Function at 0x46fdb0
Capabilities:
Check os version
Get disk information
Hide graphical window
Query service status
Read .ini file

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x37f0
call fcn.004a86f0
push esi
push edi
mov dword [ebp - 0x9f4], 1
mov dword [ebp - 0x25d4], 0xfffffffe
mov dword [ebp - 0x25cc], 0xc02a3062
mov dword [ebp - 0xa80], 0x3e997306
mov dword [ebp - 0x184], 0
jmp 0x46fe00
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x46fe1c
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x34cc], 0x8bc07c20
jmp 0x46fdf3
mov dword [ebp - 0x184], 0
jmp 0x46fe35
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x46fe51
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x21c8], 0x4f78d7cb
jmp 0x46fe28
mov byte [ebp - 0x3de], 0
movzx eax, byte [ebp - 0x3de]
test eax, eax
je 0x46fe69
call dword [sym.imp.USER32.dll_CreatePopupMenu]
cmp dword [ebp - 0x9f4], 0
je 0x46ffcb
push 4
pop eax
shl eax, 1
xor ecx, ecx
sub ecx, dword [ebp + eax - 0x21c8]
mov eax, dword [ebp - 0xa80]
imul eax, ecx
mov ecx, dword [ebp - 0xa80]
dec ecx
mov dword [ebp - 0xa80], ecx
test eax, eax
je 0x46feae
xor eax, eax
je 0x46feae
mov dword [ebp - 0x21b0], 1
jmp 0x46feb5
and dword [ebp - 0x21b0], 0
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x1ff8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ff8]
mov dword [ebp + eax - 0x34cc], ecx
imul eax, dword [ebp - 0x21b0], 0x457
imul eax, dword [ebp - 0x1ff8]
test eax, eax
jne 0x46fef5
mov dword [ebp - 0x2274], 1
jmp 0x46fefc
and dword [ebp - 0x2274], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x21c8]
mov dword [ebp - 0x2c64], eax
cmp dword [ebp - 0x9f4], 4
jle 0x46ff24
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x21c8], 0
mov eax, dword [ebp - 0x25cc]
add eax, 0x66a0
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x21c8]
jne 0x46ff55
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x21c8], 0
jne 0x46ff55
and dword [ebp - 0x2000], 0
jmp 0x46ff5f
mov dword [ebp - 0x2000], 1
cmp dword [ebp - 0x2000], 0x693009c
jle 0x46ff77
mov dword [ebp - 0x2008], 1
jmp 0x46ff7e
and dword [ebp - 0x2008], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x21c8]
imul eax, dword [ebp - 0x2008]
test eax, eax
je 0x46ffaa
mov eax, 0xfffa
test eax, eax
je 0x46ffaa
mov dword [ebp - 0x2010], 1
jmp 0x46ffb1
and dword [ebp - 0x2010], 0
mov eax, dword [ebp - 0x9f4]
cmp dword [ebp - 0x2010], eax
jl 0x46ffcb
mov dword [ebp - 0x2018], 1
jmp 0x46ffd2
and dword [ebp - 0x2018], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c8]
add eax, dword [ebp - 0x2018]
cmp eax, 1
jbe 0x46fff6
mov dword [ebp - 0x2020], 1
jmp 0x46fffd
and dword [ebp - 0x2020], 0
mov eax, dword [ebp - 0x2020]
mov dword [ebp - 0x25d4], eax
mov dword [ebp - 0x12c], 0x72ba29f5
mov dword [ebp - 0x9fc], 0
jmp 0x47002c
mov eax, dword [ebp - 0x9fc]
inc eax
mov dword [ebp - 0x9fc], eax
cmp dword [ebp - 0x9fc], 3
jge 0x470048
mov eax, dword [ebp - 0x9fc]
mov dword [ebp + eax*4 - 0x5f0], 0xfffffff7
jmp 0x47001f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5f0]
cmp dword [ebp - 0x12c], eax
je 0x470071
mov eax, 0x9cd3
test eax, eax
je 0x470071
mov dword [ebp - 0x2028], 1
jmp 0x470078
and dword [ebp - 0x2028], 0
imul eax, dword [ebp - 0x2028], 0xd0e
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x5f0]
jg 0x47009d
mov dword [ebp - 0x25dc], 1
jmp 0x4700a4
and dword [ebp - 0x25dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f0]
mov dword [ebp - 0x2ce8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f0]
mov dword [ebp - 0x2cf0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f0]
mov dword [ebp - 0x2cf8], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x5f0]
cmp dword [ebp + eax - 0x5f0], ecx
je 0x470105
mov dword [ebp - 0x2030], 1
jmp 0x47010c
and dword [ebp - 0x2030], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f0]
imul eax, dword [ebp - 0x2030]
test eax, eax
je 0x470139
cmp dword [ebp - 0x12c], 0
je 0x470139
mov dword [ebp - 0x2038], 1
jmp 0x470140
and dword [ebp - 0x2038], 0
cmp dword [ebp - 0x2038], 1
je 0x470155
mov dword [ebp - 0x2040], 1
jmp 0x47015c
and dword [ebp - 0x2040], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f0]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x5f0]
cmp eax, dword [ebp - 0x2040]
jne 0x47018b
mov dword [ebp - 0x2048], 1
jmp 0x470192
and dword [ebp - 0x2048], 0
cmp dword [ebp - 0x2048], 4
ja 0x4703f8
mov dword [ebp - 0x2050], 0xffff
mov dword [ebp - 0x2634], 0xabe3335a
mov dword [ebp - 0xa04], 0
jmp 0x4701cc
mov eax, dword [ebp - 0xa04]
inc eax
mov dword [ebp - 0xa04], eax
cmp dword [ebp - 0xa04], 2
jge 0x4701e8
mov eax, dword [ebp - 0xa04]
mov dword [ebp + eax*4 - 0x2e14], 0x6e16511c
jmp 0x4701bf
mov dword [ebp - 0x12c], 0
jmp 0x470201
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xa
jle 0x4703f6
mov dword [ebp - 0x5bc], 0x6cad
mov dword [ebp - 0x262c], 0xffffffff
mov dword [ebp - 0xa0c], 0
jmp 0x47023b
mov eax, dword [ebp - 0xa0c]
inc eax
mov dword [ebp - 0xa0c], eax
cmp dword [ebp - 0xa0c], 2
jge 0x470257
mov eax, dword [ebp - 0xa0c]
mov dword [ebp + eax*4 - 0x2e20], 0xfffffffd
jmp 0x47022e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5f0], 0
jne 0x470273
mov dword [ebp - 0x261c], 1
jmp 0x47027a
and dword [ebp - 0x261c], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0xb94], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb94]
mov dword [ebp + eax - 0x2e14], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb94]
mov dword [ebp + eax - 0x5f0], ecx
mov eax, dword [ebp - 0x2050]
cmp eax, dword [ebp - 0xb94]
jg 0x4702c6
mov dword [ebp - 0x20fc], 1
jmp 0x4702cd
and dword [ebp - 0x20fc], 0
mov eax, dword [ebp - 0x2050]
cmp eax, dword [ebp - 0x20fc]
je 0x4702e7
mov dword [ebp - 0x2624], 1
jmp 0x4702ee
and dword [ebp - 0x2624], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x2d00], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f0]
mov dword [ebp - 0x2d08], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5f0]
mov dword [ebp - 0x2d10], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5f0]
sub eax, dword [ebp - 0x5bc]
imul eax, dword [ebp - 0x5bc]
cmp eax, 0x4015
jne 0x47034d
xor eax, eax
jne 0x47034d
and dword [ebp - 0x2104], 0
jmp 0x470357
mov dword [ebp - 0x2104], 1
imul eax, dword [ebp - 0x2104], 0x4ba4
imul eax, dword [ebp - 0x5bc]
add eax, 3
cmp eax, 0x1d84
jge 0x47037e
mov dword [ebp - 0x210c], 1
jmp 0x470385
and dword [ebp - 0x210c], 0
cmp dword [ebp - 0x210c], 0xfffffff8
jge 0x47039a
mov dword [ebp - 0x2114], 1
jmp 0x4703a1
and dword [ebp - 0x2114], 0
mov eax, dword [ebp - 0x2114]
sub eax, 0xb133
mov dword [ebp - 0x262c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2e20]
cmp dword [ebp + eax - 0x5f0], ecx
je 0x4703da
mov dword [ebp - 0x211c], 1
jmp 0x4703e1
and dword [ebp - 0x211c], 0
imul eax, dword [ebp - 0x211c], 0xd67
mov dword [ebp - 0x2634], eax
jmp 0x4701f4
jmp 0x470440
mov dword [ebp - 0x12c], 0
jmp 0x470411
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jg 0x470440
mov byte [ebp - 0x3a7], 0
movzx eax, byte [ebp - 0x3a7]
test eax, eax
je 0x47043e
push 0
push 0x21e4
push 0x1bf0
call dword [sym.imp.GDI32.dll_CreatePen]
jmp 0x470404
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5f0], 4
mov dword [ebp - 0x5f4], 1
mov dword [ebp - 0x2654], 0x370cc321
mov dword [ebp - 0x5f4], 0xd
jmp 0x47047e
mov eax, dword [ebp - 0x5f4]
dec eax
mov dword [ebp - 0x5f4], eax
cmp dword [ebp - 0x5f4], 0xfffffffb
jg 0x470654
mov dword [ebp - 0x5c4], 1
mov dword [ebp - 0xb9c], 0xfffffff8
mov dword [ebp - 0x264c], 7
xor eax, eax
je 0x4704dd
mov byte [ebp - 0x3c3], 0
movzx eax, byte [ebp - 0x3c3]
test eax, eax
je 0x4704d8
push 1
push 0x1070
push 0x794
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemInt]
jmp 0x470643
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x2134], 0xd8ff8cd3
mov dword [ebp - 0x209c], 0x4ccbb24a
mov eax, dword [ebp - 0x5c4]
cmp dword [ebp - 0x3e4], eax
jne 0x470515
mov dword [ebp - 0x2124], 1
jmp 0x47051c
and dword [ebp - 0x2124], 0
cmp dword [ebp - 0x2124], 0
jne 0x470531
mov dword [ebp - 0x263c], 1
jmp 0x470538
and dword [ebp - 0x263c], 0
mov eax, dword [ebp - 0x5c4]
cmp dword [ebp - 0x3e4], eax
jl 0x470552
mov dword [ebp - 0x212c], 1
jmp 0x470559
and dword [ebp - 0x212c], 0
mov eax, dword [ebp - 0x212c]
mov dword [ebp - 0x2134], eax
mov eax, dword [ebp - 0x5c4]
cmp dword [ebp - 0x2134], eax
jle 0x47057f
mov dword [ebp - 0x213c], 1
jmp 0x470586
and dword [ebp - 0x213c], 0
mov eax, dword [ebp - 0x213c]
inc eax
sub eax, dword [ebp - 0x3e4]
mov dword [ebp - 0xb9c], eax
mov eax, dword [ebp - 0x5c4]
cmp dword [ebp - 0xb9c], eax
jge 0x4705b3
mov dword [ebp - 0x21bc], 1
jmp 0x4705ba
and dword [ebp - 0x21bc], 0
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0x21bc], eax
jge 0x4705d4
mov dword [ebp - 0x21a8], 1
jmp 0x4705db
and dword [ebp - 0x21a8], 0
mov eax, dword [ebp - 0x21a8]
neg eax
cmp eax, dword [ebp - 0x3e4]
jg 0x4705f7
mov dword [ebp - 0x2644], 1
jmp 0x4705fe
and dword [ebp - 0x2644], 0
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x2d18], eax
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0xb9c], eax
jge 0x470624
mov dword [ebp - 0x2138], 1
jmp 0x47062b
and dword [ebp - 0x2138], 0
mov eax, dword [ebp - 0x2138]
mov dword [ebp - 0x209c], eax
mov eax, dword [ebp - 0x209c]
mov dword [ebp - 0x264c], eax
