Function at 0x469e45
Capabilities:
Accept command line arguments
Check os version
Compare security identifiers
Get disk information
Get file attributes
Get file system object information
Hide graphical window
Read .ini file
Resume thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3870
call fcn.004a1640
push esi
push edi
mov dword [ebp - 0xd8], 0xfffffffb
mov dword [ebp - 0x1dac], 2
mov dword [ebp - 0x4c0], 0xfffffff9
mov dword [ebp - 0x2228], 0xffffffff
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0xd8]
jl 0x469ea3
cmp dword [ebp - 0xd8], 0
jne 0x469ea3
and dword [ebp - 0xfc8], 0
jmp 0x469ead
mov dword [ebp - 0xfc8], 1
mov eax, dword [ebp - 0xfc8]
dec eax
jne 0x469ec6
push 9
pop eax
test eax, eax
jne 0x469ec6
and dword [ebp - 0x1d94], 0
jmp 0x469ed0
mov dword [ebp - 0x1d94], 1
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x1d94], eax
jg 0x469eea
mov dword [ebp - 0x1d9c], 1
jmp 0x469ef1
and dword [ebp - 0x1d9c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x1d9c], eax
jl 0x469f0b
mov dword [ebp - 0x1da4], 1
jmp 0x469f12
and dword [ebp - 0x1da4], 0
mov eax, dword [ebp - 0x1da4]
sub eax, dword [ebp - 0xd8]
je 0x469f35
cmp dword [ebp - 0xd8], 0
je 0x469f35
mov dword [ebp - 0x2148], 1
jmp 0x469f3c
and dword [ebp - 0x2148], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x30d0], eax
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0xd8]
mov dword [ebp - 0x1dac], eax
mov eax, dword [ebp - 0x1dac]
imul eax, dword [ebp - 0x4c0]
cmp eax, 0xb7b8
jg 0x469f7b
mov dword [ebp - 0x1db4], 1
jmp 0x469f82
and dword [ebp - 0x1db4], 0
mov eax, dword [ebp - 0x4c0]
cmp dword [ebp - 0x1db4], eax
jle 0x469f9c
mov dword [ebp - 0x1dec], 1
jmp 0x469fa3
and dword [ebp - 0x1dec], 0
cmp dword [ebp - 0x1dec], 0x8e1b8814
jae 0x469fbb
mov dword [ebp - 0x1df4], 1
jmp 0x469fc2
and dword [ebp - 0x1df4], 0
mov eax, dword [ebp - 0x1df4]
sub eax, 0xf5ec
cmp eax, dword [ebp - 0x4c0]
jl 0x469fe1
mov dword [ebp - 0x1dfc], 1
jmp 0x469fe8
and dword [ebp - 0x1dfc], 0
mov eax, dword [ebp - 0x1dfc]
sub eax, dword [ebp - 0x4c0]
add eax, dword [ebp - 0x4c0]
cmp eax, 0xcfb6
jle 0x46a00d
mov dword [ebp - 0x1e04], 1
jmp 0x46a014
and dword [ebp - 0x1e04], 0
cmp dword [ebp - 0x1e04], 0xcd8c45cd
jae 0x46a02c
mov dword [ebp - 0x1e0c], 1
jmp 0x46a033
and dword [ebp - 0x1e0c], 0
mov eax, dword [ebp - 0x1e0c]
mov dword [ebp - 0x2228], eax
mov byte [ebp - 0x35a], 0
movzx eax, byte [ebp - 0x35a]
test eax, eax
je 0x46a05e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
mov dword [ebp - 0x40], 6
mov dword [ebp - 0x764], 0xffffffff
mov dword [ebp - 0x5d4], 0x30f888c5
push 3
lea ecx, [ebp - 0x2b6c]
call fcn.00432d4c
mov dword [ebp - 0x60], 0
jmp 0x46a096
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x46a0ac
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x315c], 0x1b3c692b
jmp 0x46a08f
mov dword [ebp - 0x60], 0
jmp 0x46a0bc
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x46a0d2
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x37b8], 0xc280563a
jmp 0x46a0b5
mov dword [ebp - 0x60], 0
jmp 0x46a0e2
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x46a0fe
push dword [ebp - 0x60]
lea ecx, [ebp - 0x2b6c]
call fcn.00432e3a
mov dword [eax], 0x38c8
jmp 0x46a0db
mov dword [ebp - 0x40], 2
jmp 0x46a10e
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x46a3d2
push 3
lea ecx, [ebp - 0x2b54]
call fcn.00432d4c
mov dword [ebp - 0x5cc], 1
mov dword [ebp - 0x48c], 0x26fb
mov dword [ebp - 0x2238], 0
mov dword [ebp - 0x5c8], 0
jmp 0x46a15c
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 3
jge 0x46a17b
push dword [ebp - 0x5c8]
lea ecx, [ebp - 0x2b54]
call fcn.00432e3a
and dword [eax], 0
jmp 0x46a14f
mov byte [ebp - 0x3c1], 0
movzx eax, byte [ebp - 0x3c1]
test eax, eax
je 0x46a195
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [ebp - 0x764], 0x9d70cadd
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x764], eax
jl 0x46a1b6
mov dword [ebp - 0x1e14], 1
jmp 0x46a1bd
and dword [ebp - 0x1e14], 0
cmp dword [ebp - 0x1e14], 0
je 0x46a1d3
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2fd0], eax
xor eax, eax
jne 0x46a1e5
cmp dword [ebp - 0x5cc], 0
jne 0x46a1e5
and dword [ebp - 0x1e1c], 0
jmp 0x46a1ef
mov dword [ebp - 0x1e1c], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x1e1c], eax
jle 0x46a206
mov dword [ebp - 0x1e24], 1
jmp 0x46a20d
and dword [ebp - 0x1e24], 0
mov eax, dword [ebp - 0x48c]
imul eax, dword [ebp - 0x1e24]
cmp eax, dword [ebp - 0x40]
je 0x46a234
cmp dword [ebp - 0x48c], 0
je 0x46a234
mov dword [ebp - 0x2230], 1
jmp 0x46a23b
and dword [ebp - 0x2230], 0
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x351c], eax
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x5d4]
neg eax
jne 0x46a26f
cmp dword [ebp - 0x764], 0
jne 0x46a26f
and dword [ebp - 0x1e34], 0
jmp 0x46a279
mov dword [ebp - 0x1e34], 1
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x315c]
mov dword [ebp - 0x1e2c], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1e2c]
mov dword [ebp + eax*4 - 0x315c], ecx
mov eax, dword [ebp - 0x1e2c]
cmp eax, dword [ebp - 0x1e34]
jne 0x46a2b3
mov dword [ebp - 0x1e3c], 1
jmp 0x46a2ba
and dword [ebp - 0x1e3c], 0
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x1e3c], eax
jge 0x46a2da
mov eax, 0x39d3
test eax, eax
jne 0x46a2da
and dword [ebp - 0x1e44], 0
jmp 0x46a2e4
mov dword [ebp - 0x1e44], 1
mov eax, dword [ebp - 0x1e44]
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 0x5cab
jg 0x46a308
mov dword [ebp - 0x1e4c], 1
jmp 0x46a30f
and dword [ebp - 0x1e4c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x1e4c], eax
jle 0x46a326
mov dword [ebp - 0x1e54], 1
jmp 0x46a32d
and dword [ebp - 0x1e54], 0
push 0
lea ecx, [ebp - 0x2b54]
call fcn.00432e3a
mov dword [ebp - 0xafc], eax
mov eax, dword [ebp - 0xafc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xafc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xafc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1e54]
jge 0x46a36d
mov dword [ebp - 0x1e5c], 1
jmp 0x46a374
and dword [ebp - 0x1e5c], 0
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x1e5c], eax
jg 0x46a38e
mov dword [ebp - 0x1e64], 1
jmp 0x46a395
and dword [ebp - 0x1e64], 0
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x1e64], eax
jl 0x46a3af
mov dword [ebp - 0x1e6c], 1
jmp 0x46a3b6
and dword [ebp - 0x1e6c], 0
mov eax, dword [ebp - 0x1e6c]
mov dword [ebp - 0x2238], eax
lea ecx, [ebp - 0x2b54]
call fcn.00432e1e
jmp 0x46a107
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2fd8], eax
push 0
lea ecx, [ebp - 0x2b6c]
call fcn.00432e3a
mov dword [ebp - 0xb04], eax
mov eax, dword [ebp - 0xb04]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb04]
mov dword [ecx], eax
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0xb04]
cmp eax, dword [ecx]
jne 0x46a427
cmp dword [ebp - 0x40], 0
jne 0x46a427
cmp dword [ebp - 0x5d4], 0
jne 0x46a427
and dword [ebp - 0x1e74], 0
jmp 0x46a431
mov dword [ebp - 0x1e74], 1
mov eax, dword [ebp - 0x5d4]
cmp dword [ebp - 0x1e74], eax
je 0x46a44b
mov dword [ebp - 0x1e7c], 1
jmp 0x46a452
and dword [ebp - 0x1e7c], 0
mov eax, 0x8770
sub eax, dword [ebp - 0x1e7c]
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0x2b6c]
call fcn.00432e1e
mov dword [ebp - 0x11c], 0xf390197f
push 1
lea ecx, [ebp - 0x90c]
call fcn.00432d4c
mov dword [ebp - 0x1ecc], 0xac06e326
mov dword [ebp - 0x2248], 0xfffffffb
mov dword [ebp - 0x3300], 4
mov dword [ebp - 0xb1c], 0x6bc59458
mov dword [ebp - 0xb24], 0x4b5a
mov dword [ebp - 0x2268], 4
mov dword [ebp - 0x2fe0], 7
mov dword [ebp - 0x3480], 0
mov dword [ebp - 0x2fe8], 0xfa8726ab
mov dword [ebp - 0x2270], 0xaeb8efb6
mov dword [ebp - 0x3310], 0x3ec2cfcc
push 2
lea ecx, [ebp - 0x316c]
call fcn.00432d4c
mov dword [ebp - 0xc70], 0
mov dword [ebp - 0x2280], 0xddaad19d
mov dword [ebp - 0x2ff0], 0x595c
mov dword [ebp - 0x2260], 0x3af4
mov dword [ebp - 0x3550], 1
mov dword [ebp - 0xb14], 0x4d04141e
mov dword [ebp - 0xc48], 0xffffffff
mov dword [ebp - 0x2278], 0x797ada24
mov dword [ebp - 8], 0
jmp 0x46a55d
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x46a576
push dword [ebp - 8]
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
or dword [eax], 0xffffffff
jmp 0x46a556
mov dword [ebp - 8], 0
jmp 0x46a586
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x46a59c
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x229c], 0x8753
jmp 0x46a57f
mov dword [ebp - 8], 0
jmp 0x46a5ac
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x46a5c2
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x20ac], 7
jmp 0x46a5a5
mov dword [ebp - 8], 0
jmp 0x46a5d2
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x46a5e8
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3574], 6
jmp 0x46a5cb
mov dword [ebp - 8], 0
jmp 0x46a5f8
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x46a614
push dword [ebp - 8]
lea ecx, [ebp - 0x316c]
call fcn.00432e3a
mov dword [eax], 0xdd70
jmp 0x46a5f1
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x2ff8], eax
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
mov dword [eax], 0x89e022a5
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x3320], eax
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
cmp dword [eax], 0
jne 0x46a66a
mov dword [ebp - 0x1e84], 1
jmp 0x46a671
and dword [ebp - 0x1e84], 0
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
mov ecx, dword [ebp - 0x1e84]
cmp ecx, dword [eax]
je 0x46a694
mov dword [ebp - 0x1e8c], 1
jmp 0x46a69b
and dword [ebp - 0x1e8c], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x1e8c], eax
jge 0x46a6b5
mov dword [ebp - 0x1e94], 1
jmp 0x46a6bc
and dword [ebp - 0x1e94], 0
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
mov ecx, dword [ebp - 0x1e94]
cmp ecx, dword [eax]
jg 0x46a6df
mov dword [ebp - 0x1e9c], 1
jmp 0x46a6e6
and dword [ebp - 0x1e9c], 0
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
mov ecx, dword [ebp - 0x1e9c]
cmp ecx, dword [eax]
jg 0x46a709
mov dword [ebp - 0x1ea4], 1
jmp 0x46a710
and dword [ebp - 0x1ea4], 0
mov esi, dword [ebp - 0x1ea4]
neg esi
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
imul esi, dword [eax]
cmp esi, dword [ebp - 0x11c]
jle 0x46a73c
mov dword [ebp - 0xb0c], 1
jmp 0x46a743
and dword [ebp - 0xb0c], 0
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
mov ecx, dword [ebp - 0xb0c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0xb0c], eax
jl 0x46a772
mov dword [ebp - 0x1eac], 1
jmp 0x46a779
and dword [ebp - 0x1eac], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x1eac], eax
jne 0x46a793
mov dword [ebp - 0x1eb4], 1
jmp 0x46a79a
and dword [ebp - 0x1eb4], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x1eb4], eax
je 0x46a7b4
mov dword [ebp - 0x1ebc], 1
jmp 0x46a7bb
and dword [ebp - 0x1ebc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x229c]
dec eax
mov dword [ebp - 0x1ec4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1ec4]
mov dword [ebp + eax - 0x229c], ecx
mov eax, dword [ebp - 0x1ebc]
mov dword [ebp - 0x1ecc], eax
mov eax, dword [ebp - 0x1ec4]
sub eax, dword [ebp - 0x1ecc]
cmp eax, dword [ebp - 0x11c]
jle 0x46a80e
mov dword [ebp - 0x2240], 1
jmp 0x46a815
and dword [ebp - 0x2240], 0
cmp dword [ebp - 0x11c], 0xfffffff7
jg 0x46a837
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x20ac], 0
jne 0x46a837
and dword [ebp - 0x1ed4], 0
jmp 0x46a841
mov dword [ebp - 0x1ed4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20ac]
imul eax, dword [ebp - 0x1ed4]
mov dword [ebp - 0x2248], eax
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
mov eax, dword [eax]
mov dword [ebp - 0x2250], eax
mov eax, dword [ebp - 0xb14]
mov dword [ebp - 0x2258], eax
mov eax, dword [ebp - 0xb14]
inc eax
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp - 0x2250]
cmp eax, dword [ebp - 0x2258]
jl 0x46a8a3
mov dword [ebp - 0x1c14], 1
jmp 0x46a8aa
and dword [ebp - 0x1c14], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x229c]
cmp dword [ebp - 0x2260], eax
jge 0x46a8cb
mov dword [ebp - 0x1fdc], 1
jmp 0x46a8d2
and dword [ebp - 0x1fdc], 0
mov eax, dword [ebp - 0x2268]
cmp dword [ebp - 0x1fdc], eax
jg 0x46a8ec
mov dword [ebp - 0x1fa0], 1
jmp 0x46a8f3
and dword [ebp - 0x1fa0], 0
mov esi, dword [ebp - 0xc48]
mov eax, dword [ebp - 0x1fa0]
sub eax, dword [ebp - 0x2270]
sub esi, eax
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
cmp esi, dword [eax]
je 0x46a924
mov dword [ebp - 0x16e0], 1
jmp 0x46a92b
and dword [ebp - 0x16e0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x16e0]
mov dword [ebp + eax - 0x3574], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3574]
mov dword [ebp - 0x3000], eax
mov eax, dword [ebp - 0xb1c]
mov dword [ebp - 0x33bc], eax
mov dword [ebp - 0xb1c], 0x355daa1c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20ac]
cmp dword [ebp - 0xb1c], eax
jle 0x46a986
mov dword [ebp - 0x1c04], 1
jmp 0x46a98d
and dword [ebp - 0x1c04], 0
mov eax, dword [ebp - 0xc48]
cmp dword [ebp - 0x1c04], eax
jge 0x46a9a7
mov dword [ebp - 0xc50], 1
jmp 0x46a9ae
and dword [ebp - 0xc50], 0
mov eax, dword [ebp - 0x2278]
cmp dword [ebp - 0xc50], eax
jle 0x46a9c8
mov dword [ebp - 0x1c0c], 1
jmp 0x46a9cf
and dword [ebp - 0x1c0c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1c0c]
sub ecx, dword [ebp + eax - 0x20ac]
add ecx, 0x15d2c357
cmp ecx, dword [ebp - 0x2280]
je 0x46aa02
mov eax, 0x63c3
test eax, eax
jne 0x46aa02
and dword [ebp - 0xc58], 0
jmp 0x46aa0c
mov dword [ebp - 0xc58], 1
mov eax, dword [ebp - 0xc70]
cmp eax, dword [ebp - 0xc58]
jge 0x46aa26
mov dword [ebp - 0xc60], 1
jmp 0x46aa2d
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0x1c14]
cmp eax, dword [ebp - 0xc60]
jl 0x46aa47
mov dword [ebp - 0x1c1c], 1
jmp 0x46aa4e
and dword [ebp - 0x1c1c], 0
mov eax, dword [ebp - 0xb24]
mov dword [ebp - 0x2288], eax
mov eax, dword [ebp - 0x1c1c]
mov dword [ebp - 0x2290], eax
mov eax, dword [ebp - 0xb24]
inc eax
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0x2288]
cmp eax, dword [ebp - 0x2290]
jne 0x46aa8d
mov dword [ebp - 0xc68], 1
jmp 0x46aa94
and dword [ebp - 0xc68], 0
push 0
lea ecx, [ebp - 0x90c]
call fcn.00432e3a
mov ecx, dword [ebp - 0xc68]
cmp ecx, dword [eax]
jg 0x46aab7
mov dword [ebp - 0x1c24], 1
jmp 0x46aabe
and dword [ebp - 0x1c24], 0
mov eax, dword [ebp - 0x1c24]
mov dword [ebp - 0xc70], eax
lea ecx, [ebp - 0x316c]
call fcn.00432e1e
lea ecx, [ebp - 0x90c]
call fcn.00432e1e
mov dword [ebp - 0xcc], 0xfffffffb
mov dword [ebp - 0x1ca4], 2
mov dword [ebp - 0xc2c], 0xfffe
mov dword [ebp - 0xc28], 0xfffe
mov dword [ebp - 0xc24], 0xfffe
mov dword [ebp - 0xc20], 0xfffe
push 1
lea ecx, [ebp - 0xc00]
call fcn.00432d4c
mov dword [ebp - 0xdc], 6
mov dword [ebp - 0x538], 0x133f29c8
mov dword [ebp - 0xc98], 1
push 4
lea ecx, [ebp - 0x2684]
call fcn.00432d4c
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x2474], 3
mov dword [ebp - 0x1e8], 0
jmp 0x46ab81
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 1
jge 0x46aba3
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0xc00]
call fcn.00432e3a
mov dword [eax], 7
jmp 0x46ab74
mov dword [ebp - 0x1e8], 0
jmp 0x46abbc
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 4
jge 0x46abdb
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0x2684]
call fcn.00432e3a
or dword [eax], 0xffffffff
jmp 0x46abaf
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc2c]
mov dword [ebp - 0x1c2c], eax
push 0
lea ecx, [ebp - 0xc00]
call fcn.00432e3a
mov ecx, dword [ebp - 0x1c2c]
mov dword [eax], ecx
cmp dword [ebp - 0x1c2c], 0
jne 0x46ad4d
push 0
lea ecx, [ebp - 0xc00]
call fcn.00432e3a
cmp dword [eax], 1
jge 0x46ac2d
mov dword [ebp - 0xc78], 1
jmp 0x46ac34
and dword [ebp - 0xc78], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc2c]
cmp eax, dword [ebp - 0xc78]
jl 0x46ac54
mov dword [ebp - 0x1c34], 1
jmp 0x46ac5b
and dword [ebp - 0x1c34], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc2c]
cmp dword [ebp - 0x1c34], eax
jne 0x46ac7b
mov dword [ebp - 0xc80], 1
jmp 0x46ac82
and dword [ebp - 0xc80], 0
push 0
lea ecx, [ebp - 0xc00]
call fcn.00432e3a
mov ecx, dword [ebp - 0xc80]
cmp ecx, dword [eax]
jne 0x46aca5
mov dword [ebp - 0x1c3c], 1
jmp 0x46acac
and dword [ebp - 0x1c3c], 0
mov eax, dword [ebp - 0x1c3c]
mov dword [ebp - 0xdc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc2c]
cmp dword [ebp - 0xdc], eax
jl 0x46acd8
mov dword [ebp - 0xc88], 1
jmp 0x46acdf
and dword [ebp - 0xc88], 0
cmp dword [ebp - 0xc88], 0x8112
jg 0x46acf7
mov dword [ebp - 0x1c44], 1
jmp 0x46acfe
and dword [ebp - 0x1c44], 0
mov eax, dword [ebp - 0x538]
add eax, dword [ebp - 0x1c44]
jne 0x46ad1e
cmp dword [ebp - 0xdc], 0
jne 0x46ad1e
and dword [ebp - 0xc90], 0
jmp 0x46ad28
mov dword [ebp - 0xc90], 1
push 0
lea ecx, [ebp - 0xc00]
call fcn.00432e3a
mov ecx, 0x62da
sub ecx, dword [ebp - 0xc90]
cmp dword [eax], ecx
jle 0x46ad4d
and dword [ebp - 0x1c4c], 0
jmp 0x46ad57
mov dword [ebp - 0x1c4c], 1
mov eax, dword [ebp - 0x1c4c]
mov dword [ebp - 0xc98], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc2c]
cmp dword [ebp - 0xc98], eax
jge 0x46ad83
mov dword [ebp - 0x1c54], 1
jmp 0x46ad8a
and dword [ebp - 0x1c54], 0
cmp dword [ebp - 0x1c54], 0xe4f9
jge 0x46ada2
mov dword [ebp - 0x246c], 1
jmp 0x46ada9
and dword [ebp - 0x246c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc2c]
mov dword [ebp - 0x3008], eax
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xc2c]
push 1
lea ecx, [ebp - 0x2684]
call fcn.00432e3a
mov dword [eax], esi
push 0
lea ecx, [ebp - 0xc00]
call fcn.00432e3a
mov eax, 0xd015
test eax, eax
je 0x46ae22
push 0
lea ecx, [ebp - 0xc00]
call fcn.00432e3a
mov esi, eax
push 1
lea ecx, [ebp - 0x2684]
call fcn.00432e3a
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x46ae1b
mov dword [ebp - 0xca0], 1
jmp 0x46ae22
and dword [ebp - 0xca0], 0
or eax, 0xffffffff
jne 0x46ae35
xor eax, eax
inc eax
jne 0x46ae35
and dword [ebp - 0x1c5c], 0
jmp 0x46ae3f
mov dword [ebp - 0x1c5c], 1
push 1
lea ecx, [ebp - 0x2684]
call fcn.00432e3a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1c5c]
jl 0x46ae62
mov dword [ebp - 0xca8], 1
jmp 0x46ae69
and dword [ebp - 0xca8], 0
mov eax, dword [ebp - 0xca8]
mov dword [ebp - 0xdc], eax
imul eax, dword [ebp - 0xdc], 0x254f
test eax, eax
je 0x46afc1
mov dword [ebp - 0xcb0], 0xaa435c52
mov dword [ebp - 0xcb8], 0
mov dword [ebp - 0x854], 0
jmp 0x46aeb4
mov eax, dword [ebp - 0x854]
inc eax
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 2
jge 0x46aed0
mov eax, dword [ebp - 0x854]
mov dword [ebp + eax*4 - 0x22a8], 8
jmp 0x46aea7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x22a8]
mov dword [ebp - 0x3330], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x22a8], 0x12535b5b
mov eax, dword [ebp - 0x2474]
mov dword [ebp - 0x3010], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc2c]
mov dword [ebp - 0x33c0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xcb8]
cmp dword [ebp + eax - 0x22a8], ecx
jg 0x46af33
mov dword [ebp - 0x1c64], 1
jmp 0x46af3a
and dword [ebp - 0x1c64], 0
mov eax, dword [ebp - 0x4c8]
cmp eax, dword [ebp - 0x1c64]
jne 0x46af54
mov dword [ebp - 0x1c6c], 1
jmp 0x46af5b
and dword [ebp - 0x1c6c], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xcb0], eax
mov eax, dword [ebp - 0xcb0]
cmp eax, dword [ebp - 0x1c6c]
jl 0x46af81
mov dword [ebp - 0x247c], 1
jmp 0x46af88
and dword [ebp - 0x247c], 0
cmp dword [ebp - 0xcb8], 0x2fce4a83
jl 0x46afa0
mov dword [ebp - 0x1c74], 1
jmp 0x46afa7
and dword [ebp - 0x1c74], 0
push 0
lea ecx, [ebp - 0xc00]
call fcn.00432e3a
mov ecx, dword [ebp - 0x1c74]
mov dword [eax], ecx
jmp 0x46b081
mov dword [ebp - 0x28f0], 0
mov dword [ebp - 0x28ec], 0
mov dword [ebp - 0x28e8], 0
mov dword [ebp - 0x28e4], 0
mov dword [ebp - 0x538], 0xfffffff9
jmp 0x46b002
mov eax, dword [ebp - 0x538]
inc eax
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x538], 4
jne 0x46b066
mov dword [ebp - 0xdc], 0
jmp 0x46b024
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xc
jl 0x46b064
mov dword [ebp - 0x4c8], 3
jmp 0x46b046
mov eax, dword [ebp - 0x4c8]
dec eax
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 0xffffffe2
jl 0x46b062
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc2c], 0
je 0x46b060
jmp 0x46b062
jmp 0x46b039
jmp 0x46b017
jmp 0x46aff5
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x28f0]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x28f0], eax
lea ecx, [ebp - 0x2684]
call fcn.00432e1e
lea ecx, [ebp - 0xc00]
call fcn.00432e1e
mov dword [ebp - 0x4d0], 0xfffffff9
mov dword [ebp - 0x2a4], 0xac204e2d
mov dword [ebp - 0x24a4], 0xea122098
mov dword [ebp - 0x3018], 0xb8ee41b
mov dword [ebp - 0x2494], 7
mov dword [ebp - 0x3340], 0x38884515
mov dword [ebp - 0xa80], 0x34111d01
mov dword [ebp - 0x3020], 0xf703c576
push 3
lea ecx, [ebp - 0x2a28]
call fcn.00432d4c
mov dword [ebp - 0x5dc], 0
jmp 0x46b10d
mov eax, dword [ebp - 0x5dc]
inc eax
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 3
jge 0x46b12f
push dword [ebp - 0x5dc]
lea ecx, [ebp - 0x2a28]
call fcn.00432e3a
mov dword [eax], 0x6b719d87
jmp 0x46b100
mov dword [ebp - 0x2a4], 0xffffffe3
jmp 0x46b148
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0xe
jle 0x46b1f1
mov dword [ebp - 0x33c8], 0
mov dword [ebp - 0x3028], 0x7f0a290b
mov dword [ebp - 0x248c], 0xb143e95a
mov dword [ebp - 0x3350], 0xe9bf9f36
mov dword [ebp - 0x3030], 1
mov dword [ebp - 0x33d0], 0xe974a520
mov dword [ebp - 0xb4c], 1
mov eax, dword [ebp - 0xa80]
inc eax
mov dword [ebp - 0xa80], eax
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0x2484], eax
mov eax, dword [ebp - 0xb4c]
dec eax
mov dword [ebp - 0xb4c], eax
cmp dword [ebp - 0x2484], 0x9986
jge 0x46b1d9
mov dword [ebp - 0xcc0], 1
jmp 0x46b1e0
and dword [ebp - 0xcc0], 0
mov eax, dword [ebp - 0xcc0]
mov dword [ebp - 0x248c], eax
jmp 0x46b13b
mov dword [ebp - 0x2a4], 0
jmp 0x46b20a
mov eax, dword [ebp - 0x2a4]
dec eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0xfffffff9
jg 0x46b2b3
mov dword [ebp - 0x968], 0x3f36a5b5
mov dword [ebp - 0x249c], 0xaec51ac
mov dword [ebp - 0x24ac], 0x8c6dcff2
mov eax, dword [ebp - 0x968]
cmp dword [ebp - 0x2494], eax
jl 0x46b27d
mov eax, dword [ebp - 0x249c]
mov dword [ebp - 0x3038], eax
mov eax, dword [ebp - 0x968]
mov dword [ebp - 0x3360], eax
mov eax, dword [ebp - 0x968]
mov dword [ebp - 0x2cac], eax
mov eax, dword [ebp - 0xa80]
mov ecx, dword [ebp - 0x24a4]
sub ecx, 0x49636c1d
add eax, ecx
jne 0x46b298
push 2
lea ecx, [ebp - 0x2a28]
