Function at 0x460ab0
Capabilities:
Check for time delay via queryperformancecounter
Create thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49ef06
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x328
mov eax, dword [0x4d7200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x304], edi
mov eax, dword [edi + 0xbc]
lea ecx, [edi + 0x2e8]
cmp eax, 0xffffffff
jne 0x460b0c
mov eax, dword [ecx]
mov edx, dword [edi + 0x2e4]
test edx, edx
je 0x463b20
cmp eax, 1
jl 0x463b20
cmp eax, dword [ecx]
jg 0x463b20
lea eax, [eax + eax*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x463b20
cmp dword [edx + eax*8], 0xf
jne 0x463b20
push 2
push 0xffffffffffffffff
push 0x100c
push dword [edx + eax*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x338], eax
test eax, eax
js 0x463b20
push ecx
push dword [edi + 0xd8]
lea ecx, [edi + 0x2a8]
call fcn.00416520
mov dword [ebp - 0x324], eax
lea ecx, [edi + 0x2a8]
test eax, eax
jns 0x460b9e
push ecx
push 0x1c2
push 0x96
push ecx
push 0
push 0x4c93b8
jmp 0x463b39
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
movq qword [ebp - 0x28], xmm0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 0x20], 1
mov dword [ebp - 4], 0
movq qword [ebp - 0x34], xmm0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov byte [ebp - 0x2c], 1
push 4
push eax
mov byte [ebp - 4], 1
push dword [edi + 0xd8]
call fcn.00416470
mov dword [ebp - 0x318], eax
test eax, eax
jne 0x460c14
push eax
lea ecx, [ebp - 0x34]
call fcn.00401860
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x318], eax
jmp 0x460c22
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x2c], 1
cmp eax, 0x4c21c0
je 0x460c50
test eax, eax
je 0x460cf6
mov esi, 0x4c21c0
sub eax, esi
mov dword [ebp - 0x2e4], eax
nop
movzx eax, word [eax + esi]
mov ecx, eax
test ax, ax
jne 0x460c9d
cmp word [esi], ax
jne 0x460ca2
push ecx
push 0x1c2
push 0x96
lea eax, [edi + 0x2a8]
mov ecx, edi
push eax
push 0
push 0x4c9c90
call fcn.00432b40
or edi, 0xffffffff
mov eax, dword [ebp - 0x318]
test eax, eax
je 0x460c86
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x460c96
push eax
call fcn.00489ed3
add esp, 4
mov eax, edi
jmp 0x463b43
cmp ax, word [esi]
je 0x460ce8
xor edx, edx
cmp dx, ax
jne 0x460cb1
mov dword [ebp - 0x2ec], edx
jmp 0x460cc3
push ecx
call fcn.0048e154
movzx eax, ax
add esp, 4
mov dword [ebp - 0x2ec], eax
movzx eax, word [esi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x460cd3
xor eax, eax
jmp 0x460cdf
push ecx
call fcn.0048e154
add esp, 4
movzx eax, ax
cmp word [ebp - 0x2ec], ax
jne 0x460cf6
mov eax, dword [ebp - 0x2e4]
add esi, 2
jmp 0x460c40
xorps xmm0, xmm0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x48], xmm0
push ecx
mov byte [ebp - 4], 2
lea eax, [edi + 0x2a8]
movaps xmm0, xmmword [0x4cd010]
lea ecx, [ebp - 0x58]
push 0
push dword [edi + 0x54]
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0xd
push dword [edi + 0x44]
mov dword [ebp - 0x3c], 0
push eax
call fcn.00417480
mov edx, dword [ebp - 0x324]
lea ecx, [edi + 0x2a8]
push 1
push edx
mov byte [ebp - 4], 3
push dword [edi + 0xd8]
call fcn.00416470
mov dword [ebp - 0x2e4], eax
lea esi, [edi + 0x1e4]
test eax, eax
jne 0x460d75
push eax
mov ecx, esi
call fcn.00401860
jmp 0x460d97
mov eax, dword [esi]
test eax, eax
je 0x460d84
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [esi], eax
mov dword [esi + 4], 0
mov byte [esi + 8], 1
mov ecx, esi
call fcn.00401fd0
push 2
push dword [ebp - 0x324]
lea ecx, [edi + 0x2a8]
mov dword [ebp - 0x300], eax
push dword [edi + 0xd8]
mov dword [ebp - 0x32c], edx
call fcn.00416470
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x460dd7
push eax
mov ecx, esi
call fcn.00401860
jmp 0x460df9
mov eax, dword [esi]
test eax, eax
je 0x460de6
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [esi], eax
mov dword [esi + 4], 0
mov byte [esi + 8], 1
lea ecx, [edi + 0x1e4]
call fcn.00401fd0
mov ecx, dword [edi + 0xd8]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x308], edx
cmp ecx, 0xffffffff
jne 0x460e23
mov ecx, dword [edi + 0x2e8]
jmp 0x460e44
mov edx, dword [edi + 0x2e4]
test edx, edx
je 0x460e68
cmp ecx, 1
jl 0x460e68
cmp ecx, dword [edi + 0x2e8]
jg 0x460e68
lea eax, [ecx + ecx*8]
cmp dword [edx + eax*8 + 0xc], 0
je 0x460e68
mov eax, dword [edi + 0x2e4]
lea ecx, [ecx + ecx*8]
push 0
push 0
push 0x1004
push dword [eax + ecx*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [edi + 0xd8]
jmp 0x460e6a
xor eax, eax
mov edx, dword [ebp - 0x324]
inc edx
push 4
cmp eax, edx
jle 0x460ffa
push edx
push ecx
lea ecx, [edi + 0x2a8]
call fcn.00416470
mov esi, eax
mov eax, dword [ebp - 0x318]
test esi, esi
jne 0x460ebd
test eax, eax
je 0x460ea1
push eax
call fcn.00489ed3
add esp, 4
push 2
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
call fcn.0048a28e
add esp, 4
xor ecx, ecx
mov word [eax], cx
jmp 0x460ed3
test eax, eax
je 0x460eca
push eax
call fcn.00489ed3
add esp, 4
mov eax, esi
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x2c], 1
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x318], eax
cmp eax, 0x4c21c0
je 0x460f10
test eax, eax
je 0x460f9f
mov esi, 0x4c21c0
sub eax, esi
mov dword [ebp - 0x2e4], eax
nop dword [eax]
movzx eax, word [esi + eax]
mov ecx, eax
test ax, ax
jne 0x460f46
cmp word [esi], ax
jne 0x460f4b
mov eax, dword [ebp - 0x324]
lea ecx, [edi + 0x2a8]
push 2
inc eax
push eax
push dword [edi + 0xd8]
call fcn.00416470
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x460fb1
push eax
lea ecx, [edi + 0x1e4]
call fcn.00401860
jmp 0x460fe1
cmp ax, word [esi]
je 0x460f91
xor edx, edx
cmp dx, ax
jne 0x460f5a
mov dword [ebp - 0x2ec], edx
jmp 0x460f6c
push ecx
call fcn.0048e154
movzx eax, ax
add esp, 4
mov dword [ebp - 0x2ec], eax
movzx eax, word [esi]
xor edx, edx
mov ecx, eax
cmp dx, ax
jne 0x460f7c
xor eax, eax
jmp 0x460f88
push ecx
call fcn.0048e154
add esp, 4
movzx eax, ax
cmp word [ebp - 0x2ec], ax
jne 0x460f9f
mov eax, dword [ebp - 0x2e4]
add esi, 2
jmp 0x460f00
mov eax, dword [ebp - 0x324]
push 1
inc eax
push eax
push dword [edi + 0xd8]
jmp 0x461006
mov eax, dword [edi + 0x1e4]
test eax, eax
je 0x460fc4
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [edi + 0x1e4], eax
mov dword [edi + 0x1e8], 0
mov byte [edi + 0x1ec], 1
lea ecx, [edi + 0x1e4]
call fcn.00401fd0
add eax, dword [ebp - 0x2f8]
adc edx, dword [ebp - 0x308]
jmp 0x461071
push dword [ebp - 0x338]
push dword [edi + 0xbc]
lea ecx, [edi + 0x2a8]
call fcn.00416470
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x46102a
push 0
lea ecx, [edi + 0x1e4]
call fcn.00401860
jmp 0x46105a
mov eax, dword [edi + 0x1e4]
test eax, eax
je 0x46103d