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x2654], eax
jmp 0x470471
mov dword [ebp - 0x684], 1
mov dword [ebp - 0xa1c], 0x69fdf99f
mov dword [ebp - 0x1c40], 0xc164f943
mov dword [ebp - 0xa14], 0
jmp 0x47068b
mov eax, dword [ebp - 0xa14]
inc eax
mov dword [ebp - 0xa14], eax
cmp dword [ebp - 0xa14], 1
jge 0x4706a7
mov eax, dword [ebp - 0xa14]
mov dword [ebp + eax*4 - 0xa2c], 0xbacd7953
jmp 0x47067e
mov dword [ebp - 0xa1c], 0xc
jmp 0x4706c0
mov eax, dword [ebp - 0xa1c]
inc eax
mov dword [ebp - 0xa1c], eax
cmp dword [ebp - 0xa1c], 0x16
jge 0x47097d
mov dword [ebp - 0xc5c], 1
mov dword [ebp - 0xc58], 1
mov dword [ebp - 0xc54], 1
mov dword [ebp - 0xc50], 1
mov dword [ebp - 0xa24], 0
jmp 0x47070e
mov eax, dword [ebp - 0xa24]
inc eax
mov dword [ebp - 0xa24], eax
cmp dword [ebp - 0xa24], 2
jge 0x47072a
mov eax, dword [ebp - 0xa24]
mov dword [ebp + eax*4 - 0x2e2c], 0x1362395e
jmp 0x470701
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc5c], 0
jmp 0x470758
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc5c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc5c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc5c], 0
jl 0x470957
mov dword [ebp - 0x240], 0xf1813f1a
mov dword [ebp - 0xcbc], 0xfffffff9
mov dword [ebp - 0x265c], 0xf2f34e40
mov dword [ebp - 0x240], 0
jmp 0x4707a3
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jg 0x4707c6
mov byte [ebp - 0x3a9], 0
movzx eax, byte [ebp - 0x3a9]
test eax, eax
je 0x4707c4
call dword [sym.imp.USER32.dll_DestroyCaret]
jmp 0x470796
mov dword [ebp - 0x240], 0
jmp 0x4707df
mov eax, dword [ebp - 0x240]
dec eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jl 0x470952
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc5c]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xc5c]
mov eax, dword [ebp + eax*4 - 0xa2c]
sub eax, dword [ebp + ecx*4 - 0xa2c]
mov dword [ebp - 0x1c38], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c38]
mov dword [ebp + eax - 0x2e2c], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc5c]
cmp eax, dword [ebp - 0x1c38]
jge 0x47084e
mov dword [ebp - 0xca4], 1
jmp 0x470855
and dword [ebp - 0xca4], 0
mov eax, dword [ebp - 0xca4]
mov dword [ebp - 0x1c40], eax
cmp dword [ebp - 0x1c40], 0x7806aa1c
jne 0x470879
mov dword [ebp - 0xcac], 1
jmp 0x470880
and dword [ebp - 0xcac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc5c]
mov eax, dword [ebp + eax*4 - 0xa2c]
cmp dword [ebp - 0xcac], eax
jg 0x4708a8
mov dword [ebp - 0x1c48], 1
jmp 0x4708af
and dword [ebp - 0x1c48], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc5c]
mov eax, dword [ebp + eax*4 - 0xa2c]
add eax, dword [ebp - 0x1c48]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xc5c]
jne 0x4708e3
mov dword [ebp - 0xcb4], 1
jmp 0x4708ea
and dword [ebp - 0xcb4], 0
mov eax, dword [ebp - 0xcb4]
neg eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xc5c]
jl 0x47090d
mov dword [ebp - 0x1c50], 1
jmp 0x470914
and dword [ebp - 0x1c50], 0
mov eax, dword [ebp - 0x1c50]
mov dword [ebp - 0xcbc], eax
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0xcbc], eax
jg 0x47093a
mov dword [ebp - 0x1c58], 1
jmp 0x470941
and dword [ebp - 0x1c58], 0
mov eax, dword [ebp - 0x1c58]
mov dword [ebp - 0x265c], eax
jmp 0x4707d2
jmp 0x47073d
mov byte [ebp - 0x3d1], 0
movzx eax, byte [ebp - 0x3d1]
test eax, eax
je 0x470978
push 0x13b7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x4706b3
mov dword [ebp - 0xa4], 0x10c93b4e
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0xa34], 0
jmp 0x4709aa
mov eax, dword [ebp - 0xa34]
inc eax
mov dword [ebp - 0xa34], eax
cmp dword [ebp - 0xa34], 2
jge 0x4709c6
mov eax, dword [ebp - 0xa34]
mov dword [ebp + eax*4 - 0x2e38], 0x778e10a3
jmp 0x47099d
mov dword [ebp - 0xa4], 0
jmp 0x4709df
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xfffffff8
jg 0x470bf3
mov dword [ebp - 0x9b8], 0xf13e
mov dword [ebp - 0xcd4], 0xfffffff7
mov dword [ebp - 0xa3c], 0
jmp 0x470a19
mov eax, dword [ebp - 0xa3c]
inc eax
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 1
jge 0x470a35
mov eax, dword [ebp - 0xa3c]
mov dword [ebp + eax*4 - 0x5fc], 0xffffffff
jmp 0x470a0c
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x2d20], eax
mov dword [ebp - 0x9b8], 0x87a7525d
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x9b8]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
add eax, dword [ebp - 0xa4]
jne 0x470ac3
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x2d28], eax
cmp dword [ebp - 0x9b8], 0
jne 0x470a89
cmp dword [ebp - 0xa4], 0
je 0x470a9e
cmp dword [ebp - 0x9b8], 0
je 0x470a9e
mov dword [ebp - 0x2664], 1
jmp 0x470aa5
and dword [ebp - 0x2664], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x2d30], eax
mov eax, 0x1846
test eax, eax
jne 0x470ac3
and dword [ebp - 0xcc4], 0
jmp 0x470acd
mov dword [ebp - 0xcc4], 1
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xcc4], eax
jge 0x470ae7
mov dword [ebp - 0x1c60], 1
jmp 0x470aee
and dword [ebp - 0x1c60], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5fc]
cmp dword [ebp - 0x1c60], eax
jl 0x470b0f
mov dword [ebp - 0xccc], 1
jmp 0x470b16
and dword [ebp - 0xccc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5fc]
cmp dword [ebp - 0xccc], eax
je 0x470b47
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5fc], 0
je 0x470b47
mov dword [ebp - 0x1c68], 1
jmp 0x470b4e
and dword [ebp - 0x1c68], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x1c68], eax
jg 0x470b68
mov dword [ebp - 0xba4], 1
jmp 0x470b6f
and dword [ebp - 0xba4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xba4]
mov dword [ebp + eax - 0x5fc], ecx
mov eax, dword [ebp - 0xcd4]
cmp dword [ebp - 0xba4], eax
jl 0x470b9c
mov dword [ebp - 0x266c], 1
jmp 0x470ba3
and dword [ebp - 0x266c], 0
mov eax, dword [ebp - 0xcd4]
mov dword [ebp - 0x2d38], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5fc], 0
je 0x470bd4
cmp dword [ebp - 0x2b8], 0
je 0x470bd4
mov dword [ebp - 0x1c70], 1
jmp 0x470bdb
and dword [ebp - 0x1c70], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c70]
mov dword [ebp + eax - 0x2e38], ecx
jmp 0x4709d2
mov dword [ebp - 0x2b8], 0xd
jmp 0x470c0c
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0xd
je 0x470c2c
mov dword [ebp - 0x2674], 0x213ed423
cmp dword [ebp - 0x2674], 0
je 0x470c2a
jmp 0x470c2c
jmp 0x470bff
mov dword [ebp - 0x2854], 0xfffffffe
mov dword [ebp - 0x4b8], 7
mov dword [ebp - 0x2d40], 2
mov dword [ebp - 0x2d48], 0
mov dword [ebp - 0xcdc], 0
mov dword [ebp - 0x2d50], 0xfffffff6
mov dword [ebp - 0x2d58], 0xa8cf1d65
mov dword [ebp - 0x2d60], 0
mov dword [ebp - 0x624], 0
jmp 0x470c95
mov eax, dword [ebp - 0x624]
inc eax
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 3
jge 0x470cb1
mov eax, dword [ebp - 0x624]
mov dword [ebp + eax*4 - 0x35b0], 0xd8e5ccc9
jmp 0x470c88
mov dword [ebp - 0x4b8], 1
cmp dword [ebp - 0x4b8], 0
je 0x470d79
mov dword [ebp - 0x4b8], 0
jmp 0x470ce1
mov eax, dword [ebp - 0x4b8]
inc eax
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 2
jg 0x470d5c
mov dword [ebp - 0x920], 0xfffffffc
mov dword [ebp - 0x920], 2
jmp 0x470d0d
mov eax, dword [ebp - 0x920]
dec eax
mov dword [ebp - 0x920], eax
cmp dword [ebp - 0x920], 0
jl 0x470d57
mov dword [ebp - 0x5b4], 5
mov dword [ebp - 0x5b4], 0
jmp 0x470d39
mov eax, dword [ebp - 0x5b4]
inc eax
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 3
jge 0x470d55
mov eax, dword [ebp - 0x5b4]
mov dword [ebp + eax*4 - 0x35b0], 0
jmp 0x470d2c
jmp 0x470d00
jmp 0x470cd4
mov byte [ebp - 0x28a], 0
movzx eax, byte [ebp - 0x28a]
test eax, eax
je 0x470d74
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
jmp 0x470e13
mov dword [ebp - 0x295c], 0xad7d711e
mov dword [ebp - 0x2958], 0xad7d711e
mov dword [ebp - 0x2954], 0xad7d711e
mov dword [ebp - 0x2950], 0xad7d711e
mov dword [ebp - 0x2d68], 0x5954
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x295c]
mov dword [ebp - 0xcdc], eax
cmp dword [ebp - 0xcdc], 1
jl 0x470dd2
mov dword [ebp - 0x1c78], 1
jmp 0x470dd9
and dword [ebp - 0x1c78], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x295c]
cmp dword [ebp - 0x1c78], eax
jg 0x470dfa
mov dword [ebp - 0xce4], 1
jmp 0x470e01
and dword [ebp - 0xce4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xce4]
mov dword [ebp + eax - 0x295c], ecx
mov dword [ebp - 0x254], 9
mov dword [ebp - 0xa10], 0xfffffffe
mov dword [ebp - 0x1cb0], 0x2cbd4dae
mov dword [ebp - 0x1cc8], 0xd54b
mov dword [ebp - 0x269c], 0xffffffff
mov dword [ebp - 0x4c], 0
jmp 0x470e55
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x470e6b
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x293c], 0x4ec2e0cf
jmp 0x470e4e
mov dword [ebp - 0x4c], 0
jmp 0x470e7b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x470e91
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x2238], 0xde9829cb
jmp 0x470e74
mov dword [ebp - 0x4c], 0
jmp 0x470ea1
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x470eb7
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x2694], 0
jmp 0x470e9a
mov dword [ebp - 0x254], 3
jmp 0x470ed0
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jl 0x4710f4
mov dword [ebp - 0x2c0], 0x532bb11a
mov dword [ebp - 0x268c], 0x475761ac
mov dword [ebp - 0x2c0], 0
jmp 0x470f0a
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 3
jg 0x4710ef
mov dword [ebp - 0x267c], 0xf08700d3
mov dword [ebp - 0x2684], 0xfffffff7
mov byte [ebp - 0x28c], 0
