp 0x4813c6
and dword [ebp - 0x14e0], 0
mov eax, dword [ebp - 0x14d8]
cmp dword [ebp - 0x14e0], eax
jg 0x4813e0