Function at 0x47ca61
Capabilities:
Check for unmoving mouse cursor

Disassembly:
push ebp
lea ebp, [esp - 0xab0]
sub esp, 0xbd8
mov eax, dword [0x4b6084]
xor eax, ebp
mov dword [ebp + 0xaac], eax
push esi
push edi
and dword [ebp + 0x5c], 0
movzx eax, word [0x4b7e08]
sub eax, dword [0x4b71d0]
mov ecx, dword [0x4b71d8]
imul ecx, dword [0x4b75fc]
sub eax, ecx
mov dword [0x4b7cc4], eax
and dword [ebp - 0x40], 0
mov dword [ebp + 0x44], 5
mov eax, dword [ebp + 0x5c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0xab8]
mov dword [ebp + 0x4c], eax
and dword [ebp - 0x1c], 0
mov dword [ebp - 0x10], 0xa
and dword [ebp - 0x18], 0
and dword [ebp + 0x40], 0
mov dword [ebp - 0x14], 1
mov eax, dword [0x4b71cc]
mov dword [ebp + 0x64], eax
mov eax, dword [0x4b74f0]
mov dword [ebp - 0x50], eax
mov eax, dword [0x4b6074]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp + 0xc], eax
mov eax, dword [0x4b74f0]
mov dword [ebp - 0xc], eax
mov ax, word [0x4b74f0]
mov word [ebp + 0x190], ax
push 0x206
push 0
lea eax, [ebp + 0x192]
push eax
call fcn.00483bf0
add esp, 0xc
and dword [ebp - 0x38], 0
mov eax, dword [0x4b74f0]
mov dword [ebp + 0x74], eax
lea eax, [ebp + 0xb0]
push eax
push dword [ebp + 0x64]
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp + 0x4c]
add eax, dword [ebp - 0x34]
sub eax, dword [0x4b7bbc]
mov ecx, dword [0x4b74f0]
inc ecx
xor edx, edx
div ecx
mov dword [0x4b72e4], eax
push dword [ebp + 0xc]
push dword [ebp - 0x38]
call sub.POWRPROF.dll_EnumPwrSchemes
mov byte [ebp + 0x83], al
push 0xffff
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
push dword [ebp - 0xc]
push dword [ebp - 0x3c]
call dword [sym.imp.GDI32.dll_FillRgn]
lea eax, [ebp + 0xb0]
push eax
push dword [ebp + 0x64]
call dword [sym.imp.USER32.dll_EndPaint]
mov eax, dword [0x4b71cc]
lea eax, [eax*4 + 0x14]
mov ecx, dword [0x4b74f0]
inc ecx
imul eax, ecx
dec eax
push 0x14
pop ecx
sub ecx, dword [0x4b74f0]
imul eax, ecx
mov ecx, dword [0x4b71cc]
lea eax, [eax + ecx + 0x1b5]
sub eax, dword [0x4b77b4]
imul ecx, dword [ebp + 0x44], 0x1c
add ecx, dword [0x4b7bbc]
add ecx, eax
mov dword [0x4b7bbc], ecx
mov eax, dword [0x4b74f0]
shl eax, 2
imul eax, dword [0x4b72e4]
add eax, dword [0x4b6074]
add eax, dword [ebp + 0x44]
mov dword [ebp + 0x44], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp + 0x48], eax
jmp 0x47cc06
mov eax, dword [ebp + 0x48]
inc eax
mov dword [ebp + 0x48], eax
cmp dword [ebp + 0x48], 0xc
jge 0x47ccca
push 0x19
pop eax
sub eax, dword [ebp + 0x48]
cmp dword [ebp - 0x10], eax
jbe 0x47cc74
cmp dword [0x4b7cc4], 0
je 0x47cc37
mov eax, dword [0x4b6074]
add eax, dword [ebp + 0x5c]
sub eax, dword [0x4b72e4]
mov dword [0x4b72e4], eax
mov eax, dword [0x4b71cc]
mov ecx, dword [0x4b74f0]
lea eax, [ecx + eax + 4]