movzx eax, byte [ebp - 0x28c]
test eax, eax
je 0x470f53
push 1
push 0
push 0x9a8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollInfo]
cmp dword [ebp - 0x254], 0
je 0x470f90
cmp dword [ebp - 0x2c0], 0
je 0x470f71
mov dword [ebp - 0x1c80], 1
jmp 0x470f78
and dword [ebp - 0x1c80], 0
cmp dword [ebp - 0x1c80], 0x4475
jle 0x470f90
mov dword [ebp - 0xcec], 1
jmp 0x470f97
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0xcec]
inc eax
inc eax
cmp eax, dword [ebp - 0x254]
jg 0x470fb3
mov dword [ebp - 0x1c88], 1
jmp 0x470fba
and dword [ebp - 0x1c88], 0
cmp dword [ebp - 0x1c88], 0xfffffffa
jge 0x470fcf
mov dword [ebp - 0xcf4], 1
jmp 0x470fd6
and dword [ebp - 0xcf4], 0
mov eax, dword [ebp - 0x2c0]
mov eax, dword [ebp + eax*4 - 0x293c]
cmp eax, dword [ebp - 0xcf4]
je 0x470ff7
mov dword [ebp - 0x1c90], 1
jmp 0x470ffe
and dword [ebp - 0x1c90], 0
mov eax, dword [ebp - 0x2c0]
mov eax, dword [ebp + eax*4 - 0x293c]
cmp dword [ebp - 0x1c90], eax
jne 0x47101f
mov dword [ebp - 0xcfc], 1
jmp 0x471026
and dword [ebp - 0xcfc], 0
mov eax, dword [ebp - 0xa10]
cmp dword [ebp - 0xcfc], eax
jne 0x471040
mov dword [ebp - 0x1c98], 1
jmp 0x471047
and dword [ebp - 0x1c98], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x293c]
cmp dword [ebp - 0x1c98], eax
jle 0x471071
mov eax, 0x16aa
test eax, eax
je 0x471071
mov dword [ebp - 0xd04], 1
jmp 0x471078
and dword [ebp - 0xd04], 0
cmp dword [ebp - 0xd04], 0x53526c71
jge 0x471090
mov dword [ebp - 0x1ca0], 1
jmp 0x471097
and dword [ebp - 0x1ca0], 0
mov eax, dword [ebp - 0x1ca0]
mov dword [ebp - 0x267c], eax
mov eax, dword [ebp - 0x2684]
mov dword [ebp - 0xd0c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd0c]
mov dword [ebp + eax - 0x2238], ecx
cmp dword [ebp - 0xd0c], 0xffffffff
jl 0x4710d7
mov dword [ebp - 0x1ca8], 1
jmp 0x4710de
and dword [ebp - 0x1ca8], 0
mov eax, dword [ebp - 0x1ca8]
mov dword [ebp - 0x268c], eax
jmp 0x470efd
jmp 0x470ec3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2238]
mov dword [ebp - 0x254], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2238]
cmp eax, dword [ebp - 0x254]
jl 0x471128
mov dword [ebp - 0xd14], 1
jmp 0x47112f
and dword [ebp - 0xd14], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x293c]
cmp dword [ebp - 0xd14], eax
jge 0x471150
mov dword [ebp - 0xd1c], 1
jmp 0x471157
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x1cb0], eax
mov eax, dword [ebp - 0x1cb0]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x2238]
mov eax, dword [ebp - 0xa10]
add eax, dword [ebp - 0xd1c]
cmp eax, 1
je 0x471193
mov dword [ebp - 0x1cb8], 1
jmp 0x47119a
and dword [ebp - 0x1cb8], 0
cmp dword [ebp - 0x1cb8], 0x70d8ac50
jle 0x4711b2
mov dword [ebp - 0xd24], 1
jmp 0x4711b9
and dword [ebp - 0xd24], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2238]
cmp dword [ebp - 0xd24], eax
jle 0x4711da
mov dword [ebp - 0x62c], 1
jmp 0x4711e1
and dword [ebp - 0x62c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x62c]
mov dword [ebp + eax - 0x2238], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x62c]
mov dword [ebp + eax - 0x2694], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x293c]
cmp dword [ebp - 0x62c], eax
jne 0x471227
mov dword [ebp - 0x1cc0], 1
jmp 0x47122e
and dword [ebp - 0x1cc0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x293c]
cmp dword [ebp - 0x1cc0], eax
jge 0x47124f
mov dword [ebp - 0xd2c], 1
jmp 0x471256
and dword [ebp - 0xd2c], 0
mov eax, dword [ebp - 0xd2c]
mov dword [ebp - 0x1cc8], eax
cmp dword [ebp - 0x1cc8], 0
je 0x471277
mov dword [ebp - 0xd34], 1
jmp 0x47127e
and dword [ebp - 0xd34], 0
mov eax, dword [ebp - 0xa10]
cmp dword [ebp - 0xd34], eax
jg 0x471298
mov dword [ebp - 0x1cd0], 1
jmp 0x47129f
and dword [ebp - 0x1cd0], 0
mov eax, dword [ebp - 0x1cd0]
mov dword [ebp - 0x269c], eax
mov dword [ebp - 0x284c], 0xc02a3062
mov dword [ebp - 0xc24], 0x3e997306
mov dword [ebp - 0x4c0], 7
mov dword [ebp - 0x2d70], 2
mov dword [ebp - 0x2d78], 0
mov dword [ebp - 0xd3c], 0
mov dword [ebp - 0x2d80], 0xfffffff6
mov dword [ebp - 0x2d88], 0xa8cf1d65
mov dword [ebp - 0x2d90], 0
mov dword [ebp - 0x634], 0
jmp 0x47131e
mov eax, dword [ebp - 0x634]
inc eax
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x634], 3
jge 0x47133a
mov eax, dword [ebp - 0x634]
mov dword [ebp + eax*4 - 0x3550], 0xd8e5ccc9
jmp 0x471311
mov dword [ebp - 0x4c0], 1
cmp dword [ebp - 0x4c0], 0
je 0x471402
mov dword [ebp - 0x4c0], 0
jmp 0x47136a
mov eax, dword [ebp - 0x4c0]
inc eax
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 2
jg 0x4713e5
mov dword [ebp - 0x928], 0xfffffffc
mov dword [ebp - 0x928], 2
jmp 0x471396
mov eax, dword [ebp - 0x928]
dec eax
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0x928], 0
jl 0x4713e0
mov dword [ebp - 0x570], 5
mov dword [ebp - 0x570], 0
jmp 0x4713c2
mov eax, dword [ebp - 0x570]
inc eax
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 3
jge 0x4713de
mov eax, dword [ebp - 0x570]
mov dword [ebp + eax*4 - 0x3550], 0
jmp 0x4713b5
jmp 0x471389
jmp 0x47135d
mov byte [ebp - 0x28e], 0
movzx eax, byte [ebp - 0x28e]
test eax, eax
je 0x4713fd
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
jmp 0x47149c
mov dword [ebp - 0x28ec], 0xad7d711e
mov dword [ebp - 0x28e8], 0xad7d711e
mov dword [ebp - 0x28e4], 0xad7d711e
mov dword [ebp - 0x28e0], 0xad7d711e
mov dword [ebp - 0x2d98], 0x5954
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x28ec]
mov dword [ebp - 0xd3c], eax
cmp dword [ebp - 0xd3c], 1
jl 0x47145b
mov dword [ebp - 0x1cd8], 1
jmp 0x471462
and dword [ebp - 0x1cd8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x28ec]
cmp dword [ebp - 0x1cd8], eax
jg 0x471483
mov dword [ebp - 0xd44], 1
jmp 0x47148a
and dword [ebp - 0xd44], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xd44]
mov dword [ebp + eax - 0x28ec], ecx
mov dword [ebp - 0x24], 8
mov dword [ebp - 0xcc], 0xfa8f
mov dword [ebp - 0x4e8], 0xc6606a86
mov dword [ebp - 0xbb4], 0xffffffff
mov dword [ebp - 0x63c], 0
jmp 0x4714da
mov eax, dword [ebp - 0x63c]
inc eax
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 3
jge 0x4714f6
mov eax, dword [ebp - 0x63c]
mov dword [ebp + eax*4 - 0xa4c], 0xfffffffe
jmp 0x4714cd
mov dword [ebp - 0x24], 0
jmp 0x471506
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe2
je 0x471703
mov dword [ebp - 0xbac], 1
mov dword [ebp - 0x26b4], 0x7d6c5051
mov dword [ebp - 0x9c0], 0
jmp 0x47153d
mov eax, dword [ebp - 0x9c0]
inc eax
mov dword [ebp - 0x9c0], eax
cmp dword [ebp - 0x9c0], 1
jge 0x471559
mov eax, dword [ebp - 0x9c0]
mov dword [ebp + eax*4 - 0x27c], 0xd5befa1e
jmp 0x471530
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0x2da0], eax
cmp dword [ebp - 0x24], 0xfff6
jne 0x47157a
mov dword [ebp - 0x1ce0], 1
jmp 0x471581
and dword [ebp - 0x1ce0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
cmp eax, dword [ebp - 0x1ce0]
jge 0x4715a2
mov dword [ebp - 0x26a4], 1
jmp 0x4715a9
and dword [ebp - 0x26a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
mov dword [ebp - 0x2da8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x27c]
cmp dword [ebp - 0xbac], eax
je 0x4715ea
mov dword [ebp - 0x26ac], 1
jmp 0x4715f1
and dword [ebp - 0x26ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
mov dword [ebp - 0x2db0], eax
cmp dword [ebp - 0xbac], 0
je 0x47161f
cmp dword [ebp - 0x24], 0
je 0x47161f
mov dword [ebp - 0xd4c], 1
jmp 0x471626
and dword [ebp - 0xd4c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xd4c]
jg 0x47164a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x27c], 0
jne 0x47164a
and dword [ebp - 0x1ce8], 0
jmp 0x471654
mov dword [ebp - 0x1ce8], 1
mov eax, dword [ebp - 0x26b4]
cmp dword [ebp - 0x1ce8], eax
jle 0x471670
or eax, 0xffffffff
jne 0x471670
and dword [ebp - 0xd54], 0
jmp 0x47167a
mov dword [ebp - 0xd54], 1
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xd54], eax
jle 0x471694
mov dword [ebp - 0x1cf0], 1
jmp 0x47169b
and dword [ebp - 0x1cf0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
imul eax, dword [ebp - 0x1cf0]
neg eax
cmp eax, dword [ebp - 0xcc]
jg 0x4716c5
mov dword [ebp - 0xd5c], 1
jmp 0x4716cc
and dword [ebp - 0xd5c], 0
cmp dword [ebp - 0xd5c], 0x14a3
jge 0x4716e4
mov dword [ebp - 0x1cf8], 1
jmp 0x4716eb
and dword [ebp - 0x1cf8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1cf8]
mov dword [ebp + eax - 0x27c], ecx
jmp 0x4714ff
mov dword [ebp - 0xcc], 2
jmp 0x47171c
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x471d7d
mov dword [ebp - 0x930], 0x77974d37
mov dword [ebp - 0x1d10], 0
mov dword [ebp - 0x3ec], 2
mov dword [ebp - 0xa38], 1
mov dword [ebp - 0x2db8], 0xffffffff
mov dword [ebp - 0x27b4], 0xfffffff7
mov dword [ebp - 0x644], 0
jmp 0x47177e
mov eax, dword [ebp - 0x644]
inc eax
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 1
jge 0x47179a
mov eax, dword [ebp - 0x644]
mov dword [ebp + eax*4 - 0x2dc0], 0x7691369
jmp 0x471771
mov dword [ebp - 0x24], 2
jmp 0x4717aa
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x4719f4
mov dword [ebp - 0xd6c], 0xb22489af
mov dword [ebp - 0x1d08], 0xffffffff
or eax, 0xffffffff
je 0x471961
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x930]
cmp dword [ebp + eax*4 - 0xa4c], ecx
je 0x4717f2
mov dword [ebp - 0xd64], 1
jmp 0x4717f9
and dword [ebp - 0xd64], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa4c]
cmp dword [ebp - 0xd64], eax
jne 0x471819
mov dword [ebp - 0x1d00], 1
jmp 0x471820
