Function at 0x4606d0
Capabilities:
Check for time delay via queryperformancecounter
Create thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49ef06
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x328
mov eax, dword [0x4d7200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x304], edi
mov eax, dword [edi + 0xbc]
lea ecx, [edi + 0x2e8]
cmp eax, 0xffffffff
jne 0x46072c
mov eax, dword [ecx]
mov edx, dword [edi + 0x2e4]
test edx, edx
je 0x463740
cmp eax, 1
jl 0x463740
cmp eax, dword [ecx]
jg 0x463740
lea eax, [eax + eax*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x463740
cmp dword [edx + eax*8], 0xf
jne 0x463740
push 2
push 0xffffffffffffffff
push 0x100c
push dword [edx + eax*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x338], eax
test eax, eax
js 0x463740
push ecx
push dword [edi + 0xd8]
lea ecx, [edi + 0x2a8]
call fcn.00416520
mov dword [ebp - 0x324], eax
lea ecx, [edi + 0x2a8]
test eax, eax
jns 0x4607be
push ecx
push 0x1c2
push 0x96
push ecx
push 0
push 0x4c93b8
jmp 0x463759
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
movq qword [ebp - 0x28], xmm0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 0x20], 1
mov dword [ebp - 4], 0
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov byte [ebp - 0x2c], 1
push 4
push eax
mov byte [ebp - 4], 1
push dword [edi + 0xd8]
call fcn.00416470
mov dword [ebp - 0x318], eax
test eax, eax
jne 0x460834
push eax
lea ecx, [ebp - 0x34]
call fcn.00401860
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x318], eax
jmp 0x460842
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x2c], 1
cmp eax, 0x4c21e0
je 0x460870
test eax, eax
je 0x460916
mov esi, 0x4c21e0
sub eax, esi
mov dword [ebp - 0x2e4], eax
nop
movzx eax, word [eax + esi]
mov ecx, eax
test ax, ax
jne 0x4608bd
cmp word [esi], ax
jne 0x4608c2
push ecx
push 0x1c2
push 0x96
lea eax, [edi + 0x2a8]
mov ecx, edi
push eax
push 0
push 0x4c9c90
call fcn.00432ac0
or edi, 0xffffffff
mov eax, dword [ebp - 0x318]
test eax, eax
je 0x4608a6
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x4608b6
push eax
call fcn.00489f13
add esp, 4
mov eax, edi
jmp 0x463763
cmp ax, word [esi]
je 0x460908
xor edx, edx
cmp dx, ax
jne 0x4608d1
mov dword [ebp - 0x2ec], edx
jmp 0x4608e3
push ecx
call fcn.0048e184
movzx eax, ax
add esp, 4
mov dword [ebp - 0x2ec], eax
movzx eax, word [esi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x4608f3
xor eax, eax
jmp 0x4608ff
push ecx
call fcn.0048e184
add esp, 4
movzx eax, ax
cmp word [ebp - 0x2ec], ax
jne 0x460916
mov eax, dword [ebp - 0x2e4]
add esi, 2
jmp 0x460860
xorps xmm0, xmm0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x48], xmm0
push ecx
mov byte [ebp - 4], 2
lea eax, [edi + 0x2a8]
movaps xmm0, xmmword [0x4cd010]
lea ecx, [ebp - 0x58]
push 0
push dword [edi + 0x54]
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0xd
push dword [edi + 0x44]
mov dword [ebp - 0x3c], 0
push eax
call fcn.00417480
mov edx, dword [ebp - 0x324]
lea ecx, [edi + 0x2a8]
push 1
push edx
mov byte [ebp - 4], 3
push dword [edi + 0xd8]
call fcn.00416470
mov dword [ebp - 0x2e4], eax
lea esi, [edi + 0x1e4]
test eax, eax
jne 0x460995
push eax
mov ecx, esi
call fcn.00401860
jmp 0x4609b7
mov eax, dword [esi]
test eax, eax
je 0x4609a4
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [esi], eax
mov dword [esi + 4], 0
mov byte [esi + 8], 1
mov ecx, esi
call fcn.00401fd0
push 2
push dword [ebp - 0x324]
lea ecx, [edi + 0x2a8]
mov dword [ebp - 0x300], eax
push dword [edi + 0xd8]
mov dword [ebp - 0x32c], edx
call fcn.00416470
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x4609f7
push eax
mov ecx, esi
call fcn.00401860
jmp 0x460a19
mov eax, dword [esi]
test eax, eax
je 0x460a06
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [esi], eax
mov dword [esi + 4], 0
mov byte [esi + 8], 1
lea ecx, [edi + 0x1e4]
call fcn.00401fd0
mov ecx, dword [edi + 0xd8]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x308], edx
cmp ecx, 0xffffffff
jne 0x460a43
mov ecx, dword [edi + 0x2e8]
jmp 0x460a64
mov edx, dword [edi + 0x2e4]
test edx, edx
je 0x460a88
cmp ecx, 1
jl 0x460a88
cmp ecx, dword [edi + 0x2e8]
jg 0x460a88
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x460a88
mov eax, dword [edi + 0x2e4]
lea ecx, [ecx + ecx*8]
push 0
push 0
push 0x1004
push dword [eax + ecx*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [edi + 0xd8]
jmp 0x460a8a
xor eax, eax
mov edx, dword [ebp - 0x324]
inc edx
push 4
cmp eax, edx
jle 0x460c1a
push edx
push ecx
lea ecx, [edi + 0x2a8]
call fcn.00416470
mov esi, eax
mov eax, dword [ebp - 0x318]
test esi, esi
jne 0x460add
test eax, eax
je 0x460ac1
push eax
call fcn.00489f13
add esp, 4
push 2
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
call fcn.0048a2cb
add esp, 4
xor ecx, ecx
mov word [eax], cx
jmp 0x460af3
test eax, eax
je 0x460aea
push eax
call fcn.00489f13
add esp, 4
mov eax, esi
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x2c], 1
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x318], eax
cmp eax, 0x4c21e0
je 0x460b30
test eax, eax
je 0x460bbf
mov esi, 0x4c21e0
sub eax, esi
mov dword [ebp - 0x2e4], eax
nop dword [eax]
movzx eax, word [esi + eax]
mov ecx, eax
test ax, ax
jne 0x460b66
cmp word [esi], ax
jne 0x460b6b
mov eax, dword [ebp - 0x324]
lea ecx, [edi + 0x2a8]
push 2
inc eax
push eax
push dword [edi + 0xd8]
call fcn.00416470
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x460bd1
push eax
lea ecx, [edi + 0x1e4]
call fcn.00401860
jmp 0x460c01
cmp ax, word [esi]
je 0x460bb1
xor edx, edx
cmp dx, ax
jne 0x460b7a
mov dword [ebp - 0x2ec], edx
jmp 0x460b8c
push ecx
call fcn.0048e184
movzx eax, ax
add esp, 4
mov dword [ebp - 0x2ec], eax
movzx eax, word [esi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x460b9c
xor eax, eax
jmp 0x460ba8
push ecx
call fcn.0048e184
add esp, 4
movzx eax, ax
cmp word [ebp - 0x2ec], ax
jne 0x460bbf
mov eax, dword [ebp - 0x2e4]
add esi, 2
jmp 0x460b20
mov eax, dword [ebp - 0x324]
push 1
inc eax
push eax
push dword [edi + 0xd8]
jmp 0x460c26
mov eax, dword [edi + 0x1e4]
test eax, eax
je 0x460be4
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [edi + 0x1e4], eax
mov dword [edi + 0x1e8], 0
mov byte [edi + 0x1ec], 1
lea ecx, [edi + 0x1e4]
call fcn.00401fd0
add eax, dword [ebp - 0x2f8]
adc edx, dword [ebp - 0x308]
jmp 0x460c91
push dword [ebp - 0x338]
push dword [edi + 0xbc]
lea ecx, [edi + 0x2a8]
call fcn.00416470
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x460c4a
push 0
lea ecx, [edi + 0x1e4]
call fcn.00401860
jmp 0x460c7a
