Function at 0x10045354
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa3c
push esi
push edi
mov dword [ebp - 0x68], 0x8ade19d2
mov dword [ebp - 0x534], 0x8cf4c59c
mov dword [ebp - 0xe8], 0xfffffffa
mov dword [ebp - 0x6c0], 0xa023703a
mov dword [ebp - 0x6bc], 0xa023703a
mov dword [ebp - 0x6b8], 0xa023703a
mov dword [ebp - 0x6b4], 0xa023703a
mov dword [ebp - 0x3c4], 0x91f9e6a0
mov dword [ebp - 0x748], 0xfffffff9
mov dword [ebp - 0x744], 0xfffffff9
mov dword [ebp - 0x740], 0xfffffff9
mov dword [ebp - 0x73c], 0xfffffff9
mov dword [ebp - 0x628], 0xfffffffe
mov dword [ebp - 0x30], 0
jmp 0x100453ee
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10045404
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x668], 0x648
jmp 0x100453e7
mov dword [ebp - 0x30], 0
jmp 0x10045414
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1004542a
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x9cc], 8
jmp 0x1004540d
mov dword [ebp - 0x68], 0
jmp 0x1004543a
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10045450
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x668], 0xe1d9
jmp 0x10045433
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x978], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x8a8], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x668]
cmp dword [ebp + eax - 0x668], ecx
jge 0x1004548f
mov dword [ebp - 0x378], 1
jmp 0x10045496
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x378]
je 0x100454b5
xor eax, eax
inc eax
je 0x100454b5
mov dword [ebp - 0x53c], 1
jmp 0x100454bc
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x53c], eax
jl 0x100454d6
mov dword [ebp - 0x55c], 1
jmp 0x100454dd
and dword [ebp - 0x55c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x668]
cmp eax, dword [ebp - 0x55c]
jne 0x100454fe
mov dword [ebp - 0x5d4], 1
jmp 0x10045505
and dword [ebp - 0x5d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c0]
mov dword [ebp - 0x8b0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c0]
imul eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0xe8]
jne 0x10045546
mov eax, 0x276c
test eax, eax
jne 0x10045546
and dword [ebp - 0x564], 0
jmp 0x10045550
mov dword [ebp - 0x564], 1
cmp dword [ebp - 0x564], 0x752bf390
jl 0x10045568
mov dword [ebp - 0x21c], 1
jmp 0x1004556f
and dword [ebp - 0x21c], 0
mov dword [ebp - 0x534], 5
mov eax, dword [ebp - 0x534]
sub eax, dword [ebp - 0x21c]
mov dword [ebp - 0x3c4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x668]
cmp dword [ebp - 0x3c4], eax
jne 0x100455b1
cmp dword [ebp - 0x68], 0
je 0x100455b1
mov dword [ebp - 0x1b4], 1
jmp 0x100455b8
and dword [ebp - 0x1b4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0x9cc], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b4]
sub ecx, dword [ebp + eax - 0x6c0]
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x748], ecx
cmp dword [ebp - 0x628], 0
jne 0x10045601
xor eax, eax
jne 0x10045601
and dword [ebp - 0x224], 0
jmp 0x1004560b
mov dword [ebp - 0x224], 1
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x224]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x108], 0x7222
mov dword [ebp - 0x1bc], 0xd9ba5f27
mov dword [ebp - 0x3cc], 0
mov dword [ebp - 0xec], 0x7d02
mov dword [ebp - 0x638], 5
mov dword [ebp - 0x8b8], 0xf4e55b65
mov dword [ebp - 0x17c], 0
jmp 0x1004566c
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x10045688
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x11c], 0
jmp 0x1004565f
cmp dword [ebp - 0x108], 0
je 0x100456a6
cmp dword [ebp - 0x108], 0
je 0x100456a6
mov dword [ebp - 0x49c], 1
jmp 0x100456ad
and dword [ebp - 0x49c], 0
imul eax, dword [ebp - 0x108], 0xffffffff
test eax, eax
jne 0x100456d4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11c], 0
je 0x100456d4
mov dword [ebp - 0x630], 1
jmp 0x100456db
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x3cc], eax
jl 0x10045701
mov dword [ebp - 0x498], 1
jmp 0x10045708
and dword [ebp - 0x498], 0
imul eax, dword [ebp - 0x498], 0x9a01
cmp eax, dword [ebp - 0x1bc]
jle 0x10045726
mov dword [ebp - 0x22c], 1
jmp 0x1004572d
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0xec]
add eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0x3cc]
jge 0x1004574d
mov dword [ebp - 0x234], 1
jmp 0x10045754