and dword [ebp - 0x1d00], 0
mov eax, dword [ebp - 0x1d00]
mov dword [ebp - 0xd6c], eax
mov eax, dword [ebp - 0xd6c]
imul eax, dword [ebp - 0x930]
mov dword [ebp - 0x1d08], eax
cmp dword [ebp - 0x1d08], 0
jne 0x471861
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa4c], 0
jne 0x471861
and dword [ebp - 0x26bc], 0
jmp 0x47186b
mov dword [ebp - 0x26bc], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa4c]
mov dword [ebp - 0x2dc8], eax
mov eax, dword [ebp - 0xcc]
cmp dword [ebp + eax*4 - 0xa4c], 1
jg 0x471899
mov dword [ebp - 0xd74], 1
jmp 0x4718a0
and dword [ebp - 0xd74], 0
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0xa4c]
imul eax, dword [ebp - 0xd74]
sub eax, 0x70f03a5b
mov dword [ebp - 0x1d10], eax
jne 0x4718d0
cmp dword [ebp - 0x24], 0
jne 0x4718d0
and dword [ebp - 0xd7c], 0
jmp 0x4718da
mov dword [ebp - 0xd7c], 1
mov eax, dword [ebp - 0x930]
cmp dword [ebp - 0xd7c], eax
jle 0x4718f4
mov dword [ebp - 0x1d18], 1
jmp 0x4718fb
and dword [ebp - 0x1d18], 0
cmp dword [ebp - 0x1d18], 5
jb 0x471910
mov dword [ebp - 0xd84], 1
jmp 0x471917
and dword [ebp - 0xd84], 0
cmp dword [ebp - 0xd84], 0x2e963e9b
jge 0x47192f
mov dword [ebp - 0x1d20], 1
jmp 0x471936
and dword [ebp - 0x1d20], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1d20]
sub ecx, dword [ebp + eax*4 - 0xa4c]
mov eax, dword [ebp - 0xcc]
cmp ecx, dword [ebp + eax*4 - 0xa4c]
jl 0x471961
mov dword [ebp - 0x279c], 1
jmp 0x471968
and dword [ebp - 0x279c], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xa4c]
mov dword [ebp - 0x2dd0], eax
xor eax, eax
inc eax
cmp eax, 0x4d19633e
jle 0x47198e
mov dword [ebp - 0xd8c], 1
jmp 0x471995
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0xd8c]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xa4c]
cmp eax, dword [ebp - 0x3ec]
jne 0x4719bf
mov dword [ebp - 0x1d28], 1
jmp 0x4719c6
and dword [ebp - 0x1d28], 0
cmp dword [ebp - 0x1d28], 0
jne 0x4719db
mov dword [ebp - 0xd94], 1
jmp 0x4719e2
and dword [ebp - 0xd94], 0
imul eax, dword [ebp - 0xd94], 9
mov dword [ebp - 0x4e8], eax
jmp 0x4717a3
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa4c]
sub eax, dword [ebp - 0x4e8]
cmp eax, dword [ebp - 0x3ec]
jle 0x471a1a
mov dword [ebp - 0x1d30], 1
jmp 0x471a21
and dword [ebp - 0x1d30], 0
mov eax, dword [ebp - 0xa38]
imul eax, dword [ebp - 0x1d30]
cmp eax, 0xffffffff
jg 0x471a3f
mov dword [ebp - 0xd9c], 1
jmp 0x471a46
and dword [ebp - 0xd9c], 0
cmp dword [ebp - 0xd9c], 0xffffffff
je 0x471a5b
mov dword [ebp - 0x1d38], 1
jmp 0x471a62
and dword [ebp - 0x1d38], 0
cmp dword [ebp - 0x1d38], 0xa5b821bf
je 0x471a7a
mov dword [ebp - 0xda4], 1
jmp 0x471a81
and dword [ebp - 0xda4], 0
cmp dword [ebp - 0xda4], 0x404c
jge 0x471a99
mov dword [ebp - 0x1d40], 1
jmp 0x471aa0
and dword [ebp - 0x1d40], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x1d40]
jl 0x471aba
mov dword [ebp - 0xdac], 1
jmp 0x471ac1
and dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0xdac]
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 0x414c
jl 0x471ae5
mov dword [ebp - 0x1d48], 1
jmp 0x471aec
and dword [ebp - 0x1d48], 0
mov eax, dword [ebp - 0x1d48]
mov dword [ebp - 0xa38], eax
mov eax, dword [ebp - 0xa38]
sub eax, 0x295891f9
je 0x471b21
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4c], 0
je 0x471b21
mov dword [ebp - 0x27a4], 1
jmp 0x471b28
and dword [ebp - 0x27a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa4c]
mov dword [ebp - 0x2dd8], eax
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x2de0], eax
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x2de8], eax
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0x3ec], eax
je 0x471b8d
mov byte [ebp - 0x290], 0
movzx eax, byte [ebp - 0x290]
test eax, eax
je 0x471b88
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
jmp 0x471d78
mov dword [ebp - 0x64c], 0
jmp 0x471ba6
mov eax, dword [ebp - 0x64c]
inc eax
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 2
jge 0x471bc2
mov eax, dword [ebp - 0x64c]
mov dword [ebp + eax*4 - 0xc64], 9
jmp 0x471b99
mov byte [ebp - 0x292], 0
movzx eax, byte [ebp - 0x292]
test eax, eax
je 0x471bed
push 0x1fb2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc64]
mov dword [ebp - 0x2df0], eax
mov eax, 0xc9af00af
test eax, eax
je 0x471c42
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc64]
sub eax, dword [ebp - 0x4e8]
mov ecx, dword [ebp - 0xbb4]
imul ecx, eax
mov eax, dword [ebp - 0xbb4]
dec eax
mov dword [ebp - 0xbb4], eax
test ecx, ecx
je 0x471c42
mov dword [ebp - 0x27ac], 1
jmp 0x471c49
and dword [ebp - 0x27ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc64]
mov dword [ebp - 0x2df8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc64]
mov dword [ebp - 0x2e00], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc64]
mov dword [ebp - 0x2e08], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa4c], 0x8f5970fb
jbe 0x471ca0
mov dword [ebp - 0xdb4], 1
jmp 0x471ca7
and dword [ebp - 0xdb4], 0
mov eax, dword [ebp - 0xa38]
cmp dword [ebp - 0xdb4], eax
jg 0x471cc1
mov dword [ebp - 0x1d50], 1
jmp 0x471cc8
and dword [ebp - 0x1d50], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc64]
cmp dword [ebp - 0x1d50], eax
je 0x471ce9
mov dword [ebp - 0xdbc], 1
jmp 0x471cf0
and dword [ebp - 0xdbc], 0
cmp dword [ebp - 0xdbc], 0x9369
je 0x471d08
mov dword [ebp - 0x1d58], 1
jmp 0x471d0f
and dword [ebp - 0x1d58], 0
cmp dword [ebp - 0x1d58], 0x7bc7
je 0x471d27
mov dword [ebp - 0xdc4], 1
jmp 0x471d2e
and dword [ebp - 0xdc4], 0
mov eax, dword [ebp - 0x27b4]
cmp dword [ebp - 0xdc4], eax
jne 0x471d48
mov dword [ebp - 0x1d60], 1
jmp 0x471d4f
and dword [ebp - 0x1d60], 0
cmp dword [ebp - 0x1d60], 1
jne 0x471d68
xor eax, eax
je 0x471d68
mov dword [ebp - 0xdcc], 1
jmp 0x471d6f
and dword [ebp - 0xdcc], 0
mov eax, dword [ebp - 0xdcc]
mov dword [ebp - 0x24], eax
jmp 0x47170f
mov dword [ebp - 0x18c], 0
jmp 0x471d96
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jge 0x471db2
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x34e4], 0x8bc07c20
jmp 0x471d89
mov dword [ebp - 0x45c], 0xc90a
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x10c], 0xf889
mov dword [ebp - 0xc04], 9
mov dword [ebp - 0x3f4], 0xf1571c09
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x300c], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x3014], eax
mov eax, dword [ebp - 0xc04]
cmp dword [ebp - 0x10c], eax
je 0x471e16
mov dword [ebp - 0x1d68], 1
jmp 0x471e1d
and dword [ebp - 0x1d68], 0
cmp dword [ebp - 0x1d68], 0x89f4
je 0x471e35
mov dword [ebp - 0xdd4], 1
jmp 0x471e3c
and dword [ebp - 0xdd4], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0xdd4]
je 0x471e66
xor eax, eax
je 0x471e66
mov dword [ebp - 0x1d70], 1
jmp 0x471e6d
and dword [ebp - 0x1d70], 0
cmp dword [ebp - 0x1d70], 0
ja 0x471e82
mov dword [ebp - 0xddc], 1
jmp 0x471e89
and dword [ebp - 0xddc], 0
mov eax, dword [ebp - 0x45c]
imul eax, dword [ebp - 0xddc]
cmp eax, dword [ebp - 0xc04]
je 0x471eaa
mov dword [ebp - 0x1d78], 1
jmp 0x471eb1
and dword [ebp - 0x1d78], 0
mov eax, dword [ebp - 0x1d78]
sub eax, dword [ebp - 0xc04]
cmp eax, dword [ebp - 0x3f4]
jle 0x471ed1
mov dword [ebp - 0xde4], 1
jmp 0x471ed8
and dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0xde4]
jl 0x471ef2
mov dword [ebp - 0x27bc], 1
jmp 0x471ef9
and dword [ebp - 0x27bc], 0
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x472436
mov dword [ebp - 0xe34], 0xc924dfb4
mov dword [ebp - 0x654], 0
jmp 0x471f27
mov eax, dword [ebp - 0x654]
inc eax
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 2
jge 0x471f43
mov eax, dword [ebp - 0x654]
mov dword [ebp + eax*4 - 0x604], 0xfffffff9
jmp 0x471f1a
mov dword [ebp - 0x10c], 0
jmp 0x471f5c
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jg 0x472434
mov dword [ebp - 0x27cc], 7
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10c]
cmp dword [ebp + eax - 0x604], ecx
je 0x471f94
mov dword [ebp - 0x1d80], 1
jmp 0x471f9b
and dword [ebp - 0x1d80], 0
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp + eax*4 - 0x604]
cmp dword [ebp - 0x1d80], eax
jle 0x471fbc
mov dword [ebp - 0xdec], 1
jmp 0x471fc3
and dword [ebp - 0xdec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x604]
cmp dword [ebp - 0xdec], eax
jge 0x471fe4
mov dword [ebp - 0x1d88], 1
jmp 0x471feb
and dword [ebp - 0x1d88], 0
mov dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d88]
sub ecx, 0xfffb
mov edx, dword [ebp - 0x14c]
sub edx, ecx
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ebp + ecx*4 - 0x604]
add ecx, edx
cmp ecx, dword [ebp + eax - 0x604]
jl 0x472033
mov dword [ebp - 0x27c4], 1
jmp 0x47203a
and dword [ebp - 0x27c4], 0
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp + eax*4 - 0x604]
mov dword [ebp - 0x301c], eax
xor eax, eax
inc eax
cmp eax, 0x9c4a
jne 0x472063
mov dword [ebp - 0xdf4], 1
jmp 0x47206a
and dword [ebp - 0xdf4], 0
cmp dword [ebp - 0xdf4], 0xff18ee85
jne 0x472082
mov dword [ebp - 0x1d90], 1
jmp 0x472089
and dword [ebp - 0x1d90], 0
cmp dword [ebp - 0x1d90], 0
je 0x47233d
mov dword [ebp - 0xc0c], 0xf874
mov dword [ebp - 0x27dc], 0xa766e9b1
mov dword [ebp - 0x3024], 6
mov dword [ebp - 0x14c], 1
jmp 0x4720cd
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jl 0x472265
mov dword [ebp - 0x27d4], 0xfffffff8
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp + eax*4 - 0x604]
mov dword [ebp - 0x302c], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x604], 0xad97
mov eax, 0xad97
test eax, eax
jne 0x47211d
mov dword [ebp - 0xdfc], 1
jmp 0x472124
and dword [ebp - 0xdfc], 0
cmp dword [ebp - 0xdfc], 0xba9ac04b
ja 0x47214c
mov eax, dword [ebp - 0x10c]
cmp dword [ebp + eax*4 - 0x604], 0
je 0x47214c
mov dword [ebp - 0x1d98], 1
jmp 0x472153
and dword [ebp - 0x1d98], 0
mov eax, dword [ebp - 0xc0c]
cmp dword [ebp - 0x1d98], eax
jl 0x47216d
mov dword [ebp - 0xe04], 1
jmp 0x472174
and dword [ebp - 0xe04], 0
cmp dword [ebp - 0xe04], 0
jl 0x472189
mov dword [ebp - 0x1da0], 1
jmp 0x472190
and dword [ebp - 0x1da0], 0
mov eax, dword [ebp - 0xe34]
cmp dword [ebp - 0x1da0], eax
jne 0x4721aa
mov dword [ebp - 0xe0c], 1
jmp 0x4721b1
and dword [ebp - 0xe0c], 0
cmp dword [ebp - 0xe0c], 0x760e
je 0x4721c9
mov dword [ebp - 0x1da8], 1
jmp 0x4721d0
and dword [ebp - 0x1da8], 0
mov eax, dword [ebp - 0xc0c]
imul eax, dword [ebp - 0x1da8]
cmp eax, 1
jb 0x4721ee
mov dword [ebp - 0xe14], 1
jmp 0x4721f5
and dword [ebp - 0xe14], 0
mov eax, dword [ebp - 0x27cc]
cmp dword [ebp - 0x27d4], eax
jge 0x47220f
mov dword [ebp - 0x1db0], 1
jmp 0x472216
and dword [ebp - 0x1db0], 0
cmp dword [ebp - 0x1db0], 0xd0016d17
jae 0x47222e
mov dword [ebp - 0xe1c], 1
jmp 0x472235
and dword [ebp - 0xe1c], 0
cmp dword [ebp - 0xe1c], 0xf4ed832c
jbe 0x47224d
mov dword [ebp - 0x1db8], 1
jmp 0x472254
and dword [ebp - 0x1db8], 0
mov eax, dword [ebp - 0x1db8]
mov dword [ebp - 0x27dc], eax
jmp 0x4720c0
mov dword [ebp - 0x3f4], 0xfffffff6
jmp 0x47227e
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0x33
jge 0x472338
mov dword [ebp - 0x1dc8], 0x96781927
mov dword [ebp - 0x938], 0
jmp 0x4722ae
mov eax, dword [ebp - 0x938]
inc eax
mov dword [ebp - 0x938], eax
cmp dword [ebp - 0x938], 1
jge 0x4722ca
mov eax, dword [ebp - 0x938]
mov dword [ebp + eax*4 - 0x3034], 0
jmp 0x4722a1
cmp dword [ebp - 0xc0c], 0
jge 0x4722df
mov dword [ebp - 0xe24], 1
jmp 0x4722e6
and dword [ebp - 0xe24], 0
cmp dword [ebp - 0xe24], 2
jbe 0x4722fb
mov dword [ebp - 0x1dc0], 1
jmp 0x472302
and dword [ebp - 0x1dc0], 0
cmp dword [ebp - 0x1dc0], 0x3f95
jge 0x47231a
mov dword [ebp - 0xe2c], 1
jmp 0x472321
and dword [ebp - 0xe2c], 0
mov eax, dword [ebp - 0x1dc8]
add eax, dword [ebp - 0xe2c]
mov dword [ebp - 0x1dc8], eax
jmp 0x472271
jmp 0x47242f
mov dword [ebp - 0x27e4], 1
mov dword [ebp - 0x65c], 0
jmp 0x472360
mov eax, dword [ebp - 0x65c]
inc eax
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 4
jge 0x47237c
mov eax, dword [ebp - 0x65c]
mov dword [ebp + eax*4 - 0x35ec], 1
jmp 0x472353
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp + eax*4 - 0x604]
cmp dword [ebp - 0x14c], eax
jge 0x47239d
mov dword [ebp - 0x1dd0], 1
jmp 0x4723a4
and dword [ebp - 0x1dd0], 0
mov eax, dword [ebp - 0x45c]
sub eax, dword [ebp - 0x3f4]
je 0x4723c4
cmp dword [ebp - 0xe34], 0
jne 0x4723c4
and dword [ebp - 0xe3c], 0
jmp 0x4723ce
mov dword [ebp - 0xe3c], 1
mov eax, dword [ebp - 0x1dd0]
cmp eax, dword [ebp - 0xe3c]
jge 0x4723f1
cmp dword [ebp - 0x27e4], 0
je 0x4723f1
mov dword [ebp - 0x1dd8], 1
jmp 0x4723f8
and dword [ebp - 0x1dd8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1dd8]
mov dword [ebp + eax - 0x35ec], ecx
mov byte [ebp - 0x294], 0
movzx eax, byte [ebp - 0x294]
test eax, eax
je 0x47242f
push 0x1b9a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x471f4f
jmp 0x472455
mov byte [ebp - 0x296], 0
movzx eax, byte [ebp - 0x296]
test eax, eax
je 0x472455
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
mov dword [ebp - 0x18c], 0
jmp 0x47246e
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jge 0x47248a
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x21d4], 0x4f78d7cb
jmp 0x472461
mov dword [ebp - 0x20c], 3
mov dword [ebp - 0x664], 0
mov dword [ebp - 0x824], 6
mov dword [ebp - 0x820], 0
jmp 0x4724c1
mov eax, dword [ebp - 0x820]
inc eax
mov dword [ebp - 0x820], eax
cmp dword [ebp - 0x820], 3
jge 0x4724dd
mov eax, dword [ebp - 0x820]
mov dword [ebp + eax*4 - 0x2a78], 0
jmp 0x4724b4
cmp dword [ebp - 0x20c], 0
je 0x4724fd
imul eax, dword [ebp - 0x20c], 0
test eax, eax
je 0x4724fd
mov dword [ebp - 0xe44], 1
jmp 0x472504
and dword [ebp - 0xe44], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x664], eax
mov eax, dword [ebp - 0x664]
cmp dword [ebp - 0xe44], eax
jg 0x47252a
mov dword [ebp - 0x1de0], 1
jmp 0x472531
and dword [ebp - 0x1de0], 0
mov eax, dword [ebp - 0x1de0]
mov dword [ebp - 0x824], eax
mov dword [ebp - 0x20c], 0x14
jmp 0x472556
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x14
jg 0x4726c0
mov dword [ebp - 0x5b8], 0x1ba028e
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x303c], eax
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x3044], eax
mov eax, dword [ebp - 0x5b8]
cmp dword [ebp - 0x20c], eax
jg 0x4725ab
mov dword [ebp - 0x27ec], 1
jmp 0x4725b2
and dword [ebp - 0x27ec], 0
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x304c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2a78]
cmp dword [ebp - 0x664], eax
jg 0x4725de
mov dword [ebp - 0xe4c], 1
jmp 0x4725e5
and dword [ebp - 0xe4c], 0
cmp dword [ebp - 0xe4c], 0xf6872920
je 0x4725fd
mov dword [ebp - 0x1de8], 1
jmp 0x472604
and dword [ebp - 0x1de8], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 0x824]
cmp eax, dword [ebp - 0x1de8]
jne 0x47262a
mov dword [ebp - 0xe54], 1
jmp 0x472631
and dword [ebp - 0xe54], 0
mov eax, dword [ebp - 0x5b8]
cmp dword [ebp - 0xe54], eax
je 0x472654
mov eax, 0xa5b5
test eax, eax
je 0x472654
mov dword [ebp - 0x1df0], 1
jmp 0x47265b
and dword [ebp - 0x1df0], 0
mov eax, dword [ebp - 0x1df0]
neg eax
sub eax, 0xffff
cmp eax, 0xffff
jae 0x47267b
mov dword [ebp - 0xe5c], 1
jmp 0x472682
and dword [ebp - 0xe5c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2a78]
cmp dword [ebp - 0xe5c], eax
jne 0x4726a2
mov dword [ebp - 0x1df8], 1
jmp 0x4726a9
and dword [ebp - 0x1df8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1df8]
mov dword [ebp + eax - 0x2a78], ecx
jmp 0x472549
mov dword [ebp - 0x494], 8
mov dword [ebp - 0x4f0], 0x4a53aa9a
mov dword [ebp - 0xc14], 1
mov dword [ebp - 0xe74], 0x850270f9
mov dword [ebp - 0x66c], 0xaa05d762
mov dword [ebp - 0x1e20], 0xffffffff
mov dword [ebp - 0x174], 0
jmp 0x472715
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jge 0x472731
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x1e00], 0x4822b165
jmp 0x472708
mov dword [ebp - 0x174], 0
jmp 0x47274a
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 4
jge 0x472766
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x35fc], 0xffffffff
jmp 0x47273d
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 0xc30
jne 0x47278a
mov dword [ebp - 0xe64], 1
jmp 0x472791
and dword [ebp - 0xe64], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe64]
mov dword [ebp + eax - 0x1e00], ecx
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0xe6c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe6c]
mov dword [ebp + eax - 0x1e00], ecx
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0xc14], eax
mov eax, dword [ebp - 0xc14]
cmp dword [ebp - 0xe6c], eax
jl 0x4727e9
mov dword [ebp - 0x27f4], 1
jmp 0x4727f0
and dword [ebp - 0x27f4], 0
mov eax, dword [ebp - 0x494]
sub eax, dword [ebp - 0x494]
cmp dword [ebp - 0x494], eax
jg 0x472810
mov dword [ebp - 0x1e08], 1
jmp 0x472817
and dword [ebp - 0x1e08], 0
mov eax, dword [ebp - 0x1e08]
mov dword [ebp - 0xe74], eax
mov eax, dword [ebp - 0xe74]
cmp dword [ebp - 0x494], eax
jne 0x47283d
mov dword [ebp - 0x27fc], 1
jmp 0x472844
and dword [ebp - 0x27fc], 0
mov eax, dword [ebp - 0x494]
cmp dword [ebp - 0x66c], eax
jge 0x47285e
mov dword [ebp - 0x1e10], 1
jmp 0x472865
and dword [ebp - 0x1e10], 0
mov eax, dword [ebp - 0x1e10]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x66c]
cmp dword [ebp - 0x66c], eax
jle 0x47288b
mov dword [ebp - 0xe7c], 1
jmp 0x472892
and dword [ebp - 0xe7c], 0
mov eax, dword [ebp - 0xe7c]
sub eax, dword [ebp - 0x66c]
je 0x4728b5
cmp dword [ebp - 0xc14], 0
je 0x4728b5
mov dword [ebp - 0x1e18], 1
jmp 0x4728bc
and dword [ebp - 0x1e18], 0
cmp dword [ebp - 0x1e18], 0
jl 0x4728da
mov eax, 0x9e177c42
test eax, eax
je 0x4728da
mov dword [ebp - 0xe84], 1
jmp 0x4728e1
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0xe84]
mov dword [ebp - 0x1e20], eax
cmp dword [ebp - 0x1e20], 0xfffffffd
jl 0x472902
mov dword [ebp - 0xe8c], 1
jmp 0x472909
and dword [ebp - 0xe8c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe8c]
mov dword [ebp + eax - 0x35fc], ecx
mov byte [ebp - 0x298], 0
movzx eax, byte [ebp - 0x298]
test eax, eax
je 0x472a5d
mov dword [ebp - 0x3fc], 0x2c03342e
mov dword [ebp - 0x3fc], 0x1b
jmp 0x472955
mov eax, dword [ebp - 0x3fc]
dec eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 2
je 0x472a4b
mov dword [ebp - 0xd4], 0xcf54c3c6
mov dword [ebp - 0x82c], 0
jmp 0x472985
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 1
jge 0x4729a1
mov eax, dword [ebp - 0x82c]
mov dword [ebp + eax*4 - 0x674], 6
jmp 0x472978
mov dword [ebp - 0xd4], 0x10
jmp 0x4729ba
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xfffffff8
jg 0x4729e0
mov dword [ebp - 0x3054], 2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x674], 1
jmp 0x4729ad
mov dword [ebp - 0xd4], 0
jmp 0x4729f9
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x472a46
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xd4]
mov ecx, dword [ebp + ecx*4 - 0x674]
cmp dword [ebp + eax*4 - 0x674], ecx
jle 0x472a2a
mov dword [ebp - 0x1e28], 1
jmp 0x472a31
and dword [ebp - 0x1e28], 0
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x1e28]
mov dword [ebp + eax*4 - 0x674], ecx
jmp 0x4729ec
jmp 0x472948
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x3fc], eax
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0xeac], 0x5fef4072
mov dword [ebp - 0xeb4], 0xb506946c
mov dword [ebp - 0x281c], 0xde002748
mov dword [ebp - 0x282c], 0xfffffff9
mov dword [ebp - 0x834], 0
jmp 0x472aaf
mov eax, dword [ebp - 0x834]
inc eax
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x834], 3
jge 0x472acb
mov eax, dword [ebp - 0x834]
mov dword [ebp + eax*4 - 0xa5c], 0xae9714a
jmp 0x472aa2
mov dword [ebp - 0x7c], 0
jmp 0x472adb
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jg 0x472c4f
mov dword [ebp - 0xc1c], 0x5ff44426
mov byte [ebp - 0x29a], 0
movzx eax, byte [ebp - 0x29a]
test eax, eax
je 0x472b0c
push 0xd08
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa5c], 0x393e
jne 0x472b2b
mov dword [ebp - 0xe94], 1
jmp 0x472b32
and dword [ebp - 0xe94], 0
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0xa5c]
cmp eax, dword [ebp - 0xe94]
jne 0x472b96
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x305c], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0xa5c]
mov dword [ebp - 0x3064], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa5c]
mov dword [ebp - 0x306c], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp + eax*4 - 0xa5c], 0x43e2
je 0x472b8f
mov dword [ebp - 0x1e30], 1
jmp 0x472b96
and dword [ebp - 0x1e30], 0
push 6
pop eax
cmp eax, 0xffffffff
jne 0x472baa
mov dword [ebp - 0x2804], 1
jmp 0x472bb1
and dword [ebp - 0x2804], 0
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0x3074], eax
cmp dword [ebp - 0x7c], 0xfffffffb
jne 0x472bcf
mov dword [ebp - 0xe9c], 1
jmp 0x472bd6
and dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0xc1c]
cmp dword [ebp - 0xe9c], eax
jne 0x472bf0
mov dword [ebp - 0x1e38], 1
jmp 0x472bf7
and dword [ebp - 0x1e38], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa5c]
cmp dword [ebp - 0x1e38], eax
jne 0x472c18
mov dword [ebp - 0xea4], 1
jmp 0x472c1f
and dword [ebp - 0xea4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa5c]
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp + eax*4 - 0xa5c], 0xfff8
add eax, dword [ebp - 0xc1c]
mov ecx, dword [ebp - 0x7c]
mov dword [ebp + ecx*4 - 0xa5c], eax
jmp 0x472ad4
mov dword [ebp - 0xf4], 0
jmp 0x472c68
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jg 0x472fbd
mov dword [ebp - 0x2c8], 0x2959af2c
mov dword [ebp - 0x67c], 0
jmp 0x472c98
mov eax, dword [ebp - 0x67c]
inc eax
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 3
jge 0x472cb4
mov eax, dword [ebp - 0x67c]
mov dword [ebp + eax*4 - 0x34d8], 0xc11d73cb
jmp 0x472c8b
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0xa5c]
mov dword [ebp - 0x1e40], eax
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x1e40]
mov dword [ebp + eax*4 - 0xa5c], ecx
mov eax, dword [ebp - 0x1e40]
mov dword [ebp - 0xeac], eax
cmp dword [ebp - 0xeac], 0
ja 0x472cfb
mov dword [ebp - 0x280c], 1
jmp 0x472d02
and dword [ebp - 0x280c], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x307c], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x3084], eax
mov eax, dword [ebp - 0x2c8]
sub eax, 7
cmp eax, dword [ebp - 0x2c8]
jne 0x472d37
mov dword [ebp - 0x1e48], 1
jmp 0x472d3e
and dword [ebp - 0x1e48], 0
mov dword [ebp - 0x7c], 1
mov eax, dword [ebp - 0x1e48]
mov dword [ebp - 0xeb4], eax
mov eax, dword [ebp - 0xeb4]
cmp dword [ebp - 0x7c], eax
je 0x472d96
mov dword [ebp - 0x2814], 0xfffffff6
mov byte [ebp - 0x29c], 0
movzx eax, byte [ebp - 0x29c]
test eax, eax
je 0x472d87
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
mov dword [ebp - 0x2814], 0xffffffff
jmp 0x472fb8
mov dword [ebp - 0x283c], 1
mov dword [ebp - 0x83c], 0
jmp 0x472db9
mov eax, dword [ebp - 0x83c]
inc eax
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 4
jge 0x472dd5
mov eax, dword [ebp - 0x83c]
mov dword [ebp + eax*4 - 0x34a0], 0xb1b5
jmp 0x472dac
mov dword [ebp - 0x2c8], 0xfffffff8
jmp 0x472dee
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x19
jle 0x472fb8
mov dword [ebp - 0x578], 0x138
cmp dword [ebp - 0x578], 0
je 0x472ec7
cmp dword [ebp - 0x2c8], 0xbc1f
jge 0x472e2e
mov eax, dword [ebp - 0xf4]
cmp dword [ebp + eax*4 - 0xa5c], 0
jne 0x472e40
cmp dword [ebp - 0x578], 0
jne 0x472e40
and dword [ebp - 0x1e50], 0
jmp 0x472e4a
mov dword [ebp - 0x1e50], 1
mov eax, dword [ebp - 0x281c]
cmp dword [ebp - 0x1e50], eax
jg 0x472e64
mov dword [ebp - 0xebc], 1
jmp 0x472e6b
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xebc], eax
jge 0x472e82
mov dword [ebp - 0x2824], 1
jmp 0x472e89
and dword [ebp - 0x2824], 0
cmp dword [ebp - 0x578], 0x267a5e2b
jg 0x472ea1
mov dword [ebp - 0x1e58], 1
jmp 0x472ea8
and dword [ebp - 0x1e58], 0
mov eax, dword [ebp - 0x1e58]
add eax, 0xab72
cmp dword [ebp - 0x578], eax
jl 0x472ec7
mov dword [ebp - 0xec4], 1
jmp 0x472ece
and dword [ebp - 0xec4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34a0]
cmp dword [ebp - 0xec4], eax
je 0x472efb
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa5c], 0
jne 0x472efb
and dword [ebp - 0x1e60], 0
jmp 0x472f05
mov dword [ebp - 0x1e60], 1
mov eax, dword [ebp - 0x282c]
cmp dword [ebp - 0x1e60], eax
je 0x472f1f
mov dword [ebp - 0xecc], 1
jmp 0x472f26
and dword [ebp - 0xecc], 0
cmp dword [ebp - 0xecc], 3
je 0x472f3b
mov dword [ebp - 0x1e68], 1
jmp 0x472f42
and dword [ebp - 0x1e68], 0
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0x1e68], eax
je 0x472f5c
mov dword [ebp - 0x2834], 1
jmp 0x472f63
and dword [ebp - 0x2834], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34a0]
cmp dword [ebp - 0x283c], eax
jle 0x472f84
mov dword [ebp - 0xed4], 1
jmp 0x472f8b
and dword [ebp - 0xed4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xed4]
mov dword [ebp + eax - 0x34d8], ecx
mov eax, dword [ebp - 0xf4]
cmp dword [ebp + eax*4 - 0xa5c], 0
je 0x472fb3
jmp 0x472de1
jmp 0x472de1
jmp 0x472c5b
cmp dword [ebp - 0x684], 0
je 0x47311f
push 4
pop eax
shl eax, 1
xor ecx, ecx
sub ecx, dword [ebp + eax - 0x21d4]
mov eax, dword [ebp - 0xc24]
imul eax, ecx
mov ecx, dword [ebp - 0xc24]
dec ecx
mov dword [ebp - 0xc24], ecx
test eax, eax
je 0x473002
xor eax, eax
je 0x473002
mov dword [ebp - 0x1e70], 1
jmp 0x473009
and dword [ebp - 0x1e70], 0
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0xedc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xedc]
mov dword [ebp + eax - 0x34e4], ecx
imul eax, dword [ebp - 0x1e70], 0x457
imul eax, dword [ebp - 0xedc]
test eax, eax
jne 0x473049
mov dword [ebp - 0x2844], 1
jmp 0x473050
and dword [ebp - 0x2844], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x21d4]
mov dword [ebp - 0x308c], eax
cmp dword [ebp - 0x684], 4
jle 0x473078
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x21d4], 0
mov eax, dword [ebp - 0x284c]
add eax, 0x66a0
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x21d4]
jne 0x4730a9
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x21d4], 0
jne 0x4730a9
and dword [ebp - 0x1e78], 0
jmp 0x4730b3
mov dword [ebp - 0x1e78], 1
cmp dword [ebp - 0x1e78], 0x693009c
jle 0x4730cb
mov dword [ebp - 0xee4], 1
jmp 0x4730d2
and dword [ebp - 0xee4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x21d4]
imul eax, dword [ebp - 0xee4]
test eax, eax
je 0x4730fe
mov eax, 0xfffa
test eax, eax
je 0x4730fe
mov dword [ebp - 0x1e80], 1
jmp 0x473105
and dword [ebp - 0x1e80], 0
mov eax, dword [ebp - 0x684]
cmp dword [ebp - 0x1e80], eax
jl 0x47311f
mov dword [ebp - 0xeec], 1
jmp 0x473126
and dword [ebp - 0xeec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21d4]
add eax, dword [ebp - 0xeec]
cmp eax, 1
jbe 0x47314a
mov dword [ebp - 0x1e88], 1
jmp 0x473151
and dword [ebp - 0x1e88], 0
mov eax, dword [ebp - 0x1e88]
mov dword [ebp - 0x2854], eax
mov dword [ebp - 0x3094], 0x7862fd41
mov byte [ebp - 0x29e], 0
movzx eax, byte [ebp - 0x29e]
test eax, eax
je 0x473188
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov byte [ebp - 0x2a0], 0
movzx eax, byte [ebp - 0x2a0]
test eax, eax
je 0x4731b3
push 0
push 0x4ae
push 0x2d
push 0x13ff
push 0x68d
call dword [sym.imp.GDI32.dll_CreateBitmap]
cmp dword [ebp + 8], 2
jl 0x48017b
mov dword [ebp - 0x68c], 0xfffffffd
mov dword [ebp - 0x844], 0
jmp 0x4731e0
mov eax, dword [ebp - 0x844]
inc eax
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x844], 1
jge 0x4731fc
mov eax, dword [ebp - 0x844]
mov dword [ebp + eax*4 - 0x285c], 0
jmp 0x4731d3
mov dword [ebp - 0x68c], 0
jmp 0x473215
mov eax, dword [ebp - 0x68c]
dec eax
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 0
jl 0x47325f
mov dword [ebp - 0x4f8], 0xfffffffb
mov dword [ebp - 0x4f8], 0
jmp 0x473241
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 1
jge 0x47325d
mov eax, dword [ebp - 0x4f8]
mov dword [ebp + eax*4 - 0x285c], 1
jmp 0x473234
jmp 0x473208
mov byte [ebp - 0x2a2], 0
movzx eax, byte [ebp - 0x2a2]
test eax, eax
je 0x47327b
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov dword [ebp - 0x84c], 0xfffa
mov dword [ebp - 0x2864], 0x28fdeb77
mov dword [ebp - 0x287c], 0x90a3cfce
mov dword [ebp - 0x309c], 0xfcf33f23
mov dword [ebp - 0x30a4], 2
mov dword [ebp - 0xef4], 1
mov dword [ebp - 0x30ac], 0xfffffff8