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [edi + 0x1e4], eax
mov byte [edi + 0x1ec], 1
mov dword [edi + 0x1e8], 0
lea ecx, [edi + 0x1e4]
call fcn.00401fd0
sub eax, dword [ebp - 0x300]
sbb edx, dword [ebp - 0x32c]
push 3
push dword [ebp - 0x324]
lea ecx, [edi + 0x2a8]
mov dword [ebp - 0x310], eax
push dword [edi + 0xd8]
mov dword [ebp - 0x314], edx
call fcn.00416470
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x4610ae
push eax
lea ecx, [edi + 0x1e4]
call fcn.00401860
jmp 0x4610de
mov eax, dword [edi + 0x1e4]
test eax, eax
je 0x4610c1
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [edi + 0x1e4], eax
mov dword [edi + 0x1e8], 0
mov byte [edi + 0x1ec], 1
lea ecx, [edi + 0x1e4]
call fcn.00401fd0
add eax, 0x100000
mov esi, eax
mov dword [ebp - 0x330], eax
adc edx, 0
and esi, 0xfffff
mov eax, esi
mov dword [ebp - 0x334], edx
or eax, 0
je 0x461128
mov ecx, 0x100000
mov eax, 0
sub ecx, esi
sbb eax, eax
add dword [ebp - 0x330], ecx
adc edx, eax
mov dword [ebp - 0x334], edx
push dword [edi + 0x4d8]
and dword [ebp - 0x310], 0xfff00000
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x461150
mov eax, dword [edi + 0x4d8]
mov dword [ebp - 0x2ec], eax
jmp 0x46115a
mov dword [ebp - 0x2ec], 0
push 0x268
lea eax, [ebp - 0x2c0]
push 0
push eax
call fcn.0048b9e0
add esp, 0xc
mov word [ebp - 0x288], 0
lea esi, [edi + 0x22c]
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1b0], 0
mov byte [ebp - 0x1a8], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c0]
push 1
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
call fcn.00417000
push ecx
test esi, esi
lea eax, [ebp - 0x2c0]
lea ecx, [ebp - 0x2c0]
cmovne eax, esi
mov esi, dword [ebp - 0x2ec]
push esi
push 0xffffffffffffffff
push SysReAllocString
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xb4
push 0x23a
push 0x4c9d44
push 0x4c3cf8
mov dword [ebp - 0x100], eax
call fcn.0040bf80
push ecx
push 0xc
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xff000000
push 0xb4
push 0x23a
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 5
call fcn.004167f0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2e4], eax
test esi, esi
je 0x461294
lea eax, [edi + 0x2f8]
xor esi, esi
mov dword [ebp - 0x2ec], eax
mov eax, dword [eax]
test eax, eax
je 0x461278
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x461278
mov eax, dword [ebp - 0x2ec]
inc esi
add eax, 4
mov dword [ebp - 0x2ec], eax
cmp esi, 0x30
jl 0x461250
jmp 0x461294
mov eax, dword [ebp - 0x2e4]
mov dword [edi + esi*4 + 0x2f8], eax
inc esi
cmp esi, dword [edi + 0x2f4]
jle 0x461294
mov dword [edi + 0x2f4], esi
movsd xmm0, qword [0x4cc778]
xor eax, eax
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xffffff
movsd qword [ebp - 0x150], xmm0
mov dword [ebp - 0x148], 0x2bc
mov byte [ebp - 0x144], 1
mov byte [ebp - 0x102], 0
inc eax
cmp word [eax*2 + 0x4bff50], 0
jne 0x4612d2
inc eax
push eax
push 0x4bff50
lea eax, [ebp - 0x142]
push 0x20
push eax
call fcn.0048d183
add esp, 0x10
mov dword [ebp - 0xd0], 0x1400
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
test al, al
je 0x46137b
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x1c
push 0x230
push 5
and eax, 1
push 5
shl eax, 0x11
add eax, 0x50000300
push eax
push 0x4c9d6c
push 0x4c018c
push 0
call esi
test eax, eax
je 0x46137b
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cce60]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
movsd xmm0, qword [0x4cc768]
xor eax, eax
movsd qword [ebp - 0x150], xmm0
mov dword [ebp - 0x148], 0x190
mov byte [ebp - 0x144], 1
mov byte [ebp - 0x102], 0
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4bff50], 0
jne 0x4613b0
inc eax
push eax
push 0x4bff50
lea eax, [ebp - 0x142]
push 0x20
push eax
call fcn.0048d183
add esp, 0x10
mov dword [ebp - 0xd0], 0x400
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461450
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0x64
push 0x37
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9d98
push 0x4c018c
push 0
call esi
test eax, eax
je 0x461450
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4cc9f0]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x19
push 0x154
push 0x34
and eax, 1
push 0x78
shl eax, 0x11
add eax, 0x50011000
push eax
push 0
push 0x4c0258
push 0
call esi
test eax, eax
jne 0x4614ff
xor esi, esi
mov dword [ebp - 0x2ec], eax
xor edx, edx
mov ecx, dword [ebp - 0x284]
test ecx, ecx
je 0x461582
cmp esi, 1
jl 0x461551
cmp esi, dword [ebp - 0x280]
jg 0x461551
lea eax, [esi + esi*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x461551
mov eax, dword [ebp - 0x2ec]
push 0x640000
push 1
push 0x406
lea eax, [eax + eax*8]
push dword [ecx + eax*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x284]
mov edx, esi
cmp esi, 0xffffffff
jne 0x461551
mov edx, dword [ebp - 0x280]
jmp 0x46156c
push eax
push 0x17
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
mov esi, eax
movaps xmm0, xmmword [0x4cce20]
mov dword [ebp - 0x2ec], esi
lea edx, [esi + esi*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov eax, dword [ebp - 0x284]
mov dword [eax + edx*8 + 0x44], 0
mov edx, esi
cmp esi, 0xffffffff
jne 0x46149a
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x284]
jmp 0x4614d1
test ecx, ecx
je 0x461582
cmp esi, 1
jl 0x461582
cmp esi, dword [ebp - 0x280]
jg 0x461582
lea eax, [esi + esi*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x461582
push 0x64
push 1
push 0x405
lea eax, [edx + edx*8]
push dword [ecx + eax*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x308]
shrd ecx, eax, 0x14
shr eax, 0x14
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00401cb0
mov ecx, eax
mov dword [ebp - 0x2e4], ecx
cmp dword [ecx], 0
jne 0x4615c6
push 2
call fcn.0048a28e
mov ecx, dword [ebp - 0x2e4]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
mov eax, dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2e4], eax
call fcn.00416d40
test al, al
jne 0x4615f0
mov dword [ebp - 0x328], 0
jmp 0x461674
test byte [ebp - 0x78], 1
mov eax, 0x50022080
push 0
push dword [ebp - 0x1a4]
mov ecx, 0x50002080
cmovne ecx, eax
mov eax, dword [ebp - 0x280]
inc eax
or ecx, 0x10000
push eax
push dword [ebp - 0x8c]
push 0x19
push 0x50
push 0x33
push 0x1d6
push ecx
push dword [ebp - 0x2e4]
push 0x4c0220
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x46164b
mov dword [ebp - 0x328], eax
jmp 0x461674
push eax
push 0xc
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccd80]
mov dword [ebp - 0x328], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
mov ecx, dword [ebp - 0x310]
sub esp, 8
mov eax, dword [ebp - 0x314]
shrd ecx, eax, 0x14
push ecx
push 0
push dword [ebp - 0x328]
lea ecx, [ebp - 0x2c0]
call fcn.00412800
mov eax, dword [ebp - 0x314]
push ecx
mov ecx, dword [ebp - 0x310]
sub ecx, dword [ebp - 0x330]
sbb eax, dword [ebp - 0x334]
push eax
mov eax, dword [ebp - 0x308]
push ecx
mov ecx, dword [ebp - 0x2f8]
sub ecx, dword [ebp - 0x330]
sbb eax, dword [ebp - 0x334]
push eax
push ecx
push esi
lea ecx, [ebp - 0x2c0]
call fcn.00415380
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461755
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0xa0
push 0x50
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9db8
push 0x4c018c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x461755
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccb00]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
sub esp, 8
lea ecx, [ebp - 0x28]
push dword [ebp - 0x334]
push dword [ebp - 0x330]
call fcn.00402130
mov ecx, eax
mov dword [ebp - 0x2ec], ecx
mov eax, dword [ecx + 4]
mov byte [ecx + 8], 0
test eax, eax
jne 0x46179b
mov edx, dword [ecx]
test edx, edx
je 0x461798
cmp word [edx], ax
je 0x461798
nop word [eax + eax]
inc eax
cmp word [edx + eax*2], 0
jne 0x461790
mov dword [ecx + 4], eax
xor ecx, ecx
nop dword [eax]
inc ecx
cmp word [ecx*2 + 0x4bffa0], 0
jne 0x4617a0
add eax, ecx
mov edx, 2
mov dword [ebp - 0x30c], eax
xor ecx, ecx
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
mov dword [ebp - 0x2f4], esi
mov eax, dword [ebp - 0x2ec]
add esp, 4
mov dword [ebp - 0x300], edx
mov ecx, dword [eax]
mov dword [ebp - 0x2e4], ecx
test ecx, ecx
je 0x461821
movzx ecx, word [ecx]
mov dword [ebp - 0x2f4], esi
mov eax, ecx
test cx, cx
je 0x461821
mov edi, dword [ebp - 0x2e4]
sub edi, edx
mov dword [ebp - 0x2f4], esi
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edx + edi]
mov ecx, eax
test ax, ax
jne 0x461810
mov esi, 0x4bffa0
mov ecx, 0x20
sub esi, edx
nop dword [eax]
mov word [edx], cx
lea edx, [edx + 2]
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x461830
mov esi, dword [ebp - 0x2ec]
xor eax, eax
mov word [edx], ax
mov eax, dword [esi]
test eax, eax
je 0x46185b
push eax
call fcn.00489ed3
add esp, 4
mov ecx, dword [ebp - 0x300]
mov eax, dword [ebp - 0x30c]
mov dword [esi], ecx
mov dword [esi + 4], eax
mov byte [esi + 8], 1
test ecx, ecx
jne 0x461888
push 2
call fcn.0048a28e
add esp, 4
mov dword [esi], eax
xor ecx, ecx
mov word [eax], cx
mov dword [esi + 4], ecx
mov byte [esi + 8], 1
lea ecx, [ebp - 0x2c0]
mov esi, dword [esi]
call fcn.00416d40
test al, al
je 0x461907
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x14
push 0x50
push 0x50
and eax, 1
push 0xbe
shl eax, 0x11
add eax, 0x50800302
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x4c018c
push 0
call esi
test eax, eax
je 0x46190d
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccc60]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
jmp 0x46190d
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461982
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0xa0
push 0x67
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9de8
push 0x4c018c
push 0
call esi
test eax, eax
je 0x461982
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccb10]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
sub esp, 8
lea ecx, [ebp - 0x28]
push dword [ebp - 0x314]
push dword [ebp - 0x310]
call fcn.00402130
mov dword [ebp - 0x2f0], eax
mov esi, dword [eax + 4]
mov byte [eax + 8], 0
test esi, esi
jne 0x4619c0
mov ecx, dword [eax]
test ecx, ecx
je 0x4619bd
cmp word [ecx], si
je 0x4619bd
inc esi
cmp word [ecx + esi*2], 0
jne 0x4619b5
mov dword [eax + 4], esi
xor eax, eax
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x4619c2
add esi, eax
xor ecx, ecx
mov edx, 2
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov ecx, dword [ebp - 0x2f0]
mov edx, eax
mov edi, dword [ebp - 0x2f4]
add esp, 4
mov dword [ebp - 0x2ec], edx
mov dword [ebp - 0x31c], edi
mov eax, dword [ecx]
mov dword [ebp - 0x2e4], eax
test eax, eax
je 0x461a51
movzx ecx, word [eax]
mov eax, ecx
mov dword [ebp - 0x30c], eax
mov eax, edi
mov dword [ebp - 0x31c], eax
test cx, cx
je 0x461a51
mov edi, dword [ebp - 0x2e4]
sub edi, edx
movzx ecx, cx
mov dword [ebp - 0x31c], eax
nop dword [eax + eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x461a40
mov ecx, 0x4bffa0
mov edi, 0x20
sub ecx, edx
nop dword [eax]
mov word [edx], di
lea edx, [edx + 2]
movzx eax, word [ecx + edx]
mov edi, eax
test ax, ax
jne 0x461a60
mov ecx, dword [ebp - 0x2f0]
xor eax, eax
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x461a91
push eax
call fcn.00489ed3
mov ecx, dword [ebp - 0x2f0]
add esp, 4
mov eax, dword [ebp - 0x2ec]
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov byte [ecx + 8], 1
test eax, eax
jne 0x461abe
push 2
call fcn.0048a28e
mov ecx, dword [ebp - 0x2f0]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
mov esi, dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461b3d
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x14
push 0x50
push 0x67
and eax, 1
push 0xbe
shl eax, 0x11
add eax, 0x50800302
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x4c018c
push 0
call esi
test eax, eax
je 0x461b43
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccc70]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
jmp 0x461b43
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461bb8
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0xa0
push 0x7e
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9e18
push 0x4c018c
push 0
call esi
test eax, eax
je 0x461bb8
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccb20]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
sub esp, 8
lea ecx, [ebp - 0x28]
push dword [ebp - 0x308]
push dword [ebp - 0x2f8]
call fcn.00402130
mov dword [ebp - 0x2f0], eax
mov esi, dword [eax + 4]
mov byte [eax + 8], 0
test esi, esi
jne 0x461bfb
mov ecx, dword [eax]
test ecx, ecx
je 0x461bf8
cmp word [ecx], si
je 0x461bf8
nop dword [eax + eax]
inc esi
cmp word [ecx + esi*2], 0
jne 0x461bf0
mov dword [eax + 4], esi
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x461c00
add esi, eax
xor ecx, ecx
mov edx, 2
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov ecx, dword [ebp - 0x2f0]
mov edx, eax
mov edi, dword [ebp - 0x31c]
add esp, 4
mov dword [ebp - 0x2ec], edx
mov dword [ebp - 0x2f4], edi
mov eax, dword [ecx]
mov dword [ebp - 0x2e4], eax
test eax, eax
je 0x461c91
movzx ecx, word [eax]
mov eax, ecx
mov dword [ebp - 0x30c], eax
mov eax, edi
mov dword [ebp - 0x2f4], eax
test cx, cx
je 0x461c91
mov edi, dword [ebp - 0x2e4]
sub edi, edx
movzx ecx, cx
mov dword [ebp - 0x2f4], eax
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x461c80
mov ecx, 0x4bffa0
mov edi, 0x20
sub ecx, edx
nop dword [eax]
mov word [edx], di
lea edx, [edx + 2]
movzx eax, word [edx + ecx]
mov edi, eax
test ax, ax
jne 0x461ca0
mov ecx, dword [ebp - 0x2f0]
xor eax, eax
mov edi, dword [ebp - 0x304]
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x461cd7
push eax
call fcn.00489ed3
mov ecx, dword [ebp - 0x2f0]
add esp, 4
mov eax, dword [ebp - 0x2ec]
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov byte [ecx + 8], 1
test eax, eax
jne 0x461d04
push 2
call fcn.0048a28e
mov ecx, dword [ebp - 0x2f0]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
mov esi, dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
jne 0x461d2b
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0x32c], 0
jmp 0x461da1
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x14
push 0x50
push 0x7e
and eax, 1
push 0xbe
shl eax, 0x11
add eax, 0x50800302
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x4c018c
push 0
call esi
test eax, eax
jne 0x461d78
mov dword [ebp - 0x32c], eax
jmp 0x461da1
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccc80]
mov dword [ebp - 0x32c], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x461e19
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x12
push 0xa0
push 0x95
and eax, 1
push 0x14
shl eax, 0x11
add eax, 0x50000100
push eax
push 0x4c9e48
push 0x4c018c
push 0
call esi
test eax, eax
je 0x461e19
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
movaps xmm0, xmmword [0x4ccb30]
lea ecx, [eax + eax*8]
mov eax, dword [ebp - 0x284]
movups xmmword [eax + ecx*8 + 0x24], xmm0
mov ecx, dword [ebp - 0x310]
sub esp, 8
sub ecx, dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x314]
sbb eax, dword [ebp - 0x308]
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00402130
mov esi, eax
mov dword [ebp - 0x300], esi
mov eax, dword [esi + 4]
mov byte [esi + 8], 0
test eax, eax
jne 0x461e6b
mov ecx, dword [esi]
test ecx, ecx
je 0x461e68
cmp word [ecx], ax
je 0x461e68
nop dword [eax]
inc eax
cmp word [ecx + eax*2], 0
jne 0x461e60
mov dword [esi + 4], eax
xor ecx, ecx
nop dword [eax]
inc ecx
cmp word [ecx*2 + 0x4bffa0], 0
jne 0x461e70
add eax, ecx
mov edx, 2
mov dword [ebp - 0x2fc], eax
xor ecx, ecx
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov ecx, dword [esi]
add esp, 4
mov esi, dword [ebp - 0x2f4]
mov edx, eax
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2f8], esi
test ecx, ecx
je 0x461f07
movzx ecx, word [ecx]
mov esi, ecx
mov dword [ebp - 0x30c], esi
mov esi, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], esi
test cx, cx
je 0x461f07
mov edi, dword [ebp - 0x2e4]
sub edi, eax
mov dword [ebp - 0x2f8], esi
mov eax, ecx
movzx ecx, ax
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edx + edi]
mov ecx, eax
test ax, ax
jne 0x461ef0
mov edi, dword [ebp - 0x304]
mov esi, 0x4bffa0
mov ecx, 0x20
sub esi, edx
mov word [edx], cx
lea edx, [edx + 2]
movzx eax, word [esi + edx]
mov ecx, eax
test ax, ax
jne 0x461f13
mov ecx, dword [ebp - 0x300]
xor eax, eax
mov esi, dword [ebp - 0x2f8]
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x461f4a
push eax
call fcn.00489ed3
mov ecx, dword [ebp - 0x300]
add esp, 4
mov edx, dword [ebp - 0x320]
mov eax, dword [ebp - 0x2fc]
mov dword [ecx], edx
mov dword [ecx + 4], eax
mov byte [ecx + 8], 1
test edx, edx
jne 0x461f7d
push 2
call fcn.0048a28e
mov ecx, dword [ebp - 0x300]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
mov eax, dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2e4], eax
call fcn.00416d40
test al, al
jne 0x461fa4
mov dword [ebp - 0x300], 0
jmp 0x462020
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x14
push 0x50
push 0x95
and eax, 1
push 0xbe
shl eax, 0x11
add eax, 0x50800302
push eax
push dword [ebp - 0x2e4]
push 0x4c018c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x461ff7
mov dword [ebp - 0x300], eax
jmp 0x462020
push eax
push 0xd
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccc90]
mov dword [ebp - 0x300], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
cmp dword [ebp - 0x90], 0
je 0x4620b1
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x4620b1
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x1e
push 0x64
push 0x8c
and eax, 1
push 0x136
shl eax, 0x11
add eax, 0x50010000
push eax
push 0x4c033c
push 0x4c019c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4620b1
push eax
push 3
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccea0]
mov dword [ebp - 0x31c], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x4620bb
mov dword [ebp - 0x31c], 0
sub esp, 8
lea ecx, [ebp - 0x2c0]
push 0x4c4258
push 0xffffffffffffffff
call fcn.00415120
cmp dword [ebp - 0x90], 0
je 0x462161
lea ecx, [ebp - 0x2c0]
call fcn.00416d40
test al, al
je 0x462161
mov eax, dword [ebp - 0x280]
push 0
push dword [ebp - 0x1a4]
inc eax
push eax
push dword [ebp - 0x8c]
movzx eax, byte [ebp - 0x78]
push 0x20
push 0x78
push 0x8c
and eax, 1
push 0x1ae
shl eax, 0x11
add eax, 0x50010000
push eax
push 0x4c9e6c
push 0x4c019c
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x462161
push eax
push 3
lea ecx, [ebp - 0x2c0]
call fcn.00416ab0
mov ecx, dword [ebp - 0x284]
movaps xmm0, xmmword [0x4ccf20]
mov dword [ebp - 0x2ec], eax
lea edx, [eax + eax*8]
movups xmmword [ecx + edx*8 + 0x24], xmm0
jmp 0x46216b
mov dword [ebp - 0x2ec], 0
sub esp, 8
lea ecx, [ebp - 0x2c0]
push 0x4c9e84
push 0xffffffffffffffff
call fcn.00415120
mov eax, 0x1b
mov byte [ebp - 0x1c], 1
mov word [ebp - 0x1a], ax
mov eax, dword [ebp - 0x31c]
mov word [ebp - 0x18], ax
mov eax, dword [ebp - 0x7c]
test eax, eax
je 0x4621a5
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
push 1
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
xor ecx, ecx
cmp eax, 0xffffffff
push 1
cmove eax, ecx
lea ecx, [ebp - 0x2c0]
push 1
mov dword [ebp - 0x7c], eax
call fcn.0040db40
push 0
mov ecx, edi
call fcn.004284d0
test eax, eax
je 0x462b3b
mov eax, dword [ebp - 0x310]
xorps xmm1, xmm1
sub eax, dword [ebp - 0x330]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x314]
sbb eax, dword [ebp - 0x334]
mov dword [ebp - 0x320], eax
nop dword [eax]
nop word [eax + eax]
mov eax, dword [edi + 0x22c]
cmp eax, 0xfffffffa
je 0x462bb4
lea ecx, [ebp - 0x2c0]
cmp dword [edi + 0x25c], ecx
jne 0x462b21
cmp eax, dword [ebp - 0x31c]
je 0x462bb4
cmp eax, esi
jne 0x462699
mov ecx, dword [ebp - 0x284]
mov edx, esi
cmp esi, 0xffffffff
jne 0x46225a
mov edx, dword [ebp - 0x280]
jmp 0x462275
test ecx, ecx
je 0x46228d
cmp esi, 1
jl 0x46228d
cmp esi, dword [ebp - 0x280]
jg 0x46228d
lea eax, [esi + esi*8]
cmp dword [ecx + eax*8 + 0xc], 0
je 0x46228d
push 0
push 0
push 0x400
lea eax, [edx + edx*8]
push dword [ecx + eax*8 + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x46228f
xor eax, eax
push dword [ebp - 0x320]
cdq
push dword [ebp - 0x30c]
push edx
push eax
call fcn.0049aa20
mov edi, eax
mov ecx, edx
mov edx, 0xe147ae15
mov dword [ebp - 0x2f0], edi
mul edx
mov dword [ebp - 0x308], ecx
mov dword [ebp - 0x2e8], eax
mov esi, edx
mov eax, edi
mov edx, 0x47ae147a
mul edx
mov edi, eax
mov dword [ebp - 0x2fc], edx
mov eax, ecx
mov ecx, 0xe147ae15
mul ecx
mov ecx, eax
mov dword [ebp - 0x2e4], edx
mov eax, dword [ebp - 0x308]
mov edx, 0x47ae147a
mul edx
add ecx, esi
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2f4], edx
mov edx, dword [ebp - 0x2e4]
adc edx, 0
add edi, ecx
mov ecx, dword [ebp - 0x2fc]
adc ecx, 0
mov dword [ebp - 0x2e8], edi
mov edi, dword [ebp - 0x308]
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x2c4]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0x2f4]
adc edx, eax
mov eax, dword [ebp - 0x2f0]
sub eax, ecx
sbb edi, edx
shrd eax, edi, 1
shr edi, 1
add eax, ecx
adc edi, edx
shrd eax, edi, 6
shr edi, 6
add eax, dword [ebp - 0x330]
mov dword [ebp - 0x2f0], eax
mov ecx, eax
adc edi, dword [ebp - 0x334]
mov eax, edi
mov dword [ebp - 0x308], edi
shrd ecx, eax, 0x14
shr eax, 0x14
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00401cb0
mov esi, eax
cmp dword [esi], 0
jne 0x462398
push 2
call fcn.0048a28e
add esp, 4
mov dword [esi], eax
xor ecx, ecx
mov word [eax], cx
mov dword [esi + 4], ecx
push 0
push dword [esi]
lea ecx, [ebp - 0x2c0]
mov byte [esi + 8], 1
push dword [ebp - 0x328]
call fcn.00414a80
sub esp, 8
lea ecx, [ebp - 0x28]
push edi
push dword [ebp - 0x2f0]
call fcn.00402130
mov edi, eax
mov esi, dword [edi + 4]
mov byte [edi + 8], 0
test esi, esi
jne 0x4623eb
mov eax, dword [edi]
test eax, eax
je 0x4623e8
cmp word [eax], si
je 0x4623e8
nop dword [eax + eax]
inc esi
cmp word [eax + esi*2], 0
jne 0x4623e0
mov dword [edi + 4], esi
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x4623f0
add esi, eax
xor ecx, ecx
mov edx, 2
mov dword [ebp - 0x2c4], esi
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov ecx, dword [edi]
add esp, 4
mov dword [ebp - 0x2fc], eax
mov edx, eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2f4], eax
test ecx, ecx
je 0x462481
movzx ecx, word [ecx]
mov dword [ebp - 0x2f4], eax
mov esi, ecx
mov dword [ebp - 0x2f8], esi
test cx, cx
je 0x462481
mov ecx, dword [ebp - 0x2e4]
sub ecx, edx
movzx esi, si
mov dword [ebp - 0x2f4], eax
nop word [eax + eax]
mov word [edx], si
add edx, 2
movzx eax, word [ecx + edx]
mov esi, eax
test ax, ax
jne 0x462470
mov esi, 0x4bffa0
mov ecx, 0x20
sub esi, edx
nop dword [eax]
mov word [edx], cx
lea edx, [edx + 2]
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x462490
mov esi, dword [ebp - 0x2c4]
xor eax, eax
mov word [edx], ax
mov eax, dword [edi]
test eax, eax
je 0x4624bb
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2fc]
mov dword [edi], eax
mov dword [edi + 4], esi
mov byte [edi + 8], 1
test eax, eax
jne 0x4624e2
push 2
call fcn.0048a28e
add esp, 4
mov dword [edi], eax
xor ecx, ecx
mov word [eax], cx
mov dword [edi + 4], ecx
push 0
push dword [edi]
lea ecx, [ebp - 0x2c0]
mov byte [edi + 8], 1
push dword [ebp - 0x32c]
call fcn.00414a80
mov ecx, dword [ebp - 0x310]
sub esp, 8
sub ecx, dword [ebp - 0x2f0]
mov eax, dword [ebp - 0x314]
sbb eax, dword [ebp - 0x308]
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00402130
mov edi, eax
mov esi, dword [edi + 4]
mov byte [edi + 8], 0
test esi, esi
jne 0x462543
mov eax, dword [edi]
test eax, eax
je 0x462540
cmp word [eax], si
je 0x462540
inc esi
cmp word [eax + esi*2], 0
jne 0x462538
mov dword [edi + 4], esi
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x462550
add esi, eax
xor ecx, ecx
mov edx, 2
mov dword [ebp - 0x2f0], esi
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov ecx, dword [edi]
add esp, 4
mov dword [ebp - 0x2fc], eax
mov edx, eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2f8], eax
test ecx, ecx
je 0x4625f6
movzx ecx, word [ecx]
mov eax, ecx
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], eax
test cx, cx
je 0x4625f6
mov eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x2e4]
movzx eax, ax
sub ecx, edx
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2f4]
mov esi, dword [ebp - 0x2e4]
mov dword [ebp - 0x2f8], eax
mov word [edx], si
add edx, 2
movzx eax, word [ecx + edx]
mov esi, eax
test ax, ax
jne 0x4625e5
mov esi, 0x4bffa0
mov ecx, 0x20
sub esi, edx
mov word [edx], cx
lea edx, [edx + 2]
movzx eax, word [edx + esi]
mov ecx, eax
test ax, ax
jne 0x462602
mov esi, dword [ebp - 0x2f0]
xor eax, eax
mov word [edx], ax
mov eax, dword [edi]
test eax, eax
je 0x46262d
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2fc]
mov dword [edi], eax
mov dword [edi + 4], esi
mov byte [edi + 8], 1
test eax, eax
jne 0x462654
push 2
call fcn.0048a28e
add esp, 4
mov dword [edi], eax
xor ecx, ecx
mov word [eax], cx
mov dword [edi + 4], ecx
push 0
push dword [edi]
lea ecx, [ebp - 0x2c0]
mov byte [edi + 8], 1
push dword [ebp - 0x300]
call fcn.00414a80
mov edi, dword [ebp - 0x304]
lea esi, [edi + 0x598]
push esi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esi + 4]
mov ecx, dword [esi]
call fcn.0049acf0
divsd xmm0, qword [esi + 0x10]
movsd qword [esi + 8], xmm0
jmp 0x462b21
cmp eax, 0xffffffb4
jne 0x462abf
mov eax, dword [ebp - 0x328]
cmp dword [edi + 0x238], eax
jne 0x462abf
movsd xmm0, qword [edi + 0x5a0]
lea ecx, [edi + 0x598]
ucomisd xmm0, xmm1
movsd qword [ebp - 0x2e8], xmm0
lahf
test ah, 0x44
jnp 0x462abf
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [edi + 0x59c]
mov ecx, dword [edi + 0x598]
call fcn.0049acf0
divsd xmm0, qword [edi + 0x5a8]
subsd xmm0, qword [ebp - 0x2e8]
comisd xmm0, xmmword [0x4cc7a8]
jbe 0x462abf
push dword [ebp - 0x328]
lea ecx, [ebp - 0x2c0]
call fcn.00415800
mov dword [ebp - 0x2e4], eax
test eax, eax
mov eax, dword [ebp - 0x28]
jne 0x46277b
test eax, eax
je 0x462739
push eax
call fcn.00489ed3
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x462773
nop dword [eax]
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462760
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x462798
test eax, eax
je 0x462788
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x20], 1
call fcn.00401fd0
mov ecx, edx
shld ecx, eax, 0x14
push ecx
push dword [ebp - 0x320]
shl eax, 0x14
push dword [ebp - 0x30c]
mov dword [ebp - 0x2e4], ecx
push ecx
push eax
push esi
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2c4], eax
call fcn.00415380
sub esp, 8
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2e4]
push dword [ebp - 0x2c4]
call fcn.00402130
mov dword [ebp - 0x2f0], eax
mov esi, dword [eax + 4]
mov byte [eax + 8], 0
test esi, esi
jne 0x462812
mov ecx, dword [eax]
test ecx, ecx
je 0x46280f
cmp word [ecx], si
je 0x46280f
inc esi
cmp word [ecx + esi*2], 0
jne 0x462807
mov dword [eax + 4], esi
xor eax, eax
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x462814
add esi, eax
xor ecx, ecx
mov edx, 2
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov ecx, dword [ebp - 0x2f0]
mov edx, eax
add esp, 4
mov dword [ebp - 0x2fc], edx
mov eax, dword [ecx]
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x2f4], eax
je 0x4628a7
mov ecx, dword [ebp - 0x308]
mov dword [ebp - 0x2f4], eax
movzx ecx, word [ecx]
mov edi, ecx
mov dword [ebp - 0x2f8], edi
test cx, cx
je 0x4628a7
mov ecx, dword [ebp - 0x308]
sub ecx, edx
movzx edi, di
mov dword [ebp - 0x2f4], eax
mov word [edx], di
add edx, 2
movzx eax, word [ecx + edx]
mov edi, eax
test ax, ax
jne 0x462896
mov ecx, 0x4bffa0
mov edi, 0x20
sub ecx, edx
mov word [edx], di
lea edx, [edx + 2]
movzx eax, word [ecx + edx]
mov edi, eax
test ax, ax
jne 0x4628b3
mov ecx, dword [ebp - 0x2f0]
xor eax, eax
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x4628e4
push eax
call fcn.00489ed3
mov ecx, dword [ebp - 0x2f0]
add esp, 4
mov eax, dword [ebp - 0x2fc]
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov byte [ecx + 8], 1
test eax, eax
jne 0x462911
push 2
call fcn.0048a28e
mov ecx, dword [ebp - 0x2f0]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
push 0
push dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
push dword [ebp - 0x32c]
call fcn.00414a80
mov ecx, dword [ebp - 0x310]
sub esp, 8
sub ecx, dword [ebp - 0x2c4]
mov eax, dword [ebp - 0x314]
sbb eax, dword [ebp - 0x2e4]
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.00402130
mov dword [ebp - 0x2f0], eax
mov esi, dword [eax + 4]
mov byte [eax + 8], 0
test esi, esi
jne 0x46297b
mov ecx, dword [eax]
test ecx, ecx
je 0x462978
cmp word [ecx], si
je 0x462978
nop dword [eax + eax]
inc esi
cmp word [ecx + esi*2], 0
jne 0x462970
mov dword [eax + 4], esi
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4bffa0], 0
jne 0x462980
add esi, eax
xor ecx, ecx
mov edx, 2
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov ecx, dword [ebp - 0x2f0]
add esp, 4
mov dword [ebp - 0x2fc], eax
mov edx, dword [ecx]
mov dword [ebp - 0x2e4], edx
mov edx, eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2e4]
test eax, eax
je 0x462a31
movzx ecx, word [eax]
mov eax, ecx
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], eax
test cx, cx
je 0x462a31
mov eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x2e4]
movzx eax, ax
sub ecx, edx
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2f4]
mov edi, dword [ebp - 0x2e4]
mov dword [ebp - 0x2f8], eax
nop dword [eax + eax]
mov word [edx], di
add edx, 2
movzx eax, word [edx + ecx]
mov edi, eax
test ax, ax
jne 0x462a20
mov ecx, 0x4bffa0
mov edi, 0x20
sub ecx, edx
nop dword [eax]
mov word [edx], di
lea edx, [edx + 2]
movzx eax, word [ecx + edx]
mov edi, eax
test ax, ax
jne 0x462a40
mov ecx, dword [ebp - 0x2f0]
xor eax, eax
mov edi, dword [ebp - 0x304]
mov word [edx], ax
mov eax, dword [ecx]
test eax, eax
je 0x462a77
push eax
call fcn.00489ed3
mov ecx, dword [ebp - 0x2f0]
add esp, 4
mov eax, dword [ebp - 0x2fc]
mov dword [ecx], eax
mov dword [ecx + 4], esi
mov byte [ecx + 8], 1
test eax, eax
jne 0x462aa4
push 2
call fcn.0048a28e
mov ecx, dword [ebp - 0x2f0]
add esp, 4
xor edx, edx
mov dword [ecx], eax
mov word [eax], dx
mov dword [ecx + 4], edx
push 0
push dword [ecx]
mov byte [ecx + 8], 1
lea ecx, [ebp - 0x2c0]
push dword [ebp - 0x300]
call fcn.00414a80
jmp 0x462b21
mov eax, dword [ebp - 0x2ec]
cmp dword [edi + 0x22c], eax
jne 0x462b21
push 1
push 0
lea ecx, [ebp - 0x2c0]
call fcn.0040db40
nop dword [eax]
push 1
mov ecx, edi
call fcn.004284d0
test eax, eax
jne 0x462ae0
push ecx
push 0x1c2
push 0x96
lea eax, [edi + 0x2a8]
mov ecx, edi
push eax
push 1
push 0x4c9eb8
call fcn.00432b40
cmp eax, 1
je 0x462b3b
push 1
push 5
lea ecx, [ebp - 0x2c0]
call fcn.0040db40
push 0
mov ecx, edi
call fcn.004284d0
mov esi, dword [ebp - 0x2f8]
xorps xmm1, xmm1
test eax, eax
jne 0x462210
push 3
push dword [ebp - 0x338]
lea ecx, [edi + 0x2a8]
mov dword [ebp - 0x2e0], edi
push dword [edi + 0xbc]
call fcn.00416470
mov esi, eax
mov eax, dword [ebp - 0x28]
test esi, esi
jne 0x462bbc
test eax, eax
je 0x462b70
push eax
call fcn.00489ed3
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x462ba6
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462b93
xor ecx, ecx
mov word [edx + eax*2], cx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
jmp 0x462bd1
or edi, 0xffffffff
jmp 0x463aab
test eax, eax
je 0x462bc9
push eax
call fcn.00489ed3
add esp, 4
xor eax, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x20], 1
test esi, esi
je 0x462c00
test eax, eax
jne 0x462bef
cmp word [esi], ax
je 0x462bea
inc eax
cmp word [esi + eax*2], 0
jne 0x462be2
mov dword [ebp - 0x24], eax
test eax, eax
jle 0x462c00
push esi
mov byte [ebp - 0x20], 1
call fcn.0048e06c
add esp, 4
jmp 0x462c06
mov byte [ebp - 0x20], 0
xor eax, eax
push 4
push dword [ebp - 0x324]
lea ecx, [edi + 0x2a8]
mov dword [ebp - 0x2dc], eax
push dword [edi + 0xd8]
call fcn.00416470
mov esi, eax
mov eax, dword [ebp - 0x28]
test esi, esi
jne 0x462c81
test eax, eax
je 0x462c3b
push eax
call fcn.00489ed3
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x462c73
nop
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462c60
xor ecx, ecx
mov word [edx + eax*2], cx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
jmp 0x462c96
test eax, eax
je 0x462c8e
push eax
call fcn.00489ed3
add esp, 4
xor eax, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x20], 1
test esi, esi
je 0x462cc5
test eax, eax
jne 0x462cb4
cmp word [esi], ax
je 0x462caf
inc eax
cmp word [esi + eax*2], 0
jne 0x462ca7
mov dword [ebp - 0x24], eax
test eax, eax
jle 0x462cc5
push esi
mov byte [ebp - 0x20], 1
call fcn.0048e06c
add esp, 4
jmp 0x462ccb
mov byte [ebp - 0x20], 0
xor eax, eax
push dword [ebp - 0x328]
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x2d8], eax
call fcn.00415800
mov esi, eax
mov eax, dword [ebp - 0x28]
test esi, esi
jne 0x462d3b
test eax, eax
je 0x462cf8
push eax
call fcn.00489ed3
add esp, 4
push 2
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x462d33
nop dword [eax + eax]
mov ax, word [ecx + ecx]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x462d20
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x462d52
test eax, eax
je 0x462d48
push eax
call fcn.00489ed3
add esp, 4
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x20], 1
call fcn.00401fd0
mov ecx, dword [ebp - 0x314]
shld edx, eax, 0x14
shl eax, 0x14
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], edx
cmp edx, ecx
jb 0x462d97
ja 0x462d85
cmp eax, dword [ebp - 0x310]
jbe 0x462d97
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
lea ecx, [ebp - 0x2c0]
call fcn.0040c540
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0x34]
call fcn.00401e50
mov esi, dword [ebp - 0x28]
test esi, esi
jne 0x462dcf
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x34]
mov byte [ebp - 0x20], 1
mov dword [ebp - 0x318], eax
test eax, eax
jne 0x462dfb
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x318], eax
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
mov word [eax], cx
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x2c], 1
call fcn.00401e50
mov edx, dword [ebp - 0x318]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2fc], edx
mov ecx, dword [eax]
mov dword [ebp - 0x300], ecx
xor ecx, ecx
mov dword [eax], 0
mov byte [eax + 8], 0
mov dword [eax + 4], 0
nop word [eax + eax]
inc ecx
cmp word [ecx*2 + 0x4c9f18], 0
jne 0x462e40
test edx, edx
je 0x462e61
xor eax, eax
cmp word [edx], ax
je 0x462e5f
inc eax
cmp word [edx + eax*2], 0
jne 0x462e57
add ecx, eax
xor eax, eax
inc eax
cmp word [eax*2 + 0x4c8390], 0
jne 0x462e63
add ecx, eax
test esi, esi
je 0x462e8a
xor eax, eax
cmp word [esi], ax
je 0x462e88
nop dword [eax]
inc eax
cmp word [esi + eax*2], 0
jne 0x462e80
add ecx, eax
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4c439c], 0
jne 0x462e90
add ecx, eax
mov edx, 2
mov dword [ebp - 0x2ec], ecx
lea eax, [ecx + 1]
xor ecx, ecx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov ecx, dword [ebp - 0x2e4]
add esp, 4
mov dword [ebp - 0x2c4], eax
mov edx, eax
mov ecx, dword [ecx]
mov dword [ebp - 0x30c], ecx
test ecx, ecx
je 0x462f11
movzx ecx, word [ecx]
mov edi, ecx
mov dword [ebp - 0x320], edi
test cx, cx
je 0x462f11
mov edi, dword [ebp - 0x30c]
sub edi, eax
mov eax, ecx
movzx ecx, ax
nop word [eax + eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x462f00
mov edi, 0x4c9f18
mov ecx, 0x50
sub edi, edx
nop dword [eax]
mov word [edx], cx
add edx, 2
movzx eax, word [edi + edx]
mov ecx, eax
test ax, ax
jne 0x462f20
mov eax, dword [ebp - 0x318]
test eax, eax
je 0x462f61
movzx eax, word [eax]
mov ecx, eax
test ax, ax
je 0x462f61
mov edi, dword [ebp - 0x2fc]
nop dword [eax + eax]
mov word [edx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
add edx, 2
test ax, ax
jne 0x462f50
mov eax, 0x20
mov edi, 0x4c8390
nop dword [eax + eax]
mov word [edx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
add edx, 2
test ax, ax
jne 0x462f70
test esi, esi
je 0x462fa1
movzx eax, word [esi]
mov ecx, eax
test ax, ax
je 0x462fa1
nop
mov word [edx], ax
lea esi, [esi + 2]
movzx eax, word [esi]
add edx, 2
test ax, ax
jne 0x462f90
mov eax, 0x2e
mov edi, 0x4c439c
nop dword [eax + eax]
mov word [edx], ax
lea edi, [edi + 2]
movzx eax, word [edi]
lea edx, [edx + 2]
test ax, ax
jne 0x462fb0
mov esi, dword [ebp - 0x2e4]
xor eax, eax
mov edi, dword [ebp - 0x304]
mov word [edx], ax
mov eax, dword [esi]
test eax, eax
je 0x462fe1
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x2c4]
mov dword [esi], eax
mov eax, dword [ebp - 0x2ec]
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x300]
mov byte [esi + 8], 1
test eax, eax
je 0x463009
push eax
call fcn.00489ed3
add esp, 4
mov edx, dword [ebp - 0x28]
test edx, edx
jne 0x463028
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
sub esp, 8
mov byte [ebp - 0x20], 1
lea eax, [edi + 0x2a8]
lea ecx, [edi + 0x5b0]
push 0
push 0xffffffffffffffb0
sub esp, 0x10
push eax
push edx
call fcn.004192c0
mov ecx, eax
call fcn.0041a070
mov ecx, eax
call fcn.0041a580
push 0
push 0
lea eax, [ebp - 0x2e0]
push eax
push 0x46ff70
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
or eax, 0xffffffff
test esi, esi
cmove esi, eax
mov dword [ebp - 0x2e4], esi
mov dword [ebp - 0x2c4], esi
mov byte [ebp - 4], 0xa
test esi, esi
je 0x4630d4
cmp esi, eax
je 0x4630d4
push 0
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x4630d4
push 0
mov ecx, edi
call fcn.004284d0
cmp dword [edi], 0
jne 0x463093
cmp dword [edi + 0x22c], 0xfffffffa
jne 0x463093
push 0x4c2750
push 0xffffffffffffffb0
lea ecx, [edi + 0x5b0]
mov dword [edi], 1
call fcn.0041a070
jmp 0x463093
mov eax, dword [edi + 0x510]
cmp eax, 0xffffffff
je 0x4630fe
test eax, eax
je 0x4630fe
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x510], 0xffffffff
mov dword [edi + 0x514], 0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
sub esp, 8
lea ecx, [edi + 0x168]
call fcn.0041b0e0
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x46312e
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
test eax, eax
jne 0x4631b2
mov byte [ebp - 0x20], al
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4c9f60], 0
jne 0x463150
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4631a7
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4c9f60]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463190
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x4639c8
cmp dword [edi], 0
je 0x463222
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4c8d40], 0
jne 0x4631c0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4631a7
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4c8d40]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463200
xor ecx, ecx
mov word [edx + eax*2], cx
jmp 0x4639c8
cmp eax, 1
jne 0x46328c
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc490], 0
jne 0x463230
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463677
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc490]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463270
jmp 0x463677
cmp eax, 2
jne 0x4632fc
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc4c4], 0
jne 0x4632a0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463677
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc4c4]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4632e0
jmp 0x463677
cmp eax, 3
jne 0x46336c
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc4ec], 0
jne 0x463310
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463677
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc4ec]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463350
jmp 0x463677
cmp eax, 4
jne 0x4633dc
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc518], 0
jne 0x463380
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463677
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc518]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4633c0
jmp 0x463677
cmp eax, 5
jne 0x46344c
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc53c], 0
jne 0x4633f0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463677
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc53c]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463430
jmp 0x463677
cmp eax, 6
jne 0x4634bc
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc564], 0
jne 0x463460
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463677
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc564]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4634a0
jmp 0x463677
cmp eax, 0x1001
jne 0x46352c
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc590], 0
jne 0x4634d0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463677
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc590]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463510
jmp 0x463677
cmp eax, 0x9c41
jne 0x46359c
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc5b8], 0
jne 0x463540
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463677
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc5b8]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463580
jmp 0x463677
cmp eax, 0x9c42
jne 0x463609
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4cc5d8], 0
jne 0x4635b0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463677
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4cc5d8]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4635f0
jmp 0x463677
cmp eax, 0x9c44
jne 0x4636a4
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4cc650], 0
jne 0x463620
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x463677
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4cc650]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463660
xor ecx, ecx
mov word [edx + eax*2], cx
mov byte [ebp - 0x20], 1
cmp dword [ebp - 0x28], ecx
jne 0x4638cd
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 0x24], ecx
jmp 0x4638cd
cmp eax, 0xffffffff
jne 0x46370c
mov byte [ebp - 0x20], 0
xor eax, eax
nop
inc eax
cmp word [eax*2 + 0x4c8d80], 0
jne 0x4636b0
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4638c7
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4c8d80]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4636f0
jmp 0x4638c7
cmp eax, 0xfffffffe
jne 0x46377c
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4c9fc8], 0
jne 0x463720
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4638c7
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4c9fc8]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463760
jmp 0x4638c7
cmp eax, 0xa418
jne 0x4637ec
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4ca010], 0
jne 0x463790
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4638c7
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4ca010]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4637d0
jmp 0x4638c7
cmp eax, 0xa419
jne 0x463859
mov byte [ebp - 0x20], 0
xor eax, eax
nop dword [eax]
inc eax
cmp word [eax*2 + 0x4ca088], 0
jne 0x463800
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4638c7
nop dword [eax + eax]
mov ax, word [ecx*2 + 0x4ca088]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x463840
jmp 0x4638c7
cmp eax, 0xa41b
jne 0x4638cd
mov byte [ebp - 0x20], 0
xor eax, eax
nop word [eax + eax]
inc eax
cmp word [eax*2 + 0x4ca108], 0
jne 0x463870
mov dword [ebp - 0x24], eax
xor ecx, ecx
inc eax
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, eax
add esp, 4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x28], edx
test eax, eax
jle 0x4638c7
nop word [eax + eax]
mov ax, word [ecx*2 + 0x4ca108]
mov word [edx + ecx*2], ax
inc ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
cmp ecx, eax
jl 0x4638b0
xor ecx, ecx
mov word [edx + eax*2], cx
cmp dword [ebp - 0x24], 0
mov byte [ebp - 0x20], 0
jne 0x4638f4
xor ecx, ecx
cmp dword [ebp - 0x28], ecx
je 0x4638f1
mov eax, dword [ebp - 0x28]
cmp word [eax], cx
je 0x4638f1
mov eax, dword [ebp - 0x28]
inc ecx
cmp word [eax + ecx*2], 0
jne 0x4638e6
mov dword [ebp - 0x24], ecx
xor ecx, ecx
nop word [eax + eax]
inc ecx
cmp word [ecx*2 + 0x4ca180], 0
jne 0x463900
mov eax, dword [ebp - 0x24]
mov edx, 2
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x2fc], eax
inc eax
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0048a28e
mov edx, dword [ebp - 0x28]
mov esi, 0x4ca180
add esp, 4
mov dword [ebp - 0x320], eax
mov ecx, eax
mov edi, 0x54
sub esi, eax
nop dword [eax + eax]
mov word [ecx], di
add ecx, 2
movzx eax, word [ecx + esi]
mov edi, eax
test ax, ax
jne 0x463950
cmp dword [ebp - 0x28], 0
mov esi, dword [ebp - 0x2e4]
mov edi, dword [ebp - 0x304]
je 0x4639a1
movzx eax, word [edx]
mov esi, eax
mov dword [ebp - 0x30c], esi
mov esi, dword [ebp - 0x2e4]
test ax, ax
je 0x4639a1
movzx eax, ax
nop dword [eax]
mov word [ecx], ax
lea edx, [edx + 2]
movzx eax, word [edx]
add ecx, 2
test ax, ax
jne 0x463990
xor eax, eax
mov word [ecx], ax
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x4639b6
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x28], 0
mov byte [ebp - 0x20], 1
jne 0x4639e7
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x28]
mov byte [ebp - 0x20], 1
mov dword [ebp - 0x2e4], eax
test eax, eax
jne 0x463a13
push 2
call fcn.0048a28e
add esp, 4
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov word [eax], cx
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x24], ecx
push 0
push 0x4c2b50
push ecx
push eax
push dword [ebp - 0x28]
lea ecx, [edi + 0x5b0]
mov byte [ebp - 0x20], 1
push 0x64
call fcn.0041a070
mov ecx, eax
call fcn.00419f00
mov ecx, eax
call fcn.0041a380
push 0
mov ecx, edi
call fcn.004284d0
test eax, eax
je 0x463a7e
nop dword [eax + eax]
mov ecx, dword [edi + 0x22c]
cmp ecx, 0xfffffffa
je 0x463a7e
lea eax, [edi + 0x628]
cmp dword [edi + 0x25c], eax
jne 0x463a71
cmp ecx, dword [edi + 0x5b8]
je 0x463a7e
push 0
mov ecx, edi
call fcn.004284d0
test eax, eax
jne 0x463a50
push dword [ebp - 0x338]
mov ecx, edi
call fcn.0042cd20
lea ecx, [edi + 0x5b0]
call fcn.00419810
mov edi, 1
cmp esi, 0xffffffff
je 0x463aab
test esi, esi
je 0x463aab
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0xb
call fcn.0040c540
mov eax, dword [ebp - 0x284]
test eax, eax
je 0x463acd
push eax
call fcn.00489ed3
add esp, 4
mov eax, dword [ebp - 0x1b0]
test eax, eax
je 0x463ae0
push ecx
push 0x1c2
push 0x96
lea eax, [edi + 0x2a8]
push eax
push 0
push 0x4c3bf0
mov ecx, edi
call fcn.00432b40
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00489ec5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret