Function at 0x10045ca5
Capabilities:
Extract resource via kernel32 functions
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100828cd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1224
call fcn.1007d610
push esi
push edi
mov dword [ebp - 0x204], 0x24a8c6a5
mov dword [ebp - 0xbf4], 0
mov dword [ebp - 0x102c], 0x9cb61d22
mov dword [ebp - 0x204], 0
jmp 0x10045d00
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 3
jle 0x10045d38
mov dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x204]
imul eax, dword [ebp - 0x364]
mov dword [ebp - 0x364], eax
imul eax, dword [ebp - 0x364], 0xffff
mov dword [ebp - 0xbf4], eax
jmp 0x10045cf3
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x10045d52
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
mov dword [ebp - 0x250], 0x24a8c6a5
mov dword [ebp - 0xc98], 0
mov dword [ebp - 0x1150], 0x9cb61d22
mov dword [ebp - 0x250], 0
jmp 0x10045d89
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jle 0x10045dc1
mov dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x250]
imul eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x3d0], eax
imul eax, dword [ebp - 0x3d0], 0xffff
mov dword [ebp - 0xc98], eax
jmp 0x10045d7c
mov byte [ebp - 0x10c], 0
movzx eax, byte [ebp - 0x10c]
test eax, eax
je 0x10045ddb
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
mov dword [ebp - 0x18c], 0xffffffff
push 2
lea ecx, [ebp - 0xdd0]
call fcn.10008f33
and dword [ebp - 4], 0
mov dword [ebp - 0xca8], 1
mov dword [ebp - 0x7c8], 0xbfe7374
mov dword [ebp - 0x2c], 0
jmp 0x10045e1a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10045e30
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xed8], 0xe2799ac7
jmp 0x10045e13
mov dword [ebp - 0x2c], 0
jmp 0x10045e40
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10045e5c
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xdd0]
call fcn.10008f7a
mov dword [eax], 0x6e74a6e8
jmp 0x10045e39
mov dword [ebp - 0x2c], 0
jmp 0x10045e6c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10045e82
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1194], 0xbca3396d
jmp 0x10045e65
mov dword [ebp - 0x18c], 1
jmp 0x10045e9b
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jl 0x10046077
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x2a8], 4
mov dword [ebp - 0xabc], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xed8], 0xd3e
jle 0x10045ee5
mov dword [ebp - 0xca0], 1
jmp 0x10045eec
and dword [ebp - 0xca0], 0
mov dword [ebp - 0x25c], 0xe0fc36fe
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0xfd0], eax
xor eax, eax
cmp eax, 0xffffffff
jae 0x10045f15
mov dword [ebp - 0x3ec], 1
jmp 0x10045f1c
and dword [ebp - 0x3ec], 0
push 1
lea ecx, [ebp - 0xdd0]
call fcn.10008f7a
mov ecx, dword [ebp - 0x3ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x10c0], eax
mov eax, dword [ebp - 0xca8]
mov dword [ebp - 0xfd8], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x7c8], eax
cmp dword [ebp - 0x7c8], 0x467bb1a8
jg 0x10045f79
mov dword [ebp - 0xaa4], 1
jmp 0x10045f80
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x18c]
imul eax, dword [ebp - 0xaa4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xed8]
jle 0x10045fa8
mov dword [ebp - 0xaac], 1
jmp 0x10045faf
and dword [ebp - 0xaac], 0
cmp dword [ebp - 0xaac], 0xa50b
jg 0x10045fd6
cmp dword [ebp - 0xabc], 0
jne 0x10045fd6
mov eax, 0x5071
test eax, eax
jne 0x10045fd6
and dword [ebp - 0xab4], 0
jmp 0x10045fe0
mov dword [ebp - 0xab4], 1
mov eax, dword [ebp - 0xab4]
sub eax, 4
jne 0x10045ff2
cmp dword [ebp - 0x2a8], 0
push 1
lea ecx, [ebp - 0xdd0]
call fcn.10008f7a
cmp dword [eax], 0x211
je 0x10046013
mov dword [ebp - 0xac4], 1
jmp 0x1004601a
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0xabc]
cmp dword [ebp - 0xac4], eax
jl 0x10046034
mov dword [ebp - 0xacc], 1
jmp 0x1004603b
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0xacc]
sub eax, dword [ebp - 0x18c]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1194], eax
mov dword [ebp - 0x25c], 0x971cf71
mov esi, dword [ebp - 0x25c]
push 1
lea ecx, [ebp - 0xdd0]
call fcn.10008f7a
mov dword [eax], esi
jmp 0x10045e8e
mov byte [ebp - 0x161], 0
movzx eax, byte [ebp - 0x161]
test eax, eax
je 0x10046091
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdd0]
call fcn.10008f75
mov dword [ebp - 0x70], 0x99841b3c
mov dword [ebp - 0x117c], 0x9b2e4145
mov dword [ebp - 0xcf4], 2
mov dword [ebp - 0x8bc], 0xc5ebb4ee
mov dword [ebp - 0xfe0], 1
mov dword [ebp - 0x70], 0xffffffe7
jmp 0x100460df
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffe4
jg 0x1004636d
mov dword [ebp - 0xf5c], 0xfffffffe
mov dword [ebp - 0xf58], 0xfffffffe
mov dword [ebp - 0xf54], 0xfffffffe
mov dword [ebp - 0xf50], 0xfffffffe
mov dword [ebp - 0x20c], 0xe814b733
mov dword [ebp - 0x10d0], 0xfffffff6
mov dword [ebp - 0x20c], 0
jmp 0x1004613e
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jg 0x10046368
push 2
lea ecx, [ebp - 0xe88]
call fcn.10008f33
mov dword [ebp - 4], 1
mov dword [ebp - 0x9c], 0
jmp 0x10046178
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x10046194
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xe70], 4
jmp 0x1004616b
mov dword [ebp - 0x9c], 0
jmp 0x100461ad
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x100461cf
push dword [ebp - 0x9c]
lea ecx, [ebp - 0xe88]
call fcn.10008f7a
mov dword [eax], 0xf2fdad5