mov ecx, dword [0x4b7cc4]
sub ecx, eax
add ecx, dword [0x4b7cc4]
mov dword [0x4b7cc4], ecx
mov eax, dword [0x4b7bbc]
imul eax, dword [0x4b6074]
mov ecx, dword [0x4b74f0]
inc ecx
sub eax, ecx
mov dword [ebp + 0x44], eax
jmp 0x47ccc5
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x14]
je 0x47ccc5
mov eax, dword [0x4b72e4]
sub eax, dword [0x4b6074]
add eax, dword [0x4b75fc]
mov ecx, dword [ebp + 0x4c]
lea eax, [eax + ecx*2 + 0xc8]
mov dword [0x4b7bbc], eax
mov eax, dword [0x4b75fc]
imul eax, dword [ebp + 0x4c]
movzx ecx, byte [ebp + 0x83]
imul eax, ecx
imul eax, dword [ebp - 0x18]
mov dword [0x4b7e10], eax
mov eax, dword [0x4b72e4]
add eax, dword [ebp - 0x14]
mov dword [0x4b6074], eax
jmp 0x47cbff
push 0x4b7e34
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp + 0x84]
push eax
push 0x18
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [0x4b71cc]
mov ecx, dword [0x4b74f0]
lea eax, [ecx + eax + 2]
imul eax, dword [ebp - 0x10]
shl eax, 5
imul eax, dword [ebp + 0x40]
mov dword [ebp + 0x40], eax
push 8
push dword [0x4b7e0c]
push dword [0x4b74f0]
push 0
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_CopyImage]
mov dword [ebp + 0x74], eax
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [0x4b7e08]
add eax, dword [ebp - 0x40]
cmp dword [ebp + 0x74], eax
jb 0x47cd9d
mov eax, dword [0x4b7bbc]
imul eax, dword [0x4b72e4]
mov ecx, dword [0x4b74f0]
inc ecx
sub eax, ecx
mov dword [ebp + 0x4c], eax
mov eax, dword [0x4b6074]
add eax, dword [0x4b77b4]
imul eax, dword [0x4b7cc4]
add eax, dword [0x4b74f0]
add eax, dword [0x4b72e4]
mov dword [0x4b72e4], eax
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [0x4b7e30], eax
mov eax, dword [ebp - 0xc]
imul eax, dword [0x4b7bbc]
imul eax, dword [ebp + 0x40]
mov ecx, dword [ebp + 0x74]
imul ecx, dword [ebp - 0x1c]
add eax, ecx
mov dword [0x4b71cc], eax
jmp 0x47ced8
mov eax, dword [0x4b7e10]
mov dword [ebp + 0x7c], eax
mov eax, dword [0x4b74f0]
mov dword [ebp - 0x44], eax
mov eax, dword [0x4b6074]
mov dword [ebp + 0x68], eax
mov eax, dword [0x4b72e4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp + 0x6c], eax
cmp dword [ebp + 0x6c], 0x10
je 0x47cead
cmp dword [ebp + 0x6c], 0x82
je 0x47ceca
cmp dword [ebp + 0x6c], 0x110
je 0x47cdf1
cmp dword [ebp + 0x6c], 0x111
je 0x47ce16
jmp 0x47ced8
mov eax, dword [ebp - 0x24]
mov dword [ebp + 0x10], eax
push dword [ebp + 0x10]
push 0x4b7610
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_SetPropA]
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x47ced8
mov eax, dword [ebp + 0x68]
and eax, 0xffff
movzx eax, ax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
je 0x47ce7d
cmp dword [ebp - 0x20], 6
je 0x47ce32
jmp 0x47ceab
mov eax, dword [ebp + 0x68]
shr eax, 0x10