mov eax, dword [edi + 0x1e4]
test eax, eax
je 0x460c5d
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [edi + 0x1e4], eax
mov byte [edi + 0x1ec], 1
mov dword [edi + 0x1e8], 0
lea ecx, [edi + 0x1e4]
call fcn.00401fd0
sub eax, dword [ebp - 0x300]
sbb edx, dword [ebp - 0x32c]
push 3
push dword [ebp - 0x324]
lea ecx, [edi + 0x2a8]
mov dword [ebp - 0x310], eax
push dword [edi + 0xd8]
mov dword [ebp - 0x314], edx
call fcn.00416470
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x460cce
push eax
lea ecx, [edi + 0x1e4]
call fcn.00401860
jmp 0x460cfe
mov eax, dword [edi + 0x1e4]
test eax, eax
je 0x460ce1
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [edi + 0x1e4], eax
mov dword [edi + 0x1e8], 0
mov byte [edi + 0x1ec], 1
lea ecx, [edi + 0x1e4]
call fcn.00401fd0
add eax, 0x100000
mov esi, eax
mov dword [ebp - 0x330], eax
adc edx, 0
and esi, 0xfffff
mov eax, esi
mov dword [ebp - 0x334], edx
or eax, 0
je 0x460d48
mov ecx, 0x100000
mov eax, 0
sub ecx, esi
sbb eax, eax
add dword [ebp - 0x330], ecx
adc edx, eax
mov dword [ebp - 0x334], edx
push dword [edi + 0x4d8]
and dword [ebp - 0x310], 0xfff00000
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x460d70
mov eax, dword [edi + 0x4d8]
mov dword [ebp - 0x2ec], eax
jmp 0x460d7a
mov dword [ebp - 0x2ec], 0
push 0x268
lea eax, [ebp - 0x2c0]
push 0
push eax
call fcn.0048ba10
add esp, 0xc
mov word [ebp - 0x288], 0
lea esi, [edi + 0x22c]
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1b0], 0
mov byte [ebp - 0x1a8], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c0]
push 1
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
call fcn.00417000
push ecx
test esi, esi
lea eax, [ebp - 0x2c0]
lea ecx, [ebp - 0x2c0]
cmovne eax, esi
mov esi, dword [ebp - 0x2ec]
push esi
push 0xffffffffffffffff
push SysReAllocString
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xb4
push 0x23a
push 0x4c9d44
push 0x4c3d00
mov dword [ebp - 0x100], eax
call fcn.0040bf80
push ecx
push 0xc
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xff000000
push 0xb4
push 0x23a
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 5
call fcn.004167f0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2e4], eax
test esi, esi
je 0x460eb4
lea eax, [edi + 0x2f8]
xor esi, esi
mov dword [ebp - 0x2ec], eax
mov eax, dword [eax]
test eax, eax
je 0x460e98
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x460e98
mov eax, dword [ebp - 0x2ec]
inc esi
add eax, 4
mov dword [ebp - 0x2ec], eax
cmp esi, 0x30
jl 0x460e70
jmp 0x460eb4
mov eax, dword [ebp - 0x2e4]
mov dword [edi + esi*4 + 0x2f8], eax
inc esi
cmp esi, dword [edi + 0x2f4]
jle 0x460eb4
mov dword [edi + 0x2f4], esi
movsd xmm0, qword [0x4cc778]
xor eax, eax
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xffffff
movsd qword [ebp - 0x150], xmm0
mov dword [ebp - 0x148], 0x2bc
mov byte [ebp - 0x144], 1
mov byte [ebp - 0x102], 0
inc eax
cmp word [eax*2 + 0x4bff50], 0
jne 0x460ef2
inc eax
push eax
push 0x4bff50
lea eax, [ebp - 0x142]
push 0x20
push eax
call fcn.0048d1b3
add esp, 0x10
mov dword [ebp - 0xd0], 0x1400
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
test al, al
je 0x460f9b
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x1c
push 0x230
push 5
and eax, 1
push 5
shl eax, 0x11
add eax, 0x50000300
push eax
push 0x4c9d6c
push 0x4c018c
push 0
call esi
test eax, eax
je 0x460f9b
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cce60]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
movsd xmm0, qword [0x4cc768]
xor eax, eax
movsd qword [ebp - 0x150], xmm0
mov dword [ebp - 0x148], 0x190
mov byte [ebp - 0x144], 1
mov byte [ebp - 0x102], 0
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4bff50], 0
jne 0x460fd0
inc eax
push eax
push 0x4bff50
lea eax, [ebp - 0x142]
push 0x20
push eax
call fcn.0048d1b3
add esp, 0x10
mov dword [ebp - 0xd0], 0x400
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461070
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0x64
push 0x37
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9d98
push 0x4c018c
push 0
call esi
test eax, eax
je 0x461070
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc9f0]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x19
push 0x154
push 0x34
and eax, 1
push 0x78
shl eax, 0x11
add eax, 0x50011000
push eax
push 0
push 0x4c0258
push 0
call esi
test eax, eax
jne 0x46111f
xor esi, esi
mov dword [ebp - 0x2ec], eax
xor edx, edx
mov ecx, dword [ebp - 0x284]
test ecx, ecx
je 0x4611a2
cmp esi, 1
jl 0x461171
cmp esi, dword [ebp - 0x280]
jg 0x461171
lea eax, [esi + esi*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x461171
mov eax, dword [ebp - 0x2ec]
push 0x640000
push 1
push 0x406
lea eax, [eax + eax*8]
push dword [ecx + eax*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x284]
mov edx, esi
cmp esi, 0xffffffff
jne 0x461171
mov edx, dword [ebp - 0x280]
jmp 0x46118c
push eax
push 0x17
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
mov esi, eax
movaps xmm0, xmmword [0x4cce20]
mov dword [ebp - 0x2ec], esi
lea edx, [esi + esi*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov eax, dword [ebp - 0x284]
mov dword [eax + edx*8 + 0x44], 0
mov edx, esi
cmp esi, 0xffffffff
jne 0x4610ba
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x284]
jmp 0x4610f1
test ecx, ecx
je 0x4611a2
cmp esi, 1
jl 0x4611a2
cmp esi, dword [ebp - 0x280]
jg 0x4611a2
lea eax, [esi + esi*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x4611a2
push 0x64
push 1
push 0x405
lea eax, [edx + edx*8]
push dword [ecx + eax*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x308]
shrd ecx, eax, 0x14
shr eax, 0x14
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00401cb0
mov ecx, eax
mov dword [ebp - 0x2e4], ecx
cmp dword [ecx], 0
jne 0x4611e6
push 2
call fcn.0048a2cb
mov ecx, dword [ebp - 0x2e4]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
mov eax, dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2e4], eax
call fcn.00416d40
test al, al
jne 0x461210
mov dword [ebp - 0x328], 0
jmp 0x461294
test byte [ebp - 0x78], 1
mov eax, 0x50022080
push 0
push dword [ebp - 0x1a4]
mov ecx, 0x50002080
cmovne ecx, eax
mov eax, dword [ebp - 0x280]
inc eax
or ecx, 0x10000
push eax
push dword [ebp - 0x8c]
push 0x19
push 0x50
push 0x33
push 0x1d6
push ecx
push dword [ebp - 0x2e4]
push 0x4c0220
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x46126b
mov dword [ebp - 0x328], eax
jmp 0x461294
push eax
push 0xc
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccd80]
mov dword [ebp - 0x328], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov ecx, dword [ebp - 0x310]
sub esp, 8
mov eax, dword [ebp - 0x314]
shrd ecx, eax, 0x14
push ecx
push 0
push dword [ebp - 0x328]
lea ecx, [ebp - 0x2c0]
call fcn.00412800
mov eax, dword [ebp - 0x314]
push ecx
mov ecx, dword [ebp - 0x310]
sub ecx, dword [ebp - 0x330]
sbb eax, dword [ebp - 0x334]
push eax
mov eax, dword [ebp - 0x308]
push ecx
mov ecx, dword [ebp - 0x2f8]
sub ecx, dword [ebp - 0x330]
sbb eax, dword [ebp - 0x334]
push eax
push ecx
push esi
lea ecx, [ebp - 0x2c0]
call fcn.00415380
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461375
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0xa0
push 0x50
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9db8
push 0x4c018c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x461375
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccb00]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
sub esp, 8
lea ecx, [ebp - 0x28]
push dword [ebp - 0x334]
push dword [ebp - 0x330]
call fcn.00402130
mov ecx, eax
mov dword [ebp - 0x2ec], ecx
mov eax, dword [ecx + 4]
mov byte [ecx + 8], 0
test eax, eax
jne 0x4613bb
mov edx, dword [ecx]
test edx, edx
je 0x4613b8
cmp word [edx], ax
je 0x4613b8
nop word [eax + eax]
inc eax
cmp word [edx + eax*2], 0
jne 0x4613b0
mov dword [ecx + 4], eax
xor ecx, ecx
nop dword [eax]
inc ecx
cmp word [ecx*2 + 0x4bffa0], 0
jne 0x4613c0
add eax, ecx
mov edx, 2
mov dword [ebp - 0x30c], eax
xor ecx, ecx
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
mov dword [ebp - 0x2f4], esi
mov eax, dword [ebp - 0x2ec]
add esp, 4
mov dword [ebp - 0x300], edx
mov ecx, dword [eax]
mov dword [ebp - 0x2e4], ecx
test ecx, ecx
je 0x461441
movzx ecx, word [ecx]
mov dword [ebp - 0x2f4], esi
mov eax, ecx
test cx, cx
je 0x461441
mov edi, dword [ebp - 0x2e4]
sub edi, edx
mov dword [ebp - 0x2f4], esi
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x461430
mov esi, 0x4bffa0
mov ecx, 0x20
sub esi, edx
nop dword [eax]
mov word [edx], cx
lea edx, [edx + 2]
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x461450
mov esi, dword [ebp - 0x2ec]
xor eax, eax
mov word [edx], ax
mov eax, dword [esi]
test eax, eax
je 0x46147b
push eax
call fcn.00489f13
add esp, 4
mov ecx, dword [ebp - 0x300]
mov eax, dword [ebp - 0x30c]
mov dword [esi], ecx
mov dword [esi + 4], eax
mov byte [esi + 8], 1
test ecx, ecx
jne 0x4614a8
push 2
call fcn.0048a2cb
add esp, 4
mov dword [esi], eax
xor ecx, ecx
mov word [eax], cx
mov dword [esi + 4], ecx
mov byte [esi + 8], 1
lea ecx, [ebp - 0x2c0]
mov esi, dword [esi]
call fcn.00416d40
test al, al
je 0x461527
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x14
push 0x50
push 0x50
and eax, 1
push 0xbe
shl eax, 0x11
add eax, 0x50800302
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x4c018c
push 0
call esi
test eax, eax
je 0x46152d
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccc60]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
jmp 0x46152d
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x4615a2
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0xa0
push 0x67
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9de8
push 0x4c018c
push 0
call esi
test eax, eax
je 0x4615a2
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccb10]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
sub esp, 8
lea ecx, [ebp - 0x28]
push dword [ebp - 0x314]
push dword [ebp - 0x310]
call fcn.00402130
mov dword [ebp - 0x2f0], eax
mov esi, dword [eax + 4]
mov byte [eax + 8], 0
test esi, esi
jne 0x4615e0
mov ecx, dword [eax]
test ecx, ecx
je 0x4615dd
cmp word [ecx], si
je 0x4615dd
inc esi
cmp word [ecx + esi*2], 0
jne 0x4615d5
mov dword [eax + 4], esi
xor eax, eax
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x4615e2
add esi, eax
xor ecx, ecx
mov edx, 2
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov ecx, dword [ebp - 0x2f0]
mov edx, eax
mov edi, dword [ebp - 0x2f4]
add esp, 4
mov dword [ebp - 0x2ec], edx
mov dword [ebp - 0x31c], edi
mov eax, dword [ecx]
mov dword [ebp - 0x2e4], eax
test eax, eax
je 0x461671
movzx ecx, word [eax]
mov eax, ecx
mov dword [ebp - 0x30c], eax
mov eax, edi
mov dword [ebp - 0x31c], eax
test cx, cx
je 0x461671
mov edi, dword [ebp - 0x2e4]
sub edi, edx
movzx ecx, cx
mov dword [ebp - 0x31c], eax
nop dword [eax + eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x461660
mov ecx, 0x4bffa0
mov edi, 0x20
sub ecx, edx
nop dword [eax]
mov word [edx], di
lea edx, [edx + 2]
movzx eax, word [edx + ecx]
mov edi, eax
test ax, ax
jne 0x461680
mov ecx, dword [ebp - 0x2f0]
xor eax, eax
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x4616b1
push eax
call fcn.00489f13
mov ecx, dword [ebp - 0x2f0]
add esp, 4
mov eax, dword [ebp - 0x2ec]
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov byte [ecx + 8], 1
test eax, eax
jne 0x4616de
push 2
call fcn.0048a2cb
mov ecx, dword [ebp - 0x2f0]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
mov esi, dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x46175d
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x14
push 0x50
push 0x67
and eax, 1
push 0xbe
shl eax, 0x11
add eax, 0x50800302
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x4c018c
push 0
call esi
test eax, eax
je 0x461763
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccc70]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
jmp 0x461763
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x4617d8
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0xa0
push 0x7e
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9e18
push 0x4c018c
push 0
call esi
test eax, eax
je 0x4617d8
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccb20]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
sub esp, 8
lea ecx, [ebp - 0x28]
push dword [ebp - 0x308]
push dword [ebp - 0x2f8]
call fcn.00402130
mov dword [ebp - 0x2f0], eax
mov esi, dword [eax + 4]
mov byte [eax + 8], 0
test esi, esi
jne 0x46181b
mov ecx, dword [eax]
test ecx, ecx
je 0x461818
cmp word [ecx], si
je 0x461818
nop dword [eax + eax]
inc esi
cmp word [ecx + esi*2], 0
jne 0x461810
mov dword [eax + 4], esi
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x461820
add esi, eax
xor ecx, ecx
mov edx, 2
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov ecx, dword [ebp - 0x2f0]
mov edx, eax
mov edi, dword [ebp - 0x31c]
add esp, 4
mov dword [ebp - 0x2ec], edx
mov dword [ebp - 0x2f4], edi
mov eax, dword [ecx]
mov dword [ebp - 0x2e4], eax
test eax, eax
je 0x4618b1
movzx ecx, word [eax]
mov eax, ecx
mov dword [ebp - 0x30c], eax
mov eax, edi
mov dword [ebp - 0x2f4], eax
test cx, cx
je 0x4618b1
mov edi, dword [ebp - 0x2e4]
sub edi, edx
movzx ecx, cx
mov dword [ebp - 0x2f4], eax
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x4618a0
mov ecx, 0x4bffa0
mov edi, 0x20
sub ecx, edx
nop dword [eax]
mov word [edx], di
lea edx, [edx + 2]
movzx eax, word [ecx + edx]
mov edi, eax
test ax, ax
jne 0x4618c0
mov ecx, dword [ebp - 0x2f0]
xor eax, eax
mov edi, dword [ebp - 0x304]
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x4618f7
push eax
call fcn.00489f13
mov ecx, dword [ebp - 0x2f0]
add esp, 4
mov eax, dword [ebp - 0x2ec]
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov byte [ecx + 8], 1
test eax, eax
jne 0x461924
push 2
call fcn.0048a2cb
mov ecx, dword [ebp - 0x2f0]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
mov esi, dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
jne 0x46194b
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0x32c], 0
jmp 0x4619c1
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x14
push 0x50
push 0x7e
and eax, 1
push 0xbe
shl eax, 0x11
add eax, 0x50800302
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x4c018c
push 0
call esi
test eax, eax
jne 0x461998
mov dword [ebp - 0x32c], eax
jmp 0x4619c1
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccc80]
mov dword [ebp - 0x32c], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461a39
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0xa0
push 0x95
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9e48
push 0x4c018c
push 0
call esi
test eax, eax
je 0x461a39
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccb30]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov ecx, dword [ebp - 0x310]
sub esp, 8
sub ecx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x314]
sbb eax, dword [ebp - 0x308]
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00402130
mov esi, eax
mov dword [ebp - 0x300], esi
mov eax, dword [esi + 4]
mov byte [esi + 8], 0
test eax, eax
jne 0x461a8b
mov ecx, dword [esi]
test ecx, ecx
je 0x461a88
cmp word [ecx], ax
je 0x461a88
nop dword [eax]
inc eax
cmp word [ecx + eax*2], 0
jne 0x461a80
mov dword [esi + 4], eax
xor ecx, ecx
nop dword [eax]
inc ecx
cmp word [ecx*2 + 0x4bffa0], 0
jne 0x461a90
add eax, ecx
mov edx, 2
mov dword [ebp - 0x2fc], eax
xor ecx, ecx
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov ecx, dword [esi]
add esp, 4
mov esi, dword [ebp - 0x2f4]
mov edx, eax
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2f8], esi
test ecx, ecx
je 0x461b27
movzx ecx, word [ecx]
mov esi, ecx
mov dword [ebp - 0x30c], esi
mov esi, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], esi
test cx, cx
je 0x461b27
mov edi, dword [ebp - 0x2e4]
sub edi, eax
mov dword [ebp - 0x2f8], esi
mov eax, ecx
movzx ecx, ax
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x461b10
mov edi, dword [ebp - 0x304]
mov esi, 0x4bffa0
mov ecx, 0x20
sub esi, edx
mov word [edx], cx
lea edx, [edx + 2]
movzx eax, word [esi + edx]
mov ecx, eax
test ax, ax
jne 0x461b33
mov ecx, dword [ebp - 0x300]
xor eax, eax
mov esi, dword [ebp - 0x2f8]
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x461b6a
push eax
call fcn.00489f13
mov ecx, dword [ebp - 0x300]
add esp, 4
mov edx, dword [ebp - 0x320]
mov eax, dword [ebp - 0x2fc]
mov dword [ecx], edx
mov dword [ecx + 4], eax
mov byte [ecx + 8], 1
test edx, edx
jne 0x461b9d
push 2
call fcn.0048a2cb
mov ecx, dword [ebp - 0x300]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
mov eax, dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2e4], eax
call fcn.00416d40
test al, al
jne 0x461bc4
mov dword [ebp - 0x300], 0
jmp 0x461c40
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x14
push 0x50
push 0x95
and eax, 1
push 0xbe
shl eax, 0x11
add eax, 0x50800302
push eax
push dword [ebp - 0x2e4]
push 0x4c018c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x461c17
mov dword [ebp - 0x300], eax
jmp 0x461c40
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccc90]
mov dword [ebp - 0x300], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
cmp dword [ebp - 0x90], 0
je 0x461cd1
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461cd1
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x1e
push 0x64
push 0x8c
and eax, 1
push 0x136
shl eax, 0x11
add eax, 0x50010000
push eax
push 0x4c033c
push 0x4c019c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x461cd1
push eax
push 3
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccea0]
mov dword [ebp - 0x31c], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x461cdb
mov dword [ebp - 0x31c], 0
sub esp, 8
lea ecx, [ebp - 0x2c0]
push 0x4c4260
push 0xffffffffffffffff
call fcn.00415120
cmp dword [ebp - 0x90], 0
je 0x461d81
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461d81
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x20
push 0x78
push 0x8c
and eax, 1
push 0x1ae
shl eax, 0x11
add eax, 0x50010000
push eax
push 0x4c9e6c
push 0x4c019c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x461d81
push eax
push 3
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccf20]
mov dword [ebp - 0x2ec], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x461d8b
mov dword [ebp - 0x2ec], 0
sub esp, 8
lea ecx, [ebp - 0x2c0]
push 0x4c9e84
push 0xffffffffffffffff
call fcn.00415120
mov eax, 0x1b
mov byte [ebp - 0x1c], 1
mov word [ebp - 0x1a], ax
mov eax, dword [ebp - 0x31c]
mov word [ebp - 0x18], ax
mov eax, dword [ebp - 0x7c]
test eax, eax
je 0x461dc5
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
push 1
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
xor ecx, ecx
cmp eax, 0xffffffff
push 1
cmove eax, ecx
lea ecx, [ebp - 0x2c0]
push 1
mov dword [ebp - 0x7c], eax
call fcn.0040db40
push 0
mov ecx, edi
call fcn.00428440
test eax, eax
je 0x46275b
mov eax, dword [ebp - 0x310]
xorps xmm1, xmm1
sub eax, dword [ebp - 0x330]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x314]
sbb eax, dword [ebp - 0x334]
mov dword [ebp - 0x320], eax
nop dword [eax]
nop word [eax + eax]
mov eax, dword [edi + 0x22c]
cmp eax, 0xfffffffa
je 0x4627d4
lea ecx, [ebp - 0x2c0]
cmp dword [edi + 0x25c], ecx
jne 0x462741
cmp eax, dword [ebp - 0x31c]
je 0x4627d4
cmp eax, esi
jne 0x4622b9
mov ecx, dword [ebp - 0x284]
mov edx, esi
cmp esi, 0xffffffff
jne 0x461e7a
mov edx, dword [ebp - 0x280]
jmp 0x461e95
test ecx, ecx
je 0x461ead
cmp esi, 1
jl 0x461ead
cmp esi, dword [ebp - 0x280]
jg 0x461ead
lea eax, [esi + esi*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x461ead
push 0
push 0
push 0x400
lea eax, [edx + edx*8]
push dword [ecx + eax*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x461eaf
xor eax, eax
push dword [ebp - 0x320]
cdq
push dword [ebp - 0x30c]
push edx
push eax
call fcn.0049aa50
mov edi, eax
mov ecx, edx
mov edx, 0xe147ae15
mov dword [ebp - 0x2f0], edi
mul edx
mov dword [ebp - 0x308], ecx
mov dword [ebp - 0x2e8], eax
mov esi, edx
mov eax, edi
mov edx, 0x47ae147a
mul edx
mov edi, eax
mov dword [ebp - 0x2fc], edx
mov eax, ecx
mov ecx, 0xe147ae15
mul ecx
mov ecx, eax
mov dword [ebp - 0x2e4], edx
mov eax, dword [ebp - 0x308]
mov edx, 0x47ae147a
mul edx
add ecx, esi
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2f4], edx
mov edx, dword [ebp - 0x2e4]
adc edx, 0
add edi, ecx
mov ecx, dword [ebp - 0x2fc]
adc ecx, 0
mov dword [ebp - 0x2e8], edi
mov edi, dword [ebp - 0x308]
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x2c4]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0x2f4]
adc edx, eax
mov eax, dword [ebp - 0x2f0]
sub eax, ecx
sbb edi, edx
shrd eax, edi, 1
shr edi, 1
add eax, ecx
adc edi, edx
shrd eax, edi, 6
shr edi, 6
add eax, dword [ebp - 0x330]
mov dword [ebp - 0x2f0], eax
mov ecx, eax
adc edi, dword [ebp - 0x334]
mov eax, edi
mov dword [ebp - 0x308], edi
shrd ecx, eax, 0x14
shr eax, 0x14
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00401cb0
mov esi, eax
cmp dword [esi], 0
jne 0x461fb8
push 2
call fcn.0048a2cb
add esp, 4
mov dword [esi], eax
xor ecx, ecx
mov word [eax], cx
mov dword [esi + 4], ecx
push 0
push dword [esi]
lea ecx, [ebp - 0x2c0]
mov byte [esi + 8], 1
push dword [ebp - 0x328]
call fcn.00414a80
sub esp, 8
lea ecx, [ebp - 0x28]
push edi
push dword [ebp - 0x2f0]
call fcn.00402130
mov edi, eax
mov esi, dword [edi + 4]
mov byte [edi + 8], 0
test esi, esi
jne 0x46200b
mov eax, dword [edi]
test eax, eax
je 0x462008
cmp word [eax], si
je 0x462008
nop dword [eax + eax]
inc esi
cmp word [eax + esi*2], 0
jne 0x462000
mov dword [edi + 4], esi
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x462010
add esi, eax
xor ecx, ecx
mov edx, 2
mov dword [ebp - 0x2c4], esi
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov ecx, dword [edi]
add esp, 4
mov dword [ebp - 0x2fc], eax
mov edx, eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2f4], eax
test ecx, ecx
je 0x4620a1
movzx ecx, word [ecx]
mov dword [ebp - 0x2f4], eax
mov esi, ecx
mov dword [ebp - 0x2f8], esi
test cx, cx
je 0x4620a1
mov ecx, dword [ebp - 0x2e4]
sub ecx, edx
movzx esi, si
mov dword [ebp - 0x2f4], eax
nop word [eax + eax]
mov word [edx], si
add edx, 2
movzx eax, word [ecx + edx]
mov esi, eax
test ax, ax
jne 0x462090
mov esi, 0x4bffa0
mov ecx, 0x20
sub esi, edx
nop dword [eax]
mov word [edx], cx
lea edx, [edx + 2]
movzx eax, word [esi + edx]
mov ecx, eax
test ax, ax
jne 0x4620b0
mov esi, dword [ebp - 0x2c4]
xor eax, eax
mov word [edx], ax
mov eax, dword [edi]
test eax, eax
je 0x4620db
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x2fc]
mov dword [edi], eax
mov dword [edi + 4], esi
mov byte [edi + 8], 1
test eax, eax
jne 0x462102
push 2
call fcn.0048a2cb
add esp, 4
mov dword [edi], eax
xor ecx, ecx
mov word [eax], cx
mov dword [edi + 4], ecx
push 0
push dword [edi]
lea ecx, [ebp - 0x2c0]
mov byte [edi + 8], 1
push dword [ebp - 0x32c]
call fcn.00414a80
mov ecx, dword [ebp - 0x310]
sub esp, 8
sub ecx, dword [ebp - 0x2f0]
mov eax, dword [ebp - 0x314]
sbb eax, dword [ebp - 0x308]
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00402130
mov edi, eax
mov esi, dword [edi + 4]
mov byte [edi + 8], 0
test esi, esi
jne 0x462163
mov eax, dword [edi]
test eax, eax
je 0x462160
cmp word [eax], si
je 0x462160
inc esi
cmp word [eax + esi*2], 0
jne 0x462158
mov dword [edi + 4], esi
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x462170
add esi, eax
xor ecx, ecx
mov edx, 2
mov dword [ebp - 0x2f0], esi
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov ecx, dword [edi]
add esp, 4
mov dword [ebp - 0x2fc], eax
mov edx, eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2f8], eax
test ecx, ecx
je 0x462216
movzx ecx, word [ecx]
mov eax, ecx
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], eax
test cx, cx
je 0x462216
mov eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x2e4]
movzx eax, ax
sub ecx, edx
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2f4]
mov esi, dword [ebp - 0x2e4]
mov dword [ebp - 0x2f8], eax
mov word [edx], si
add edx, 2
movzx eax, word [ecx + edx]
mov esi, eax
test ax, ax
jne 0x462205
mov esi, 0x4bffa0
mov ecx, 0x20
sub esi, edx
mov word [edx], cx
lea edx, [edx + 2]
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x462222
mov esi, dword [ebp - 0x2f0]
xor eax, eax
mov word [edx], ax
mov eax, dword [edi]
test eax, eax
je 0x46224d
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x2fc]
mov dword [edi], eax
mov dword [edi + 4], esi
mov byte [edi + 8], 1
test eax, eax
jne 0x462274
push 2
call fcn.0048a2cb
add esp, 4
mov dword [edi], eax
xor ecx, ecx
mov word [eax], cx
mov dword [edi + 4], ecx
push 0
push dword [edi]
lea ecx, [ebp - 0x2c0]
mov byte [edi + 8], 1
push dword [ebp - 0x300]
call fcn.00414a80
mov edi, dword [ebp - 0x304]
lea esi, [edi + 0x598]
push esi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esi + 4]
mov ecx, dword [esi]
call fcn.0049ad20
divsd xmm0, qword [esi + 0x10]
movsd qword [esi + 8], xmm0
jmp 0x462741
cmp eax, 0xffffffb4
jne 0x4626df
mov eax, dword [ebp - 0x328]
cmp dword [edi + 0x238], eax
jne 0x4626df
movsd xmm0, qword [edi + 0x5a0]
lea ecx, [edi + 0x598]
ucomisd xmm0, xmm1
movsd qword [ebp - 0x2e8], xmm0
lahf
test ah, 0x44
jnp 0x4626df
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [edi + 0x59c]
mov ecx, dword [edi + 0x598]
call fcn.0049ad20
divsd xmm0, qword [edi + 0x5a8]
subsd xmm0, qword [ebp - 0x2e8]
comisd xmm0, xmmword [0x4cc7a8]
jbe 0x4626df
push dword [ebp - 0x328]
lea ecx, [ebp - 0x2c0]
call fcn.00415800
mov dword [ebp - 0x2e4], eax
test eax, eax
mov eax, dword [ebp - 0x28]
jne 0x46239b
test eax, eax
je 0x462359
push eax
call fcn.00489f13
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x462393
nop dword [eax]
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462380
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x4623b8
test eax, eax
je 0x4623a8
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x20], 1
call fcn.00401fd0
mov ecx, edx
shld ecx, eax, 0x14
push ecx
push dword [ebp - 0x320]
shl eax, 0x14
push dword [ebp - 0x30c]
mov dword [ebp - 0x2e4], ecx
push ecx
push eax
push esi
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2c4], eax