jmp 0x100461a0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe70], 0
jmp 0x100461fd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe70]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe70], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe70], 3
jg 0x1004633a
mov dword [ebp - 0xfe8], 0xed065768
mov dword [ebp - 0x2f4], 0
jmp 0x10046234
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 2
jge 0x10046250
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x1174], 0xffffffff
jmp 0x10046227
mov eax, dword [ebp - 0x20c]
cmp dword [ebp + eax*4 - 0xf5c], 0
je 0x10046314
mov dword [ebp - 0x3e8], 0xffffffff
mov eax, dword [ebp - 0x3e8]
dec eax
mov dword [ebp - 0x3e8], eax
je 0x10046299
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1174], 0
je 0x10046299
mov dword [ebp - 0x894], 1
jmp 0x100462a0
and dword [ebp - 0x894], 0
cmp dword [ebp - 0x70], 0x4392f209
jle 0x100462c4
push 1
lea ecx, [ebp - 0xe88]
call fcn.10008f7a
cmp dword [eax], 0
jne 0x100462c4
and dword [ebp - 0x414], 0
jmp 0x100462ce
mov dword [ebp - 0x414], 1
mov esi, dword [ebp - 0x894]
sub esi, dword [ebp - 0x414]
push 1
lea ecx, [ebp - 0xe88]
call fcn.10008f7a
mov dword [eax], esi
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x10046312
push 0
push 0x1dcc
push 0x1b86
push 0x5d4
call dword [sym.imp.KERNEL32.dll_RaiseException]
jmp 0x10046335
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x10046335
push 0
push 0xaba
push 0
call dword [sym.imp.GDI32.dll_GetRegionData]
jmp 0x100461e2
mov byte [ebp - 0xf4], 0
movzx eax, byte [ebp - 0xf4]
test eax, eax
je 0x10046354
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe88]
call fcn.10008f75
jmp 0x10046131
jmp 0x100460d8
mov dword [ebp - 0x70], 0xfffffff9
jmp 0x1004637d
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffff7
jle 0x10046594
mov dword [ebp - 0xc0], 0x5a91
mov dword [ebp - 0xcfc], 0x8a9a2627
cmp dword [ebp - 0xcf4], 0
jne 0x100463b6
cmp dword [ebp - 0x70], 0xad47
jle 0x100463b6
and dword [ebp - 0x89c], 0
jmp 0x100463c0
mov dword [ebp - 0x89c], 1
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], eax
jge 0x100463da
mov dword [ebp - 0x41c], 1
jmp 0x100463e1
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x89c]
sub eax, dword [ebp - 0x41c]
cmp eax, dword [ebp - 0x70]
jne 0x100463fe
mov dword [ebp - 0x8a4], 1
jmp 0x10046405
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x8a4]
inc eax
inc eax
cmp eax, 0x8c8a251a
jb 0x10046420
mov dword [ebp - 0x424], 1
jmp 0x10046427
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 7
je 0x1004643c
mov dword [ebp - 0x8ac], 1
jmp 0x10046443
and dword [ebp - 0x8ac], 0
cmp dword [ebp - 0x8ac], 1
jae 0x10046458
mov dword [ebp - 0x42c], 1
jmp 0x1004645f
and dword [ebp - 0x42c], 0
mov eax, 0xb6749efe
sub eax, dword [ebp - 0x42c]
cmp eax, dword [ebp - 0xc0]
jne 0x1004647e
mov dword [ebp - 0x8b4], 1
jmp 0x10046485
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x8b4], eax
jge 0x1004649f
mov dword [ebp - 0x434], 1
jmp 0x100464a6
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x8bc], eax
cmp dword [ebp - 0x8bc], 0
je 0x100464d0
mov eax, 0x6f9f
test eax, eax
je 0x100464d0
mov dword [ebp - 0x43c], 1
jmp 0x100464d7
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x43c], eax
je 0x100464f1
mov dword [ebp - 0x8c4], 1
jmp 0x100464f8
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x8c4], eax
jle 0x10046512
mov dword [ebp - 0x444], 1
jmp 0x10046519
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x444], eax
jl 0x10046533
mov dword [ebp - 0x8cc], 1
jmp 0x1004653a
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x8cc], eax
jl 0x10046554
mov dword [ebp - 0x44c], 1
jmp 0x1004655b
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xffff
je 0x10046579
cmp dword [ebp - 0xc0], 0
jne 0x10046579
and dword [ebp - 0x8d4], 0
jmp 0x10046583
mov dword [ebp - 0x8d4], 1
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0xcfc], eax
jmp 0x10046376
mov dword [ebp - 0x24c], 0x24a8c6a5
mov dword [ebp - 0x1d8], 0xfffffffa
mov dword [ebp - 0x264], 0xfffffffc
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0x8ec], 0xffffffff
mov dword [ebp - 0x474], 0x9786
mov dword [ebp - 0x1158], 0xffffffff
mov dword [ebp - 0xa4], 0
jmp 0x100465f3
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x1004660f
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xd0c], 0xfbfc75da
jmp 0x100465e6
mov dword [ebp - 0xa4], 0
jmp 0x10046628
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10046644
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x3b4], 0xfda6c2e3
jmp 0x1004661b
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jne 0x10046725
mov eax, dword [ebp - 0x1b4]
sub eax, 0x444b0a54
cmp eax, dword [ebp - 0x1b4]
je 0x1004667c
mov dword [ebp - 0x454], 1
jmp 0x10046683
and dword [ebp - 0x454], 0
cmp dword [ebp - 0x454], 0xfff8
je 0x1004669b
mov dword [ebp - 0x8dc], 1
jmp 0x100466a2
and dword [ebp - 0x8dc], 0
cmp dword [ebp - 0x8dc], 1
jg 0x100466b7
mov dword [ebp - 0x45c], 1
jmp 0x100466be
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
neg eax
cmp eax, dword [ebp - 0x1d8]
jge 0x100466e6
mov dword [ebp - 0x8e4], 1
jmp 0x100466ed
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x8e4]
add eax, 0x79cca3f3
cmp eax, dword [ebp - 0x1d8]
jge 0x1004670c
mov dword [ebp - 0x464], 1
jmp 0x10046713