mov dword [ebp - 0x2ab4], 0xfd8c6581
mov dword [ebp - 0x2ab0], 0xfd8c6581
mov dword [ebp - 0x2aac], 0xfd8c6581
mov dword [ebp - 0x2aa8], 0xfd8c6581
mov dword [ebp - 0x194], 0
jmp 0x473302
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x47331e
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x26c8], 5
jmp 0x4732f5
mov dword [ebp - 0x194], 0
jmp 0x473337
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x473353
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x1e90], 0
jmp 0x47332a
mov eax, dword [ebp - 0x84c]
cmp dword [ebp - 0x84c], eax
jl 0x4734ae
cmp dword [ebp - 0x84c], 0
jne 0x473392
cmp dword [ebp - 0xef4], 3
jl 0x473392
mov eax, 0x324015fb
test eax, eax
jne 0x473392
cmp dword [ebp - 0xef4], 0
jne 0x473392
and dword [ebp - 0x1e98], 0
jmp 0x47339c
mov dword [ebp - 0x1e98], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e90]
inc eax
mov dword [ebp - 0xefc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xefc]
mov dword [ebp + eax - 0x1e90], ecx
mov eax, dword [ebp - 0xefc]
cmp eax, dword [ebp - 0x1e98]
jge 0x4733dd
mov dword [ebp - 0xf04], 1
jmp 0x4733e4
and dword [ebp - 0xf04], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x26c8]
cmp dword [ebp - 0xf04], eax
jg 0x473413
xor eax, eax
inc eax
je 0x473413
mov eax, 0xa12a
test eax, eax
je 0x473413
mov dword [ebp - 0x1ea0], 1
jmp 0x47341a
and dword [ebp - 0x1ea0], 0
mov eax, dword [ebp - 0x2864]
cmp dword [ebp - 0x1ea0], eax
jle 0x473434
mov dword [ebp - 0xf0c], 1
jmp 0x47343b
and dword [ebp - 0xf0c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26c8]
cmp dword [ebp - 0xf0c], eax
jge 0x47345c
mov dword [ebp - 0x1ea8], 1
jmp 0x473463
and dword [ebp - 0x1ea8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2ab4]
cmp dword [ebp - 0x1ea8], eax
jge 0x473484
mov dword [ebp - 0xf14], 1
jmp 0x47348b
and dword [ebp - 0xf14], 0
mov eax, dword [ebp - 0x84c]
cmp eax, dword [ebp - 0xf14]
jne 0x4734a2
cmp dword [ebp - 0x287c], 0
jne 0x4734ae
mov dword [ebp - 0x1eb0], 1
jmp 0x4734b5
and dword [ebp - 0x1eb0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1eb0]
mov dword [ebp + eax - 0x26c8], ecx
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0xc2c], 0xffff
mov dword [ebp - 0x30b4], 0
mov dword [ebp - 0x694], 0
jmp 0x4734fc
mov eax, dword [ebp - 0x694]
inc eax
mov dword [ebp - 0x694], eax
cmp dword [ebp - 0x694], 2
jge 0x473518
mov eax, dword [ebp - 0x694]
mov dword [ebp + eax*4 - 0xbc0], 0x20f
jmp 0x4734ef
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0
jmp 0x47352f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x47368f
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0xbc0], 0
jne 0x473615
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0xbc0], ecx
jge 0x473565
mov dword [ebp - 0xf1c], 1
jmp 0x47356c
and dword [ebp - 0xf1c], 0
cmp dword [ebp - 0xf1c], 0
je 0x4735b8
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xbc0]
neg eax
mov ecx, dword [ebp - 0x2c]
cmp eax, dword [ebp + ecx*4 - 0xbc0]
jl 0x473599
mov dword [ebp - 0x1eb8], 1
jmp 0x4735a0
and dword [ebp - 0x1eb8], 0
cmp dword [ebp - 0x1eb8], 0x78ac
jle 0x4735b8
mov dword [ebp - 0x2884], 1
jmp 0x4735bf
and dword [ebp - 0x2884], 0
mov eax, dword [ebp - 0xc2c]
mov dword [ebp - 0x30bc], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xbc0]
cmp dword [ebp - 0x2c], eax
jge 0x4735e6
mov dword [ebp - 0xf24], 1
jmp 0x4735ed
and dword [ebp - 0xf24], 0
mov eax, dword [ebp - 0xc2c]
mov ecx, dword [ebp - 0xf24]
lea eax, [ecx + eax + 0x32bcf69c]
mov ecx, dword [ebp - 0x2c]
cmp eax, dword [ebp + ecx*4 - 0xbc0]
je 0x473615
and dword [ebp - 0x1ec0], 0
jmp 0x47361f
mov dword [ebp - 0x1ec0], 1
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1ec0]
sub ecx, dword [ebp + eax*4 - 0xbc0]
je 0x473652
mov byte [ebp - 0x2a4], 0
movzx eax, byte [ebp - 0x2a4]
test eax, eax
je 0x473650
push 0x93d
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x47367c
mov byte [ebp - 0x2a6], 0
movzx eax, byte [ebp - 0x2a6]
test eax, eax
je 0x47367c
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectPalette]
cmp dword [ebp - 0xc2c], 0
je 0x47368a
jmp 0x473528
jmp 0x473528
mov dword [ebp - 0x854], 0xfffffff7
mov dword [ebp - 0x854], 0xffffffeb
jmp 0x4736b2
mov eax, dword [ebp - 0x854]
inc eax
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 0xfffffffd
jg 0x4737bb
mov dword [ebp - 0x85c], 0xffffffff
mov dword [ebp - 0x69c], 0
jmp 0x4736e2
mov eax, dword [ebp - 0x69c]
inc eax
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 4
jge 0x4736fe
mov eax, dword [ebp - 0x69c]
mov dword [ebp + eax*4 - 0x3614], 0x2e31d832
jmp 0x4736d5
mov dword [ebp - 0x85c], 0xffffffe6
jmp 0x473717
cmp dword [ebp - 0x85c], 0xfffffff2
je 0x4737b6
mov dword [ebp - 0x6a4], 0
jmp 0x47373d
cmp dword [ebp - 0x6a4], 2
jge 0x473759
jmp 0x4736a5
mov dword [ebp - 0x1d5c], 0xffffffff
mov dword [ebp - 0x2d0], 3
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0xfa4], 0
mov dword [ebp - 0x5e0], 0x76a26825
mov dword [ebp - 0x2868], 0xfffe
mov dword [ebp - 0x1f58], 1
mov dword [ebp - 0x22c], 0
jmp 0x47381a
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 3
jge 0x473836
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x124], 1
jmp 0x47380d
mov dword [ebp - 0x22c], 0
jmp 0x47384f
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x47386b
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x464], 0xce9f33c7
jmp 0x473842
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x124], 0x7528
mov eax, 0x7528
test eax, eax
je 0x473aba
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
neg eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x124]
jg 0x4738b3
and dword [ebp - 0xf44], 0
cmp dword [ebp - 0xf44], 0xb5c4
jl 0x473aec
cmp dword [ebp + 8], 1
jne 0x486e08
mov dword [ebp - 0x980], 0x69fdf99f
mov dword [ebp - 0x11d0], 0xc164f943
mov dword [ebp - 0x8a8], 0
jmp 0x4801b2
mov eax, dword [ebp - 0x8a8]
inc eax
mov dword [ebp - 0x8a8], eax
cmp dword [ebp - 0x8a8], 1
jge 0x4801ce
mov eax, dword [ebp - 0x8a8]
mov dword [ebp + eax*4 - 0xa28], 0xbacd7953
jmp 0x4801a5
mov dword [ebp - 0x980], 0xc
jmp 0x4801e7
mov eax, dword [ebp - 0x980]
inc eax
mov dword [ebp - 0x980], eax
cmp dword [ebp - 0x980], 0x16
jge 0x4804a4
mov dword [ebp - 0xc4c], 1
mov dword [ebp - 0xc48], 1
mov dword [ebp - 0xc44], 1
mov dword [ebp - 0xc40], 1
mov dword [ebp - 0x8b0], 0
jmp 0x480235
mov eax, dword [ebp - 0x8b0]
inc eax
mov dword [ebp - 0x8b0], eax
cmp dword [ebp - 0x8b0], 2
jge 0x480251
mov eax, dword [ebp - 0x8b0]
mov dword [ebp + eax*4 - 0x2eec], 0x1362395e
jmp 0x480228
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc4c], 0
jmp 0x48027f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc4c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc4c], 0
jl 0x48047e
mov dword [ebp - 0x190], 0xf1813f1a
mov dword [ebp - 0x11f8], 0xfffffff9
mov dword [ebp - 0x2778], 0xf2f34e40
mov dword [ebp - 0x190], 0
jmp 0x4802ca
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jg 0x4802ed
mov byte [ebp - 0x2d9], 0
movzx eax, byte [ebp - 0x2d9]
test eax, eax
je 0x4802eb
call dword [sym.imp.USER32.dll_DestroyCaret]
jmp 0x4802bd
mov dword [ebp - 0x190], 0
jmp 0x480306
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jl 0x480479
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4c]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xc4c]
mov eax, dword [ebp + eax*4 - 0xa28]
sub eax, dword [ebp + ecx*4 - 0xa28]
mov dword [ebp - 0x11c0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x11c0]
mov dword [ebp + eax - 0x2eec], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4c]
cmp eax, dword [ebp - 0x11c0]
jge 0x480375
mov dword [ebp - 0x11c8], 1
jmp 0x48037c
and dword [ebp - 0x11c8], 0
mov eax, dword [ebp - 0x11c8]
mov dword [ebp - 0x11d0], eax
cmp dword [ebp - 0x11d0], 0x7806aa1c
jne 0x4803a0
mov dword [ebp - 0x11d8], 1
jmp 0x4803a7
and dword [ebp - 0x11d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4c]
mov eax, dword [ebp + eax*4 - 0xa28]
cmp dword [ebp - 0x11d8], eax
jg 0x4803cf
mov dword [ebp - 0x11e0], 1
jmp 0x4803d6
and dword [ebp - 0x11e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4c]
mov eax, dword [ebp + eax*4 - 0xa28]
add eax, dword [ebp - 0x11e0]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xc4c]
jne 0x48040a
mov dword [ebp - 0x11e8], 1
jmp 0x480411
and dword [ebp - 0x11e8], 0
mov eax, dword [ebp - 0x11e8]
neg eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xc4c]
jl 0x480434
mov dword [ebp - 0x11f0], 1
jmp 0x48043b
and dword [ebp - 0x11f0], 0
mov eax, dword [ebp - 0x11f0]
mov dword [ebp - 0x11f8], eax
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x11f8], eax
jg 0x480461
mov dword [ebp - 0x1200], 1
jmp 0x480468
and dword [ebp - 0x1200], 0
mov eax, dword [ebp - 0x1200]
mov dword [ebp - 0x2778], eax
jmp 0x4802f9
jmp 0x480264
mov byte [ebp - 0x3a8], 0
movzx eax, byte [ebp - 0x3a8]
test eax, eax
je 0x48049f
push 0x13b7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x4801da
mov dword [ebp - 0xb54], 2
mov dword [ebp - 0xc28], 0x8a1f9496
mov dword [ebp - 0x1230], 0x5d76270e
mov dword [ebp - 0xb4c], 0
mov dword [ebp - 0x2860], 0xfffffffa
mov dword [ebp - 0x50], 0
jmp 0x4804e6
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x4804fc
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x26ec], 1
jmp 0x4804df
mov dword [ebp - 0x50], 0
jmp 0x48050c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x480522