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp dword [ebp - 0x234], eax
jne 0x10045775
mov dword [ebp - 0x23c], 1
jmp 0x1004577c
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x49c]
cmp eax, dword [ebp - 0x23c]
je 0x10045796
mov dword [ebp - 0x3d4], 1
jmp 0x1004579d
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x108]
imul ecx, dword [ebp - 0x3d4]
imul eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x11c]
cmp eax, 0xffffffff
je 0x100457e2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11c], 0
je 0x100457e2
mov dword [ebp - 0x244], 1
jmp 0x100457e9
and dword [ebp - 0x244], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
add eax, dword [ebp - 0x244]
mov dword [ebp - 0x638], eax
mov dword [ebp - 0xec], 0
jmp 0x1004581b
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xfffffff0
jle 0x1004584a
mov byte [ebp - 0x90], 0
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x10045848
push 0x1799
push 0x1868
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
jmp 0x1004580e
mov dword [ebp - 0x6c], 0x8ade19d2
mov dword [ebp - 0x12c], 0x25b9b55b
mov dword [ebp - 0x1ac], 0
jmp 0x10045874
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x10045890
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x704], 0
jmp 0x10045867
mov dword [ebp - 0x12c], 0xfffffffc
jmp 0x100458a9
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xffffffee
jle 0x100459dc
mov dword [ebp - 0x194], 0
jmp 0x100458cf
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x100458eb
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0xcc], 0
jmp 0x100458c2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xcc], 1
jmp 0x10045919
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xcc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcc], 0
jl 0x100459b8
mov dword [ebp - 0x134], 0x8358bd4d
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x10045967
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov dword [ebp - 0x134], 1
jmp 0x10045980
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jl 0x100459b3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xcc]
mov eax, dword [ebp + eax*4 - 0x704]
mov dword [ebp + ecx*4 - 0x704], eax
jmp 0x10045973
jmp 0x100458fe
mov byte [ebp - 0x88], 0
movzx eax, byte [ebp - 0x88]
test eax, eax
je 0x100459d7
push 0xe94
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
jmp 0x1004589c
mov dword [ebp - 0x32c], 0x8cf4c59c
mov dword [ebp - 0xd4], 0xfffffffa
mov dword [ebp - 0x640], 0xfffffff6
mov dword [ebp - 0x8c8], 0xfffffff6
mov dword [ebp - 0x8d0], 0
mov dword [ebp - 0x8d8], 1
mov dword [ebp - 0x8e0], 0xfffffffc
mov dword [ebp - 0x8e8], 3
mov dword [ebp - 0x90c], 7
mov dword [ebp - 0x914], 0x442e119
mov dword [ebp - 0x91c], 1
mov dword [ebp - 0x924], 0x9e8bfa08
mov dword [ebp - 0x92c], 0xca72cb56
mov dword [ebp - 0x934], 0xceaa9639
mov dword [ebp - 0x93c], 0
mov dword [ebp - 0x24c], 4
mov dword [ebp - 0x1c], 0
jmp 0x10045a8c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10045aa2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x944], 0
jmp 0x10045a85
mov dword [ebp - 0x1c], 0
jmp 0x10045ab2
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10045ac8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x94c], 0x42e4
jmp 0x10045aab
cmp dword [ebp - 0x640], 0
je 0x10045afe
mov byte [ebp - 0x8a], 0
movzx eax, byte [ebp - 0x8a]
test eax, eax
je 0x10045af9
push 0x25b9
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x10045bcc
mov dword [ebp - 0x954], 1
mov dword [ebp - 0x988], 0x770a77c8
mov dword [ebp - 0x990], 0x2ee6d058
mov dword [ebp - 0x998], 0xffffffff
mov dword [ebp - 0x9a0], 0xfffffffb
mov dword [ebp - 0x9a8], 0x9214a9ba
mov dword [ebp - 0x9b0], 0x3631e19e
mov dword [ebp - 0x9b8], 0x8bdfadf6
mov dword [ebp - 0x9c0], 0x78acc4b7
mov dword [ebp - 0x9ac], 0x9a20b287
mov dword [ebp - 0x968], 5
mov dword [ebp - 0x764], 4
mov dword [ebp - 0x8a4], 0x5d06de21
mov dword [ebp - 0x50c], 3
mov dword [ebp - 0x178], 0
jmp 0x10045ba3
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x10045bbf
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x76c], 0xfffffff7
jmp 0x10045b96
mov eax, dword [ebp - 0x50c]
dec eax
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x6d0], 0xa023703a
mov dword [ebp - 0x6cc], 0xa023703a