and eax, 0xffff
movzx eax, ax
cmp eax, 0x400
jne 0x47ce7b
push dword [ebp - 0x24]
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x47ce62
mov dword [ebp - 0x28], 1
jmp 0x47ce66
and dword [ebp - 0x28], 0
push dword [ebp - 0x28]
push 1
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x47ceab
push 0x4b7610
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_GetPropA]
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x68]
and eax, 0xffff
movzx eax, ax
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_EndDialog]
xor eax, eax
inc eax
jmp 0x47d871
jmp 0x47ced8
mov eax, dword [ebp + 0x68]
and eax, 0xffff
movzx eax, ax
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_EndDialog]
xor eax, eax
inc eax
jmp 0x47d871
push 0x4b7610
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_RemovePropA]
push dword [0x4b7e30]
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0
push 2
push 0xa1
push dword [ebp + 0x64]
call dword [sym.imp.USER32.dll_SendMessageA]
push dword [ebp + 0xc]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp + 0x64]
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov eax, dword [0x4b7604]
sub eax, dword [0x4b77fc]
sub eax, dword [0x4b6074]
mov ecx, dword [0x4b77f0]
sub ecx, eax
mov dword [0x4b77f0], ecx
and dword [ebp - 0x84], 0
mov dword [ebp + 0x70], 1
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0xab8]
mov dword [ebp - 0x54], eax
and dword [ebp + 0x2c], 0
mov dword [ebp - 0x68], 1
and dword [ebp + 0x60], 0
mov dword [ebp + 4], 2
mov dword [ebp], 2
mov dword [ebp - 4], 2
and dword [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0xa
push 0x100
push 0
lea eax, [ebp + 0x8a8]
push eax
call fcn.00483bf0
add esp, 0xc
xor eax, eax
lea edi, [ebp + 0x110]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp + 0xf0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp + 0x120]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x208
push 0
lea eax, [ebp + 0x6a0]
push eax
call fcn.00483bf0
add esp, 0xc
movzx eax, byte [0x4b7604]
mov ecx, dword [0x4b71d4]
sub ecx, eax
je 0x47cfe8
mov eax, dword [ebp + 0x70]
sub eax, dword [0x4b7e0c]
mov dword [ebp + 0x70], eax
jmp 0x47cff8
mov eax, dword [0x4b71d8]
add eax, dword [0x4b71d4]
mov dword [0x4b71d0], eax
and dword [ebp + 0x24], 0
jmp 0x47d005
mov eax, dword [ebp + 0x24]
inc eax
mov dword [ebp + 0x24], eax
mov eax, dword [0x4b7e08]
add eax, 8
imul eax, dword [0x4b71d4]
cmp dword [ebp + 0x24], eax
jge 0x47d2dd
cmp dword [0x4b6074], 0
je 0x47d055
movzx ecx, word [0x4b7bbc]
mov esi, dword [0x4b7e0c]
add esi, 0x5b
mov eax, dword [0x4b72e4]
cdq
idiv esi
imul eax, dword [0x4b71d0]
sub ecx, eax
mov eax, dword [0x4b71d0]
sub eax, ecx
mov dword [0x4b71d0], eax
jmp 0x47d06d
mov eax, dword [ebp + 0x70]
sub eax, dword [0x4b7e10]
mov ecx, dword [ebp + 8]
imul ecx, dword [0x4b72e4]
add eax, ecx
mov dword [ebp + 0x70], eax
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_GetMailslotInfo]
mov dword [ebp], eax
mov eax, dword [0x4b71cc]
cdq
push 0x24
pop ecx
idiv ecx
mov ecx, eax
movzx eax, word [ebp + 0x2c]
mov esi, dword [0x4b71d4]
add esi, 0x32
cdq
idiv esi
sub ecx, eax
movzx eax, word [0x4b71d8]
add ecx, eax
mov dword [ebp + 8], ecx
push 0
push 0
push 0
push 0
call sub.urlmon.dll_FaultInIEFeature
imul eax, dword [ebp + 0x2c]
mov dword [ebp - 4], eax
mov eax, dword [0x4b75dc]
xor edx, edx
push 5
pop ecx
div ecx
add eax, dword [0x4b7e10]
sub eax, dword [ebp - 0x54]
mov dword [ebp + 0x70], eax
mov eax, dword [0x4b71d4]
cdq
mov ecx, 0x76c
idiv ecx
dec eax
mov dword [ebp + 4], eax
movzx eax, word [0x4b6074]
imul eax, dword [0x4b71d0]
imul eax, dword [0x4b7bbc]
movzx ecx, word [0x4b7e0c]
imul eax, ecx
add eax, dword [0x4b7cc4]
mov dword [0x4b7cc4], eax
mov eax, dword [0x4b71cc]
cmp eax, dword [ebp + 4]
jne 0x47d13c
mov eax, dword [ebp]
cmp eax, dword [0x4b7e08]
jne 0x47d13c
mov eax, dword [ebp - 4]
cmp eax, dword [0x4b7e10]
jne 0x47d13c
mov eax, dword [0x4b7e14]
mov dword [ebp + 0x60], eax
jmp 0x47d140
and dword [ebp + 0x60], 0
cmp dword [0x4b74f0], 0
je 0x47d194
cmp dword [0x4b71cc], 0
je 0x47d194
and dword [ebp - 0x58], 0
xor eax, eax
inc eax
imul eax, eax, 0
movsx eax, byte [ebp + eax + 0x9a8]
test eax, eax
je 0x47d17b
xor eax, eax
inc eax
imul eax, eax, 0
movsx eax, byte [ebp + eax + 0x9a8]
cmp eax, 9
jne 0x47d182
and dword [0x4b7bbc], 0
push 9
lea eax, [ebp + 0x9a8]
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrA]
mov dword [ebp - 0x58], eax
cmp dword [ebp + 0x60], 0
jne 0x47d207
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0xb4]
rep stosd dword es:[edi], eax
push 0x24
push 0
lea eax, [ebp - 0xb4]
push eax
call fcn.00483bf0
add esp, 0xc
mov dword [ebp - 0xb4], 0x24
lea eax, [ebp + 0x150]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x4b71cc]
add eax, dword [0x4b71d4]
mov dword [ebp - 0xb0], eax
mov eax, dword [0x4b71cc]
add eax, dword [0x4b71d4]
mov dword [ebp - 0xac], eax
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.COMDLG32.dll_ChooseColorA]
mov dword [ebp - 0x78], eax
jmp 0x47d2d8
mov eax, dword [0x4b7e10]
add eax, 3
mov dword [ebp + 0x28], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp + 0x28]
dec eax
mov dword [ebp + 0x28], eax
cmp dword [ebp - 0x5c], 0
je 0x47d275
movzx eax, word [ebp + 0x128]
add eax, dword [ebp + 0x114]
movzx ecx, byte [0x4b7bbc]
add eax, ecx
mov dword [0x4b6074], eax
mov dword [ebp - 0x64], 0x4b74f8
mov eax, dword [0x4b74f0]
add eax, 4
mov dword [ebp - 0x60], eax
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push dword [ebp + 0xab8]
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameA]
test eax, eax
jne 0x47d273
mov eax, dword [0x4b6074]
inc eax
mov dword [0x4b6074], eax
jmp 0x47d212
lea eax, [ebp + 0x6a0]
movzx eax, al
cdq
push 5
pop ecx
idiv ecx
movzx ecx, word [0x4b77b4]
imul ecx, dword [0x4b7604]
add eax, ecx
mov dword [ebp - 0x68], eax
and dword [ebp + 0x60], 0
mov eax, dword [0x4b7cc4]
mov dword [ebp - 0x6c], eax
push 0
push 0x10
push 0x10
push 1
movzx eax, word [ebp - 0x6c]
push eax
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_LoadImageA]
mov dword [ebp - 0x70], eax
push dword [ebp - 0x70]
push 1
push 0xf7
push dword [0x4b71cc]
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x47cffe
mov eax, dword [0x4b71d8]
imul eax, dword [0x4b7e08]
imul eax, dword [0x4b71d0]
imul ecx, dword [ebp + 0x2c], 0x1b
lea eax, [eax + ecx + 2]
mov dword [0x4b75fc], eax
lea eax, [ebp + 0x8a8]
cdq
push 0x1e
pop ecx
idiv ecx
sub eax, dword [ebp + 0x118]
je 0x47d321
mov eax, dword [ebp + 0x70]
add eax, dword [0x4b71d8]
mov dword [0x4b7cc4], eax
jmp 0x47d333
mov eax, dword [ebp + 0x120]
add eax, dword [0x4b7e0c]
mov dword [ebp + 0x120], eax
movzx ecx, word [0x4b7e10]
sub ecx, dword [0x4b77e0]
mov eax, dword [0x4b7604]
cdq
push 0x22
pop esi
idiv esi
sub ecx, eax
movzx eax, byte [0x4b77b4]
mov esi, dword [0x4b71cc]
add esi, 0x5d
cdq
idiv esi
imul eax, dword [0x4b77bc]
sub ecx, eax
add ecx, dword [0x4b77d4]
mov dword [0x4b7cc4], ecx
movzx eax, byte [0x4b77d0]
test eax, eax
je 0x47d38e
movzx eax, word [0x4b77f0]
mov dword [0x4b7bbc], eax
jmp 0x47d3b2
movzx eax, word [0x4b77f0]
mov ecx, dword [0x4b7e0c]
add ecx, 0x3f
cdq
idiv ecx
add eax, dword [0x4b74f0]
add eax, dword [0x4b77e4]
mov dword [0x4b77e8], eax
and dword [ebp + 0x50], 0
mov dword [ebp - 8], 1
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x78], eax
mov eax, dword [ebp + 0xab8]
mov dword [ebp - 0x74], eax
and dword [ebp + 0x30], 0
mov dword [ebp + 0x58], 1
mov dword [ebp - 0x7c], 1
and dword [ebp - 0x80], 0
push 0x100
push 0
lea eax, [ebp + 0x398]
push eax
call fcn.00483bf0
add esp, 0xc
xor eax, eax
lea edi, [ebp + 0x100]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp + 0x140]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebp + 0x130]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x208
push 0
lea eax, [ebp + 0x498]
push eax
call fcn.00483bf0
add esp, 0xc
mov dword [ebp + 0x38], 0xa
and dword [ebp + 0x54], 0
and dword [ebp + 0x34], 0
xor eax, eax
mov dword [ebp + 0x14], eax
mov dword [ebp + 0x18], eax
xor eax, eax
mov dword [ebp + 0x1c], eax
mov dword [ebp + 0x20], eax
lea eax, [ebp + 0x14]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateEventA]
mov dword [ebp - 0x30], eax
mov eax, dword [0x4b74f0]
