Function at 0x470979
Capabilities:
Check http status code
Clear file content
Delete registry value
Get graphical window text
Get thread local storage value
Set thread local storage value
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3d00
call fcn.004aacc0
push esi
push edi
mov dword [ebp - 0x9dc], 0xb110c93b
mov dword [ebp - 0x2410], 1
mov dword [ebp - 0x279c], 0xfffffffb
mov dword [ebp - 0x180], 0
jmp 0x4709bf
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x4709db
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x2188], 0xfbce008f
jmp 0x4709b2
mov dword [ebp - 0x180], 0
jmp 0x4709f4
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x470a10
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0xa7c], 0
jmp 0x4709e7
mov dword [ebp - 0x9dc], 0
jmp 0x470a29
mov eax, dword [ebp - 0x9dc]
dec eax
mov dword [ebp - 0x9dc], eax
cmp dword [ebp - 0x9dc], 0xffffffe8
jg 0x470d9a
mov dword [ebp - 0x62c], 0xdf98a59c
mov dword [ebp - 0x2170], 0xfffffffd
mov dword [ebp - 0xc14], 0
mov dword [ebp - 0x278c], 0xffffffff
mov dword [ebp - 0x36ac], 0xebda1846
mov dword [ebp - 0x27a4], 1
mov dword [ebp - 0x27bc], 6
mov dword [ebp - 0x30bc], 0xffffffff
mov dword [ebp - 0x27c4], 0xb870004d
mov dword [ebp - 0x62c], 0
jmp 0x470aa9
mov eax, dword [ebp - 0x62c]
dec eax
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0xfffffff5
jle 0x470d95
mov dword [ebp - 0x27ac], 0x509cf13e
mov dword [ebp - 0x2784], 0xfffffff9
mov dword [ebp - 0x30c4], 3
mov dword [ebp - 0x30cc], 0xfffffffb
mov dword [ebp - 0xc0c], 0
mov dword [ebp - 0x2198], 0x64f6128b
mov dword [ebp - 0x218], 0
jmp 0x470b0b
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x470b27
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x3a14], 0
jmp 0x470afe
mov dword [ebp - 0x218], 0
jmp 0x470b40
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 1
jge 0x470b5c
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x2190], 0
jmp 0x470b33
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa7c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa7c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2190]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xa7c]
cmp eax, dword [ebp - 0xc0c]
jne 0x470ba5
mov dword [ebp - 0x12a0], 1
jmp 0x470bac
and dword [ebp - 0x12a0], 0
cmp dword [ebp - 0x12a0], 0
jne 0x470bc1
mov dword [ebp - 0x2150], 1
jmp 0x470bc8
and dword [ebp - 0x2150], 0
mov eax, dword [ebp - 0x2150]
sub eax, dword [ebp - 0xc0c]
jne 0x470be2
mov dword [ebp - 0x2158], 1
jmp 0x470be9
and dword [ebp - 0x2158], 0
mov eax, dword [ebp - 0xc0c]
cmp dword [ebp - 0x2158], eax
je 0x470c03
mov dword [ebp - 0x2160], 1
jmp 0x470c0a
and dword [ebp - 0x2160], 0
cmp dword [ebp - 0x2160], 0xffffffff
jne 0x470c1f
mov dword [ebp - 0x2168], 1
jmp 0x470c26
and dword [ebp - 0x2168], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3a14]
imul eax, dword [ebp - 0x2168]
mov dword [ebp - 0xc14], eax
cmp dword [ebp - 0xc14], 0x5cf1
jne 0x470c57
mov dword [ebp - 0x2178], 1
jmp 0x470c5e
and dword [ebp - 0x2178], 0
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x2170], eax
mov eax, dword [ebp - 0x2170]
imul ecx, dword [ebp - 0x2178], 0xf3bb
add eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2188]
jl 0x470c97
mov dword [ebp - 0x2180], 1
jmp 0x470c9e
and dword [ebp - 0x2180], 0
mov eax, dword [ebp - 0x2180]
mov dword [ebp - 0x2410], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2188]
mov dword [ebp - 0x30d4], eax
mov eax, dword [ebp - 0x2784]
mov dword [ebp - 0x30dc], eax
mov eax, dword [ebp - 0x278c]
cmp dword [ebp - 0x2198], eax
jle 0x470ce3
mov dword [ebp - 0x2794], 1
jmp 0x470cea
and dword [ebp - 0x2794], 0
mov eax, dword [ebp - 0x279c]
mov dword [ebp - 0x30e4], eax
mov eax, dword [ebp - 0x27a4]
mov dword [ebp - 0x30ec], eax
mov eax, dword [ebp - 0x27ac]
mov dword [ebp - 0x30f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2190]
mov dword [ebp - 0x30fc], eax
cmp dword [ebp - 0x2198], 0xfffffff6
je 0x470d36
mov dword [ebp - 0x21a0], 1
jmp 0x470d3d
and dword [ebp - 0x21a0], 0
cmp dword [ebp - 0x21a0], 0x3002
jg 0x470d55
mov dword [ebp - 0x21a8], 1
jmp 0x470d5c
and dword [ebp - 0x21a8], 0
cmp dword [ebp - 0x21a8], 1
jne 0x470d71
mov dword [ebp - 0x27b4], 1
jmp 0x470d78
and dword [ebp - 0x27b4], 0
mov eax, dword [ebp - 0x27bc]
mov dword [ebp - 0x3104], eax
mov eax, dword [ebp - 0xc14]
mov dword [ebp - 0x27c4], eax
jmp 0x470a9c
jmp 0x470a1c
mov dword [ebp - 0xc1c], 0
mov dword [ebp - 0x21c0], 0xc0e07525
mov dword [ebp - 0x21c8], 0x9829cbc2
mov dword [ebp - 0x27d4], 0x8475761a
mov dword [ebp - 0x58], 0
jmp 0x470dd2
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x470de8
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x9e4], 0xe0cf5720
jmp 0x470dcb
mov dword [ebp - 0x58], 0
jmp 0x470df8
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x470e0e
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x21dc], 0xffffffff
jmp 0x470df1
mov dword [ebp - 0x58], 0
jmp 0x470e1e
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x470e34
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x2b64], 0xb82c4475
jmp 0x470e17
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21dc]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x21dc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21dc]
mov dword [ebp - 0x310c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9e4]
mov dword [ebp - 0x3114], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9e4]
mov dword [ebp - 0x311c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9e4], 0xcd32
jle 0x470eb4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2b64], 0
jne 0x470eb4
and dword [ebp - 0x21b0], 0
jmp 0x470ebe
mov dword [ebp - 0x21b0], 1
cmp dword [ebp - 0x21b0], 0x79cc
jg 0x470ed6
mov dword [ebp - 0x21b8], 1
jmp 0x470edd
and dword [ebp - 0x21b8], 0
mov eax, dword [ebp - 0x21b8]
sub eax, dword [ebp - 0xc1c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2b64]
jge 0x470f04
mov dword [ebp - 0x27cc], 1
jmp 0x470f0b
and dword [ebp - 0x27cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b64]
mov dword [ebp - 0x3124], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21dc]
mov dword [ebp - 0x312c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b64]
mov dword [ebp - 0x3134], eax
mov dword [ebp - 0xc1c], 0xfffffffa
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0x21c0], eax
mov eax, dword [ebp - 0x21c0]
mov dword [ebp - 0x21c8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9e4]
cmp eax, dword [ebp - 0x21c8]
jge 0x470f87
mov dword [ebp - 0x21d0], 1
jmp 0x470f8e
and dword [ebp - 0x21d0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21dc]
cmp eax, dword [ebp - 0x21d0]
je 0x470faf
mov dword [ebp - 0x2220], 1
jmp 0x470fb6
and dword [ebp - 0x2220], 0
mov eax, dword [ebp - 0x2220]
mov dword [ebp - 0x27d4], eax
mov dword [ebp - 0x69c], 0xb110c93b
mov dword [ebp - 0x9ec], 0
mov dword [ebp - 0x313c], 0
mov dword [ebp - 0x9ec], 0
jmp 0x470ff9
mov eax, dword [ebp - 0x9ec]
inc eax
mov dword [ebp - 0x9ec], eax
cmp dword [ebp - 0x9ec], 1
jle 0x47128b
mov dword [ebp - 0x188], 0
jmp 0x47101f
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 4
jge 0x47103b
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x2d4c], 0xeb0647dc
jmp 0x471012
mov dword [ebp - 0x188], 0
jmp 0x471054
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 2
jge 0x471070
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x3278], 0x17c10977
jmp 0x471047
mov byte [ebp - 0x337], 0
movzx eax, byte [ebp - 0x337]
test eax, eax
je 0x471097
push 0
push 0
push 0x20b
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2d4c], 0x14
jmp 0x4710c5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d4c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2d4c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2d4c], 0xffffffff
jle 0x471286
mov dword [ebp - 0xc24], 0x355fff83
mov dword [ebp - 0x98], 0
jmp 0x4710fc
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x471118
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x3c44], 0xaeb9
jmp 0x4710ef
mov dword [ebp - 0x98], 0
jmp 0x471131
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x47114d
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x236c], 0xded68044
jmp 0x471124
mov dword [ebp - 0x98], 0
jmp 0x471166
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x471182
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x27dc], 0x733582f8
jmp 0x471159
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x236c], 0
jmp 0x4711b0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x236c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x236c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x236c], 2
jg 0x471281
mov dword [ebp - 0x3144], 0xfffffff6
mov dword [ebp - 0x9f4], 0
jmp 0x4711e7
mov eax, dword [ebp - 0x9f4]
inc eax
mov dword [ebp - 0x9f4], eax
cmp dword [ebp - 0x9f4], 4
jge 0x471203
mov eax, dword [ebp - 0x9f4]
mov dword [ebp + eax*4 - 0x3958], 0xc67ee39f
jmp 0x4711da
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3958]
inc eax
mov dword [ebp - 0x2228], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x2228]
mov dword [ebp + eax - 0x3958], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3278]
add eax, dword [ebp - 0x2228]
jne 0x47125f
mov eax, dword [ebp - 0xc24]
mov ecx, dword [ebp - 0xc24]
inc ecx
mov dword [ebp - 0xc24], ecx
test eax, eax
jne 0x47125f
and dword [ebp - 0x2230], 0
jmp 0x471269
mov dword [ebp - 0x2230], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2230]
mov dword [ebp + eax - 0x27dc], ecx
jmp 0x471195
jmp 0x4710aa
jmp 0x470fec
mov dword [ebp - 0x220], 0
jmp 0x4712a4
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x4712c0
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0xc2c], 0x5dcec3d7
jmp 0x471297
mov dword [ebp - 0x220], 0
jmp 0x4712d9
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 2
jge 0x4712f5
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x21e8], 0xe5ccc90a
jmp 0x4712cc
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x21e8], 0
jmp 0x471323
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21e8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x21e8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x21e8], 0
jg 0x4713ef
mov dword [ebp - 0x237c], 0xffffffff
mov dword [ebp - 0x2378], 0xffffffff
mov dword [ebp - 0x2374], 0xffffffff
mov dword [ebp - 0x2370], 0xffffffff
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21e8]
cmp dword [ebp + eax*4 - 0xc2c], 0
je 0x471378
jmp 0x4713ef
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x237c], 0
jmp 0x4713a6
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x237c]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x237c], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x237c], 0
jg 0x4713ea
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x237c]
cmp dword [ebp + eax*4 - 0xc2c], 0
je 0x4713cf
jmp 0x4713ea
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x237c]
cmp dword [ebp + eax*4 - 0xc2c], 0
je 0x4713e8
jmp 0x4713ea
jmp 0x47138b
jmp 0x471308
mov dword [ebp - 0x2438], 1
mov dword [ebp - 0x138], 0x56915a13
mov dword [ebp - 0x27ec], 0x3111
mov dword [ebp - 0x27f4], 0xffffffff
mov dword [ebp - 0x27fc], 0xeca51c18
mov dword [ebp - 0x9fc], 0
jmp 0x47143a
mov eax, dword [ebp - 0x9fc]
inc eax
mov dword [ebp - 0x9fc], eax
cmp dword [ebp - 0x9fc], 3
jge 0x471456
mov eax, dword [ebp - 0x9fc]
mov dword [ebp + eax*4 - 0x2a24], 2
jmp 0x47142d
mov dword [ebp - 0x138], 0
jmp 0x47146f
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 2
jg 0x47186a
mov dword [ebp - 0xfc], 0xc6e5c7a0
mov dword [ebp - 0xc3c], 0xfffffffe
mov dword [ebp - 0x2804], 0xfb6c7178
mov dword [ebp - 0xfc], 0
jmp 0x4714b3
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jg 0x471702
mov dword [ebp - 0x28c], 0xf6c74aa0
mov dword [ebp - 0x2250], 0xdc509ca4
mov dword [ebp - 0x22ac], 0xda37b187
mov dword [ebp - 0x22bc], 0xffffffff
mov dword [ebp - 0xd18], 0xafe2
mov dword [ebp - 0xa04], 0
jmp 0x47150b
mov eax, dword [ebp - 0xa04]
inc eax
mov dword [ebp - 0xa04], eax
cmp dword [ebp - 0xa04], 2
jge 0x471527
mov eax, dword [ebp - 0xa04]
mov dword [ebp + eax*4 - 0x2bb4], 0x7d7c869b
jmp 0x4714fe
mov dword [ebp - 0x28c], 0
jmp 0x471540
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jg 0x4716fd
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp + eax*4 - 0x2a24]
mov dword [ebp - 0x314c], eax
cmp dword [ebp - 0x138], 0x2d6273d5
je 0x471578
mov dword [ebp - 0xc34], 1
jmp 0x47157f
and dword [ebp - 0xc34], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc34]
mov dword [ebp + eax - 0x2bb4], ecx
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xc34], eax
jne 0x4715ac
mov dword [ebp - 0x2238], 1
jmp 0x4715b3
and dword [ebp - 0x2238], 0
cmp dword [ebp - 0x2238], 0x44262821
jge 0x4715cb
mov dword [ebp - 0x27e4], 1
jmp 0x4715d2
and dword [ebp - 0x27e4], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x3154], eax
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0xfc], eax
jle 0x4715f8
mov dword [ebp - 0x2240], 1
jmp 0x4715ff