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0xffffffff
jge 0x10046725
and dword [ebp - 0xd04], 0
jmp 0x1004672f
mov dword [ebp - 0xd04], 1
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0xff0], eax
mov dword [ebp - 0x8ec], 0x7ddbf4df
push 6
pop eax
test eax, eax
je 0x1004676d
cmp dword [ebp - 0x8ec], 0
je 0x1004676d
mov dword [ebp - 0x36c], 1
jmp 0x10046774
and dword [ebp - 0x36c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax - 0xd0c], ecx
cmp dword [ebp - 0x36c], 0xfffffff8
jg 0x1004679c
mov dword [ebp - 0x46c], 1
jmp 0x100467a3
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x1d8]
add eax, dword [ebp - 0x46c]
cmp eax, dword [ebp - 0x1d8]
jl 0x100467c9
cmp dword [ebp - 0x474], 0
jne 0x100467c9
and dword [ebp - 0x8f4], 0
jmp 0x100467d3
mov dword [ebp - 0x8f4], 1
mov eax, dword [ebp - 0x8f4]
sub eax, dword [ebp - 0x474]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3b4], eax
mov dword [ebp - 0x264], 1
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x3b4], 0xffff
cmp dword [ebp - 0x264], eax
jl 0x1004681b
mov dword [ebp - 0x8fc], 1
jmp 0x10046822
and dword [ebp - 0x8fc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8fc]
mov dword [ebp + eax - 0x3b4], ecx
mov dword [ebp - 0xd14], 0
mov dword [ebp - 0x10e0], 0x9cb61d22
mov dword [ebp - 0x24c], 0
jmp 0x10046862
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jle 0x1004689a
mov dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x24c]
imul eax, dword [ebp - 0x374]
mov dword [ebp - 0x374], eax
imul eax, dword [ebp - 0x374], 0xffff
mov dword [ebp - 0xd14], eax
jmp 0x10046855
mov byte [ebp - 0xf3], 0
movzx eax, byte [ebp - 0xf3]
test eax, eax
je 0x100468b4
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
push 3
lea ecx, [ebp - 0xadc]
call fcn.10008f33
mov dword [ebp - 4], 2
mov dword [ebp - 0x10], 0x39beb064
mov dword [ebp - 0xb4], 0
jmp 0x100468e8
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x1004690a
push dword [ebp - 0xb4]
lea ecx, [ebp - 0xadc]
call fcn.10008f7a
mov dword [eax], 0xbbca6318
jmp 0x100468db
mov dword [ebp - 0xb4], 0
jmp 0x10046923
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1004693f
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x1004], 0xfffffffa
jmp 0x10046916
mov dword [ebp - 0x10], 0
jmp 0x1004694f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x10046a6f
push dword [ebp - 0x10]
lea ecx, [ebp - 0xadc]
call fcn.10008f7a
mov dword [ebp - 0xd1c], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0xadc]
call fcn.10008f7a
mov ecx, dword [ebp - 0xd1c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xff8], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0xadc]
call fcn.10008f7a
mov ecx, dword [ebp - 0x10]
cmp dword [eax], ecx
jle 0x100469b2
cmp dword [ebp - 0x10], 0
jne 0x100469b2
and dword [ebp - 0x47c], 0
jmp 0x100469bc
mov dword [ebp - 0x47c], 1
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x47c]
je 0x100469dc
mov eax, 0x3faa
test eax, eax
je 0x100469dc
mov dword [ebp - 0xd24], 1
jmp 0x100469e3
and dword [ebp - 0xd24], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xadc]
call fcn.10008f7a
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1058], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0xadc]
call fcn.10008f7a
cmp dword [eax], 0
jne 0x10046a29
push dword [ebp - 0x10]
lea ecx, [ebp - 0xadc]
call fcn.10008f7a
cmp dword [eax], 0
jne 0x10046a29
and dword [ebp - 0x904], 0
jmp 0x10046a33
mov dword [ebp - 0x904], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x904]
mov dword [ebp + eax - 0x1004], ecx
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x10046a6a
push 0x102b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
jmp 0x10046948
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xadc]
call fcn.10008f75
mov dword [ebp - 0x194], 0xffffffff
push 2
lea ecx, [ebp - 0xde0]
call fcn.10008f33
mov dword [ebp - 4], 3
mov dword [ebp - 0xd34], 1
mov dword [ebp - 0x484], 0xbfe7374
mov dword [ebp - 0x4c], 0
jmp 0x10046ac0
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10046ad6
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xf18], 0xe2799ac7
jmp 0x10046ab9
mov dword [ebp - 0x4c], 0
jmp 0x10046ae6
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10046b02
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xde0]
call fcn.10008f7a
mov dword [eax], 0x6e74a6e8
jmp 0x10046adf
mov dword [ebp - 0x4c], 0
jmp 0x10046b12
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10046b28
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x11ac], 0xbca3396d
jmp 0x10046b0b
mov dword [ebp - 0x194], 1
jmp 0x10046b41
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jl 0x10046d1d
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x2fc], 4
mov dword [ebp - 0x494], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf18], 0xd3e
jle 0x10046b8b
mov dword [ebp - 0xd2c], 1
jmp 0x10046b92
and dword [ebp - 0xd2c], 0
mov dword [ebp - 0x26c], 0xe0fc36fe
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x1144], eax
xor eax, eax
cmp eax, 0xffffffff
jae 0x10046bbb
mov dword [ebp - 0x3dc], 1
jmp 0x10046bc2
and dword [ebp - 0x3dc], 0
push 1
lea ecx, [ebp - 0xde0]
call fcn.10008f7a
mov ecx, dword [ebp - 0x3dc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x1060], eax
mov eax, dword [ebp - 0xd34]
mov dword [ebp - 0x1128], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0x467bb1a8
jg 0x10046c1f
mov dword [ebp - 0x90c], 1
jmp 0x10046c26
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x194]
imul eax, dword [ebp - 0x90c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xf18]
jle 0x10046c4e
mov dword [ebp - 0x48c], 1
jmp 0x10046c55
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0xa50b
jg 0x10046c7c
cmp dword [ebp - 0x494], 0
jne 0x10046c7c
mov eax, 0x5071
test eax, eax
jne 0x10046c7c
and dword [ebp - 0x914], 0
jmp 0x10046c86
mov dword [ebp - 0x914], 1
mov eax, dword [ebp - 0x914]
sub eax, 4
jne 0x10046c98
cmp dword [ebp - 0x2fc], 0
push 1
lea ecx, [ebp - 0xde0]
call fcn.10008f7a
cmp dword [eax], 0x211
je 0x10046cb9
mov dword [ebp - 0x91c], 1
jmp 0x10046cc0
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x494]
cmp dword [ebp - 0x91c], eax
jl 0x10046cda
mov dword [ebp - 0x49c], 1
jmp 0x10046ce1
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
sub eax, dword [ebp - 0x194]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x11ac], eax
mov dword [ebp - 0x26c], 0x971cf71
mov esi, dword [ebp - 0x26c]
push 1
lea ecx, [ebp - 0xde0]
call fcn.10008f7a
mov dword [eax], esi
jmp 0x10046b34
mov byte [ebp - 0xf7], 0
movzx eax, byte [ebp - 0xf7]
test eax, eax
je 0x10046d37
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xde0]
call fcn.10008f75
push 3
lea ecx, [ebp - 0xaec]
call fcn.10008f33
mov dword [ebp - 4], 4
mov dword [ebp - 0x18], 0x39beb064
mov dword [ebp - 0xac], 0
jmp 0x10046d7a
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x10046d9c
push dword [ebp - 0xac]
lea ecx, [ebp - 0xaec]
call fcn.10008f7a
mov dword [eax], 0xbbca6318
jmp 0x10046d6d
mov dword [ebp - 0xac], 0
jmp 0x10046db5
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x10046dd1
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x10f4], 0xfffffffa
jmp 0x10046da8
mov dword [ebp - 0x18], 0
jmp 0x10046de1
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x10046f01
push dword [ebp - 0x18]
lea ecx, [ebp - 0xaec]
call fcn.10008f7a
mov dword [ebp - 0xd48], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0xaec]
call fcn.10008f7a
mov ecx, dword [ebp - 0xd48]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1068], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0xaec]
call fcn.10008f7a
mov ecx, dword [ebp - 0x18]
cmp dword [eax], ecx
jle 0x10046e44
cmp dword [ebp - 0x18], 0
jne 0x10046e44
and dword [ebp - 0x924], 0
jmp 0x10046e4e
mov dword [ebp - 0x924], 1
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x924]
je 0x10046e6e
mov eax, 0x3faa
test eax, eax
je 0x10046e6e
mov dword [ebp - 0xd50], 1
jmp 0x10046e75
and dword [ebp - 0xd50], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0xaec]
call fcn.10008f7a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x114c], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0xaec]
call fcn.10008f7a
cmp dword [eax], 0
jne 0x10046ebb
push dword [ebp - 0x18]
lea ecx, [ebp - 0xaec]
call fcn.10008f7a
cmp dword [eax], 0
jne 0x10046ebb
and dword [ebp - 0x4a4], 0
jmp 0x10046ec5
mov dword [ebp - 0x4a4], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp + eax - 0x10f4], ecx
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x10046efc
push 0x102b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
jmp 0x10046dda
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaec]
call fcn.10008f75
mov dword [ebp - 0xc4], 0x5dae5a60
mov dword [ebp - 0x1e0], 0xfa8f90a3
mov dword [ebp - 0x4e4], 0x140de197
mov dword [ebp - 0xd68], 0x22c08f49
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], eax
jl 0x10046f52
mov dword [ebp - 0x934], 1
jmp 0x10046f59
and dword [ebp - 0x934], 0
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0xc4], eax
je 0x10046f7d
mov dword [ebp - 0x92c], 1
jmp 0x10046f84
and dword [ebp - 0x92c], 0
cmp dword [ebp - 0x92c], 0xe2949f4f
jae 0x10046f9c
mov dword [ebp - 0x4ac], 1
jmp 0x10046fa3
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x4ac], 0xf33f23e9
je 0x10046fbb
mov dword [ebp - 0x4b4], 1
jmp 0x10046fc2
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x934]
cmp eax, dword [ebp - 0x4b4]
jle 0x10046fdc
mov dword [ebp - 0xd58], 1
jmp 0x10046fe3
and dword [ebp - 0xd58], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1070], eax
mov eax, dword [ebp - 0x1e0]
sub eax, dword [ebp - 0xc4]
sub eax, 0x5256
cmp eax, 0xa329ef4a
jne 0x100471cf
push 3
lea ecx, [ebp - 0xbe4]
call fcn.10008f33
mov dword [ebp - 4], 5
mov dword [ebp - 0x4bc], 0xb5ea28c7
mov dword [ebp - 0xd60], 0xffffffff
mov dword [ebp - 0x34], 0
jmp 0x10047043
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1004705f
push dword [ebp - 0x34]
lea ecx, [ebp - 0xbe4]
call fcn.10008f7a
mov dword [eax], 0xfffa
jmp 0x1004703c
mov dword [ebp - 0x34], 0
jmp 0x1004706f
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10047085
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x11dc], 0
jmp 0x10047068
mov dword [ebp - 0x34], 0
jmp 0x10047095
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x100470ab
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x1010], 0x6552ded1
jmp 0x1004708e
push 1
lea ecx, [ebp - 0xbe4]
call fcn.10008f7a
mov eax, dword [eax]
dec eax
je 0x10047107
push 1
lea ecx, [ebp - 0xbe4]
call fcn.10008f7a
cmp dword [eax], 0
je 0x100470ed
push 0
lea ecx, [ebp - 0xbe4]
call fcn.10008f7a
cmp dword [eax], 0
je 0x100470ed
mov dword [ebp - 0x93c], 1
jmp 0x100470f4
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x93c]
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 0
cmp dword [ebp - 0xc4], 0xffff
jne 0x1004711f
mov dword [ebp - 0x944], 1
jmp 0x10047126
and dword [ebp - 0x944], 0
push 2
lea ecx, [ebp - 0xbe4]
call fcn.10008f7a
mov ecx, dword [ebp - 0x944]
imul ecx, dword [eax]
cmp ecx, 9
jl 0x1004714d
mov dword [ebp - 0x4c4], 1
jmp 0x10047154
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x4c4], eax
jge 0x1004716e
mov dword [ebp - 0x94c], 1
jmp 0x10047175
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0xd60]
cmp dword [ebp - 0x94c], eax
jge 0x1004718f
mov dword [ebp - 0x37c], 1
jmp 0x10047196
and dword [ebp - 0x37c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x37c]
mov dword [ebp + eax - 0x11dc], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x37c]
mov dword [ebp + eax - 0x1010], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbe4]
call fcn.10008f75
jmp 0x100473b0
push 2
lea ecx, [ebp - 0xafc]
call fcn.10008f33
mov dword [ebp - 4], 6
mov dword [ebp - 0x304], 0
jmp 0x100471fc
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 2
jge 0x1004721e
push dword [ebp - 0x304]
lea ecx, [ebp - 0xafc]
call fcn.10008f7a
mov dword [eax], 1
jmp 0x100471ef
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jne 0x10047297
push 1
lea ecx, [ebp - 0xafc]
call fcn.10008f7a
cmp dword [eax], 0
jg 0x10047251
mov dword [ebp - 0x4cc], 1
jmp 0x10047258
and dword [ebp - 0x4cc], 0
push 1
lea ecx, [ebp - 0xafc]
call fcn.10008f7a
mov ecx, dword [ebp - 0x4cc]
cmp ecx, dword [eax]
jl 0x1004727b
mov dword [ebp - 0x954], 1
jmp 0x10047282
and dword [ebp - 0x954], 0
cmp dword [ebp - 0x954], 0x61a7160c
jle 0x10047297
and dword [ebp - 0x4d4], 0
jmp 0x100472a1
mov dword [ebp - 0x4d4], 1
mov eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0x4d4], eax
jg 0x100472bb
mov dword [ebp - 0x95c], 1
jmp 0x100472c2
and dword [ebp - 0x95c], 0
push 1
lea ecx, [ebp - 0xafc]
call fcn.10008f7a
mov ecx, dword [ebp - 0x95c]
cmp ecx, dword [eax]
jge 0x100472e5
mov dword [ebp - 0x4dc], 1
jmp 0x100472ec
and dword [ebp - 0x4dc], 0
push 0
lea ecx, [ebp - 0xafc]
call fcn.10008f7a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4dc]
jl 0x1004730f
mov dword [ebp - 0x964], 1
jmp 0x10047316
and dword [ebp - 0x964], 0
imul eax, dword [ebp - 0x964], 0xffffffff
cmp eax, dword [ebp - 0xc4]
jle 0x10047331
mov dword [ebp - 0x96c], 1
jmp 0x10047338
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0x96c], eax
jl 0x10047364
push 1
lea ecx, [ebp - 0xafc]
call fcn.10008f7a
cmp dword [eax], 0
je 0x10047364
mov dword [ebp - 0x4ec], 1
jmp 0x1004736b
and dword [ebp - 0x4ec], 0
push 1
lea ecx, [ebp - 0xafc]
call fcn.10008f7a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4ec]
je 0x1004738e
mov dword [ebp - 0x974], 1
jmp 0x10047395
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0xd68], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xafc]
call fcn.10008f75
mov dword [ebp - 0x19c], 0xffffffff
push 2
lea ecx, [ebp - 0xdf0]
call fcn.10008f33
mov dword [ebp - 4], 7
mov dword [ebp - 0xd78], 1
mov dword [ebp - 0x4f4], 0xbfe7374
mov dword [ebp - 0x44], 0
jmp 0x100473f2
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10047408
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xf00], 0xe2799ac7
jmp 0x100473eb
mov dword [ebp - 0x44], 0
jmp 0x10047418
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10047434
push dword [ebp - 0x44]
lea ecx, [ebp - 0xdf0]
call fcn.10008f7a
mov dword [eax], 0x6e74a6e8
jmp 0x10047411
mov dword [ebp - 0x44], 0
jmp 0x10047444
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1004745a
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x11c4], 0xbca3396d
jmp 0x1004743d
mov dword [ebp - 0x19c], 1
jmp 0x10047473
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jl 0x1004764f
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x274], 4
mov dword [ebp - 0x504], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf00], 0xd3e
jle 0x100474bd
mov dword [ebp - 0xd70], 1
jmp 0x100474c4
and dword [ebp - 0xd70], 0
mov dword [ebp - 0x30c], 0xe0fc36fe
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0xf64], eax
xor eax, eax
cmp eax, 0xffffffff
jae 0x100474ed
mov dword [ebp - 0x3bc], 1
jmp 0x100474f4
and dword [ebp - 0x3bc], 0
push 1
lea ecx, [ebp - 0xdf0]
call fcn.10008f7a
mov ecx, dword [ebp - 0x3bc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0xf6c], eax
mov eax, dword [ebp - 0xd78]
mov dword [ebp - 0xf74], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x4f4], 0x467bb1a8
jg 0x10047551
mov dword [ebp - 0x97c], 1
jmp 0x10047558
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x19c]
imul eax, dword [ebp - 0x97c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xf00]
jle 0x10047580
mov dword [ebp - 0x4fc], 1
jmp 0x10047587
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0xa50b
jg 0x100475ae
cmp dword [ebp - 0x504], 0
jne 0x100475ae
mov eax, 0x5071
test eax, eax
jne 0x100475ae
and dword [ebp - 0x984], 0
jmp 0x100475b8
mov dword [ebp - 0x984], 1
mov eax, dword [ebp - 0x984]
sub eax, 4
jne 0x100475ca
cmp dword [ebp - 0x274], 0
push 1
lea ecx, [ebp - 0xdf0]
call fcn.10008f7a
cmp dword [eax], 0x211
je 0x100475eb
mov dword [ebp - 0x98c], 1
jmp 0x100475f2
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x504]
cmp dword [ebp - 0x98c], eax
jl 0x1004760c
mov dword [ebp - 0x50c], 1
jmp 0x10047613
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
sub eax, dword [ebp - 0x19c]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x11c4], eax
mov dword [ebp - 0x30c], 0x971cf71
mov esi, dword [ebp - 0x30c]
push 1
lea ecx, [ebp - 0xdf0]
call fcn.10008f7a
mov dword [eax], esi
jmp 0x10047466
mov byte [ebp - 0xfb], 0
movzx eax, byte [ebp - 0xfb]
test eax, eax
je 0x10047669
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdf0]
call fcn.10008f75
push 3
lea ecx, [ebp - 0xb0c]
call fcn.10008f33
mov dword [ebp - 4], 8
mov dword [ebp - 0x14], 0x39beb064
mov dword [ebp - 0xbc], 0
jmp 0x100476ac
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x100476ce
push dword [ebp - 0xbc]
lea ecx, [ebp - 0xb0c]
call fcn.10008f7a
mov dword [eax], 0xbbca6318
jmp 0x1004769f
mov dword [ebp - 0xbc], 0
jmp 0x100476e7
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x10047703
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x1130], 0xfffffffa
jmp 0x100476da
mov dword [ebp - 0x14], 0
jmp 0x10047713
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x10047833
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb0c]
call fcn.10008f7a
mov dword [ebp - 0xd80], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb0c]
call fcn.10008f7a
mov ecx, dword [ebp - 0xd80]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xf7c], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb0c]
call fcn.10008f7a
mov ecx, dword [ebp - 0x14]
cmp dword [eax], ecx
jle 0x10047776
cmp dword [ebp - 0x14], 0
jne 0x10047776
and dword [ebp - 0x994], 0
jmp 0x10047780
mov dword [ebp - 0x994], 1
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x994]
je 0x100477a0
mov eax, 0x3faa
test eax, eax
je 0x100477a0
mov dword [ebp - 0xd88], 1
jmp 0x100477a7
and dword [ebp - 0xd88], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb0c]
call fcn.10008f7a
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xf84], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb0c]
call fcn.10008f7a
cmp dword [eax], 0
jne 0x100477ed
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb0c]
call fcn.10008f7a
cmp dword [eax], 0
jne 0x100477ed
and dword [ebp - 0x514], 0
jmp 0x100477f7
mov dword [ebp - 0x514], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x514]
mov dword [ebp + eax - 0x1130], ecx
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x1004782e
push 0x102b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
jmp 0x1004770c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0c]
call fcn.10008f75
mov dword [ebp - 0x24], 0xffffffff
push 3
lea ecx, [ebp - 0x360]
call fcn.10008f33
mov dword [ebp - 4], 9
mov dword [ebp - 0x54], 0xe9f21c9b
mov dword [ebp - 0x27c], 0
jmp 0x1004787d
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jge 0x1004789f
push dword [ebp - 0x27c]
lea ecx, [ebp - 0x360]
call fcn.10008f7a
mov dword [eax], 0x2b994b74
jmp 0x10047870
cmp dword [ebp - 0x24], 0xc0351a93
jae 0x100478b7
cmp dword [ebp - 0x24], 0
jne 0x100478b7
and dword [ebp - 0x99c], 0
jmp 0x100478c1
mov dword [ebp - 0x99c], 1
cmp dword [ebp - 0x99c], 4
jb 0x100478d6
mov dword [ebp - 0x51c], 1
jmp 0x100478dd
and dword [ebp - 0x51c], 0
cmp dword [ebp - 0x51c], 1
je 0x100478f2
mov dword [ebp - 0x9a4], 1
jmp 0x100478f9
and dword [ebp - 0x9a4], 0
cmp dword [ebp - 0x9a4], 0x59b504db
jge 0x10047911
mov dword [ebp - 0x524], 1
jmp 0x10047918
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x524]
jg 0x10047932
cmp dword [ebp - 0x24], 0
jne 0x10047932
and dword [ebp - 0x9ac], 0
jmp 0x1004793c
mov dword [ebp - 0x9ac], 1
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x9ac]
jne 0x10047953
mov dword [ebp - 0x52c], 1
jmp 0x1004795a
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x52c]
cmp eax, 0x9d43
jl 0x10047976
mov dword [ebp - 0x9b4], 1
jmp 0x1004797d
and dword [ebp - 0x9b4], 0
cmp dword [ebp - 0x9b4], 0xfffffffb
ja 0x10047992
mov dword [ebp - 0x534], 1
jmp 0x10047999
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x534], eax
jne 0x100479b0
mov dword [ebp - 0x9bc], 1
jmp 0x100479b7
and dword [ebp - 0x9bc], 0
mov esi, dword [ebp - 0x9bc]
neg esi
push 0
lea ecx, [ebp - 0x360]
call fcn.10008f7a
mov dword [eax], esi
xor eax, eax
inc eax
jne 0x100479dc
mov eax, 0xfffe
test eax, eax
je 0x100479e0
cmp dword [ebp - 0x24], 0
push 0
lea ecx, [ebp - 0x360]
call fcn.10008f7a
cmp dword [eax], 1
jne 0x100479fe
mov dword [ebp - 0x53c], 1
jmp 0x10047a05
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x53c]
jle 0x10047a1c
mov dword [ebp - 0x9c4], 1
jmp 0x10047a23
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x9c4]
neg eax
mov dword [ebp - 0x54], eax
je 0x10047c0d
push 1
lea ecx, [ebp - 0xea0]
call fcn.10008f33
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x314], 0
jmp 0x10047a5e
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 1
jge 0x10047a80
push dword [ebp - 0x314]
lea ecx, [ebp - 0xea0]
call fcn.10008f7a
mov dword [eax], 9
jmp 0x10047a51
mov dword [ebp - 0x24], 0
jmp 0x10047a90
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1a
jne 0x10047bf9
mov dword [ebp - 0xd90], 0
mov dword [ebp - 0x54], 2
jmp 0x10047ab4
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10047bf4
mov dword [ebp - 0xda8], 0xffffffff
mov dword [ebp - 0x284], 0