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x3430], 0
jmp 0x480505
mov dword [ebp - 0x50], 0
jmp 0x480532
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x480548
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x2ef8], 0
jmp 0x48052b
mov eax, dword [ebp - 0xb54]
mov dword [ebp - 0xc28], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3430]
dec eax
mov dword [ebp - 0x1208], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1208]
mov dword [ebp + eax - 0x3430], ecx
cmp dword [ebp - 0x1208], 0
jne 0x48069c
mov eax, dword [ebp - 0xb54]
neg eax
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x3430]
je 0x480614
mov eax, dword [ebp - 0xb4c]
dec eax
mov dword [ebp - 0xb4c], eax
je 0x4805b7
mov dword [ebp - 0x1210], 1
jmp 0x4805be
and dword [ebp - 0x1210], 0
mov dword [ebp - 0xc28], 4
mov eax, dword [ebp - 0x1210]
sub eax, dword [ebp - 0xc28]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x26ec]
sub eax, 0xdf39281c
mov dword [ebp - 0x1218], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1218]
mov dword [ebp + eax - 0x26ec], ecx
cmp dword [ebp - 0x1218], 0
je 0x480614
mov dword [ebp - 0x1220], 1
jmp 0x48061b
and dword [ebp - 0x1220], 0
cmp dword [ebp - 0x1220], 7
jle 0x480630
mov dword [ebp - 0x1228], 1
jmp 0x480637
and dword [ebp - 0x1228], 0
cmp dword [ebp - 0x1228], 0
jne 0x480652
mov eax, 0x14b81230
test eax, eax
jne 0x480652
and dword [ebp - 0x2568], 0
jmp 0x48065c
mov dword [ebp - 0x2568], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26ec]
mov dword [ebp - 0x2e04], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2ef8], 0xffffffff
mov dword [ebp - 0x1230], 0xffffffff
cmp dword [ebp - 0x1230], 0
jne 0x48069c
and dword [ebp - 0x1238], 0
jmp 0x4806a6
mov dword [ebp - 0x1238], 1
mov eax, dword [ebp - 0xb54]
cmp dword [ebp - 0x1238], eax
jg 0x4806c0
mov dword [ebp - 0x1240], 1
jmp 0x4806c7
and dword [ebp - 0x1240], 0
mov eax, dword [ebp - 0x1240]
mov dword [ebp - 0x2860], eax
mov dword [ebp - 0xb4], 0x10c93b4e
mov dword [ebp - 0x988], 0xfffffffd
mov dword [ebp - 0x8b8], 0
jmp 0x480700
mov eax, dword [ebp - 0x8b8]
inc eax
mov dword [ebp - 0x8b8], eax
cmp dword [ebp - 0x8b8], 1
jge 0x48071c
mov eax, dword [ebp - 0x8b8]
mov dword [ebp + eax*4 - 0x2570], 0
jmp 0x4806f3
mov dword [ebp - 0x988], 0
jmp 0x480735
mov eax, dword [ebp - 0x988]
dec eax
mov dword [ebp - 0x988], eax
cmp dword [ebp - 0x988], 0
jl 0x48077f
mov dword [ebp - 0x4d0], 0xfffffffb
mov dword [ebp - 0x4d0], 0
jmp 0x480761
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
cmp dword [ebp - 0x4d0], 1
jge 0x48077d
mov eax, dword [ebp - 0x4d0]
mov dword [ebp + eax*4 - 0x2570], 1
jmp 0x480754
jmp 0x480728
mov byte [ebp - 0x2e1], 0
movzx eax, byte [ebp - 0x2e1]
test eax, eax
je 0x48079b
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov dword [ebp - 0x358], 1
mov dword [ebp - 0x410], 0xfffffff9
mov dword [ebp - 0x2780], 0xbeb0647d
cmp dword [ebp - 0x410], 0
je 0x4807e8
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x2780], eax
mov byte [ebp - 0x3aa], 0
movzx eax, byte [ebp - 0x3aa]
test eax, eax
je 0x4807e6
call dword [sym.imp.USER32.dll_CreatePopupMenu]
jmp 0x480830
mov dword [ebp - 0x410], 0xffffffe7
jmp 0x480801
cmp dword [ebp - 0x410], 0xffffffec
jle 0x480830
mov byte [ebp - 0x3ac], 0
movzx eax, byte [ebp - 0x3ac]
test eax, eax
je 0x48082e
mov dword [ebp - 0x58], 0xad3b
mov dword [ebp - 0xe0], 2
mov dword [ebp - 0x418], 0x4ea33a4d
mov dword [ebp - 0x420], 4
mov dword [ebp - 0x198], 0
jmp 0x48086e
mov dword [ebp - 0x288], 9
mov dword [ebp - 0x748], 0xfffffffe
mov dword [ebp - 0xcc8], 0x2cbd4dae
mov dword [ebp - 0xcf8], 0xd54b
mov dword [ebp - 0x24d4], 0xffffffff
mov dword [ebp - 0x78], 0
jmp 0x486e4a
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x486e60
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x291c], 0x4ec2e0cf
jmp 0x486e43
mov dword [ebp - 0x78], 0
jmp 0x486e70
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x486e86
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x2214], 0xde9829cb
jmp 0x486e69
mov dword [ebp - 0x78], 0
jmp 0x486e96
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x486eac
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x24cc], 0
jmp 0x486e8f
mov dword [ebp - 0x288], 3
jmp 0x486ec5
mov eax, dword [ebp - 0x288]
dec eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0
jl 0x4870e9
mov dword [ebp - 0x398], 0x532bb11a
mov dword [ebp - 0x24c4], 0x475761ac
mov dword [ebp - 0x398], 0
jmp 0x486eff
cmp dword [ebp - 0x398], 3
jg 0x4870e4
mov dword [ebp - 0x24b4], 0xf08700d3
mov dword [ebp - 0x24bc], 0xfffffff7
mov byte [ebp - 0x3d0], 0
movzx eax, byte [ebp - 0x3d0]
test eax, eax
je 0x486f48
push 1
push 0
push 0x9a8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollInfo]
cmp dword [ebp - 0x288], 0
je 0x486f85
cmp dword [ebp - 0x398], 0
je 0x486f66
mov dword [ebp - 0x1c08], 1
jmp 0x486f6d
and dword [ebp - 0x1c08], 0
cmp dword [ebp - 0x1c08], 0x4475
jle 0x486f85
mov dword [ebp - 0x1c10], 1
jmp 0x486f8c
and dword [ebp - 0x1c10], 0
mov eax, dword [ebp - 0x1c10]
inc eax
inc eax
cmp eax, dword [ebp - 0x288]
jg 0x486fa8
mov dword [ebp - 0x1c18], 1
jmp 0x486faf
and dword [ebp - 0x1c18], 0
cmp dword [ebp - 0x1c18], 0xfffffffa
jge 0x486fc4
mov dword [ebp - 0x1c20], 1
jmp 0x486fcb
and dword [ebp - 0x1c20], 0
mov eax, dword [ebp - 0x398]
mov eax, dword [ebp + eax*4 - 0x291c]
cmp eax, dword [ebp - 0x1c20]
je 0x486fec
mov dword [ebp - 0x1c28], 1
jmp 0x486ff3
and dword [ebp - 0x1c28], 0
mov eax, dword [ebp - 0x398]
mov eax, dword [ebp + eax*4 - 0x291c]
cmp dword [ebp - 0x1c28], eax
jne 0x487014
mov dword [ebp - 0x1c30], 1
jmp 0x48701b
and dword [ebp - 0x1c30], 0
mov eax, dword [ebp - 0x748]
cmp dword [ebp - 0x1c30], eax
jne 0x487035
mov dword [ebp - 0xc9c], 1
jmp 0x48703c
and dword [ebp - 0xc9c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x291c]
cmp dword [ebp - 0xc9c], eax
jle 0x487066
mov eax, 0x16aa
test eax, eax
je 0x487066
mov dword [ebp - 0xca0], 1
jmp 0x48706d
and dword [ebp - 0xca0], 0
cmp dword [ebp - 0xca0], 0x53526c71
jge 0x487085
mov dword [ebp - 0xca8], 1
jmp 0x48708c
and dword [ebp - 0xca8], 0
mov eax, dword [ebp - 0xca8]
mov dword [ebp - 0x24b4], eax
mov eax, dword [ebp - 0x24bc]
mov dword [ebp - 0xcb0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xcb0]
mov dword [ebp + eax - 0x2214], ecx
cmp dword [ebp - 0xcb0], 0xffffffff
jl 0x4870cc
mov dword [ebp - 0xcb8], 1
jmp 0x4870d3
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0xcb8]
mov dword [ebp - 0x24c4], eax
jmp 0x486ef2
jmp 0x486eb8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2214]
mov dword [ebp - 0x288], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2214]
cmp eax, dword [ebp - 0x288]
jl 0x48711d
mov dword [ebp - 0xcc0], 1
jmp 0x487124
and dword [ebp - 0xcc0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x291c]
cmp dword [ebp - 0xcc0], eax
jge 0x487145
mov dword [ebp - 0xcd0], 1
jmp 0x48714c
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0xcc8], eax
mov eax, dword [ebp - 0xcc8]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x2214]
mov eax, dword [ebp - 0x748]
add eax, dword [ebp - 0xcd0]
cmp eax, 1
je 0x487188
mov dword [ebp - 0xcd8], 1
jmp 0x48718f
and dword [ebp - 0xcd8], 0
cmp dword [ebp - 0xcd8], 0x70d8ac50
jle 0x4871a7
mov dword [ebp - 0xce0], 1
jmp 0x4871ae
and dword [ebp - 0xce0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2214]
cmp dword [ebp - 0xce0], eax
jle 0x4871cf
mov dword [ebp - 0x740], 1
jmp 0x4871d6
and dword [ebp - 0x740], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x740]
mov dword [ebp + eax - 0x2214], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x740]
mov dword [ebp + eax - 0x24cc], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x291c]
cmp dword [ebp - 0x740], eax
jne 0x48721c
mov dword [ebp - 0xce8], 1
jmp 0x487223
and dword [ebp - 0xce8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x291c]
cmp dword [ebp - 0xce8], eax
jge 0x487244
mov dword [ebp - 0xcf0], 1
jmp 0x48724b
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0xcf0]
mov dword [ebp - 0xcf8], eax
cmp dword [ebp - 0xcf8], 0
je 0x48726c
mov dword [ebp - 0xd00], 1
jmp 0x487273
and dword [ebp - 0xd00], 0
mov eax, dword [ebp - 0x748]
cmp dword [ebp - 0xd00], eax
jg 0x48728d
mov dword [ebp - 0xd08], 1
jmp 0x487294
and dword [ebp - 0xd08], 0
mov eax, dword [ebp - 0xd08]
mov dword [ebp - 0x24d4], eax
xor ecx, ecx
call fcn.0044c5d6
push eax
call fcn.0048cf52
pop ecx
mov dword [ebp - 0x488], 7
mov dword [ebp - 0x2ba0], 2
mov dword [ebp - 0x2ba8], 0
mov dword [ebp - 0xd10], 0
mov dword [ebp - 0x2bb0], 0xfffffff6
mov dword [ebp - 0x2bb8], 0xa8cf1d65
mov dword [ebp - 0x2bc0], 0
mov dword [ebp - 0x750], 0
jmp 0x48730d
mov eax, dword [ebp - 0x750]
inc eax
mov dword [ebp - 0x750], eax
cmp dword [ebp - 0x750], 3
jge 0x487329
mov eax, dword [ebp - 0x750]
mov dword [ebp + eax*4 - 0x3520], 0xd8e5ccc9
jmp 0x487300
mov dword [ebp - 0x488], 1
cmp dword [ebp - 0x488], 0
je 0x4873f1
mov dword [ebp - 0x488], 0
jmp 0x487359
mov dword [ebp - 0x28dc], 0xad7d711e
mov dword [ebp - 0x28d8], 0xad7d711e
mov dword [ebp - 0x28d4], 0xad7d711e
mov dword [ebp - 0x28d0], 0xad7d711e
mov dword [ebp - 0x2bc8], 0x5954
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x28dc]
mov dword [ebp - 0xd10], eax
cmp dword [ebp - 0xd10], 1
jl 0x48744a