and dword [ebp - 0x2240], 0
cmp dword [ebp - 0x2240], 0xf261
jle 0x471617
mov dword [ebp - 0x2248], 1
jmp 0x47161e
and dword [ebp - 0x2248], 0
mov eax, dword [ebp - 0x2248]
mov dword [ebp - 0x2250], eax
mov eax, dword [ebp - 0x28c]
add eax, dword [ebp - 0x2250]
imul eax, eax, 0
cmp eax, 5
jne 0x47164a
mov dword [ebp - 0x22a4], 1
jmp 0x471651
and dword [ebp - 0x22a4], 0
mov eax, dword [ebp - 0x22a4]
mov dword [ebp - 0x22ac], eax
cmp dword [ebp - 0x22ac], 0
jb 0x47167f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2bb4], 0
je 0x47167f
and dword [ebp - 0x22b4], 0
jmp 0x471689
mov dword [ebp - 0x22b4], 1
mov eax, dword [ebp - 0x22b4]
mov dword [ebp - 0x22bc], eax
mov eax, dword [ebp - 0x22bc]
mov dword [ebp - 0xd18], eax
cmp dword [ebp - 0xd18], 0
je 0x4716bf
cmp dword [ebp - 0x28c], 0
je 0x4716bf
mov dword [ebp - 0x2020], 1
jmp 0x4716c6
and dword [ebp - 0x2020], 0
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp + eax*4 - 0x2a24]
add eax, dword [ebp - 0x2020]
mov ecx, dword [ebp - 0x138]
mov dword [ebp + ecx*4 - 0x2a24], eax
mov eax, dword [ebp - 0xfc]
cmp dword [ebp + eax*4 - 0x2a24], 0
je 0x4716f8
jmp 0x4716fd
jmp 0x471533
jmp 0x4714a6
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0xfc], eax
jne 0x47171c
mov dword [ebp - 0xd20], 1
jmp 0x471723
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
add eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x27ec]
jl 0x47174f
mov dword [ebp - 0x2028], 1
jmp 0x471756
and dword [ebp - 0x2028], 0
cmp dword [ebp - 0x2028], 7
jae 0x471774
cmp dword [ebp - 0xfc], 0
je 0x471774
mov dword [ebp - 0xd28], 1
jmp 0x47177b
and dword [ebp - 0xd28], 0
mov eax, dword [ebp - 0xc3c]
cmp dword [ebp - 0xd28], eax
jne 0x471795
mov dword [ebp - 0x2030], 1
jmp 0x47179c
and dword [ebp - 0x2030], 0
cmp dword [ebp - 0x2030], 0
jae 0x4717b1
mov dword [ebp - 0xd30], 1
jmp 0x4717b8
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0xd30]
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0x27f4]
cmp dword [ebp - 0xc3c], eax
jne 0x4717de
mov dword [ebp - 0x2038], 1
jmp 0x4717e5
and dword [ebp - 0x2038], 0
mov eax, dword [ebp - 0x27fc]
cmp dword [ebp - 0x2038], eax
jl 0x4717ff
mov dword [ebp - 0xd38], 1
jmp 0x471806
and dword [ebp - 0xd38], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2a24], 0xffffffff
mov eax, dword [ebp - 0xd38]
neg eax
cmp eax, 0xffffffff
jle 0x47182f
mov dword [ebp - 0x2040], 1
jmp 0x471836
and dword [ebp - 0x2040], 0
cmp dword [ebp - 0x2040], 1
jbe 0x47184f
push 9
pop eax
test eax, eax
jne 0x47184f
and dword [ebp - 0xd40], 0
jmp 0x471859
mov dword [ebp - 0xd40], 1
mov eax, dword [ebp - 0xd40]
mov dword [ebp - 0x2804], eax
jmp 0x471462
mov byte [ebp - 0x35f], 0
movzx eax, byte [ebp - 0x35f]
test eax, eax
je 0x471884
push 0
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x634], 0x4dd03248
mov dword [ebp - 0x22d0], 2
mov dword [ebp - 0x22cc], 2
mov dword [ebp - 0x22c8], 2
mov dword [ebp - 0x22c4], 2
mov dword [ebp - 0x2814], 0xfffffffc
mov dword [ebp - 0x281c], 0xfffffffb
mov byte [ebp - 0x421], 0
movzx eax, byte [ebp - 0x421]
test eax, eax
je 0x4718eb
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
cmp dword [ebp - 0x634], 0
jne 0x471a49
push 4
pop eax
imul eax, eax, 3
imul eax, dword [ebp + eax - 0x22d0], 0
sub eax, 0xfffa
jne 0x471926
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x22d0], 0
jne 0x471926
and dword [ebp - 0x2048], 0
jmp 0x471930
mov dword [ebp - 0x2048], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x22d0]
imul eax, dword [ebp - 0x2048]
cmp eax, 0x7c14
jge 0x471957
mov dword [ebp - 0xd48], 1
jmp 0x47195e
and dword [ebp - 0xd48], 0
mov eax, dword [ebp - 0xd48]
sub eax, dword [ebp - 0x634]
cmp dword [ebp - 0x634], eax
jle 0x47197e
mov dword [ebp - 0x280c], 1
jmp 0x471985
and dword [ebp - 0x280c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x22d0]
mov dword [ebp - 0x315c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x22d0]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x22d0]
cmp dword [ebp - 0x634], eax
jle 0x4719c6
mov dword [ebp - 0x2050], 1
jmp 0x4719cd
and dword [ebp - 0x2050], 0
mov eax, dword [ebp - 0x634]
cmp dword [ebp - 0x2050], eax
jle 0x4719e7
mov dword [ebp - 0xd50], 1
jmp 0x4719ee
and dword [ebp - 0xd50], 0
cmp dword [ebp - 0xd50], 0xe6f7fbf2
jne 0x471a06
mov dword [ebp - 0x2058], 1
jmp 0x471a0d
and dword [ebp - 0x2058], 0
cmp dword [ebp - 0x2058], 0xfffa
jae 0x471a25
mov dword [ebp - 0xd58], 1
jmp 0x471a2c
and dword [ebp - 0xd58], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x22d0]
cmp dword [ebp - 0xd58], eax
jg 0x471a49
and dword [ebp - 0x2060], 0
jmp 0x471a53
mov dword [ebp - 0x2060], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x22d0]
cmp dword [ebp - 0x2060], eax
jle 0x471a74
mov dword [ebp - 0xd60], 1
jmp 0x471a7b
and dword [ebp - 0xd60], 0
mov eax, dword [ebp - 0x2814]
cmp dword [ebp - 0xd60], eax
je 0x471a95
mov dword [ebp - 0x2068], 1
jmp 0x471a9c
and dword [ebp - 0x2068], 0
mov eax, dword [ebp - 0x2068]
mov dword [ebp - 0x281c], eax
mov dword [ebp - 0x2af0], 0xfffffffb
mov dword [ebp - 0x228], 0xfffffff9
mov dword [ebp - 0x282c], 7
mov dword [ebp - 0x190], 0
jmp 0x471adf
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x471afb
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x2890], 0xa473eb90
jmp 0x471ad2
mov dword [ebp - 0x190], 0
jmp 0x471b14
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x471b30
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x2824], 0xffffffff
jmp 0x471b07
mov dword [ebp - 0x228], 0xffffffe8
jmp 0x471b49
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 9
jg 0x471bf9
mov dword [ebp - 0x390], 0xffffffff
mov byte [ebp - 0x361], 0
movzx eax, byte [ebp - 0x361]
test eax, eax
je 0x471b84
push 0x2138
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov dword [ebp - 0x390], 1
jmp 0x471b9d
mov eax, dword [ebp - 0x390]
dec eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0
jl 0x471bf4
mov eax, dword [ebp - 0x390]
cmp dword [ebp + eax*4 - 0x2890], 0
je 0x471bca
mov eax, dword [ebp - 0x390]
cmp dword [ebp + eax*4 - 0x2890], 0
je 0x471bc8
jmp 0x471bf4
jmp 0x471be7
mov byte [ebp - 0x3b9], 0
movzx eax, byte [ebp - 0x3b9]
test eax, eax
je 0x471be7
push 0x1563
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp dword [ebp - 0x390], 0
je 0x471bf2
jmp 0x471b90
jmp 0x471b90
jmp 0x471b3c
mov dword [ebp - 0x228], 1
jmp 0x471c12
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jl 0x471c4a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2824], 0x13244d51
mov dword [ebp - 0x282c], 0x13244d51
mov eax, dword [ebp - 0x228]
cmp dword [ebp + eax*4 - 0x2890], 0
je 0x471c48
jmp 0x471c05
jmp 0x471c05
mov dword [ebp - 0x3164], 0xcec79e67
mov dword [ebp - 0xd68], 0
mov dword [ebp - 0x198], 0
jmp 0x471c77
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x471c93
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x3ab8], 1
jmp 0x471c6a
mov dword [ebp - 0x198], 0
jmp 0x471cac
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x471cc8
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x3b98], 0x43cdf98a
jmp 0x471c9f
mov eax, dword [ebp - 0xd68]
dec eax
mov dword [ebp - 0xd68], eax
mov byte [ebp - 0x459], 0
movzx eax, byte [ebp - 0x459]
test eax, eax
je 0x471cef
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x238], 0
jmp 0x471d08
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 1
jge 0x471d24
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x1044], 0xfbce008f
jmp 0x471cfb
mov dword [ebp - 0x298], 0xfffffff7
mov dword [ebp - 0xa0c], 0
jmp 0x471d47
mov eax, dword [ebp - 0xa0c]
inc eax
mov dword [ebp - 0xa0c], eax
cmp dword [ebp - 0xa0c], 2
jge 0x471d63
mov eax, dword [ebp - 0xa0c]
mov dword [ebp + eax*4 - 0x2324], 0x20fe6e32
jmp 0x471d3a
mov dword [ebp - 0x298], 0
jmp 0x471d7c
mov eax, dword [ebp - 0x298]
dec eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0xfffffff3
jg 0x472169
mov dword [ebp - 0x63c], 4
mov dword [ebp - 0x283c], 0xbb35b689
mov dword [ebp - 0x316c], 0x4763c6da
mov dword [ebp - 0x2844], 0xfffffffa
mov dword [ebp - 0x3174], 0x4c01e07a
mov dword [ebp - 0xc44], 0xb872
mov dword [ebp - 0x230], 0
jmp 0x471dde
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x471dfa
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x3b00], 0
jmp 0x471dd1
mov dword [ebp - 0x230], 0
jmp 0x471e13
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 2
jge 0x471e2f
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x3284], 0x3019c36c
jmp 0x471e06
mov dword [ebp - 0x63c], 1
jmp 0x471e48
mov eax, dword [ebp - 0x63c]
dec eax
mov dword [ebp - 0x63c], eax
cmp dword [ebp - 0x63c], 0
jl 0x472004
mov dword [ebp - 0x1a0], 0x3f9e923e
mov dword [ebp - 0x2834], 0
mov dword [ebp - 0x1a0], 1
jmp 0x471e82
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jl 0x471ed3
mov dword [ebp - 0xa14], 0xd8f6efba
mov dword [ebp - 0xa14], 0
jmp 0x471eae
mov eax, dword [ebp - 0xa14]
inc eax
mov dword [ebp - 0xa14], eax
cmp dword [ebp - 0xa14], 1
jg 0x471ed1
mov byte [ebp - 0x365], 0
movzx eax, byte [ebp - 0x365]
test eax, eax
je 0x471ecf
call dword [sym.imp.USER32.dll_GetCapture]
jmp 0x471ea1
jmp 0x471e75
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x317c], eax
xor eax, eax
jne 0x471efa
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x2834], eax
jle 0x471efa
and dword [ebp - 0xd70], 0
jmp 0x471f04
mov dword [ebp - 0xd70], 1
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x2070], eax
mov eax, dword [ebp - 0x63c]
mov ecx, dword [ebp - 0x2070]
mov dword [ebp + eax*4 - 0x2324], ecx
mov eax, dword [ebp - 0x2070]
sub eax, dword [ebp - 0x298]
imul eax, dword [ebp - 0xd70]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3b00]
jle 0x471f4e
cmp dword [ebp - 0x298], 0
je 0x471f6a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2324], 0
je 0x471f6a
mov dword [ebp - 0x2078], 1
jmp 0x471f71
and dword [ebp - 0x2078], 0
cmp dword [ebp - 0x2078], 0x193
jg 0x471f89
mov dword [ebp - 0xd78], 1
jmp 0x471f90
and dword [ebp - 0xd78], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0xd78], eax
jl 0x471faa
mov dword [ebp - 0x2080], 1
jmp 0x471fb1
and dword [ebp - 0x2080], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x2080], eax
jge 0x471fcb
mov dword [ebp - 0xd80], 1
jmp 0x471fd2
and dword [ebp - 0xd80], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0xd80], eax
jl 0x471fec
mov dword [ebp - 0x2088], 1
jmp 0x471ff3
and dword [ebp - 0x2088], 0
mov eax, dword [ebp - 0x2088]
mov dword [ebp - 0x283c], eax
jmp 0x471e3b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2324], 0x3eaa
jg 0x47213d
mov dword [ebp - 0x3184], 0xffffffff
mov dword [ebp - 0x284c], 0x5950169f
mov dword [ebp - 0x318c], 0
mov dword [ebp - 0xa1c], 0
jmp 0x472052
mov eax, dword [ebp - 0xa1c]
inc eax
mov dword [ebp - 0xa1c], eax
cmp dword [ebp - 0xa1c], 1
jge 0x47206e
mov eax, dword [ebp - 0xa1c]
mov dword [ebp + eax*4 - 0x3194], 0x5c935cb5
jmp 0x472045
mov eax, dword [ebp - 0xc44]
dec eax
mov dword [ebp - 0xc44], eax
cmp dword [ebp - 0xc44], 0xfffffff9
jg 0x47209b
imul eax, dword [ebp - 0x298], 9
test eax, eax
je 0x47209b
mov dword [ebp - 0xd88], 1
jmp 0x4720a2
and dword [ebp - 0xd88], 0
cmp dword [ebp - 0xd88], 0x20a3
jge 0x4720ba
mov dword [ebp - 0x2090], 1
jmp 0x4720c1
and dword [ebp - 0x2090], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3284]
mov dword [ebp - 0x319c], eax
cmp dword [ebp - 0x2844], 0
jne 0x4720ea
xor eax, eax
jne 0x4720ea
and dword [ebp - 0xd90], 0
jmp 0x4720f4
mov dword [ebp - 0xd90], 1
mov eax, dword [ebp - 0x2090]
cmp eax, dword [ebp - 0xd90]
jne 0x47210e
mov dword [ebp - 0x2098], 1
jmp 0x472115
and dword [ebp - 0x2098], 0
mov eax, dword [ebp - 0x2098]
mov dword [ebp - 0x284c], eax
mov byte [ebp - 0x3c1], 0
movzx eax, byte [ebp - 0x3c1]
test eax, eax
je 0x47213b
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x472164
mov dword [ebp - 0xd98], 6
mov dword [ebp - 0xd98], 0x2129e5e2
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd98]
mov dword [ebp + eax - 0x2324], ecx
jmp 0x471d6f
mov dword [ebp - 0x238], 0
jmp 0x472182
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 1
jge 0x47219e
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0xa8c], 0
jmp 0x472175
mov dword [ebp - 0x308], 0xfffffffe
mov dword [ebp - 0x30], 0xd8a94b2a
mov dword [ebp - 0x20f0], 0xc369029e
mov dword [ebp - 0x285c], 1
mov dword [ebp - 0x20e0], 0x846c
mov dword [ebp - 0xa24], 0
jmp 0x4721e6
mov eax, dword [ebp - 0xa24]
inc eax
mov dword [ebp - 0xa24], eax
cmp dword [ebp - 0xa24], 2
jge 0x472202
mov eax, dword [ebp - 0xa24]
mov dword [ebp + eax*4 - 0xc70], 0
jmp 0x4721d9
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x308], eax
jne 0x472226
mov dword [ebp - 0x20a0], 1
jmp 0x47222d
and dword [ebp - 0x20a0], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x20a0], eax
jl 0x472244
mov dword [ebp - 0xdb0], 1
jmp 0x47224b
and dword [ebp - 0xdb0], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x31a4], eax
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x47226c
mov dword [ebp - 0xda0], 1
jmp 0x472273