mov dword [ebp - 0x6c8], 0xa023703a
mov dword [ebp - 0x6c4], 0xa023703a
mov dword [ebp - 0x334], 0x91f9e6a0
mov dword [ebp - 0x180], 0x53b26bdd
mov dword [ebp - 0x13c], 0
jmp 0x10045c2e
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x10045c4a
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x9b4], 4
jmp 0x10045c21
mov dword [ebp - 0x180], 0
jmp 0x10045c63
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x1a
jl 0x10045d75
mov dword [ebp - 0x144], 0
jmp 0x10045c89
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x10045ca5
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0xf8], 0xcfb6318d
jmp 0x10045c7c
mov byte [ebp - 0x8c], 0
movzx eax, byte [ebp - 0x8c]
test eax, eax
je 0x10045ccd
push 0
push 0
push 0x1bca
push 0x670
push 0
call dword [sym.imp.USER32.dll_InsertMenuW]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf8], 0xfffffff3
jmp 0x10045cfb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf8], 0xffffffee
jl 0x10045d70
mov dword [ebp - 0x118], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x118], 0x15
jmp 0x10045d41
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x3c
jl 0x10045d6b
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10045d69
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_HideCaret]
jmp 0x10045d34
jmp 0x10045ce0
jmp 0x10045c56
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x4b4], 0x160a
mov dword [ebp - 0x404], 1
mov dword [ebp - 0x20], 0
jmp 0x10045dad
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10045dc3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x20c], 0x31d83293
jmp 0x10045da6
mov dword [ebp - 0x20], 0
jmp 0x10045dd3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10045de9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x690], 0x8d6db9e
jmp 0x10045dcc
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x20c], 0x60f7
jl 0x10045e07
mov dword [ebp - 0x3dc], 1
jmp 0x10045e0e
and dword [ebp - 0x3dc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x3dc], eax
je 0x10045e2e
mov dword [ebp - 0x254], 1
jmp 0x10045e35
and dword [ebp - 0x254], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20c]
mov ecx, dword [ebp - 0x254]
lea eax, [eax + ecx - 0x3dcd]
test eax, eax
jne 0x10045e5f
mov dword [ebp - 0x4a4], 1
jmp 0x10045e66
and dword [ebp - 0x4a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x20c]
cmp eax, dword [ebp - 0x4a4]
jne 0x10045e86
mov dword [ebp - 0x25c], 1
jmp 0x10045e8d
and dword [ebp - 0x25c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x25c], eax
jge 0x10045eae
mov dword [ebp - 0x3e4], 1
jmp 0x10045eb5
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x3e4], eax
jle 0x10045ecf
mov dword [ebp - 0x648], 1
jmp 0x10045ed6
and dword [ebp - 0x648], 0
or eax, 0xffffffff
je 0x100460ef
mov dword [ebp - 0x14c], 0x9acb085b
mov dword [ebp - 0x188], 0
jmp 0x10045f02
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 2
jge 0x10045f1e
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x548], 1
jmp 0x10045ef5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x548], 0
jne 0x10045f46
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x20c], 0
jne 0x10045f46
and dword [ebp - 0x26c], 0
jmp 0x10045f50
mov dword [ebp - 0x26c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp - 0x28c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x548], 0x7c15
jle 0x10045f81
mov dword [ebp - 0x264], 1
jmp 0x10045f88
and dword [ebp - 0x264], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x264]
sub ecx, dword [ebp + eax - 0x548]
cmp ecx, 0xabaf
jle 0x10045faf
mov dword [ebp - 0x54c], 1
jmp 0x10045fb6
and dword [ebp - 0x54c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x548]
imul eax, dword [ebp - 0x54c]
cmp eax, dword [ebp - 0x100]
jl 0x10045fe7
cmp dword [ebp - 0x14c], 0
je 0x10045fe7
mov dword [ebp - 0x650], 1
jmp 0x10045fee
and dword [ebp - 0x650], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x548]
mov dword [ebp - 0x774], eax
imul eax, dword [ebp - 0x14c], 0x241a
test eax, eax
je 0x1004602d
cmp dword [ebp - 0x100], 0
je 0x1004602d
mov eax, 0xfff6
test eax, eax
je 0x1004602d
mov dword [ebp - 0x3ec], 1
jmp 0x10046034
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x3ec]
jg 0x1004604e
mov dword [ebp - 0x274], 1
jmp 0x10046055
