Function at 0x4643b5
Capabilities:
Create pipe
Hide graphical window
Query environment variable
Set environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x35d4
call fcn.00499f40
push esi
push edi
mov dword [ebp - 0x590], 0xfffb
mov dword [ebp - 0x2b0], 6
mov dword [ebp - 0x1bd4], 0x6e33a79c
mov dword [ebp - 0x1fd0], 0
mov dword [ebp - 0x5e0], 0
jmp 0x464405
mov eax, dword [ebp - 0x5e0]
inc eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 2
jge 0x464421
mov eax, dword [ebp - 0x5e0]
mov dword [ebp + eax*4 - 0x2560], 0xfffffffa
jmp 0x4643f8
mov dword [ebp - 0x2b0], 0xda2ae7b7
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x590], eax
jne 0x464445
mov dword [ebp - 0xef4], 1
jmp 0x46444c
and dword [ebp - 0xef4], 0
cmp dword [ebp - 0xef4], 0xfffffffb
jge 0x464461
mov dword [ebp - 0x1ba8], 1
jmp 0x464468
and dword [ebp - 0x1ba8], 0
mov eax, dword [ebp - 0x590]
imul eax, dword [ebp - 0x1ba8]
cmp eax, dword [ebp - 0x590]
jg 0x464489
mov dword [ebp - 0x1bb0], 1
jmp 0x464490
and dword [ebp - 0x1bb0], 0
cmp dword [ebp - 0x1bb0], 0x8382bdb9
jbe 0x4644a8
mov dword [ebp - 0x1bb8], 1
jmp 0x4644af
and dword [ebp - 0x1bb8], 0
mov eax, dword [ebp - 0x590]
imul eax, dword [ebp - 0x1bb8]
add eax, 0xffff
jne 0x4644d5
cmp dword [ebp - 0x590], 0
jne 0x4644d5
and dword [ebp - 0x1bc0], 0
jmp 0x4644df
mov dword [ebp - 0x1bc0], 1
cmp dword [ebp - 0x1bc0], 0x8d9a
jg 0x4644f7
mov dword [ebp - 0xac4], 1
jmp 0x4644fe
and dword [ebp - 0xac4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac4]
mov dword [ebp + eax - 0x2560], ecx
mov eax, dword [ebp - 0xac4]
mov dword [ebp - 0x1bd4], eax
mov eax, dword [ebp - 0x1bd4]
mov dword [ebp - 0x1fd0], eax
mov dword [ebp - 0x2b0], 0
jmp 0x464542
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 2
jge 0x46455e
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0x2560], 0x4859bb7a
jmp 0x464535
mov dword [ebp - 0x25e0], 0x928c176b
mov dword [ebp - 0x25dc], 0x928c176b
mov dword [ebp - 0x25d8], 0x928c176b
mov dword [ebp - 0x25d4], 0x928c176b
lea ecx, [ebp - 0xb72]
call fcn.0042f1c2
push eax
lea eax, [ebp - 0x25d0]
push eax
lea eax, [ebp - 0x25e0]
push eax
lea ecx, [ebp - 0x347c]
call fcn.0042f1c5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2314]
call fcn.0042f171
mov dword [ebp - 0x2b8], 0xffffffff
mov dword [ebp - 0x2e34], 0x917ab6da
mov dword [ebp - 0x2d7c], 1
mov dword [ebp - 0x1be4], 1
mov dword [ebp - 0x1f88], 0
push 4
lea ecx, [ebp - 0x2304]
call fcn.0042f0c5
push 3
lea ecx, [ebp - 0x22f4]
call fcn.0042f0c5
mov dword [ebp - 0x9d4], 1
mov dword [ebp - 0x1c38], 0xb314b812
push 1
lea ecx, [ebp - 0x2778]
call fcn.0042f0c5
mov dword [ebp - 0x1c58], 0x7f5d1cc0
mov dword [ebp - 0x30], 0
jmp 0x464642
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x46465e
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2304]
call fcn.0042f1b3
mov dword [eax], 9
jmp 0x46463b
mov dword [ebp - 0x30], 0
jmp 0x46466e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x46468a
push dword [ebp - 0x30]
lea ecx, [ebp - 0x22f4]
call fcn.0042f1b3
mov dword [eax], 0x270e7ad5
jmp 0x464667
mov dword [ebp - 0x30], 0
jmp 0x46469a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x4646b6
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2778]
call fcn.0042f1b3
mov dword [eax], 1
jmp 0x464693
mov dword [ebp - 0x2b8], 0
jmp 0x4646cf
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 3
jg 0x4646ee
push 3
lea ecx, [ebp - 0x2314]
call fcn.0042f1b3
cmp dword [eax], 0
je 0x4646ec
jmp 0x4646ee
jmp 0x4646c2
push 3
lea ecx, [ebp - 0x2314]
call fcn.0042f1b3
push 2
lea ecx, [ebp - 0x22f4]
call fcn.0042f1b3
mov dword [ebp - 0x1bdc], eax
mov eax, dword [ebp - 0x1bdc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1bdc]
mov dword [ecx], eax
mov dword [ebp - 0x1be4], 0xd96711db
mov eax, dword [ebp - 0x1be4]
mov dword [ebp - 0x31ec], eax
push 2
lea ecx, [ebp - 0x2304]
call fcn.0042f1b3
cmp dword [eax], 0
jb 0x464753
mov dword [ebp - 0x1bec], 1
jmp 0x46475a
and dword [ebp - 0x1bec], 0
mov eax, dword [ebp - 0x9d4]
cmp dword [ebp - 0x1bec], eax
jl 0x464774
mov dword [ebp - 0x1bf4], 1
jmp 0x46477b
and dword [ebp - 0x1bf4], 0
push 2
lea ecx, [ebp - 0x22f4]
call fcn.0042f1b3
mov ecx, dword [ebp - 0x1bf4]
cmp ecx, dword [eax]
jg 0x46479e
mov dword [ebp - 0x1c20], 1
jmp 0x4647a5
and dword [ebp - 0x1c20], 0
push 0
lea ecx, [ebp - 0x2314]
call fcn.0042f1b3
mov ecx, dword [ebp - 0x1c20]
cmp ecx, dword [eax]
jl 0x4647c8
mov dword [ebp - 0x1c28], 1
jmp 0x4647cf
and dword [ebp - 0x1c28], 0
mov eax, dword [ebp - 0x1f88]
imul eax, dword [ebp - 0x1c28]
test eax, eax
je 0x4647e7
cmp dword [ebp - 0x1c38], 0
push 8
pop eax
test eax, eax
jne 0x464800
cmp dword [ebp - 0x9d4], 0
jne 0x464800
and dword [ebp - 0x1c30], 0
jmp 0x46480a
mov dword [ebp - 0x1c30], 1
push 0
lea ecx, [ebp - 0x2778]
call fcn.0042f1b3
mov ecx, dword [ebp - 0x1c30]
mov dword [eax], ecx
mov esi, dword [ebp - 0x2b8]
push 1
lea ecx, [ebp - 0x22f4]
call fcn.0042f1b3
mov ecx, dword [ebp - 0x9d4]
imul ecx, dword [eax]
cmp esi, ecx
jle 0x464851
cmp dword [ebp - 0x2b8], 0
jne 0x464851
and dword [ebp - 0x1c40], 0
jmp 0x46485b
mov dword [ebp - 0x1c40], 1
mov eax, dword [ebp - 0x1c38]
cmp dword [ebp - 0x1c40], eax
jge 0x464875
mov dword [ebp - 0x1c48], 1
jmp 0x46487c
and dword [ebp - 0x1c48], 0
push 3
lea ecx, [ebp - 0x2304]
call fcn.0042f1b3
mov ecx, dword [ebp - 0x1c48]
mov dword [eax], ecx
push 3
lea ecx, [ebp - 0x2314]
call fcn.0042f1b3
mov esi, eax
push 2
lea ecx, [ebp - 0x2304]
call fcn.0042f1b3