and dword [ebp - 0xda0], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xda0], eax
jne 0x47228a
mov dword [ebp - 0x20a8], 1
jmp 0x472291
and dword [ebp - 0x20a8], 0
cmp dword [ebp - 0x20a8], 0
jbe 0x4722a6
mov dword [ebp - 0xda8], 1
jmp 0x4722ad
and dword [ebp - 0xda8], 0
mov eax, dword [ebp - 0xda8]
add eax, 6
sub eax, dword [ebp - 0x30]
cmp eax, 0xffffffff
jge 0x4722ca
mov dword [ebp - 0x20b0], 1
jmp 0x4722d1
and dword [ebp - 0x20b0], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x20b0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc70]
jne 0x4722f6
mov dword [ebp - 0x20b8], 1
jmp 0x4722fd
and dword [ebp - 0x20b8], 0
mov eax, dword [ebp - 0xdb0]
cmp eax, dword [ebp - 0x20b8]
jge 0x472320
mov eax, 0x36b586fa
test eax, eax
je 0x472320
mov dword [ebp - 0xdb8], 1
jmp 0x472327
and dword [ebp - 0xdb8], 0
imul eax, dword [ebp - 0xdb8], 0xbc44
test eax, eax
jle 0x472351
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc70], 0
je 0x472351
mov dword [ebp - 0x20c0], 1
jmp 0x472358
and dword [ebp - 0x20c0], 0
mov eax, dword [ebp - 0x20c0]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x308], 0
je 0x4725ef
mov dword [ebp - 0xc4c], 0xfffffff7
mov dword [ebp - 0x286c], 0x4aba13e9
mov dword [ebp - 0x978], 0
jmp 0x47239b
mov eax, dword [ebp - 0x978]
inc eax
mov dword [ebp - 0x978], eax
cmp dword [ebp - 0x978], 1
jge 0x4723b7
mov eax, dword [ebp - 0x978]
mov dword [ebp + eax*4 - 0x8f4], 0x18177c4
jmp 0x47238e
mov dword [ebp - 0x308], 0xfffffffd
jmp 0x4723d0
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x14
jg 0x472497
mov dword [ebp - 0x2854], 0xc0b8072
mov dword [ebp - 0x68c], 0
jmp 0x472400
mov eax, dword [ebp - 0x68c]
inc eax
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 2
jge 0x47241c
mov eax, dword [ebp - 0x68c]
mov dword [ebp + eax*4 - 0x3290], 0xa151
jmp 0x4723f3
cmp dword [ebp - 0x30], 9
je 0x47242e
mov dword [ebp - 0xdc0], 1
jmp 0x472435
and dword [ebp - 0xdc0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3290]
cmp eax, dword [ebp - 0xdc0]
jg 0x472456
mov dword [ebp - 0x20c8], 1
jmp 0x47245d
and dword [ebp - 0x20c8], 0
mov eax, dword [ebp - 0x20c8]
mov dword [ebp - 0x2854], eax
mov byte [ebp - 0x367], 0
movzx eax, byte [ebp - 0x367]
test eax, eax
je 0x472492
push 0x730
push 0xff7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
jmp 0x4723c3
mov dword [ebp - 0x30], 0xffffffff
jmp 0x4724a7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 6
je 0x4725ea
mov dword [ebp - 0x694], 0x60dd4f95
mov eax, dword [ebp - 0xc4c]
mov dword [ebp - 0x20f0], eax
cmp dword [ebp - 0xc4c], 0
je 0x47259a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x8f4], 1
xor eax, eax
jne 0x47250e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8f4]
cmp dword [ebp - 0x285c], eax
jne 0x47250e
push 7
pop eax
test eax, eax
jne 0x47250e
and dword [ebp - 0xdc8], 0
jmp 0x472518
mov dword [ebp - 0xdc8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8f4]
cmp dword [ebp - 0xdc8], eax
je 0x472539
mov dword [ebp - 0x2864], 1
jmp 0x472540
and dword [ebp - 0x2864], 0
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0x31ac], eax
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0x20d0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x20d0]
mov dword [ebp + eax - 0x8f4], ecx
cmp dword [ebp - 0x20d0], 0xcf93a29a
jbe 0x472583
mov dword [ebp - 0xdd0], 1
jmp 0x47258a
and dword [ebp - 0xdd0], 0
imul eax, dword [ebp - 0xdd0], 0x9258
sub eax, dword [ebp - 0x694]
mov eax, dword [ebp - 0x694]
cmp dword [ebp - 0x30], eax
jle 0x4725b1
mov dword [ebp - 0x20d8], 1
jmp 0x4725b8
and dword [ebp - 0x20d8], 0
mov eax, dword [ebp - 0xc4c]
cmp dword [ebp - 0x20d8], eax
jl 0x4725d2
mov dword [ebp - 0xdd8], 1
jmp 0x4725d9
and dword [ebp - 0xdd8], 0
mov eax, dword [ebp - 0xdd8]
mov dword [ebp - 0x286c], eax
jmp 0x4724a0
jmp 0x4727eb
mov dword [ebp - 0x398], 0x7e1f
mov dword [ebp - 0x554], 0xda7dc4ca
mov dword [ebp - 0xe00], 0x5dc571eb
mov dword [ebp - 0x8fc], 0
jmp 0x472626
mov eax, dword [ebp - 0x8fc]
inc eax
mov dword [ebp - 0x8fc], eax
cmp dword [ebp - 0x8fc], 1
jge 0x472642
mov eax, dword [ebp - 0x8fc]
mov dword [ebp + eax*4 - 0x2874], 5
jmp 0x472619
cmp dword [ebp - 0x20e0], 0
je 0x472769
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xc70], 0xfffa
neg eax
jne 0x472683
mov eax, dword [ebp - 0x20e0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc70]
jl 0x472683
and dword [ebp - 0xde0], 0
jmp 0x47268d
mov dword [ebp - 0xde0], 1
mov eax, dword [ebp - 0xde0]
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x7f9cd946
jg 0x4726b7
mov eax, 0xae02f11
test eax, eax
jne 0x4726b7
and dword [ebp - 0x20e8], 0
jmp 0x4726c1
mov dword [ebp - 0x20e8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x20e8]
mov dword [ebp + eax - 0x2874], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, 0x4e98
sub ecx, dword [ebp - 0x554]
sub ecx, dword [ebp - 0x554]
cmp dword [ebp + eax - 0xc70], ecx
jle 0x472700
mov dword [ebp - 0xde8], 1
jmp 0x472707
and dword [ebp - 0xde8], 0
mov eax, dword [ebp - 0x554]
cmp dword [ebp - 0xde8], eax
jle 0x472721
mov dword [ebp - 0xdf0], 1
jmp 0x472728
and dword [ebp - 0xdf0], 0
mov eax, dword [ebp - 0x20f0]
cmp dword [ebp - 0xdf0], eax
jg 0x472742
mov dword [ebp - 0x20f8], 1
jmp 0x472749
and dword [ebp - 0x20f8], 0
mov eax, dword [ebp - 0x20f8]
sub eax, dword [ebp - 0x554]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x554]
add eax, dword [ebp - 0xe00]
jne 0x472782
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc70], 0
jne 0x472782
and dword [ebp - 0xdf8], 0
jmp 0x47278c
mov dword [ebp - 0xdf8], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xdf8], eax
jne 0x4727a3
mov dword [ebp - 0x2100], 1
jmp 0x4727aa
and dword [ebp - 0x2100], 0
mov eax, dword [ebp - 0x2100]
mov dword [ebp - 0xe00], eax
mov dword [ebp - 0x398], 0
jmp 0x4727cf
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 2
jge 0x4727eb
mov eax, dword [ebp - 0x398]
mov dword [ebp + eax*4 - 0xc70], 0x105a
jmp 0x4727c2
mov dword [ebp - 0x69c], 0
jmp 0x472804
cmp dword [ebp - 0x69c], 0xffffffe8
jg 0x475b62
mov dword [ebp - 0x287c], 0xa421e0b
mov dword [ebp - 0x2884], 0x2a7e9f21
mov dword [ebp - 0x60], 0
jmp 0x472835
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x47284b
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x289c], 0xffffffff
jmp 0x47282e
mov dword [ebp - 0x60], 0
jmp 0x47285b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x472871
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x3a0], 1
jmp 0x472854
mov dword [ebp - 0x60], 0
jmp 0x472881
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x472897
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x329c], 0x1a93826a
jmp 0x47287a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x289c], 0
je 0x4728b7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a0], 0
jne 0x4728c9
cmp dword [ebp - 0x287c], 0
jne 0x4728c9
and dword [ebp - 0xc54], 0
jmp 0x4728d3
mov dword [ebp - 0xc54], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc54]
mov dword [ebp + eax - 0x329c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc54]
sub ecx, dword [ebp + eax - 0x3a0]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x289c]
jg 0x472914
mov dword [ebp - 0x2108], 1
jmp 0x47291b
and dword [ebp - 0x2108], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x2108], eax
jge 0x47293c
mov dword [ebp - 0xe08], 1
jmp 0x472943
and dword [ebp - 0xe08], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0xe08], eax
jg 0x472964
mov dword [ebp - 0x2110], 1
jmp 0x47296b
and dword [ebp - 0x2110], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x2110], eax
jle 0x47298c
mov dword [ebp - 0xe10], 1
jmp 0x472993
and dword [ebp - 0xe10], 0
mov eax, 0xe8f2
sub eax, dword [ebp - 0xe10]
cmp eax, 0xffffffff
jge 0x4729af
mov dword [ebp - 0x2118], 1
jmp 0x4729b6
and dword [ebp - 0x2118], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x289c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3a0]
add ecx, dword [ebp - 0x2118]
imul eax, ecx
test eax, eax
jg 0x4729e9
mov dword [ebp - 0xe18], 1
jmp 0x4729f0
and dword [ebp - 0xe18], 0
mov eax, dword [ebp - 0xe18]
sub eax, 0xa
cmp eax, 0xc22c
jle 0x472a0c
mov dword [ebp - 0x2120], 1
jmp 0x472a13
and dword [ebp - 0x2120], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x2120], eax
jle 0x472a34
mov dword [ebp - 0xe20], 1
jmp 0x472a3b
and dword [ebp - 0xe20], 0
mov eax, dword [ebp - 0xe20]
mov dword [ebp - 0x2884], eax
mov dword [ebp - 0x5ac], 0xdf98a59c
mov dword [ebp - 0x204c], 0xfffffffd
mov dword [ebp - 0x3a8], 0xb26bdde0
mov dword [ebp - 0xe8], 0x9a9b8fa4
mov dword [ebp - 0x510], 0xd5b611fb
mov dword [ebp - 0x90c], 0xffffffff
mov dword [ebp - 0x904], 0
jmp 0x472a9c
mov eax, dword [ebp - 0x904]
inc eax
mov dword [ebp - 0x904], eax
cmp dword [ebp - 0x904], 2
jge 0x472ab8
mov eax, dword [ebp - 0x904]
mov dword [ebp + eax*4 - 0xa54], 0x55f992db
jmp 0x472a8f
mov dword [ebp - 0x3a8], 0
jmp 0x472ad1
mov eax, dword [ebp - 0x3a8]
dec eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0xffffffe6
je 0x473051
mov dword [ebp - 0x2a0], 0x4cc
mov dword [ebp - 0x1d8c], 0xffffffff
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0xc9c], 0xc7fffaa2
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0x4a8], eax
jge 0x472b20
mov dword [ebp - 0x2128], 1
jmp 0x472b27
and dword [ebp - 0x2128], 0
mov eax, dword [ebp - 0x3a8]
imul eax, dword [ebp - 0x3a8]
cmp eax, 0xbc24
je 0x472b47
mov dword [ebp - 0xe28], 1
jmp 0x472b4e
and dword [ebp - 0xe28], 0
mov eax, dword [ebp - 0x2128]
cmp eax, dword [ebp - 0xe28]
jne 0x472b68
mov dword [ebp - 0x2130], 1
jmp 0x472b6f
and dword [ebp - 0x2130], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x2130], eax
jg 0x472b89
mov dword [ebp - 0xe30], 1
jmp 0x472b90
and dword [ebp - 0xe30], 0
imul eax, dword [ebp - 0xe30], 0x5f43
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x1d8c]
sub eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x510]
jge 0x472bc0
mov dword [ebp - 0x2138], 1
jmp 0x472bc7
and dword [ebp - 0x2138], 0
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x2138]
sub ecx, dword [ebp - 0xc9c]
imul ecx, dword [ebp - 0x4a8]
imul eax, ecx
cmp eax, dword [ebp - 0xc9c]
jge 0x472bfd
cmp dword [ebp - 0x2a0], 0
je 0x472bfd
cmp dword [ebp - 0x510], 0
jne 0x472c01
xor eax, eax
je 0x472c2c
mov byte [ebp - 0x429], 0
movzx eax, byte [ebp - 0x429]
test eax, eax
je 0x472c2a
push 0x2382
push 0x21b6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
jmp 0x472c44
mov dword [ebp - 0x297c], 0
cmp dword [ebp - 0x297c], 0
je 0x472c44
jmp 0x473051
mov dword [ebp - 0xe8], 0
jmp 0x472c5d
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jg 0x47304c
mov eax, dword [ebp - 0xe8]
cmp dword [ebp + eax*4 - 0xa54], 0
je 0x472e15
mov dword [ebp - 0xc5c], 0xe77da19
mov dword [ebp - 0x510], 0
jmp 0x472ca1
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 6
jg 0x472e10
mov dword [ebp - 0x2984], 0x1a71
mov dword [ebp - 0x298c], 0xcf2842c5
mov eax, dword [ebp - 0xc5c]
mov dword [ebp - 0x31b4], eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0xa54]
mov dword [ebp - 0x31bc], eax
mov eax, dword [ebp - 0xc5c]
mov ecx, dword [ebp - 0xc5c]
neg ecx
sub eax, ecx
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x31c4], eax
mov eax, dword [ebp - 0x2984]
neg eax
cmp eax, dword [ebp - 0x3a8]
je 0x472d1f
mov dword [ebp - 0xe38], 1
jmp 0x472d26
and dword [ebp - 0xe38], 0
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0xa54]
cmp dword [ebp - 0xe38], eax
jge 0x472d47
mov dword [ebp - 0x2140], 1
jmp 0x472d4e
and dword [ebp - 0x2140], 0
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0xa54]
imul eax, dword [ebp - 0x2140]
imul eax, dword [ebp - 0x2a0]
test eax, eax
jne 0x472d79
mov dword [ebp - 0x2148], 1
jmp 0x472d80
and dword [ebp - 0x2148], 0
cmp dword [ebp - 0x2148], 0xdcbd
jg 0x472d98
mov dword [ebp - 0xea8], 1
jmp 0x472d9f
and dword [ebp - 0xea8], 0
cmp dword [ebp - 0xea8], 0
jl 0x472db4
mov dword [ebp - 0xea0], 1
jmp 0x472dbb
and dword [ebp - 0xea0], 0
cmp dword [ebp - 0xea0], 6
jge 0x472dd0
mov dword [ebp - 0x2154], 1
jmp 0x472dd7
and dword [ebp - 0x2154], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa54]
cmp dword [ebp - 0x2154], eax
jge 0x472df8
mov dword [ebp - 0xe5c], 1
jmp 0x472dff
and dword [ebp - 0xe5c], 0
mov eax, dword [ebp - 0xe5c]
mov dword [ebp - 0x298c], eax
jmp 0x472c94
jmp 0x473047
mov dword [ebp - 0xe6c], 0x5f37d796
mov dword [ebp - 0xe64], 0xf7cb2c1d
mov dword [ebp - 0xe7c], 0x8c4b1e4f
mov dword [ebp - 0x2a0], 0
jmp 0x472e4c
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 8
jl 0x473047
mov dword [ebp - 0xc64], 1
mov dword [ebp - 0x6a4], 0
jmp 0x472e7c
mov eax, dword [ebp - 0x6a4]
inc eax
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 2
jge 0x472e98
mov eax, dword [ebp - 0x6a4]
mov dword [ebp + eax*4 - 0x2bbc], 0
jmp 0x472e6f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2bbc], 1
je 0x472ec0
mov eax, dword [ebp - 0xc64]
inc eax
mov dword [ebp - 0xc64], eax
jne 0x472ec0
and dword [ebp - 0x187c], 0
jmp 0x472eca
mov dword [ebp - 0x187c], 1