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x274], eax
je 0x1004606f
mov dword [ebp - 0x4ac], 1
jmp 0x10046076
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x4ac]
je 0x10046090
mov dword [ebp - 0x27c], 1
jmp 0x10046097
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x27c], eax
jl 0x100460b1
mov dword [ebp - 0x658], 1
jmp 0x100460b8
and dword [ebp - 0x658], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x77c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x690]
mov dword [ebp - 0x4b4], eax
jmp 0x100461e7
mov dword [ebp - 0x3fc], 0xa25d0016
xor eax, eax
inc eax
je 0x10046113
cmp dword [ebp - 0x3fc], 0
je 0x10046113
mov dword [ebp - 0x3f4], 1
jmp 0x1004611a
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x404]
add eax, dword [ebp - 0x3f4]
cmp eax, 1
jne 0x10046137
mov dword [ebp - 0x284], 1
jmp 0x1004613e
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
add eax, 0x1cc8ffca
je 0x10046167
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x20c], 0
je 0x10046167
mov dword [ebp - 0x510], 1
jmp 0x1004616e
and dword [ebp - 0x510], 0
imul eax, dword [ebp - 0x510], 0
cmp eax, dword [ebp - 0x28c]
jl 0x10046189
mov dword [ebp - 0x294], 1
jmp 0x10046190
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x3fc]
cmp dword [ebp - 0x294], eax
jg 0x100461aa
mov dword [ebp - 0x698], 1
jmp 0x100461b1
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x948], eax
mov eax, 0x5297
dec eax
cmp eax, 0xfffffff6
jne 0x100461d4
mov dword [ebp - 0x29c], 1
jmp 0x100461db
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x758], 0xfffffff9
mov dword [ebp - 0x754], 0xfffffff9
mov dword [ebp - 0x750], 0xfffffff9
mov dword [ebp - 0x74c], 0xfffffff9
mov dword [ebp - 0x62c], 0xfffffffe
mov dword [ebp - 0x98], 0x17571177
mov dword [ebp - 0x58c], 0xfffffffe
mov dword [ebp - 0x588], 0xfffffffe
mov dword [ebp - 0x584], 0xfffffffe
mov dword [ebp - 0x580], 0xfffffffe
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x304], 0x8a66
mov dword [ebp - 0x520], 0x390e64c7
mov dword [ebp - 0x24], 0
jmp 0x10046279
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1004628f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1dc], 0xffff
jmp 0x10046272
mov dword [ebp - 0x24], 0
jmp 0x1004629f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x100462b5
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x71c], 0x1d4b
jmp 0x10046298
mov dword [ebp - 0x98], 0
jmp 0x100462ce
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x16
jle 0x10046874
mov dword [ebp - 0x78], 0x6e3245f1
mov dword [ebp - 4], 4
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x784], 0x31fbf685
mov dword [ebp - 0x8b4], 1
mov dword [ebp - 0x1e4], 0x3388a019
mov dword [ebp - 0x6a0], 0x85ca7dbc
mov dword [ebp - 0x620], 0xc15a2d12
mov dword [ebp - 0x78], 0
jmp 0x10046335
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x19
jne 0x1004683b
mov dword [ebp - 0x5ac], 1
mov dword [ebp - 0x5a8], 1
mov dword [ebp - 0x5a4], 1
mov dword [ebp - 0x5a0], 1
mov dword [ebp - 0x624], 0x8004c3d8
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
jne 0x1004638c
mov dword [ebp - 0x2d4], 1
jmp 0x10046393
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x78c], eax
cmp dword [ebp - 0xdc], 0
jne 0x100463b4
mov dword [ebp - 0x2a4], 1
jmp 0x100463bb
and dword [ebp - 0x2a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5ac]
cmp dword [ebp - 0x2a4], eax
jg 0x100463dc
mov dword [ebp - 0x538], 1
jmp 0x100463e3
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x538], eax
jle 0x100463fd
mov dword [ebp - 0x2ac], 1
jmp 0x10046404
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x2ac], eax
jle 0x10046423
xor eax, eax
inc eax
je 0x10046423
mov dword [ebp - 0x40c], 1
jmp 0x1004642a
and dword [ebp - 0x40c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5ac]
cmp dword [ebp - 0x40c], eax
jle 0x10046453
cmp dword [ebp - 0xdc], 0
je 0x10046453
mov dword [ebp - 0x2b4], 1
jmp 0x1004645a
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x2b4], eax
jl 0x10046474
mov dword [ebp - 0x4bc], 1
jmp 0x1004647b
and dword [ebp - 0x4bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5ac]
cmp eax, dword [ebp - 0x4bc]
jge 0x1004649b
mov dword [ebp - 0x2bc], 1
jmp 0x100464a2
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x2bc], eax