call fcn.00432e3a
cmp dword [eax], 0
jne 0x46b298
and dword [ebp - 0x1c7c], 0
jmp 0x46b2a2
mov dword [ebp - 0x1c7c], 1
mov eax, dword [ebp - 0x1c7c]
mov dword [ebp - 0x24ac], eax
jmp 0x46b1fd
lea ecx, [ebp - 0x2a28]
call fcn.00432e1e
mov dword [ebp - 0x24c4], 0xffffffff
mov dword [ebp - 0x570], 0
mov dword [ebp - 0x2cb4], 0
mov dword [ebp - 0x24b4], 0xffffffff
mov dword [ebp - 0xcc8], 0x9a1
mov dword [ebp - 0x124], 0
jmp 0x46b309
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x46b325
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x3690], 0xe2799ac7
jmp 0x46b2fc
mov dword [ebp - 0x124], 0
jmp 0x46b33e
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 1
jge 0x46b35a
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x2cbc], 0x74b6046e
jmp 0x46b331
mov dword [ebp - 0x570], 1
jmp 0x46b373
mov eax, dword [ebp - 0x570]
dec eax
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 0
jl 0x46b486
mov dword [ebp - 0x76c], 0x2edc7555
mov byte [ebp - 0x2ce], 0
movzx eax, byte [ebp - 0x2ce]
test eax, eax
je 0x46b3a7
push 0x14f9
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov dword [ebp - 0x76c], 1
jmp 0x46b3c0
mov eax, dword [ebp - 0x76c]
dec eax
mov dword [ebp - 0x76c], eax
cmp dword [ebp - 0x76c], 0
jl 0x46b481
mov dword [ebp - 0x2cc4], 0
mov dword [ebp - 0x2ccc], 0
push 2
lea ecx, [ebp - 0x2a40]
call fcn.00432d4c
mov dword [ebp - 0x218], 0
jmp 0x46b407
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x46b423
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x3818], 0x2ddb74a7
jmp 0x46b3fa
mov dword [ebp - 0x218], 0
jmp 0x46b43c
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jge 0x46b45e
push dword [ebp - 0x218]
lea ecx, [ebp - 0x2a40]
call fcn.00432e3a
mov dword [eax], 0x657cf7a0
jmp 0x46b42f
push 1
lea ecx, [ebp - 0x2a40]
call fcn.00432e3a
mov dword [eax], 1
lea ecx, [ebp - 0x2a40]
call fcn.00432e1e
jmp 0x46b3b3
jmp 0x46b366
cmp dword [ebp - 0xcc8], 0
jne 0x46b49d
or eax, 0xffffffff
jne 0x46b49d
and dword [ebp - 0x1c84], 0
jmp 0x46b4a7
mov dword [ebp - 0x1c84], 1
mov eax, dword [ebp - 0x570]
cmp dword [ebp - 0xcc8], eax
jl 0x46b4c1
mov dword [ebp - 0xcd0], 1
jmp 0x46b4c8
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0x1c84]
cmp eax, dword [ebp - 0xcd0]
jge 0x46b4e2
mov dword [ebp - 0x1c8c], 1
jmp 0x46b4e9
and dword [ebp - 0x1c8c], 0
cmp dword [ebp - 0x1c8c], 0xffffffff
jb 0x46b4fe
mov dword [ebp - 0xcd8], 1
jmp 0x46b505
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0xcd8]
mov dword [ebp - 0x24b4], eax
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0xcc]
jl 0x46b538
cmp dword [ebp - 0xcc], 0
jne 0x46b538
and dword [ebp - 0x1c94], 0
jmp 0x46b542
mov dword [ebp - 0x1c94], 1
mov eax, dword [ebp - 0x1c94]
dec eax
jne 0x46b55b
push 9
pop eax
test eax, eax
jne 0x46b55b
and dword [ebp - 0xce0], 0
jmp 0x46b565
mov dword [ebp - 0xce0], 1
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xce0], eax
jg 0x46b57f
mov dword [ebp - 0x1c9c], 1
jmp 0x46b586
and dword [ebp - 0x1c9c], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x1c9c], eax
jl 0x46b5a0
mov dword [ebp - 0xce8], 1
jmp 0x46b5a7
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0xce8]
sub eax, dword [ebp - 0xcc]
je 0x46b5ca
cmp dword [ebp - 0xcc], 0
je 0x46b5ca
mov dword [ebp - 0x24bc], 1
jmp 0x46b5d1
and dword [ebp - 0x24bc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2cd4], eax
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0xcc]
mov dword [ebp - 0x1ca4], eax
mov eax, dword [ebp - 0x1ca4]
imul eax, dword [ebp - 0x4d0]
cmp eax, 0xb7b8
jg 0x46b610
mov dword [ebp - 0xcf0], 1
jmp 0x46b617
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0x4d0]
cmp dword [ebp - 0xcf0], eax
jle 0x46b631
mov dword [ebp - 0x1cac], 1
jmp 0x46b638
and dword [ebp - 0x1cac], 0
cmp dword [ebp - 0x1cac], 0x8e1b8814
jae 0x46b650
mov dword [ebp - 0xcf8], 1
jmp 0x46b657
and dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0xcf8]
sub eax, 0xf5ec
cmp eax, dword [ebp - 0x4d0]
jl 0x46b676
mov dword [ebp - 0x1cb4], 1
jmp 0x46b67d
and dword [ebp - 0x1cb4], 0
mov eax, dword [ebp - 0x1cb4]
sub eax, dword [ebp - 0x4d0]
add eax, dword [ebp - 0x4d0]
cmp eax, 0xcfb6
jle 0x46b6a2
mov dword [ebp - 0xd00], 1
jmp 0x46b6a9
and dword [ebp - 0xd00], 0
cmp dword [ebp - 0xd00], 0xcd8c45cd
jae 0x46b6c1
mov dword [ebp - 0x1cbc], 1
jmp 0x46b6c8
and dword [ebp - 0x1cbc], 0
mov eax, dword [ebp - 0x1cbc]
mov dword [ebp - 0x24c4], eax
mov dword [ebp - 0x5e4], 0
jmp 0x46b6ed
mov eax, dword [ebp - 0x5e4]
inc eax
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 3
jge 0x46b709
mov eax, dword [ebp - 0x5e4]
mov dword [ebp + eax*4 - 0x377c], 0xa6847dfa
jmp 0x46b6e0
mov byte [ebp - 0x311], 0
movzx eax, byte [ebp - 0x311]
test eax, eax
je 0x46b731
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov byte [ebp - 0x2d0], 0
movzx eax, byte [ebp - 0x2d0]
test eax, eax
je 0x46b750
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
push 2
lea ecx, [ebp - 0x4a4]
call fcn.00432d4c
mov dword [ebp - 0x8c8], 0xfffffffc
mov dword [ebp - 0xd20], 0xe60a2fc5
mov dword [ebp - 0x970], 0xaa7054f8
push 3
lea ecx, [ebp - 0x2a58]
call fcn.00432d4c
mov dword [ebp - 0x24cc], 0xb3b3333d
mov dword [ebp - 0x12c], 0
jmp 0x46b7ab
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x46b7cd
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov dword [eax], 0xab659d56
jmp 0x46b79e
mov dword [ebp - 0x12c], 0
jmp 0x46b7e6
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jge 0x46b808
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x2a58]
call fcn.00432e3a
mov dword [eax], 0xfffffffa
jmp 0x46b7d9
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
cmp dword [eax], 0
je 0x46b993
push 1
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov esi, eax
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov ecx, dword [esi]
add ecx, dword [eax]
je 0x46b85e
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
cmp dword [eax], 0
je 0x46b85e
mov dword [ebp - 0xd08], 1
jmp 0x46b865
and dword [ebp - 0xd08], 0
mov eax, dword [ebp - 0xd08]
mov dword [ebp - 0x8c8], eax
cmp dword [ebp - 0x8c8], 0
je 0x46b887
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
push 1
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov esi, eax
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x46b8b7
or eax, 0xffffffff
jne 0x46b8b7
and dword [ebp - 0x1cc4], 0
jmp 0x46b8c1
mov dword [ebp - 0x1cc4], 1
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1cc4]
jge 0x46b8e4
mov dword [ebp - 0xd10], 1
jmp 0x46b8eb
and dword [ebp - 0xd10], 0
push 1
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov ecx, dword [ebp - 0xd10]
cmp ecx, dword [eax]
jle 0x46b90e
mov dword [ebp - 0x1ccc], 1
jmp 0x46b915
and dword [ebp - 0x1ccc], 0
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov ecx, dword [ebp - 0x1ccc]
cmp ecx, dword [eax]
jg 0x46b938
mov dword [ebp - 0xd18], 1
jmp 0x46b93f
and dword [ebp - 0xd18], 0
push 1
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov ecx, dword [ebp - 0xd18]
cmp ecx, dword [eax]
jg 0x46b963
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov esi, dword [ebp - 0x8c8]
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
cmp esi, dword [eax]
jg 0x46b993
mov dword [ebp - 0x1cd4], 1
jmp 0x46b99a
and dword [ebp - 0x1cd4], 0
mov eax, dword [ebp - 0x1cd4]
mov dword [ebp - 0xd20], eax
cmp dword [ebp - 0xd20], 0xffffffff
jle 0x46b9bb
mov dword [ebp - 0x1cdc], 1
jmp 0x46b9c2
and dword [ebp - 0x1cdc], 0
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov ecx, dword [ebp - 0x1cdc]
add ecx, dword [eax]
cmp ecx, 0x7563ffa
jne 0x46b9eb
mov dword [ebp - 0xd28], 1
jmp 0x46b9f2
and dword [ebp - 0xd28], 0
mov eax, dword [ebp - 0x970]
add eax, dword [ebp - 0xd28]
cmp eax, dword [ebp - 0x970]
jge 0x46ba12
mov dword [ebp - 0x1ce4], 1
jmp 0x46ba19
and dword [ebp - 0x1ce4], 0
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov ecx, dword [ebp - 0x1ce4]
sub ecx, dword [eax]
cmp ecx, 0xee3
jne 0x46ba4b
cmp dword [ebp - 0x970], 0
je 0x46ba4b
mov dword [ebp - 0xd30], 1
jmp 0x46ba52
and dword [ebp - 0xd30], 0
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
imul ecx, dword [ebp - 0xd30], 0xc414
mov eax, dword [eax]
sub eax, ecx
cmp eax, 0xffffffff
jne 0x46ba84
push 0
lea ecx, [ebp - 0x2a58]
call fcn.00432e3a
cmp dword [eax], 0
je 0x46ba99
cmp dword [ebp - 0x8c8], 0
je 0x46ba99
mov dword [ebp - 0x1cec], 1
jmp 0x46baa0
and dword [ebp - 0x1cec], 0
push 0
lea ecx, [ebp - 0x4a4]
call fcn.00432e3a
mov ecx, dword [ebp - 0x1cec]
cmp ecx, dword [eax]
jge 0x46bac3
mov dword [ebp - 0xd38], 1
jmp 0x46baca
and dword [ebp - 0xd38], 0
mov eax, dword [ebp - 0xd38]
mov dword [ebp - 0x24cc], eax
lea ecx, [ebp - 0x2a58]
call fcn.00432e1e
lea ecx, [ebp - 0x4a4]
call fcn.00432e1e
mov byte [ebp - 0x371], 0
mov dword [ebp - 0x134], 0x73838a1f
mov dword [ebp - 0x24dc], 0
mov dword [ebp - 0x2cdc], 0xd19
push 4
lea ecx, [ebp - 0x317c]
call fcn.00432d4c
mov dword [ebp - 0x1f0], 0
jmp 0x46bb37
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x46bb53
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x35b0], 0xffffffff
jmp 0x46bb2a
mov dword [ebp - 0x1f0], 0
jmp 0x46bb6c
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 4
jge 0x46bb8e
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0x317c]
call fcn.00432e3a
mov dword [eax], 0xa927213e
jmp 0x46bb5f
mov dword [ebp - 0x134], 0
jmp 0x46bba7
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jg 0x46bbcf
mov dword [ebp - 0x24d4], 0xfe04822b
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp + eax*4 - 0x35b0]
mov dword [ebp - 0x24d4], eax
jmp 0x46bb9a
mov dword [ebp - 0x134], 0
jmp 0x46bbe8
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jg 0x46bc9d
mov dword [ebp - 0x2ce4], 0xfc39
mov dword [ebp - 0x2cec], 1
mov dword [ebp - 0x108], 0
jmp 0x46bc22
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x46bc3e
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x3740], 0xfecf7921
jmp 0x46bc15
mov dword [ebp - 0x108], 0
jmp 0x46bc57
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x46bc73
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x1cf4], 0xffff
jmp 0x46bc4a
mov dword [ebp - 0x24dc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cf4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1cf4], eax
jmp 0x46bbdb
lea ecx, [ebp - 0x317c]
call fcn.00432e1e
movzx eax, byte [ebp - 0x371]
test eax, eax
je 0x46c058
mov dword [ebp - 0x774], 0xb110c93b
push 1
lea ecx, [ebp - 0x20f0]
call fcn.00432d4c
mov dword [ebp - 0x24e4], 0
mov dword [ebp - 0x5ec], 0
jmp 0x46bcf1
mov eax, dword [ebp - 0x5ec]
inc eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 1
jge 0x46bd13
push dword [ebp - 0x5ec]
lea ecx, [ebp - 0x20f0]
call fcn.00432e3a
mov dword [eax], 1
jmp 0x46bce4
mov dword [ebp - 0x774], 8
jmp 0x46bd2c
mov eax, dword [ebp - 0x774]
dec eax
mov dword [ebp - 0x774], eax
cmp dword [ebp - 0x774], 0xffffffeb
jne 0x46c040
mov dword [ebp - 0x5f4], 0xc07e17f7
mov dword [ebp - 0x1d04], 0xfffffffe
mov dword [ebp - 0x5f4], 0
jmp 0x46bd66
cmp dword [ebp - 0x5f4], 0
jl 0x46c03b
mov dword [ebp - 0x840], 0
jmp 0x46bd8c
cmp dword [ebp - 0x840], 3
jge 0x46bda8
mov eax, dword [ebp - 0x840]
mov dword [ebp + eax*4 - 0xb70], 0xfffffff8
jmp 0x46bd7f
mov byte [ebp - 0x2d2], 0
movzx eax, byte [ebp - 0x2d2]
test eax, eax
je 0x46bdc4
jmp 0x46bd1f
lea ecx, [ebp - 0x20f0]
call fcn.00432e1e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
mov dword [ebp - 0xa0], 0xd4e06482
mov dword [ebp - 0x1d34], 0xfffffffa
push 1
lea ecx, [ebp - 0x1ee4]
call fcn.00432d4c
mov dword [ebp - 0x24fc], 0x5015
mov dword [ebp - 0x230], 0
jmp 0x46c09c
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jge 0x46c0be
push dword [ebp - 0x230]
lea ecx, [ebp - 0x1ee4]
call fcn.00432e3a
mov dword [eax], 0x703acb6d
jmp 0x46c08f
mov dword [ebp - 0x230], 0
jmp 0x46c0d7
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x46c0f3
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x3670], 8
jmp 0x46c0ca
mov dword [ebp - 0xa0], 0
jmp 0x46c10c
cmp dword [ebp - 0xa0], 0xf
jg 0x46c3bb
mov dword [ebp - 0x80], 0
jmp 0x46c129
cmp dword [ebp - 0x80], 4
jge 0x46c13f
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x28d0], 0xfff8
jmp 0x46c122
mov dword [ebp - 0x80], 0
jmp 0x46c14f
mov dword [ebp - 0xa0], 8
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xd80], eax
push 0
lea ecx, [ebp - 0x1ee4]
call fcn.00432e3a
mov ecx, dword [ebp - 0xd80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1d34]
sub eax, dword [ebp - 0xd80]
jne 0x46c533
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], eax
je 0x46c412
mov dword [ebp - 0x1d3c], 1
jmp 0x46c419
and dword [ebp - 0x1d3c], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x1d3c], eax
jne 0x46c433
mov dword [ebp - 0x1d54], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d54]
mov dword [ebp + eax - 0x3670], ecx
lea ecx, [ebp - 0x1ee4]
call fcn.00432e1e
cmp dword [ebp + 8], 2
jl 0x479cb5
mov dword [ebp - 0x1d64], 0x555b7cef
mov dword [ebp - 0x2cfc], 0xfffffffe
mov dword [ebp - 0x5fc], 4
mov dword [ebp - 0x2d04], 1
mov dword [ebp - 0x2504], 0x76881957
mov dword [ebp - 0x2d0c], 0xf0b101aa
push 4
lea ecx, [ebp - 0x318c]
call fcn.00432d4c
mov dword [ebp - 0x2d14], 0x9c710427
mov dword [ebp - 0x2d1c], 0x11904e20
mov dword [ebp - 0xa8c], 0xb66c
push 4
lea ecx, [ebp - 0x2b3c]
call fcn.00432d4c
mov dword [ebp - 0x48], 0
jmp 0x46c5e9
cmp dword [ebp + 8], 1
jne 0x4810d5