mov eax, dword [ebp - 0x187c]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0xa54]
cmp dword [ebp - 0x90c], eax
je 0x472ef7
mov dword [ebp - 0x188c], 1
jmp 0x472efe
and dword [ebp - 0x188c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2bbc]
mov dword [ebp - 0x31cc], eax
mov eax, dword [ebp - 0xe64]
mov dword [ebp - 0x31d4], eax
mov eax, dword [ebp - 0xe64]
mov dword [ebp - 0x31dc], eax
mov eax, 0x464c6607
test eax, eax
jne 0x472f40
or eax, 0xffffffff
jne 0x472f40
and dword [ebp - 0x2994], 0
jmp 0x472f4a
mov dword [ebp - 0x2994], 1
mov eax, dword [ebp - 0x1d8c]
mov dword [ebp - 0x31e4], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x31ec], eax
mov eax, dword [ebp - 0xc9c]
mov dword [ebp - 0xe6c], eax
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0xe6c], eax
jge 0x472f88
mov dword [ebp - 0x1884], 1
jmp 0x472f8f
and dword [ebp - 0x1884], 0
cmp dword [ebp - 0x1884], 9
jae 0x472fa4
mov dword [ebp - 0xe74], 1
jmp 0x472fab
and dword [ebp - 0xe74], 0
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0xe74], eax
je 0x472fca
xor eax, eax
inc eax
je 0x472fca
mov dword [ebp - 0x2014], 1
jmp 0x472fd1
and dword [ebp - 0x2014], 0
mov eax, dword [ebp - 0x2014]
mov dword [ebp - 0xe7c], eax
mov eax, dword [ebp - 0xe7c]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xa54]
je 0x47300e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa54], 0
je 0x47300e
mov dword [ebp - 0xe84], 1
jmp 0x473015
and dword [ebp - 0xe84], 0
mov eax, dword [ebp - 0x188c]
cmp eax, dword [ebp - 0xe84]
jne 0x47302f
mov dword [ebp - 0x1d94], 1
jmp 0x473036
and dword [ebp - 0x1d94], 0
mov eax, dword [ebp - 0x1d94]
mov dword [ebp - 0x4a8], eax
jmp 0x472e3f
jmp 0x472c50
jmp 0x472ac4
mov dword [ebp - 0xa94], 0
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x548], 0xa8cd
mov dword [ebp - 0x31f4], 0x34859bb7
mov dword [ebp - 0x91c], 0xd2e6
mov dword [ebp - 0x1dac], 0x3f7cfeb4
mov dword [ebp - 0x6ac], 0
jmp 0x4730a3
mov eax, dword [ebp - 0x6ac]
inc eax
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 3
jge 0x4730bf
mov eax, dword [ebp - 0x6ac]
mov dword [ebp + eax*4 - 0x2260], 0x2487223b
jmp 0x473096
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x31fc], eax
cmp dword [ebp - 0x18], 1
ja 0x4730da
mov dword [ebp - 0xe8c], 1
jmp 0x4730e1
and dword [ebp - 0xe8c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xe8c], eax
jge 0x4730f8
mov dword [ebp - 0x1894], 1
jmp 0x4730ff
and dword [ebp - 0x1894], 0
mov eax, dword [ebp - 0x1894]
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0
jb 0x473120
mov dword [ebp - 0xe94], 1
jmp 0x473127
and dword [ebp - 0xe94], 0
cmp dword [ebp - 0xe94], 0xffff
jb 0x47313f
mov dword [ebp - 0x22d4], 1
jmp 0x473146
and dword [ebp - 0x22d4], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x22d4]
je 0x47315d
mov dword [ebp - 0xe9c], 1
jmp 0x473164
and dword [ebp - 0xe9c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xe9c], eax
jle 0x47317b
mov dword [ebp - 0x299c], 1
jmp 0x473182
and dword [ebp - 0x299c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3204], eax
mov eax, 0x58382bdb
test eax, eax
je 0x4732ec
mov dword [ebp - 0x320c], 0x3413f087
mov dword [ebp - 0x3214], 8
mov dword [ebp - 0x321c], 0xfffffff6
mov dword [ebp - 0x3224], 0xffffffff
mov dword [ebp - 0x322c], 1
mov dword [ebp - 0x3234], 0x728ad64d
mov dword [ebp - 0x323c], 0xa2589d38
mov dword [ebp - 0x3244], 0x11bd77df
mov dword [ebp - 0x189c], 0xfffffffd
mov dword [ebp - 0x914], 0
jmp 0x47320b
mov eax, dword [ebp - 0x914]
inc eax
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x914], 1
jge 0x473227
mov eax, dword [ebp - 0x914]
mov dword [ebp + eax*4 - 0x324c], 0x52324067
jmp 0x4731fe
mov dword [ebp - 0x548], 0xfffffffb
jmp 0x473240
mov eax, dword [ebp - 0x548]
inc eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0x24
jle 0x4732da
mov dword [ebp - 0x18], 0
jmp 0x47325d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 7
je 0x47329b
mov byte [ebp - 0x369], 0
movzx eax, byte [ebp - 0x369]
test eax, eax
je 0x473299
push 0x1691
push 0
push 0
push 0x2219
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
jmp 0x473256
mov dword [ebp - 0x18], 0xffffffe8
jmp 0x4732ab
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe2
jl 0x4732d5
mov byte [ebp - 0x3c9], 0
movzx eax, byte [ebp - 0x3c9]
test eax, eax
je 0x4732d3
push 0x16f5
push 0x134f
call dword [sym.imp.USER32.dll_SetCaretPos]
jmp 0x4732a4
jmp 0x473233
mov eax, dword [ebp - 0x189c]
inc eax
mov dword [ebp - 0x189c], eax
jmp 0x4734a5
mov dword [ebp - 0x3b0], 0
mov dword [ebp - 0x6b4], 0
jmp 0x47330f
mov eax, dword [ebp - 0x6b4]
inc eax
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 3
jge 0x47332b
mov eax, dword [ebp - 0x6b4]
mov dword [ebp + eax*4 - 0x3a8c], 0xabe3335a
jmp 0x473302
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x3b0], eax
je 0x473345
mov dword [ebp - 0xea4], 1
jmp 0x47334c
and dword [ebp - 0xea4], 0
mov eax, dword [ebp - 0x3b0]
imul eax, dword [ebp - 0xea4]
test eax, eax
je 0x473372
cmp dword [ebp - 0x3b0], 0
je 0x473372
mov dword [ebp - 0x1d9c], 1
jmp 0x473379
and dword [ebp - 0x1d9c], 0
mov eax, dword [ebp - 0x3b0]
imul eax, dword [ebp - 0x3b0]
cmp eax, dword [ebp - 0x1d9c]
jle 0x47339a
mov dword [ebp - 0xeac], 1
jmp 0x4733a1
and dword [ebp - 0xeac], 0
cmp dword [ebp - 0xeac], 0xfffe
jne 0x4733b9
mov dword [ebp - 0x18a4], 1
jmp 0x4733c0
and dword [ebp - 0x18a4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18a4], eax
je 0x4733d7
mov dword [ebp - 0xeb4], 1
jmp 0x4733de
and dword [ebp - 0xeb4], 0
cmp dword [ebp - 0xeb4], 0x13309e69
jge 0x4733f6
mov dword [ebp - 0x201c], 1
jmp 0x4733fd
and dword [ebp - 0x201c], 0
cmp dword [ebp - 0x201c], 0x845d
jge 0x473415
mov dword [ebp - 0xebc], 1
jmp 0x47341c
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0xebc], eax
je 0x473436
mov dword [ebp - 0x18ac], 1
jmp 0x47343d
and dword [ebp - 0x18ac], 0
cmp dword [ebp - 0x18ac], 0xffffffff
jge 0x473452
mov dword [ebp - 0xec4], 1
jmp 0x473459
and dword [ebp - 0xec4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xec4], eax
jle 0x473470
mov dword [ebp - 0x1da4], 1
jmp 0x473477
and dword [ebp - 0x1da4], 0
cmp dword [ebp - 0x1da4], 0xffffffff
jne 0x47348c
mov dword [ebp - 0xecc], 1
jmp 0x473493
and dword [ebp - 0xecc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xecc]
mov dword [ebp + eax - 0x3a8c], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2260]
mov dword [ebp - 0x3254], eax
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x325c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2260]
imul eax, dword [ebp - 0x91c]
test eax, eax
jne 0x4734e8
mov dword [ebp - 0x18b4], 1
jmp 0x4734ef
and dword [ebp - 0x18b4], 0
mov eax, dword [ebp - 0x18b4]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
je 0x47350b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2260], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2260], 0x237eebdc
jle 0x47352a
mov dword [ebp - 0x29a4], 1
jmp 0x473531
and dword [ebp - 0x29a4], 0
cmp dword [ebp - 0x91c], 0
je 0x47354d
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x47354d
mov dword [ebp - 0xed4], 1
jmp 0x473554
and dword [ebp - 0xed4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2260]
imul eax, dword [ebp - 0xed4]
cmp eax, 0x9eeb
jg 0x47357c
xor eax, eax
jne 0x47357c
and dword [ebp - 0x215c], 0
jmp 0x473586
mov dword [ebp - 0x215c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x215c]
sub ecx, dword [ebp - 0x1dac]
cmp dword [ebp + eax - 0x2260], ecx
jg 0x4735ad
mov dword [ebp - 0xedc], 1
jmp 0x4735b4
and dword [ebp - 0xedc], 0
cmp dword [ebp - 0xedc], 0xfffffff7
ja 0x4735c9
mov dword [ebp - 0x18bc], 1
jmp 0x4735d0
and dword [ebp - 0x18bc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18bc], eax
jge 0x4735e7
mov dword [ebp - 0xee4], 1
jmp 0x4735ee
and dword [ebp - 0xee4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2260]
cmp dword [ebp - 0xee4], eax
jg 0x47360f
mov dword [ebp - 0x29ac], 1
jmp 0x473616
and dword [ebp - 0x29ac], 0
mov eax, dword [ebp - 0x1dac]
mov dword [ebp - 0x3264], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x91c]
mov dword [ebp + eax - 0x2260], ecx
mov dword [ebp - 0x27d8], 0xffffffff
mov dword [ebp - 0x644], 0xfffffffa
mov dword [ebp - 0x518], 0xafd0
mov dword [ebp - 0x644], 0
jmp 0x47366c
cmp dword [ebp - 0x644], 0xffffffe9
jl 0x473946
mov dword [ebp - 0x3788], 7
mov dword [ebp - 0x3790], 0x2f4a8b10
mov dword [ebp - 0x3d0], 0xd21f1eb3
mov dword [ebp - 0x6fc], 0
jmp 0x475b99
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 3
jge 0x475bb5
mov eax, dword [ebp - 0x6fc]
mov dword [ebp + eax*4 - 0x39d8], 0x9ef72d4e
jmp 0x475b8c
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3d0], 0
jmp 0x475bdb
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 2
jg 0x475bf8
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp + eax*4 - 0x39d8], 0
je 0x475bf6
jmp 0x475bf8
jmp 0x475bce
cmp dword [ebp + 8], 2
jl 0x47f5a4
mov dword [ebp - 0x964], 0xe91a049f
mov dword [ebp - 0x964], 9
jmp 0x475c25
mov eax, dword [ebp - 0x964]
dec eax
mov dword [ebp - 0x964], eax
cmp dword [ebp - 0x964], 0xfffffff6
jl 0x475cd7
mov dword [ebp - 0x5b0], 8
mov dword [ebp - 0x704], 0
jmp 0x475c55
mov eax, dword [ebp - 0x704]
inc eax
mov dword [ebp - 0x704], eax
cmp dword [ebp - 0x704], 1
jge 0x475c71
mov eax, dword [ebp - 0x704]
mov dword [ebp + eax*4 - 0x27e8], 0x124f
jmp 0x475c48
mov dword [ebp - 0x5b0], 0
jmp 0x475c8a
mov eax, dword [ebp - 0x5b0]
dec eax
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 0
jl 0x475cd2
mov eax, dword [ebp - 0x5b0]
cmp dword [ebp + eax*4 - 0x27e8], 0
je 0x475ca5
jmp 0x475cd2
mov byte [ebp - 0x3f1], 0
movzx eax, byte [ebp - 0x3f1]
test eax, eax
je 0x475cd0
push 0x288
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x475c7d
jmp 0x475c18
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x3798], 0xfffffffe
mov dword [ebp - 0x37a0], 0
mov dword [ebp - 0x520], 0xc8423537
mov dword [ebp - 0x96c], 0
jmp 0x475d18
mov eax, dword [ebp - 0x96c]
inc eax
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0x96c], 4
jge 0x475d34
mov eax, dword [ebp - 0x96c]
mov dword [ebp + eax*4 - 0x3b18], 1
jmp 0x475d0b
mov dword [ebp - 0xf0], 0xfffffff1
jmp 0x475d4d
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 7
jg 0x47634e
mov dword [ebp - 0x714], 6
mov dword [ebp - 0x37a8], 0xfffffffa
mov dword [ebp - 0x199c], 0x7977f45a
mov dword [ebp - 0x37b0], 0
mov dword [ebp - 0x37b8], 9
mov dword [ebp - 0x109c], 7
mov dword [ebp - 0x37c0], 1
mov dword [ebp - 0x37c8], 0
mov dword [ebp - 0x37d0], 0xfffffffc
mov dword [ebp - 0x1994], 0xffffffff
mov dword [ebp - 0x70c], 0
jmp 0x475dd7
mov eax, dword [ebp - 0x70c]
inc eax
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x70c], 3
jge 0x475df3
mov eax, dword [ebp - 0x70c]
mov dword [ebp + eax*4 - 0xa3c], 0x506d4441
jmp 0x475dca
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa3c], 0
jmp 0x475e21
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa3c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa3c], 0x1b
jle 0x476349
mov dword [ebp - 0x4c0], 0xffff
mov dword [ebp - 0xc80], 0
mov dword [ebp - 0x19a4], 0xf321248c
mov dword [ebp - 0x2470], 0x206571f6
mov dword [ebp - 0x974], 0
jmp 0x475e76
mov eax, dword [ebp - 0x974]
inc eax
mov dword [ebp - 0x974], eax
cmp dword [ebp - 0x974], 2
jge 0x475e92
mov eax, dword [ebp - 0x974]
mov dword [ebp + eax*4 - 0x3b08], 0x8805e531
jmp 0x475e69
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x37d8], eax
cmp dword [ebp - 0x714], 1
ja 0x475eb3
mov dword [ebp - 0x1074], 1
jmp 0x475eba
and dword [ebp - 0x1074], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa3c], 0
je 0x475edf
mov eax, 0xeb2d
test eax, eax
je 0x475edf
mov dword [ebp - 0x2174], 1
jmp 0x475ee6
and dword [ebp - 0x2174], 0
cmp dword [ebp - 0x2174], 0xffffffff
je 0x475efb
mov dword [ebp - 0x105c], 1
jmp 0x475f02
and dword [ebp - 0x105c], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x105c], eax
jge 0x475f1c
mov dword [ebp - 0x197c], 1
jmp 0x475f23
and dword [ebp - 0x197c], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x197c], eax
jg 0x475f3d
mov dword [ebp - 0x1064], 1
jmp 0x475f44
and dword [ebp - 0x1064], 0
mov eax, dword [ebp - 0x1064]
mov dword [ebp - 0x4c0], eax
cmp dword [ebp - 0x4c0], 0
je 0x475f6e
cmp dword [ebp - 0xf0], 0
je 0x475f6e
mov dword [ebp - 0x1e0c], 1
jmp 0x475f75
and dword [ebp - 0x1e0c], 0
cmp dword [ebp - 0x1e0c], 0xffff
jae 0x475f8d
mov dword [ebp - 0x106c], 1
jmp 0x475f94
and dword [ebp - 0x106c], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x106c], eax
jl 0x475fb4
cmp dword [ebp - 0x4c0], 0
jne 0x475fb4
and dword [ebp - 0x1984], 0
jmp 0x475fbe
mov dword [ebp - 0x1984], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa3c]
cmp dword [ebp - 0x1984], eax
jge 0x475fdf
mov dword [ebp - 0x2054], 1
jmp 0x475fe6
and dword [ebp - 0x2054], 0
mov eax, dword [ebp - 0x1074]
cmp eax, dword [ebp - 0x2054]
jge 0x475ffd
cmp dword [ebp - 0x714], 0
je 0x476012
cmp dword [ebp - 0x4c0], 0
je 0x476012
mov dword [ebp - 0x107c], 1