jl 0x100464b9
mov dword [ebp - 0x414], 1
jmp 0x100464c0
and dword [ebp - 0x414], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5ac]
cmp dword [ebp - 0x414], eax
jle 0x100464ee
push 4
pop eax
test eax, eax
je 0x100464ee
push 6
pop eax
test eax, eax
je 0x100464ee
mov dword [ebp - 0x2c4], 1
jmp 0x100464f5
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x190]
cmp eax, dword [ebp - 0x2c4]
jg 0x10046513
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1dc], 0
jne 0x10046525
cmp dword [ebp - 0x190], 0
jne 0x10046525
and dword [ebp - 0x518], 0
jmp 0x1004652f
mov dword [ebp - 0x518], 1
cmp dword [ebp - 0x518], 0
je 0x1004654d
cmp dword [ebp - 0x6a0], 0
je 0x1004654d
mov dword [ebp - 0x2cc], 1
jmp 0x10046554
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x2cc], eax
jne 0x1004656e
mov dword [ebp - 0x41c], 1
jmp 0x10046575
and dword [ebp - 0x41c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1dc]
cmp dword [ebp - 0x41c], eax
jl 0x10046596
mov dword [ebp - 0x4c4], 1
jmp 0x1004659d
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x4c4]
jge 0x100465b7
mov dword [ebp - 0x2dc], 1
jmp 0x100465be
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x2dc], eax
jle 0x100465d8
mov dword [ebp - 0x424], 1
jmp 0x100465df
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 0xfffffffe
jg 0x100465f4
mov dword [ebp - 0x2e4], 1
jmp 0x100465fb
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x71c]
cmp dword [ebp - 0x2e4], eax
je 0x1004661b
mov dword [ebp - 0x560], 1
jmp 0x10046622
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x560]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x58c], eax
mov dword [ebp - 4], 0
jmp 0x1004664c
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jg 0x10046836
mov dword [ebp - 0x5f0], 0x322662b2
mov dword [ebp - 0x30c], 0xe253e14
cmp dword [ebp - 0x190], 0
jne 0x10046680
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x58c], 0
je 0x1004669c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x71c], 0
je 0x1004669c
mov dword [ebp - 0x2ec], 1
jmp 0x100466a3
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x2ec], eax
jl 0x100466bd
mov dword [ebp - 0x42c], 1
jmp 0x100466c4
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x624]
cmp dword [ebp - 0x42c], eax
jl 0x100466de
mov dword [ebp - 0x2f4], 1
jmp 0x100466e5
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x58c]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp + eax*4 - 0x5ac], ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x58c]
mov ecx, dword [ebp - 0x2f4]
lea eax, [ecx + eax + 1]
cmp dword [ebp - 0x4cc], eax
je 0x1004672d
mov dword [ebp - 0x2fc], 1
jmp 0x10046734
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x58c]
add eax, dword [ebp - 4]
imul ecx, dword [ebp - 0x2fc], 0x8073
cmp eax, ecx
jl 0x10046764
mov eax, 0x8e04799c
test eax, eax
je 0x10046764
mov dword [ebp - 0x1c4], 1
jmp 0x1004676b
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x58c], ecx
mov eax, dword [ebp - 0x620]
cmp dword [ebp - 0x1c4], eax
jl 0x10046795
mov dword [ebp - 0x434], 1
jmp 0x1004679c
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x520]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x71c]
imul eax, dword [ebp - 0x5f0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1dc]
jle 0x10046810
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x1004680e
push 0
push 0
push 0x10c
push 0
push 0x887
push 0
push 0x102f
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x10046831
mov dword [ebp - 0x994], 0xe9f1f6a3
mov dword [ebp - 0x794], 0xffffffff
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
jmp 0x10046645
jmp 0x1004632e
mov dword [ebp - 0x78], 0xfffffff5
jmp 0x1004684b
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xd
jle 0x1004686f
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1004686d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x10046844
jmp 0x100462c1
mov dword [ebp - 0x58], 0
jmp 0x10046884
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1004689a
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x678], 0x648
jmp 0x1004687d
mov dword [ebp - 0x58], 0
jmp 0x100468aa
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x100468c0
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x9fc], 8
jmp 0x100468a3
mov dword [ebp - 0x198], 0x5299dada
mov dword [ebp - 0x5c4], 1
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x154], 0
jmp 0x100468f7
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x10046913
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x8bc], 1
jmp 0x100468ea
mov dword [ebp - 0x198], 0
jmp 0x1004692c
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
jg 0x1004694d
mov dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x5c4], eax
jmp 0x1004691f
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x6c], 0
jmp 0x1004696a
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10046b6a
mov dword [ebp - 0x694], 0xfffffff6
mov dword [ebp - 0x79c], 0xfffffff6
mov dword [ebp - 0x950], 0
mov dword [ebp - 0x7a4], 1
mov dword [ebp - 0x8c4], 0xfffffffc
mov dword [ebp - 0x7ac], 3
mov dword [ebp - 0x96c], 7
mov dword [ebp - 0x7b4], 0x442e119
mov dword [ebp - 0x8cc], 1
mov dword [ebp - 0x7bc], 0x9e8bfa08
mov dword [ebp - 0x958], 0xca72cb56
mov dword [ebp - 0x7c4], 0xceaa9639
mov dword [ebp - 0x8d4], 0
mov dword [ebp - 0x4d4], 4
mov dword [ebp - 0x38], 0
jmp 0x10046a10
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10046a26
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x7cc], 0
jmp 0x10046a09
mov dword [ebp - 0x38], 0
jmp 0x10046a36
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10046a4c
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x970], 0x42e4
jmp 0x10046a2f
cmp dword [ebp - 0x694], 0
je 0x10046a7c
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x10046a77
push 0x25b9
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x10046b4a
mov dword [ebp - 0x7d4], 1
mov dword [ebp - 0x8dc], 0x770a77c8
mov dword [ebp - 0x7dc], 0x2ee6d058
mov dword [ebp - 0x8f0], 0xffffffff
mov dword [ebp - 0x7e4], 0xfffffffb
mov dword [ebp - 0x8e4], 0x9214a9ba
mov dword [ebp - 0x7ec], 0x3631e19e
mov dword [ebp - 0x8f4], 0x8bdfadf6
mov dword [ebp - 0x7f4], 0x78acc4b7
mov dword [ebp - 0x8ec], 0x9a20b287
mov dword [ebp - 0x7fc], 5
mov dword [ebp - 0x8fc], 4
mov dword [ebp - 0x804], 0x5d06de21
mov dword [ebp - 0x314], 3
mov dword [ebp - 0x15c], 0
jmp 0x10046b21
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jge 0x10046b3d
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x904], 0xfffffff7
jmp 0x10046b14
mov eax, dword [ebp - 0x314]
dec eax
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x4d4]
dec eax
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x678], 0xe1d9
jmp 0x10046963
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x8f8], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x678]
cmp dword [ebp + eax - 0x678], ecx
jge 0x10046ba9
mov dword [ebp - 0x31c], 1
jmp 0x10046bb0
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x31c]
je 0x10046bcf
xor eax, eax
inc eax
je 0x10046bcf
mov dword [ebp - 0x444], 1
jmp 0x10046bd6
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x444], eax
jl 0x10046bf0
mov dword [ebp - 0x324], 1
jmp 0x10046bf7
and dword [ebp - 0x324], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x678]
cmp eax, dword [ebp - 0x324]
jne 0x10046c18
mov dword [ebp - 0x5cc], 1
jmp 0x10046c1f
and dword [ebp - 0x5cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6d0]
mov dword [ebp - 0x814], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6d0]
imul eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0xd4]
jne 0x10046c60
mov eax, 0x276c
test eax, eax
jne 0x10046c60
and dword [ebp - 0x540], 0
jmp 0x10046c6a
mov dword [ebp - 0x540], 1
cmp dword [ebp - 0x540], 0x752bf390
jl 0x10046c82
mov dword [ebp - 0x44c], 1
jmp 0x10046c89
and dword [ebp - 0x44c], 0
mov dword [ebp - 0x32c], 5
mov eax, dword [ebp - 0x32c]
sub eax, dword [ebp - 0x44c]
mov dword [ebp - 0x334], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x678]
cmp dword [ebp - 0x334], eax
jne 0x10046ccb
cmp dword [ebp - 0x6c], 0
je 0x10046ccb
mov dword [ebp - 0x1cc], 1
jmp 0x10046cd2
and dword [ebp - 0x1cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp + eax - 0x9fc], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1cc]
sub ecx, dword [ebp + eax - 0x6d0]
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x758], ecx
cmp dword [ebp - 0x62c], 0
jne 0x10046d1b
xor eax, eax
jne 0x10046d1b
and dword [ebp - 0x4dc], 0
jmp 0x10046d25
mov dword [ebp - 0x4dc], 1
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x75c], 0x48d327cb
mov dword [ebp - 0x5b0], 0xdb505206
mov dword [ebp - 0x65c], 0xc8fc558b
mov dword [ebp - 0x81c], 7
mov dword [ebp - 0x33c], 2
mov dword [ebp - 0x164], 0
jmp 0x10046d7c
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x10046d98
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0xa2c], 0xddbc3707
jmp 0x10046d6f
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x65c], eax
mov dword [ebp - 0x110], 0x7222
mov dword [ebp - 0x1ec], 0xd9ba5f27
mov dword [ebp - 0x528], 0
mov dword [ebp - 0xf4], 0x7d02
mov dword [ebp - 0x634], 5
mov dword [ebp - 0x900], 0xf4e55b65
mov dword [ebp - 0x120], 0
jmp 0x10046e06
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x10046e22
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0xf0], 0
jmp 0x10046df9
cmp dword [ebp - 0x110], 0
je 0x10046e40
cmp dword [ebp - 0x110], 0
je 0x10046e40
mov dword [ebp - 0x45c], 1
jmp 0x10046e47
and dword [ebp - 0x45c], 0
imul eax, dword [ebp - 0x110], 0xffffffff
test eax, eax
jne 0x10046e6e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf0], 0
je 0x10046e6e
mov dword [ebp - 0x5dc], 1
jmp 0x10046e75
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x528], eax
jl 0x10046e9b
mov dword [ebp - 0x454], 1
jmp 0x10046ea2
and dword [ebp - 0x454], 0
imul eax, dword [ebp - 0x454], 0x9a01
cmp eax, dword [ebp - 0x1ec]
jle 0x10046ec0
mov dword [ebp - 0x344], 1
jmp 0x10046ec7
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0x344]
cmp eax, dword [ebp - 0x528]
jge 0x10046ee7
mov dword [ebp - 0x34c], 1
jmp 0x10046eee
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
cmp dword [ebp - 0x34c], eax
jne 0x10046f0f
mov dword [ebp - 0x354], 1
jmp 0x10046f16
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x354]
je 0x10046f30
mov dword [ebp - 0x4e4], 1
jmp 0x10046f37
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x110]
imul ecx, dword [ebp - 0x4e4]
imul eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xf0]
cmp eax, 0xffffffff
je 0x10046f7c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf0], 0
je 0x10046f7c
mov dword [ebp - 0x35c], 1
jmp 0x10046f83
and dword [ebp - 0x35c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
add eax, dword [ebp - 0x35c]
mov dword [ebp - 0x634], eax
mov dword [ebp - 0xf4], 0
jmp 0x10046fb5
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xfffffff0
jle 0x10046fe4
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x10046fe2
push 0x1799
push 0x1868
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
jmp 0x10046fa8
mov dword [ebp - 0xfc], 3
mov dword [ebp - 0x64], 0
jmp 0x10046ffe
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10047014
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x5e4], 0x38a1f949
jmp 0x10046ff7
mov dword [ebp - 0x64], 0
jmp 0x10047024
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1004703a
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x964], 0xfe04822b
jmp 0x1004701d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5e4], 0
je 0x1004705f
mov eax, 0xa9ac
test eax, eax
je 0x1004705f
mov dword [ebp - 0x464], 1
jmp 0x10047066
and dword [ebp - 0x464], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x464]
mov dword [ebp + eax - 0x964], ecx
mov dword [ebp - 0xfc], 0
jmp 0x10047092
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jg 0x100470af
mov eax, dword [ebp - 0xfc]
cmp dword [ebp + eax*4 - 0x964], 0
je 0x100470ad
jmp 0x100470af
jmp 0x10047085
mov dword [ebp - 0x70], 0x8ade19d2
mov dword [ebp - 0x514], 0x8cf4c59c
mov dword [ebp - 0x980], 1
mov dword [ebp - 0x82c], 0xfffffffb
mov dword [ebp - 0x908], 0xfffffff6
mov dword [ebp - 0x834], 0
mov dword [ebp - 0x974], 1
mov dword [ebp - 0x83c], 4
mov dword [ebp - 0x910], 0xed680444
mov dword [ebp - 0x844], 0xfffffffa
mov dword [ebp - 0x99c], 0x7c10
mov dword [ebp - 0x40], 0
jmp 0x1004712a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10047140
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xa3c], 1
jmp 0x10047123
mov dword [ebp - 0x40], 0
jmp 0x10047150
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10047166
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x364], 0x18a52733
jmp 0x10047149
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x364]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x364], eax
mov dword [ebp - 0x16c], 0x25b9b55b
mov dword [ebp - 0x168], 0
jmp 0x100471a4
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 2
jge 0x100471c0
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x6e4], 0
jmp 0x10047197
mov dword [ebp - 0x16c], 0xfffffffc
jmp 0x100471d9
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xffffffee
jle 0x10047306
mov dword [ebp - 0x1a0], 0
jmp 0x100471ff
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x1004721b
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xe4], 0
jmp 0x100471f2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe4], 1
jmp 0x10047249
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe4], 0
jl 0x100472e2
mov dword [ebp - 0x174], 0x8358bd4d
mov byte [ebp - 0x7f], 0
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x10047291
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov dword [ebp - 0x174], 1
jmp 0x100472aa
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jl 0x100472dd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xe4]
mov eax, dword [ebp + eax*4 - 0x6e4]
mov dword [ebp + ecx*4 - 0x6e4], eax
jmp 0x1004729d
jmp 0x1004722e
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x10047301
push 0xe94
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
jmp 0x100471cc
mov dword [ebp - 0x60], 0x2c70bb74
mov dword [ebp - 0x1a8], 0
jmp 0x10047326
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x10047342
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x68c], 0x8206
jmp 0x10047319
mov dword [ebp - 0x60], 0
jmp 0x10047352
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x10047369
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0x68c], 0
je 0x10047367
jmp 0x10047369
jmp 0x1004734b
mov dword [ebp - 0x60], 0
jmp 0x10047379
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x15
jle 0x1004739b
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10047399
push 0
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
jmp 0x10047372
mov dword [ebp - 0xe0], 0xfffffffa
mov dword [ebp - 0xa0], 0x648261f
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x37c], 5
mov dword [ebp - 0x5ec], 0x142c78ef
mov dword [ebp - 0x48], 0
jmp 0x100473dd
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x100473f3
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x728], 0xffffffff
jmp 0x100473d6
mov dword [ebp - 0x48], 0
jmp 0x10047403
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10047419
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x47c], 7
jmp 0x100473fc
mov dword [ebp - 0xa0], 0
jmp 0x10047432
cmp dword [ebp - 0xa0], 6
jne 0x100476ca
mov dword [ebp - 0x74], 0xd8cf4c59
mov dword [ebp - 0x1b0], 0xccaea0a9
mov dword [ebp - 0x5c], 0
jmp 0x10047460
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10047476
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x9f0], 0xffffffff
jmp 0x10047459
mov dword [ebp - 0x5c], 0
jmp 0x10047486
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1004749c
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x6f4], 0
jmp 0x1004747f
cmp dword [ebp - 0x1d4], 0
jne 0x100475fe
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x74], eax
je 0x100474c6
cmp dword [ebp - 0x74], 0
jne 0x10047616
mov dword [ebp - 0x6b0], 0xa023703a
mov dword [ebp - 0x6ac], 0xa023703a
mov dword [ebp - 0x6a8], 0xa023703a
mov dword [ebp - 0x6a4], 0xa023703a
mov dword [ebp - 0xc8], 0x9ba07e4f
mov dword [ebp - 0x1b8], 0xfffffff8
mov dword [ebp - 0xa8], 3
mov dword [ebp - 0x66c], 0xa9f4f9a
mov dword [ebp - 0x3ac], 0x76cc72b7
mov dword [ebp - 0x5fc], 0x791f
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x50], 0
jmp 0x10047748
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x1004775e
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x6ec], 1
jmp 0x10047741
mov dword [ebp - 0x50], 0
jmp 0x1004776e
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10047784
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x6fc], 0xf4d4e20
jmp 0x10047767
cmp dword [ebp - 0xa8], 5
jle 0x10047799
mov dword [ebp - 0x4f4], 1
jmp 0x100477a0
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x1b8]
add eax, dword [ebp - 0x4f4]
je 0x100477b5