sub eax, dword [ebp + 0x14c]
movzx ecx, word [ebp - 0x74]
sub ecx, dword [ebp + 0x138]
cmp eax, ecx
jl 0x47d4a1
mov eax, dword [0x4b75fc]
cdq
push 0xc
pop ecx
idiv ecx
add eax, dword [0x4b7e08]
add eax, dword [0x4b7bbc]
mov dword [0x4b7bbc], eax
movzx eax, byte [0x4b7e08]
cmp eax, dword [0x4b7bbc]
jg 0x47d4d1
mov eax, dword [0x4b7604]
cdq
push 0x21
pop ecx
idiv ecx
sub eax, dword [0x4b71d8]
mov ecx, dword [0x4b7cc4]
sub ecx, eax
mov dword [0x4b7cc4], ecx
jmp 0x47d4e8
mov eax, dword [0x4b7bbc]
sub eax, dword [ebp + 0x138]
sub eax, dword [0x4b7cc4]
mov dword [ebp + 0x140], eax
lea eax, [ebp + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
and dword [ebp - 0x2c], 0
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x2c]
call dword [sym.imp.ole32.dll_GetHGlobalFromStream]
mov eax, dword [ebp + 0x14]
cmp eax, dword [ebp + 0x1c]
jne 0x47d5a0
mov eax, dword [ebp + 0x18]
cmp eax, dword [ebp + 0x20]
jne 0x47d5a0
mov eax, dword [ebp + 0x30]
shr eax, 5
sub eax, dword [0x4b7e08]
sub eax, dword [0x4b6074]
lea ecx, [ebp + 0x498]
movzx ecx, cx
add eax, ecx
movzx ecx, byte [0x4b71cc]
add eax, ecx
movzx ecx, byte [0x4b7cc4]
sub eax, ecx
mov dword [0x4b7bbc], eax
movzx eax, word [0x4b7604]
movzx ecx, word [ebp + 0x78]
imul eax, ecx
mov ecx, dword [0x4b71d0]
sub ecx, eax
mov eax, dword [0x4b7e08]
imul eax, dword [0x4b6074]
imul eax, dword [ebp - 8]
sub ecx, eax
mov dword [ebp + 0x58], ecx
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0xd0]
rep stosd dword es:[edi], eax
push 0x1c
lea eax, [ebp - 0xd0]
push eax
push 1
call dword [sym.imp.USER32.dll_SendInput]
jmp 0x47d62f
mov eax, dword [ebp + 0x58]
cmp eax, dword [ebp + 0x30]
jae 0x47d5c3
mov eax, dword [0x4b71cc]
sub eax, dword [0x4b74f0]
add eax, dword [ebp + 0x58]
add eax, dword [0x4b7bbc]
mov dword [0x4b7cc4], eax
jmp 0x47d5e4
mov ecx, dword [0x4b71d4]
add ecx, 0x4f
mov eax, dword [0x4b6074]
cdq
idiv ecx
imul eax, dword [0x4b71d0]
imul eax, dword [ebp + 0x58]
mov dword [0x4b72e4], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp + 0x14], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp + 0x18], eax
push 0x58
push 0
lea eax, [ebp - 0x128]
push eax
call fcn.00483bf0
add esp, 0xc
mov eax, dword [ebp + 0x54]
inc eax
mov dword [ebp + 0x54], eax
cmp dword [0x4b7e08], 0
je 0x47d62f
cmp dword [0x4b71cc], 0
je 0x47d62f
cmp dword [ebp + 0x30], 0
je 0x47d62f
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameA]
cmp dword [ebp + 0x54], 0
je 0x47d65f
mov eax, dword [ebp + 0x10c]
sub eax, dword [0x4b7e10]
movzx ecx, byte [ebp + 0x148]
add ecx, dword [ebp + 0x144]
add ecx, eax
mov dword [ebp + 0x144], ecx
mov eax, dword [ebp + 0x34]
inc eax
mov dword [ebp + 0x34], eax
jmp 0x47d67c
mov eax, dword [ebp + 0x134]
sub eax, dword [0x4b77b4]
movzx ecx, word [ebp + 0x78]
sub eax, ecx
add eax, dword [0x4b6074]
mov dword [0x4b6074], eax
movzx eax, word [0x4b72e4]
imul eax, dword [0x4b77b4]
imul eax, dword [0x4b71d0]
mov ecx, dword [0x4b7bbc]
sub ecx, eax
cmp ecx, dword [ebp + 0x78]
je 0x47d6a6
mov eax, dword [0x4b7e08]
mov dword [ebp + 0x78], eax
cmp dword [ebp + 0x54], 1
jbe 0x47d6ae
jmp 0x47d722
mov ecx, dword [0x4b74f4]
imul ecx, dword [0x4b6074]
movzx eax, byte [0x4b7bbc]
cdq
push 0x2a
pop esi
idiv esi
sub eax, dword [0x4b7604]
cmp ecx, eax
jl 0x47d6f4
movzx eax, word [0x4b7bbc]
add eax, dword [0x4b71d4]
movzx ecx, byte [0x4b6074]
add ecx, dword [0x4b6074]
add ecx, eax
mov dword [0x4b6074], ecx
mov eax, dword [ebp - 8]
add eax, 3
cmp dword [ebp + 0x34], eax
jbe 0x47d701
jmp 0x47d722
mov eax, dword [0x4b7e08]
add eax, 0xbb6
push eax
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
mov eax, dword [ebp + 0x38]
dec eax
mov dword [ebp + 0x38], eax
jne 0x47d4a1
mov eax, dword [0x4b74f0]
add eax, 8
mov dword [ebp + 0x3c], eax
push 0x101
push 0
push 0
push dword [0x4b71cc]
call dword [sym.imp.USER32.dll_RedrawWindow]
cmp dword [ebp + 0x50], 0
je 0x47d757
movzx eax, byte [ebp + 0x50]
add eax, dword [0x4b7e08]
mov dword [ebp + 0x50], eax
jmp 0x47d77b
movzx ecx, word [ebp + 0x50]
add ecx, dword [0x4b6074]
mov eax, dword [ebp + 0x78]
xor edx, edx
push 0xe
pop esi
div esi
add ecx, dword [0x4b71d4]
add eax, ecx
mov ecx, dword [ebp + 0x78]
sub ecx, eax
mov dword [ebp + 0x78], ecx
mov eax, dword [ebp + 0x3c]
dec eax
mov dword [ebp + 0x3c], eax
jne 0x47d72d
mov eax, dword [0x4b6074]
sub eax, dword [0x4b77cc]
movzx ecx, byte [0x4b7e0c]
cmp eax, ecx
jge 0x47d7b5
movzx eax, word [0x4b71d4]
movzx ecx, byte [0x4b7604]
sub eax, ecx
add eax, dword [0x4b7bbc]
mov dword [0x4b7bbc], eax
mov ecx, dword [0x4b71d4]
add ecx, 0x58
mov eax, dword [0x4b7e10]
cdq
idiv ecx
imul eax, eax, 0x4b7800
movzx ecx, byte [0x4b7e0c]
imul ecx, dword [0x4b77ec]
cmp eax, ecx
jne 0x47d7fc
mov eax, 0x4b72e8
movzx eax, ax
sub eax, dword [0x4b77e0]
mov ecx, dword [0x4b77ec]
sub ecx, eax
mov dword [0x4b77ec], ecx
jmp 0x47d82a
mov eax, 0x4b7800
movzx eax, al
cdq
push 0x19
pop ecx
idiv ecx
sub eax, dword [0x4b75fc]
sub eax, dword [0x4b7e10]
movzx ecx, byte [0x4b7cc4]
sub eax, ecx
add eax, dword [0x4b77ec]
mov dword [0x4b77ec], eax
mov eax, dword [0x4b77ec]
cdq
push 0x18
pop ecx
idiv ecx
mov ecx, eax
add ecx, dword [0x4b7604]
add ecx, dword [0x4b71d4]
add ecx, dword [0x4b71cc]
mov esi, dword [0x4b7e08]
add esi, 0x3f
mov eax, dword [0x4b71d0]
xor edx, edx
div esi
sub ecx, eax
add ecx, dword [0x4b6074]
add ecx, dword [0x4b7604]
mov dword [0x4b7604], ecx
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp + 0xaac]
xor ecx, ebp
call fcn.00481163
add ebp, 0xab0
leave
ret