jmp 0x476019
and dword [ebp - 0x107c], 0
mov eax, dword [ebp - 0xc80]
add eax, dword [ebp - 0x107c]
cmp eax, 0xb7be
jge 0x476038
mov dword [ebp - 0x198c], 1
jmp 0x47603f
and dword [ebp - 0x198c], 0
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x198c]
imul eax, eax, 0xfff9
cmp eax, dword [ebp - 0xf0]
jle 0x476066
mov dword [ebp - 0x1084], 1
jmp 0x47606d
and dword [ebp - 0x1084], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa3c]
imul eax, dword [ebp - 0x1084]
cmp eax, 1
jae 0x476092
mov dword [ebp - 0x1e14], 1
jmp 0x476099
and dword [ebp - 0x1e14], 0
mov eax, dword [ebp - 0xc80]
imul eax, dword [ebp - 0x1e14]
mov ecx, 0x6544d187
sub ecx, eax
cmp ecx, dword [ebp - 0xc80]
jl 0x4760c1
mov dword [ebp - 0x108c], 1
jmp 0x4760c8
and dword [ebp - 0x108c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa3c]
cmp dword [ebp - 0x108c], eax
jle 0x4760e9
mov dword [ebp - 0x2468], 1
jmp 0x4760f0
and dword [ebp - 0x2468], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x37e0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa3c], 0
je 0x47612f
mov dword [ebp - 0xa9c], 0x7721
mov eax, dword [ebp - 0xa9c]
dec eax
mov dword [ebp - 0xa9c], eax
je 0x47612a
jmp 0x476349
jmp 0x4761bd
mov dword [ebp - 0x37e8], 0x68e0133d
mov dword [ebp - 0x3878], 0x2ff7a2d
mov dword [ebp - 0x3874], 0x2ff7a2d
mov dword [ebp - 0x3870], 0x2ff7a2d
mov dword [ebp - 0x386c], 0x2ff7a2d
mov eax, dword [ebp - 0x1994]
dec eax
mov dword [ebp - 0x1994], eax
mov dword [ebp - 0x520], 0xffffffe7
jmp 0x476187
mov eax, dword [ebp - 0x520]
inc eax
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 0xfffffff8
je 0x4761bd
mov byte [ebp - 0x37f], 0
movzx eax, byte [ebp - 0x37f]
test eax, eax
je 0x4761bb
push 0
push 0xfa8
push 0
push 0x26ab
push 0x431
call dword [sym.imp.GDI32.dll_ExtCreatePen]
jmp 0x47617a
mov eax, dword [ebp - 0x19a4]
imul eax, dword [ebp - 0x109c]
test eax, eax
jne 0x4762df
mov eax, dword [ebp - 0x714]
add eax, dword [ebp - 0x4c0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xa3c]
jne 0x4761f9
mov dword [ebp - 0x1094], 1
jmp 0x476200
and dword [ebp - 0x1094], 0
mov eax, dword [ebp - 0x1094]
add eax, 0xbcfd7d
mov dword [ebp - 0x2aa4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2aa4]
mov dword [ebp + eax - 0x3b18], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa3c], 0x4fe9
jg 0x476243
mov dword [ebp - 0x22b0], 1
jmp 0x47624a
and dword [ebp - 0x22b0], 0
imul eax, dword [ebp - 0x22b0], 0x2ed9
sub eax, 0xce92b64
cmp eax, dword [ebp - 0x520]
jg 0x476268
cmp dword [ebp - 0x109c], 0
mov eax, 0x380ceb71
cmp eax, 0xe1550395
jae 0x476280
mov dword [ebp - 0x10a4], 1
jmp 0x476287
and dword [ebp - 0x10a4], 0
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x199c], eax
mov eax, dword [ebp - 0x199c]
mov ecx, dword [ebp - 0x2470]
imul ecx, dword [ebp - 0x10a4]
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xa3c]
jge 0x4762c3
mov dword [ebp - 0x1e1c], 1
jmp 0x4762ca
and dword [ebp - 0x1e1c], 0
cmp dword [ebp - 0x1e1c], 0x91aff671
jbe 0x4762df
and dword [ebp - 0x10ac], 0
jmp 0x4762e9
mov dword [ebp - 0x10ac], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa3c]
cmp dword [ebp - 0x10ac], eax
jle 0x47630a
mov dword [ebp - 0x10b4], 1
jmp 0x476311
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0x19a4]
add eax, dword [ebp - 0x10b4]
cmp eax, dword [ebp - 0x4c0]
jne 0x476331
mov dword [ebp - 0x205c], 1
jmp 0x476338
and dword [ebp - 0x205c], 0
mov eax, dword [ebp - 0x205c]
mov dword [ebp - 0x520], eax
jmp 0x475e06
jmp 0x475d40
mov dword [ebp - 0x260], 0x62fd41e5
mov dword [ebp - 0x10cc], 0x2ff5ff74
mov dword [ebp - 0xbb4], 0xbb5fb49a
mov dword [ebp - 0x10ec], 0x5bfeb1ec
mov dword [ebp - 0x2064], 0xaca8b146
mov dword [ebp - 0x1c8], 0
jmp 0x476399
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x4763b5
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0xc7c], 0xc80fc3a0
jmp 0x47638c
mov dword [ebp - 0x1c8], 0
jmp 0x4763ce
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x4763ea
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x2480], 0xb7dd
jmp 0x4763c1
mov dword [ebp - 0x260], 0
jmp 0x476403
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jle 0x476751
mov dword [ebp - 0x3d8], 0xffffffff
mov dword [ebp - 0xaa4], 1
mov dword [ebp - 0x10dc], 0xfffffff9
mov dword [ebp - 0x27f8], 0xffffffff
mov dword [ebp - 0x97c], 0
jmp 0x476451
mov eax, dword [ebp - 0x97c]
inc eax
mov dword [ebp - 0x97c], eax
cmp dword [ebp - 0x97c], 2
jge 0x47646d
mov eax, dword [ebp - 0x97c]
mov dword [ebp + eax*4 - 0x28b4], 0xfffffff9
jmp 0x476444
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp + eax - 0xc7c], ecx
mov eax, dword [ebp - 0x3d8]
sub eax, dword [ebp - 0x3d8]
cmp eax, dword [ebp - 0x3d8]
jl 0x4764a0
mov dword [ebp - 0x10bc], 1
jmp 0x4764a7
and dword [ebp - 0x10bc], 0
mov eax, dword [ebp - 0x10bc]
neg eax
cmp eax, dword [ebp - 0x260]
jne 0x4764c9
cmp dword [ebp - 0x3d8], 0
jne 0x4764c9
and dword [ebp - 0x19ac], 0
jmp 0x4764d3
mov dword [ebp - 0x19ac], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc7c]
cmp dword [ebp - 0x19ac], eax
jg 0x4764f4
mov dword [ebp - 0x10c4], 1
jmp 0x4764fb
and dword [ebp - 0x10c4], 0
mov eax, dword [ebp - 0xaa4]
cmp dword [ebp - 0x10c4], eax
jne 0x476515
mov dword [ebp - 0x1e24], 1
jmp 0x47651c
and dword [ebp - 0x1e24], 0
mov eax, dword [ebp - 0x1e24]
mov dword [ebp - 0x10cc], eax
mov eax, dword [ebp - 0x3d8]
add eax, dword [ebp - 0x10cc]
mov dword [ebp - 0x19b4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x19b4]
mov dword [ebp + eax - 0x28b4], ecx
mov eax, dword [ebp - 0x10dc]
cmp dword [ebp - 0x19b4], eax
jle 0x476567
mov dword [ebp - 0x10d4], 1
jmp 0x47656e
and dword [ebp - 0x10d4], 0
mov eax, dword [ebp - 0x10d4]
mov dword [ebp - 0xbb4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc7c]
cmp eax, dword [ebp - 0xbb4]
jge 0x47659b
mov dword [ebp - 0x217c], 1
jmp 0x4765a2
and dword [ebp - 0x217c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc7c]
cmp dword [ebp - 0x217c], eax
jg 0x4765c3
mov dword [ebp - 0x19bc], 1
jmp 0x4765ca
and dword [ebp - 0x19bc], 0
mov eax, dword [ebp - 0x10dc]
cmp dword [ebp - 0x19bc], eax
jle 0x4765e4
mov dword [ebp - 0x10e4], 1
jmp 0x4765eb
and dword [ebp - 0x10e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc7c]
cmp dword [ebp - 0x10e4], eax
jne 0x476619
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28b4], 0
jne 0x476619
and dword [ebp - 0x27f0], 0
jmp 0x476623
mov dword [ebp - 0x27f0], 1
mov eax, 0xbec1
test eax, eax
je 0x476641
mov eax, 0x932d
test eax, eax
je 0x476641
mov dword [ebp - 0x2478], 1
jmp 0x476648
and dword [ebp - 0x2478], 0
mov eax, dword [ebp - 0xaa4]
mov dword [ebp - 0x37f0], eax
cmp dword [ebp - 0x260], 0xa1e2
jl 0x47666c
mov dword [ebp - 0x1e2c], 1
jmp 0x476673
and dword [ebp - 0x1e2c], 0
mov eax, dword [ebp - 0x1e2c]
mov dword [ebp - 0x10ec], eax
cmp dword [ebp - 0x10ec], 0
jne 0x4766aa
cmp dword [ebp - 0xbb4], 0
jne 0x4766aa
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc7c], 0
jne 0x4766aa
and dword [ebp - 0x19c4], 0
jmp 0x4766b4
mov dword [ebp - 0x19c4], 1
mov eax, dword [ebp - 0x260]
imul eax, dword [ebp - 0x19c4]
test eax, eax
je 0x4766da
cmp dword [ebp - 0x3d8], 0
je 0x4766da
mov dword [ebp - 0x10f4], 1
jmp 0x4766e1
and dword [ebp - 0x10f4], 0
mov eax, dword [ebp - 0xaa4]
cmp dword [ebp - 0x10f4], eax
jle 0x4766fb
mov dword [ebp - 0x29d0], 1
jmp 0x476702
and dword [ebp - 0x29d0], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x2064], eax
cmp dword [ebp - 0x2064], 0
jle 0x476725
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc7c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x2480]
sub eax, dword [ebp - 0x260]
mov dword [ebp - 0x27f8], eax
jmp 0x4763f6
mov dword [ebp - 0x11c], 0x97a888ad
mov dword [ebp - 0xc40], 0
mov dword [ebp - 0x37f8], 0xfffffff9
mov dword [ebp - 0x3800], 0xa8551b32
mov dword [ebp - 0x3808], 0xee67b38e
mov dword [ebp - 0x3810], 0x4def
mov dword [ebp - 0x3818], 3
mov dword [ebp - 0x3820], 0x59a7
mov dword [ebp - 0x1104], 0xb011
mov dword [ebp - 0x71c], 0
jmp 0x4767c4
mov eax, dword [ebp - 0x71c]
inc eax
mov dword [ebp - 0x71c], eax
cmp dword [ebp - 0x71c], 1
jge 0x4767e0
mov eax, dword [ebp - 0x71c]
mov dword [ebp + eax*4 - 0x2488], 0xfffffff6
jmp 0x4767b7
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x3828], eax
cmp dword [ebp - 0xc40], 1
jl 0x476801
mov dword [ebp - 0x10fc], 1
jmp 0x476808
and dword [ebp - 0x10fc], 0
mov eax, dword [ebp - 0xc40]
cmp dword [ebp - 0x10fc], eax
jge 0x476822
mov dword [ebp - 0x19cc], 1
jmp 0x476829
and dword [ebp - 0x19cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x19cc]
mov dword [ebp + eax - 0x2488], ecx
mov eax, dword [ebp - 0x1104]
inc eax
mov dword [ebp - 0x1104], eax
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x4c], 0x5bb2c213
mov dword [ebp - 0x110c], 0xd94e8fe7
mov dword [ebp - 0x2800], 0x66d8ff8c
mov dword [ebp - 0x984], 0
jmp 0x476887
mov eax, dword [ebp - 0x984]
inc eax
mov dword [ebp - 0x984], eax
cmp dword [ebp - 0x984], 4
jge 0x4768a3
mov eax, dword [ebp - 0x984]
mov dword [ebp + eax*4 - 0x3938], 0x6753
jmp 0x47687a
mov dword [ebp - 0x4c], 0
jmp 0x4768b3
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffff9
jge 0x4768d8
mov byte [ebp - 0x441], 0
movzx eax, byte [ebp - 0x441]
test eax, eax
je 0x4768d6
push 0x25b9
call dword [sym.imp.KERNEL32.dll_TlsFree]
jmp 0x4768ac
cmp dword [ebp - 0x4c], 0
je 0x47699e
cmp dword [ebp - 0x4c], 0
je 0x4768fa
cmp dword [ebp - 0x4c], 0
je 0x4768fa
mov dword [ebp - 0x1e34], 1
jmp 0x476901
and dword [ebp - 0x1e34], 0
mov eax, 0xda22
sub eax, dword [ebp - 0x1e34]
mov dword [ebp - 0x110c], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x110c], eax
jl 0x476929
mov dword [ebp - 0x19d4], 1
jmp 0x476930
and dword [ebp - 0x19d4], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x19d4], eax
jge 0x476947
mov dword [ebp - 0x1114], 1
jmp 0x47694e
and dword [ebp - 0x1114], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x1114]
cmp dword [ebp - 0x4c], eax
jl 0x476968
mov dword [ebp - 0x2b48], 1
jmp 0x47696f
and dword [ebp - 0x2b48], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2e08], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3938], 0xac84
mov eax, 0xac84
test eax, eax
je 0x47699e
mov dword [ebp - 0x2490], 1
jmp 0x4769a5
and dword [ebp - 0x2490], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3868], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3938]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x4769d5
xor eax, eax
inc eax
je 0x4769d5
mov dword [ebp - 0x2224], 1
jmp 0x4769dc
and dword [ebp - 0x2224], 0
mov eax, dword [ebp - 0x2224]
mov dword [ebp - 0x2800], eax
mov dword [ebp - 0x388c], 0xb57fd546
mov dword [ebp - 0x3888], 0xb57fd546
mov dword [ebp - 0x3884], 0xb57fd546
mov dword [ebp - 0x3880], 0xb57fd546
mov dword [ebp - 0x724], 0xfffffff9
mov dword [ebp - 0x2e10], 0xffffffff
mov dword [ebp - 0x724], 3
jmp 0x476a3d
mov eax, dword [ebp - 0x724]
dec eax
mov dword [ebp - 0x724], eax
cmp dword [ebp - 0x724], 0
jl 0x476a93
mov dword [ebp - 0x98c], 0xfffffff9
mov dword [ebp - 0x98c], 3
jmp 0x476a69
mov eax, dword [ebp - 0x98c]
dec eax
mov dword [ebp - 0x98c], eax
cmp dword [ebp - 0x98c], 0
jl 0x476a91
mov byte [ebp - 0x381], 0
movzx eax, byte [ebp - 0x381]
test eax, eax
je 0x476a8f
push 0x23ef
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
jmp 0x476a5c
jmp 0x476a30
mov dword [ebp - 0x2538], 0xfc6c064b
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0x33ec], 0xfffffffe
mov dword [ebp - 0x2e18], 0
mov dword [ebp - 0x550], 0xc8423537
mov dword [ebp - 0x72c], 0
jmp 0x476ade
mov eax, dword [ebp - 0x72c]
inc eax
mov dword [ebp - 0x72c], eax
cmp dword [ebp - 0x72c], 4
jge 0x476afa
mov eax, dword [ebp - 0x72c]
mov dword [ebp + eax*4 - 0x3b30], 1
jmp 0x476ad1
mov dword [ebp - 0xd4], 0xfffffff1
jmp 0x476b13
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 7
jg 0x477114
mov dword [ebp - 0x99c], 6
mov dword [ebp - 0x360c], 0xfffffffa
mov dword [ebp - 0x1164], 0x7977f45a
mov dword [ebp - 0x2e20], 0
mov dword [ebp - 0x33f4], 9
mov dword [ebp - 0x19fc], 7
mov dword [ebp - 0x2e28], 1
mov dword [ebp - 0x377c], 0
mov dword [ebp - 0x2e30], 0xfffffffc
mov dword [ebp - 0x1154], 0xffffffff
mov dword [ebp - 0x994], 0
jmp 0x476b9d
mov eax, dword [ebp - 0x994]
inc eax
mov dword [ebp - 0x994], eax
cmp dword [ebp - 0x994], 3
jge 0x476bb9
mov eax, dword [ebp - 0x994]
mov dword [ebp + eax*4 - 0xa30], 0x506d4441
jmp 0x476b90
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa30], 0
jmp 0x476be7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa30], 0x1b
jle 0x47710f
mov dword [ebp - 0x4c8], 0xffff
mov dword [ebp - 0xaac], 0
mov dword [ebp - 0x1174], 0xf321248c
mov dword [ebp - 0x24a0], 0x206571f6
mov dword [ebp - 0x734], 0
jmp 0x476c3c
mov eax, dword [ebp - 0x734]
inc eax
mov dword [ebp - 0x734], eax
cmp dword [ebp - 0x734], 2
jge 0x476c58
mov eax, dword [ebp - 0x734]
mov dword [ebp + eax*4 - 0x3bc8], 0x8805e531
jmp 0x476c2f
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x33fc], eax
cmp dword [ebp - 0x99c], 1