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x4648bf
mov dword [ebp - 0x1c50], 1
jmp 0x4648c6
and dword [ebp - 0x1c50], 0
mov eax, dword [ebp - 0x1c50]
mov dword [ebp - 0x1c58], eax
mov eax, dword [ebp - 0x1c58]
mov dword [ebp - 0x2b8], eax
lea ecx, [ebp - 0x2778]
call fcn.0042f197
lea ecx, [ebp - 0x22f4]
call fcn.0042f197
lea ecx, [ebp - 0x2304]
call fcn.0042f197
lea ecx, [ebp - 0x2314]
call fcn.0042f197
mov dword [ebp - 0x84], 0xe8cff0ea
push 3
lea ecx, [ebp - 0x24c8]
call fcn.0042f0c5
mov dword [ebp - 0x4e0], 0xffffffff
mov dword [ebp - 0x884], 0
jmp 0x464944
mov eax, dword [ebp - 0x884]
inc eax
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 3
jge 0x464966
push dword [ebp - 0x884]
lea ecx, [ebp - 0x24c8]
call fcn.0042f1b3
mov dword [eax], 0xb108f825
jmp 0x464937
mov dword [ebp - 0x84], 0
jmp 0x46497f
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffff
jne 0x464b00
mov dword [ebp - 0x5f4], 0xa6801fc3
mov dword [ebp - 0x5f4], 0
jmp 0x4649af
mov eax, dword [ebp - 0x5f4]
inc eax
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x5f4], 2
jg 0x464afb
mov dword [ebp - 0x3f8], 0x121ac488
mov dword [ebp - 0x3f8], 2
jmp 0x4649df
mov eax, dword [ebp - 0x3f8]
dec eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
jl 0x464adc
mov dword [ebp - 0x7ac], 0xffffffff
mov dword [ebp - 0x7ac], 0
jmp 0x464a0f
mov eax, dword [ebp - 0x7ac]
inc eax
mov dword [ebp - 0x7ac], eax
cmp dword [ebp - 0x7ac], 2
jg 0x464a91
mov dword [ebp - 0x5fc], 3
push dword [ebp - 0x3f8]
lea ecx, [ebp - 0x24c8]
call fcn.0042f1b3
cmp dword [eax], 0
je 0x464a3a
jmp 0x464a91
mov dword [ebp - 0x5fc], 0
jmp 0x464a53
mov eax, dword [ebp - 0x5fc]
inc eax
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 2
jg 0x464a8c
mov byte [ebp - 0x3f0], 0
movzx eax, byte [ebp - 0x3f0]
test eax, eax
je 0x464a8a
push 0x1179
push 0x222b
push 0xf03
push 0x22ed
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
jmp 0x464a46
jmp 0x464a02
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x84], eax
jl 0x464aab
mov dword [ebp - 0xb5c], 1
jmp 0x464ab2
and dword [ebp - 0xb5c], 0
push dword [ebp - 0x3f8]
lea ecx, [ebp - 0x24c8]
call fcn.0042f1b3
mov ecx, dword [ebp - 0xb5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x4e0], eax
jmp 0x4649d2
mov byte [ebp - 0x3e1], 0
movzx eax, byte [ebp - 0x3e1]
test eax, eax
je 0x464af6
push 0
call dword [sym.imp.USER32.dll_SetCursor]
jmp 0x4649a2
jmp 0x464972
mov dword [ebp - 0x4e0], 0xd
jmp 0x464b19
mov eax, dword [ebp - 0x4e0]
dec eax
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 0xffffffea
jne 0x464c0b
push 1
lea ecx, [ebp - 0x28b0]
call fcn.0042f0c5
mov dword [ebp - 0x558], 0xffffffff
mov dword [ebp - 0x8f4], 0
jmp 0x464b56
mov eax, dword [ebp - 0x8f4]
inc eax
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 1
jge 0x464b78
push dword [ebp - 0x8f4]
lea ecx, [ebp - 0x28b0]
call fcn.0042f1b3
mov dword [eax], 0xd8143836
jmp 0x464b49
push 0
lea ecx, [ebp - 0x28b0]
call fcn.0042f1b3
and dword [eax], 0
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x84], 0xfffffffa
jmp 0x464bab
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffe7
jg 0x464bfb
mov dword [ebp - 0x558], 0
jmp 0x464bcd
mov eax, dword [ebp - 0x558]
dec eax
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0xffffffed
je 0x464bf9
mov byte [ebp - 0x389], 0
movzx eax, byte [ebp - 0x389]
test eax, eax
je 0x464bf7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
jmp 0x464bc0
jmp 0x464b9e
lea ecx, [ebp - 0x28b0]
call fcn.0042f197
jmp 0x464b0c
lea ecx, [ebp - 0x24c8]
call fcn.0042f197
mov dword [ebp - 0x5b0], 0xfffb
mov dword [ebp - 0x4b4], 0x7b051af7
mov dword [ebp - 0x604], 0x14f4
push 2
lea ecx, [ebp - 0x24f8]
call fcn.0042f0c5
mov dword [ebp - 0x2c0], 1
mov dword [ebp - 0x2d84], 7
mov dword [ebp - 0x124], 0
jmp 0x464c6e
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x464c90
push dword [ebp - 0x124]
lea ecx, [ebp - 0x24f8]
call fcn.0042f1b3
mov dword [eax], 0xdfbc43c
jmp 0x464c61
mov dword [ebp - 0x124], 0
jmp 0x464ca9
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 3
jge 0x464cc5
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x24e0], 0
jmp 0x464c9c
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x308c], eax
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x2d8c], eax
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x32ac], eax
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x2d94], eax
mov eax, dword [ebp - 0x4b4]
cmp dword [ebp - 0x4b4], eax
je 0x464d0f
mov dword [ebp - 0x1c60], 1
jmp 0x464d16
and dword [ebp - 0x1c60], 0
mov eax, dword [ebp - 0x1c60]
add eax, 0x9475
cmp eax, dword [ebp - 0x4b4]
jne 0x464d35
mov dword [ebp - 0x1c68], 1
jmp 0x464d3c
and dword [ebp - 0x1c68], 0
cmp dword [ebp - 0x1c68], 0x57736d0c
jle 0x464d54
mov dword [ebp - 0x1c70], 1
jmp 0x464d5b
and dword [ebp - 0x1c70], 0
mov eax, dword [ebp - 0x604]
add eax, dword [ebp - 0x1c70]
jne 0x464d75
mov dword [ebp - 0x1c78], 1
jmp 0x464d7c
and dword [ebp - 0x1c78], 0
cmp dword [ebp - 0x1c78], 0
jne 0x464d97
cmp dword [ebp - 0x604], 0
jne 0x464d97
and dword [ebp - 0x1c80], 0
jmp 0x464da1
mov dword [ebp - 0x1c80], 1
push 1
lea ecx, [ebp - 0x24f8]
call fcn.0042f1b3
mov ecx, dword [ebp - 0x1c80]
cmp ecx, dword [eax]
je 0x464dd6
push 1
lea ecx, [ebp - 0x24f8]
call fcn.0042f1b3
cmp dword [eax], 0
je 0x464dd6
mov dword [ebp - 0x1c88], 1
jmp 0x464ddd
and dword [ebp - 0x1c88], 0
cmp dword [ebp - 0x1c88], 0xa4d9
jg 0x464df5
mov dword [ebp - 0x1cf0], 1
