Function at 0x45f890
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d8460
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2b04
call fcn.004d21f0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x68], 4
mov dword [ebp - 0x3cc], 0
mov dword [ebp - 0x8dc], 0xa7974498
mov dword [ebp - 0x1ac0], 0xfffffffb
mov dword [ebp - 0x17b0], 0
mov dword [ebp - 0x1804], 0x71b2a125
mov dword [ebp - 0x1ad0], 0xffffffff
cmp dword [ebp - 0x68], 0
je 0x45f9d1
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x2574], eax
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x21b0], ecx
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x21b8], edx
mov eax, dword [ebp - 0x68]
sub eax, 6
sub eax, dword [ebp - 0x68]
cmp eax, 0x3bed162c
jl 0x45f93d
mov dword [ebp - 0x18e8], 1
jmp 0x45f947
mov dword [ebp - 0x18e8], 0
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x21c0], ecx
mov edx, dword [ebp - 0x68]
cmp dword [ebp - 0x68], edx
jge 0x45f964
mov dword [ebp - 0xc6c], 1
jmp 0x45f96e
mov dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0xc6c], eax
je 0x45f985
mov dword [ebp - 0x1778], 1
jmp 0x45f98f
mov dword [ebp - 0x1778], 0
mov ecx, dword [ebp - 0x68]
cmp dword [ebp - 0x1778], ecx
jge 0x45f9a6
mov dword [ebp - 0x1780], 1
jmp 0x45f9b0
mov dword [ebp - 0x1780], 0
mov edx, dword [ebp - 0x1780]
mov dword [ebp - 0x3cc], edx
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x21c8], eax
cmp dword [ebp - 0x8dc], 0
jne 0x45f9e6
cmp dword [ebp - 0x3cc], 0
je 0x45f9e6
mov dword [ebp - 0x1788], 1
jmp 0x45f9f0
mov dword [ebp - 0x1788], 0
mov ecx, dword [ebp - 0x68]
cmp dword [ebp - 0x1788], ecx
jg 0x45fa07
mov dword [ebp - 0x1790], 1
jmp 0x45fa11
mov dword [ebp - 0x1790], 0
cmp dword [ebp - 0x1790], 1
je 0x45fa42
cmp dword [ebp - 0x8dc], 0
je 0x45fa42
mov byte [ebp - 0x24f], 0
movzx edx, byte [ebp - 0x24f]
test edx, edx
je 0x45fa3d
push 0
call dword [sym.imp.USER32.dll_IsZoomed]
jmp 0x45fccd
mov dword [ebp - 0x418], 0
jmp 0x45fa5d
mov eax, dword [ebp - 0x418]
add eax, 1
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 2
jge 0x45fa79
mov ecx, dword [ebp - 0x418]
mov dword [ebp + ecx*4 - 0x3c8], 6
jmp 0x45fa4e
or edx, 0xffffffff
je 0x45fba9
mov dword [ebp - 0x3cc], 0x46c64e71
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + eax - 0x3c8]
cmp dword [ebp - 0x3cc], ecx
jge 0x45fab3
mov edx, 4
shl edx, 0
cmp dword [ebp + edx - 0x3c8], 0
mov eax, 0x8909
test eax, eax
jne 0x45fada
mov ecx, 4
shl ecx, 0
cmp dword [ebp + ecx - 0x3c8], 0
jne 0x45fada
mov dword [ebp - 0x1798], 0
jmp 0x45fae4
mov dword [ebp - 0x1798], 1
cmp dword [ebp - 0x1798], 0xcfadbacd
ja 0x45fafc
mov dword [ebp - 0x17a0], 1
jmp 0x45fb06
mov dword [ebp - 0x17a0], 0
mov edx, 4
shl edx, 0
mov eax, dword [ebp + edx - 0x3c8]
cmp dword [ebp - 0x17a0], eax
jle 0x45fb29
mov dword [ebp - 0x1ab8], 1
jmp 0x45fb33
mov dword [ebp - 0x1ab8], 0
mov ecx, 4
shl ecx, 0
mov edx, dword [ebp + ecx - 0x3c8]
mov dword [ebp - 0x21d0], edx
mov eax, 4
shl eax, 0
cmp dword [ebp + eax - 0x3c8], 0xfffffffb
jl 0x45fb66
mov dword [ebp - 0x17a8], 1
jmp 0x45fb70
mov dword [ebp - 0x17a8], 0
mov ecx, dword [ebp - 0x17b0]
cmp dword [ebp - 0x17a8], ecx
jg 0x45fb8a
mov dword [ebp - 0x17dc], 1
jmp 0x45fb94
mov dword [ebp - 0x17dc], 0
mov edx, dword [ebp - 0x17b0]
imul edx, dword [ebp - 0x17dc]
cmp dword [ebp - 0x1ac0], edx
jl 0x45fbc7
mov eax, 4
shl eax, 0
cmp dword [ebp + eax - 0x3c8], 0
jne 0x45fbc7
mov dword [ebp - 0x17e4], 0
jmp 0x45fbd1
mov dword [ebp - 0x17e4], 1
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp + edx - 0x3c8]
cmp dword [ebp - 0x17e4], eax
jl 0x45fbf4
mov dword [ebp - 0x17ec], 1
jmp 0x45fbfe
mov dword [ebp - 0x17ec], 0
mov ecx, 4
shl ecx, 0
mov edx, dword [ebp + ecx - 0x3c8]
cmp dword [ebp - 0x17ec], edx
jl 0x45fc21
mov dword [ebp - 0x1ac8], 1
jmp 0x45fc2b
mov dword [ebp - 0x1ac8], 0
mov eax, 4
shl eax, 0
cmp dword [ebp + eax - 0x3c8], 0xfffffff9
jbe 0x45fc49
mov dword [ebp - 0x17f4], 1
jmp 0x45fc53
mov dword [ebp - 0x17f4], 0
mov ecx, 4
shl ecx, 0
mov edx, dword [ebp + ecx - 0x3c8]
cmp dword [ebp - 0x17f4], edx
jle 0x45fc7f
mov eax, 0x9a030833
test eax, eax
jne 0x45fc7f
mov dword [ebp - 0x17fc], 0
jmp 0x45fc89
mov dword [ebp - 0x17fc], 1
mov ecx, dword [ebp - 0x17fc]
mov dword [ebp - 0x1804], ecx
mov edx, dword [ebp - 0x8dc]
sub edx, dword [ebp - 0x1804]
mov dword [ebp - 0x1ad0], edx
mov byte [ebp - 0x254], 0
movzx eax, byte [ebp - 0x254]
test eax, eax
je 0x45fccd
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetWindowPos]
mov byte [ebp - 0x256], 0
movzx ecx, byte [ebp - 0x256]
test ecx, ecx
je 0x45fce7
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x14], 0xd071
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x314], 0x49fe387
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x1f70], 0x24f8
mov dword [ebp - 0x1f6c], 0x24f8
mov dword [ebp - 0x1f68], 0x24f8
mov dword [ebp - 0x1f64], 0x24f8
mov dword [ebp - 0x78], 0
push 2
lea ecx, [ebp - 0x778]
call fcn.00428070
mov dword [ebp - 0x2a8], 0x653d4237
mov dword [ebp - 0x21d8], 0x8a3e09e1
mov dword [ebp - 0x5c8], 0
jmp 0x45fd77
mov edx, dword [ebp - 0x5c8]
add edx, 1
mov dword [ebp - 0x5c8], edx
cmp dword [ebp - 0x5c8], 2
jge 0x45fd9a
mov eax, dword [ebp - 0x5c8]
push eax
lea ecx, [ebp - 0x778]
call fcn.004281c0
mov dword [eax], 0xffffffff
jmp 0x45fd68
mov ecx, dword [ebp - 0x2a8]
add ecx, 1
mov dword [ebp - 0x2a8], ecx
mov dword [ebp - 0x314], 0
jmp 0x45fdc4
mov edx, dword [ebp - 0x314]
add edx, 1
mov dword [ebp - 0x314], edx
cmp dword [ebp - 0x314], 1
jg 0x4601ae
mov dword [ebp - 0x2b4], 0x9dce
mov dword [ebp - 0x1ae0], 5
mov dword [ebp - 0x1ae8], 0xffffffff
mov eax, dword [ebp - 0x314]
push eax
lea ecx, [ebp - 0x778]
call fcn.004281c0
mov dword [eax], 0x591b68de
mov dword [ebp - 0x78], 0
jmp 0x45fe19
mov ecx, dword [ebp - 0x78]
add ecx, 1
mov dword [ebp - 0x78], ecx
cmp dword [ebp - 0x78], 1
jg 0x4601a9
mov edx, dword [ebp - 0x78]
push edx
lea ecx, [ebp - 0x778]
call fcn.004281c0
cmp dword [eax], 0
je 0x460007
mov dword [ebp - 0x8e4], 0x9ab8