ja 0x476c79
mov dword [ebp - 0x206c], 1
jmp 0x476c80
and dword [ebp - 0x206c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa30], 0
je 0x476ca5
mov eax, 0xeb2d
test eax, eax
je 0x476ca5
mov dword [ebp - 0x111c], 1
jmp 0x476cac
and dword [ebp - 0x111c], 0
cmp dword [ebp - 0x111c], 0xffffffff
je 0x476cc1
mov dword [ebp - 0x19dc], 1
jmp 0x476cc8
and dword [ebp - 0x19dc], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x19dc], eax
jge 0x476ce2
mov dword [ebp - 0x1124], 1
jmp 0x476ce9
and dword [ebp - 0x1124], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x1124], eax
jg 0x476d03
mov dword [ebp - 0x1e3c], 1
jmp 0x476d0a
and dword [ebp - 0x1e3c], 0
mov eax, dword [ebp - 0x1e3c]
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 0
je 0x476d34
cmp dword [ebp - 0xd4], 0
je 0x476d34
mov dword [ebp - 0x112c], 1
jmp 0x476d3b
and dword [ebp - 0x112c], 0
cmp dword [ebp - 0x112c], 0xffff
jae 0x476d53
mov dword [ebp - 0x19e4], 1
jmp 0x476d5a
and dword [ebp - 0x19e4], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x19e4], eax
jl 0x476d7a
cmp dword [ebp - 0x4c8], 0
jne 0x476d7a
and dword [ebp - 0x1134], 0
jmp 0x476d84
mov dword [ebp - 0x1134], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa30]
cmp dword [ebp - 0x1134], eax
jge 0x476da5
mov dword [ebp - 0x113c], 1
jmp 0x476dac
and dword [ebp - 0x113c], 0
mov eax, dword [ebp - 0x206c]
cmp eax, dword [ebp - 0x113c]
jge 0x476dc3
cmp dword [ebp - 0x99c], 0
je 0x476dd8
cmp dword [ebp - 0x4c8], 0
je 0x476dd8
mov dword [ebp - 0x19ec], 1
jmp 0x476ddf
and dword [ebp - 0x19ec], 0
mov eax, dword [ebp - 0xaac]
add eax, dword [ebp - 0x19ec]
cmp eax, 0xb7be
jge 0x476dfe
mov dword [ebp - 0x1144], 1
jmp 0x476e05
and dword [ebp - 0x1144], 0
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x1144]
imul eax, eax, 0xfff9
cmp eax, dword [ebp - 0xd4]
jle 0x476e2c
mov dword [ebp - 0x1e44], 1
jmp 0x476e33
and dword [ebp - 0x1e44], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa30]
imul eax, dword [ebp - 0x1e44]
cmp eax, 1
jae 0x476e58
jmp 0x476b06
mov dword [ebp - 0x2e40], 0xfffffff8
mov dword [ebp - 0x3404], 0xffffffff
mov dword [ebp - 0x2e48], 0xbacd7953
mov dword [ebp - 0x3804], 0x6a485bf2
mov dword [ebp - 0x2e50], 0xf1813f1a
mov dword [ebp - 0x340c], 0x507e6732
mov dword [ebp - 0x1a0c], 0xfffffffa
mov dword [ebp - 0x73c], 0
jmp 0x477173
mov eax, dword [ebp - 0x73c]
inc eax
mov dword [ebp - 0x73c], eax
cmp dword [ebp - 0x73c], 4
jge 0x47718f
mov eax, dword [ebp - 0x73c]
mov dword [ebp + eax*4 - 0x3cb4], 0
jmp 0x477166
mov eax, dword [ebp - 0x1a0c]
inc eax
mov dword [ebp - 0x1a0c], eax
mov dword [ebp - 0x9a4], 0
jmp 0x4771b5
mov eax, dword [ebp - 0x9a4]
inc eax
mov dword [ebp - 0x9a4], eax
cmp dword [ebp - 0x9a4], 4
jge 0x4771d1
mov eax, dword [ebp - 0x9a4]
mov dword [ebp + eax*4 - 0x23fc], 0x25062d7b
jmp 0x4771a8
mov dword [ebp - 0x4d0], 5
mov dword [ebp - 0x638], 0x442e1191
mov dword [ebp - 0x1194], 0xfffa
mov dword [ebp - 0x2284], 0xcc099843
mov dword [ebp - 0x9ac], 0xfffffffd
mov dword [ebp - 0x1a1c], 0x284818a
mov dword [ebp - 0x24b0], 0xe21e5250
mov dword [ebp - 0x744], 0
jmp 0x477230
mov eax, dword [ebp - 0x744]
inc eax
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0x744], 4
jge 0x47724c
mov eax, dword [ebp - 0x744]
mov dword [ebp + eax*4 - 0x2d6c], 0x4ea33a4d
jmp 0x477223
mov eax, 0xc3ad3b31
test eax, eax
je 0x4773ff
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d6c]
cmp dword [ebp - 0x4d0], eax
je 0x47727a
mov dword [ebp - 0x2808], 1
jmp 0x477281
and dword [ebp - 0x2808], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2d6c]
mov dword [ebp - 0x2e58], eax
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x361c], eax
mov eax, dword [ebp - 0x1194]
mov dword [ebp - 0x2e60], eax
cmp dword [ebp - 0x2284], 4
jge 0x4772c0
mov dword [ebp - 0x1184], 1
jmp 0x4772c7
and dword [ebp - 0x1184], 0
mov eax, dword [ebp - 0x638]
imul eax, dword [ebp - 0x1184]
add eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x638]
jg 0x4772fa
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2d6c], 0
jne 0x4772fa
and dword [ebp - 0x1e54], 0
jmp 0x477304
mov dword [ebp - 0x1e54], 1
imul eax, dword [ebp - 0x1e54], 0x10cb
cmp eax, 0xa90ef874
jne 0x477321
mov dword [ebp - 0x118c], 1
jmp 0x477328
and dword [ebp - 0x118c], 0
mov eax, dword [ebp - 0x118c]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x638]
neg eax
imul eax, eax, 0xc3da
mov dword [ebp - 0x9ac], eax
cmp dword [ebp - 0x9ac], 0
jne 0x477363
mov eax, 0x85a06c0f
test eax, eax
jne 0x477363
and dword [ebp - 0x1a14], 0
jmp 0x47736d
mov dword [ebp - 0x1a14], 1
mov eax, dword [ebp - 0x1a1c]
cmp dword [ebp - 0x1a14], eax
jle 0x477382
cmp dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x3414], eax
cmp dword [ebp - 0x1194], 0
je 0x4773ac
cmp dword [ebp - 0x4d0], 0
je 0x4773ac
mov dword [ebp - 0x24a8], 1
jmp 0x4773b3
and dword [ebp - 0x24a8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2d6c]
mov dword [ebp - 0x2e68], eax
cmp dword [ebp - 0x2284], 0
je 0x4773e1
push 7
pop eax
test eax, eax
je 0x4773e1
mov dword [ebp - 0x119c], 1
jmp 0x4773e8
and dword [ebp - 0x119c], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x119c]
jl 0x4773ff
cmp dword [ebp - 0x9ac], 0
jne 0x477411
mov eax, 0x6c7e
test eax, eax
jne 0x477411
and dword [ebp - 0x2aac], 0
jmp 0x47741b
mov dword [ebp - 0x2aac], 1
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x3784], eax
mov eax, dword [ebp - 0x1a1c]
mov dword [ebp - 0x24b0], eax
mov byte [ebp - 0x338], 0
movzx eax, byte [ebp - 0x338]
test eax, eax
je 0x47744d
push 0
call dword [sym.imp.USER32.dll_SetCursor]
cmp dword [ebp - 0x11c], 0xa5dec4f
jg 0x477465
mov dword [ebp - 0x11a4], 1
jmp 0x47746c
and dword [ebp - 0x11a4], 0
mov eax, dword [ebp - 0x11a4]
sub eax, 8
cmp eax, dword [ebp - 0x2b8]
jne 0x477489
mov dword [ebp - 0x1e5c], 1
jmp 0x477490
and dword [ebp - 0x1e5c], 0
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x1e5c]
cmp eax, dword [ebp - 0x11c]
je 0x4774b0
mov dword [ebp - 0xab4], 1
jmp 0x4774b7
and dword [ebp - 0xab4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xab4]
mov dword [ebp + eax - 0x23fc], ecx
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0xab4]
jl 0x4774e4
mov dword [ebp - 0x11ac], 1
jmp 0x4774eb
and dword [ebp - 0x11ac], 0
mov eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x11ac]
jle 0x477505
mov dword [ebp - 0x1a24], 1
jmp 0x47750c
and dword [ebp - 0x1a24], 0
mov eax, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x11c]
imul ecx, dword [ebp - 0x1a24]
imul eax, ecx
cmp dword [ebp - 0x11c], eax
jne 0x477538
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x23fc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x23fc], 0
jne 0x477555
mov eax, 0x7d92
test eax, eax
je 0x477de4
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x1a3c], 0x68f57f54
mov dword [ebp - 0x90], 0
jmp 0x47757f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x47759b
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x3948], 0x1912
jmp 0x477572
mov dword [ebp - 0x90], 0
jmp 0x4775b4
cmp dword [ebp - 0x90], 2
jge 0x4775d0
mov dword [ebp - 0x268], 0xe2236432
mov dword [ebp - 0x2e80], 0xc74600eb
mov dword [ebp - 0x3424], 0x855c71da
mov dword [ebp - 0x9bc], 0
jmp 0x477e1b
cmp dword [ebp - 0x9bc], 3
jge 0x477e37
mov eax, dword [ebp - 0x9bc]
mov dword [ebp + eax*4 - 0x2a44], 0xb9b55bb2
jmp 0x477e0e
mov dword [ebp - 0x268], 2
jmp 0x477e50
cmp dword [ebp + 8], 1
jne 0x487328
mov dword [ebp - 0x508], 0xe1757117
mov dword [ebp - 0x628], 0x5231fbf6
mov dword [ebp - 0x2a18], 0x388a0193
mov dword [ebp - 0x838], 0x7bc6c895
mov dword [ebp - 0xed8], 0x843c
mov dword [ebp - 0x508], 8
jmp 0x47f5f9
mov eax, dword [ebp - 0x508]
dec eax
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 0xfffffff2
jle 0x47f9d1
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0xe70], 0xfffffff7
mov dword [ebp - 0xe98], 9
mov dword [ebp - 0x928], 0
jmp 0x47f63d
mov eax, dword [ebp - 0x928]
inc eax
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0x928], 1
jge 0x47f659
mov eax, dword [ebp - 0x928]
mov dword [ebp + eax*4 - 0xeb8], 0xfffffffd
jmp 0x47f630
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x3704], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x3080], eax
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x3524], eax
cmp dword [ebp - 0x628], 1
jl 0x47f692
mov dword [ebp - 0xe68], 1
jmp 0x47f699
and dword [ebp - 0xe68], 0
mov eax, dword [ebp - 0xe68]
sub eax, dword [ebp - 0x134]
mov dword [ebp - 0xe70], eax
cmp dword [ebp - 0xe70], 0
cmp dword [ebp - 0x2a18], 0
je 0x47f6d0
cmp dword [ebp - 0x838], 0
je 0x47f6d0
mov dword [ebp - 0xe78], 1
jmp 0x47f6d7
and dword [ebp - 0xe78], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0xe78], eax
jl 0x47f6f1
mov dword [ebp - 0xe80], 1
jmp 0x47f6f8
and dword [ebp - 0xe80], 0
mov eax, dword [ebp - 0x838]
cmp dword [ebp - 0xe80], eax
jle 0x47f712
mov dword [ebp - 0xe88], 1
jmp 0x47f719
and dword [ebp - 0xe88], 0
mov eax, dword [ebp - 0x508]
cmp dword [ebp - 0xe88], eax
jge 0x47f733
mov dword [ebp - 0xe90], 1
jmp 0x47f73a
and dword [ebp - 0xe90], 0
mov eax, dword [ebp - 0xe90]
mov dword [ebp - 0xe98], eax
mov eax, dword [ebp - 0xe98]
mov dword [ebp - 0xe40], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe40]
mov dword [ebp + eax - 0xeb8], ecx
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0xe40], eax
je 0x47f77f
mov dword [ebp - 0xe3c], 1
jmp 0x47f786
and dword [ebp - 0xe3c], 0
mov eax, dword [ebp - 0xe3c]
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x628], 7
jmp 0x47f7ab
mov eax, dword [ebp - 0x628]
dec eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0xfffffff0
je 0x47f9cc
mov dword [ebp - 0x3088], 0x3a55a411
mov dword [ebp - 0xee0], 0xff81490
mov dword [ebp - 0x830], 0
jmp 0x47f7e5
mov eax, dword [ebp - 0x830]
inc eax
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x830], 3
jge 0x47f801
mov eax, dword [ebp - 0x830]
mov dword [ebp + eax*4 - 0x2d04], 0x86a4abff
jmp 0x47f7d8
mov byte [ebp - 0x374], 0
movzx eax, byte [ebp - 0x374]
test eax, eax
je 0x47f821
push 1
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2d04], 0
je 0x47f84d
mov eax, 0xffff0062
test eax, eax
je 0x47f84d
cmp dword [ebp - 0x134], 0
je 0x47f848
jmp 0x47f9cc
jmp 0x47f9c7
mov dword [ebp - 0x9a8], 0
jmp 0x47f866
mov eax, dword [ebp - 0x9a8]
inc eax
mov dword [ebp - 0x9a8], eax
cmp dword [ebp - 0x9a8], 1
jge 0x47f882
mov eax, dword [ebp - 0x9a8]
mov dword [ebp + eax*4 - 0x38f4], 4
jmp 0x47f859
mov dword [ebp - 0x134], 0xb
jmp 0x47f89b
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x13
jle 0x47f9a6
mov dword [ebp - 0x3090], 1
mov dword [ebp - 0xeb0], 0
mov dword [ebp - 0x2928], 0x6e219e4e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2d04], 0
je 0x47f8e1
mov dword [ebp - 0xec8], 1
jmp 0x47f8e8
and dword [ebp - 0xec8], 0
mov dword [ebp - 0xeb0], 1
cmp dword [ebp - 0xeb0], 0
jne 0x47f91b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xeb8], 0
jne 0x47f91b
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x47f91b
and dword [ebp - 0xec0], 0
jmp 0x47f925
mov dword [ebp - 0xec0], 1
cmp dword [ebp - 0xec0], 0xffff
je 0x47f93d
mov dword [ebp - 0x2698], 1
jmp 0x47f944
and dword [ebp - 0x2698], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d04]
mov dword [ebp - 0x352c], eax
mov eax, dword [ebp - 0x838]
cmp dword [ebp - 0xec8], eax
jl 0x47f971
mov dword [ebp - 0xed0], 1
jmp 0x47f978
and dword [ebp - 0xed0], 0
mov dword [ebp - 0xed8], 0x6daa
mov eax, dword [ebp - 0xed0]
mov dword [ebp - 0xee0], eax
mov eax, dword [ebp - 0xed8]
imul eax, dword [ebp - 0xee0]
mov dword [ebp - 0x2928], eax
jmp 0x47f88e
mov byte [ebp - 0x376], 0
movzx eax, byte [ebp - 0x376]
test eax, eax
je 0x47f9c7
push 0
push 0xba9
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
jmp 0x47f79e
jmp 0x47f5ec
mov dword [ebp - 0x26c], 0
jmp 0x47f9ea
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 2
jge 0x47fa06
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x3b80], 0
jmp 0x47f9dd
mov dword [ebp - 0x26c], 0
jmp 0x47fa1f
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jge 0x47fa3b
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x930], 0xc184c506
jmp 0x47fa12
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x930], 0
jmp 0x47fa69
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x930]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x930], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x930], 1
jg 0x47fa9a
mov byte [ebp - 0x378], 0
movzx eax, byte [ebp - 0x378]
test eax, eax
je 0x47fa98
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowCaret]
jmp 0x47fa4e
mov dword [ebp - 0xb4], 0x8256a9ef
mov dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0xf18], 0
mov dword [ebp - 0x21c], 0
jmp 0x47fad1
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x47faed
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xc88], 0x3c407858
jmp 0x47fac4
mov dword [ebp - 0x21c], 0
jmp 0x47fb06
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x47fb22