jmp 0x10047ae1
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x10047afd
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0x101c], 0xfffffffc
jmp 0x10047ad4
push 4
pop eax
shl eax, 0
lea eax, [ebp + eax - 0x101c]
mov dword [ebp - 0x544], eax
push 0
lea ecx, [ebp - 0xea0]
call fcn.10008f7a
mov ecx, dword [ebp - 0x544]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x544]
cmp dword [eax], 0
jne 0x10047b44
cmp dword [ebp - 0xd90], 0
jne 0x10047b44
and dword [ebp - 0x9cc], 0
jmp 0x10047b4e
mov dword [ebp - 0x9cc], 1
push dword [ebp - 0x54]
lea ecx, [ebp - 0x360]
call fcn.10008f7a
mov eax, dword [eax]
add eax, dword [ebp - 0x9cc]
mov dword [ebp - 0xd98], eax
push dword [ebp - 0x54]
lea ecx, [ebp - 0x360]
call fcn.10008f7a
mov ecx, dword [ebp - 0xd98]
mov dword [eax], ecx
push dword [ebp - 0x54]
lea ecx, [ebp - 0x360]
call fcn.10008f7a
cmp dword [eax], 0
je 0x10047bb2
push dword [ebp - 0x54]
lea ecx, [ebp - 0x360]
call fcn.10008f7a
cmp dword [eax], 0
je 0x10047bb2
mov dword [ebp - 0xda0], 1
jmp 0x10047bb9
and dword [ebp - 0xda0], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x360]
call fcn.10008f7a
mov eax, dword [eax]
mov dword [ebp - 0xda8], eax
push 0
lea ecx, [ebp - 0xea0]
call fcn.10008f7a
mov esi, eax
push 0
lea ecx, [ebp - 0x360]
call fcn.10008f7a
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x10047aad
jmp 0x10047a89
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xea0]
call fcn.10008f75
jmp 0x10047d8a
push 3
lea ecx, [ebp - 0xb9c]
call fcn.10008f33
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x554], 0x15e3087c
mov dword [ebp - 0x31c], 0
jmp 0x10047c41
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 3
jge 0x10047c63
push dword [ebp - 0x31c]
lea ecx, [ebp - 0xb9c]
call fcn.10008f7a
mov dword [eax], 0xfffffffe
jmp 0x10047c34
push 2
lea ecx, [ebp - 0xb9c]
call fcn.10008f7a
push 2
lea ecx, [ebp - 0x360]
call fcn.10008f7a
mov dword [ebp - 0x54c], eax
push 1
lea ecx, [ebp - 0x360]
call fcn.10008f7a
mov ecx, dword [ebp - 0x54c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54c]
cmp dword [eax], 0x82bc
jne 0x10047cba
mov eax, 0xcebb36e9
test eax, eax
jne 0x10047cba
and dword [ebp - 0x9dc], 0
jmp 0x10047cc4
mov dword [ebp - 0x9dc], 1
push 2
lea ecx, [ebp - 0xb9c]
call fcn.10008f7a
mov esi, eax
push 1
lea ecx, [ebp - 0xb9c]
call fcn.10008f7a
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10047cf2
mov dword [ebp - 0x9d4], 1
jmp 0x10047cf9
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0
je 0x10047d20
cmp dword [ebp - 0x24], 0
je 0x10047d20
mov dword [ebp - 0x55c], 1
jmp 0x10047d27
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x9dc]
cmp eax, dword [ebp - 0x55c]
jl 0x10047d41
mov dword [ebp - 0x9e4], 1
jmp 0x10047d48
and dword [ebp - 0x9e4], 0
push 2
lea ecx, [ebp - 0xb9c]
call fcn.10008f7a
mov ecx, dword [ebp - 0x9e4]
cmp ecx, dword [eax]
jge 0x10047d6b
mov dword [ebp - 0x564], 1
jmp 0x10047d72
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xb9c]
call fcn.10008f75
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x360]
call fcn.10008f75
mov dword [ebp - 0xec], 0x5dae5a60
mov dword [ebp - 0x1e8], 0xfa8f90a3
mov dword [ebp - 0x5a4], 0x140de197
mov dword [ebp - 0xdc0], 0x22c08f49
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xec], eax
jl 0x10047ddb
mov dword [ebp - 0x9f4], 1
jmp 0x10047de2
and dword [ebp - 0x9f4], 0
mov dword [ebp - 0x1e8], 1
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0xec], eax
je 0x10047e06
mov dword [ebp - 0x9ec], 1
jmp 0x10047e0d
and dword [ebp - 0x9ec], 0
cmp dword [ebp - 0x9ec], 0xe2949f4f
jae 0x10047e25
mov dword [ebp - 0x56c], 1
jmp 0x10047e2c
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0xf33f23e9
je 0x10047e44
mov dword [ebp - 0x574], 1
jmp 0x10047e4b
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x9f4]
cmp eax, dword [ebp - 0x574]
jle 0x10047e65
mov dword [ebp - 0xdb0], 1
jmp 0x10047e6c
and dword [ebp - 0xdb0], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xf8c], eax
mov eax, dword [ebp - 0x1e8]
sub eax, dword [ebp - 0xec]
sub eax, 0x5256
cmp eax, 0xa329ef4a
jne 0x10048058
push 3
lea ecx, [ebp - 0xbcc]
call fcn.10008f33
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x57c], 0xb5ea28c7
mov dword [ebp - 0xdb8], 0xffffffff
mov dword [ebp - 0x28], 0
jmp 0x10047ecc
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10047ee8
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbcc]
call fcn.10008f7a
mov dword [eax], 0xfffa
jmp 0x10047ec5
mov dword [ebp - 0x28], 0
jmp 0x10047ef8
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10047f0e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x11a0], 0
jmp 0x10047ef1
mov dword [ebp - 0x28], 0
jmp 0x10047f1e
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10047f34
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1108], 0x6552ded1
jmp 0x10047f17
push 1
lea ecx, [ebp - 0xbcc]
call fcn.10008f7a
mov eax, dword [eax]
dec eax
je 0x10047f90
push 1
lea ecx, [ebp - 0xbcc]
call fcn.10008f7a
cmp dword [eax], 0
je 0x10047f76
push 0
lea ecx, [ebp - 0xbcc]
call fcn.10008f7a
cmp dword [eax], 0
je 0x10047f76
mov dword [ebp - 0x9fc], 1
jmp 0x10047f7d
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 0
cmp dword [ebp - 0xec], 0xffff
jne 0x10047fa8
mov dword [ebp - 0xa04], 1
jmp 0x10047faf
and dword [ebp - 0xa04], 0
push 2
lea ecx, [ebp - 0xbcc]
