Function at 0x479199
Capabilities:
Get common file path
Get disk size
Get session user name
Modify service
Query or enumerate registry key
Set registry value
Suspend thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1228
call fcn.004c70f0
xor eax, eax
mov dword [ebp - 0x54], ecx
push 0xffffffffffffffff
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x6d], dl
mov dword [ebp - 0x28], 0x1c
pop ecx
jmp 0x4792b6
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x4791e5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x91c], 0x30a9bca7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4791cc
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffff0
jle 0x4792b3
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x479214
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x158], 0xc4c8d3c8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4791fb
xor eax, eax
mov dword [ebp - 0x154], 0xffffffe6
jmp 0x479297
mov dword [ebp - 0x10], 0x39ee491b
mov dword [ebp - 0x14], eax
jmp 0x47923d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9dc], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x47922c
mov eax, dword [ebp - 0x9d4]
cmp dword [ebp - 0x1c], 0x31d14cd4
jge 0x479258
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x154]
neg ecx
push 0
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
imul ecx, dword [ebp - 0x28]
mov dword [ebp - 0x918], ecx
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x154]
pop eax
cmp dword [ebp - 0x154], 0xfffffff5
jne 0x479220
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
push 0
pop eax
jg 0x4791f2
or ecx, 0xffffffff
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xe
jg 0x4791c0
push ebx
mov dword [ebp - 0xc], 0x6d0374c7
xor ebx, ebx
mov dword [ebp - 0x3c], 0xf6a715cc
inc ebx
mov dword [ebp - 0x2c], 0x2ba29f58
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
push esi
push edi
jge 0x479307
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5ac], 0xf803
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x4792ee
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x479329
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x928], 0x11c25c53
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x479310
xor eax, eax
cmp dword [ebp - 0xc], eax
je 0x47938a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
xor eax, eax
mov ecx, eax
cmp dword [ebp - 4], eax
je 0x479345
mov ecx, ebx
mov eax, dword [ebp - 0xc]
imul eax, ecx
test eax, eax
je 0x479352
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0xc]
jge 0x47936a
xor eax, eax
cmp dword [ebp - 0x5a8], eax
je 0x47936c
mov eax, ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x5a8]
mov eax, dword [ebp - 0x5a4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x5ac]
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0xc]
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
shl eax, 2
mov dword [ebp - 0x924], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x4793f9
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x4793d8
push 0x1c02
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x4793f6
push 0x1f27
push eax
push eax
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
xor eax, eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffb
jl 0x4793c1
mov dword [ebp - 0x18], eax
or edx, 0xffffffff
mov dword [ebp - 0x30], 0xb72f
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x14], eax
jmp 0x479428
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x934], 4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x479417
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x30]
cmp eax, 0x89a6
push 6
setne cl
imul eax, ecx, 0x40cc7b50
mov ecx, dword [ebp - 0x30]
sub ecx, eax
sub ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x1c], 0x1c
cmp dword [ebp - 0x1c], 0xffffffec
pop ecx
jge 0x479579
xor eax, eax
mov dword [ebp - 0xc], 0xb8bffbef
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x47949c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5f4], 0xbb66efe0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x479483
xor eax, eax
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], eax
je 0x47954c
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], eax
jmp 0x4794c1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb9c], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4794b0
mov eax, dword [ebp - 0xc]
xor eax, eax
cmp dword [ebp - 0x934], eax
jne 0x4794db
mov edx, eax
cmp dword [ebp - 0x30], eax
je 0x4794dd
mov edx, ebx
mov dword [ebp - 0x5f0], edx
xor ecx, ecx
mov dword [ebp - 0xb9c], edx
mov eax, dword [ebp - 0xc]
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
cmp ebx, eax
sbb eax, eax
xor edx, edx
neg eax
imul ecx, eax, 0x1a1f
mov eax, dword [ebp - 0xc]
cmp ecx, eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x3c]
setle dl
sub ecx, eax
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
add edx, ecx
imul edx, dword [ebp - 0xc]
test edx, edx
je 0x479532
mov ecx, ebx
cmp dword [ebp - 0xb9c], eax
jne 0x479534
mov ecx, eax
xor eax, eax
cmp ecx, 0x11b55e9
push 6
setne al
mov dword [ebp - 0x10], eax
xor eax, eax
or edx, 0xffffffff
pop ecx
jmp 0x47956c
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], ebx
jg 0x47956c
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x5f4], 0x64e62b50
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jle 0x479554
xor eax, eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffec
jl 0x479470
mov dword [ebp - 0x18], 0x1c
cmp dword [ebp - 0x18], 0xe
jle 0x47a11d
jmp 0x47958f
or edx, 0xffffffff
mov dword [ebp - 0xc], 0x24ec2e0c
xor eax, eax
mov dword [ebp - 0x10], 0xffff
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], ebx
jge 0x4795bf
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xc4], 0x3526c715
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jl 0x4795a7
xor eax, eax
push 4
mov dword [ebp - 0xc], eax
pop ecx
cmp dword [ebp - 0xc], ecx
jge 0x4795de
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xbcc], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x4795ca
xor eax, eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], ecx
jge 0x4795fe
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xda4], 0x65dd4d14
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x4795e6
xor eax, eax
mov dword [ebp - 0xc], 0xfffffff3
jmp 0x479667
mov dword [ebp - 0x3c], 0xa2b82c44
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0xc], eax
jne 0x47965e
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc4], eax
shl eax, 2
cmp eax, 0x752570e
setle cl
xor eax, eax
test ecx, ecx
mov dword [ebp - 0xbc8], ecx
sete al
imul eax, dword [ebp - 0x24]
test eax, eax
jne 0x479653
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xc4]
xor eax, eax
mov dword [ebp - 0xda4], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xd
jg 0x479607
mov esi, ebx
cmp dword [ebp - 0xc4], eax
jne 0x479679
mov esi, eax
mov eax, dword [ebp - 0xc4]
xor ecx, ecx
mov eax, dword [ebp - 0xc]
cmp eax, 0x6511c25c
setge cl
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, esi
cmp edx, eax
setne cl
xor eax, eax
mov dword [ebp - 0xbc8], ecx
or ecx, 0xffffffff
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x570], ebx
mov dword [ebp - 0x56c], ebx
mov dword [ebp - 0x568], ebx
mov dword [ebp - 0x564], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x4796ec
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xcc], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x4796d4
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x479702
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0xcc], eax
jmp 0x47979f
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x479796
mov dword [ebp - 0x2c], 0x8c9dffbe
mov dword [ebp - 0x14], eax
jmp 0x47973d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x48c], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x479730
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x570]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp + eax*4 - 0x570]
imul edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x570]
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 0x10], 0x1791
cmp dword [ebp - 0x10], eax
jne 0x479794
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
push 0xffffffffffffffff
pop ecx
jle 0x479724
xor eax, eax
inc dword [ebp - 0xcc]
push 0xffffffffffffffff
pop ecx
cmp dword [ebp - 0xcc], 0x1a
jle 0x47970d
mov dword [ebp - 0x10], 5
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x4797cf
push 0xe4d
push 0x9e4
push eax
call dword [sym.imp.USER32.dll_DeleteMenu]
xor eax, eax
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x4797f5
push eax
push eax
push 0x1bc7
push 0x1e31
call esi
push eax
call dword [sym.imp.USER32.dll_ScrollWindow]
xor eax, eax
mov dword [ebp - 0x1c], 0x73838a1f
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x47981d
or ecx, 0xffffffff
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd00], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x479808
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x47983e
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xd00], 0
jne 0x47983c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x479826
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47985a
push 0x135e
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x47987c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x94c], 0x30a9bca7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x479863
xor eax, eax
mov dword [ebp - 0x10], 9
mov dword [ebp - 0x10], 0xe85a7b05
mov dword [ebp - 0x1c], 0x556123d4
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x4798b3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1128], 0x833fcb50
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x47989a
xor eax, eax
inc dword [ebp - 0x1c]
push 6
mov dword [ebp - 0x1c], eax
pop ecx
jmp 0x4798dc
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x4798d9
push eax
push 0x1281
push eax
call dword [sym.imp.GDI32.dll_GetBitmapBits]
push 6
xor eax, eax
pop ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jle 0x4798be
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff0
jle 0x47a110
jmp 0x4798f2
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x479917
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x940], 0x29bf39
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4798fe
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x479933
push 0xf2e
push 0x6f
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
xor eax, eax
inc dword [ebp - 0x2c]
mov dword [ebp - 0x93c], ebx
mov dword [ebp - 0x30], 0xe1757117
mov dword [ebp - 0x30], 8
cmp dword [ebp - 0x30], 0xfffffffa
jne 0x4799bd
jmp 0x479954
xor eax, eax
mov dword [ebp - 0x10], 0xccce1e2c
mov dword [ebp - 0x14], eax
jmp 0x479971
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xcb8], 0xcdcb363f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x479960
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xcb8], eax
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x4799b4
push 0x1b10
push 0xe3a
push 0x1fa4
push 0x1212
push 0x791
push 0x1409
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffffa
je 0x479952
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x4799e1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x148], 0xc4c8d3c8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4799c8
xor eax, eax
push 3
or edx, 0xffffffff
pop ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], 0xd4e7937
mov dword [ebp - 0x10], 0x38462751
mov dword [ebp - 0x10], 0xe7e55059
mov dword [ebp - 0x10], 0x8e1b61ba
mov dword [ebp - 0x10], 0x15e1abe8
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], 0xa10aa43b
mov dword [ebp - 0x10], 0x8b6b0e1b
mov dword [ebp - 0x10], 0x3880e033
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0x23ccde6b
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], 0x860a421e
mov dword [ebp - 0x10], 0x93826a05
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], 0x335c22c9
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x479a70
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb88], 0x59b504db
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x479a58
xor eax, eax
inc dword [ebp - 0x2c]
mov dword [ebp - 0x144], 0xffffffe6
cmp dword [ebp - 0x144], 0xfffffff5
je 0x47a103
jmp 0x479a8e
xor eax, eax
mov dword [ebp - 0x34], 0x68ec0ae9
push 3
pop esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x10], 0x6b59229a
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x10], 0xe5ec3521
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x479ad3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x29c], 0xbf261718
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x479abb
xor eax, eax
mov dword [ebp - 0x34], 0xb
cmp dword [ebp - 0x34], 0xffffffea
jle 0x479be6
push 6
pop ecx
jmp 0x479aeb
xor eax, eax
mov dword [ebp - 0x3c], 0xe57b
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], 2
mov dword [ebp - 0x38], 0x2fd8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x479b2f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x11b8], 0x187b35f1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x479b16
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x479bc6
mov dword [ebp - 0x10], 0xc299e885
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x479b5b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x724], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x479b47
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x479b7d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xddc], 0xf7c629c4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x479b64
xor eax, eax
cmp dword [ebp - 0x3c], eax
jne 0x479bb6
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x720]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x720]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setne dl
cmp edx, 0xfffffff8
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x724]
je 0x479bb6
xor eax, eax
jmp 0x479bb8
mov eax, ebx
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x38]
or edx, 0xffffffff
push 6
pop ecx
jmp 0x479bd0
mov dword [ebp - 0x2c], 0x9e13
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffea
jg 0x479ae9
mov dword [ebp - 0x1c], 0x1d
cmp dword [ebp - 0x1c], 0xffffffe8
jle 0x479c60
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x2c], 0x54fd57ec
cmp dword [ebp - 0x29c], eax
je 0x479c23
cmp dword [ebp - 4], eax
jne 0x479c1d
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x479c21
mov eax, ebx
jmp 0x479c23
xor eax, eax
mov dword [ebp - 0x29c], eax
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
test eax, eax
setns dl
add edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 4], eax
jne 0x479c62
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe8
jg 0x479bf3
jmp 0x479c62
xor eax, eax
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x1dc], 0xffffffe3
cmp dword [ebp - 0x1dc], 0xffffffea
jne 0x479dbc
jmp 0x479c98
xor eax, eax
mov dword [ebp - 0x30], 0xe5f36f6d
mov dword [ebp - 0x14], eax
jmp 0x479cb5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1c0], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x479ca4
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x1dc]
add eax, ecx
mov ecx, dword [ebp - 0x30]
inc dword [ebp - 0x30]
add ecx, eax
je 0x479ce4
mov eax, dword [ebp - 0x1d4]
jmp 0x479d76
mov dword [ebp - 0x3c], ebx
xor eax, eax
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], eax
jl 0x479d15
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1c0], ecx
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x479d10
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
dec dword [ebp - 0xc]
jns 0x479cf1
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1d4]
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x1c0], esi
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
or edx, 0xffffffff
imul eax, eax, 0xcda2
cmp eax, edx
setne cl
or eax, 0xffffffff
sub ecx, dword [ebp - 0xc]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1dc]
setne cl
xor edx, edx
cmp esi, ecx
sete dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0xc]
setle cl
imul eax, ecx
dec eax
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], eax
jl 0x479da6
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + eax*4 - 0x1c0]
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1c0], ecx
xor eax, eax
cmp dword [ebp - 0x1c0], eax
jne 0x479da6
dec dword [ebp - 0xc]
jns 0x479d83
inc dword [ebp - 0x1dc]
cmp dword [ebp - 0x1dc], 0xffffffea
je 0x479c96
push 3
pop esi
mov dword [ebp - 0x10], 0x39ee491b
or eax, 0xffffffff
mov dword [ebp - 0x20], 0x20bd2ab
mov dword [ebp - 0x3c], 0x578cca69
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], 0x24489be6
mov dword [ebp - 0x2c], 0xdda259c4
mov dword [ebp - 0x2c], 0xd38c4615
mov dword [ebp - 0x14], eax
jmp 0x479e04
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6c], 0x3e70d28e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x479df6
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x479e26
cmp dword [ebp - 0x3c], eax
je 0x479e26
mov eax, ebx
mov dword [ebp - 0x3c], eax
xor edx, edx
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0x6c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setle cl
sub eax, ecx
sub eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x6c]
je 0x479e58
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x479e5a
mov edx, ebx
jmp 0x479e5c
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, dword [ebp - 0x6c]
jg 0x479e7a
mov edx, ebx
cmp dword [ebp - 0x3c], eax
jne 0x479e7c
mov edx, eax
mov eax, dword [ebp - 0x6c]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
or edx, 0xffffffff
cmp ecx, edx
setle al
xor edx, edx
cmp eax, 0x69a0165d
mov eax, dword [ebp - 0x6c]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], 0x2b5bddd
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
xor eax, eax
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x479f01
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb54], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x479ee9
xor eax, eax
mov dword [ebp - 0x1c], 0x73838a1f
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x479f27
or ecx, 0xffffffff
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd30], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x479f13
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x479f48
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xd30], 0
jne 0x479f46
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x479f30
xor eax, eax
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x479f68
push 0x135e
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
mov eax, dword [ebp - 0xb4c]
cmp dword [ebp - 0x28], 0x31d14cd4
jge 0x479f7d
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
or edx, 0xffffffff
imul ecx, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x948], ecx
mov dword [ebp - 0x38], 0x71a05132
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x479fea
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x958], 0xa6318529
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x479fd1
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x47a00c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x67c], 0xeb0647dc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x479ff3
xor eax, eax
mov dword [ebp - 0x678], eax
jmp 0x47a0db
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jg 0x47a0d5
mov dword [ebp - 0x4c], 0x8e41
mov eax, dword [ebp - 0x1c]
sub eax, 0xfffffff7
neg eax
sbb eax, eax
inc eax
sub eax, 0xa7fe
je 0x47a051
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], eax
jmp 0x47a0be
xor eax, eax
mov dword [ebp - 0x10], 0x7ea4c570
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], ebx
jg 0x47a0b6
mov dword [ebp - 0x2c], 0x14b11f38
mov dword [ebp - 0x38], ebx
xor ebx, ebx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setle bl
sub ebx, 0x2f3f6085
neg ebx
sbb ebx, ebx
inc ebx
sub ebx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp eax, edx
setle cl
xor ebx, ebx
mov dword [ebp - 0x3c], ecx
inc ebx
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], ebx
jle 0x47a062
xor eax, eax
cmp dword [ebp - 0x954], eax
jne 0x47a0c4
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x47a030
xor eax, eax
or edx, 0xffffffff
inc dword [ebp - 0x678]
cmp dword [ebp - 0x678], ebx
jle 0x47a017
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x144]
cmp dword [ebp - 0x144], 0xfffffff5
jne 0x479a8c
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff0
jg 0x4798f0
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xe
jg 0x47958c
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x34], 0x62395e2d
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], 0xff81308f
mov dword [ebp - 0x10], 0x713981d
mov dword [ebp - 0x10], 0xd6c332e4
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
push 0xfffffffffffffffc
pop ecx
jge 0x47a175
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xf34], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x47a160
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x47a187
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1064], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x47a17a
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
cmp eax, ecx
setne dl
sub edx, dword [ebp - 0x34]
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x34]
test edx, edx
jne 0x47a1d6
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0xc], eax
je 0x47a1d8
mov ecx, ebx
mov eax, dword [ebp - 0x34]
add eax, ecx
je 0x47a1fd
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x47a1ff
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x47a2f5
push 0x46b
call dword [sym.imp.KERNEL32.dll_ExitThread]
xor eax, eax
mov dword [ebp - 0x20], 0x8597a0b8
mov dword [ebp - 0x18], 0x1996
mov dword [ebp - 0x2c], 0xc77a5c6a
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], eax
jmp 0x47a22c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x968], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47a21f
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
test eax, eax
setns cl
cmp ecx, dword [ebp - 0x20]
jg 0x47a252
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, 0x34ef
setle cl
imul ecx, dword [ebp - 0x20]
test ecx, ecx
jne 0x47a27d
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x47a27f
mov eax, ebx
mov ecx, dword [ebp - 0x2c]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0xc]
cmp ecx, eax
setge dl
xor ebx, ebx
cmp edx, 0xb08f
setl bl
xor ecx, ecx
imul ebx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
cmp ebx, eax
setle cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x34
jne 0x47a2f0
mov dword [ebp - 0x10], 0xfffffff7
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0x3adeb0cc
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x47a2e8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xf64], 0x8275baed
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x47a2cf
xor eax, eax
inc dword [ebp - 0x3c]
inc dword [ebp - 0x18]
jmp 0x47a2af
xor ebx, ebx
xor eax, eax
inc ebx
or ecx, 0xffffffff
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x3c], 0xb59008cf
mov dword [ebp - 0x7e8], ebx
mov dword [ebp - 0x7e4], ebx
mov dword [ebp - 0x7e0], ebx
mov dword [ebp - 0x7dc], ebx
mov dword [ebp - 0x10], 0xfffffff7
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], 0x277ebd00
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47a33d
call esi
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
sub eax, dword [ebp - 0x14]
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setg dl
sub edx, eax
mov dword [ebp - 0x7dc], edx
mov eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
cmp eax, edx
jne 0x47a371
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x47a373
mov eax, ebx
xor edx, edx
cmp eax, 0x6f1fdbd0
mov eax, dword [ebp - 0x3c]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp eax, edx
setg cl
inc ecx
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x2c], ecx
or ecx, 0xffffffff
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x34], 0x68ec0ae9
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x10], 0x6b59229a
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x10], 0xe5ec3521
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x47a3f5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2cc], 0xbf261718
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47a3dd
xor eax, eax
mov dword [ebp - 0x34], 0xb
cmp dword [ebp - 0x34], 0xffffffea
jle 0x47a508
jmp 0x47a40a
xor eax, eax
mov dword [ebp - 0x3c], 0xe57b
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x10], 6
mov dword [ebp - 0x10], 2
mov dword [ebp - 0x38], 0x2fd8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x47a452
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1158], 0x187b35f1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x47a439
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x47a4e8
mov dword [ebp - 0x10], 0xc299e885
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x47a480
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x718], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x47a46b
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x47a4a2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd74], 0xf7c629c4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x47a489
xor eax, eax
cmp dword [ebp - 0x3c], eax
jne 0x47a4db
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x714]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setne dl
cmp edx, 0xfffffff8
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x718]
je 0x47a4db
xor eax, eax
jmp 0x47a4dd
mov eax, ebx
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x38]
or ecx, 0xffffffff
jmp 0x47a4f2
mov dword [ebp - 0x2c], 0x9e13
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffea
jg 0x47a408
mov dword [ebp - 0x1c], 0x1d
cmp dword [ebp - 0x1c], 0xffffffe8
jle 0x47a582
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x2c], 0x54fd57ec
cmp dword [ebp - 0x2cc], eax
je 0x47a545
cmp dword [ebp - 4], eax
jne 0x47a53f
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x47a543
mov eax, ebx
jmp 0x47a545
xor eax, eax
mov dword [ebp - 0x2cc], eax
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
test eax, eax
setns dl
add edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 4], eax
jne 0x47a584
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe8
jg 0x47a515
jmp 0x47a584
xor eax, eax
mov dword [ebp - 0x694], ebx
mov dword [ebp - 0x690], ebx
mov dword [ebp - 0x68c], ebx
mov dword [ebp - 0x688], ebx
mov dword [ebp - 0x28], ebx
push 2
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x47a5c2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x450], 0x6482
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x47a5aa
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ecx
jge 0x47a5e2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1e8], 0xde19d29b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x47a5ca
xor eax, eax
mov dword [ebp - 0x1e8], eax
jmp 0x47a773
mov dword [ebp - 0x1c], 0xf2887cf2
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x47a74a
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x47a721
mov dword [ebp - 0x34], 0x12df3d37
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jg 0x47a703
jmp 0x47a62d
xor eax, eax
mov dword [ebp - 4], 0xfffffff8
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xe2095e04
mov dword [ebp - 0x3c], 0xfff9
mov dword [ebp - 0x24], 3
cmp dword [ebp - 4], eax
je 0x47a680
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
setge cl
sub ecx, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x688], ecx
je 0x47a67e
mov eax, ebx
jmp 0x47a680
xor eax, eax
mov ecx, dword [ebp - 0x10]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x450]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x450]
cmp eax, edx
setle cl
xor eax, eax
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], eax
jne 0x47a6d1
mov eax, dword [ebp - 0x688]
mov eax, dword [ebp - 4]
mov ecx, ebx
mov eax, dword [ebp - 4]
xor edx, edx
sub ecx, eax
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setne dl
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jle 0x47a62b
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp + eax*4 - 0x450], 0
jne 0x47a71f
dec dword [ebp - 0x20]
push 0
pop eax
jns 0x47a613
xor eax, eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x47a741
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47a73c
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
xor eax, eax
dec dword [ebp - 0x20]
jns 0x47a729
dec dword [ebp - 0x1c]
jns 0x47a600
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x47a76d
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47a768
push 0x570
call dword [sym.imp.USER32.dll_GetSystemMetrics]
xor eax, eax
dec dword [ebp - 0x28]
jns 0x47a752
inc dword [ebp - 0x1e8]
cmp dword [ebp - 0x1e8], ebx
jle 0x47a5ed
mov ebx, dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47a798
push eax
push 0x1267
call ebx
xor eax, eax
mov dword [ebp - 0x28], 3
xor ecx, ecx
mov dword [ebp - 0x48], 0x3ae35568
inc ecx
mov dword [ebp - 4], eax
mov edx, 0xe8588d0d
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], 9
mov dword [ebp - 0x10], 0x1dd5c0ae
mov dword [ebp - 0x10], 0x57461d0e
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], 0xa2560131
mov dword [ebp - 0x48], 2
cmp dword [ebp - 0x48], 0xb
jge 0x47a97b
mov dword [ebp - 0x340], edx
mov dword [ebp - 0x33c], edx
mov dword [ebp - 0x338], edx
mov dword [ebp - 0x334], edx
mov dword [ebp - 0x2c], 0x4f78d7cb
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x3d385e13
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x10], 0xfffffff7
mov dword [ebp - 0x44], 0xc7bc5013
mov dword [ebp - 0x3c], 0x22cfb647
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], ecx
jge 0x47a848
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xab8], 0
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x47a830
xor eax, eax
push 2
mov dword [ebp - 0xc], eax
pop edx
cmp dword [ebp - 0xc], edx
jge 0x47a86b
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x964], 0x7cb0be94
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x47a853
xor eax, eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], edx
jge 0x47a887
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x970], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x47a873
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x47a896
mov edx, ecx
cmp dword [ebp - 0x340], eax
jne 0x47a898
mov edx, eax
mov eax, dword [ebp - 0x48]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x338]
cmp edx, eax
push 0xfffffffffffffffa
setge cl
xor edx, edx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x33c]
mov eax, dword [ebp - 0x48]
pop ecx
sub ecx, eax
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x48]
cmp ecx, eax
mov eax, dword [ebp - 0x340]
setge dl
sub eax, edx
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
inc ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x340]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x338]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c], 0xfffa
mov dword [ebp - 0x2c], 0xd711a53f
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x964], eax
mov eax, dword [ebp - 0x10]
or eax, 0xffffffff
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 4], 0x38b3
cmp dword [ebp - 4], ecx
jg 0x47a961
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x970]
cmp eax, ecx
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x2c], eax
je 0x47a963
mov eax, ecx
mov dword [ebp - 4], eax
mov edx, 0xe8588d0d
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xb
push 0
pop eax
jl 0x47a7e4
mov dword [ebp - 0x2c], 0xd8d9
push 3
pop edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0xd4e7937
mov dword [ebp - 0x10], 0x38462751
mov dword [ebp - 0x10], 0xe7e55059
mov dword [ebp - 0x10], 0x8e1b61ba
mov dword [ebp - 0x10], 0x15e1abe8
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0xa10aa43b
mov dword [ebp - 0x10], 0x8b6b0e1b
mov dword [ebp - 0x10], 0x3880e033
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0x23ccde6b
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], 0x860a421e
mov dword [ebp - 0x10], 0x93826a05
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], 0x335c22c9
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x47aa1a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x974], 0x59b504db
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x47aa02
xor eax, eax
inc dword [ebp - 0x3c]
mov dword [ebp - 0x44], 0x5fc1
mov dword [ebp - 0x3c], 0xc23afc37
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edx
jge 0x47aa47
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xcd0], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x47aa33
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47aa58
push eax
push 0x1267
call ebx
mov eax, dword [ebp - 0x3c]
mov edx, 0x8d232121
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xcd0], eax
xor eax, eax
mov dword [ebp - 0x50], 0x93c3
mov dword [ebp - 0xc], 0x76f5020f
mov dword [ebp - 0x24], 0xb6f8
inc dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x31
jge 0x47ab78
xor ebx, ebx
inc ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], 0x3ffd03b1
mov dword [ebp - 0x3c], eax
or eax, 0xffffffff
mov dword [ebp - 4], 0xc4b7c700
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x10], 0x284818a
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
xor eax, eax
cmp dword [ebp - 4], eax
je 0x47ab0e
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], 0x1462ccd2
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x10], ecx
jne 0x47aaf0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x3c], ebx
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x47ab0c
cmp dword [ebp - 0x38], eax
je 0x47ab0c
mov eax, ebx
jmp 0x47ab0e
xor eax, eax
cmp edx, eax
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, ebx
sbb eax, eax
neg eax
cmp eax, 0xf6f0c3da
mov eax, dword [ebp - 0x24]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], eax
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x47ab61
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
inc dword [ebp - 0xc]
mov edx, 0x8d232121
cmp dword [ebp - 0xc], 0x31
push 0
pop eax
jl 0x47aa93
jmp 0x47ab7b
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], 0x25b9b55b
mov dword [ebp - 4], 0xbdbdf7c
mov dword [ebp - 0x28], 0xea5f34bd
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x3c], 0xc745d07a
mov dword [ebp - 0x10], 0x656d2926
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x47abc7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x308], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x47abae
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x14
jge 0x47acbc
mov dword [ebp - 0x30], 0xdf2ef51a
mov dword [ebp - 0x10], 0x8909ff4c
mov dword [ebp - 0x10], 0xd6bce8d5
mov dword [ebp - 0x10], 0xba4aefc5
mov dword [ebp - 0x14], eax
jmp 0x47ac06
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x228], 0xbebf0a0c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x47abf5
mov eax, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x224]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x224]
mov eax, dword [ebp - 0x228]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x304]
cmp ecx, eax
mov eax, dword [ebp - 0x304]
setle dl
sub edx, eax
jne 0x47ac56
xor eax, eax
mov edx, eax
cmp dword [ebp - 4], eax
je 0x47ac58
mov edx, ebx
mov dword [ebp - 0x304], edx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp edx, eax
push 0
setge cl
or eax, 0xffffffff
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x224]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
inc dword [ebp - 0x3c]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x304]
sub edx, eax
mov eax, dword [ebp - 0x224]
sub edx, eax
mov eax, dword [ebp - 0x30]
cmp eax, ebx
setge cl
xor eax, eax
cmp edx, ecx
setge al
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x14
pop eax
jl 0x47abd4
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x47acda
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xff8], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x47acc5
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x47acf7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x74], 0x3f4f46db
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x47ace2
xor eax, eax
mov edi, dword [sym.imp.GDI32.dll_GetPixel]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jle 0x47ada4
push 2
pop esi
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 7
jge 0x47be7a
mov dword [ebp - 0x1c], 0xf5537c57
mov dword [ebp - 0x3c], 0x809b4af7
mov dword [ebp - 4], 0x17b38e51
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], ebx
jge 0x47ad56
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x234], 0x999d
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], ebx
jl 0x47ad3e
xor eax, eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], ebx
jge 0x47ad76
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xb4], 0xfffffff6
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], ebx
jl 0x47ad5e
xor eax, eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], ebx
jge 0x47ad96
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x4a4], 0x81dda8db
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], ebx
jl 0x47ad7e
xor eax, eax
mov dword [ebp - 0x48], eax
jmp 0x47b5e3
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x18], 0x108f8256
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x14], eax
jmp 0x47adc4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x230], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x47adb3
mov dword [ebp - 0xc], 0xc488
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
push 6
pop ecx
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x18]
jge 0x47ae53
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x47ae4b
mov dword [ebp - 0xc], eax
jmp 0x47ae43
mov dword [ebp - 4], 3
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], eax
jl 0x47ae40
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47ae26
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47ae3b
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
xor eax, eax
dec dword [ebp - 4]
jns 0x47ae0b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jle 0x47adfc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1c
jge 0x47adf7
jmp 0x47aec1
mov dword [ebp - 4], 0xfffffff7
xor eax, eax
mov dword [ebp - 0x10], 0x93a
mov dword [ebp - 0x14], eax
jmp 0x47ae79
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x494], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47ae68
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x22c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x22c]
mov eax, dword [ebp - 0x22c]
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setl dl
mov dword [ebp - 0xc], edx
xor eax, eax
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x47aee8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2f0], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x47aecf
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47aefd
push eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
xor eax, eax
mov dword [ebp - 0x2f0], 0xffffffef
cmp dword [ebp - 0x2f0], eax
je 0x47af2b
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47af23
call esi
push eax
call dword [sym.imp.USER32.dll_ShowCaret]
xor eax, eax
inc dword [ebp - 0x2f0]
jne 0x47af0f
mov byte [ebp - 0x3d], al
mov dword [ebp - 0x1c], 0xf5537c57
mov dword [ebp - 0x3c], 0x809b4af7
mov dword [ebp - 4], 0x17b38e51
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], ebx
jge 0x47af6a
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2d4], 0x999d
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], ebx
jl 0x47af52
xor eax, eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], ebx
jge 0x47af8a
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xb8], 0xfffffff6
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], ebx
jl 0x47af72
xor eax, eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], ebx
jge 0x47afaa
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x49c], 0x81dda8db
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], ebx
jl 0x47af92
xor eax, eax
mov dword [ebp - 0x48], eax
jmp 0x47afc0
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x97c], 0x4acd6ba
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 2
jl 0x47afaf
mov dword [ebp - 0x2d4], 0xbef7d651
xor edx, edx
mov ecx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setl dl
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x1c]
jge 0x47aff4
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x3c], eax
je 0x47aff6
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x49c], ecx
mov eax, dword [ebp - 0x1c]
sub ecx, eax
jne 0x47b019
xor eax, eax
cmp dword [ebp - 0xb8], eax
je 0x47b022
jmp 0x47b01b
xor eax, eax
mov esi, ebx
cmp dword [ebp - 0x1c], eax
jne 0x47b024
mov esi, eax
mov ecx, dword [ebp - 0xb8]
xor edx, edx
mov eax, dword [ebp - 0xb8]
cmp ecx, eax
mov eax, dword [ebp - 0xb8]
setl dl
xor ecx, ecx
cmp esi, eax
mov eax, dword [ebp - 4]
setle cl
sub edx, ecx
sub edx, eax
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x1c]
add eax, edx
add ecx, eax
mov dword [ebp - 0xb8], ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x97c]
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x10], eax
cmp byte [ebp - 0x3d], 0
je 0x47b0a4
push 0x1219
push 0xde9
push 0x3c
push 0x84a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
xor eax, eax
mov dword [ebp - 0x34], 0xb0b02971
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x47b0cd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb58], 0xe91a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47b0b5
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], eax
jl 0x47b103
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47b0fe
push 0x1e52
push 0x221d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_LineTo]
xor eax, eax
dec dword [ebp - 0x34]
jns 0x47b0d5
mov dword [ebp - 0x34], eax
jmp 0x47b124
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47b121
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetMenu]
xor eax, eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 7
je 0x47b108
mov dword [ebp - 4], 0xf3617394
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0x883e731e
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x30], 0xcdee94cc
mov dword [ebp - 0x10], 0xec51ac06
mov dword [ebp - 0x10], 0xdd2ac30b
mov dword [ebp - 0x3c], 0xc33bab72
mov dword [ebp - 0x24], 0xabed
mov dword [ebp - 0x24], 0xbb218ad3
mov dword [ebp - 0x24], 0x5584e2bb
mov dword [ebp - 0x1c], 0xc1b23fe2
mov dword [ebp - 0x3c], 0xb5b
mov dword [ebp - 0x24], 0x1b70f82e
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x47b1b3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x73c], 0xfffffffe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x47b19a
xor eax, eax
push 2
mov dword [ebp - 0x20], eax
pop esi
cmp dword [ebp - 0x20], esi
jge 0x47b1d2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x65c], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x47b1be
xor eax, eax
dec dword [ebp - 4]
cmp dword [ebp - 0xc], eax
je 0x47b1dd
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp eax, ebx
mov eax, dword [ebp - 0xc]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setg dl
xor ebx, ebx
cmp edx, eax
setl bl
imul eax, dword [ebp - 4], 0x1ba
xor ecx, ecx
cmp eax, ebx
setge cl
xor eax, eax
sub ecx, dword [ebp - 0xc]
cmp ecx, 0x63b0
jl 0x47b228
cmp dword [ebp - 0xc], eax
je 0x47b228
xor ebx, ebx
inc ebx
mov eax, ebx
jmp 0x47b22b
xor ebx, ebx
inc ebx
cmp eax, dword [ebp - 0xc]
je 0x47b239
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0xc], eax
je 0x47b23b
mov ecx, ebx
mov eax, dword [ebp - 0xc]
sub ecx, eax
imul eax, ecx, 0x8e46
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x738]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x47b275
mov ecx, ebx
cmp dword [ebp - 0x14], eax
jne 0x47b277
mov ecx, eax
mov eax, dword [ebp - 4]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0xc9e2
jle 0x47b29c
mov ecx, ebx
cmp dword [ebp - 0x38], eax
jne 0x47b29e
mov ecx, eax
xor eax, eax
cmp ecx, 0x358b4d46
setne al
xor edx, edx
imul eax, eax, 0xffff
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x738]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setl dl
mov dword [ebp - 0x738], edx
mov eax, dword [ebp - 0xc]
inc dword [ebp - 0x658]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xa73889cf
xor eax, eax
mov byte [ebp - 5], al
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x10], 0x690b2811
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x47b313
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x220], 0xfffffffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x47b2fb
xor eax, eax
mov ecx, ebx
cmp dword [ebp - 0x34], eax
jne 0x47b31c
mov ecx, eax
xor eax, eax
cmp ecx, 0xa7fe
setne al
cmp eax, dword [ebp - 0x34]
jg 0x47b335
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x34], eax
je 0x47b337
mov esi, ebx
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
push 2
setle dl
imul eax, esi, 0xfffffffc
xor ecx, ecx
pop esi
cmp edx, eax
setl cl
cmp dword [ebp - 0x34], ecx
jg 0x47b3af
or eax, 0xffffffff
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x47b37e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x988], 0x17c10977
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x47b366
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x47b3a1
push 0xb9
push 0x1d93
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x984], eax
jmp 0x47b4d8
mov dword [ebp - 0x30], 0xa32f3f60
or ecx, 0xffffffff
mov dword [ebp - 0x10], ecx
xor eax, eax
mov dword [ebp - 0x38], 0x8cff26af
mov dword [ebp - 4], esi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0xf23d37f4
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x10], 0xfffffff9
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], 0x699ff93f
mov dword [ebp - 0x10], 0xfffffffa
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0x62cc684c
mov dword [ebp - 0x14], 0xc1471c2a
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x47b429
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x980], 0x2097e65f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x47b411
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x47b449
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xac4], 0x6b4ab19f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x47b431
xor eax, eax
dec dword [ebp - 0x38]
jne 0x47b46c
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x220]
mov eax, dword [ebp - 0x34]
add eax, ecx
mov ecx, dword [ebp - 4]
imul ecx, eax
test ecx, ecx
je 0x47b47a
xor eax, eax
cmp dword [ebp - 0x220], eax
je 0x47b47c
mov eax, ebx
jmp 0x47b47c
xor eax, eax
mov ecx, dword [ebp - 0x30]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 4]
cmp ecx, eax
mov eax, dword [ebp - 0x21c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp ecx, 0x6c217795
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setl cl
add eax, ecx
je 0x47b4b8
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x30]
neg ecx
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x4cec8e44
setl al
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x21c], eax
cmp byte [ebp - 5], 0
je 0x47b5be
mov dword [ebp - 0x1c], 0xa3a1
or eax, 0xffffffff
mov dword [ebp - 0x14], 0x23498e64
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x24], eax
push 0xfffffffffffffffc
pop eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x38], 0x5dc64f6b
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x47b542
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xdbc], 0x63a5bed8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x47b529
xor eax, eax
mov dword [ebp - 0x14], 0x7a4bedcc
cmp dword [ebp - 0x14], eax
je 0x47b57e
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x24]
test eax, eax
je 0x47b57c
mov ecx, ebx
jmp 0x47b580
xor eax, eax
mov ecx, eax
mov dword [ebp - 0xdb8], ecx
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
sete dl
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
neg ecx
je 0x47b5ac
cmp dword [ebp - 0x3c], eax
je 0x47b5ac
cmp dword [ebp - 4], eax
je 0x47b5ac
mov eax, ebx
mov dword [ebp - 0x38], eax
xor eax, eax
push eax
push eax
push 0x229e
call dword [sym.imp.ADVAPI32.dll_CopySid]
inc dword [ebp - 0x74]
push 0
pop eax
cmp dword [ebp - 0x74], esi
jle 0x47ad9e
jmp 0x47ad0d
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x994], 0x4acd6ba
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], esi
jl 0x47b5d2
mov dword [ebp - 0x234], 0xbef7d651
xor edx, edx
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setl dl
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x1c]
jge 0x47b616
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x3c], eax
je 0x47b618
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x4a4], ecx
mov eax, dword [ebp - 0x1c]
sub ecx, eax
jne 0x47b63b
xor eax, eax
cmp dword [ebp - 0xb4], eax
je 0x47b644
jmp 0x47b63d
xor eax, eax
mov esi, ebx
cmp dword [ebp - 0x1c], eax
jne 0x47b646
mov esi, eax
mov ecx, dword [ebp - 0xb4]
xor edx, edx
mov eax, dword [ebp - 0xb4]
cmp ecx, eax
mov eax, dword [ebp - 0xb4]
setl dl
xor ecx, ecx
cmp esi, eax
mov eax, dword [ebp - 4]
push 6
setle cl
sub edx, ecx
sub edx, eax
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x1c]
add eax, edx
add ecx, eax
mov dword [ebp - 0xb4], ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x994]
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x48], 0xedfa831e
pop esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x10], 0xa567
mov dword [ebp - 0x24], 0x526c7153
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x47b6d8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x11c], 0x4ec2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47b6c0
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x47b6f6
mov byte [ebp - 5], al
cmp byte [ebp - 5], 0
je 0x47b6f3
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x47b6dd
add dword [ebp - 0x1c], 0x29f58382
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x11c]
test eax, eax
mov eax, dword [ebp - 0x10]
sets dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x11c]
sete cl
xor ebx, ebx
cmp eax, ecx
mov eax, dword [ebp - 0x11c]
setl bl
sub ebx, 0x9bb7a140
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, eax
mov eax, dword [ebp - 0x11c]
setne dl
xor ecx, ecx
cmp eax, edx
setg cl
or edx, 0xffffffff
mov dword [ebp - 0x24], ecx
xor eax, eax
mov dword [ebp - 0x18], 0x76ab2aee
xor ebx, ebx
mov dword [ebp - 0xc], 0x7e2799ac
inc ebx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffe2
jl 0x47b854
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 4], 0xfffffff9
mov dword [ebp - 0x10], 0xfffffff8
cmp dword [ebp - 0xc], eax
je 0x47b80d
cmp dword [ebp - 0x3c], eax
jne 0x47b79b
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
neg eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xc]
cmp eax, ecx
mov eax, dword [ebp - 0xc]
mov ecx, 0xe280bfe7
setl dl
sub eax, edx
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 0x489b
jge 0x47b7e4
xor eax, eax
cmp dword [ebp - 4], eax
jne 0x47b7ed
jmp 0x47b7e6
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x10], eax
je 0x47b7ef
mov edx, ebx
mov eax, dword [ebp - 4]
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 0xc]
cmp ecx, ebx
jbe 0x47b80b
mov edx, ebx
jmp 0x47b80f
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 4]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x10], ebx
mov byte [ebp - 5], al
cmp byte [ebp - 5], al
je 0x47b841
push ebx
push 0x1ac3
push 0x1d79
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffe2
push 0
pop eax
jge 0x47b77a
or edx, 0xffffffff
mov dword [ebp - 0x4c], eax
jmp 0x47b89c
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jne 0x47b8a2
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffec
jne 0x47b899
mov dword [ebp - 0x10], 7
mov eax, 0x511904e2
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
mov dword [ebp - 0xc], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffec
je 0x47b86a
xor eax, eax
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0x12
jne 0x47b859
push 2
pop esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x10], 0xfc257a10
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0xdfcc
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x47b8ea
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3ac], 0xfd3df75d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x47b8d1
xor eax, eax
push 7
mov dword [ebp - 0x3a8], eax
pop ecx
jmp 0x47b9d2
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0x4ad72d76
mov dword [ebp - 0x38], 0x60f7e730
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x3c], 0x55126ed4
mov dword [ebp - 0x3c], 0xfffffff6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x47b948
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2e4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47b930
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffe8
jne 0x47b9cc
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x14], eax
jmp 0x47b971
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x98c], 0xe7bf1993
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47b960
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], 0xfffffff6
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x3c]
push 0
sub ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
sub ecx, 0xfffffff7
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
sub eax, ecx
cmp eax, 0xf4e26c12
mov eax, dword [ebp - 0x3a8]
setne dl
xor ecx, ecx
cmp edx, eax
pop eax
setg cl
mov dword [ebp - 0x3c], ecx
inc dword [ebp - 0x2e4]
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffe8
je 0x47b951
push 7
or edx, 0xffffffff
pop ecx
inc dword [ebp - 0x3a8]
cmp dword [ebp - 0x3a8], ecx
jg 0x47b8f8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x47ba00
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x784], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x47b9e7
xor eax, eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x10], 0x79942796
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x47ba2a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x108], 3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x47ba12
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x47ba4a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x23c], 0xfffffffa
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x47ba32
xor eax, eax
mov dword [ebp - 0x30], eax
jmp 0x47bb84
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x4c], 0x1c
jmp 0x47bb77
cmp dword [ebp - 0x30], 0x12
jl 0x47ba52
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
test eax, eax
setg cl
cmp ecx, dword [ebp - 0x28]
je 0x47bba3
mov ecx, 0x928c176b
mov dword [ebp - 0x1f8], ecx
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x1f0], ecx
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x47beba
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x614], 0x580849f8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x47bea2
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x47bed9
or ecx, 0xffffffff
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x4ac], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x47bec5
xor eax, eax
mov dword [ebp - 0x1f0], 0xfffffff4
jmp 0x47c01a
mov dword [ebp - 0x18], 0xb4bc662a
mov dword [ebp - 0x44], 0xc6578637
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x47bf16
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x684], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x47befe
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jg 0x47c014
mov dword [ebp - 0x1c], 0x38dd44ad
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x47bf5c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x47bf51
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6e4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x47bf39
xor eax, eax
dec dword [ebp - 0x6e4]
dec dword [ebp - 0x1c]
jns 0x47bf31
mov eax, dword [ebp - 0x1f0]
neg eax
sbb eax, eax
inc eax
dec eax
jne 0x47bf71
mov edx, eax
cmp dword [ebp - 0x1c], eax
je 0x47bf73
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, dword [ebp - 0x1f0]
je 0x47bf8e
mov ecx, ebx
cmp dword [ebp - 0x1c], eax
jne 0x47bf90
mov ecx, eax
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1f0]
cmp ecx, eax
setg dl
xor ecx, ecx
mov dword [ebp - 0x684], edx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp + eax*4 - 0x614]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x614], edx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x2c]
cmp edx, eax
mov eax, dword [ebp - 0x1f0]
setne cl
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0x4ac], edx
test edx, edx
jne 0x47bffe
xor eax, eax
cmp dword [ebp - 0x684], eax
je 0x47c000
mov eax, ebx
neg eax
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x18]
push 0
pop eax
cmp dword [ebp - 0x18], ebx
jle 0x47bf22
dec dword [ebp - 0x1f0]
cmp dword [ebp - 0x1f0], 0xfffffff3
jne 0x47bee8
mov dword [ebp - 0x34], 0x68ec0ae9
or ecx, 0xffffffff
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x10], 0x6b59229a
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x10], 0xe5ec3521
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x47c070
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x248], 0xbf261718
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47c058
xor eax, eax
mov dword [ebp - 0x34], 0xb
cmp dword [ebp - 0x34], 0xffffffea
jle 0x47c17f
push 6
pop edx
jmp 0x47c088
xor eax, eax
mov dword [ebp - 0x2c], 0xe57b
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x3c], 0x2fd8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x47c0c8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1178], 0x187b35f1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x47c0af
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x47c15f
mov dword [ebp - 0x10], 0xc299e885
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x47c0f6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7b4], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x47c0e1
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x47c116
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd84], 0xf7c629c4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x47c0fe
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x47c14f
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x7b0]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x7b0]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setne dl
cmp edx, 0xfffffff8
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x7b4]
je 0x47c14f
xor eax, eax
jmp 0x47c151
mov eax, ebx
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x3c]
or ecx, 0xffffffff
push 6
pop edx
jmp 0x47c169
mov dword [ebp - 0x44], 0x9e13
dec dword [ebp - 0x44]
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffea
jg 0x47c086
mov dword [ebp - 0x1c], 0x1d
cmp dword [ebp - 0x1c], 0xffffffe8
jle 0x47c1f9
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x44], 0x54fd57ec
cmp dword [ebp - 0x248], eax
je 0x47c1bc
cmp dword [ebp - 4], eax
jne 0x47c1b6
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x47c1ba
mov eax, ebx
jmp 0x47c1bc
xor eax, eax
mov dword [ebp - 0x248], eax
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
test eax, eax
setns dl
add edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 4]
mov eax, dword [ebp - 4]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 4], eax
jne 0x47c1fb
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe8
jg 0x47c18c
jmp 0x47c1fb
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xc], 0xfffffffb
mov dword [ebp - 0x14], eax
jmp 0x47c21b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x17c], 0x29c4ddb8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47c20a
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], 0x9223c77d
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
neg ecx
imul eax, ecx
test eax, eax
je 0x47c24b
xor eax, eax
cmp dword [ebp - 0xc], eax
je 0x47c24d
mov eax, ebx
jmp 0x47c24d
xor eax, eax
mov ecx, dword [ebp - 0x20]
imul ecx, eax
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
sub ecx, 0xec299e88
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
cmp eax, dword [ebp - 0xc]
jge 0x47c274
xor eax, eax
mov edx, eax
cmp dword [ebp - 0xc], eax
je 0x47c276
mov edx, ebx
mov eax, dword [ebp - 0xc]
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], eax
jg 0x47c42e
mov dword [ebp - 0x2c], 0xfff6
mov dword [ebp - 0x10], 0xf7a796fb
mov byte [ebp - 5], al
cmp byte [ebp - 5], 0
je 0x47c2c6
push eax
push eax
push 0x1bc7
push 0x1e31
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindow]
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x47c41c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x44], 0x9ef5b506
mov dword [ebp - 0x18], eax
jmp 0x47c3da
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x28], eax
jmp 0x47c3ce
mov dword [ebp - 0x1c], 0xa4f06702
mov dword [ebp - 0x10], 0xe2b78356
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x47c3cb
mov dword [ebp - 0x10], 0xfffffffe
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x17c], 0
je 0x47c38a
mov dword [ebp - 0x24], 0x3ed13222
xor edx, edx
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x17c], esi
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
add ecx, 0x3c95
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setge dl
xor ecx, ecx
cmp edx, 0x400b8f3b
setle cl
xor ebx, ebx
cmp ecx, eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
setne bl
xor edx, edx
add ebx, 4
cmp eax, ecx
mov eax, dword [ebp - 0xc]
setne dl
xor ecx, ecx
cmp edx, ebx
setl cl
xor edx, edx
cmp esi, eax
setne dl
sub edx, ecx
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x44], edx
jmp 0x47c3ba
xor eax, eax
mov dword [ebp - 0x10], 0x4ade726f
mov byte [ebp - 5], al
cmp byte [ebp - 5], al
je 0x47c3b5
push 0x13c9
push eax
push 0x1ddf
push 0xebc
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x47c3c9
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x1c]
jns 0x47c30d
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x47c2f3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x47c2e4
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov edx, dword [ebp - 0x18]
cmp eax, 0xa44b
mov eax, dword [ebp - 0xc]
setne cl
sub edx, ecx
xor ecx, ecx
cmp edx, eax
push 0
setle cl
neg ecx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x20]
pop eax
jns 0x47c2d2
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], eax
jle 0x47c294
xor ebx, ebx
push 2
inc ebx
pop esi
mov dword [ebp - 0x20], 0x20bd2ab
or ecx, 0xffffffff
mov dword [ebp - 0x2c], 0x578cca69
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], 0x24489be6
mov dword [ebp - 0x44], 0xdda259c4
mov dword [ebp - 0x44], 0xd38c4615
mov dword [ebp - 0x14], eax
jmp 0x47c46d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], 0x3e70d28e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47c45f
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x3c], eax
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x47c48f
cmp dword [ebp - 0x2c], eax
je 0x47c48f
mov eax, ebx
mov dword [ebp - 0x2c], eax
xor edx, edx
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x64]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setle cl
sub eax, ecx
sub eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x64]
je 0x47c4c1
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x47c4c3
mov edx, ebx
jmp 0x47c4c5
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, dword [ebp - 0x64]
jg 0x47c4e3
mov edx, ebx
cmp dword [ebp - 0x2c], eax
jne 0x47c4e5
mov edx, eax
mov eax, dword [ebp - 0x64]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
or edx, 0xffffffff
cmp ecx, edx
setle al
xor edx, edx
cmp eax, 0x69a0165d
mov eax, dword [ebp - 0x64]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
or edx, 0xffffffff
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44], 0x2b5bddd
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x20], 0xfffffff9
xor eax, eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x47c57c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xc2c], 0x540d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x47c563
xor eax, eax
push 3
mov dword [ebp - 0x28], eax
pop ecx
cmp dword [ebp - 0x28], ecx
jg 0x47c5ef
mov dword [ebp - 0x1c], 0xab60e704
mov dword [ebp - 0x14], eax
jmp 0x47c5a4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x488], 0x35e1f6f0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47c593
mov dword [ebp - 0x1c], 0x58d0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xc2c]
xor eax, eax
mov dword [ebp - 0x488], ebx
mov dword [ebp - 0x1c], eax
jmp 0x47c5df
cmp dword [ebp - 0x1c], eax
jne 0x47c5e4
cmp dword [ebp - 0x1c], ecx
jle 0x47c5ca
inc dword [ebp - 0x28]
push 0
pop eax
cmp dword [ebp - 0x28], ecx
jle 0x47c587
mov dword [ebp - 0x4c], 0x948708ef
mov dword [ebp - 0xc], 0xac204e2d
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x47c61c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9ac], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x47c608
xor eax, eax
mov dword [ebp - 0xc], 0xf
mov ecx, 0x31e7bf5c
cmp dword [ebp - 0xc], 0xffffffea
jge 0x47c786
jmp 0x47c639
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x6a8], ecx
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x6a0], ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x47c66d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x168], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x47c659
xor eax, eax
cmp dword [ebp - 0xc], eax
jne 0x47c67c
mov esi, eax
cmp dword [ebp - 0x168], eax
je 0x47c67e
mov esi, ebx
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
sub ecx, 0xfffffffd
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
or eax, 0xffffffff
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x164]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0xc]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xc]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x168]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 2
setle al
sub eax, 0xb56c
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffffffa
jae 0x47c6fd
mov eax, dword [ebp - 4]
xor eax, eax
cmp dword [ebp - 0xc], ebx
jl 0x47c795
cmp dword [ebp - 0xc], eax
je 0x47c79f
cmp dword [ebp - 0x9ac], eax
je 0x47c79f
mov eax, ebx
mov dword [ebp - 0xc], eax
xor eax, eax
mov dword [ebp - 0x550], ebx
mov dword [ebp - 0x54c], ebx
mov dword [ebp - 0x548], ebx
mov dword [ebp - 0x544], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x47c7dc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x47c7c4
mov byte [ebp - 5], al
cmp byte [ebp - 5], 0
je 0x47c7ef