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xc68], 0xfffffff9
jmp 0x47faf9
cmp dword [ebp - 0xb4], 0xd4ea6801
jb 0x47fb40
cmp dword [ebp - 0xb4], 0
jne 0x47fb40
and dword [ebp - 0xee8], 0
jmp 0x47fb4a
mov dword [ebp - 0xee8], 1
cmp dword [ebp - 0xb4], 0
jne 0x47fb60
xor eax, eax
jne 0x47fb60
and dword [ebp - 0x26a0], 0
jmp 0x47fb6a
mov dword [ebp - 0x26a0], 1
mov eax, dword [ebp - 0xee8]
add eax, 5
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x294], 0
jmp 0x47fb92
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 1
jg 0x48014c
mov dword [ebp - 0xf58], 0x1438
mov dword [ebp - 0x2acc], 0x99333c7d
mov dword [ebp - 0x13c], 0xfffffff7
mov dword [ebp - 0x564], 0xe5741311
mov dword [ebp - 0x2b14], 0xfffffffb
mov dword [ebp - 0xc18], 0x336ae3d4
mov dword [ebp - 0x840], 0
jmp 0x47fbf4
mov eax, dword [ebp - 0x840]
inc eax
mov dword [ebp - 0x840], eax
cmp dword [ebp - 0x840], 1
jge 0x47fc10
mov eax, dword [ebp - 0x840]
mov dword [ebp + eax*4 - 0xcb0], 1
jmp 0x47fbe7
mov dword [ebp - 0xb4], 0
jmp 0x47fc29
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jg 0x47fc87
mov dword [ebp - 0x3098], 0x3ee7
mov dword [ebp - 0x370c], 0xc924b541
mov dword [ebp - 0x30a0], 0
mov dword [ebp - 0x38c8], 0xfffffffa
mov dword [ebp - 0x38c4], 0xfffffffa
mov dword [ebp - 0x38c0], 0xfffffffa
mov dword [ebp - 0x38bc], 0xfffffffa
mov eax, dword [ebp - 0xc18]
dec eax
mov dword [ebp - 0xc18], eax
jmp 0x47fc1c
mov dword [ebp - 0x13c], 1
jmp 0x47fca0
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jl 0x480147
mov dword [ebp - 0xb6c], 2
mov dword [ebp - 0xf50], 0x9d8d7774
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2acc]
cmp dword [ebp + eax - 0xc88], ecx
jle 0x47fce2
mov dword [ebp - 0xef0], 1
jmp 0x47fce9
and dword [ebp - 0xef0], 0
mov eax, dword [ebp - 0x13c]
mov eax, dword [ebp + eax*4 - 0xc88]
cmp eax, dword [ebp - 0xef0]
jne 0x47fd10
mov eax, 0x140a9711
test eax, eax
jne 0x47fd10
and dword [ebp - 0x26a8], 0
jmp 0x47fd1a
mov dword [ebp - 0x26a8], 1
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x3534], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcb0]
mov dword [ebp - 0x30a8], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc68], 0x4518
mov eax, 0x4518
cmp eax, 0xa52b
jl 0x47fd62
mov dword [ebp - 0xef8], 1
jmp 0x47fd69
and dword [ebp - 0xef8], 0
mov eax, dword [ebp - 0xef8]
mov dword [ebp - 0xf18], eax
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0xb4]
sub ecx, 0x3d8d5894
cmp dword [ebp + eax*4 - 0xc88], ecx
jge 0x47fd9c
mov dword [ebp - 0xf00], 1
jmp 0x47fda3
and dword [ebp - 0xf00], 0
cmp dword [ebp - 0xf00], 0xad98
jge 0x47fe1c
mov dword [ebp - 0x2930], 1
mov dword [ebp - 0x26b0], 1
mov dword [ebp - 0x564], 0
jmp 0x47fddc
mov eax, dword [ebp - 0x564]
dec eax
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x564], 0xfffffff4
jge 0x47fe17
mov dword [ebp - 0xb4], 0
jmp 0x47fdfe
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x39
jle 0x47fe15
mov eax, dword [ebp - 0x2930]
mov dword [ebp - 0x26b0], eax
jmp 0x47fdf1
jmp 0x47fdcf
jmp 0x4800bf
mov dword [ebp - 0x2938], 0x5f1f4743
mov dword [ebp - 0x9e8], 0
jmp 0x47fe3f
mov eax, dword [ebp - 0x9e8]
inc eax
mov dword [ebp - 0x9e8], eax
cmp dword [ebp - 0x9e8], 3
jge 0x47fe5b
mov eax, dword [ebp - 0x9e8]
mov dword [ebp + eax*4 - 0x2d1c], 0
jmp 0x47fe32
cmp dword [ebp - 0x564], 0
je 0x48001a
cmp dword [ebp - 0x294], 1
jne 0x47fe7d
mov dword [ebp - 0x2a28], 1
jmp 0x47fe84
and dword [ebp - 0x2a28], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2d1c]
mov dword [ebp - 0x37cc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2d1c]
mov dword [ebp - 0x30b0], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x353c], eax
cmp dword [ebp - 0xf58], 0
jne 0x47fecf
cmp dword [ebp - 0x564], 0
jne 0x47fecf
and dword [ebp - 0xf08], 0
jmp 0x47fed9
mov dword [ebp - 0xf08], 1
cmp dword [ebp - 0xf08], 0xde1f
jl 0x47fefe
mov eax, dword [ebp - 0x13c]
cmp dword [ebp + eax*4 - 0xc88], 0
jne 0x47fefe
and dword [ebp - 0x26b8], 0
jmp 0x47ff08
mov dword [ebp - 0x26b8], 1
xor eax, eax
je 0x47ff38
mov eax, dword [ebp - 0x13c]
cmp dword [ebp + eax*4 - 0xc88], 0
je 0x47ff38
mov eax, dword [ebp - 0x13c]
cmp dword [ebp + eax*4 - 0xc88], 0
je 0x47ff38
mov dword [ebp - 0xf10], 1
jmp 0x47ff3f
and dword [ebp - 0xf10], 0
cmp dword [ebp - 0xf10], 0xffffffff
je 0x47ff51
mov eax, 0x981c
test eax, eax
je 0x47ff6d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcb0], 0
je 0x47ff6d
mov dword [ebp - 0xf20], 1
jmp 0x47ff74
and dword [ebp - 0xf20], 0
mov eax, dword [ebp - 0xf18]
cmp dword [ebp - 0xf20], eax
jge 0x47ff8e
mov dword [ebp - 0xb64], 1
jmp 0x47ff95
and dword [ebp - 0xb64], 0
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0xb64]
mov dword [ebp + eax*4 - 0xc88], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcb0]
cmp dword [ebp - 0xb64], eax
jge 0x47ffc9
mov dword [ebp - 0xf28], 1
jmp 0x47ffd0
and dword [ebp - 0xf28], 0
mov eax, dword [ebp - 0xc18]
cmp dword [ebp - 0xf28], eax
je 0x47ffea
mov dword [ebp - 0xf30], 1
jmp 0x47fff1
and dword [ebp - 0xf30], 0
cmp dword [ebp - 0xf30], 9
jne 0x480006
mov dword [ebp - 0xf38], 1
jmp 0x48000d
and dword [ebp - 0xf38], 0
mov eax, dword [ebp - 0xf38]
sub eax, 0x41911659
jne 0x480023
cmp dword [ebp - 0xb6c], 0
je 0x480038
cmp dword [ebp - 0xb6c], 0
je 0x480038
mov dword [ebp - 0xf40], 1
jmp 0x48003f
and dword [ebp - 0xf40], 0
cmp dword [ebp - 0xf40], 4
jge 0x480054
mov dword [ebp - 0xf48], 1
jmp 0x48005b
and dword [ebp - 0xf48], 0
mov eax, dword [ebp - 0xf48]
mov dword [ebp - 0xf50], eax
cmp dword [ebp - 0xf50], 0
jne 0x48007c
mov dword [ebp - 0xf60], 1
jmp 0x480083
and dword [ebp - 0xf60], 0
mov eax, dword [ebp - 0xf58]
cmp dword [ebp - 0xf60], eax
jg 0x4800ac
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2d1c], 0
je 0x4800ac
mov dword [ebp - 0xf68], 1
jmp 0x4800b3
and dword [ebp - 0xf68], 0
mov eax, dword [ebp - 0xf68]
mov dword [ebp - 0x2938], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc68], 0
je 0x4800e4
mov eax, 0x3fe27fce
test eax, eax
je 0x4800e4
mov dword [ebp - 0x26c0], 1
jmp 0x4800eb
and dword [ebp - 0x26c0], 0
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x30b8], eax
mov eax, dword [ebp - 0xb6c]
mov dword [ebp - 0xf70], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf70]
mov dword [ebp + eax - 0xc68], ecx
cmp dword [ebp - 0xf70], 0
jne 0x48012c
xor eax, eax
jne 0x48012c
and dword [ebp - 0xf78], 0
jmp 0x480136
mov dword [ebp - 0xf78], 1
mov eax, dword [ebp - 0xf78]
mov dword [ebp - 0x2b14], eax
jmp 0x47fc93
jmp 0x47fb85
mov dword [ebp - 0x12c], 0xd2086bd0
mov dword [ebp - 0x26c8], 0x9ecf
mov dword [ebp - 0x5f0], 0x9c8ddac0
mov dword [ebp - 0x3714], 0
mov dword [ebp - 0x30c0], 0xffffffff
mov dword [ebp - 0x254], 0
jmp 0x480197
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 4
jge 0x4801b3
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x39a8], 0x1f145ba1
jmp 0x48018a
mov dword [ebp - 0x254], 0
jmp 0x4801cc
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x4801e8
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x3c08], 0x879a2734
jmp 0x4801bf
cmp dword [ebp - 0x12c], 0
je 0x48022f
mov eax, dword [ebp - 0x12c]
add eax, 0x52a26f3f
je 0x480213
cmp dword [ebp - 0x26c8], 0
je 0x480213
mov dword [ebp - 0xf80], 1
jmp 0x48021a
and dword [ebp - 0xf80], 0
cmp dword [ebp - 0xf80], 1
jne 0x48022f
mov dword [ebp - 0xf88], 1
jmp 0x480236
and dword [ebp - 0xf88], 0
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0xf88]
jl 0x480250
mov dword [ebp - 0xf90], 1
jmp 0x480257
and dword [ebp - 0xf90], 0
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0xf90]
je 0x480271
mov dword [ebp - 0x2940], 1
jmp 0x480278
and dword [ebp - 0x2940], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x39a8]
mov dword [ebp - 0x3544], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x30c8], eax
xor eax, eax
add eax, 0x4a87
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x39a8]
jl 0x4802b9
mov dword [ebp - 0xf98], 1
jmp 0x4802c0
and dword [ebp - 0xf98], 0
mov eax, dword [ebp - 0x12c]
imul eax, dword [ebp - 0xf98]
imul eax, eax, 0xfff7
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5f0], 0
jmp 0x4802f2
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 0x19
je 0x480407
mov dword [ebp - 0x382c], 0xcfdfe92
mov dword [ebp - 0x30d0], 0x5604491d
mov dword [ebp - 0x354c], 0x5ff57440
mov dword [ebp - 0x30d8], 1
mov dword [ebp - 0x371c], 0xed25e425
mov dword [ebp - 0x30e0], 0xffffffff
mov dword [ebp - 0x3554], 0x27b1aa43
mov dword [ebp - 0xfa0], 9
mov dword [ebp - 0x12c], 0
jmp 0x480368
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jg 0x480402
mov dword [ebp - 0x30e8], 0xffffffff
mov dword [ebp - 0x37d4], 0
mov dword [ebp - 0x30f0], 0
mov dword [ebp - 0x355c], 1
mov dword [ebp - 0x30f8], 0xf34ea885
mov dword [ebp - 0x3724], 7
mov dword [ebp - 0x3100], 0xfffffffc
mov dword [ebp - 0x848], 0
jmp 0x4803d4
mov eax, dword [ebp - 0x848]
inc eax
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x848], 2
jge 0x4803f0
mov eax, dword [ebp - 0x848]
mov dword [ebp + eax*4 - 0x3b38], 0xfffffff7
jmp 0x4803c7
mov eax, dword [ebp - 0xfa0]
dec eax
mov dword [ebp - 0xfa0], eax
jmp 0x48035b
jmp 0x4802e5
mov dword [ebp - 0x428], 1
mov dword [ebp - 0x26d8], 0xffffffff
mov dword [ebp - 0x938], 0
jmp 0x480434
mov eax, dword [ebp - 0x938]
inc eax
mov dword [ebp - 0x938], eax
cmp dword [ebp - 0x938], 3
jge 0x480450
mov eax, dword [ebp - 0x938]
mov dword [ebp + eax*4 - 0x674], 3
jmp 0x480427
mov byte [ebp - 0x37a], 0
movzx eax, byte [ebp - 0x37a]
test eax, eax
je 0x480478
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x674]
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0x674]
push 4
pop esi
shl esi, 0
imul edx, dword [ebp + esi - 0x674]
push 4
pop esi
shl esi, 0
sub edx, dword [ebp + esi - 0x674]
sub ecx, edx
cmp dword [ebp + eax - 0x674], ecx
jg 0x4804d3
mov eax, 0x4dd
test eax, eax
je 0x4804d3
mov dword [ebp - 0xfa8], 1
jmp 0x4804da
and dword [ebp - 0xfa8], 0
imul eax, dword [ebp - 0xfa8], 0x5c29
add eax, 0x73620042
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x674]
jle 0x480504
mov dword [ebp - 0xfb0], 1
jmp 0x48050b
and dword [ebp - 0xfb0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x674]
cmp eax, dword [ebp - 0xfb0]
jle 0x48052c
mov dword [ebp - 0xfb8], 1
jmp 0x480533
and dword [ebp - 0xfb8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x674]
add ecx, dword [ebp - 0xfb8]
cmp dword [ebp + eax - 0x674], ecx
jg 0x480561
mov dword [ebp - 0xfc0], 1
jmp 0x480568
and dword [ebp - 0xfc0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x674]
imul eax, dword [ebp - 0xfc0]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x674]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x674]
jl 0x4805a4
mov dword [ebp - 0xfc8], 1
jmp 0x4805ab
and dword [ebp - 0xfc8], 0
cmp dword [ebp - 0xfc8], 0x6e40
je 0x4805c3
mov dword [ebp - 0xfd0], 1
jmp 0x4805ca
and dword [ebp - 0xfd0], 0
mov eax, dword [ebp - 0xfd0]
sub eax, 0x969b
je 0x4805f3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x674], 0
je 0x4805f3
mov dword [ebp - 0xfd8], 1
jmp 0x4805fa
and dword [ebp - 0xfd8], 0
mov eax, dword [ebp - 0xfd8]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x428]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x674]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x674]
je 0x48064c
mov byte [ebp - 0x37c], 0
movzx eax, byte [ebp - 0x37c]
test eax, eax
je 0x48064a
push 0x2673
push 0x173d
call dword [sym.imp.KERNEL32.dll_Beep]
jmp 0x4806c2
mov dword [ebp - 0x2a38], 0xf0a64418
mov dword [ebp - 0x428], 2
jmp 0x48066f
mov eax, dword [ebp - 0x428]
dec eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0
jl 0x4806c2
mov dword [ebp - 0x26d0], 0xfffffff9
mov dword [ebp - 0x26d0], 0x9cd17cd9
mov eax, dword [ebp - 0x428]
mov ecx, dword [ebp - 0x2a38]
cmp dword [ebp + eax*4 - 0x674], ecx
jne 0x4806ad
mov dword [ebp - 0xfe0], 1
jmp 0x4806b4
and dword [ebp - 0xfe0], 0
mov eax, dword [ebp - 0xfe0]
mov dword [ebp - 0x26d8], eax
jmp 0x480662
mov dword [ebp - 0xfe8], 0x6715f0ed
mov dword [ebp - 0x1000], 1
mov dword [ebp - 0x26e0], 0xdd664087
mov dword [ebp - 0x224], 0
jmp 0x4806f9
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jge 0x480715
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xa4c], 0x1d83
jmp 0x4806ec
mov dword [ebp - 0x224], 0
jmp 0x48072e
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 1
jge 0x48074a
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x1008], 0
jmp 0x480721
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4c]
mov dword [ebp - 0x3564], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4c]
mov dword [ebp - 0xfe8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4c]
cmp eax, dword [ebp - 0xfe8]
jg 0x480812
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa4c], 0
je 0x480809
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xa4c]
cmp dword [ebp + eax - 0xa4c], ecx
jl 0x4807c8
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x4807c8
and dword [ebp - 0xff0], 0
mov eax, dword [ebp - 0x1000]
cmp dword [ebp - 0xff0], eax
jg 0x4807f6
and dword [ebp - 0x2948], 0
jmp 0x48081c
mov dword [ebp - 0x2948], 1
mov eax, dword [ebp - 0x1000]
mov dword [ebp - 0x3108], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4c]
mov dword [ebp - 0x38a4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1008]
mov dword [ebp - 0x3110], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1008]
mov dword [ebp - 0x26e0], eax
mov dword [ebp - 0x25c], 0
jmp 0x48087a
cmp dword [ebp - 0x25c], 1
jge 0x480896
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0xca0], 0x5dcec3d7
jmp 0x48086d
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x1048], 0x307d7c11
mov dword [ebp - 0x1028], 0x193fe696
mov dword [ebp - 0x430], 0
jmp 0x4808cd
mov dword [ebp - 0x5e4], 0x4dd03248
mov dword [ebp - 0xe54], 2
mov dword [ebp - 0xe50], 2
mov dword [ebp - 0xe4c], 2
mov dword [ebp - 0xe48], 2
mov dword [ebp - 0x2574], 0xfffffffc
mov dword [ebp - 0x257c], 0xfffffffb
mov byte [ebp - 0x409], 0
movzx eax, byte [ebp - 0x409]
test eax, eax
je 0x48738f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
cmp dword [ebp - 0x5e4], 0
jne 0x4874ed
push 4
pop eax
imul eax, eax, 3
imul eax, dword [ebp + eax - 0xe54], 0
sub eax, 0xfffa
jne 0x4873ca
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe54], 0
jne 0x4873ca
and dword [ebp - 0x19e0], 0
jmp 0x4873d4
mov dword [ebp - 0x19e0], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe54]
imul eax, dword [ebp - 0x19e0]
cmp eax, 0x7c14
jge 0x4873fb
mov dword [ebp - 0x19e8], 1
jmp 0x487402
and dword [ebp - 0x19e8], 0
mov eax, dword [ebp - 0x19e8]
sub eax, dword [ebp - 0x5e4]
cmp dword [ebp - 0x5e4], eax
jle 0x487422
mov dword [ebp - 0x256c], 1
jmp 0x487429
and dword [ebp - 0x256c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe54]
mov dword [ebp - 0x2e4c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe54]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0xe54]
cmp dword [ebp - 0x5e4], eax
jle 0x48746a
mov dword [ebp - 0x19f0], 1
jmp 0x487471
and dword [ebp - 0x19f0], 0
mov eax, dword [ebp - 0x5e4]
cmp dword [ebp - 0x19f0], eax
jle 0x48748b
mov dword [ebp - 0x19f8], 1
jmp 0x487492
and dword [ebp - 0x19f8], 0
cmp dword [ebp - 0x19f8], 0xe6f7fbf2
jne 0x4874aa
mov dword [ebp - 0x1a00], 1
jmp 0x4874b1
and dword [ebp - 0x1a00], 0
cmp dword [ebp - 0x1a00], 0xfffa
jae 0x4874c9
mov dword [ebp - 0x1a08], 1
jmp 0x4874d0
and dword [ebp - 0x1a08], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe54]
cmp dword [ebp - 0x1a08], eax
jg 0x4874ed
and dword [ebp - 0x1a10], 0
jmp 0x4874f7
mov dword [ebp - 0x1a10], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe54]
cmp dword [ebp - 0x1a10], eax
jle 0x487518
mov dword [ebp - 0x1a18], 1
jmp 0x48751f
and dword [ebp - 0x1a18], 0
mov eax, dword [ebp - 0x2574]
cmp dword [ebp - 0x1a18], eax
je 0x487539
mov dword [ebp - 0x1a20], 1
jmp 0x487540
and dword [ebp - 0x1a20], 0
mov eax, dword [ebp - 0x1a20]
mov dword [ebp - 0x257c], eax
mov dword [ebp - 0x884], 0xf9b3198a
mov dword [ebp - 0x258c], 0xe136dc99
mov dword [ebp - 0x884], 0
jmp 0x487579
mov eax, dword [ebp - 0x884]
dec eax
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0x884], 0xffffffe9
je 0x487664
mov dword [ebp - 0x5ec], 0xfffffffd
mov dword [ebp - 0x1a40], 0x1c3fc023
mov dword [ebp - 0x5ec], 0
jmp 0x4875b3
mov eax, dword [ebp - 0x5ec]
dec eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 0xffffffe9
jl 0x487654
mov dword [ebp - 0x2584], 0xd6923607
mov dword [ebp - 0x2594], 0xb0ae28de
cmp dword [ebp - 0x2584], 0
je 0x4875f5
cmp dword [ebp - 0x5ec], 0x54a20a29
jl 0x4875f5
mov dword [ebp - 0x1a28], 1
jmp 0x4875fc
and dword [ebp - 0x1a28], 0
cmp dword [ebp - 0x1a28], 1
je 0x487611
mov dword [ebp - 0x1a30], 1
jmp 0x487618
and dword [ebp - 0x1a30], 0
cmp dword [ebp - 0x1a30], 0xed99
jle 0x487630
mov dword [ebp - 0x1a38], 1
jmp 0x487637
and dword [ebp - 0x1a38], 0
mov eax, dword [ebp - 0x1a38]
mov dword [ebp - 0x258c], eax
mov eax, dword [ebp - 0x2594]
mov dword [ebp - 0x1a40], eax
jmp 0x4875a6
cmp dword [ebp - 0x1a40], 0
je 0x48765f
jmp 0x487664
jmp 0x48756c
xor ecx, ecx
call fcn.0044a348
push eax
call fcn.0048f432
pop ecx
mov dword [ebp - 8], 0xfff8
mov dword [ebp - 0xb48], 0xfffa
mov dword [ebp - 0x894], 0xfffffff6
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x504], 0x95f87b70
mov dword [ebp - 0x2e54], 0xdb12629
mov dword [ebp - 0x88c], 0
jmp 0x4876c4
mov eax, dword [ebp - 0x88c]
inc eax
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 2
jge 0x4876e0
mov eax, dword [ebp - 0x88c]
mov dword [ebp + eax*4 - 0x3338], 1
jmp 0x4876b7
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2e5c], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 8], eax
jne 0x4876f7
cmp dword [ebp - 8], 0
jne 0x48775c
cmp dword [ebp - 8], 0
jne 0x487709
mov dword [ebp - 0x1a48], 1
jmp 0x487710
and dword [ebp - 0x1a48], 0
mov eax, dword [ebp - 0x1a48]
neg eax
mov dword [ebp - 0xb48], eax
mov eax, dword [ebp - 0xb48]
imul eax, dword [ebp - 8]
test eax, eax
je 0x48773e
mov eax, 0xffff
test eax, eax
jne 0x48773e
and dword [ebp - 0x1a50], 0
jmp 0x487748
mov dword [ebp - 0x1a50], 1
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x1a50], eax
jl 0x48775c
and dword [ebp - 0x1a58], 0
jmp 0x487766
mov dword [ebp - 0x1a58], 1
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x1a58], eax
jle 0x48777d
mov dword [ebp - 0x1a60], 1
jmp 0x487784
and dword [ebp - 0x1a60], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x1a60], eax
jle 0x48779b
mov dword [ebp - 0x1a68], 1
jmp 0x4877a2
and dword [ebp - 0x1a68], 0
mov eax, dword [ebp - 0x1a68]
sub eax, dword [ebp - 8]
jne 0x4877bf
cmp dword [ebp - 0x894], 0
jne 0x4877bf
and dword [ebp - 0x1a70], 0
jmp 0x4877c9
mov dword [ebp - 0x1a70], 1
mov eax, dword [ebp - 0x1a70]
dec eax
cmp eax, 0x951f
jl 0x4877e3
mov dword [ebp - 0x259c], 1
jmp 0x4877ea
and dword [ebp - 0x259c], 0
cmp dword [ebp - 0x894], 0
jne 0x487814
cmp dword [ebp - 8], 0
jne 0x487814
cmp dword [ebp - 0xb48], 0
jne 0x487814
mov eax, 0xd40a7f
test eax, eax
jne 0x487814
and dword [ebp - 0x1a78], 0
jmp 0x48781e
mov dword [ebp - 0x1a78], 1
mov eax, dword [ebp - 0x1a78]
mov dword [ebp - 0x894], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x894], eax
jle 0x487841
mov dword [ebp - 0x1a80], 1
jmp 0x487848
and dword [ebp - 0x1a80], 0
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x1a80]
add eax, dword [ebp - 8]
imul eax, dword [ebp - 8]
imul eax, dword [ebp - 8]
add eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jge 0x487870
mov dword [ebp - 0x1a88], 1
jmp 0x487877
and dword [ebp - 0x1a88], 0
mov eax, dword [ebp - 0x1a88]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x2e64], eax
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 0x504], eax
mov dword [ebp - 0x4fc], 0
jmp 0x4878b2
mov eax, dword [ebp - 0x4fc]
inc eax
mov dword [ebp - 0x4fc], eax
cmp dword [ebp - 0x4fc], 0xa
jl 0x487921
mov dword [ebp - 0x504], 0
jmp 0x4878d4
mov eax, dword [ebp - 0x504]
inc eax
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 2
jge 0x4878f0
mov eax, dword [ebp - 0x504]
mov dword [ebp + eax*4 - 0x3338], 0xffffffff
jmp 0x4878c7
mov dword [ebp - 8], 0
jmp 0x487900
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jg 0x48791f
mov dword [ebp - 0x1a90], 1
mov eax, dword [ebp - 0x1a90]
inc eax
mov dword [ebp - 0x1a90], eax
jmp 0x4878f9
jmp 0x4878a5
mov dword [ebp - 0x1ac], 0xfffffff9
mov dword [ebp - 0x25ac], 7
mov dword [ebp - 0x1a4], 0
jmp 0x48794e
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x48796a
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x28e4], 0xa473eb90
jmp 0x487941
mov dword [ebp - 0x1a4], 0
jmp 0x487983
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x48799f
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x25a4], 0xffffffff
jmp 0x487976
mov dword [ebp - 0x1ac], 0xffffffe8
jmp 0x4879b8
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 9
jg 0x487a68
mov dword [ebp - 0x468], 0xffffffff
mov byte [ebp - 0x349], 0
movzx eax, byte [ebp - 0x349]
test eax, eax
je 0x4879f3
push 0x2138
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov dword [ebp - 0x468], 1
jmp 0x487a0c
mov eax, dword [ebp - 0x468]
dec eax
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0
jl 0x487a63
mov eax, dword [ebp - 0x468]
cmp dword [ebp + eax*4 - 0x28e4], 0
je 0x487a39
mov eax, dword [ebp - 0x468]
cmp dword [ebp + eax*4 - 0x28e4], 0
je 0x487a37
jmp 0x487a63
jmp 0x487a56
mov byte [ebp - 0x38b], 0
movzx eax, byte [ebp - 0x38b]
test eax, eax
je 0x487a56
push 0x1563
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp dword [ebp - 0x468], 0
je 0x487a61
jmp 0x4879ff
jmp 0x4879ff
jmp 0x4879ab
mov dword [ebp - 0x1ac], 1
jmp 0x487a81
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jl 0x487ab9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x25a4], 0x13244d51
mov dword [ebp - 0x25ac], 0x13244d51
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp + eax*4 - 0x28e4], 0
je 0x487ab7
jmp 0x487a74
jmp 0x487a74
mov dword [ebp - 0x2e6c], 0xfffffff8
mov dword [ebp - 0x2e74], 0xffffffff
mov dword [ebp - 0x2e7c], 0xbacd7953
mov dword [ebp - 0x2e84], 0x6a485bf2
mov dword [ebp - 0x2e8c], 0xf1813f1a
mov dword [ebp - 0x2e94], 0x507e6732
mov dword [ebp - 0x1a98], 0xfffffffa
mov dword [ebp - 0x89c], 0
jmp 0x487b18
mov eax, dword [ebp - 0x89c]
inc eax
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 4
jge 0x487b34
mov eax, dword [ebp - 0x89c]
mov dword [ebp + eax*4 - 0x3cd4], 0
jmp 0x487b0b
mov eax, dword [ebp - 0x1a98]
inc eax
mov dword [ebp - 0x1a98], eax
mov dword [ebp - 0x1ab8], 0xffffffff
mov dword [ebp - 0x2ec], 0x2c9cc141
mov dword [ebp - 0xf4], 0x8872
mov dword [ebp - 0x1ae8], 0x9b8a5142
mov dword [ebp - 0x25bc], 0
mov dword [ebp - 0x1b4], 0
jmp 0x487b8c
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x487ba8
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x2cb0], 0x4272ba7
jmp 0x487b7f
mov dword [ebp - 0x1b4], 0
jmp 0x487bc1
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x487bdd
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x36e8], 0xd2fc5c3c
jmp 0x487bb4
mov eax, dword [ebp - 0x1ab8]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0xdc75
jne 0x487c0a
cmp dword [ebp - 0xf4], 0
je 0x487c0a
mov dword [ebp - 0x1aa0], 1
jmp 0x487c11
and dword [ebp - 0x1aa0], 0
mov eax, dword [ebp - 0xf4]
sub eax, 0x505a
cmp dword [ebp - 0x1aa0], eax
jg 0x487c30
mov dword [ebp - 0x1aa8], 1
jmp 0x487c37
and dword [ebp - 0x1aa8], 0
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0x1aa8]
je 0x487c5a
cmp dword [ebp - 0x2ec], 0
je 0x487c5a
mov dword [ebp - 0x1ab0], 1
jmp 0x487c61
and dword [ebp - 0x1ab0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1ab0]
mov dword [ebp + eax - 0x2cb0], ecx
mov dword [ebp - 0x2ec], 0
jmp 0x487c8c
cmp dword [ebp - 0x2ec], 8
jl 0x487e39
mov dword [ebp - 0x110], 0x2cf45657
mov dword [ebp - 0xf4], 0
jmp 0x487cbc
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x487cd8
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x2cb0], 1
jmp 0x487caf
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x2e9c], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x2ea4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf4]
mov dword [ebp + eax - 0x36e8], ecx
cmp dword [ebp - 0x110], 0
jb 0x487d13
cmp dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x2eac], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x2eb4], eax
mov eax, dword [ebp - 0x1ab8]
mov dword [ebp - 0x2ebc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x36e8], 0
jne 0x487d62
cmp dword [ebp - 0x110], 0
jne 0x487d62
cmp dword [ebp - 0xf4], 0
jne 0x487d62
and dword [ebp - 0x1ac0], 0
jmp 0x487d6c
mov dword [ebp - 0x1ac0], 1
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x1ac0], eax
jg 0x487d86
mov dword [ebp - 0x1ad0], 1
jmp 0x487d8d
and dword [ebp - 0x1ad0], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x1ac8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1ac8]
mov dword [ebp + eax - 0x2cb0], ecx
mov eax, dword [ebp - 0x1ac8]
add eax, dword [ebp - 0x1ad0]
cmp eax, dword [ebp - 0x110]
je 0x487dcc
mov dword [ebp - 0x1ad8], 1
jmp 0x487dd3
and dword [ebp - 0x1ad8], 0
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x1ad8]
cmp eax, dword [ebp - 0x110]
je 0x487df4
mov dword [ebp - 0x2ec4], 0xcec79e67
mov dword [ebp - 0x1af0], 0
mov dword [ebp - 0x1bc], 0
jmp 0x487e66
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x487e82
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x3ae8], 1
jmp 0x487e59
mov dword [ebp - 0x1bc], 0
jmp 0x487e9b
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x487eb7
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x3b50], 0x43cdf98a
jmp 0x487e8e
mov eax, dword [ebp - 0x1af0]
dec eax
mov dword [ebp - 0x1af0], eax
mov byte [ebp - 0x34b], 0
movzx eax, byte [ebp - 0x34b]
test eax, eax
je 0x487ede
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0xcd4], 0x9ff60657
mov dword [ebp - 0xcd0], 0x9ff60657
mov dword [ebp - 0xccc], 0x9ff60657
mov dword [ebp - 0xcc8], 0x9ff60657
mov dword [ebp - 0x1c4], 0
jmp 0x487f1f
cmp dword [ebp - 0x1c4], 3
jge 0x487f3b