mov dword [ebp - 0x274], 4
jmp 0x45fe60
mov eax, dword [ebp - 0x274]
sub eax, 1
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0
je 0x45fea0
mov dword [ebp - 0x2a8], 0
jmp 0x45fe84
mov ecx, dword [ebp - 0x2a8]
add ecx, 1
mov dword [ebp - 0x2a8], ecx
cmp dword [ebp - 0x2a8], 0x1d
jg 0x45fe9e
mov edx, dword [ebp - 0x2b4]
add edx, 1
mov dword [ebp - 0x2b4], edx
jmp 0x45fe75
jmp 0x45fe51
push 1
lea ecx, [ebp - 0x778]
call fcn.004281c0
mov esi, eax
mov eax, dword [ebp - 0x78]
push eax
lea ecx, [ebp - 0x778]
call fcn.004281c0
mov ecx, dword [esi]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x274]
je 0x45fed7
mov dword [ebp - 0x180c], 1
jmp 0x45fee1
mov dword [ebp - 0x180c], 0
mov edx, dword [ebp - 0x78]
push edx
lea ecx, [ebp - 0x778]
call fcn.004281c0
mov ecx, dword [ebp - 0x180c]
cmp ecx, dword [eax]
jl 0x45ff0f
mov edx, 1
test edx, edx
je 0x45ff0f
mov dword [ebp - 0x1814], 1
jmp 0x45ff19
mov dword [ebp - 0x1814], 0
mov eax, dword [ebp - 0x2b4]
imul eax, dword [ebp - 0x1814]
cmp dword [ebp - 0x2b4], eax
jl 0x45ff3a
mov dword [ebp - 0x1ad8], 1
jmp 0x45ff44
mov dword [ebp - 0x1ad8], 0
mov ecx, dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x778]
call fcn.004281c0
mov edx, dword [ebp - 0x8e4]
mov dword [ebp - 0x21e0], edx
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x21e8], eax
mov ecx, dword [ebp - 0x2b4]
add ecx, 1
cmp ecx, dword [ebp - 0x8e4]
jne 0x45ff88
mov dword [ebp - 0x8ec], 1
jmp 0x45ff92
mov dword [ebp - 0x8ec], 0
mov edx, dword [ebp - 0x314]
push edx
lea ecx, [ebp - 0x778]
call fcn.004281c0
mov ecx, dword [ebp - 0x8ec]
mov dword [eax], ecx
cmp dword [ebp - 0x8ec], 0xa1b14898
jbe 0x45ffc4
mov dword [ebp - 0x187c], 1
jmp 0x45ffce
mov dword [ebp - 0x187c], 0
cmp dword [ebp - 0x187c], 0
jne 0x45ffec
mov edx, 0xffff
test edx, edx
je 0x45ffec
mov dword [ebp - 0x1884], 1
jmp 0x45fff6
mov dword [ebp - 0x1884], 0
mov eax, dword [ebp - 0x1884]
mov dword [ebp - 0x1ae0], eax
jmp 0x4601a4
mov dword [ebp - 0x8f4], 0x33490ce6
mov ecx, dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x778]
call fcn.004281c0
cmp dword [eax], 0
jne 0x460043
mov edx, 4
imul eax, edx, 3
cmp dword [ebp + eax - 0x1f70], 0
jne 0x460043
mov dword [ebp - 0x15f4], 0
jmp 0x46004d
mov dword [ebp - 0x15f4], 1
mov dword [ebp - 0x274], 0x5b7518d
cmp dword [ebp - 0x274], 0
jne 0x460080
mov ecx, dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x778]
call fcn.004281c0
cmp dword [eax], 0
jne 0x460080
mov dword [ebp - 0x188c], 0
jmp 0x46008a
mov dword [ebp - 0x188c], 1
mov edx, dword [ebp - 0x1ae8]
cmp dword [ebp - 0x188c], edx
jne 0x4600a4
mov dword [ebp - 0x1894], 1
jmp 0x4600ae
mov dword [ebp - 0x1894], 0
mov eax, dword [ebp - 0x1894]
add eax, 7
mov dword [ebp - 0x8f4], eax
jne 0x4600c6
cmp dword [ebp - 0x8f4], 0
mov ecx, 0x4a53e8af
neg ecx
jne 0x4600df
xor edx, edx
jne 0x4600df
mov dword [ebp - 0x189c], 0
jmp 0x4600e9
mov dword [ebp - 0x189c], 1
cmp dword [ebp - 0x189c], 0x6ac3
jge 0x460101
mov dword [ebp - 0x1860], 1
jmp 0x46010b
mov dword [ebp - 0x1860], 0
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0x1860]
je 0x460125
mov dword [ebp - 0x96c], 1
jmp 0x46012f
mov dword [ebp - 0x96c], 0
push 1
lea ecx, [ebp - 0x778]
call fcn.004281c0
mov ecx, dword [ebp - 0x96c]
cmp ecx, dword [eax]
jl 0x460152
mov dword [ebp - 0x974], 1
jmp 0x46015c
mov dword [ebp - 0x974], 0
mov esi, dword [ebp - 0x15f4]
sub esi, dword [ebp - 0x974]
mov edx, 4
imul eax, edx, 0
sub esi, dword [ebp + eax - 0x1f70]
mov ecx, dword [ebp - 0x78]
push ecx
lea ecx, [ebp - 0x778]
call fcn.004281c0
mov dword [eax], esi
mov byte [ebp - 0x258], 0
movzx edx, byte [ebp - 0x258]
test edx, edx
je 0x4601a4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
jmp 0x45fe10
jmp 0x45fdb5
lea ecx, [ebp - 0x778]
call fcn.004281a0
mov dword [ebp - 0x1fc0], 0
mov dword [ebp - 0x1fbc], 0
mov dword [ebp - 0x1fb8], 0
mov dword [ebp - 0x1fb4], 0
lea ecx, [ebp - 0x889]
call fcn.00407d20
push eax
lea eax, [ebp - 0x1fb0]
push eax
lea ecx, [ebp - 0x1fc0]
push ecx
lea ecx, [ebp - 0x2944]
call fcn.00406600
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x1834]
call fcn.00428140
mov dword [ebp - 0x1af0], 0x333
cmp dword [ebp - 0x1af0], 0x1e12
jle 0x460292
push eax
dec ebx
push ds
push 0x54
sbb ah, ch
xchg esp, eax
mov eax, dword [0x1a685041]
mov ch, 0
add byte [eax - 0x3f], bl
clc
xor ch, byte [0xa53f2]
push 3
lea ecx, [ebp - 0x20c4]
call fcn.00428070
mov dword [ebp - 0x3bc], 0x6aabecba
mov dword [ebp - 0x1af8], 0x9e0
cmp dword [ebp - 0x1af8], 0x226c
jle 0x46030a
fidivr word [ebp + esi*2 - 0x3f]
pushfd
invalid
mov dword [ebp - 0x420], 0
jmp 0x460325
mov ecx, dword [ebp - 0x420]
add ecx, 1
mov dword [ebp - 0x420], ecx
cmp dword [ebp - 0x420], 3
jge 0x460348
mov edx, dword [ebp - 0x420]
push edx
lea ecx, [ebp - 0x20c4]
call fcn.004281c0
mov dword [eax], 0
jmp 0x460316
mov dword [ebp - 0x3bc], 2
jmp 0x460363
mov eax, dword [ebp - 0x3bc]
sub eax, 1
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0
jl 0x4603b7
mov dword [ebp - 0x734], 0x9f3690f1
mov dword [ebp - 0x734], 2
jmp 0x460391
mov ecx, dword [ebp - 0x734]
sub ecx, 1
mov dword [ebp - 0x734], ecx
cmp dword [ebp - 0x734], 0
jl 0x4603b5
mov edx, dword [ebp - 0x3bc]
push edx
lea ecx, [ebp - 0x20c4]
call fcn.004281c0
cmp dword [eax], 0
je 0x4603b3
jmp 0x4603b5
jmp 0x460382
jmp 0x460354
mov byte [ebp - 0x25a], 0
movzx eax, byte [ebp - 0x25a]
test eax, eax
je 0x4603d9
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ScrollWindow]
lea ecx, [ebp - 0x20c4]
call fcn.004281a0
mov dword [ebp - 0x32c], 0xfffffff9
mov dword [ebp - 0x38], 0x2617
mov dword [ebp - 0x120], 0x1d68c2af
mov dword [ebp - 0x9b4], 0xeed050b7
mov dword [ebp - 0x404], 0x3bec767d
mov dword [ebp - 0x13c], 0xb783
push 1
lea ecx, [ebp - 0x2124]
call fcn.00428070
mov dword [ebp - 0xb0], 0
jmp 0x460445
mov ecx, dword [ebp - 0xb0]
add ecx, 1
mov dword [ebp - 0xb0], ecx
cmp dword [ebp - 0xb0], 4
jge 0x460461
mov edx, dword [ebp - 0xb0]
mov dword [ebp + edx*4 - 0x960], 0x57bf5cd5
jmp 0x460436
mov dword [ebp - 0xb0], 0
jmp 0x46047c
mov eax, dword [ebp - 0xb0]
add eax, 1
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x46049f
mov ecx, dword [ebp - 0xb0]
push ecx
lea ecx, [ebp - 0x2124]
call fcn.004281c0
mov dword [eax], 0xd85d5fca
jmp 0x46046d
mov edx, 4
shl edx, 1
cmp dword [ebp + edx - 0x960], 0
jne 0x4605fd
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x21f0], eax
mov ecx, 4
shl ecx, 1
cmp dword [ebp + ecx - 0x960], 0xc509
jge 0x4604e6
mov edx, 0x63372585
test edx, edx
je 0x4604e6
mov dword [ebp - 0x15fc], 1
jmp 0x4604f0
mov dword [ebp - 0x15fc], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x15fc], eax
jg 0x46050d
cmp dword [ebp - 0x38], 0
je 0x46050d
mov dword [ebp - 0x97c], 1
jmp 0x460517
mov dword [ebp - 0x97c], 0
mov ecx, 4
shl ecx, 1
mov edx, dword [ebp + ecx - 0x960]
cmp dword [ebp - 0x97c], edx
jne 0x46054b
mov eax, 4
imul ecx, eax, 3
cmp dword [ebp + ecx - 0x960], 0
jne 0x46054b
mov dword [ebp - 0x1604], 0
jmp 0x460555
mov dword [ebp - 0x1604], 1
mov edx, dword [ebp - 0x1604]
mov dword [ebp - 0x120], edx
cmp dword [ebp - 0x120], 0
je 0x46057f
mov eax, 0x68fc786c
test eax, eax
je 0x46057f
mov dword [ebp - 0x984], 1
jmp 0x460589
mov dword [ebp - 0x984], 0
cmp dword [ebp - 0x984], 0x8ff7673e
jb 0x4605a1
mov dword [ebp - 0x160c], 1
jmp 0x4605ab
mov dword [ebp - 0x160c], 0
mov ecx, 4
shl ecx, 1
mov edx, dword [ebp + ecx - 0x960]
cmp dword [ebp - 0x160c], edx
je 0x4605cd
mov dword [ebp - 0x98c], 1
jmp 0x4605d7
mov dword [ebp - 0x98c], 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp + ecx - 0x960]
add edx, dword [ebp - 0x98c]
sub edx, dword [ebp - 0x38]
jne 0x4605fd
mov dword [ebp - 0x1614], 0
jmp 0x460607
mov dword [ebp - 0x1614], 1
mov eax, 0xa017779a
sub eax, dword [ebp - 0x1614]
mov dword [ebp - 0x9b4], eax
cmp dword [ebp - 0x120], 3
je 0x46062d
mov dword [ebp - 0x994], 1
jmp 0x460637
mov dword [ebp - 0x994], 0
cmp dword [ebp - 0x994], 0x509e
jne 0x46064f
mov dword [ebp - 0x161c], 1
jmp 0x460659
mov dword [ebp - 0x161c], 0
mov ecx, dword [ebp - 0x38]
cmp dword [ebp - 0x161c], ecx
je 0x460670
mov dword [ebp - 0x99c], 1
jmp 0x46067a
mov dword [ebp - 0x99c], 0
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ebp + eax - 0x960]
cmp dword [ebp - 0x99c], ecx
je 0x46069d
mov dword [ebp - 0x1624], 1
jmp 0x4606a7
mov dword [ebp - 0x1624], 0
mov edx, dword [ebp - 0x38]
cmp dword [ebp - 0x1624], edx
jne 0x4606be
mov dword [ebp - 0x9a4], 1
jmp 0x4606c8
mov dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x9a4]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0
jne 0x4606fb
cmp dword [ebp - 0x120], 0
jne 0x4606fb
cmp dword [ebp - 0x120], 0
jne 0x4606fb
mov dword [ebp - 0x162c], 0
jmp 0x460705
mov dword [ebp - 0x162c], 1
cmp dword [ebp - 0x162c], 0
jle 0x460712
cmp dword [ebp - 0x38], 0
mov ecx, dword [ebp - 0x404]
mov dword [ebp - 0x21f8], ecx
mov edx, dword [ebp - 0x13c]
add edx, 4
cmp edx, 0xffffffff
jb 0x460738
mov dword [ebp - 0x9ac], 1
jmp 0x460742
mov dword [ebp - 0x9ac], 0
cmp dword [ebp - 0x9ac], 0xc8cbf698
ja 0x46075a
mov dword [ebp - 0x1b00], 1
jmp 0x460764
mov dword [ebp - 0x1b00], 0
mov eax, 4
shl eax, 1
mov ecx, dword [ebp + eax - 0x960]
mov dword [ebp - 0x2200], ecx
or edx, 0xffffffff
cmp edx, 0xae227815
jae 0x46078f
mov dword [ebp - 0x1634], 1
jmp 0x460799
mov dword [ebp - 0x1634], 0
push 0
lea ecx, [ebp - 0x2124]
call fcn.004281c0
mov ecx, dword [ebp - 0x1634]
mov dword [eax], ecx
mov dword [ebp - 0x120], 0x10
jmp 0x4607c9
mov edx, dword [ebp - 0x120]
add edx, 1
mov dword [ebp - 0x120], edx
cmp dword [ebp - 0x120], 0x17
jg 0x460a13
mov dword [ebp - 0x400], 0xfffffff7
mov dword [ebp - 0x38], 0
jmp 0x4607f2
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jne 0x4609b4
mov dword [ebp - 0x858], 0xad5834d
mov dword [ebp - 0x13c], 0
jmp 0x460821
mov ecx, dword [ebp - 0x13c]
add ecx, 1
mov dword [ebp - 0x13c], ecx
cmp dword [ebp - 0x13c], 3
jg 0x4609a6
mov dword [ebp - 0x790], 2
mov dword [ebp - 0x1654], 1
mov edx, dword [ebp - 0x13c]
cmp dword [ebp + edx*4 - 0x960], 0
je 0x460985
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp + eax*4 - 0x960]
mov dword [ebp - 0x2208], ecx
mov edx, dword [ebp - 0x9b4]
mov dword [ebp - 0x2210], edx
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp + eax*4 - 0x960]
cmp dword [ebp - 0x790], ecx
jne 0x46089a
xor edx, edx
je 0x46089a
mov dword [ebp - 0x163c], 1
jmp 0x4608a4
mov dword [ebp - 0x163c], 0
cmp dword [ebp - 0x163c], 0x4d9805f6
jg 0x4608bc
mov dword [ebp - 0x9bc], 1
jmp 0x4608c6
mov dword [ebp - 0x9bc], 0
mov eax, 4
shl eax, 1
mov ecx, dword [ebp + eax - 0x960]
cmp dword [ebp - 0x9bc], ecx
jl 0x4608e8
mov dword [ebp - 0x1644], 1
jmp 0x4608f2
mov dword [ebp - 0x1644], 0
mov edx, dword [ebp - 0x1644]
mov dword [ebp - 0x790], edx
cmp dword [ebp - 0x790], 0
je 0x460925
cmp dword [ebp - 0x1654], 0
jne 0x460925
mov eax, 0xfffffff9
test eax, eax
jne 0x460925
mov dword [ebp - 0x9c4], 0
jmp 0x46092f
mov dword [ebp - 0x9c4], 1
mov ecx, dword [ebp - 0x858]
mov edx, dword [ebp - 0x9c4]
mov eax, dword [ebp - 0x858]
sub eax, 1
mov dword [ebp - 0x858], eax
cmp ecx, edx
jg 0x460963
cmp dword [ebp - 0x400], 0
je 0x460963
mov dword [ebp - 0x164c], 1
jmp 0x46096d
mov dword [ebp - 0x164c], 0
cmp dword [ebp - 0x164c], 0x73cb4ea9
jge 0x460985
mov dword [ebp - 0x9cc], 1
jmp 0x46098f
mov dword [ebp - 0x9cc], 0
mov ecx, dword [ebp - 0x9cc]
sub ecx, 0x599618de
mov dword [ebp - 0x1654], ecx
jmp 0x460812
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x404], edx
jmp 0x4607e9
mov dword [ebp - 0x38], 3
jmp 0x4609c6
mov eax, dword [ebp - 0x38]
sub eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x460a0e
mov dword [ebp - 0x400], 0
jmp 0x4609e7
mov ecx, dword [ebp - 0x400]
add ecx, 1
mov dword [ebp - 0x400], ecx
cmp dword [ebp - 0x400], 3
jg 0x460a0c
mov byte [ebp - 0x25c], 0
movzx edx, byte [ebp - 0x25c]
test edx, edx
je 0x460a0a
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
jmp 0x4609d8
jmp 0x4609bd
jmp 0x4607ba
lea ecx, [ebp - 0x2124]
call fcn.004281a0
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x9e4], 0xe8c9f369
mov dword [ebp - 0x2218], 7
mov dword [ebp - 0x8f8], 0x2835357f
mov dword [ebp - 0x1c8c], 0x2aa0a5de
mov dword [ebp - 0x9f4], 0xffffffff
mov dword [ebp - 0x9d4], 1
mov dword [ebp - 0x390], 1
mov dword [ebp - 0x1ca4], 0x7bc35240
mov dword [ebp - 0x798], 0
mov dword [ebp - 0x1cac], 0xd0c0b807
mov dword [ebp - 0x428], 0
jmp 0x460aa7
mov eax, dword [ebp - 0x428]
add eax, 1
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 3
jge 0x460ac3
mov ecx, dword [ebp - 0x428]
mov dword [ebp + ecx*4 - 0x28dc], 0x76fda02
jmp 0x460a98
cmp dword [ebp - 0x9e4], 0
jne 0x460c12
mov edx, dword [ebp - 0x798]
sub edx, 1
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x9d4], eax
cmp dword [ebp - 0x9d4], 0x7a67d926
jge 0x460b03
mov dword [ebp - 0x1b08], 1
jmp 0x460b0d
mov dword [ebp - 0x1b08], 0
mov ecx, dword [ebp - 0x390]
mov dword [ebp - 0x2220], ecx
mov edx, dword [ebp - 0x8f8]
mov dword [ebp - 0x2228], edx
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x2230], eax
mov ecx, dword [ebp - 0x1c8c]
mov dword [ebp - 0x2238], ecx
mov edx, dword [ebp - 0x390]
cmp dword [ebp - 0x8f8], edx
jge 0x460b57
mov dword [ebp - 0x165c], 1
jmp 0x460b61
mov dword [ebp - 0x165c], 0
mov eax, dword [ebp - 0x9f4]
cmp dword [ebp - 0x165c], eax
jne 0x460b7b
mov dword [ebp - 0x1c94], 1
jmp 0x460b85
mov dword [ebp - 0x1c94], 0
cmp dword [ebp - 0x8f8], 0x28f0bd90
jl 0x460b9d
mov dword [ebp - 0x9dc], 1
jmp 0x460ba7
mov dword [ebp - 0x9dc], 0
mov ecx, dword [ebp - 0x390]
cmp dword [ebp - 0x9dc], ecx
jl 0x460bc1
mov dword [ebp - 0x1c9c], 1
jmp 0x460bcb
mov dword [ebp - 0x1c9c], 0
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ebp - 0x390]
cmp dword [ebp + eax - 0x28dc], ecx
jl 0x460bee
mov dword [ebp - 0x1664], 1
jmp 0x460bf8
mov dword [ebp - 0x1664], 0
mov edx, dword [ebp - 0x1664]
add edx, 0x5a27
jne 0x460c12
mov dword [ebp - 0x166c], 0
jmp 0x460c1c
mov dword [ebp - 0x166c], 1
mov eax, dword [ebp - 0x9e4]
cmp eax, dword [ebp - 0x166c]
jge 0x460c36
mov dword [ebp - 0x9ec], 1
jmp 0x460c40
mov dword [ebp - 0x9ec], 0
mov ecx, dword [ebp - 0x1ca4]
add ecx, dword [ebp - 0x9ec]
cmp ecx, 8
jle 0x460c66
cmp dword [ebp - 0x1cac], 0
je 0x460c66
mov dword [ebp - 0x1674], 1
jmp 0x460c70
mov dword [ebp - 0x1674], 0
mov edx, dword [ebp - 0x1674]
mov dword [ebp - 0x9f4], edx
mov dword [ebp - 0x1cb4], 0x5d5
cmp dword [ebp - 0x1cb4], 0x1860
jle 0x460cdd
and dword [ebx + 0x27], ecx
mov ebp, 0x79da0d66
jmp 0x460cff
mov dword [ebp - 0x158], 0xe66c79a8
mov dword [ebp - 0x1de4], 0x2f2f
mov dword [ebp - 0x2c], 0xfffffff7
push 3
lea ecx, [ebp - 0x20dc]
call fcn.00428070
mov dword [ebp - 0xb8], 0
jmp 0x460d20
invalid
mov eax, dword [ebp - 0xb8]
add eax, 1
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x460d3c
mov ecx, dword [ebp - 0xb8]
mov dword [ebp + ecx*4 - 0x2658], 1
jmp 0x460d11
mov dword [ebp - 0xb8], 0
jmp 0x460d57
mov edx, dword [ebp - 0xb8]
add edx, 1
mov dword [ebp - 0xb8], edx
cmp dword [ebp - 0xb8], 3
jge 0x460d7a
mov eax, dword [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x20dc]
call fcn.004281c0
mov dword [eax], 0xfffffffe
jmp 0x460d48
mov byte [ebp - 0x25e], 0
movzx ecx, byte [ebp - 0x25e]
test ecx, ecx
je 0x460d94
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
cmp dword [ebp - 0x2c], 0
jne 0x460d9e
cmp dword [ebp - 0x2c], 0
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x2240], edx
cmp dword [ebp - 0x2c], 0x238e486a
jle 0x460dbc
mov dword [ebp - 0x167c], 1
jmp 0x460dc6
mov dword [ebp - 0x167c], 0
cmp dword [ebp - 0x167c], 0xec93cc25
jbe 0x460dde
mov dword [ebp - 0x9fc], 1
jmp 0x460de8
mov dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x9fc]
jle 0x460dff
mov dword [ebp - 0x1cbc], 1
jmp 0x460e09
mov dword [ebp - 0x1cbc], 0
cmp dword [ebp - 0x2c], 0
jne 0x460e1b
mov dword [ebp - 0x1684], 1
jmp 0x460e25
mov dword [ebp - 0x1684], 0
cmp dword [ebp - 0x1684], 3
jl 0x460e3a
mov dword [ebp - 0x1cc4], 1
jmp 0x460e44
mov dword [ebp - 0x1cc4], 0
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2248], ecx
mov edx, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edx
jne 0x460e61
mov dword [ebp - 0xa04], 1
jmp 0x460e6b
mov dword [ebp - 0xa04], 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0xa04]
mov dword [ebp + ecx - 0x2658], edx
mov eax, 4
imul ecx, eax, 0
cmp dword [ebp + ecx - 0x2658], 0
jl 0x460e9e
mov dword [ebp - 0x168c], 1
jmp 0x460ea8
mov dword [ebp - 0x168c], 0
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x168c]
cmp edx, dword [ebp - 0x2c]
jle 0x460ec2
mov dword [ebp - 0xa0c], 1
jmp 0x460ecc
mov dword [ebp - 0xa0c], 0
cmp dword [ebp - 0xa0c], 1
jg 0x460ee7
cmp dword [ebp - 0x2c], 0
jne 0x460ee7
mov dword [ebp - 0x1694], 0
jmp 0x460ef1
mov dword [ebp - 0x1694], 1
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1694]
jge 0x460f08
mov dword [ebp - 0xa14], 1
jmp 0x460f12
mov dword [ebp - 0xa14], 0
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp - 0xa14], ecx
jg 0x460f29
mov dword [ebp - 0x169c], 1
jmp 0x460f33
mov dword [ebp - 0x169c], 0
cmp dword [ebp - 0x169c], 0xfffd
je 0x460fb2
mov dword [ebp - 0x1ccc], 0x31c0a9c5
push 1
lea ecx, [ebp - 0x20dc]
call fcn.004281c0
mov dword [ebp - 0xa1c], eax
mov edx, dword [ebp - 0xa1c]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0xa1c]
mov dword [ecx], eax
mov dword [ebp - 0x2c], 0xd
jmp 0x460f81
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x10
jge 0x460fb0
cmp dword [ebp - 0x1ccc], 0
je 0x460f92
jmp 0x460fb0
mov byte [ebp - 0x260], 0
movzx eax, byte [ebp - 0x260]
test eax, eax
je 0x460fae
push 0
push 0
call dword [sym.imp.USER32.dll_BeginPaint]
jmp 0x460f78
jmp 0x461024
mov dword [ebp - 0x5c4], 0
jmp 0x460fcd
mov ecx, dword [ebp - 0x5c4]
add ecx, 1
mov dword [ebp - 0x5c4], ecx
cmp dword [ebp - 0x5c4], 3
jge 0x460fe9
mov edx, dword [ebp - 0x5c4]
mov dword [ebp + edx*4 - 0x2668], 0xffff
jmp 0x460fbe
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp + ecx - 0x2668]
sub edx, 1
mov eax, 4
imul ecx, eax, 0
mov dword [ebp + ecx - 0x2668], edx
mov byte [ebp - 0x262], 0
movzx edx, byte [ebp - 0x262]
test edx, edx
je 0x461024
push 0
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
lea ecx, [ebp - 0x20dc]
call fcn.004281a0
mov dword [ebp - 0x2250], 4
push 3
lea ecx, [ebp - 0x2688]
call fcn.00428070
mov dword [ebp - 0x338], 0
mov dword [ebp - 0xa44], 0
push 2
lea ecx, [ebp - 0x1ea8]
call fcn.00428070
mov dword [ebp - 0x2258], 0x6fb96f37
push 4
lea ecx, [ebp - 0x1e30]
call fcn.00428070
mov dword [ebp - 0x148], 0
push 2
lea ecx, [ebp - 0x2094]
call fcn.00428070
mov dword [ebp - 0x20], 0
jmp 0x4610a7
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x4610c4
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x2688]
call fcn.004281c0
mov dword [eax], 0
jmp 0x46109e
mov dword [ebp - 0x20], 0
jmp 0x4610d6
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 2
jge 0x4610f3
mov eax, dword [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1ea8]
call fcn.004281c0
mov dword [eax], 0
jmp 0x4610cd
mov dword [ebp - 0x20], 0
jmp 0x461105
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 4
jge 0x461122
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1e30]
call fcn.004281c0
mov dword [eax], 0x9c1c
jmp 0x4610fc
mov dword [ebp - 0x20], 0
jmp 0x461134
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x461151
mov ecx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x2094]
call fcn.004281c0
mov dword [eax], 0xfffffffd
jmp 0x46112b
mov dword [ebp - 0x338], 0
jmp 0x46116c
mov edx, dword [ebp - 0x338]
add edx, 1
mov dword [ebp - 0x338], edx
cmp dword [ebp - 0x338], 2
jg 0x461714
mov dword [ebp - 0x860], 0x2aa61fc2
mov dword [ebp - 0xa24], 4
mov dword [ebp - 0x1cf4], 0xffffffff
push 3
lea ecx, [ebp - 0x2064]
call fcn.00428070
mov dword [ebp - 0x128], 0
jmp 0x4611bf
mov eax, dword [ebp - 0x128]
add eax, 1
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jge 0x4611db
mov ecx, dword [ebp - 0x128]
mov dword [ebp + ecx*4 - 0x2678], 0xfffffffb
jmp 0x4611b0
mov dword [ebp - 0x16a4], 0x892
mov dword [ebp - 0x1cd4], str.qyrledkys_grbgnfzb_eminbpsv
cmp dword [ebp - 0x16a4], 0x925
jle 0x461281
mov dword [ebp - 0x430], 0
jmp 0x46121a
mov edx, dword [ebp - 0x430]
add edx, 1
mov dword [ebp - 0x430], edx
cmp dword [ebp - 0x430], 0x433f
jge 0x461281
mov dword [ebp - 0x684], 0
jmp 0x461241
mov eax, dword [ebp - 0x684]
add eax, 1
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 0x6c
jge 0x46127f
mov eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x684]
shl eax, cl
cdq
mov dword [ebp - 0x1b14], eax
mov dword [ebp - 0x1b10], edx
mov ecx, dword [ebp - 0x1b10]
push ecx
mov edx, dword [ebp - 0x1b14]
push edx
mov ecx, 0xa9b5f0
call fcn.00427f00
jmp 0x461232
jmp 0x46120b
mov dword [ebp - 0x128], 0
jmp 0x46129c
mov eax, dword [ebp - 0x128]
add eax, 1
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jge 0x4612bf
mov ecx, dword [ebp - 0x128]
push ecx
lea ecx, [ebp - 0x2064]
call fcn.004281c0
mov dword [eax], 0x283644bb
jmp 0x46128d
mov dword [ebp - 4], 0
cmp dword [ebp - 0x16a4], 0x4cb
jge 0x4612e6
mov edx, dword [ebp - 0x1cd4]
push edx
push 0xa9b5f0
call fcn.00408780
add esp, 8
jmp 0x461302
mov dword [ebp - 4], 0xffffffff
jmp 0x461312
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x2260], eax
cmp dword [ebp - 0x860], 0x8939
jl 0x461336
mov dword [ebp - 0x16ac], 1
jmp 0x461340
mov dword [ebp - 0x16ac], 0
cmp dword [ebp - 0xa24], 0
jne 0x46135e
mov ecx, 0xfff6
test ecx, ecx
jne 0x46135e
mov dword [ebp - 0x16b4], 0
jmp 0x461368
mov dword [ebp - 0x16b4], 1
mov edx, dword [ebp - 0x16ac]
sub edx, dword [ebp - 0x148]
mov dword [ebp - 0xa2c], edx
push 1
lea ecx, [ebp - 0x1ea8]
call fcn.004281c0
mov ecx, dword [ebp - 0xa2c]
mov dword [eax], ecx
mov edx, dword [ebp - 0xa2c]
mov dword [ebp - 0x1cdc], edx
mov eax, dword [ebp - 0x16b4]
mov dword [ebp - 0x1ce4], eax
mov ecx, dword [ebp - 0x148]
add ecx, 1
mov dword [ebp - 0x148], ecx
mov edx, dword [ebp - 0x1cdc]
cmp edx, dword [ebp - 0x1ce4]
jne 0x4613d0
mov dword [ebp - 0xa34], 1
jmp 0x4613da
mov dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xa34]
sub eax, 0xbf7a
je 0x4613fc
mov ecx, 0x7bde
test ecx, ecx
je 0x4613fc
mov dword [ebp - 0x16bc], 1
jmp 0x461406
mov dword [ebp - 0x16bc], 0
push 2
lea ecx, [ebp - 0x1e30]
call fcn.004281c0
mov edx, dword [ebp - 0x16bc]
cmp edx, dword [eax]
je 0x461429
mov dword [ebp - 0xa3c], 1
jmp 0x461433
mov dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0xa3c]
neg eax
cmp eax, 3
jne 0x461455
mov ecx, 0xf5ab171c
test ecx, ecx
jne 0x461455
mov dword [ebp - 0x16c4], 0
jmp 0x46145f
mov dword [ebp - 0x16c4], 1
mov edx, dword [ebp - 0x16c4]
mov dword [ebp - 0xa44], edx
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0x2268], eax
push 0
lea ecx, [ebp - 0x2064]
call fcn.004281c0
cmp dword [ebp - 0x148], 0xfffe
jne 0x46149c
mov dword [ebp - 0x16d8], 1
jmp 0x4614a6
mov dword [ebp - 0x16d8], 0
mov ecx, 4
imul edx, ecx, 0
mov eax, dword [ebp - 0x16d8]
mov dword [ebp + edx - 0x2678], eax
mov dword [ebp - 0x148], 0
jmp 0x4614d6
mov ecx, dword [ebp - 0x148]
add ecx, 1
mov dword [ebp - 0x148], ecx
cmp dword [ebp - 0x148], 2
jg 0x461704
mov dword [ebp - 0x1cfc], 0xffffffff
push 1
lea ecx, [ebp - 0x2154]
call fcn.00428070
mov dword [ebp - 0x7a0], 0xd1c2b13f
mov dword [ebp - 0x1cec], 1
mov dword [ebp - 0x438], 0
jmp 0x461529
mov edx, dword [ebp - 0x438]
add edx, 1
mov dword [ebp - 0x438], edx
cmp dword [ebp - 0x438], 1
jge 0x46154c
mov eax, dword [ebp - 0x438]
push eax
lea ecx, [ebp - 0x2154]
call fcn.004281c0
mov dword [eax], 1
jmp 0x46151a
mov byte [ebp - 0x264], 0
movzx ecx, byte [ebp - 0x264]
test ecx, ecx
je 0x461566
push 0
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov edx, dword [ebp - 0x7a0]
add edx, 1
mov dword [ebp - 0x7a0], edx
jne 0x461583
mov dword [ebp - 0xa4c], 1
jmp 0x46158d
mov dword [ebp - 0xa4c], 0
cmp dword [ebp - 0xa4c], 0x32e525b7
jg 0x4615a5
mov dword [ebp - 0x16e0], 1
jmp 0x4615af
mov dword [ebp - 0x16e0], 0
cmp dword [ebp - 0x16e0], 1
je 0x4615c4
mov dword [ebp - 0xa54], 1
jmp 0x4615ce
mov dword [ebp - 0xa54], 0
push 0
lea ecx, [ebp - 0x2154]
call fcn.004281c0
mov ecx, dword [ebp - 0xa54]
imul ecx, dword [eax]
test ecx, ecx
jne 0x461694
cmp dword [ebp - 0x860], 0
je 0x46165d
mov edx, dword [ebp - 0x1cec]
cmp dword [ebp - 0x1cf4], edx
jne 0x46160f
mov dword [ebp - 0x16e8], 1
jmp 0x461619
mov dword [ebp - 0x16e8], 0
mov eax, dword [ebp - 0x16e8]
sub eax, dword [ebp - 0x1cfc]
cmp eax, dword [ebp - 0x338]
jne 0x461639
mov dword [ebp - 0xa5c], 1
jmp 0x461643
mov dword [ebp - 0xa5c], 0
mov ecx, dword [ebp - 0x860]
cmp dword [ebp - 0xa5c], ecx
jg 0x46165d
mov dword [ebp - 0x7a8], 1
jmp 0x461667
mov dword [ebp - 0x7a8], 0
push 1
lea ecx, [ebp - 0x2094]
call fcn.004281c0
mov edx, dword [ebp - 0x7a8]
mov dword [eax], edx
cmp dword [ebp - 0x7a8], 0xd49a337b
jb 0x461694
mov dword [ebp - 0x16f0], 0
jmp 0x46169e
mov dword [ebp - 0x16f0], 1
push 1
lea ecx, [ebp - 0x1e30]
call fcn.004281c0
mov ecx, dword [ebp - 0x16f0]
cmp ecx, dword [eax]
jl 0x4616c1
mov dword [ebp - 0x8c0], 1
jmp 0x4616cb
mov dword [ebp - 0x8c0], 0
mov edx, 4
shl edx, 1
mov eax, dword [ebp - 0x8c0]
mov dword [ebp + edx - 0x2678], eax
push 1
lea ecx, [ebp - 0x1ea8]
call fcn.004281c0
mov ecx, dword [ebp - 0x8c0]
mov dword [eax], ecx
lea ecx, [ebp - 0x2154]
call fcn.004281a0
jmp 0x4614c7
lea ecx, [ebp - 0x2064]
call fcn.004281a0
jmp 0x46115d
mov byte [ebp - 0x266], 0
movzx edx, byte [ebp - 0x266]
test edx, edx
je 0x461730
push 0
push 0
call dword [sym.imp.USER32.dll_GetSystemMenu]
lea ecx, [ebp - 0x2094]
call fcn.004281a0
lea ecx, [ebp - 0x1e30]
call fcn.004281a0
lea ecx, [ebp - 0x1ea8]
call fcn.004281a0
lea ecx, [ebp - 0x2688]
call fcn.004281a0
push 1
lea ecx, [ebp - 0x20a0]
call fcn.00428070
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x1df4], 0
mov dword [ebp - 0x5cc], 0
jmp 0x461798
mov eax, dword [ebp - 0x5cc]
add eax, 1
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 3
jge 0x4617b4
mov ecx, dword [ebp - 0x5cc]
mov dword [ebp + ecx*4 - 0x2698], 0xf4864854
jmp 0x461789
mov dword [ebp - 0x2e4], 0xb
jmp 0x4617cf
mov edx, dword [ebp - 0x2e4]
sub edx, 1
mov dword [ebp - 0x2e4], edx
cmp dword [ebp - 0x2e4], 0xffffffec
jge 0x461bfa
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x90], 2
mov eax, 1
test eax, eax
je 0x461962
cmp dword [ebp - 0x2e4], 0
jne 0x461910
cmp dword [ebp - 0x2e4], 0
je 0x4618df
mov ecx, dword [ebp - 0x27c]
cmp dword [ebp - 0x27c], ecx
jle 0x461831
mov dword [ebp - 0xa64], 1
jmp 0x46183b
mov dword [ebp - 0xa64], 0
cmp dword [ebp - 0xa64], 0xd76270e7
jb 0x46185c
mov edx, 0xfffffff7
test edx, edx
jne 0x46185c
mov dword [ebp - 0x16f8], 0
jmp 0x461866
mov dword [ebp - 0x16f8], 1
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x16f8], eax
jl 0x461889
mov ecx, 0x6a9d9e17
test ecx, ecx
jne 0x461889
mov dword [ebp - 0xa6c], 0
jmp 0x461893
mov dword [ebp - 0xa6c], 1
mov edx, dword [ebp - 0x27c]
cmp dword [ebp - 0xa6c], edx
jle 0x4618ad
mov dword [ebp - 0x1700], 1
jmp 0x4618b7
mov dword [ebp - 0x1700], 0
mov eax, dword [ebp - 0x1700]
sub eax, 0x5229e043
mov ecx, 4
imul edx, ecx, 0
cmp eax, dword [ebp + edx - 0x2698]
jl 0x4618df
mov dword [ebp - 0xa74], 1
jmp 0x4618e9
mov dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xa74], eax
je 0x461910
mov ecx, 0x91cb
test ecx, ecx
jne 0x461910
cmp dword [ebp - 0x27c], 0
jne 0x461910
cmp dword [ebp - 0x90], 0
imul edx, dword [ebp - 0x90], 0x85d0
cmp edx, dword [ebp - 0x27c]
jle 0x461937
mov eax, 0x1abd
test eax, eax
je 0x461937
mov dword [ebp - 0x1d04], 1
jmp 0x461941
mov dword [ebp - 0x1d04], 0
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x2270], ecx
mov edx, 0xd849
test edx, edx
je 0x461962
mov dword [ebp - 0x1708], 1
jmp 0x46196c
mov dword [ebp - 0x1708], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x1708]
mov ecx, 4
imul edx, ecx, 0
cmp eax, dword [ebp + edx - 0x2698]
je 0x461995
mov dword [ebp - 0xa7c], 1
jmp 0x46199f
mov dword [ebp - 0xa7c], 0
cmp dword [ebp - 0xa7c], 0xfffd
jne 0x461a0e
mov dword [ebp - 0x90], 0
jmp 0x4619c6
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jg 0x461a09
mov byte [ebp - 0x268], 0
movzx ecx, byte [ebp - 0x268]
test ecx, ecx
je 0x4619eb
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov byte [ebp - 0x26a], 0
movzx edx, byte [ebp - 0x26a]
test edx, edx
je 0x461a07
push 0
push 0
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x4619b7
jmp 0x461bf5
mov dword [ebp - 0x3c0], 0xffffffff
push 4
lea ecx, [ebp - 0x210c]
call fcn.00428070
mov dword [ebp - 0xc0], 0
jmp 0x461a40
mov eax, dword [ebp - 0xc0]
add eax, 1
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x461a5c
mov ecx, dword [ebp - 0xc0]
mov dword [ebp + ecx*4 - 0x1718], 6
jmp 0x461a31
mov dword [ebp - 0xc0], 0
jmp 0x461a77
mov edx, dword [ebp - 0xc0]
add edx, 1
mov dword [ebp - 0xc0], edx
cmp dword [ebp - 0xc0], 4
jge 0x461a9a
mov eax, dword [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x210c]
call fcn.004281c0
mov dword [eax], 0x456bbb3
jmp 0x461a68
mov ecx, dword [ebp - 0x27c]
cmp dword [ebp - 0x3c0], ecx
jl 0x461ab4
mov dword [ebp - 0x1d0c], 1
jmp 0x461abe
mov dword [ebp - 0x1d0c], 0
cmp dword [ebp - 0x3c0], 0
jbe 0x461ad3
mov dword [ebp - 0x1710], 1
jmp 0x461add
mov dword [ebp - 0x1710], 0
cmp dword [ebp - 0x1710], 0x54120977
jle 0x461af5
mov dword [ebp - 0xa84], 1
jmp 0x461aff
mov dword [ebp - 0xa84], 0
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ebp - 0xa84]
mov dword [ebp + eax - 0x1718], ecx
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ebp - 0x3c0]
cmp dword [ebp + eax - 0x1718], ecx
jg 0x461b37
mov dword [ebp - 0x1d14], 1
jmp 0x461b41
mov dword [ebp - 0x1d14], 0
cmp dword [ebp - 0x90], 0x5c2c102d
jge 0x461b59
mov dword [ebp - 0xa8c], 1
jmp 0x461b63
mov dword [ebp - 0xa8c], 0
mov edx, dword [ebp - 0x3c0]
cmp edx, dword [ebp - 0xa8c]
jne 0x461b7d
mov dword [ebp - 0x1720], 1
jmp 0x461b87
mov dword [ebp - 0x1720], 0
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x1720], eax
je 0x461ba1
mov dword [ebp - 0xa94], 1
jmp 0x461bab
mov dword [ebp - 0xa94], 0
mov ecx, dword [ebp - 0xa94]
sub ecx, dword [ebp - 0x90]
cmp ecx, dword [ebp - 0x1df4]
jg 0x461bcb
mov dword [ebp - 0x1728], 1
jmp 0x461bd5
mov dword [ebp - 0x1728], 0
push 3
lea ecx, [ebp - 0x210c]
call fcn.004281c0
mov edx, dword [ebp - 0x1728]
mov dword [eax], edx
lea ecx, [ebp - 0x210c]
call fcn.004281a0
jmp 0x4617c0
mov dword [ebp - 0x2278], 0
mov byte [ebp - 0x26c], 0
movzx eax, byte [ebp - 0x26c]
test eax, eax
je 0x461c1e
push 0
call dword [sym.imp.GDI32.dll_GetBkColor]
mov byte [ebp - 0x1bd], 0
movzx ecx, byte [ebp - 0x1bd]
test ecx, ecx
je 0x461c42
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [ebp - 0x130], 0
jmp 0x461c5d
mov edx, dword [ebp - 0x130]
add edx, 1
mov dword [ebp - 0x130], edx
cmp dword [ebp - 0x130], 2
jge 0x461c79
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x17bc], 0xc638299f
jmp 0x461c4e
mov dword [ebp - 0x130], 0
jmp 0x461c94
mov ecx, dword [ebp - 0x130]
add ecx, 1
mov dword [ebp - 0x130], ecx
cmp dword [ebp - 0x130], 1
jge 0x461cb7
mov edx, dword [ebp - 0x130]
push edx
lea ecx, [ebp - 0x20a0]
call fcn.004281c0
mov dword [eax], 0x2655
jmp 0x461c85
push 1
lea ecx, [ebp - 0x26a8]
call fcn.00428070
mov dword [ebp - 0xc8], 0
jmp 0x461cdf
mov eax, dword [ebp - 0xc8]
add eax, 1
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x461cfb
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + ecx*4 - 0x440], 0
jmp 0x461cd0
mov dword [ebp - 0xc8], 0
jmp 0x461d16
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
cmp dword [ebp - 0xc8], 1
jge 0x461d39
mov eax, dword [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x26a8]
call fcn.004281c0
mov dword [eax], 0
jmp 0x461d07
mov ecx, 4
imul edx, ecx, 0
mov dword [ebp + edx - 0x440], 0x10
jmp 0x461d6f
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp + ecx - 0x440]
sub edx, 1
mov eax, 4
imul ecx, eax, 0
mov dword [ebp + ecx - 0x440], edx
mov edx, 4
imul eax, edx, 0
cmp dword [ebp + eax - 0x440], 0xd
jge 0x461da6
mov dword [ebp - 0x2280], 7
mov dword [ebp - 0xa9c], 3
mov ecx, dword [ebp - 0xa9c]
add ecx, 1
mov dword [ebp - 0xa9c], ecx
jmp 0x461d4e
lea ecx, [ebp - 0x26a8]
call fcn.004281a0
mov edx, dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jg 0x461dc5
mov dword [ebp - 0x1730], 1
jmp 0x461dcf
mov dword [ebp - 0x1730], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x1730]
jne 0x461de6
mov dword [ebp - 0xaa4], 1
jmp 0x461df0
mov dword [ebp - 0xaa4], 0
cmp dword [ebp - 0xaa4], 0x466a
je 0x461e08
mov dword [ebp - 0x1738], 1
jmp 0x461e12
mov dword [ebp - 0x1738], 0
mov ecx, dword [ebp - 0x14]
cmp dword [ebp - 0x1738], ecx
jle 0x461e29
mov dword [ebp - 0x7b0], 1
jmp 0x461e33
mov dword [ebp - 0x7b0], 0
push 1
lea ecx, [ebp - 0x1834]
call fcn.004281c0
mov edx, dword [ebp - 0x7b0]
mov dword [eax], edx
cmp dword [ebp - 0x7b0], 0xffff
jb 0x461e60
mov dword [ebp - 0xaac], 1
jmp 0x461e6a
mov dword [ebp - 0xaac], 0
cmp dword [ebp - 0xaac], 0x3800
jne 0x461e82
mov dword [ebp - 0x1740], 1
jmp 0x461e8c
mov dword [ebp - 0x1740], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1740], eax
jg 0x461eb5
push 1
lea ecx, [ebp - 0x1834]
call fcn.004281c0
cmp dword [eax], 0
je 0x461eb5
mov dword [ebp - 0xab4], 1
jmp 0x461ebf
mov dword [ebp - 0xab4], 0
mov ecx, dword [ebp - 0x14]
cmp dword [ebp - 0xab4], ecx
jg 0x461ed6
mov dword [ebp - 0x1748], 1
jmp 0x461ee0
mov dword [ebp - 0x1748], 0
cmp dword [ebp - 0x1748], 1
jne 0x461ef5
mov dword [ebp - 0xabc], 1
jmp 0x461eff
mov dword [ebp - 0xabc], 0
cmp dword [ebp - 0xabc], 0xaf5bfb66
ja 0x461f17
mov dword [ebp - 0x1750], 1
jmp 0x461f21
mov dword [ebp - 0x1750], 0
mov edx, dword [ebp - 0x14]
cmp dword [ebp - 0x1750], edx
jl 0x461f38
mov dword [ebp - 0xac4], 1
jmp 0x461f42
mov dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c4], eax
mov ecx, dword [ebp - 0x1c4]
cmp ecx, dword [ebp - 0xac4]
jl 0x461f65
mov dword [ebp - 0x1758], 1
jmp 0x461f6f
mov dword [ebp - 0x1758], 0
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x1758]
je 0x461f86
mov dword [ebp - 0x868], 1
jmp 0x461f90
mov dword [ebp - 0x868], 0
mov eax, 4
imul ecx, eax, 0
mov edx, dword [ebp - 0x868]
mov dword [ebp + ecx - 0x17bc], edx
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x868], eax
jge 0x461fbc
mov dword [ebp - 0xacc], 1
jmp 0x461fc6
mov dword [ebp - 0xacc], 0
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0xacc]
cmp ecx, 0xbef9
jge 0x461fe4
mov dword [ebp - 0x1760], 1
jmp 0x461fee
mov dword [ebp - 0x1760], 0
cmp dword [ebp - 0x1760], 0xfffffff9
jb 0x462003
mov dword [ebp - 0xad4], 1
jmp 0x46200d
mov dword [ebp - 0xad4], 0
cmp dword [ebp - 0xad4], 9
jne 0x462022
mov dword [ebp - 0x1768], 1
jmp 0x46202c
mov dword [ebp - 0x1768], 0
mov edx, dword [ebp - 0x14]
cmp dword [ebp - 0x1768], edx
jl 0x462043
mov dword [ebp - 0x1770], 1
jmp 0x46204d
mov dword [ebp - 0x1770], 0
cmp dword [ebp - 0x1770], 0xffffffff
jle 0x462074
push 1
lea ecx, [ebp - 0x1834]
call fcn.004281c0
cmp dword [eax], 0
jne 0x462074
mov dword [ebp - 0xae0], 0
jmp 0x46207e
mov dword [ebp - 0xae0], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xae0], eax
jge 0x46209e
cmp dword [ebp - 0x32c], 0
je 0x46209e
mov dword [ebp - 0x11b0], 1
jmp 0x4620a8
mov dword [ebp - 0x11b0], 0
mov ecx, dword [ebp - 0x11b0]
sub ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x32c]
test ecx, ecx
je 0x46373e
mov dword [ebp - 0x448], 0x7571177e
mov dword [ebp - 0x6e4], 0
jmp 0x4620e5
mov edx, dword [ebp - 0x6e4]
add edx, 1
mov dword [ebp - 0x6e4], edx
cmp dword [ebp - 0x6e4], 1
jge 0x462101
mov eax, dword [ebp - 0x6e4]
mov dword [ebp + eax*4 - 0x1dfc], 0x245f1dbe
jmp 0x4620d6
mov dword [ebp - 0x448], 0
jmp 0x46211c
mov ecx, dword [ebp - 0x448]
sub ecx, 1
mov dword [ebp - 0x448], ecx
cmp dword [ebp - 0x448], 0xfffffff8
jg 0x462168
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x340], 0
jmp 0x46214a
mov edx, dword [ebp - 0x340]
add edx, 1
mov dword [ebp - 0x340], edx
cmp dword [ebp - 0x340], 1
jge 0x462166
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0x1dfc], 0xffffffff
jmp 0x46213b
jmp 0x46210d
mov dword [ebp - 0x2288], 0xfffffff6
mov dword [ebp - 0x2290], 0xfffffff6
mov dword [ebp - 0x5d4], 0xfffffff8
mov dword [ebp - 0x1518], 0x2fdcba86
mov dword [ebp - 0x5d4], 0
jmp 0x4621ab
mov ecx, dword [ebp - 0x5d4]
sub ecx, 1
mov dword [ebp - 0x5d4], ecx
cmp dword [ebp - 0x5d4], 0xffffffff
jg 0x462291
mov dword [ebp - 0x398], 0
mov dword [ebp - 0x1e14], 0
mov dword [ebp - 0x1df8], 0xfffffff7
mov dword [ebp - 0x398], 0xffffffec
jmp 0x4621f1
cmp dword [ebp - 0x398], 0xa
je 0x46228c
mov dword [ebp - 0x1e0c], 0xf4990069
cmp dword [ebp - 0x398], 0xfffffff9
jge 0x46221d
mov dword [ebp - 0xae8], 1
jmp 0x462227
mov dword [ebp - 0xae8], 0
cmp dword [ebp - 0xae8], 0xfffffffc
jb 0x46223c
mov dword [ebp - 0x1e04], 1
jmp 0x462246
mov dword [ebp - 0x1e04], 0
mov eax, dword [ebp - 0x1e0c]
mov dword [ebp - 0x1518], eax
cmp dword [ebp - 0x1518], 0x980db959
jae 0x46226a
mov dword [ebp - 0xaf0], 1
jmp 0x462274
mov dword [ebp - 0xaf0], 0
mov ecx, dword [ebp - 0x1e14]
imul ecx, dword [ebp - 0xaf0]
mov dword [ebp - 0x1df8], ecx
jmp 0x4621e2
jmp 0x46219c
mov byte [ebp - 0x27e], 0
movzx edx, byte [ebp - 0x27e]
test edx, edx
je 0x4622af
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSize]
mov dword [ebp - 0xbd8], 0xffffffff
mov dword [ebp - 0x1ab0], 0x659d
mov dword [ebp - 0x2298], 0xe8588d0d
mov dword [ebp - 0x22a0], 0xfffffffe
mov dword [ebp - 0x11c0], 0x60693009
mov dword [ebp - 0x22a8], 0xfffffffb
mov dword [ebp - 0xb10], 0xffffffff
mov dword [ebp - 0x2408], 0xc7dcd66a
mov dword [ebp - 0x1c10], 1
mov dword [ebp - 0x190c], 0x7182b474
mov dword [ebp - 0x8e0], 0x7747bb7a
mov dword [ebp - 0x2410], 1
mov dword [ebp - 0x11b8], 0x6883
mov dword [ebp - 0x1e10], str.bphypdy_ties_lqyrpxg_kvymi_xussol_svjdqe_rlkz_hpnnzui_pkvlxl_jmhe_ylhmnbtrs_zuouvetol
cmp dword [ebp - 0x11b8], 0x6c03
jle 0x462440
mov dword [ebp - 0x450], 0
jmp 0x462366
cmp dword [ebp - 0x450], 0x2b82
jge 0x462440
mov dword [ebp - 0x68c], 0
jmp 0x462391
cmp dword [ebp - 0x68c], 0x1cc1
jge 0x46243b
mov dword [ebp - 0x2418], 0x31615e82
mov dword [ebp - 4], 2
cmp dword [ebp - 0x11b8], 0x677b
jge 0x462471
mov ecx, dword [ebp - 0x1e10]
push ecx
push 0xa9b5f0
call fcn.00408780
add esp, 8
jmp 0x46248d
mov dword [ebp - 4], 0xffffffff
jmp 0x46249d
mov dword [ebp - 0x1d38], 0xfffffffd
mov dword [ebp - 0x2420], 0x8cae
mov dword [ebp - 0x714], 0x79ae4f78
mov dword [ebp - 0x7b8], 5
mov dword [ebp - 0x1f84], 0
mov dword [ebp - 0x1f80], 0
mov dword [ebp - 0x1f7c], 0
mov dword [ebp - 0x1f78], 0
lea ecx, [ebp - 0x891]
call fcn.00407d20
push eax
lea edx, [ebp - 0x1f74]
push edx
lea eax, [ebp - 0x1f84]
push eax
lea ecx, [ebp - 0x299c]
call fcn.00406600
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x1ec0]
call fcn.00428140
mov dword [ebp - 0x1c18], 0xfffffffa
mov dword [ebp - 0x460], 0
jmp 0x462549
mov dword [ebp - 0xd38], 0xfffffffc
mov dword [ebp - 0x188], 0x19e2f9db
mov dword [ebp - 0x1560], 0
mov dword [ebp - 0x24c8], 0x8bc588e1
mov dword [ebp - 0x24d0], 1
mov dword [ebp - 0x194c], 0xfffffffa
mov dword [ebp - 0x1c40], 7
mov dword [ebp - 0x1d58], 0xffffffff
mov dword [ebp - 0x1c38], 0xfffffffe
mov dword [ebp - 0x196c], 0x4c38b6b0
mov dword [ebp - 0x24d8], 1
mov dword [ebp - 0x24e0], 0x80e033c2
mov dword [ebp - 0x24e8], 1
mov dword [ebp - 0x180], 0xfffffffb
mov dword [ebp - 0xc00], 0x44b0bf24
mov dword [ebp - 0x7d0], 4
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x1954], 0x1a93826a
mov dword [ebp - 0x1fe8], 0x4d39d982
mov dword [ebp - 0x1fe4], 0x4d39d982
mov dword [ebp - 0x1fe0], 0x4d39d982
mov dword [ebp - 0x1fdc], 0x4d39d982
lea ecx, [ebp - 0x899]
call fcn.00407d20
push eax
lea eax, [ebp - 0x1fd8]
push eax
lea ecx, [ebp - 0x1fe8]
push ecx
lea ecx, [ebp - 0x2994]
call fcn.00406600
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x1d24]
call fcn.00428140
mov dword [ebp - 0x8c8], 0xfffffff8
mov dword [ebp - 0x2c4], 0x5b481d3e
mov dword [ebp - 0x1964], 0xffffffff
mov dword [ebp - 0x1d68], 1
mov ecx, dword [ebp - 0x180]
cmp dword [ebp - 0x1d58], ecx
jge 0x463893
mov dword [ebp - 0x1558], 1
jmp 0x46389d
mov dword [ebp - 0x1558], 0
mov edx, dword [ebp - 0x194c]
cmp edx, dword [ebp - 0x1558]
jge 0x4638c0
mov eax, 9
test eax, eax
je 0x4638c0
mov dword [ebp - 0xbf0], 1
jmp 0x4638ca
mov dword [ebp - 0xbf0], 0
push 0
lea ecx, [ebp - 0x1d24]
call fcn.004281c0
mov ecx, dword [ebp - 0xbf0]
cmp ecx, dword [eax]
jl 0x4638ed
mov dword [ebp - 0x1238], 1
jmp 0x4638f7
mov dword [ebp - 0x1238], 0
mov edx, dword [ebp - 0x1238]
neg edx
cmp edx, 0xc7a2e428
jne 0x463913
mov dword [ebp - 0xbf8], 1
jmp 0x46391d
mov dword [ebp - 0xbf8], 0
mov eax, dword [ebp - 0x1c38]
cmp dword [ebp - 0xbf8], eax
jg 0x463937
mov dword [ebp - 0x1848], 1
jmp 0x463941
mov dword [ebp - 0x1848], 0
mov ecx, dword [ebp - 0x7d0]
mov dword [ebp - 0x150], ecx
mov edx, dword [ebp - 0x1560]
imul edx, dword [ebp - 0x1848]
mov dword [ebp - 0xc00], edx
mov eax, dword [ebp - 0xc00]
cmp dword [ebp - 0x150], eax
jge 0x46397a
mov dword [ebp - 0x1240], 1
jmp 0x463984
mov dword [ebp - 0x1240], 0
mov ecx, dword [ebp - 0x1954]
cmp dword [ebp - 0x1240], ecx
jne 0x46399e
mov dword [ebp - 0xc08], 1
jmp 0x4639a8
mov dword [ebp - 0xc08], 0
mov edx, dword [ebp - 0x8c8]
mov dword [ebp - 0x1dcc], edx
mov eax, dword [ebp - 0xc08]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x8c8]
sub ecx, 1
mov dword [ebp - 0x8c8], ecx
mov edx, dword [ebp - 0x1dcc]
cmp edx, dword [ebp - 0x195c]
jl 0x4639e9
mov dword [ebp - 0xc10], 1
jmp 0x4639f3
mov dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x1560]
cmp eax, dword [ebp - 0xc10]
jne 0x463a0d
mov dword [ebp - 0x1248], 1
jmp 0x463a17
mov dword [ebp - 0x1248], 0
mov ecx, dword [ebp - 0x1248]
mov dword [ebp - 0x2c4], ecx
cmp dword [ebp - 0x2c4], 0x9eed
je 0x463a3b
mov dword [ebp - 0xc18], 1
jmp 0x463a45
mov dword [ebp - 0xc18], 0
cmp dword [ebp - 0xc18], 0x1597
jl 0x463a5d
mov dword [ebp - 0x16fc], 1
jmp 0x463a67
mov dword [ebp - 0x16fc], 0
mov edx, dword [ebp - 0x1c40]
cmp dword [ebp - 0x16fc], edx
jne 0x463a81