call fcn.10008f7a
mov ecx, dword [ebp - 0xa04]
imul ecx, dword [eax]
cmp ecx, 9
jl 0x10047fd6
mov dword [ebp - 0x584], 1
jmp 0x10047fdd
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x584], eax
jge 0x10047ff7
mov dword [ebp - 0xa0c], 1
jmp 0x10047ffe
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0xdb8]
cmp dword [ebp - 0xa0c], eax
jge 0x10048018
mov dword [ebp - 0x384], 1
jmp 0x1004801f
and dword [ebp - 0x384], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x384]
mov dword [ebp + eax - 0x11a0], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x384]
mov dword [ebp + eax - 0x1108], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbcc]
call fcn.10008f75
jmp 0x10048239
push 2
lea ecx, [ebp - 0xb1c]
call fcn.10008f33
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x28c], 0
jmp 0x10048085
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jge 0x100480a7
push dword [ebp - 0x28c]
lea ecx, [ebp - 0xb1c]
call fcn.10008f7a
mov dword [eax], 1
jmp 0x10048078
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jne 0x10048120
push 1
lea ecx, [ebp - 0xb1c]
call fcn.10008f7a
cmp dword [eax], 0
jg 0x100480da
mov dword [ebp - 0x58c], 1
jmp 0x100480e1
and dword [ebp - 0x58c], 0
push 1
lea ecx, [ebp - 0xb1c]
call fcn.10008f7a
mov ecx, dword [ebp - 0x58c]
cmp ecx, dword [eax]
jl 0x10048104
mov dword [ebp - 0xa14], 1
jmp 0x1004810b
and dword [ebp - 0xa14], 0
cmp dword [ebp - 0xa14], 0x61a7160c
jle 0x10048120
and dword [ebp - 0x594], 0
jmp 0x1004812a
mov dword [ebp - 0x594], 1
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x594], eax
jg 0x10048144
mov dword [ebp - 0xa1c], 1
jmp 0x1004814b
and dword [ebp - 0xa1c], 0
push 1
lea ecx, [ebp - 0xb1c]
call fcn.10008f7a
mov ecx, dword [ebp - 0xa1c]
cmp ecx, dword [eax]
jge 0x1004816e
mov dword [ebp - 0x59c], 1
jmp 0x10048175
and dword [ebp - 0x59c], 0
push 0
lea ecx, [ebp - 0xb1c]
call fcn.10008f7a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x59c]
jl 0x10048198
mov dword [ebp - 0xa24], 1
jmp 0x1004819f
and dword [ebp - 0xa24], 0
imul eax, dword [ebp - 0xa24], 0xffffffff
cmp eax, dword [ebp - 0xec]
jle 0x100481ba
mov dword [ebp - 0xa2c], 1
jmp 0x100481c1
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0xa2c], eax
jl 0x100481ed
push 1
lea ecx, [ebp - 0xb1c]
call fcn.10008f7a
cmp dword [eax], 0
je 0x100481ed
mov dword [ebp - 0x5ac], 1
jmp 0x100481f4
and dword [ebp - 0x5ac], 0
push 1
lea ecx, [ebp - 0xb1c]
call fcn.10008f7a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5ac]
je 0x10048217
mov dword [ebp - 0xa34], 1
jmp 0x1004821e
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xa34]
mov dword [ebp - 0xdc0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb1c]
call fcn.10008f75
mov dword [ebp - 0xf94], 0xb743
mov dword [ebp - 0xc90], 0xc75286e8
mov dword [ebp - 0xc14], 0xff55e00f
mov dword [ebp - 0x3e4], 0x961c0f80
mov dword [ebp - 0xf9c], 5
mov dword [ebp - 0xfa4], 0x9ec4279c
mov dword [ebp - 0xc00], 0
push 3
lea ecx, [ebp - 0xbb4]
call fcn.10008f33
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xa54], 0xa8b060d2
mov dword [ebp - 0x324], 0xd39c7c6f
mov dword [ebp - 0x5b4], 0x6fc6088b
mov dword [ebp - 0xfac], 0xffffffff
mov dword [ebp - 0xc04], 0xfffffffd
mov dword [ebp - 0xc0c], 0
mov dword [ebp - 0xd4c], 0xb92b2c22
mov dword [ebp - 0x94], 0
jmp 0x100482f2
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10048314
push dword [ebp - 0x94]
lea ecx, [ebp - 0xbb4]
call fcn.10008f7a
mov dword [eax], 1
jmp 0x100482e5
mov dword [ebp - 0x94], 0
jmp 0x1004832d
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x10048349
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x3f4], 0xfffffffe
jmp 0x10048320
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3f4], eax
mov dword [ebp - 0x5b4], 0x142b
cmp dword [ebp - 0x5b4], 0
jne 0x10048383
mov dword [ebp - 0xa3c], 1
jmp 0x1004838a
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0x324]
dec eax
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0xa3c]
jge 0x100483b1
mov dword [ebp - 0x5bc], 1
jmp 0x100483b8
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0xc90], eax
push 1
lea ecx, [ebp - 0xbb4]
call fcn.10008f7a
cmp dword [eax], 0
je 0x1004856e
cmp dword [ebp - 0xa54], 0
jne 0x10048551
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f4]
mov dword [ebp - 0xc00], eax
push 1
lea ecx, [ebp - 0xbb4]
call fcn.10008f7a
mov esi, eax
push 1
lea ecx, [ebp - 0xbb4]
call fcn.10008f7a
mov ecx, dword [esi]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x324]
je 0x1004842e
mov dword [ebp - 0xa44], 1
jmp 0x10048435
and dword [ebp - 0xa44], 0
cmp dword [ebp - 0xa44], 0x98fe831e
ja 0x1004844d
mov dword [ebp - 0x5dc], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5dc]
sub ecx, dword [ebp + eax - 0x3f4]
cmp dword [ebp - 0xd4c], 0
je 0x10048587
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3f4], 0
jne 0x10048594
xor eax, eax
jne 0x10048594
and dword [ebp - 0xa64], 0
jmp 0x1004859e
mov dword [ebp - 0xa64], 1
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0xc14], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbb4]
call fcn.10008f75
mov dword [ebp - 0xd4], 0x5dae5a60
mov dword [ebp - 0x1a4], 0xfa8f90a3
mov dword [ebp - 0x628], 0x140de197
mov dword [ebp - 0xd54], 0x22c08f49
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0xd4], eax
jl 0x100485fb