jmp 0x464dfc
and dword [ebp - 0x1cf0], 0
mov eax, dword [ebp - 0x1cf0]
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jne 0x464e23
cmp dword [ebp - 0x2c0], 0
jne 0x464e23
and dword [ebp - 0x1cf8], 0
jmp 0x464e2d
mov dword [ebp - 0x1cf8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1cf8]
mov dword [ebp + eax - 0x24e0], ecx
mov dword [ebp - 0x2c0], 0xffffffe4
jmp 0x464e59
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xffffffed
jne 0x464f5a
mov dword [ebp - 0x1f90], 0xae2ad21d
mov dword [ebp - 0x7b4], 0
jmp 0x464e89
mov eax, dword [ebp - 0x7b4]
inc eax
mov dword [ebp - 0x7b4], eax
cmp dword [ebp - 0x7b4], 4
jge 0x464ea5
mov eax, dword [ebp - 0x7b4]
mov dword [ebp + eax*4 - 0x320c], 0x9b8842b4
jmp 0x464e7c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x320c], 0
jne 0x464ed8
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x24e0]
cmp dword [ebp + eax - 0x320c], ecx
jg 0x464ed8
and dword [ebp - 0x1ba0], 0
jmp 0x464ee2
mov dword [ebp - 0x1ba0], 1
imul eax, dword [ebp - 0x1ba0], 0
cmp dword [ebp - 0x4b4], eax
jg 0x464efd
mov dword [ebp - 0xc30], 1
jmp 0x464f04
and dword [ebp - 0xc30], 0
cmp dword [ebp - 0xc30], 0x230b56bf
jge 0x464f1c
mov dword [ebp - 0x14a8], 1
jmp 0x464f23
and dword [ebp - 0x14a8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x320c]
add eax, dword [ebp - 0x14a8]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x24e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24e0]
mov dword [ebp - 0x1f90], eax
jmp 0x464e4c
lea ecx, [ebp - 0x24f8]
call fcn.0042f197
mov dword [ebp - 0x2d0], 6
mov dword [ebp - 0xd0], 0xbeb0647d
mov dword [ebp - 0x404], 0x2733
mov dword [ebp - 0x14b0], 0
mov dword [ebp - 0x14b8], 0xffffffff
mov dword [ebp - 0x1c8], 0
jmp 0x464fb0
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x464fcc
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x1f98], 0x921ded68
jmp 0x464fa3
mov dword [ebp - 0x1c8], 0
jmp 0x464fe5
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x465001
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x1fa8], 0xfffffffa
jmp 0x464fd8
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xc38], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc38]
mov dword [ebp + eax - 0x1f98], ecx
cmp dword [ebp - 0xc38], 0
jne 0x46503b
mov eax, 0x5950707d
test eax, eax
jne 0x46503b
and dword [ebp - 0x18ec], 0
jmp 0x465045
mov dword [ebp - 0x18ec], 1
cmp dword [ebp - 0x404], 0
jne 0x465060
cmp dword [ebp - 0xd0], 0
jne 0x465060
and dword [ebp - 0x18e0], 0
jmp 0x46506a
mov dword [ebp - 0x18e0], 1
mov eax, dword [ebp - 0x404]
cmp dword [ebp - 0x18e0], eax
jne 0x465084
mov dword [ebp - 0xc40], 1
jmp 0x46508b
and dword [ebp - 0xc40], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xc40], eax
jg 0x4650ab
cmp dword [ebp - 0xd0], 0
jne 0x4650ab
and dword [ebp - 0x1fa0], 0
jmp 0x4650b5
mov dword [ebp - 0x1fa0], 1
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x309c], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x14b0], eax
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x14b0], eax
jl 0x4650e7
mov dword [ebp - 0xc48], 1
jmp 0x4650ee
and dword [ebp - 0xc48], 0
cmp dword [ebp - 0xc48], 0x11f3
jle 0x465106
mov dword [ebp - 0x1940], 1
jmp 0x46510d
and dword [ebp - 0x1940], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x1940], eax
je 0x465127
mov dword [ebp - 0xc50], 1
jmp 0x46512e
and dword [ebp - 0xc50], 0
mov eax, dword [ebp - 0xc50]
mov dword [ebp - 0x14b8], eax
mov eax, dword [ebp - 0x14b8]
cmp dword [ebp - 0x404], eax
jg 0x465154
mov dword [ebp - 0xc58], 1
jmp 0x46515b
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0xc58]
sub eax, dword [ebp - 0x404]
cmp eax, dword [ebp - 0xd0]
jl 0x46517b
mov dword [ebp - 0xc60], 1
jmp 0x465182
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0x18ec]
cmp eax, dword [ebp - 0xc60]
jg 0x46519c
mov dword [ebp - 0x14c0], 1
jmp 0x4651a3
and dword [ebp - 0x14c0], 0
mov eax, dword [ebp - 0x404]
cmp dword [ebp - 0x14c0], eax
jne 0x4651bd
mov dword [ebp - 0xc68], 1
jmp 0x4651c4
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0xc68]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1fa8], eax
mov dword [ebp - 0x88c], 0xd5e48d32
push 4
lea ecx, [ebp - 0x2324]
call fcn.0042f0c5
mov dword [ebp - 0x9dc], 0x14c3
mov dword [ebp - 0x1fe0], 0x32f1efa
mov dword [ebp - 0x60c], 0
jmp 0x465222
mov eax, dword [ebp - 0x60c]
inc eax
mov dword [ebp - 0x60c], eax
cmp dword [ebp - 0x60c], 4
jge 0x465244
push dword [ebp - 0x60c]
lea ecx, [ebp - 0x2324]
call fcn.0042f1b3
mov dword [eax], 0xb5af9f7c
jmp 0x465215
mov dword [ebp - 0x88c], 0
jmp 0x46525d
mov eax, dword [ebp - 0x88c]
inc eax
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 0xa
jg 0x46552c
mov dword [ebp - 0x2d9c], 0xffffffff
mov dword [ebp - 0x1e40], 0xd972c40a
mov dword [ebp - 0x31f4], 0x6595ad33
mov dword [ebp - 0x1fc0], 0x1b76e1ee
mov dword [ebp - 0x1fd8], 0xb16e2c9b
mov dword [ebp - 0x2da4], 0x40c9ba5b
mov dword [ebp - 0x30ac], 0x2249687
mov dword [ebp - 0x298c], 0xffffffff
mov dword [ebp - 0x2988], 0xffffffff
mov dword [ebp - 0x2984], 0xffffffff
mov dword [ebp - 0x2980], 0xffffffff
mov dword [ebp - 0x178], 0
jmp 0x4652f1
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x46530d
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x1fb0], 0xc8fc558b
jmp 0x4652e4
mov dword [ebp - 0x178], 0
jmp 0x465326
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x465342
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x614], 0xd214c405
jmp 0x465319
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x614], 0
jmp 0x465370
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x614]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x614], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x614], 0
jg 0x465527
mov dword [ebp - 0x1fe8], 1
mov dword [ebp - 0x18f4], 0x919adb82
mov dword [ebp - 0x1fb8], 6
mov dword [ebp - 0xd8], 0
jmp 0x4653bb
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x4653d7
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x3464], 0xd367
jmp 0x4653ae
mov dword [ebp - 0xd8], 0
jmp 0x4653f0
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x46540c
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x2dac], 0x3691f6f4
jmp 0x4653e3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fb0], 0
jne 0x465434
mov eax, dword [ebp - 0x9dc]
inc eax
mov dword [ebp - 0x9dc], eax
jne 0x465434
and dword [ebp - 0x1ad4], 0
jmp 0x46543e
mov dword [ebp - 0x1ad4], 1
mov eax, dword [ebp - 0x1ad4]
mov dword [ebp - 0x1fb8], eax
mov esi, dword [ebp - 0x1fc0]
mov edi, dword [ebp - 0x18f4]
neg edi
push 2
lea ecx, [ebp - 0x2324]
call fcn.0042f1b3
imul edi, dword [eax]
cmp esi, edi
jg 0x465478
mov dword [ebp - 0x1fc8], 1
jmp 0x46547f
and dword [ebp - 0x1fc8], 0
mov eax, dword [ebp - 0x1e40]
mov dword [ebp - 0x3134], eax
mov eax, dword [ebp - 0x1fd8]
cmp dword [ebp - 0x1fe0], eax
jg 0x4654a5
mov dword [ebp - 0xc70], 1
jmp 0x4654ac
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0xc70]
sub eax, dword [ebp - 0x1fe8]
cmp eax, 0xffffffff
je 0x4654c9
mov dword [ebp - 0x14c8], 1
jmp 0x4654d0
and dword [ebp - 0x14c8], 0
push 2
lea ecx, [ebp - 0x2324]
call fcn.0042f1b3
mov esi, dword [ebp - 0x14c8]
sub esi, dword [eax]
push 2
lea ecx, [ebp - 0x2324]
call fcn.0042f1b3
sub esi, dword [eax]
push 4
pop eax
shl eax, 0
cmp esi, dword [ebp + eax - 0x298c]
jl 0x46550f
mov dword [ebp - 0xc78], 1
jmp 0x465516
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0xc78]
mov dword [ebp - 0x18f4], eax
jmp 0x465355
jmp 0x465250
lea ecx, [ebp - 0x2324]
call fcn.0042f197
mov dword [ebp - 0x1ae4], 0x6e33a79c
mov dword [ebp - 0x4e8], 0xfffb
mov dword [ebp - 0x2c8], 6
mov dword [ebp - 0x14d8], 0x6e33a79c
mov dword [ebp - 0x2150], 0
mov dword [ebp - 0x7bc], 0
jmp 0x465582
mov eax, dword [ebp - 0x7bc]
inc eax
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x7bc], 2
jge 0x46559e
mov eax, dword [ebp - 0x7bc]
mov dword [ebp + eax*4 - 0x2580], 0xfffffffa
jmp 0x465575
mov dword [ebp - 0x2c8], 0xda2ae7b7
mov eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0x4e8], eax
jne 0x4655c2
mov dword [ebp - 0xc80], 1
jmp 0x4655c9
and dword [ebp - 0xc80], 0
cmp dword [ebp - 0xc80], 0xfffffffb
jge 0x4655de
mov dword [ebp - 0x14d0], 1
jmp 0x4655e5
and dword [ebp - 0x14d0], 0
mov eax, dword [ebp - 0x4e8]
imul eax, dword [ebp - 0x14d0]
cmp eax, dword [ebp - 0x4e8]
jg 0x465606
mov dword [ebp - 0xc88], 1
jmp 0x46560d
and dword [ebp - 0xc88], 0
cmp dword [ebp - 0xc88], 0x8382bdb9
jbe 0x465625
mov dword [ebp - 0x1c9c], 1
jmp 0x46562c
and dword [ebp - 0x1c9c], 0
mov eax, dword [ebp - 0x4e8]
imul eax, dword [ebp - 0x1c9c]
add eax, 0xffff
jne 0x465652
cmp dword [ebp - 0x4e8], 0
jne 0x465652
and dword [ebp - 0xc90], 0
jmp 0x46565c
mov dword [ebp - 0xc90], 1
cmp dword [ebp - 0xc90], 0x8d9a
jg 0x465674
mov dword [ebp - 0xacc], 1
jmp 0x46567b
and dword [ebp - 0xacc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xacc]
mov dword [ebp + eax - 0x2580], ecx
mov eax, dword [ebp - 0xacc]
mov dword [ebp - 0x14d8], eax
mov eax, dword [ebp - 0x14d8]
mov dword [ebp - 0x2150], eax
mov dword [ebp - 0x2c8], 0
jmp 0x4656bf
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 2
jge 0x4656db
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0x2580], 0x4859bb7a
jmp 0x4656b2
mov dword [ebp - 0x2170], 0
push 4
lea ecx, [ebp - 0x2958]
call fcn.0042f0c5
mov dword [ebp - 0x464], 0x29000d4e
mov dword [ebp - 0x9e4], 0xfff9
mov dword [ebp - 0x18fc], 0xede048ff
mov dword [ebp - 0x208], 0
jmp 0x465729
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 4
jge 0x46574b
push dword [ebp - 0x208]
lea ecx, [ebp - 0x2958]
call fcn.0042f1b3
mov dword [eax], 0x207
jmp 0x46571c
mov dword [ebp - 0x208], 0
jmp 0x465764
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x465780
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x61c], 8
jmp 0x465757
mov dword [ebp - 0x464], 0
jmp 0x465799
mov eax, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 3
jg 0x465941
mov dword [ebp - 0x2158], 1
mov dword [ebp - 0xe0], 0
jmp 0x4657c9
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x4657e5
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x34e0], 0x465cd386
jmp 0x4657bc
mov dword [ebp - 0xe0], 0
jmp 0x4657fe
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x46581a
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x3304], 0xc7a2e428
jmp 0x4657f1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x61c]
add eax, dword [ebp - 0x18fc]
js 0x46583b
mov dword [ebp - 0xc98], 1
jmp 0x465842
and dword [ebp - 0xc98], 0
mov eax, dword [ebp - 0x9e4]
inc eax
mov dword [ebp - 0x9e4], eax
mov eax, dword [ebp - 0x9e4]
add eax, dword [ebp - 0xc98]
jne 0x46586f
cmp dword [ebp - 0x18fc], 0
jne 0x46586f
and dword [ebp - 0xca0], 0
jmp 0x465879
mov dword [ebp - 0xca0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x61c]
imul eax, dword [ebp - 0xca0]
cmp eax, 0x915e3087
jne 0x4658ad
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x61c], 0
jne 0x4658ad
and dword [ebp - 0x14e0], 0
jmp 0x4658b7
mov dword [ebp - 0x14e0], 1
imul eax, dword [ebp - 0x14e0], 0xe168
test eax, eax
jne 0x4658d5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3304], 0
je 0x4658dc
cmp dword [ebp - 0x464], 0
push dword [ebp - 0x464]
lea ecx, [ebp - 0x2958]
call fcn.0042f1b3
mov ecx, dword [ebp - 0x2158]
cmp dword [eax], ecx
jle 0x465903
mov dword [ebp - 0xca8], 1
jmp 0x46590a
and dword [ebp - 0xca8], 0
cmp dword [ebp - 0xca8], 0xe9ee194
jne 0x465922
mov dword [ebp - 0x1adc], 1
jmp 0x465929
and dword [ebp - 0x1adc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1adc]
mov dword [ebp + eax - 0x61c], ecx
jmp 0x46578c
lea ecx, [ebp - 0x2958]
call fcn.0042f197
push 4
lea ecx, [ebp - 0x2868]
call fcn.0042f0c5
mov dword [ebp - 0x40c], 0x29000d4e
mov dword [ebp - 0xb64], 0xfff9
mov dword [ebp - 0x14e8], 0xede048ff
mov dword [ebp - 0x180], 0
jmp 0x465990
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 4
jge 0x4659b2
push dword [ebp - 0x180]
lea ecx, [ebp - 0x2868]
call fcn.0042f1b3
mov dword [eax], 0x207
jmp 0x465983
mov dword [ebp - 0x180], 0
jmp 0x4659cb
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x4659e7
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x92c], 8
jmp 0x4659be
mov dword [ebp - 0x40c], 0
jmp 0x465a00
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 3
jg 0x465ba8
mov dword [ebp - 0x2160], 1
mov dword [ebp - 0xe8], 0
jmp 0x465a30
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x465a4c
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x3558], 0x465cd386
jmp 0x465a23
mov dword [ebp - 0xe8], 0
jmp 0x465a65
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x465a81
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x3334], 0xc7a2e428
jmp 0x465a58
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x92c]
add eax, dword [ebp - 0x14e8]
js 0x465aa2
mov dword [ebp - 0xcb0], 1
jmp 0x465aa9
and dword [ebp - 0xcb0], 0
mov eax, dword [ebp - 0xb64]
inc eax
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0xb64]
add eax, dword [ebp - 0xcb0]
jne 0x465ad6
cmp dword [ebp - 0x14e8], 0
jne 0x465ad6
and dword [ebp - 0xcb8], 0
jmp 0x465ae0
mov dword [ebp - 0xcb8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x92c]
imul eax, dword [ebp - 0xcb8]
cmp eax, 0x915e3087
jne 0x465b14
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x92c], 0
jne 0x465b14
and dword [ebp - 0x1904], 0
jmp 0x465b1e
mov dword [ebp - 0x1904], 1
imul eax, dword [ebp - 0x1904], 0xe168
test eax, eax
jne 0x465b3c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3334], 0
je 0x465b43
cmp dword [ebp - 0x40c], 0
push dword [ebp - 0x40c]
lea ecx, [ebp - 0x2868]
call fcn.0042f1b3
mov ecx, dword [ebp - 0x2160]
cmp dword [eax], ecx
jle 0x465b6a
mov dword [ebp - 0xcc0], 1
jmp 0x465b71
and dword [ebp - 0xcc0], 0
cmp dword [ebp - 0xcc0], 0xe9ee194
jne 0x465b89
mov dword [ebp - 0x14f0], 1
jmp 0x465b90
and dword [ebp - 0x14f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14f0]
mov dword [ebp + eax - 0x92c], ecx
jmp 0x4659f3
lea ecx, [ebp - 0x2868]
call fcn.0042f197
mov dword [ebp - 0x624], 0
jmp 0x465bcc
mov eax, dword [ebp - 0x624]
inc eax
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 2
jge 0x465be8
mov eax, dword [ebp - 0x624]
mov dword [ebp + eax*4 - 0x2590], 0xfffffffa
jmp 0x465bbf
mov dword [ebp - 0x254], 0x477862f
mov dword [ebp - 0x1d0], 0
jmp 0x465c0b
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 4
jge 0x465c27
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x348c], 0xbfb66feb
jmp 0x465bfe
mov dword [ebp - 0x1d0], 0
jmp 0x465c40
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x465c5c
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x3144], 0xcdf9c775
jmp 0x465c33
mov dword [ebp - 0x254], 0
jmp 0x465c75
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xffffffe6
jl 0x465e3d
push 2
lea ecx, [ebp - 0x1d7c]
call fcn.0042f0c5
mov dword [ebp - 0x2168], 0
mov dword [ebp - 0x7c4], 0
jmp 0x465cb2
mov eax, dword [ebp - 0x7c4]
inc eax
mov dword [ebp - 0x7c4], eax
cmp dword [ebp - 0x7c4], 2
jge 0x465cd1
push dword [ebp - 0x7c4]
lea ecx, [ebp - 0x1d7c]
call fcn.0042f1b3
and dword [eax], 0
jmp 0x465ca5
mov eax, 0xb95ae649
test eax, eax
je 0x465d4e
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x2db4], eax
cmp dword [ebp - 0x254], 0
je 0x465d04
mov eax, 0x65c2dd7
test eax, eax
je 0x465d04
mov dword [ebp - 0xcc8], 1
jmp 0x465d0b
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0xcc8]
neg eax
cmp eax, dword [ebp - 0x254]
je 0x465d27
mov dword [ebp - 0x1bd8], 1
jmp 0x465d2e
and dword [ebp - 0x1bd8], 0
push 0
lea ecx, [ebp - 0x1d7c]
call fcn.0042f1b3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1bd8]
je 0x465d4e
and dword [ebp - 0x9ec], 0
jmp 0x465d58
mov dword [ebp - 0x9ec], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9ec]
mov dword [ebp + eax - 0x348c], ecx
push 0
lea ecx, [ebp - 0x1d7c]
call fcn.0042f1b3
mov eax, dword [eax]
neg eax
cmp eax, dword [ebp - 0x9ec]
jl 0x465d90
mov dword [ebp - 0xad4], 1
jmp 0x465d97
and dword [ebp - 0xad4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xad4]
mov dword [ebp + eax - 0x3144], ecx
push 0
lea ecx, [ebp - 0x1d7c]
call fcn.0042f1b3
mov ecx, dword [ebp - 0xad4]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x1d7c]
call fcn.0042f1b3
cmp dword [eax], 0
je 0x465de6
mov eax, 0x3d6c1dfe
test eax, eax
je 0x465de6
mov dword [ebp - 0xcd0], 1
jmp 0x465ded
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0xcd0]
je 0x465e07
mov dword [ebp - 0x14f8], 1
jmp 0x465e0e
and dword [ebp - 0x14f8], 0
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x2168], eax
push 0
lea ecx, [ebp - 0x1d7c]
call fcn.0042f1b3
mov dword [eax], 4
lea ecx, [ebp - 0x1d7c]
call fcn.0042f197
jmp 0x465c68
mov dword [ebp - 0x2d0], 0xda2ae7b7
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x5b0], eax
jne 0x465e61
mov dword [ebp - 0xcd8], 1
jmp 0x465e68
and dword [ebp - 0xcd8], 0
cmp dword [ebp - 0xcd8], 0xfffffffb
jge 0x465e7d
mov dword [ebp - 0x190c], 1
jmp 0x465e84
and dword [ebp - 0x190c], 0
mov eax, dword [ebp - 0x5b0]
imul eax, dword [ebp - 0x190c]
cmp eax, dword [ebp - 0x5b0]
jg 0x465ea5
mov dword [ebp - 0xce0], 1
jmp 0x465eac
and dword [ebp - 0xce0], 0
cmp dword [ebp - 0xce0], 0x8382bdb9
jbe 0x465ec4
mov dword [ebp - 0x1500], 1
jmp 0x465ecb
and dword [ebp - 0x1500], 0
mov eax, dword [ebp - 0x5b0]
imul eax, dword [ebp - 0x1500]
add eax, 0xffff
jne 0x465ef1
cmp dword [ebp - 0x5b0], 0
jne 0x465ef1
and dword [ebp - 0xce8], 0
jmp 0x465efb
mov dword [ebp - 0xce8], 1
cmp dword [ebp - 0xce8], 0x8d9a
jg 0x465f13
mov dword [ebp - 0x9f4], 1
jmp 0x465f1a
and dword [ebp - 0x9f4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9f4]
mov dword [ebp + eax - 0x2590], ecx
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x1ae4], eax
mov eax, dword [ebp - 0x1ae4]
mov dword [ebp - 0x2170], eax
mov dword [ebp - 0x894], 0x1f7e2799
mov dword [ebp - 0x2178], 0xfffffffe
push 2
lea ecx, [ebp - 0x2ec8]
call fcn.0042f0c5
mov dword [ebp - 0xcf0], 0x5c6f8b8a
mov dword [ebp - 0x62c], 0
jmp 0x465f89
mov eax, dword [ebp - 0x62c]
inc eax
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 2
jge 0x465fa8
push dword [ebp - 0x62c]
lea ecx, [ebp - 0x2ec8]
call fcn.0042f1b3
and dword [eax], 0
jmp 0x465f7c
mov dword [ebp - 0x894], 0xffffffe2
jmp 0x465fc1
mov eax, dword [ebp - 0x894]
inc eax
mov dword [ebp - 0x894], eax
cmp dword [ebp - 0x894], 0xffffffe5
jne 0x4660be
push 2
lea ecx, [ebp - 0x2510]
call fcn.0042f0c5
mov dword [ebp - 0x30bc], 0x8c08872f
mov dword [ebp - 0x2dbc], 0xa50b5f0b
push 3
lea ecx, [ebp - 0x2eb8]
call fcn.0042f0c5
mov dword [ebp - 0xf0], 0
jmp 0x466015
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x466034
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x2510]
call fcn.0042f1b3
and dword [eax], 0
jmp 0x466008
mov dword [ebp - 0xf0], 0
jmp 0x46604d
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x46606f
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x2eb8]
call fcn.0042f1b3
mov dword [eax], 9
jmp 0x466040
push 0
lea ecx, [ebp - 0x2510]
call fcn.0042f1b3
mov esi, eax
push 0
lea ecx, [ebp - 0x2510]
call fcn.0042f1b3
mov ecx, dword [esi]
imul ecx, dword [eax]
mov dword [ebp - 0x2178], ecx
mov eax, dword [ebp - 0xcf0]
dec eax
mov dword [ebp - 0xcf0], eax
lea ecx, [ebp - 0x2eb8]
call fcn.0042f197
lea ecx, [ebp - 0x2510]
call fcn.0042f197
jmp 0x465fb4
lea ecx, [ebp - 0x2ec8]
call fcn.0042f197
mov dword [ebp - 0x2d0], 0
jmp 0x4660e2
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 2
jge 0x4661d0
mov dword [ebp - 0xac], 0xce125d16
mov dword [ebp - 0x634], 0
jmp 0x466112
mov eax, dword [ebp - 0x634]
inc eax
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 1
jge 0x46612e
mov eax, dword [ebp - 0x634]
mov dword [ebp + eax*4 - 0x1508], 0
jmp 0x466105
mov dword [ebp - 0xac], 0
jmp 0x466147
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jg 0x46616e
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp + eax*4 - 0x1508]
neg eax
mov ecx, dword [ebp - 0xac]
mov dword [ebp + ecx*4 - 0x1508], eax
jmp 0x46613a
mov dword [ebp - 0xac], 0xffffffec
jmp 0x466187
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xffffffe7
jle 0x4661ba
mov byte [ebp - 0x3e3], 0
movzx eax, byte [ebp - 0x3e3]
test eax, eax
je 0x4661b8
push 0
push 0
push 0x1f8a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x46617a
mov eax, dword [ebp - 0x2d0]
mov dword [ebp + eax*4 - 0x2590], 0x4859bb7a
jmp 0x4660d5
mov dword [ebp - 0x3138], 0xbcd
mov dword [ebp - 0xd00], 0
mov dword [ebp - 0x560], 0xb2cfb631
mov dword [ebp - 0x1c5c], 0xffffffff
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x2dc4], 0xee973417
mov dword [ebp - 0x2190], 0x82a74db5
mov eax, dword [ebp - 0x4f0]
dec eax
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0xd00], 1
jge 0x466238
mov dword [ebp - 0xcf8], 1
jmp 0x46623f
and dword [ebp - 0xcf8], 0
mov dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0xcf8]
jl 0x466263
mov dword [ebp - 0x1914], 1
jmp 0x46626a
and dword [ebp - 0x1914], 0
mov eax, dword [ebp - 0x4f0]
cmp dword [ebp - 0x1914], eax
je 0x466385
mov dword [ebp - 0x7cc], 0xc2489102
mov eax, dword [ebp - 0xd00]
cmp dword [ebp - 0x7cc], eax
jg 0x4662a0
mov dword [ebp - 0x1510], 1
jmp 0x4662a7
and dword [ebp - 0x1510], 0
cmp dword [ebp - 0x1510], 0xffffffff
jge 0x4662bc
mov dword [ebp - 0xd08], 1
jmp 0x4662c3
and dword [ebp - 0xd08], 0
mov eax, dword [ebp - 0x7cc]
imul eax, dword [ebp - 0xd08]
cmp eax, 0x6f944dcd
jge 0x4662e3
mov dword [ebp - 0x2180], 1
jmp 0x4662ea
and dword [ebp - 0x2180], 0
mov eax, dword [ebp - 0x1c5c]
mov dword [ebp - 0x30cc], eax
cmp dword [ebp - 0x560], 0xb03b
je 0x46630e
mov dword [ebp - 0xd10], 1
jmp 0x466315
and dword [ebp - 0xd10], 0
mov eax, dword [ebp - 0x1c5c]
add eax, dword [ebp - 0xd10]
jne 0x466335
cmp dword [ebp - 0x4f0], 0
jne 0x466335
and dword [ebp - 0x1518], 0
jmp 0x46633f
mov dword [ebp - 0x1518], 1
mov eax, dword [ebp - 0x7cc]
imul eax, dword [ebp - 0x1518]
cmp eax, 0xffff
jne 0x466361
xor eax, eax
inc eax
jne 0x466361
and dword [ebp - 0x2188], 0
jmp 0x46636b
mov dword [ebp - 0x2188], 1
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x2dcc], eax
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x2190], eax
jmp 0x4663e4
mov dword [ebp - 0xd18], 0xf8dc70e7
cmp dword [ebp - 0x4f0], 0
je 0x4663bc
mov dword [ebp - 0x2198], 0x2dfce958
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0xd18]
mov dword [ebp - 0x2198], eax
jmp 0x4663e4
mov byte [ebp - 0x391], 0
movzx eax, byte [ebp - 0x391]
test eax, eax
je 0x4663e4
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
cmp dword [ebp + 8], 2
jl 0x47707c
mov dword [ebp - 0xadc], 0x1dbe
mov dword [ebp - 0xb50], 0xa4d63a88
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x4c], 6
mov dword [ebp - 0xd30], 0x18144871
mov dword [ebp - 0x9fc], 0x60d4
mov dword [ebp - 0x2680], 0xd57638ff
mov dword [ebp - 0x267c], 0xd57638ff
mov dword [ebp - 0x2678], 0xd57638ff
mov dword [ebp - 0x2674], 0xd57638ff
lea ecx, [ebp - 0x9a5]
call fcn.0042f1c2
push eax
lea eax, [ebp - 0x2670]
push eax
lea eax, [ebp - 0x2680]
push eax
lea ecx, [ebp - 0x34ac]
call fcn.0042f1c5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2ed8]
call fcn.0042f171
mov dword [ebp - 0xd40], 0x606a
mov dword [ebp - 0x21c8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jle 0x4664ac
mov dword [ebp - 0x21a0], 1
jmp 0x4664b3
and dword [ebp - 0x21a0], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2a80], eax
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x2a88], eax
cmp dword [ebp - 0x4f8], 0x5004
jl 0x4664e0
mov dword [ebp - 0x21a8], 1
jmp 0x4664e7
and dword [ebp - 0x21a8], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2a90], eax
cmp dword [ebp - 0x4c], 0xbff1eb7e
jae 0x466508
cmp dword [ebp - 0x4c], 0
jne 0x466508
and dword [ebp - 0x21b0], 0
jmp 0x466512
mov dword [ebp - 0x21b0], 1
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x2a98], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2aa0], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2aa8], eax
mov eax, 0x6daafd55
sub eax, dword [ebp - 0x4c]
cmp eax, 0xd23205e6
jb 0x46654b
mov dword [ebp - 0x191c], 1
jmp 0x466552
and dword [ebp - 0x191c], 0
mov eax, dword [ebp - 0x4f8]
sub eax, dword [ebp - 0x191c]
cmp eax, 0xffff
jb 0x466571
mov dword [ebp - 0xd20], 1
jmp 0x466578
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0xd30]
cmp dword [ebp - 0xd20], eax
jle 0x466592
mov dword [ebp - 0x1520], 1
jmp 0x466599
and dword [ebp - 0x1520], 0
mov eax, dword [ebp - 0x1520]
sub eax, 3
cmp eax, dword [ebp - 0x9fc]
je 0x4665b6
mov dword [ebp - 0xd28], 1
jmp 0x4665bd
and dword [ebp - 0xd28], 0
cmp dword [ebp - 0xd28], 0x3024
jl 0x4665d5
mov dword [ebp - 0x1aec], 1
jmp 0x4665dc
and dword [ebp - 0x1aec], 0
mov esi, dword [ebp - 0x1aec]
sub esi, dword [ebp - 0x4c]
push 1
lea ecx, [ebp - 0x2ed8]
call fcn.0042f1b3
cmp esi, dword [eax]
je 0x466602
mov dword [ebp - 0x21b8], 1
jmp 0x466609
and dword [ebp - 0x21b8], 0
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0x2ab0], eax
mov eax, dword [ebp - 0xb50]
mov dword [ebp - 0xb50], eax
imul eax, dword [ebp - 0x4c], 0
add eax, 9
cmp dword [ebp - 0xb50], eax
jl 0x46663c
mov dword [ebp - 0x1528], 1
jmp 0x466643
and dword [ebp - 0x1528], 0
mov eax, dword [ebp - 0xd30]
cmp dword [ebp - 0x1528], eax
jg 0x46665d
mov dword [ebp - 0xd38], 1
jmp 0x466664
and dword [ebp - 0xd38], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xd38], eax
jne 0x46667b
mov dword [ebp - 0x1924], 1
jmp 0x466682
and dword [ebp - 0x1924], 0
mov eax, dword [ebp - 0x9fc]
cmp dword [ebp - 0x1924], eax
jg 0x4666a2
cmp dword [ebp - 0xd40], 0
jne 0x4666a2
and dword [ebp - 0x21c0], 0
jmp 0x4666ac
mov dword [ebp - 0x21c0], 1
mov eax, dword [ebp - 0xadc]
inc eax
mov dword [ebp - 0xadc], eax
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0x2ab8], eax
mov eax, dword [ebp - 0x21c8]
cmp dword [ebp - 0xd40], eax
jl 0x4666df
mov dword [ebp - 0x1530], 1
jmp 0x4666e6
and dword [ebp - 0x1530], 0
mov eax, dword [ebp - 0x1530]
mov dword [ebp - 0x4f8], eax
lea ecx, [ebp - 0x2ed8]
call fcn.0042f197
mov dword [ebp - 0x598], 0x13638ecf
mov dword [ebp - 0x63c], 0
jmp 0x466720
cmp dword [ebp + 8], 1
jne 0x47ac37
or dword [ebp - 0x26bc], 0xffffffff
or dword [ebp - 0x26b8], 0xffffffff
or dword [ebp - 0x26b4], 0xffffffff
or dword [ebp - 0x26b0], 0xffffffff
lea ecx, [ebp - 0xb1d]
call fcn.0042f1c2
push eax
lea eax, [ebp - 0x26ac]
push eax
lea eax, [ebp - 0x26bc]
push eax
lea ecx, [ebp - 0x346c]
call fcn.0042f1c5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3088]
call fcn.0042f171
mov dword [ebp - 0x7e8], 1
push 2
lea ecx, [ebp - 0x3078]
call fcn.0042f0c5
mov dword [ebp - 0x14f4], 0x65ee
mov dword [ebp - 0x7e0], 0
jmp 0x477111
mov eax, dword [ebp - 0x7e0]
inc eax
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x7e0], 2
jge 0x477133
push dword [ebp - 0x7e0]
lea ecx, [ebp - 0x3078]
call fcn.0042f1b3
mov dword [eax], 0xc25f
jmp 0x477104
mov dword [ebp - 0x7e8], 3
jmp 0x47714c
mov eax, dword [ebp - 0x7e8]
dec eax
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x7e8], 0
jl 0x47727b
mov dword [ebp - 0x57c], 0x2c7c8a6b
mov dword [ebp - 0x2edc], 0xfffffffc
mov dword [ebp - 0x2bdc], 1
mov dword [ebp - 0x3184], 0xb807cfaf
mov dword [ebp - 0x2be4], 0x996f377c
mov dword [ebp - 0x2eec], 0x5457d670
mov dword [ebp - 0x2bec], 0x9017
mov dword [ebp - 0x324c], 0
mov dword [ebp - 0x2bf4], 0xd1dc6b79
mov dword [ebp - 0x2efc], 0x3403ca95
mov dword [ebp - 0x2bfc], 1
mov dword [ebp - 0x318c], 1
push 4
lea ecx, [ebp - 0x3068]
call fcn.0042f0c5
mov dword [ebp - 0x2c04], 0xfec1
mov dword [ebp - 0x7f0], 0
jmp 0x477201
mov eax, dword [ebp - 0x7f0]
inc eax
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x7f0], 4
jge 0x477223
push dword [ebp - 0x7f0]
lea ecx, [ebp - 0x3068]
call fcn.0042f1b3
mov dword [eax], 4
jmp 0x4771f4
mov dword [ebp - 0x57c], 0
jmp 0x47723c
mov eax, dword [ebp - 0x57c]
inc eax
mov dword [ebp - 0x57c], eax
cmp dword [ebp - 0x57c], 4
jge 0x47725e
push dword [ebp - 0x57c]
lea ecx, [ebp - 0x3088]
call fcn.0042f1b3
mov dword [eax], 1
jmp 0x47722f
mov eax, dword [ebp - 0x14f4]
dec eax
mov dword [ebp - 0x14f4], eax
lea ecx, [ebp - 0x3068]
call fcn.0042f197
jmp 0x47713f
lea ecx, [ebp - 0x3078]
call fcn.0042f197
lea ecx, [ebp - 0x3088]
call fcn.0042f197
mov dword [ebp - 0x2f0c], 0
mov dword [ebp - 0x2c0c], 0xd490c4d8
mov dword [ebp - 0x3250], 0xa35f394
mov dword [ebp - 0x2c14], 0
mov dword [ebp - 0x2f1c], 1
mov dword [ebp - 0x7f8], 0
jmp 0x4772dc
mov eax, dword [ebp - 0x7f8]
inc eax
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 1
jge 0x4772f8
mov eax, dword [ebp - 0x7f8]
mov dword [ebp + eax*4 - 0x14fc], 0x4781
jmp 0x4772cf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14fc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14fc], eax
mov dword [ebp - 0x388], 4
mov dword [ebp - 0x150c], 0x3bf38c08
mov dword [ebp - 0x2124], 0xecf04b06
mov byte [ebp - 0x3cd], 0
movzx eax, byte [ebp - 0x3cd]
test eax, eax
je 0x477359
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
mov dword [ebp - 0x388], 0x15
jmp 0x477372
cmp dword [ebp - 0x388], 0xffffffe3
jl 0x47749c
mov dword [ebp - 0x800], 0
mov dword [ebp - 0x1524], 0
cmp dword [ebp - 0x388], 0
jne 0x4773a9
xor eax, eax
jne 0x4773a9
and dword [ebp - 0x1504], 0
jmp 0x4773b3
mov dword [ebp - 0x1504], 1
mov eax, dword [ebp - 0x800]
add eax, dword [ebp - 0x388]
jne 0x4773d3
mov eax, 0xbb8bffbe
test eax, eax
jne 0x4773d3
and dword [ebp - 0x211c], 0
jmp 0x4773dd
mov dword [ebp - 0x211c], 1
xor eax, eax
inc eax
jne 0x4773ee
mov dword [ebp - 0x2368], 1
jmp 0x4773f5
and dword [ebp - 0x2368], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x2c1c], eax
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x3194], eax
mov eax, dword [ebp - 0x1504]
mov dword [ebp - 0x150c], eax
mov eax, dword [ebp - 0x800]
cmp dword [ebp - 0x150c], eax
jle 0x477433
mov dword [ebp - 0x1514], 1
jmp 0x47743a
and dword [ebp - 0x1514], 0
mov eax, dword [ebp - 0x800]
cmp eax, dword [ebp - 0x1514]
jl 0x477454
mov dword [ebp - 0x194], 0xbeb0647d
mov dword [ebp - 0x810], 0x951ea66e
mov dword [ebp - 0x818], 1
mov dword [ebp - 0x2c24], 0
mov dword [ebp - 0x2f2c], 0
mov dword [ebp - 0x2298], 0x5ec62bb2
mov dword [ebp - 0x808], 0
jmp 0x4774f1
mov eax, dword [ebp - 0x808]
inc eax
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x808], 2
jge 0x47750d
mov eax, dword [ebp - 0x808]
mov dword [ebp + eax*4 - 0x2a64], 0
jmp 0x4774e4
cmp dword [ebp - 0x2298], 1
jle 0x477522
mov dword [ebp - 0x152c], 1
jmp 0x477529
and dword [ebp - 0x152c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x152c]
mov dword [ebp + eax - 0x2a64], ecx
mov dword [ebp - 0x810], 0
jmp 0x477555
cmp dword [ebp - 0x810], 0x2a
jge 0x4775b3
mov dword [ebp - 0x5b4], 0xfffb
mov dword [ebp - 0x3c0], 6
mov dword [ebp - 0x1a50], 0x6e33a79c
mov dword [ebp - 0x1ef8], 0
mov dword [ebp - 0x8f0], 0
jmp 0x47ac78
mov eax, dword [ebp - 0x8f0]
inc eax
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 2
jge 0x47ac94
mov eax, dword [ebp - 0x8f0]
mov dword [ebp + eax*4 - 0x2568], 0xfffffffa
jmp 0x47ac6b
mov dword [ebp - 0x3c0], 0xda2ae7b7
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x5b4], eax
jne 0x47acb8
mov dword [ebp - 0x1a28], 1
jmp 0x47acbf
and dword [ebp - 0x1a28], 0
cmp dword [ebp - 0x1a28], 0xfffffffb
jge 0x47acd4
mov dword [ebp - 0x1a30], 1
jmp 0x47acdb
and dword [ebp - 0x1a30], 0
mov eax, dword [ebp - 0x5b4]
imul eax, dword [ebp - 0x1a30]
cmp eax, dword [ebp - 0x5b4]
jg 0x47acfc
mov dword [ebp - 0x1a38], 1
jmp 0x47ad03
and dword [ebp - 0x1a38], 0
cmp dword [ebp - 0x1a38], 0x8382bdb9
jbe 0x47ad1b
mov dword [ebp - 0x1a40], 1
jmp 0x47ad22
and dword [ebp - 0x1a40], 0
mov eax, dword [ebp - 0x5b4]
imul eax, dword [ebp - 0x1a40]
add eax, 0xffff
jne 0x47ad48
cmp dword [ebp - 0x5b4], 0
jne 0x47ad48
and dword [ebp - 0x1a48], 0
jmp 0x47ad52
mov dword [ebp - 0x1a48], 1
cmp dword [ebp - 0x1a48], 0x8d9a
jg 0x47ad6a
mov dword [ebp - 0xac0], 1
jmp 0x47ad71
and dword [ebp - 0xac0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac0]
mov dword [ebp + eax - 0x2568], ecx
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0x1a50], eax
mov eax, dword [ebp - 0x1a50]
mov dword [ebp - 0x1ef8], eax
mov dword [ebp - 0x3c0], 0
jmp 0x47adb5
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 2
jge 0x47add1
mov eax, dword [ebp - 0x3c0]
mov dword [ebp + eax*4 - 0x2568], 0x4859bb7a
jmp 0x47ada8
xor ecx, ecx
call fcn.0042f430
push eax
call fcn.0047e6d3
pop ecx
push 4
lea ecx, [ebp - 0x2928]
call fcn.0042f0c5
mov dword [ebp - 0x4a8], 0x29000d4e
mov dword [ebp - 0xac8], 0xfff9
mov dword [ebp - 0x1a60], 0xede048ff
mov dword [ebp - 0x1ec], 0
jmp 0x47ae23
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 4
jge 0x47ae45
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0x2928]
call fcn.0042f1b3
mov dword [eax], 0x207
jmp 0x47ae16
mov dword [ebp - 0x1ec], 0
jmp 0x47ae5e
cmp dword [ebp - 0x1ec], 1
jge 0x47ae7a