call fcn.00415380
sub esp, 8
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2e4]
push dword [ebp - 0x2c4]
call fcn.00402130
mov dword [ebp - 0x2f0], eax
mov esi, dword [eax + 4]
mov byte [eax + 8], 0
test esi, esi
jne 0x462432
mov ecx, dword [eax]
test ecx, ecx
je 0x46242f
cmp word [ecx], si
je 0x46242f
inc esi
cmp word [ecx + esi*2], 0
jne 0x462427
mov dword [eax + 4], esi
xor eax, eax
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x462434
add esi, eax
xor ecx, ecx
mov edx, 2
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov ecx, dword [ebp - 0x2f0]
mov edx, eax
add esp, 4
mov dword [ebp - 0x2fc], edx
mov eax, dword [ecx]
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x2f4], eax
je 0x4624c7
mov ecx, dword [ebp - 0x308]
mov dword [ebp - 0x2f4], eax
movzx ecx, word [ecx]
mov edi, ecx
mov dword [ebp - 0x2f8], edi
test cx, cx
je 0x4624c7
mov ecx, dword [ebp - 0x308]
sub ecx, edx
movzx edi, di
mov dword [ebp - 0x2f4], eax
mov word [edx], di
add edx, 2
movzx eax, word [ecx + edx]
mov edi, eax
test ax, ax
jne 0x4624b6
mov ecx, 0x4bffa0
mov edi, 0x20
sub ecx, edx
mov word [edx], di
lea edx, [edx + 2]
movzx eax, word [ecx + edx]
mov edi, eax
test ax, ax
jne 0x4624d3
mov ecx, dword [ebp - 0x2f0]
xor eax, eax
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x462504
push eax
call fcn.00489f13
mov ecx, dword [ebp - 0x2f0]
add esp, 4
mov eax, dword [ebp - 0x2fc]
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov byte [ecx + 8], 1
test eax, eax
jne 0x462531
push 2
call fcn.0048a2cb
mov ecx, dword [ebp - 0x2f0]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
push 0
push dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
push dword [ebp - 0x32c]
call fcn.00414a80
mov ecx, dword [ebp - 0x310]
sub esp, 8
sub ecx, dword [ebp - 0x2c4]
mov eax, dword [ebp - 0x314]
sbb eax, dword [ebp - 0x2e4]
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00402130
mov dword [ebp - 0x2f0], eax
mov esi, dword [eax + 4]
mov byte [eax + 8], 0
test esi, esi
jne 0x46259b
mov ecx, dword [eax]
test ecx, ecx
je 0x462598
cmp word [ecx], si
je 0x462598
nop dword [eax + eax]
inc esi
cmp word [ecx + esi*2], 0
jne 0x462590
mov dword [eax + 4], esi
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x4625a0
add esi, eax
xor ecx, ecx
mov edx, 2
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov ecx, dword [ebp - 0x2f0]
add esp, 4
mov dword [ebp - 0x2fc], eax
mov edx, dword [ecx]
mov dword [ebp - 0x2e4], edx
mov edx, eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2e4]
test eax, eax
je 0x462651
movzx ecx, word [eax]
mov eax, ecx
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], eax
test cx, cx
je 0x462651
mov eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x2e4]
movzx eax, ax
sub ecx, edx
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2f4]
mov edi, dword [ebp - 0x2e4]
mov dword [ebp - 0x2f8], eax
nop dword [eax + eax]
mov word [edx], di
add edx, 2
movzx eax, word [ecx + edx]
mov edi, eax
test ax, ax
jne 0x462640
mov ecx, 0x4bffa0
mov edi, 0x20
sub ecx, edx
nop dword [eax]
mov word [edx], di
lea edx, [edx + 2]
movzx eax, word [ecx + edx]
mov edi, eax
test ax, ax
jne 0x462660
mov ecx, dword [ebp - 0x2f0]
xor eax, eax
mov edi, dword [ebp - 0x304]
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x462697
push eax
call fcn.00489f13
mov ecx, dword [ebp - 0x2f0]
add esp, 4
mov eax, dword [ebp - 0x2fc]
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov byte [ecx + 8], 1
test eax, eax
jne 0x4626c4
push 2
call fcn.0048a2cb
mov ecx, dword [ebp - 0x2f0]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
push 0
push dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
push dword [ebp - 0x300]
call fcn.00414a80
jmp 0x462741
mov eax, dword [ebp - 0x2ec]
cmp dword [edi + 0x22c], eax
jne 0x462741
push 1
push 0
lea ecx, [ebp - 0x2c0]
call fcn.0040db40
nop dword [eax]
push 1
mov ecx, edi
call fcn.00428440
test eax, eax
jne 0x462700
push ecx
push 0x1c2
push 0x96
lea eax, [edi + 0x2a8]
mov ecx, edi
push eax
push 1
push 0x4c9eb8
call fcn.00432ac0
cmp eax, 1
je 0x46275b
push 1
push 5
lea ecx, [ebp - 0x2c0]
call fcn.0040db40
push 0
mov ecx, edi
call fcn.00428440
mov esi, dword [ebp - 0x2f8]
xorps xmm1, xmm1
test eax, eax
jne 0x461e30
push 3
push dword [ebp - 0x338]
lea ecx, [edi + 0x2a8]
mov dword [ebp - 0x2e0], edi
push dword [edi + 0xbc]
call fcn.00416470
mov esi, eax
mov eax, dword [ebp - 0x28]
test esi, esi
jne 0x4627dc
test eax, eax
je 0x462790
push eax
call fcn.00489f13
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4627c6
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4627b3
xor ecx, ecx
mov word [edx + eax*2], cx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
jmp 0x4627f1
or edi, 0xffffffff
jmp 0x4636cb
test eax, eax
je 0x4627e9
push eax
call fcn.00489f13
add esp, 4
xor eax, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x20], 1
test esi, esi
je 0x462820
test eax, eax
jne 0x46280f
cmp word [esi], ax
je 0x46280a
inc eax
cmp word [esi + eax*2], 0
jne 0x462802
mov dword [ebp - 0x24], eax
test eax, eax
jle 0x462820
push esi
mov byte [ebp - 0x20], 1
call fcn.0048e09c
add esp, 4
jmp 0x462826
mov byte [ebp - 0x20], 0
xor eax, eax
push 4
push dword [ebp - 0x324]
lea ecx, [edi + 0x2a8]
mov dword [ebp - 0x2dc], eax
push dword [edi + 0xd8]
call fcn.00416470
mov esi, eax
mov eax, dword [ebp - 0x28]
test esi, esi
jne 0x4628a1
test eax, eax
je 0x46285b
push eax
call fcn.00489f13
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x462893
nop
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462880
xor ecx, ecx
mov word [edx + eax*2], cx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
jmp 0x4628b6
test eax, eax
je 0x4628ae
push eax
call fcn.00489f13
add esp, 4
xor eax, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x20], 1
test esi, esi
je 0x4628e5
test eax, eax
jne 0x4628d4
cmp word [esi], ax
je 0x4628cf
inc eax
cmp word [esi + eax*2], 0
jne 0x4628c7
mov dword [ebp - 0x24], eax
test eax, eax
jle 0x4628e5
push esi
mov byte [ebp - 0x20], 1
call fcn.0048e09c
add esp, 4
jmp 0x4628eb
mov byte [ebp - 0x20], 0
xor eax, eax
push dword [ebp - 0x328]
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2d8], eax
call fcn.00415800
mov esi, eax
mov eax, dword [ebp - 0x28]
test esi, esi
jne 0x46295b
test eax, eax
je 0x462918
push eax
call fcn.00489f13
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x462953
nop dword [eax + eax]
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462940
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x462972
test eax, eax
je 0x462968
push eax
call fcn.00489f13
add esp, 4
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x20], 1
call fcn.00401fd0
mov ecx, dword [ebp - 0x314]
shld edx, eax, 0x14
shl eax, 0x14
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], edx
cmp edx, ecx
jb 0x4629b7
ja 0x4629a5
cmp eax, dword [ebp - 0x310]
jbe 0x4629b7
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
lea ecx, [ebp - 0x2c0]
call fcn.0040c540
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0x34]
call fcn.00401e50
mov esi, dword [ebp - 0x28]
test esi, esi
jne 0x4629ef
push 2
call fcn.0048a2cb
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x34]
mov byte [ebp - 0x20], 1
mov dword [ebp - 0x318], eax
test eax, eax
jne 0x462a1b
push 2
call fcn.0048a2cb
add esp, 4
mov dword [ebp - 0x318], eax
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
mov word [eax], cx
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x2c], 1
call fcn.00401e50
mov edx, dword [ebp - 0x318]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2fc], edx
mov ecx, dword [eax]
mov dword [ebp - 0x300], ecx
xor ecx, ecx
mov dword [eax], 0
mov byte [eax + 8], 0
mov dword [eax + 4], 0
nop word [eax + eax]
inc ecx
cmp word [ecx*2 + 0x4c9f18], 0
jne 0x462a60
test edx, edx
je 0x462a81
xor eax, eax
cmp word [edx], ax
je 0x462a7f
inc eax
cmp word [edx + eax*2], 0
jne 0x462a77
add ecx, eax
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c8390], 0
jne 0x462a83
add ecx, eax
test esi, esi
je 0x462aaa
xor eax, eax
cmp word [esi], ax
je 0x462aa8
nop dword [eax]
inc eax
cmp word [esi + eax*2], 0
jne 0x462aa0
add ecx, eax
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4c43a4], 0
jne 0x462ab0
add ecx, eax
mov edx, 2
mov dword [ebp - 0x2ec], ecx
lea eax, [ecx + 1]
xor ecx, ecx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov ecx, dword [ebp - 0x2e4]
add esp, 4
mov dword [ebp - 0x2c4], eax
mov edx, eax
mov ecx, dword [ecx]
mov dword [ebp - 0x30c], ecx
test ecx, ecx
je 0x462b31
movzx ecx, word [ecx]
mov edi, ecx
mov dword [ebp - 0x320], edi
test cx, cx
je 0x462b31
mov edi, dword [ebp - 0x30c]
sub edi, eax
mov eax, ecx
movzx ecx, ax
nop word [eax + eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x462b20
mov edi, 0x4c9f18
mov ecx, 0x50
sub edi, edx
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x462b40
mov eax, dword [ebp - 0x318]
test eax, eax
je 0x462b81
movzx eax, word [eax]
mov ecx, eax
test ax, ax
je 0x462b81
mov edi, dword [ebp - 0x2fc]
nop dword [eax + eax]
mov word [edx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
add edx, 2
test ax, ax
jne 0x462b70
mov eax, 0x20
mov edi, 0x4c8390
nop dword [eax + eax]
mov word [edx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
add edx, 2
test ax, ax
jne 0x462b90
test esi, esi
je 0x462bc1
movzx eax, word [esi]
mov ecx, eax
test ax, ax
je 0x462bc1
nop
mov word [edx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
add edx, 2
test ax, ax
jne 0x462bb0
mov eax, 0x2e
mov edi, 0x4c43a4
nop dword [eax + eax]
mov word [edx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
lea edx, [edx + 2]
test ax, ax
jne 0x462bd0
mov esi, dword [ebp - 0x2e4]
xor eax, eax
mov edi, dword [ebp - 0x304]
mov word [edx], ax
mov eax, dword [esi]
test eax, eax
je 0x462c01
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x2c4]
mov dword [esi], eax
mov eax, dword [ebp - 0x2ec]
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x300]
mov byte [esi + 8], 1
test eax, eax
je 0x462c29
push eax
call fcn.00489f13
add esp, 4
mov edx, dword [ebp - 0x28]
test edx, edx
jne 0x462c48
push 2
call fcn.0048a2cb
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
push 0
push 0xffffffffffffffb0
sub esp, 0x10
mov byte [ebp - 0x20], 1
lea eax, [edi + 0x2a8]
lea ecx, [edi + 0x5b0]
push eax
push edx
call fcn.004192c0
mov ecx, eax
call fcn.0041a070
push 1
push 5
lea ecx, [eax + 0x78]
call fcn.0040db40
push 0
push 0
lea eax, [ebp - 0x2e0]
push eax
push 0x46ffb0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
or eax, 0xffffffff
test esi, esi
cmove esi, eax
mov dword [ebp - 0x2e4], esi
mov dword [ebp - 0x2c4], esi
mov byte [ebp - 4], 0xa
test esi, esi
je 0x462cf6
cmp esi, eax
je 0x462cf6
push 0
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x462cf6
push 0
mov ecx, edi
call fcn.00428440
cmp dword [edi], 0
jne 0x462cb5
cmp dword [edi + 0x22c], 0xfffffffa
jne 0x462cb5
push 0x4c2770
push 0xffffffffffffffb0
lea ecx, [edi + 0x5b0]
mov dword [edi], 1
call fcn.0041a070
jmp 0x462cb5
mov eax, dword [edi + 0x510]
cmp eax, 0xffffffff
je 0x462d20
test eax, eax
je 0x462d20
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x510], 0xffffffff
mov dword [edi + 0x514], 0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
sub esp, 8
lea ecx, [edi + 0x168]
call fcn.0041b050
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x462d50
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
test eax, eax
jne 0x462dd2
mov byte [ebp - 0x20], al
nop dword [eax + eax]
inc eax
cmp word [eax*2 + 0x4c9f60], 0
jne 0x462d70
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x462dc7
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4c9f60]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462db0
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x4635e8
cmp dword [edi], 0
je 0x462e42
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4c8d40], 0
jne 0x462de0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x462dc7
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4c8d40]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462e20
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x4635e8
cmp eax, 1
jne 0x462eac
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc490], 0
jne 0x462e50
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463297
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc490]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462e90
jmp 0x463297
cmp eax, 2
jne 0x462f1c
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc4c4], 0
jne 0x462ec0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463297
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc4c4]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462f00
jmp 0x463297
cmp eax, 3
jne 0x462f8c
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc4ec], 0
jne 0x462f30
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463297
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc4ec]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462f70
jmp 0x463297
cmp eax, 4
jne 0x462ffc
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc518], 0
jne 0x462fa0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463297
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc518]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462fe0
jmp 0x463297
cmp eax, 5
jne 0x46306c
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc53c], 0
jne 0x463010
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463297
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc53c]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463050
jmp 0x463297
cmp eax, 6
jne 0x4630dc
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc564], 0
jne 0x463080
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463297
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc564]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4630c0
jmp 0x463297
cmp eax, 0x1001
jne 0x46314c
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc590], 0
jne 0x4630f0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463297
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc590]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463130
jmp 0x463297
cmp eax, 0x9c41
jne 0x4631bc
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc5b8], 0
jne 0x463160
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463297
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc5b8]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4631a0
jmp 0x463297
cmp eax, 0x9c42
jne 0x463229
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc5d8], 0
jne 0x4631d0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463297
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc5d8]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463210
jmp 0x463297
cmp eax, 0x9c44
jne 0x4632c4
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc650], 0
jne 0x463240
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463297
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4cc650]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463280
xor ecx, ecx
mov word [edx + eax*2], cx
mov byte [ebp - 0x20], 1
cmp dword [ebp - 0x28], ecx
jne 0x4634ed
push 2
call fcn.0048a2cb
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 0x24], ecx
jmp 0x4634ed
cmp eax, 0xffffffff
jne 0x46332c
mov byte [ebp - 0x20], 0
xor eax, eax
nop
inc eax
cmp word [eax*2 + 0x4c8d80], 0
jne 0x4632d0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4634e7
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4c8d80]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463310
jmp 0x4634e7
cmp eax, 0xfffffffe
jne 0x46339c
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4c9fc8], 0
jne 0x463340
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4634e7
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4c9fc8]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463380
jmp 0x4634e7
cmp eax, 0xa418
jne 0x46340c
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4ca010], 0
jne 0x4633b0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4634e7
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4ca010]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4633f0
jmp 0x4634e7
cmp eax, 0xa419
jne 0x463479
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4ca088], 0
jne 0x463420
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4634e7
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4ca088]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463460
jmp 0x4634e7
cmp eax, 0xa41b
jne 0x4634ed
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4ca108], 0
jne 0x463490
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4634e7
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4ca108]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4634d0
xor ecx, ecx
mov word [edx + eax*2], cx
cmp dword [ebp - 0x24], 0
mov byte [ebp - 0x20], 0
jne 0x463514
xor ecx, ecx
cmp dword [ebp - 0x28], ecx
je 0x463511
mov eax, dword [ebp - 0x28]
cmp word [eax], cx
je 0x463511
mov eax, dword [ebp - 0x28]
inc ecx
cmp word [eax + ecx*2], 0
jne 0x463506
mov dword [ebp - 0x24], ecx
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp word [ecx*2 + 0x4ca180], 0
jne 0x463520
mov eax, dword [ebp - 0x24]
mov edx, 2
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x2fc], eax
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a2cb
mov edx, dword [ebp - 0x28]
mov esi, 0x4ca180
add esp, 4
mov dword [ebp - 0x320], eax
mov ecx, eax
mov edi, 0x54
sub esi, eax
nop dword [eax + eax]
mov word [ecx], di
add ecx, 2
movzx eax, word [ecx + esi]
mov edi, eax
test ax, ax
jne 0x463570
cmp dword [ebp - 0x28], 0
mov esi, dword [ebp - 0x2e4]
mov edi, dword [ebp - 0x304]
je 0x4635c1
movzx eax, word [edx]
mov esi, eax
mov dword [ebp - 0x30c], esi
mov esi, dword [ebp - 0x2e4]
test ax, ax
je 0x4635c1
movzx eax, ax
nop dword [eax]
mov word [ecx], ax
lea edx, [edx + 2]
movzx eax, word [edx]
add ecx, 2
test ax, ax
jne 0x4635b0
xor eax, eax
mov word [ecx], ax
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x4635d6
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x28], 0
mov byte [ebp - 0x20], 1
jne 0x463607
push 2
call fcn.0048a2cb
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x28]
mov byte [ebp - 0x20], 1
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x463633
push 2
call fcn.0048a2cb
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x24], ecx
push 0
push 0x4c2b70
push ecx
push eax
push dword [ebp - 0x28]
lea ecx, [edi + 0x5b0]
mov byte [ebp - 0x20], 1
push 0x64
call fcn.0041a070
mov ecx, eax
call fcn.00419f00
mov ecx, eax
call fcn.0041a380
push 0
mov ecx, edi
call fcn.00428440
test eax, eax
je 0x46369e
nop dword [eax + eax]
mov ecx, dword [edi + 0x22c]
cmp ecx, 0xfffffffa
je 0x46369e
lea eax, [edi + 0x628]
cmp dword [edi + 0x25c], eax
jne 0x463691
cmp ecx, dword [edi + 0x5b8]
je 0x46369e
push 0
mov ecx, edi
call fcn.00428440
test eax, eax
jne 0x463670
push dword [ebp - 0x338]
mov ecx, edi
call fcn.0042cca0
lea ecx, [edi + 0x5b0]
call fcn.00419810
mov edi, 1
cmp esi, 0xffffffff
je 0x4636cb
test esi, esi
je 0x4636cb
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0xb
call fcn.0040c540
mov eax, dword [ebp - 0x284]
test eax, eax
je 0x4636ed
push eax
call fcn.00489f13
add esp, 4
mov eax, dword [ebp - 0x1b0]
test eax, eax
je 0x463700
push ecx
push 0x1c2
push 0x96
lea eax, [edi + 0x2a8]
push eax
push 0
push 0x4c3bf8
mov ecx, edi
call fcn.00432ac0
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00489f05
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret