Function at 0x46929c
Capabilities:
Accept command line arguments
Allocate thread local storage
Check os version
Connect pipe
Create directory
Delete directory
Enumerate gui resources
Get disk information
Get file attributes
Get geographical location
Get graphical window text
Hide graphical window
Identify system language via api
Log keystrokes
Query environment variable
Query service status
Read .ini file
Resume thread
Set registry value
Set thread local storage value
Start service
Suspend thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x7558
call fcn.004bd230
push esi
push edi
mov dword [ebp - 0x5894], 0xfffffff9
mov dword [ebp - 0x5890], 0xfffffff9
mov dword [ebp - 0x588c], 0xfffffff9
mov dword [ebp - 0x5888], 0xfffffff9
lea ecx, [ebp - 0x1769]
call fcn.00415bea
push eax
lea eax, [ebp - 0x5884]
push eax
lea eax, [ebp - 0x5894]
push eax
lea ecx, [ebp - 0x7320]
call fcn.00415bed
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5638]
call fcn.00415b99
mov dword [ebp - 0x5ac], 0xffffffff
mov dword [ebp - 0x4350], 0xcd04cd02
mov dword [ebp - 0x5ac], 0
jmp 0x469335
mov eax, dword [ebp - 0x5ac]
inc eax
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 3
jg 0x4695a4
mov dword [ebp - 0x5430], 0x2751c76d
mov dword [ebp - 0x542c], 0x2751c76d
mov dword [ebp - 0x5428], 0x2751c76d
mov dword [ebp - 0x5424], 0x2751c76d
mov dword [ebp - 0x4958], 0x83afd470
mov dword [ebp - 0xcbc], 0
jmp 0x46938d
mov eax, dword [ebp - 0xcbc]
inc eax
mov dword [ebp - 0xcbc], eax
cmp dword [ebp - 0xcbc], 2
jge 0x4693a9
mov eax, dword [ebp - 0xcbc]
mov dword [ebp + eax*4 - 0x6714], 0xbf24
jmp 0x469380
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5430], 3
jmp 0x4693d7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5430]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5430], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5430], 0
jl 0x46959f
mov dword [ebp - 0x18f0], 2
push 3
lea ecx, [ebp - 0x5e0c]
call fcn.00415aed
mov dword [ebp - 0x1074], 0
jmp 0x46941b
mov eax, dword [ebp - 0x1074]
inc eax
mov dword [ebp - 0x1074], eax
cmp dword [ebp - 0x1074], 3
jge 0x46943d
push dword [ebp - 0x1074]
lea ecx, [ebp - 0x5e0c]
call fcn.00415bdb
mov dword [eax], 0xb1b5
jmp 0x46940e
push dword [ebp - 0x5ac]
lea ecx, [ebp - 0x5638]
call fcn.00415bdb
mov dword [eax], 0x4215e1ab
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x6d40], eax
push 0
lea ecx, [ebp - 0x5638]
call fcn.00415bdb
cmp dword [eax], 0xd982
jne 0x469481
mov dword [ebp - 0x31ec], 1
jmp 0x469488
and dword [ebp - 0x31ec], 0
mov eax, dword [ebp - 0x31ec]
neg eax
add eax, dword [ebp - 0x18f0]
jne 0x4694a5
xor eax, eax
jne 0x4694a5
and dword [ebp - 0x4338], 0
jmp 0x4694af
mov dword [ebp - 0x4338], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6714]
cmp eax, dword [ebp - 0x4338]
jg 0x4694d0
mov dword [ebp - 0x4340], 1
jmp 0x4694d7
and dword [ebp - 0x4340], 0
cmp dword [ebp - 0x4340], 0xd7d2
jle 0x4694ef
mov dword [ebp - 0x4348], 1
jmp 0x4694f6
and dword [ebp - 0x4348], 0
push 2
lea ecx, [ebp - 0x5e0c]
call fcn.00415bdb
mov dword [ebp - 0x18f8], eax
mov eax, dword [ebp - 0x18f8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x18f8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4348]
mov dword [ebp - 0x18f0], eax
mov eax, dword [ebp - 0x18f0]
mov dword [ebp - 0x4350], eax
mov eax, dword [ebp - 0x4350]
mov ecx, dword [ebp - 0x18f8]
cmp dword [ecx], eax
jne 0x46954e
mov dword [ebp - 0x4358], 1
jmp 0x469555
and dword [ebp - 0x4358], 0
push dword [ebp - 0x5ac]
lea ecx, [ebp - 0x5638]
call fcn.00415bdb
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4358]
jne 0x46957c
mov dword [ebp - 0x4360], 1
jmp 0x469583
and dword [ebp - 0x4360], 0
mov eax, dword [ebp - 0x4360]
mov dword [ebp - 0x4958], eax
lea ecx, [ebp - 0x5e0c]
call fcn.00415bbf
jmp 0x4693bc
jmp 0x469328
lea ecx, [ebp - 0x5638]
call fcn.00415bbf
mov dword [ebp - 0xcc4], 0
mov byte [ebp - 0x82b], 0
movzx eax, byte [ebp - 0x82b]
test eax, eax
je 0x4695e6
push 0x13d0
push 0
push 0xa20
push 0x15bd
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0xcc4], 0
jmp 0x4695ff
mov eax, dword [ebp - 0xcc4]
inc eax
mov dword [ebp - 0xcc4], eax
cmp dword [ebp - 0xcc4], 0
jne 0x4696e1
push 3
lea ecx, [ebp - 0x56f8]
call fcn.00415aed
mov dword [ebp - 0x5b4], 0xa0029bf3
mov dword [ebp - 0x129c], 0
jmp 0x46963c
mov eax, dword [ebp - 0x129c]
inc eax
mov dword [ebp - 0x129c], eax
cmp dword [ebp - 0x129c], 3
jge 0x46965b
push dword [ebp - 0x129c]
lea ecx, [ebp - 0x56f8]
call fcn.00415bdb
or dword [eax], 0xffffffff
jmp 0x46962f
mov dword [ebp - 0x5b4], 0
jmp 0x469674
mov eax, dword [ebp - 0x5b4]
inc eax
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 2
jg 0x4696d1
mov dword [ebp - 0x4b10], 0xfffffffc
push dword [ebp - 0x5b4]
lea ecx, [ebp - 0x56f8]
call fcn.00415bdb
mov dword [ebp - 0x4368], eax
push dword [ebp - 0x5b4]
lea ecx, [ebp - 0x56f8]
call fcn.00415bdb
mov ecx, dword [ebp - 0x4368]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4368]
mov eax, dword [eax]
sub eax, dword [ebp - 0x5b4]
neg eax
mov dword [ebp - 0x4b10], eax
jmp 0x469667
lea ecx, [ebp - 0x56f8]
call fcn.00415bbf
jmp 0x4695f2
mov dword [ebp - 0x446c], 0xffffffff
mov dword [ebp - 0x107c], 5
mov dword [ebp - 0x14e8], 0xffffffff
mov dword [ebp - 0x14e0], 1
mov dword [ebp - 0x552c], 1
mov dword [ebp - 0x5528], 1
mov dword [ebp - 0x5524], 1
mov dword [ebp - 0x5520], 1
mov dword [ebp - 0xccc], 0x6721f7d
mov dword [ebp - 0x4388], 1
mov dword [ebp - 0x2d8], 0
jmp 0x46975e
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 3
jge 0x46977a
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0x4760], 0x99cfe04
jmp 0x469751
mov dword [ebp - 0x2d8], 0
jmp 0x469793
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 3
jge 0x4697af
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0x52a4], 0xfffffffe
jmp 0x469786
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4760]
mov dword [ebp - 0x6fe8], eax
mov eax, dword [ebp - 0xccc]
inc eax
mov dword [ebp - 0xccc], eax
mov eax, dword [ebp - 0xccc]
mov dword [ebp - 0x107c], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x552c], 0
mov dword [ebp - 0x14e8], 0
mov eax, dword [ebp - 0x14e8]
imul eax, dword [ebp - 0x14e0]
cmp dword [ebp - 0x107c], eax
jle 0x469817
mov dword [ebp - 0x4b18], 1
jmp 0x46981e
and dword [ebp - 0x4b18], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4760]
mov dword [ebp - 0x6668], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4760]
cmp dword [ebp - 0x107c], eax
jne 0x469852
mov dword [ebp - 0x4370], 1
jmp 0x469859
and dword [ebp - 0x4370], 0
mov eax, dword [ebp - 0x14e0]
cmp dword [ebp - 0x4370], eax
jge 0x469873
mov dword [ebp - 0x4378], 1
jmp 0x46987a
and dword [ebp - 0x4378], 0
mov eax, dword [ebp - 0x4378]
sub eax, dword [ebp - 0x4388]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x4760]
lea eax, [eax + ecx + 0x1abdf11c]
cmp eax, 0xffff
jne 0x4698ad
mov dword [ebp - 0x4380], 1
jmp 0x4698b4
and dword [ebp - 0x4380], 0
cmp dword [ebp - 0x4380], 0x1f19
je 0x4698cc
mov dword [ebp - 0x4390], 1
jmp 0x4698d3
and dword [ebp - 0x4390], 0
mov eax, dword [ebp - 0x4388]
cmp dword [ebp - 0x4390], eax
jge 0x4698fa
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x552c], 0
jne 0x4698fa
and dword [ebp - 0x4398], 0
jmp 0x469904
mov dword [ebp - 0x4398], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x52a4]
mov dword [ebp - 0x4b20], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4398]
sub ecx, dword [ebp + eax - 0x4760]
mov dword [ebp - 0x4b28], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x52a4]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x52a4], eax
mov eax, dword [ebp - 0x4b20]
cmp eax, dword [ebp - 0x4b28]
jne 0x469962
mov dword [ebp - 0x43a0], 1
jmp 0x469969
and dword [ebp - 0x43a0], 0
mov eax, dword [ebp - 0x43a0]
mov dword [ebp - 0x446c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4760], 0xfffc
jb 0x469993
mov dword [ebp - 0x4b30], 1
jmp 0x46999a
and dword [ebp - 0x4b30], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x52a4], 0
jne 0x4699b8
or eax, 0xffffffff
jne 0x4699b8
and dword [ebp - 0x444c], 0
jmp 0x4699c2
mov dword [ebp - 0x444c], 1
imul eax, dword [ebp - 0x444c], 0xfff8
cmp eax, 0xbc6c2db6
jb 0x4699eb
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4760], 0
jne 0x4699eb
and dword [ebp - 0x4b38], 0
jmp 0x4699f5
mov dword [ebp - 0x4b38], 1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x52a4], 0xcf63547a
je 0x469a17
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x469a17
and dword [ebp - 0x4454], 0
jmp 0x469a21
mov dword [ebp - 0x4454], 1
cmp dword [ebp - 0x4454], 1
je 0x469a36
mov dword [ebp - 0x445c], 1
jmp 0x469a3d
and dword [ebp - 0x445c], 0
cmp dword [ebp - 0x445c], 0xfffe
je 0x469a55
mov dword [ebp - 0x4464], 1
jmp 0x469a5c
and dword [ebp - 0x4464], 0
mov eax, dword [ebp - 0xccc]
imul eax, dword [ebp - 0x4464]
sub eax, 0xffff
sub eax, dword [ebp - 0x14e0]
cmp eax, dword [ebp - 0x446c]
jl 0x469a88
mov dword [ebp - 0x1738], 1
jmp 0x469a8f
and dword [ebp - 0x1738], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1738]
mov dword [ebp + eax - 0x552c], ecx
mov eax, dword [ebp - 0x107c]
cmp dword [ebp - 0x1738], eax
jl 0x469abc
mov dword [ebp - 0x4474], 1
jmp 0x469ac3
and dword [ebp - 0x4474], 0
mov eax, dword [ebp - 0x4474]
mov dword [ebp - 0x14e8], eax
mov dword [ebp - 0x5ac4], 0xfffffff9
mov dword [ebp - 0x5ac0], 0xfffffff9
mov dword [ebp - 0x5abc], 0xfffffff9
mov dword [ebp - 0x5ab8], 0xfffffff9
lea ecx, [ebp - 0x1771]
call fcn.00415bea
push eax
lea eax, [ebp - 0x5ab4]
push eax
lea eax, [ebp - 0x5ac4]
push eax
lea ecx, [ebp - 0x7330]
call fcn.00415bed
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x556c]
call fcn.00415b99
mov dword [ebp - 0x5cc], 0xffffffff
mov dword [ebp - 0xcd4], 0
mov dword [ebp - 0xcd4], 0x11
jmp 0x469b59
mov eax, dword [ebp - 0xcd4]
dec eax
mov dword [ebp - 0xcd4], eax
cmp dword [ebp - 0xcd4], 0xffffffeb
je 0x469c3b
mov dword [ebp - 0x1274], 1
mov dword [ebp - 0x6e88], 7
mov dword [ebp - 0x6e84], 7
mov dword [ebp - 0x6e80], 7
mov dword [ebp - 0x6e7c], 7
mov dword [ebp - 0x1274], 0
jmp 0x469bb1
mov eax, dword [ebp - 0x1274]
inc eax
mov dword [ebp - 0x1274], eax
cmp dword [ebp - 0x1274], 3
jle 0x469c36
push 3
lea ecx, [ebp - 0x5cbc]
call fcn.00415aed
mov dword [ebp - 0xcdc], 0
jmp 0x469be0
mov eax, dword [ebp - 0xcdc]
inc eax
mov dword [ebp - 0xcdc], eax
cmp dword [ebp - 0xcdc], 3
jge 0x469c02
push dword [ebp - 0xcdc]
lea ecx, [ebp - 0x5cbc]
call fcn.00415bdb
mov dword [eax], 7
jmp 0x469bd3
push 2
lea ecx, [ebp - 0x5cbc]
call fcn.00415bdb
mov dword [ebp - 0x447c], eax
mov eax, dword [ebp - 0x447c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x447c]
mov dword [ecx], eax
lea ecx, [ebp - 0x5cbc]
call fcn.00415bbf
jmp 0x469ba4
jmp 0x469b4c
mov dword [ebp - 0x1aa0], 0xcd04cd02
push 1
lea ecx, [ebp - 0x52b4]
call fcn.00415aed
mov dword [ebp - 0x4b40], 0
mov dword [ebp - 0x1084], 0
jmp 0x469c75
mov eax, dword [ebp - 0x1084]
inc eax
mov dword [ebp - 0x1084], eax
cmp dword [ebp - 0x1084], 1
jge 0x469c97
push dword [ebp - 0x1084]
lea ecx, [ebp - 0x52b4]
call fcn.00415bdb
mov dword [eax], 0x5d6c05ba
jmp 0x469c68
mov byte [ebp - 0x78d], 0
movzx eax, byte [ebp - 0x78d]
test eax, eax
je 0x469cb7
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push 0
lea ecx, [ebp - 0x52b4]
call fcn.00415bdb
mov dword [eax], 0xfffffff2
jmp 0x469cf0
push 0
lea ecx, [ebp - 0x52b4]
call fcn.00415bdb
mov dword [ebp - 0x4484], eax
mov eax, dword [ebp - 0x4484]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4484]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x52b4]
call fcn.00415bdb
cmp dword [eax], 5
jge 0x469dca
mov dword [ebp - 0xce4], 0xe0b4074d
mov dword [ebp - 0x4494], 1
mov dword [ebp - 0xce4], 0
jmp 0x469d33
mov eax, dword [ebp - 0xce4]
dec eax
mov dword [ebp - 0xce4], eax
cmp dword [ebp - 0xce4], 0xffffffee
je 0x469dab
mov dword [ebp - 0xa08], 0xfffffffb
mov dword [ebp - 0xa08], 0xffffffea
jmp 0x469d5f
mov eax, dword [ebp - 0xa08]
inc eax
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 3
je 0x469da6
cmp dword [ebp - 0x4b40], 1
je 0x469d83
cmp dword [ebp - 0xa08], 0
jne 0x469d83
and dword [ebp - 0x448c], 0
jmp 0x469d8d
mov dword [ebp - 0x448c], 1
mov eax, dword [ebp - 0x448c]
mov dword [ebp - 0x4494], eax
cmp dword [ebp - 0x4494], 0
je 0x469da4
jmp 0x469d52
jmp 0x469d52
jmp 0x469d26
mov byte [ebp - 0x81d], 0
movzx eax, byte [ebp - 0x81d]
test eax, eax
je 0x469dc5
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
jmp 0x469ccc
lea ecx, [ebp - 0x52b4]
call fcn.00415bbf
mov dword [ebp - 0xcec], 1
mov dword [ebp - 0x1258], 0
jmp 0x469df8
mov eax, dword [ebp - 0x1258]
inc eax
mov dword [ebp - 0x1258], eax
cmp dword [ebp - 0x1258], 3
jge 0x469e14
mov eax, dword [ebp - 0x1258]
mov dword [ebp + eax*4 - 0x70f8], 0xfffe
jmp 0x469deb
mov byte [ebp - 0x795], 0
movzx eax, byte [ebp - 0x795]
test eax, eax
je 0x469e3b
push 0x1bb0
push 0x1376
push 0x12d2
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [ebp - 0xcec], 0
jmp 0x469e54
mov eax, dword [ebp - 0xcec]
inc eax
mov dword [ebp - 0xcec], eax
cmp dword [ebp - 0xcec], 2
jg 0x469e70
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x70f8], 0
je 0x469e6e
jmp 0x469e70
jmp 0x469e47
mov dword [ebp - 0x5cc], 0
jmp 0x469e89
mov eax, dword [ebp - 0x5cc]
inc eax
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 3
jg 0x46b238
mov dword [ebp - 0x6c88], 1
mov dword [ebp - 0x6670], 0xfb0b0297
mov dword [ebp - 0x6e60], 0xb22124f8
mov dword [ebp - 0x6678], 0xfffffff6
mov dword [ebp - 0x6c90], 0xed080c17
mov dword [ebp - 0x6680], 0xfffffff9
mov dword [ebp - 0x4b48], 0x2a3b3f36
push 1
lea ecx, [ebp - 0x6860]
call fcn.00415aed
mov dword [ebp - 0x449c], 0
mov dword [ebp - 0x108c], 0
jmp 0x469f0c
mov eax, dword [ebp - 0x108c]
inc eax
mov dword [ebp - 0x108c], eax
cmp dword [ebp - 0x108c], 1
jge 0x469f2b
push dword [ebp - 0x108c]
lea ecx, [ebp - 0x6860]
call fcn.00415bdb
and dword [eax], 0
jmp 0x469eff
mov eax, dword [ebp - 0x449c]
inc eax
mov dword [ebp - 0x449c], eax
mov dword [ebp - 0x4b48], 0
lea ecx, [ebp - 0x6860]
call fcn.00415bbf
mov dword [ebp - 0x5444], 0x2751c76d
mov dword [ebp - 0x5440], 0x2751c76d
mov dword [ebp - 0x543c], 0x2751c76d
mov dword [ebp - 0x5438], 0x2751c76d
mov dword [ebp - 0x214], 0x7e2799ac
mov dword [ebp - 0x214], 0
jmp 0x469f98
mov eax, dword [ebp - 0x214]
dec eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0xfffffff2
jl 0x46a12c
mov dword [ebp - 0x478], 0xffbefa5f
mov dword [ebp - 0xb20], 0x50678e04
mov dword [ebp - 0x4b58], 0x46e74a6e
cmp dword [ebp - 0x478], 1
je 0x469fd8
mov dword [ebp - 0x44a4], 1
jmp 0x469fdf
and dword [ebp - 0x44a4], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x44a4], eax
je 0x469ff9
mov dword [ebp - 0x4b50], 1
jmp 0x46a000
and dword [ebp - 0x4b50], 0
cmp dword [ebp - 0x478], 0
jne 0x46a010
cmp dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x478]
cmp dword [ebp - 0x214], eax
jle 0x46a02a
mov dword [ebp - 0x44ac], 1
jmp 0x46a031
and dword [ebp - 0x44ac], 0
cmp dword [ebp - 0x44ac], 0x6c0
jge 0x46a049
mov dword [ebp - 0x44b4], 1
jmp 0x46a050
and dword [ebp - 0x44b4], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x44b4], eax
jle 0x46a06a
mov dword [ebp - 0x44bc], 1
jmp 0x46a071
and dword [ebp - 0x44bc], 0
mov eax, dword [ebp - 0x214]
add eax, dword [ebp - 0x44bc]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0xb20], eax
jle 0x46a09d
mov dword [ebp - 0x44c4], 1
jmp 0x46a0a4
and dword [ebp - 0x44c4], 0
cmp dword [ebp - 0x44c4], 0x7555b7ce
je 0x46a0d3
cmp dword [ebp - 0x214], 0
je 0x46a0d3
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0x4b58], eax
jmp 0x46a11c
mov dword [ebp - 0x478], 0xffffffeb
jmp 0x46a0ec
mov eax, dword [ebp - 0x478]
inc eax
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 0x1d
jne 0x46a11c
mov byte [ebp - 0x81f], 0
movzx eax, byte [ebp - 0x81f]
test eax, eax
je 0x46a11a
push 0
push 0
push 0x13fb
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
jmp 0x46a0df
cmp dword [ebp - 0xb20], 0
je 0x46a127
jmp 0x46a12c
jmp 0x469f8b
push 3
lea ecx, [ebp - 0x4778]
call fcn.00415aed
mov dword [ebp - 0x4e0], 8
mov dword [ebp - 0x488], 0xe0710dd0
mov dword [ebp - 0xa18], 1
mov dword [ebp - 0x452c], 1
mov dword [ebp - 0x2e0], 0
jmp 0x46a17a
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 3
jge 0x46a19c
push dword [ebp - 0x2e0]
lea ecx, [ebp - 0x4778]
call fcn.00415bdb
mov dword [eax], 0x8bbc
jmp 0x46a16d
mov dword [ebp - 0x2e0], 0
jmp 0x46a1b5
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 2
jge 0x46a1d1
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x54c], 0xffffffff
jmp 0x46a1a8
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x54c], 2
jmp 0x46a1ff
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x54c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x54c], 0
jl 0x46a4ec
mov dword [ebp - 0xbd4], 0x90a624cd
mov dword [ebp - 0xbd4], 0
jmp 0x46a236
mov eax, dword [ebp - 0xbd4]
inc eax
mov dword [ebp - 0xbd4], eax
cmp dword [ebp - 0xbd4], 2
jg 0x46a37a
mov dword [ebp - 0xa10], 0xb3921ded
mov dword [ebp - 0xa10], 2
jmp 0x46a266
mov eax, dword [ebp - 0xa10]
dec eax
mov dword [ebp - 0xa10], eax
cmp dword [ebp - 0xa10], 0
jl 0x46a375
mov dword [ebp - 0x4b60], 0x32f3
mov byte [ebp - 0x79d], 0
movzx eax, byte [ebp - 0x79d]
test eax, eax
je 0x46a2a0
push 0
push 0x61c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54c]
mov dword [ebp - 0x4e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54c]
cmp eax, dword [ebp - 0x4e0]
jge 0x46a2d4
mov dword [ebp - 0x44cc], 1
jmp 0x46a2db
and dword [ebp - 0x44cc], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x54c]
lea ecx, [ebp - 0x4778]
call fcn.00415bdb
mov ecx, dword [ebp - 0x44cc]
cmp ecx, dword [eax]
jne 0x46a309
mov dword [ebp - 0x44d4], 1
jmp 0x46a310
and dword [ebp - 0x44d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54c]
imul eax, dword [ebp - 0x44d4]
test eax, eax
je 0x46a32f
cmp dword [ebp - 0xa10], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x54c]
lea ecx, [ebp - 0x4778]
call fcn.00415bdb
mov ecx, dword [ebp - 0x4b60]
cmp dword [eax], ecx
jl 0x46a35d
mov dword [ebp - 0x44dc], 1
jmp 0x46a364
and dword [ebp - 0x44dc], 0
mov eax, dword [ebp - 0x44dc]
mov dword [ebp - 0x488], eax
jmp 0x46a259
jmp 0x46a229
mov eax, dword [ebp - 0xbd4]
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 0
je 0x46a3b8
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x54c]
lea ecx, [ebp - 0x4778]
call fcn.00415bdb
cmp dword [eax], 0
je 0x46a3b8
mov dword [ebp - 0x44e4], 1
jmp 0x46a3bf
and dword [ebp - 0x44e4], 0
imul eax, dword [ebp - 0x44e4], 0x8cff
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x54c]
jge 0x46a3e4
mov dword [ebp - 0x44ec], 1
jmp 0x46a3eb
and dword [ebp - 0x44ec], 0
cmp dword [ebp - 0x44ec], 2
jle 0x46a400
mov dword [ebp - 0x44f4], 1
jmp 0x46a407
and dword [ebp - 0x44f4], 0
cmp dword [ebp - 0x44f4], 0x7c6d
jge 0x46a41f
mov dword [ebp - 0x44fc], 1
jmp 0x46a426
and dword [ebp - 0x44fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54c]
add eax, 0xf58a
cmp eax, dword [ebp - 0x44fc]
jg 0x46a44c
mov dword [ebp - 0x4504], 1
jmp 0x46a453
and dword [ebp - 0x4504], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x54c]
add esi, dword [ebp - 0x4504]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x54c]
lea ecx, [ebp - 0x4778]
call fcn.00415bdb
cmp esi, dword [eax]
jle 0x46a48e
mov dword [ebp - 0x450c], 1
jmp 0x46a495
and dword [ebp - 0x450c], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x54c]
lea ecx, [ebp - 0x4778]
call fcn.00415bdb
mov eax, dword [eax]
cmp eax, dword [ebp - 0x450c]
jle 0x46a4c3
mov dword [ebp - 0x4514], 1
jmp 0x46a4ca
and dword [ebp - 0x4514], 0
mov dword [ebp - 0x4e0], 0xfff6
mov eax, dword [ebp - 0x4e0]
imul eax, dword [ebp - 0x4514]
mov dword [ebp - 0xa18], eax
jmp 0x46a1e4
mov dword [ebp - 0x488], 0x11
jmp 0x46a505
mov eax, dword [ebp - 0x488]
dec eax
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 0xffffffed
jl 0x46a761
mov dword [ebp - 0x1864], 0xffffffff
mov dword [ebp - 0x4b80], 0x8b047c14
mov dword [ebp - 0xa18], 0
jmp 0x46a53f
mov eax, dword [ebp - 0xa18]
inc eax
mov dword [ebp - 0xa18], eax
cmp dword [ebp - 0xa18], 1
jle 0x46a75c
mov dword [ebp - 0x5bc], 0x4969
mov dword [ebp - 0x454c], 0xffffffff
mov dword [ebp - 0x453c], 0xd5dd215
mov dword [ebp - 0x4e0], 1
jmp 0x46a583
mov eax, dword [ebp - 0x4e0]
dec eax
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 0xffffffeb
jl 0x46a5b5
mov dword [ebp - 0x4b68], 1
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x705c], eax
mov eax, 0x8160
sub eax, dword [ebp - 0x454c]
mov dword [ebp - 0x4b68], eax
jmp 0x46a576
cmp dword [ebp - 0x1864], 0xb2cfb115
ja 0x46a5cd
mov dword [ebp - 0x451c], 1
jmp 0x46a5d4
and dword [ebp - 0x451c], 0
imul eax, dword [ebp - 0x452c], 0x4122
cmp eax, dword [ebp - 0x451c]
jge 0x46a5f2
mov dword [ebp - 0x4524], 1
jmp 0x46a5f9
and dword [ebp - 0x4524], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54c]
cmp dword [ebp - 0x4524], eax
jne 0x46a61a
mov dword [ebp - 0x4b70], 1
jmp 0x46a621
and dword [ebp - 0x4b70], 0
mov eax, dword [ebp - 0x1864]
mov dword [ebp - 0x6688], eax
mov eax, dword [ebp - 0x5bc]
add eax, dword [ebp - 0x452c]
cmp eax, 2
jge 0x46a64a
mov dword [ebp - 0x4534], 1
jmp 0x46a651
and dword [ebp - 0x4534], 0
mov eax, dword [ebp - 0x4534]
add eax, 0x7b11
mov dword [ebp - 0x453c], eax
jne 0x46a670
mov dword [ebp - 0x4544], 1
jmp 0x46a677
and dword [ebp - 0x4544], 0
mov eax, dword [ebp - 0x5bc]
cmp dword [ebp - 0x4544], eax
jne 0x46a691
mov dword [ebp - 0x4554], 1
jmp 0x46a698
and dword [ebp - 0x4554], 0
mov eax, dword [ebp - 0x454c]
cmp dword [ebp - 0x4554], eax
jle 0x46a6b2
mov dword [ebp - 0x455c], 1
jmp 0x46a6b9
and dword [ebp - 0x455c], 0
mov eax, dword [ebp - 0x5bc]
cmp dword [ebp - 0x455c], eax
jne 0x46a6d3
mov dword [ebp - 0x4564], 1
jmp 0x46a6da
and dword [ebp - 0x4564], 0
mov eax, dword [ebp - 0x5bc]
cmp dword [ebp - 0x4564], eax
jge 0x46a6f4
mov dword [ebp - 0x456c], 1
jmp 0x46a6fb
and dword [ebp - 0x456c], 0
mov eax, dword [ebp - 0x5bc]
cmp dword [ebp - 0x456c], eax
je 0x46a715
mov dword [ebp - 0x4574], 1
jmp 0x46a71c
and dword [ebp - 0x4574], 0
cmp dword [ebp - 0x4574], 0xfffffffb
jge 0x46a731
mov dword [ebp - 0x4b78], 1
jmp 0x46a738
and dword [ebp - 0x4b78], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x6c98], eax
mov eax, dword [ebp - 0x1864]
imul eax, dword [ebp - 0x488]
mov dword [ebp - 0x4b80], eax
jmp 0x46a532
jmp 0x46a4f8
lea ecx, [ebp - 0x4778]
call fcn.00415bbf
mov dword [ebp - 0x4ba0], 0x83afd470
mov dword [ebp - 0x5c4], 0xffff
mov dword [ebp - 0x9f0], 9
mov dword [ebp - 0x14f0], 0
mov dword [ebp - 0xcf4], 0
jmp 0x46a7ad
mov eax, dword [ebp - 0xcf4]
inc eax
mov dword [ebp - 0xcf4], eax
cmp dword [ebp - 0xcf4], 2
jge 0x46a7c9
mov eax, dword [ebp - 0xcf4]
mov dword [ebp + eax*4 - 0x573c], 0x6eb6b9dd
jmp 0x46a7a0
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
mov dword [ebp - 0x5c4], 0xffffffe4
jmp 0x46a7ef
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 0x2b
jge 0x46aa75
mov dword [ebp - 0xb28], 0xfebb6748
mov dword [ebp - 0xb28], 0x10
jmp 0x46a81f
mov eax, dword [ebp - 0xb28]
dec eax
mov dword [ebp - 0xb28], eax
cmp dword [ebp - 0xb28], 0xb
je 0x46aa70
mov dword [ebp - 0x830], 0xfffffff8
mov dword [ebp - 0x4584], 0x920a6ff
mov byte [ebp - 0x821], 0
movzx eax, byte [ebp - 0x821]
test eax, eax
je 0x46a85d
push 0x2366
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 0x830], 0
jmp 0x46a876
mov eax, dword [ebp - 0x830]
inc eax
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x830], 1
jg 0x46aa6b
push 3
lea ecx, [ebp - 0x5554]
call fcn.00415aed
mov dword [ebp - 0x1318], 0
jmp 0x46a8a9
mov eax, dword [ebp - 0x1318]
inc eax
mov dword [ebp - 0x1318], eax
cmp dword [ebp - 0x1318], 3
jge 0x46a8cb
push dword [ebp - 0x1318]
lea ecx, [ebp - 0x5554]
call fcn.00415bdb
mov dword [eax], 3
jmp 0x46a89c
cmp dword [ebp - 0x5c4], 0
jne 0x46a8e6
cmp dword [ebp - 0x830], 0
jne 0x46a8e6
and dword [ebp - 0x457c], 0
jmp 0x46a8f0
mov dword [ebp - 0x457c], 1
mov eax, dword [ebp - 0x457c]
mov dword [ebp - 0x4584], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, 0x5206
sub ecx, dword [ebp + eax - 0x573c]
imul ecx, dword [ebp - 0x4584]
mov dword [ebp - 0x458c], ecx
push 0
lea ecx, [ebp - 0x5554]
call fcn.00415bdb
mov ecx, dword [ebp - 0x458c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x830]
mov eax, dword [ebp + eax*4 - 0x573c]
cmp eax, dword [ebp - 0x458c]
jne 0x46a951
mov dword [ebp - 0x4594], 1
jmp 0x46a958
and dword [ebp - 0x4594], 0
cmp dword [ebp - 0x4594], 0x1479
jle 0x46a970
mov dword [ebp - 0x459c], 1
jmp 0x46a977
and dword [ebp - 0x459c], 0
mov eax, dword [ebp - 0xb28]
imul eax, dword [ebp - 0x459c]
test eax, eax
jne 0x46a994
mov dword [ebp - 0x45a4], 1
jmp 0x46a99b
and dword [ebp - 0x45a4], 0
mov eax, dword [ebp - 0x45a4]
mov dword [ebp - 0x9f0], eax
cmp dword [ebp - 0x9f0], 0xcf7d1649
jb 0x46a9bf
mov dword [ebp - 0x45ac], 1
jmp 0x46a9c6
and dword [ebp - 0x45ac], 0
mov eax, dword [ebp - 0x45ac]
mov dword [ebp - 0x14f0], eax
cmp dword [ebp - 0x14f0], 0x881826fb
jne 0x46aa3b
mov dword [ebp - 0x9f0], 0
jmp 0x46a9f7
mov eax, dword [ebp - 0x9f0]
inc eax
mov dword [ebp - 0x9f0], eax
cmp dword [ebp - 0x9f0], 0xb
jl 0x46aa23
mov byte [ebp - 0x7a5], 0
movzx eax, byte [ebp - 0x7a5]
test eax, eax
je 0x46aa21
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
jmp 0x46a9ea
cmp dword [ebp - 0x14f0], 0
je 0x46aa39
lea ecx, [ebp - 0x5554]
call fcn.00415bbf
jmp 0x46aa6b
jmp 0x46aa5b
mov dword [ebp - 0x4b88], 0x540f
mov dword [ebp - 0x4b90], 0x357f039d
mov eax, dword [ebp - 0x4b88]
mov dword [ebp - 0x4b90], eax
lea ecx, [ebp - 0x5554]
call fcn.00415bbf
jmp 0x46a869
jmp 0x46a812
jmp 0x46a7e2
mov dword [ebp - 0xcfc], 0
jmp 0x46aa8e
mov eax, dword [ebp - 0xcfc]
inc eax
mov dword [ebp - 0xcfc], eax
cmp dword [ebp - 0xcfc], 2
jge 0x46aaaa
mov eax, dword [ebp - 0xcfc]
mov dword [ebp + eax*4 - 0x6ea4], 0xbf24
jmp 0x46aa81
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5444], 3
jmp 0x46aad8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5444]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5444], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5444], 0
jl 0x46b233
mov dword [ebp - 0x5458], 0
mov dword [ebp - 0x5454], 0
mov dword [ebp - 0x5450], 0
mov dword [ebp - 0x544c], 0
mov dword [ebp - 0xa20], 0x5052061f
mov dword [ebp - 0x45f4], 0x9d5fac12
mov dword [ebp - 0x45d4], 0x932e3ca3
mov dword [ebp - 0x1740], 0x49c23edb
mov dword [ebp - 0xa20], 0
jmp 0x46ab55
mov eax, dword [ebp - 0xa20]
inc eax
mov dword [ebp - 0xa20], eax
cmp dword [ebp - 0xa20], 3
jg 0x46ad62
mov dword [ebp - 0x108], 0xfffffffa
mov dword [ebp - 0x108], 0
jmp 0x46ab85
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jg 0x46ad5d
mov dword [ebp - 0x4b98], 0x6e1ee67b
mov eax, dword [ebp - 0x108]
cmp dword [ebp + eax*4 - 0x5458], 0
jne 0x46abb8
mov dword [ebp - 0x45b4], 1
jmp 0x46abbf
and dword [ebp - 0x45b4], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x45b4], eax
jg 0x46abd9
mov dword [ebp - 0x45bc], 1
jmp 0x46abe0
and dword [ebp - 0x45bc], 0
cmp dword [ebp - 0x45bc], 0
jg 0x46abf5
mov dword [ebp - 0x45c4], 1
jmp 0x46abfc
and dword [ebp - 0x45c4], 0
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0x5458]
cmp dword [ebp - 0x45c4], eax
je 0x46ac1d
mov dword [ebp - 0x45cc], 1
jmp 0x46ac24
and dword [ebp - 0x45cc], 0
mov eax, dword [ebp - 0x45cc]
mov dword [ebp - 0x45d4], eax
mov eax, dword [ebp - 0x45d4]
mov dword [ebp - 0x1740], eax
cmp dword [ebp - 0x1740], 0
je 0x46ac5a
cmp dword [ebp - 0x1740], 0
je 0x46ac5a
mov dword [ebp - 0x45dc], 1
jmp 0x46ac61
and dword [ebp - 0x45dc], 0
mov eax, dword [ebp - 0x45dc]
add eax, 3
je 0x46ac8a
mov eax, 0xef9a
test eax, eax
je 0x46ac8a
cmp dword [ebp - 0x108], 0
je 0x46ac8a
mov dword [ebp - 0x45e4], 1
jmp 0x46ac91
and dword [ebp - 0x45e4], 0
mov eax, dword [ebp - 0x108]
imul eax, dword [ebp - 0x45e4]
cmp eax, dword [ebp - 0x108]
jne 0x46acb2
mov dword [ebp - 0x45ec], 1
jmp 0x46acb9
and dword [ebp - 0x45ec], 0
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0x5458]
cmp dword [ebp - 0x45ec], eax
je 0x46acda
mov dword [ebp - 0x45fc], 1
jmp 0x46ace1
and dword [ebp - 0x45fc], 0
mov dword [ebp - 0x45f4], 0xcba8
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0x5458]
imul eax, dword [ebp - 0x45f4]
add eax, dword [ebp - 0x45fc]
cmp eax, dword [ebp - 0xa20]
jge 0x46ad19
mov dword [ebp - 0x4604], 1
jmp 0x46ad20
and dword [ebp - 0x4604], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x4604], eax
jg 0x46ad3a
mov dword [ebp - 0x460c], 1
jmp 0x46ad41
and dword [ebp - 0x460c], 0
mov eax, dword [ebp - 0x460c]
mov dword [ebp - 0x4b98], eax
cmp dword [ebp - 0x108], 0
je 0x46ad58
jmp 0x46ad5d
jmp 0x46ab78
jmp 0x46ab48
mov dword [ebp - 0x14f8], 2
mov dword [ebp - 0x6690], 0xfffffff7
mov dword [ebp - 0x6e68], 0x7a7c2039
mov dword [ebp - 0x6698], 0x2167fa5c
mov dword [ebp - 0x6ca0], 0x666a756a
mov dword [ebp - 0x66a0], 0xffffffff
mov dword [ebp - 0x6ff0], 6
mov dword [ebp - 0x66a8], 1
push 4
lea ecx, [ebp - 0x6870]
call fcn.00415aed
mov dword [ebp - 0x4588], 0xaaf5bfb6
mov dword [ebp - 0x1094], 0
jmp 0x46ade2
mov eax, dword [ebp - 0x1094]
inc eax
mov dword [ebp - 0x1094], eax
cmp dword [ebp - 0x1094], 4
jge 0x46ae04
push dword [ebp - 0x1094]
lea ecx, [ebp - 0x6870]
call fcn.00415bdb
mov dword [eax], 7
jmp 0x46add5
mov byte [ebp - 0x823], 0
movzx eax, byte [ebp - 0x823]
test eax, eax
je 0x46ae31
push 0x369
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polygon]
mov eax, dword [ebp - 0x4588]
inc eax
mov dword [ebp - 0x4588], eax
lea ecx, [ebp - 0x6870]
call fcn.00415bbf
push 3
lea ecx, [ebp - 0x5cd4]
call fcn.00415aed
mov dword [ebp - 0xd04], 0xc204e2db
mov dword [ebp - 0x5f98], 0x30de9bf9
mov dword [ebp - 0x5f94], 0x30de9bf9
mov dword [ebp - 0x5f90], 0x30de9bf9
mov dword [ebp - 0x5f8c], 0x30de9bf9
mov dword [ebp - 0xd04], 0
jmp 0x46aea1
mov eax, dword [ebp - 0xd04]
dec eax
mov dword [ebp - 0xd04], eax
cmp dword [ebp - 0xd04], 0xfffffffe
jle 0x46af66
mov dword [ebp - 0x2664], 0xffffffff
mov dword [ebp - 0x6038], 0xffffffff
mov dword [ebp - 0x6034], 0xffffffff
mov dword [ebp - 0x6030], 0xffffffff
mov dword [ebp - 0x602c], 0xffffffff
mov dword [ebp - 0x1260], 0
jmp 0x46aef9
mov eax, dword [ebp - 0x1260]
inc eax
mov dword [ebp - 0x1260], eax
cmp dword [ebp - 0x1260], 4
jge 0x46af15
mov eax, dword [ebp - 0x1260]
mov dword [ebp + eax*4 - 0x7438], 0x3a0b8ee4
jmp 0x46aeec
mov dword [ebp - 0x2664], 0
mov eax, dword [ebp - 0x2664]
mov dword [ebp - 0x1a88], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1a88]
mov dword [ebp + eax - 0x6038], ecx
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1a88]
mov dword [ebp + eax - 0x7438], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5f98], 0xffffffff
jmp 0x46ae94
mov dword [ebp - 0xd0c], 0
jmp 0x46af7f
mov eax, dword [ebp - 0xd0c]
inc eax
mov dword [ebp - 0xd0c], eax
cmp dword [ebp - 0xd0c], 3
jge 0x46afa1
push dword [ebp - 0xd0c]
lea ecx, [ebp - 0x5cd4]
call fcn.00415bdb
mov dword [eax], 0xb1b5
jmp 0x46af72
push dword [ebp - 0x5cc]
lea ecx, [ebp - 0x556c]
call fcn.00415bdb
mov dword [eax], 0x4215e1ab
mov dword [ebp - 0x6ca8], 1
push 2
lea ecx, [ebp - 0x6890]
call fcn.00415aed
mov dword [ebp - 0x66b0], 0xffffffff
mov dword [ebp - 0x6e70], 0
mov dword [ebp - 0x66b8], 7
mov dword [ebp - 0x6cb0], 3
mov dword [ebp - 0x66c0], 0xfffffff6
mov dword [ebp - 0x7094], 0x8c443eb6
push 1
lea ecx, [ebp - 0x6880]
call fcn.00415aed
push 1
lea ecx, [ebp - 0x5f14]
call fcn.00415aed
mov dword [ebp - 0x7c], 0
jmp 0x46b035
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x46b04e
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x6890]
call fcn.00415bdb
and dword [eax], 0
jmp 0x46b02e
mov dword [ebp - 0x7c], 0
jmp 0x46b05e
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x46b077
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x6880]
call fcn.00415bdb
or dword [eax], 0xffffffff
jmp 0x46b057
mov dword [ebp - 0x7c], 0
jmp 0x46b087
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x46b0a3
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x5f14]
call fcn.00415bdb
mov dword [eax], 0x7182
jmp 0x46b080
push 0
lea ecx, [ebp - 0x5f14]
call fcn.00415bdb
mov dword [ebp - 0x3758], eax
mov eax, dword [ebp - 0x3758]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3758]
mov dword [ecx], eax
lea ecx, [ebp - 0x5f14]
call fcn.00415bbf
lea ecx, [ebp - 0x6880]
call fcn.00415bbf
lea ecx, [ebp - 0x6890]
call fcn.00415bbf
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x66c8], eax
push 0
lea ecx, [ebp - 0x556c]
call fcn.00415bdb
cmp dword [eax], 0xd982
jne 0x46b115
mov dword [ebp - 0x1a90], 1
jmp 0x46b11c
and dword [ebp - 0x1a90], 0
mov eax, dword [ebp - 0x1a90]
neg eax
add eax, dword [ebp - 0x14f8]
jne 0x46b139
xor eax, eax
jne 0x46b139
and dword [ebp - 0x3760], 0
jmp 0x46b143
mov dword [ebp - 0x3760], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6ea4]
cmp eax, dword [ebp - 0x3760]
jg 0x46b164
mov dword [ebp - 0x1a98], 1
jmp 0x46b16b
and dword [ebp - 0x1a98], 0
cmp dword [ebp - 0x1a98], 0xd7d2
jle 0x46b183
mov dword [ebp - 0x3768], 1
jmp 0x46b18a
and dword [ebp - 0x3768], 0
push 2
lea ecx, [ebp - 0x5cd4]
call fcn.00415bdb
mov dword [ebp - 0x187c], eax
mov eax, dword [ebp - 0x187c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x187c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3768]
mov dword [ebp - 0x14f8], eax
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x1aa0], eax
mov eax, dword [ebp - 0x1aa0]
mov ecx, dword [ebp - 0x187c]
cmp dword [ecx], eax
jne 0x46b1e2
mov dword [ebp - 0x3770], 1
jmp 0x46b1e9
and dword [ebp - 0x3770], 0
push dword [ebp - 0x5cc]
lea ecx, [ebp - 0x556c]
call fcn.00415bdb
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3770]
jne 0x46b210
mov dword [ebp - 0x1aa8], 1
jmp 0x46b217
and dword [ebp - 0x1aa8], 0
mov eax, dword [ebp - 0x1aa8]
mov dword [ebp - 0x4ba0], eax
lea ecx, [ebp - 0x5cd4]
call fcn.00415bbf
jmp 0x46aabd
jmp 0x469e7c
lea ecx, [ebp - 0x556c]
call fcn.00415bbf
push 3
lea ecx, [ebp - 0x1a5c]
call fcn.00415aed
mov dword [ebp - 0x29c], 0xef20fe6e
mov dword [ebp - 0x109c], 0
jmp 0x46b273
mov eax, dword [ebp - 0x109c]
inc eax
mov dword [ebp - 0x109c], eax
cmp dword [ebp - 0x109c], 3
jge 0x46b295
push dword [ebp - 0x109c]
lea ecx, [ebp - 0x1a5c]
call fcn.00415bdb
mov dword [eax], 0x177e
jmp 0x46b266
mov byte [ebp - 0x7ad], 0
movzx eax, byte [ebp - 0x7ad]
test eax, eax
je 0x46b2b1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
mov dword [ebp - 0x29c], 2
jmp 0x46b2ca
mov eax, dword [ebp - 0x29c]
dec eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0
jl 0x46b4ff
mov dword [ebp - 0xbcc], 0xfffffffc
mov dword [ebp - 0x58bc], 0xeb449523
mov dword [ebp - 0x58b8], 0xeb449523
mov dword [ebp - 0x58b4], 0xeb449523
mov dword [ebp - 0x58b0], 0xeb449523
lea ecx, [ebp - 0x1779]
call fcn.00415bea
push eax
lea eax, [ebp - 0x58ac]
push eax
lea eax, [ebp - 0x58bc]
push eax
lea ecx, [ebp - 0x7408]
call fcn.00415bed
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x68a0]
call fcn.00415b99
mov byte [ebp - 0x825], 0
movzx eax, byte [ebp - 0x825]
test eax, eax
je 0x46b358
push 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x1a5c]
call fcn.00415bdb
mov esi, eax
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x1a5c]
call fcn.00415bdb
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x46b38e
mov dword [ebp - 0x3780], 1
jmp 0x46b395
and dword [ebp - 0x3780], 0
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x1a5c]
call fcn.00415bdb
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x1a5c]
call fcn.00415bdb
cmp dword [eax], 0xffffffff
jb 0x46b3c8
mov dword [ebp - 0x3778], 1
jmp 0x46b3cf
and dword [ebp - 0x3778], 0
imul eax, dword [ebp - 0x3778], 0
cmp eax, 4
jle 0x46b3e7
mov dword [ebp - 0x1ab0], 1
jmp 0x46b3ee
and dword [ebp - 0x1ab0], 0
mov eax, dword [ebp - 0x1ab0]
mov dword [ebp - 0xbcc], eax
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x1a5c]
call fcn.00415bdb
push 2
lea ecx, [ebp - 0x68a0]
call fcn.00415bdb
push 0
lea ecx, [ebp - 0x1a5c]
call fcn.00415bdb
cmp dword [eax], 0x4bb4
jle 0x46b439
mov dword [ebp - 0x1ab8], 1
jmp 0x46b440
and dword [ebp - 0x1ab8], 0
mov eax, dword [ebp - 0x3780]
cmp eax, dword [ebp - 0x1ab8]
jne 0x46b45a
mov dword [ebp - 0x3788], 1
jmp 0x46b461
and dword [ebp - 0x3788], 0
mov eax, dword [ebp - 0x3788]
neg eax
je 0x46b4cc
mov dword [ebp - 0x4ba8], 0xffffffff
mov dword [ebp - 0xbcc], 0
jmp 0x46b48e
mov eax, dword [ebp - 0xbcc]
inc eax
mov dword [ebp - 0xbcc], eax
cmp dword [ebp - 0xbcc], 2
jg 0x46b4ca
mov byte [ebp - 0x7b5], 0
movzx eax, byte [ebp - 0x7b5]
test eax, eax
je 0x46b4be
push 0
push 0x168f
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [ebp - 0x4ba8], 0x193208af
jmp 0x46b481
jmp 0x46b4ef
mov dword [ebp - 0x4bb0], 0
mov esi, dword [ebp - 0x4bb0]
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x1a5c]
call fcn.00415bdb
mov dword [eax], esi
lea ecx, [ebp - 0x68a0]
call fcn.00415bbf
jmp 0x46b2bd
lea ecx, [ebp - 0x1a5c]
call fcn.00415bbf
push 3
lea ecx, [ebp - 0x5584]
call fcn.00415aed
mov dword [ebp - 0x9f8], 0
mov dword [ebp - 0x4bb8], 0
mov dword [ebp - 0xd14], 0
jmp 0x46b544
mov eax, dword [ebp - 0xd14]
inc eax
mov dword [ebp - 0xd14], eax
cmp dword [ebp - 0xd14], 3
jge 0x46b563
push dword [ebp - 0xd14]
lea ecx, [ebp - 0x5584]
call fcn.00415bdb
or dword [eax], 0xffffffff
jmp 0x46b537
mov dword [ebp - 0x9f8], 0
jmp 0x46b57c
mov eax, dword [ebp - 0x9f8]
inc eax
mov dword [ebp - 0x9f8], eax
cmp dword [ebp - 0x9f8], 2
jg 0x46b5c7
push dword [ebp - 0x9f8]
lea ecx, [ebp - 0x5584]
call fcn.00415bdb
mov dword [ebp - 0x1ac0], eax
push dword [ebp - 0x9f8]
lea ecx, [ebp - 0x5584]
call fcn.00415bdb
mov ecx, dword [ebp - 0x1ac0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1ac0]
mov eax, dword [eax]
mov dword [ebp - 0x4bb8], eax
jmp 0x46b56f
lea ecx, [ebp - 0x5584]
call fcn.00415bbf
mov dword [ebp - 0x234], 0x5c9e53e5
mov dword [ebp - 0x114], 0x5d70512a
mov dword [ebp - 0x1378], 0
jmp 0x46b5ff
mov eax, dword [ebp - 0x1378]
inc eax
mov dword [ebp - 0x1378], eax
cmp dword [ebp - 0x1378], 3
jge 0x46b61b
mov eax, dword [ebp - 0x1378]
mov dword [ebp + eax*4 - 0x461c], 0xbf0b
jmp 0x46b5f2
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x461c]
cmp dword [ebp + eax - 0x461c], ecx
jg 0x46b642
mov dword [ebp - 0x3790], 1
jmp 0x46b649
and dword [ebp - 0x3790], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x461c]
cmp dword [ebp - 0x3790], eax
jle 0x46b66a
mov dword [ebp - 0x1ac8], 1
jmp 0x46b671
and dword [ebp - 0x1ac8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x461c]
sub eax, dword [ebp - 0x1ac8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x461c]
mov dword [ebp - 0x234], eax
je 0x46b7e0
mov dword [ebp - 0x1500], 0x9d44c039
mov dword [ebp - 0x3798], 0xfffffff6
mov dword [ebp - 0x37a0], 0xfffffffb
mov dword [ebp - 0x4bc0], 0xb39e2240
mov eax, dword [ebp - 0x3798]
cmp dword [ebp - 0x1500], eax
jge 0x46b6df
mov dword [ebp - 0x1ad0], 1
jmp 0x46b6e6
and dword [ebp - 0x1ad0], 0
mov eax, dword [ebp - 0x3798]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x1ad0]
mov dword [ebp - 0x37a0], eax
mov eax, dword [ebp - 0x37a0]
cmp dword [ebp - 0x114], eax
jl 0x46b718
mov dword [ebp - 0x1ad8], 1
jmp 0x46b71f
and dword [ebp - 0x1ad8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x461c]
cmp dword [ebp - 0x1ad8], eax
jne 0x46b746
cmp dword [ebp - 0x114], 0
jne 0x46b746
and dword [ebp - 0x37a8], 0
jmp 0x46b750
mov dword [ebp - 0x37a8], 1
mov eax, dword [ebp - 0x1500]
cmp eax, dword [ebp - 0x37a8]
je 0x46b76a
mov dword [ebp - 0x1ae0], 1
jmp 0x46b771
and dword [ebp - 0x1ae0], 0
mov eax, dword [ebp - 0x1500]
cmp dword [ebp - 0x1ae0], eax
jl 0x46b78b
mov dword [ebp - 0x37b0], 1
jmp 0x46b792
and dword [ebp - 0x37b0], 0
mov eax, dword [ebp - 0x234]
cmp eax, dword [ebp - 0x37b0]
jle 0x46b7ac
mov dword [ebp - 0x1ae8], 1
jmp 0x46b7b3
and dword [ebp - 0x1ae8], 0
cmp dword [ebp - 0x1ae8], 1
jge 0x46b7c8
mov dword [ebp - 0x37b8], 1
jmp 0x46b7cf
and dword [ebp - 0x37b8], 0
mov eax, dword [ebp - 0x37b8]
mov dword [ebp - 0x4bc0], eax
jmp 0x46b9cd
push 2
lea ecx, [ebp - 0x52c4]
call fcn.00415aed
mov dword [ebp - 0xd1c], 0
jmp 0x46b806
mov eax, dword [ebp - 0xd1c]
inc eax
mov dword [ebp - 0xd1c], eax
cmp dword [ebp - 0xd1c], 2
jge 0x46b828
push dword [ebp - 0xd1c]
lea ecx, [ebp - 0x52c4]
call fcn.00415bdb
mov dword [eax], 0x8f738f58
jmp 0x46b7f9
mov dword [ebp - 0x114], 0
jmp 0x46b841
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jge 0x46b8ba
mov dword [ebp - 0x234], 0
jmp 0x46b863
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 2
jg 0x46b8a0
mov byte [ebp - 0x827], 0
movzx eax, byte [ebp - 0x827]
test eax, eax
je 0x46b89e
push 0
push 0x1dca
push 0x1b9c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsW]
jmp 0x46b856
push 0
lea ecx, [ebp - 0x52c4]
call fcn.00415bdb
mov eax, dword [eax]
mov dword [ebp - 0x234], eax
jmp 0x46b834
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x461c], 0
je 0x46b8df
cmp dword [ebp - 0x114], 0
je 0x46b8df
mov dword [ebp - 0x37c8], 1
jmp 0x46b8e6
and dword [ebp - 0x37c8], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x6cb8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x461c]
mov dword [ebp - 0x66d0], eax
push 0
lea ecx, [ebp - 0x52c4]
call fcn.00415bdb
cmp dword [eax], 0xd55c59c3
jbe 0x46b926
mov dword [ebp - 0x1af0], 1
jmp 0x46b92d
and dword [ebp - 0x1af0], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x1af0], eax
jl 0x46b947
mov dword [ebp - 0x37c0], 1
jmp 0x46b94e
and dword [ebp - 0x37c0], 0
push 1
lea ecx, [ebp - 0x52c4]
call fcn.00415bdb
mov ecx, dword [ebp - 0x37c0]
cmp ecx, dword [eax]
jl 0x46b971
mov dword [ebp - 0x1af8], 1
jmp 0x46b978
and dword [ebp - 0x1af8], 0
mov eax, dword [ebp - 0x234]
imul eax, dword [ebp - 0x1af8]
cmp dword [ebp - 0x37c8], eax
je 0x46b9ab
mov byte [ebp - 0x829], 0
movzx eax, byte [ebp - 0x829]
test eax, eax
je 0x46b9a9
push 0
push 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
jmp 0x46b9c2
mov dword [ebp - 0x1b00], 0
mov eax, dword [ebp - 0x1b00]
inc eax
mov dword [ebp - 0x1b00], eax
lea ecx, [ebp - 0x52c4]
call fcn.00415bbf
mov dword [ebp - 0x114], 0
jmp 0x46b9e6
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xfffffff1
jne 0x46ba12
mov byte [ebp - 0x7b8], 0
movzx eax, byte [ebp - 0x7b8]
test eax, eax
je 0x46ba10
push 0
push 0x2212
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
jmp 0x46b9d9
mov dword [ebp - 0x10b4], 1
mov dword [ebp - 0x9c4], 0xfffffffe
mov dword [ebp - 0x4fb8], 1
mov dword [ebp - 0x9dc], 0xffffffff
mov dword [ebp - 0x10a4], 0
jmp 0x46ba53
mov eax, dword [ebp - 0x10a4]
inc eax
mov dword [ebp - 0x10a4], eax
cmp dword [ebp - 0x10a4], 2
jge 0x46ba6f
mov eax, dword [ebp - 0x10a4]
mov dword [ebp + eax*4 - 0x576c], 0
jmp 0x46ba46
mov dword [ebp - 0x9dc], 0
jmp 0x46ba88
mov eax, dword [ebp - 0x9dc]
inc eax
mov dword [ebp - 0x9dc], eax
cmp dword [ebp - 0x9dc], 1
jg 0x46badf
mov byte [ebp - 0x7f2], 0
movzx eax, byte [ebp - 0x7f2]
test eax, eax
je 0x46bac3
push 0
push 0x1f6f
push 0x11ab
push 0
push 0x14f6
push 0x1bcf
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov eax, dword [ebp - 0x9dc]
mov ecx, dword [ebp - 0x9dc]
mov eax, dword [ebp + eax*4 - 0x576c]
mov dword [ebp + ecx*4 - 0x576c], eax
jmp 0x46ba7b
mov dword [ebp - 0x440], 0xfffffffc
mov dword [ebp - 0x4bd0], 0xfffffffe
mov dword [ebp - 0xd24], 0
jmp 0x46bb0c
mov eax, dword [ebp - 0xd24]
inc eax
mov dword [ebp - 0xd24], eax
cmp dword [ebp - 0xd24], 1
jge 0x46bb28
mov eax, dword [ebp - 0xd24]
mov dword [ebp + eax*4 - 0x4bc8], 0
jmp 0x46baff
mov dword [ebp - 0x440], 0
jmp 0x46bb41
mov eax, dword [ebp - 0x440]
dec eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0
jl 0x46bb5e
mov eax, dword [ebp - 0x440]
cmp dword [ebp + eax*4 - 0x4bc8], 0
je 0x46bb5c
jmp 0x46bb5e
jmp 0x46bb34
mov dword [ebp - 0x440], 0xa
jmp 0x46bb77
mov eax, dword [ebp - 0x440]
dec eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0xffffffe4
jl 0x46bbc8
mov dword [ebp - 0x6e78], 0x7dfe4d9
mov dword [ebp - 0x37d0], 0xfe64fd9e
mov dword [ebp - 0x37d0], 1
cmp dword [ebp - 0x37d0], 0
ja 0x46bbb3
mov dword [ebp - 0x1b08], 1
jmp 0x46bbba
and dword [ebp - 0x1b08], 0
mov eax, dword [ebp - 0x1b08]
mov dword [ebp - 0x4bd0], eax
jmp 0x46bb6a
mov dword [ebp - 0x5d4], 0xffff
mov dword [ebp - 0x91c], 9
mov dword [ebp - 0x1748], 0
mov dword [ebp - 0x1268], 0
jmp 0x46bbff
mov eax, dword [ebp - 0x1268]
inc eax
mov dword [ebp - 0x1268], eax
cmp dword [ebp - 0x1268], 2
jge 0x46bc1b
mov eax, dword [ebp - 0x1268]
mov dword [ebp + eax*4 - 0x5834], 0x6eb6b9dd
jmp 0x46bbf2
mov eax, dword [ebp - 0x5d4]
inc eax
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0x5d4], 0xffffffe4
jmp 0x46bc41
mov eax, dword [ebp - 0x5d4]
inc eax
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x5d4], 0x2b
jge 0x46bec7
mov dword [ebp - 0xa28], 0xfebb6748
mov dword [ebp - 0xa28], 0x10
jmp 0x46bc71
mov eax, dword [ebp - 0xa28]
dec eax
mov dword [ebp - 0xa28], eax
cmp dword [ebp - 0xa28], 0xb
je 0x46bec2
mov dword [ebp - 0x83c], 0xfffffff8
mov dword [ebp - 0x1b10], 0x920a6ff
mov byte [ebp - 0x7ba], 0
movzx eax, byte [ebp - 0x7ba]
test eax, eax
je 0x46bcaf
push 0x2366
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 0x83c], 0
jmp 0x46bcc8
mov eax, dword [ebp - 0x83c]
inc eax
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 1
jg 0x46bebd
push 3
lea ecx, [ebp - 0x559c]
call fcn.00415aed
mov dword [ebp - 0xd2c], 0
jmp 0x46bcfb
mov eax, dword [ebp - 0xd2c]
inc eax
mov dword [ebp - 0xd2c], eax
cmp dword [ebp - 0xd2c], 3
jge 0x46bd1d
push dword [ebp - 0xd2c]
lea ecx, [ebp - 0x559c]
call fcn.00415bdb
mov dword [eax], 3
jmp 0x46bcee
cmp dword [ebp - 0x5d4], 0
jne 0x46bd38
cmp dword [ebp - 0x83c], 0
jne 0x46bd38
and dword [ebp - 0x37d8], 0
jmp 0x46bd42
mov dword [ebp - 0x37d8], 1
mov eax, dword [ebp - 0x37d8]
mov dword [ebp - 0x1b10], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, 0x5206
sub ecx, dword [ebp + eax - 0x5834]
imul ecx, dword [ebp - 0x1b10]
mov dword [ebp - 0x37e0], ecx
push 0
lea ecx, [ebp - 0x559c]
call fcn.00415bdb
mov ecx, dword [ebp - 0x37e0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x83c]
mov eax, dword [ebp + eax*4 - 0x5834]
cmp eax, dword [ebp - 0x37e0]
jne 0x46bda3
mov dword [ebp - 0x1b18], 1
jmp 0x46bdaa
and dword [ebp - 0x1b18], 0
cmp dword [ebp - 0x1b18], 0x1479
jle 0x46bdc2
mov dword [ebp - 0x37e8], 1
jmp 0x46bdc9
and dword [ebp - 0x37e8], 0
mov eax, dword [ebp - 0xa28]
imul eax, dword [ebp - 0x37e8]
test eax, eax
jne 0x46bde6
mov dword [ebp - 0x1b20], 1
jmp 0x46bded
and dword [ebp - 0x1b20], 0
mov eax, dword [ebp - 0x1b20]
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x91c], 0xcf7d1649
jb 0x46be11
mov dword [ebp - 0x37f0], 1
jmp 0x46be18
and dword [ebp - 0x37f0], 0
mov eax, dword [ebp - 0x37f0]
mov dword [ebp - 0x1748], eax
cmp dword [ebp - 0x1748], 0x881826fb
jne 0x46be8d
mov dword [ebp - 0x91c], 0
jmp 0x46be49
mov eax, dword [ebp - 0x91c]
inc eax
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x91c], 0xb
jl 0x46be75
mov byte [ebp - 0x824], 0
movzx eax, byte [ebp - 0x824]
test eax, eax
je 0x46be73
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
jmp 0x46be3c
cmp dword [ebp - 0x1748], 0
je 0x46be8b
lea ecx, [ebp - 0x559c]
call fcn.00415bbf
jmp 0x46bebd
jmp 0x46bead
mov dword [ebp - 0x4bd8], 0x540f
mov dword [ebp - 0x4be0], 0x357f039d
mov eax, dword [ebp - 0x4bd8]
mov dword [ebp - 0x4be0], eax
lea ecx, [ebp - 0x559c]
call fcn.00415bbf
jmp 0x46bcbb
jmp 0x46bc64
jmp 0x46bc34
mov dword [ebp - 0x10ac], 0
jmp 0x46bee0
mov eax, dword [ebp - 0x10ac]
inc eax
mov dword [ebp - 0x10ac], eax
cmp dword [ebp - 0x10ac], 3
jge 0x46befc
mov eax, dword [ebp - 0x10ac]
mov dword [ebp + eax*4 - 0x751c], 1
jmp 0x46bed3
mov dword [ebp - 0x844], 0x7a3a11c1
mov dword [ebp - 0xd34], 1
push 1
lea ecx, [ebp - 0x5e24]
call fcn.00415aed
mov dword [ebp - 0x4be8], 0xffffffff
mov dword [ebp - 0x1b40], 0xeb2fc257
mov dword [ebp - 0x2e8], 0
jmp 0x46bf4a
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 1
jge 0x46bf6c
push dword [ebp - 0x2e8]
lea ecx, [ebp - 0x5e24]
call fcn.00415bdb
mov dword [eax], 0xfffffffe
jmp 0x46bf3d
mov dword [ebp - 0x2e8], 0
jmp 0x46bf85
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 4
jge 0x46bfa1
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x7278], 0
jmp 0x46bf78
mov eax, dword [ebp - 0x844]
mov dword [ebp - 0x66d8], eax
mov eax, 0xd711e7bf
test eax, eax
je 0x46bfcb
cmp dword [ebp - 0x844], 0
je 0x46bfcb
mov dword [ebp - 0x1b28], 1
jmp 0x46bfd2
and dword [ebp - 0x1b28], 0
cmp dword [ebp - 0xd34], 0
jge 0x46bfe7
mov dword [ebp - 0x37f8], 1
jmp 0x46bfee
and dword [ebp - 0x37f8], 0
mov eax, dword [ebp - 0xd34]
add eax, dword [ebp - 0x1b28]
cmp eax, dword [ebp - 0x37f8]
jl 0x46c00e
mov dword [ebp - 0x1508], 1
jmp 0x46c015
and dword [ebp - 0x1508], 0
push 0
lea ecx, [ebp - 0x5e24]
call fcn.00415bdb
mov ecx, dword [ebp - 0x1508]
mov dword [eax], ecx
cmp dword [ebp - 0x1508], 0x89f42c60
jb 0x46c042
mov dword [ebp - 0x1b30], 1
jmp 0x46c049
and dword [ebp - 0x1b30], 0
mov eax, dword [ebp - 0x844]
cmp dword [ebp - 0x1b30], eax
jge 0x46c069
cmp dword [ebp - 0x844], 0
jne 0x46c069
and dword [ebp - 0x3800], 0
jmp 0x46c073
mov dword [ebp - 0x3800], 1
mov eax, dword [ebp - 0x3800]
mov dword [ebp - 0xd34], eax
mov eax, dword [ebp - 0x4be8]
cmp dword [ebp - 0xd34], eax
jne 0x46c099
mov dword [ebp - 0x1b38], 1
jmp 0x46c0a0
and dword [ebp - 0x1b38], 0
cmp dword [ebp - 0x1b38], 0xbc8b
jg 0x46c0b8
mov dword [ebp - 0x3808], 1
jmp 0x46c0bf
and dword [ebp - 0x3808], 0
mov eax, dword [ebp - 0x3808]
mov dword [ebp - 0x1b40], eax
mov eax, dword [ebp - 0x844]
cmp dword [ebp - 0x1b40], eax
jge 0x46c0e5
mov dword [ebp - 0x3810], 1
jmp 0x46c0ec
and dword [ebp - 0x3810], 0
mov eax, dword [ebp - 0x844]
cmp dword [ebp - 0x3810], eax
jne 0x46c106
mov dword [ebp - 0x1b48], 1
jmp 0x46c10d
and dword [ebp - 0x1b48], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1b48]
mov dword [ebp + eax - 0x7278], ecx
lea ecx, [ebp - 0x5e24]
call fcn.00415bbf
mov byte [ebp - 0x54e], 0
mov dword [ebp - 0x3840], 0xfffffffe
mov dword [ebp - 0x1510], 0
mov dword [ebp - 0x4bf0], 0xfffffffa
mov dword [ebp - 0x3828], 0
push 1
lea ecx, [ebp - 0x5cec]
call fcn.00415aed
mov dword [ebp - 0x6cc0], 0x5051acae
mov dword [ebp - 0x1880], 1
mov dword [ebp - 0x1518], 0xd2f5
mov dword [ebp - 0x186c], 7
mov dword [ebp - 0x4f60], 0xffff
mov dword [ebp - 0x4f68], 0xfffffff6
mov dword [ebp - 0x4f70], 0xd7a7
mov dword [ebp - 0x110], 0
jmp 0x46c1c5
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x46c1e7
push dword [ebp - 0x110]
lea ecx, [ebp - 0x5cec]
call fcn.00415bdb
mov dword [eax], 0xb2fc257a
jmp 0x46c1b8
mov dword [ebp - 0x110], 0
jmp 0x46c200
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x46c21c
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x5784], 1
jmp 0x46c1f3
mov dword [ebp - 0x110], 0
jmp 0x46c235
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x46c251
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x1b60], 0x5aa9
jmp 0x46c228
mov eax, dword [ebp - 0x3840]
mov dword [ebp - 0x1510], eax
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x66e0], eax
mov eax, dword [ebp - 0x186c]
inc eax
mov dword [ebp - 0x186c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5784]
cmp dword [ebp - 0x186c], eax
jne 0x46c297
mov dword [ebp - 0x1750], 1
jmp 0x46c29e
and dword [ebp - 0x1750], 0
push 0
lea ecx, [ebp - 0x5cec]
call fcn.00415bdb
mov ecx, dword [ebp - 0x1750]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1510]
cmp dword [ebp - 0x1750], eax
jge 0x46c2cd
mov dword [ebp - 0x3818], 1
jmp 0x46c2d4
and dword [ebp - 0x3818], 0
cmp dword [ebp - 0x3818], 1
jne 0x46c2e9
mov dword [ebp - 0x1b50], 1
jmp 0x46c2f0
and dword [ebp - 0x1b50], 0
mov eax, dword [ebp - 0x4bf0]
add eax, dword [ebp - 0x1b50]
cmp eax, 0x9f71d691
jne 0x46c30f
mov dword [ebp - 0x3820], 1
jmp 0x46c316
and dword [ebp - 0x3820], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3820]
mov dword [ebp + eax - 0x5784], ecx
cmp dword [ebp - 0x1518], 0
je 0x46c34e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b60], 0
je 0x46c34e
mov dword [ebp - 0x1b58], 1
jmp 0x46c355
and dword [ebp - 0x1b58], 0
mov eax, dword [ebp - 0x1b58]
mov dword [ebp - 0x3828], eax
mov eax, dword [ebp - 0x1880]
cmp dword [ebp - 0x3828], eax
jge 0x46c37b
mov dword [ebp - 0x4f58], 1
jmp 0x46c382
and dword [ebp - 0x4f58], 0
mov eax, dword [ebp - 0x1518]
mov dword [ebp - 0x6ff8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b60]
add eax, dword [ebp - 0x1880]
cmp eax, dword [ebp - 0x1518]
jg 0x46c3b5
mov dword [ebp - 0x3830], 1
jmp 0x46c3bc
and dword [ebp - 0x3830], 0
mov eax, dword [ebp - 0x4f60]
cmp dword [ebp - 0x3830], eax
jne 0x46c3d6
mov dword [ebp - 0x1b68], 1
jmp 0x46c3dd
and dword [ebp - 0x1b68], 0
cmp dword [ebp - 0x1b68], 0xffffffff
je 0x46c3f2
mov dword [ebp - 0x3838], 1
jmp 0x46c3f9
and dword [ebp - 0x3838], 0
cmp dword [ebp - 0x3838], 0x672a
jg 0x46c411
mov dword [ebp - 0x1b70], 1
jmp 0x46c418
and dword [ebp - 0x1b70], 0
mov eax, dword [ebp - 0x4f68]
mov ecx, dword [ebp - 0x1b70]
lea eax, [ecx + eax - 0xb9e5]
cmp eax, dword [ebp - 0x4f70]
je 0x46c43f
mov dword [ebp - 0x1b78], 1
jmp 0x46c446
and dword [ebp - 0x1b78], 0
mov eax, dword [ebp - 0x3840]
cmp eax, dword [ebp - 0x1b78]
jl 0x46c460
mov dword [ebp - 0x3848], 1
jmp 0x46c467
and dword [ebp - 0x3848], 0
mov eax, dword [ebp - 0x3848]
mov dword [ebp - 0x1880], eax
lea ecx, [ebp - 0x5cec]
call fcn.00415bbf
movzx eax, byte [ebp - 0x54e]
test eax, eax
je 0x46c4ef
mov dword [ebp - 0x66e8], 0xbbca6318
mov byte [ebp - 0x550], 0
movzx eax, byte [ebp - 0x550]
test eax, eax
je 0x46c4b8
push 0
push 0xe6e
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [ebp - 0x552], 0
movzx eax, byte [ebp - 0x552]
test eax, eax
je 0x46c4e2
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
push 0x8d0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov dword [ebp - 0x1320], 0xc204e2db
mov dword [ebp - 0x5fd8], 0x30de9bf9
mov dword [ebp - 0x5fd4], 0x30de9bf9
mov dword [ebp - 0x5fd0], 0x30de9bf9
mov dword [ebp - 0x5fcc], 0x30de9bf9
mov dword [ebp - 0x1320], 0
jmp 0x46c53a
mov eax, dword [ebp - 0x1320]
dec eax
mov dword [ebp - 0x1320], eax
cmp dword [ebp - 0x1320], 0xfffffffe
jle 0x46c5ff
mov dword [ebp - 0x1b80], 0xffffffff
mov dword [ebp - 0x5fb8], 0xffffffff
mov dword [ebp - 0x5fb4], 0xffffffff
mov dword [ebp - 0x5fb0], 0xffffffff
mov dword [ebp - 0x5fac], 0xffffffff
mov dword [ebp - 0xd3c], 0
jmp 0x46c592
mov eax, dword [ebp - 0xd3c]
inc eax
mov dword [ebp - 0xd3c], eax
cmp dword [ebp - 0xd3c], 4
jge 0x46c5ae
mov eax, dword [ebp - 0xd3c]
mov dword [ebp + eax*4 - 0x7368], 0x3a0b8ee4
jmp 0x46c585
mov dword [ebp - 0x1b80], 0
mov eax, dword [ebp - 0x1b80]
mov dword [ebp - 0x3850], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3850]
mov dword [ebp + eax - 0x5fb8], ecx
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3850]
mov dword [ebp + eax - 0x7368], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5fd8], 0xffffffff
jmp 0x46c52d
mov dword [ebp - 0x10b4], 0
jmp 0x46c618
cmp dword [ebp - 0x10b4], 0xe
jle 0x46d8b5
mov dword [ebp - 0x6cc8], 0xbbca6318
mov byte [ebp - 0x554], 0
movzx eax, byte [ebp - 0x554]
test eax, eax
je 0x46c654
push 0
push 0xe6e
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [ebp - 0x556], 0
movzx eax, byte [ebp - 0x556]
test eax, eax
je 0x46c67e
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
push 4
lea ecx, [ebp - 0x5d04]
call fcn.00415aed
mov dword [ebp - 0x410], 0xfffffffd
mov dword [ebp - 0x1520], 0xeefb6f65
mov dword [ebp - 0x98c], 0xfffffffe
mov dword [ebp - 0x1758], 9
mov dword [ebp - 0x4f80], 8
mov dword [ebp - 0x1ba8], 0xfffffffc
mov dword [ebp - 0xd44], 0
jmp 0x46c6e0
mov eax, dword [ebp - 0xd44]
inc eax
mov dword [ebp - 0xd44], eax
cmp dword [ebp - 0xd44], 1
jge 0x46c6fc
mov eax, dword [ebp - 0xd44]
mov dword [ebp + eax*4 - 0x4f78], 0x8eac8b13
jmp 0x46c6d3
mov dword [ebp - 0x410], 0
jmp 0x46c715
mov eax, dword [ebp - 0x410]
dec eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0
jl 0x46c76a
mov dword [ebp - 0x1270], 5
mov dword [ebp - 0x1270], 0
jmp 0x46c741
mov eax, dword [ebp - 0x1270]
dec eax
mov dword [ebp - 0x1270], eax
cmp dword [ebp - 0x1270], 0
jl 0x46c768
mov byte [ebp - 0x558], 0
movzx eax, byte [ebp - 0x558]
test eax, eax
je 0x46c766
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
jmp 0x46c734
jmp 0x46c708
mov dword [ebp - 0x410], 0x19
jmp 0x46c783
cmp dword [ebp - 0x410], 0x1a
jne 0x46cb30
push 1
lea ecx, [ebp - 0x1a20]
call fcn.00415aed
mov dword [ebp - 0x1bb8], 1
mov dword [ebp - 0xd4c], 0
jmp 0x46c7c0
mov eax, dword [ebp - 0xd4c]
inc eax
mov dword [ebp - 0xd4c], eax
cmp dword [ebp - 0xd4c], 1
jge 0x46c7e2
push dword [ebp - 0xd4c]
lea ecx, [ebp - 0x1a20]
call fcn.00415bdb
mov dword [eax], 4
jmp 0x46c7b3
push 0
lea ecx, [ebp - 0x1a20]
call fcn.00415bdb
mov eax, dword [eax]
mov dword [ebp - 0x1520], eax
mov esi, dword [ebp - 0x1520]
push 0
lea ecx, [ebp - 0x1a20]
call fcn.00415bdb
cmp dword [eax], esi
jg 0x46c81a
mov dword [ebp - 0x1b88], 1
jmp 0x46c821
and dword [ebp - 0x1b88], 0
mov eax, dword [ebp - 0x1b88]
mov dword [ebp - 0x98c], eax
mov eax, dword [ebp - 0x98c]
mov dword [ebp - 0x1758], eax
mov dword [ebp - 0x98c], 0
jmp 0x46c852
cmp dword [ebp - 0x98c], 5
jge 0x46cb20
mov dword [ebp - 0x1528], 0x14186e14
mov dword [ebp - 0x1bb0], 3
mov dword [ebp - 0x3870], 0xf230b56b
mov dword [ebp - 0x5a24], 0xf5e17530
mov dword [ebp - 0x5a20], 0xf5e17530
mov dword [ebp - 0x5a1c], 0xf5e17530
mov dword [ebp - 0x5a18], 0xf5e17530
lea ecx, [ebp - 0x1781]
call fcn.00415bea
push eax
lea eax, [ebp - 0x5a14]
push eax
lea eax, [ebp - 0x5a24]
push eax
lea ecx, [ebp - 0x7230]
call fcn.00415bed
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x68b0]
call fcn.00415b99
mov dword [ebp - 0x10bc], 0
jmp 0x46c8f3
lea ecx, [ebp - 0x1a20]
call fcn.00415bbf
jmp 0x46c776
push 4
lea ecx, [ebp - 0xc30]
call fcn.00415aed
mov dword [ebp - 0x5dc], 0xe661fbc9
push 3
lea ecx, [ebp - 0x47d8]
call fcn.00415aed
mov dword [ebp - 0x1760], 0xfffffffa
mov dword [ebp - 0x1be0], 1
mov dword [ebp - 0x1bf8], 0x328d
push 3
lea ecx, [ebp - 0x5ecc]
call fcn.00415aed
mov dword [ebp - 0x84], 0
jmp 0x46cb98
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x46cbba
push dword [ebp - 0x84]
lea ecx, [ebp - 0xc30]
call fcn.00415bdb
mov dword [eax], 0x8311
jmp 0x46cb8b
mov dword [ebp - 0x84], 0
jmp 0x46cbd3
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x46cbf5
push dword [ebp - 0x84]
lea ecx, [ebp - 0x47d8]
call fcn.00415bdb
mov dword [eax], 9
jmp 0x46cbc6
mov dword [ebp - 0x84], 0
jmp 0x46cc0e
cmp dword [ebp - 0x84], 3
jge 0x46cc30
mov dword [ebp - 0xa30], 0xe0648261
mov dword [ebp - 0x4fc0], 0xfffffff7
mov dword [ebp - 0xa30], 0
jmp 0x46d8e2
mov eax, dword [ebp - 0xa30]
dec eax
mov dword [ebp - 0xa30], eax
cmp dword [ebp - 0xa30], 0xffffffef
jle 0x46d907
mov byte [ebp - 0x55a], 0
movzx eax, byte [ebp - 0x55a]
test eax, eax
je 0x46d905
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x46d8d5
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0x4fc0], eax
mov dword [ebp - 0x85c], 0xb110c93b
mov dword [ebp - 0xbe8], 0
mov dword [ebp - 0x4fd0], 0x35984225
mov dword [ebp - 0x3970], 0xfff6
mov dword [ebp - 0x85c], 8
jmp 0x46d954
mov eax, dword [ebp - 0x85c]
dec eax
mov dword [ebp - 0x85c], eax
cmp dword [ebp - 0x85c], 0xfffffff7
jne 0x46db3b
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0x1278], 0
jmp 0x46d984
mov eax, dword [ebp - 0x1278]
inc eax
mov dword [ebp - 0x1278], eax
cmp dword [ebp - 0x1278], 3
jge 0x46d9a0
mov eax, dword [ebp - 0x1278]
mov dword [ebp + eax*4 - 0x7140], 0x59ec1348
jmp 0x46d977
mov dword [ebp - 0x2f8], 0xa
jmp 0x46d9b9
cmp dword [ebp - 0x2f8], 0x14
jl 0x46db36
mov dword [ebp - 0x4fc8], 0
mov eax, 0x72ca
test eax, eax
je 0x46da94
cmp dword [ebp - 0x2f8], 0
je 0x46da6d
mov eax, dword [ebp - 0x2f8]
neg eax
imul eax, eax, 0x6c9c
imul ecx, dword [ebp - 0x85c], 0
cmp eax, ecx
je 0x46da0f
mov dword [ebp - 0x3958], 1
jmp 0x46da16
and dword [ebp - 0x3958], 0
cmp dword [ebp - 0x3958], 0xffffffff
jl 0x46da2b
mov dword [ebp - 0x1c90], 1
jmp 0x46da32
and dword [ebp - 0x1c90], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x1c90], eax
je 0x46da4c
mov dword [ebp - 0x3960], 1
jmp 0x46da53
and dword [ebp - 0x3960], 0
mov eax, dword [ebp - 0x4fc8]
add eax, dword [ebp - 0x3960]
je 0x46da6d
and dword [ebp - 0x1c98], 0
mov eax, dword [ebp - 0x1c98]
sub eax, dword [ebp - 0x85c]
cmp eax, dword [ebp - 0x2f8]
jle 0x46da94
mov dword [ebp - 0x3968], 1
jmp 0x46da9b
and dword [ebp - 0x3968], 0
mov eax, dword [ebp - 0xbe8]
cmp dword [ebp - 0x3968], eax
jle 0x46dabb
cmp dword [ebp - 0x2f8], 0
jne 0x46dabb
and dword [ebp - 0x1ca0], 0
jmp 0x46dac5
mov dword [ebp - 0x1ca0], 1
mov eax, dword [ebp - 0x1ca0]
inc eax
je 0x46dada
mov dword [ebp - 0x1538], 1
jmp 0x46dae1
and dword [ebp - 0x1538], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1538]
mov dword [ebp + eax - 0x7140], ecx
mov eax, dword [ebp - 0x1538]
mov dword [ebp - 0x4fd0], eax
mov dword [ebp - 0xbe8], 2
jmp 0x46db19
cmp dword [ebp - 0xbe8], 0
jl 0x46db31
mov eax, dword [ebp - 0x3970]
inc eax
mov dword [ebp - 0x3970], eax
jmp 0x46db0c
jmp 0x46d9ac
jmp 0x46d947
mov dword [ebp - 0x40], 0xf9c2
push 3
lea ecx, [ebp - 0x19ac]
call fcn.00415aed
mov dword [ebp - 0x92c], 0xd39c7c6f
mov dword [ebp - 0x10cc], 0xe9ab5c29
mov dword [ebp - 0xd6c], 0
jmp 0x46db7c
mov eax, dword [ebp - 0xd6c]
inc eax
mov dword [ebp - 0xd6c], eax
cmp dword [ebp - 0xd6c], 3
jge 0x46db9e
push dword [ebp - 0xd6c]
lea ecx, [ebp - 0x19ac]
call fcn.00415bdb
mov dword [eax], 0x5e00
jmp 0x46db6f
mov eax, 0x6e87
test eax, eax
je 0x46dbb4
push 2
lea ecx, [ebp - 0x19ac]
call fcn.00415bdb
push 2
lea ecx, [ebp - 0x19ac]
call fcn.00415bdb
mov esi, eax
push 2
lea ecx, [ebp - 0x19ac]
call fcn.00415bdb
mov esi, dword [esi]
imul esi, dword [eax]
push 2
lea ecx, [ebp - 0x19ac]
call fcn.00415bdb
cmp esi, dword [eax]
je 0x46dbf2
mov dword [ebp - 0x1ca8], 1
jmp 0x46dbf9
and dword [ebp - 0x1ca8], 0
push 1
lea ecx, [ebp - 0x19ac]
call fcn.00415bdb
mov ecx, dword [ebp - 0x1ca8]
cmp ecx, dword [eax]
jge 0x46dc1c
mov dword [ebp - 0x3978], 1
jmp 0x46dc23
and dword [ebp - 0x3978], 0
push 2
lea ecx, [ebp - 0x19ac]
call fcn.00415bdb
mov eax, dword [eax]
imul eax, dword [ebp - 0x3978]
test eax, eax
je 0x46dc50
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x46dc50
mov dword [ebp - 0x1cb0], 1
jmp 0x46dc57
and dword [ebp - 0x1cb0], 0
mov eax, dword [ebp - 0x1cb0]
mov dword [ebp - 0x92c], eax
cmp dword [ebp - 0x92c], 0
push 2
lea ecx, [ebp - 0x19ac]
call fcn.00415bdb
cmp dword [eax], 0x7e44142b
je 0x46dc8b
mov dword [ebp - 0x3980], 1
jmp 0x46dc92
and dword [ebp - 0x3980], 0
cmp dword [ebp - 0x3980], 0
je 0x46dca7
mov dword [ebp - 0x1cb8], 1
jmp 0x46dcae
and dword [ebp - 0x1cb8], 0
cmp dword [ebp - 0x1cb8], 0xffffffff
jne 0x46dcc3
mov dword [ebp - 0x3988], 1
jmp 0x46dcca
and dword [ebp - 0x3988], 0
push 1
lea ecx, [ebp - 0x19ac]
call fcn.00415bdb
mov ecx, dword [ebp - 0x3988]
cmp ecx, dword [eax]
jg 0x46dced